Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update actions/checkout digest to d23441a
• Update anthropics/claude-code-action digest to 44423bd
• Update github.com/tailscale/hujson digest to 78b5b16
• Update github/codeql-action digest to e4fba86
• Update golang.org/x/exp/jsonrpc2 digest to 764159d
• Update anthropics/claude-code-action action to v1.0.181
• Update module github.com/go-chi/chi/v5 to v5.3.1
• Update module github.com/go-logr/logr to v1.4.4
• Update module github.com/ory/x to v0.0.729
• Update module github.com/pressly/goose/v3 to v3.27.3
• Update module github.com/shirou/gopsutil/v4 to v4.26.6
• Update slackapi/slack-github-action action to v3.0.5
• Update aws-sdk-go-v2 monorepo (github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/service/sts)
• Update container build actions (docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action)
• Update dependency helm to v3.21.3
• Update dependency helm/helm to v3.21.3
• Update dependency kubernetes-sigs/kind to v0.32.0
• Update dockerfile template base images (ghcr.io/modelcontextprotocol/inspector, index.docker.io/library/alpine)
• Update ghcr.io/stacklok/thv-registry-api Docker tag to v1.5.0
• Update golangci/golangci-lint-action action to v9.3.0
• Update kubernetes dependencies (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/client-go, k8s.io/utils, sigs.k8s.io/controller-runtime)
• Update module github.com/getsentry/sentry-go to v0.48.0
• Update module github.com/lestrrat-go/jwx/v3 to v3.1.1
• Update module github.com/moby/moby/api to v1.55.0
• Update module github.com/moby/moby/client to v0.5.0
• Update module github.com/pelletier/go-toml/v2 to v2.4.3
• Update module github.com/testcontainers/testcontainers-go to v0.43.0
• Update module github.com/tidwall/gjson to v1.19.0
• Update module modernc.org/sqlite to v1.54.0
• Update opentelemetry and observability (github.com/prometheus/client_golang, github.com/prometheus/common, go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp)
• Update testing libraries (github.com/onsi/ginkgo/v2, github.com/onsi/gomega)
• Update actions/setup-node action to v7
• Update cli and ui libraries to v2 (github.com/charmbracelet/bubbles, github.com/charmbracelet/bubbletea, github.com/charmbracelet/lipgloss)
• Update codecov/codecov-action action to v7
• Update core workflow actions (major) (actions/cache, actions/checkout, actions/download-artifact, actions/github-script, actions/upload-artifact)
• Update dependency helm to v4
• Update dependency node to v24
• Update ghcr.io/modelcontextprotocol/inspector Docker tag to v1
• Update module github.com/cenkalti/backoff/v5 to v7
• Update module github.com/lestrrat-go/jwx/v3 to v4
• Update setup and language actions (major) (actions/setup-go, arduino/setup-task)
• Update slackapi/slack-github-action action to v4
• 🔐 Create all awaiting schedule PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update golang/govulncheck-action digest to 032d455

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package arduino/setup-task), Could not determine new digest for update (github-digest package helm/kind-action).

Files affected: .github/workflows/e2e-tests.yml, .github/workflows/operator-ci.yml, .github/workflows/test-e2e-lifecycle.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update go.starlark.net digest to 5395d01
• Update module github.com/getsentry/sentry-go/otel to v0.48.0
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update module github.com/1password/onepassword-sdk-go to v0.4.0
• Update module github.com/go-jose/go-jose/v3 to v4

Detected Dependencies

dockerfile (1)

containers/egress-proxy/Dockerfile (1)

• alpine 3.24.1

github-actions (27)

.github/workflows/api-compat-noop.yml

.github/workflows/api-compat.yml (2)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]

.github/workflows/claude.yml (3)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• anthropics/claude-code-action v1@af0559ee4f514d1ef21826982bed13f7edc3c35e → [Updates: v1]

.github/workflows/create-release-pr.yml (4)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• stacklok/releaseo v0.0.4@80e8d8131d41cf8763254d02360f2c5ce9b7c0df

.github/workflows/create-release-tag.yml (2)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]

.github/workflows/e2e-tests.yml (13)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611 → [Updates: v3.0.0]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/download-artifact v7@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v7.0.0]
• actions/download-artifact v7@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]
• node 22 → [Updates: 24]

