Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Error updating branch: update failure

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (3)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/hexops/gotextdiff	2020-12-13
gomod	github.com/jdbaldry/go-language-server-protocol	2021-10-13
gomod	github.com/mitchellh/mapstructure	2022-04-20

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): lock file maintenance

Errored

The following updates encountered an error and will be retried. To force a retry now, click on a checkbox below.

• chore(deps): pin dependencies (github.com/grafana/grafonnet/gen/grafonnet-latest, github.com/grafana/jsonnet-libs/ksonnet-util, github.com/jsonnet-libs/k8s-libsonnet/1.30)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(security/unknown/): update go toolchain directive to v1.25.11 [security]
• fix(security/unknown/): update module golang.org/x/crypto to v0.52.0 [security]
• fix(security/unknown/): update module golang.org/x/net to v0.55.0 [security]
• fix(security/unknown/): update module golang.org/x/sys to v0.44.0 [security]
• chore(deps): update go module directive to v1.24.3
• chore(deps): update actions/checkout action to v4.3.1
• chore(deps): update actions/setup-go action to v5.6.0
• chore(deps): update goreleaser/goreleaser-action action to v6.4.0
• fix(deps): update module github.com/google/go-jsonnet to v0.22.0
• fix(deps): update module github.com/grafana/tanka to v0.37.2
• chore(deps): update goreleaser/goreleaser-action action to v7
• fix(deps): update module github.com/johanneskaufmann/html-to-markdown to v2
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update module github.com/sirupsen/logrus to v1.9.4
• fix(deps): update module github.com/stretchr/testify to v1.11.1
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-go action to v6
• chore(deps): update golangci/golangci-lint-action action to v9

Vulnerabilities

Important

63/63 CVEs have Renovate fixes.

gomod

go.mod

go

• GO-2025-3749 (fixed in >= 1.24.4)
• GO-2025-3750 (fixed in >= 1.24.4)
• GO-2025-3751 (fixed in >= 1.24.4)
• GO-2025-3849 (fixed in >= 1.24.6)
• GO-2025-3956 (fixed in >= 1.24.6)
• GO-2025-4006 (fixed in >= 1.24.8)
• GO-2025-4007 (fixed in >= 1.24.9)
• GO-2025-4008 (fixed in >= 1.24.8)
• GO-2025-4009 (fixed in >= 1.24.8)
• GO-2025-4010 (fixed in >= 1.24.8)
• GO-2025-4011 (fixed in >= 1.24.8)
• GO-2025-4012 (fixed in >= 1.24.8)
• GO-2025-4013 (fixed in >= 1.24.8)
• GO-2025-4014 (fixed in >= 1.24.8)
• GO-2025-4015 (fixed in >= 1.24.8)
• GO-2025-4155 (fixed in >= 1.24.11)
• GO-2025-4175 (fixed in >= 1.24.11)
• GO-2026-4337 (fixed in >= 1.24.13)
• GO-2026-4340 (fixed in >= 1.24.12)
• GO-2026-4341 (fixed in >= 1.24.12)
• GO-2026-4342 (fixed in >= 1.24.12)
• GO-2026-4403 (fixed in >= 1.24.3)
• GO-2026-4601 (fixed in >= 1.25.8)
• GO-2026-4602 (fixed in >= 1.25.8)
• GO-2026-4603 (fixed in >= 1.25.8)
• GO-2026-4864 (fixed in >= 1.25.9)
• GO-2026-4865 (fixed in >= 1.25.9)
• GO-2026-4869 (fixed in >= 1.25.9)
• GO-2026-4870 (fixed in >= 1.25.9)
• GO-2026-4918 (fixed in >= 1.25.10)
• GO-2026-4946 (fixed in >= 1.25.9)
• GO-2026-4947 (fixed in >= 1.25.9)
• GO-2026-4971 (fixed in >= 1.25.10)
• GO-2026-4976 (fixed in >= 1.25.10)
• GO-2026-4977 (fixed in >= 1.25.10)
• GO-2026-4980 (fixed in >= 1.25.10)
• GO-2026-4981 (fixed in >= 1.25.10)
• GO-2026-4982 (fixed in >= 1.25.10)
• GO-2026-4986 (fixed in >= 1.25.10)
• GO-2026-5037 (fixed in >= 1.25.11)
• GO-2026-5038 (fixed in >= 1.25.11)
• GO-2026-5039 (fixed in >= 1.25.11)

golang.org/x/crypto

• GO-2026-5005 (fixed in >= 0.52.0)
• GO-2026-5006 (fixed in >= 0.52.0)
• GO-2026-5013 (fixed in >= 0.52.0)
• GO-2026-5014 (fixed in >= 0.52.0)
• GO-2026-5015 (fixed in >= 0.52.0)
• GO-2026-5016 (fixed in