.github/workflows/helm-charts-test.yml (8)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• ko-build/setup-ko v0.10@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
• arduino/setup-task v2 → [Updates: v3.0.0]
• helm/kind-action v1.14.0@ef37e7f390d99f746eb8b610417061a60e82a6cc
• helm v3.20.2 → [Updates: v3.21.3, v4.2.3]

.github/workflows/helm-publish.yml (5)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• helm v3.14.0 → [Updates: v3.21.3, v4.2.3]

.github/workflows/image-build-and-publish.yml (29)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• ko-build/setup-ko v0.10@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2 → [Updates: v3.0.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• ko-build/setup-ko v0.10@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• ko-build/setup-ko v0.10@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• ko-build/setup-ko v0.10@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6

.github/workflows/issue-triage.yml (2)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• anthropics/claude-code-action v1.0.165@558b1d6cab4085c7753fe402c10bef0fbb92ac7a → [Updates: v1.0.181]

.github/workflows/license-headers.yml (2)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]

.github/workflows/lint.yml (4)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• golangci/golangci-lint-action v9.2.1@82606bf257cbaff209d206a39f5134f0cfbfd2ee → [Updates: v9.3.0]

.github/workflows/operator-ci.yml (22)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2 → [Updates: v3.0.0]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2 → [Updates: v3.0.0]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2 → [Updates: v3.0.0]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2 → [Updates: v3.0.0]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2 → [Updates: v3.0.0]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• ko-build/setup-ko v0.10@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2 → [Updates: v3.0.0]
• kyverno/action-install-chainsaw v0.2.15@1223ef75bedeb59c4e7b5455463d4316e76dff01
• helm/kind-action pin@v1.12.0@ef37e7f390d99f746eb8b610417061a60e82a6cc

.github/workflows/pr-size-label-apply.yml (3)

• actions/download-artifact v7@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8]
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]

.github/workflows/pr-size-labeler.yml (3)

• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]

.github/workflows/release-notes.yml (5)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• anthropics/claude-code-action v1@af0559ee4f514d1ef21826982bed13f7edc3c35e → [Updates: v1]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]
• slackapi/slack-github-action v3.0.3@45a88b9581bfab2566dc881e2cd66d334e621e2c → [Updates: v3.0.5, v4.0.0]

.github/workflows/releaser.yml (9)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• goreleaser/goreleaser-action v7@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• slackapi/slack-github-action v3.0.3@45a88b9581bfab2566dc881e2cd66d334e621e2c → [Updates: v3.0.5, v4.0.0]

.github/workflows/renovate-config-validation.yml (1)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]

.github/workflows/retest.yaml (1)

• ubuntu 24.04

.github/workflows/security-scan.yml (5)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• anchore/scan-action v7.4.0@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2
• github/codeql-action v4@7188fc363630916deb702c7fdcf4e481b751f97a → [Updates: v4]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• golang/govulncheck-action v1@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee → [Updates: v1]

.github/workflows/skills-build-and-publish.yml (3)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]

.github/workflows/spellcheck.yml (2)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• codespell-project/actions-codespell v2@406322ec52dd7b488e48c1c4b82e2a8b3a1bf630

.github/workflows/test-e2e-lifecycle.yml (6)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• ko-build/setup-ko v0.10@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2 → [Updates: v3.0.0]
• helm/kind-action pin@v1.12.0@ef37e7f390d99f746eb8b610417061a60e82a6cc

.github/workflows/test.yml (7)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• arduino/setup-task v2 → [Updates: v3.0.0]
• codecov/codecov-action v6.0.2@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7.0.0]
• coverallsapp/github-action v2@5cbfd81b66ca5d10c19b062c04de0199c215fb6e

.github/workflows/triage.yml (1)

• stacklok/.github v1@b43e3f174f9bbf2ca4efe6e421a1d007e7fa1b8f

.github/workflows/verify-docgen.yml (2)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]

.github/workflows/verify-gen.yml (4)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• arduino/setup-task v2 → [Updates: v3.0.0]

gomod (1)

go.mod (100)

• go 1.26
• dario.cat/mergo v1.0.2
• github.com/1password/onepassword-sdk-go v0.3.1 → [Updates: v0.4.0]
• github.com/alicebob/miniredis/v2 v2.38.0
• github.com/atotto/clipboard v0.1.4
• github.com/aws/aws-sdk-go-v2 v1.42.1 → [Updates: v1.43.0]
• github.com/aws/aws-sdk-go-v2/config v1.32.30 → [Updates: v1.32.31]
• github.com/aws/aws-sdk-go-v2/service/sts v1.44.1 → [Updates: v1.45.0]
• github.com/cedar-policy/cedar-go v1.8.0
• github.com/cenkalti/backoff/v5 v5.0.3 → [Updates: v7.0.0]
• github.com/charmbracelet/bubbles v1.0.0 → [Updates: v2.1.1]
• github.com/charmbracelet/bubbletea v1.3.10 → [Updates: v2.0.8]
• github.com/charmbracelet/lipgloss v1.1.0 → [Updates: v2.0.5]
• github.com/charmbracelet/x/ansi v0.11.7
• github.com/containerd/errdefs v1.0.0
• github.com/coreos/go-oidc/v3 v3.20.0
• github.com/evanphx/json-patch/v5 v5.9.11
• github.com/go-chi/chi/v5 v5.3.0 → [Updates: v5.3.1]
• github.com/go-git/go-billy/v5 v5.9.0
• github.com/go-git/go-git/v5 v5.19.1
• github.com/go-jose/go-jose/v3 v3.0.5 → [Updates: v4.1.4]
• github.com/go-jose/go-jose/v4 v4.1.4
• github.com/gofrs/flock v0.13.0
• github.com/google/cel-go v0.29.2
• github.com/google/go-cmp v0.7.0
• github.com/google/go-containerregistry v0.21.7
• github.com/google/uuid v1.6.0
• github.com/lestrrat-go/httprc/v3 v3.0.6
• github.com/lestrrat-go/jwx/v3 v3.0.13 → [Updates: v3.1.1, v4.1.0]
• github.com/moby/moby/client v0.4.1 → [Updates: v0.5.0]
• github.com/modelcontextprotocol/registry v1.8.0
• github.com/oauth2-proxy/mockoidc v0.0.0-20240214162133-caebfff84d25@caebfff84d25
• github.com/olekukonko/tablewriter v1.1.4
• github.com/onsi/ginkgo/v2 v2.28.1 → [Updates: v2.32.0]
• github.com/onsi/gomega v1.39.1 → [Updates: v1.42.1]
• github.com/ory/fosite v0.49.0
• github.com/pelletier/go-toml/v2 v2.3.1 → [Updates: v2.4.3]
• github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c@5ac0b6a4141c
• github.com/pressly/goose/v3 v3.27.1 → [Updates: v3.27.3]
• github.com/prometheus/client_golang v1.23.2 → [Updates: v1.24.0]
• github.com/prometheus/client_model v0.6.2
• github.com/prometheus/common v0.67.5 → [Updates: v0.70.1]
• github.com/redis/go-redis/v9 v9.21.0
• github.com/shirou/gopsutil/v4 v4.26.5 → [Updates: v4.26.6]
• github.com/spf13/viper v1.21.0
• github.com/stacklok/toolhive-catalog v0.20260720.0
• github.com/stacklok/toolhive-core v0.0.32
• github.com/stretchr/testify v1.11.1
• github.com/swaggo/swag/v2 v2.0.0-rc5
• github.com/tailscale/hujson v0.0.0-20260302212456-ecc657c15afd@ecc657c15afd → [Updates: v0.0.0-20260722022634-78b5b162ee49]
• github.com/testcontainers/testcontainers-go v0.42.0 → [Updates: v0.43.0]
• github.com/tidwall/gjson v1.18.0 → [Updates: v1.19.0]
• github.com/xeipuuv/gojsonschema v1.2.0
• github.com/zalando/go-keyring v0.2.8
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.43.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/exporters/prometheus v0.66.0
• go.opentelemetry.io/otel/sdk v1.44.0
• go.opentelemetry.io/otel/sdk/metric v1.44.0
• go.uber.org/mock v0.6.0
• go.uber.org/zap v1.28.0
• golang.ngrok.com/ngrok/v2 v2.1.4
• golang.org/x/exp/jsonrpc2 v0.0.0-20260709172345-9ea1abe57597@9ea1abe57597 → [Updates: v0.0.0-20260718201538-764159d718ef]
• golang.org/x/mod v0.38.0
• golang.org/x/oauth2 v0.36.0
• golang.org/x/sync v0.22.0
• golang.org/x/term v0.45.0
• golang.org/x/time v0.15.0
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/api v0.35.3 → [Updates: v0.36.3]
• k8s.io/apimachinery v0.35.3 → [Updates: v0.36.3]
• k8s.io/utils v0.0.0-20260319190234-28399d86e0b5@28399d86e0b5 → [Updates: v0.0.0-20260707023825-cf1189d6abe3]
• modernc.org/sqlite v1.49.1 → [Updates: v1.54.0]
• sigs.k8s.io/controller-runtime v0.23.3 → [Updates: v0.24.1]
• sigs.k8s.io/yaml v1.6.0
• github.com/getsentry/sentry-go/otel v0.44.1 → [Updates: v0.48.0]
• github.com/hashicorp/golang-lru/v2 v2.0.7
• go.starlark.net v0.0.0-20260630144053-529d8e869a14@529d8e869a14 → [Updates: v0.0.0-20260708150628-5395d018f003]
• github.com/getsentry/sentry-go v0.47.0 → [Updates: v0.48.0]
• github.com/moby/moby/api v1.54.2 → [Updates: v1.55.0]
• github.com/muesli/termenv v0.16.0
• github.com/ory/x v0.0.665 → [Updates: v0.0.729]
• github.com/yosida95/uritemplate/v3 v3.0.2
• k8s.io/apiextensions-apiserver v0.35.0 → [Updates: v0.36.3]
• oras.land/oras-go/v2 v2.6.2
• github.com/Microsoft/go-winio v0.6.2
• github.com/adrg/xdg v0.5.3
• github.com/go-logr/logr v1.4.3 → [Updates: v1.4.4]
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/opencontainers/go-digest v1.0.0
• github.com/opencontainers/image-spec v1.1.1
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0 → [Updates: v0.69.0]
• go.opentelemetry.io/otel v1.44.0
• go.opentelemetry.io/otel/metric v1.44.0
• go.opentelemetry.io/otel/trace v1.44.0
• golang.org/x/crypto v0.54.0
• golang.org/x/sys v0.47.0
• k8s.io/client-go v0.35.3 → [Updates: v0.36.3]

helm-values (1)

deploy/charts/operator/values.yaml (4)

• ghcr.io/stacklok/toolhive/operator v0.40.1
• ghcr.io/stacklok/toolhive/proxyrunner v0.40.1
• ghcr.io/stacklok/toolhive/vmcp v0.40.1
• ghcr.io/stacklok/thv-registry-api v1.3.0 → [Updates: v1.5.0]

regex (8)

.github/workflows/helm-charts-test.yml (1)

• helm/helm 3.20.2 → [Updates: 3.21.3, 4.2.3]

.github/workflows/operator-ci.yml (3)

• kindest/node 1.33.7 → [Updates: 1.36.1]
• kindest/node 1.34.3 → [Updates: 1.36.1]
• kindest/node 1.35.1 → [Updates: 1.36.1]

.github/workflows/operator-ci.yml (1)

• kubernetes-sigs/kind 0.31.0 → [Updates: 0.32.0]

.github/workflows/operator-ci.yml (1)

• kyverno/chainsaw 0.2.15

.github/workflows/test-e2e-lifecycle.yml (3)

• kindest/node 1.33.7 → [Updates: 1.36.1]
• kindest/node 1.34.3 → [Updates: 1.36.1]
• kindest/node 1.35.1 → [Updates: 1.36.1]

.github/workflows/test-e2e-lifecycle.yml (1)

• kubernetes-sigs/kind 0.31.0 → [Updates: 0.32.0]

cmd/thv/app/inspector/version.go (1)

• ghcr.io/modelcontextprotocol/inspector 0.21.2 → [Updates: 0.22.0, 1.0.0]

pkg/container/templates/go.tmpl (1)

• index.docker.io/library/alpine 3.23@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11 → [Updates: 3.24, 3.23]

---

• Check this box to trigger a request for Renovate to run again on this repository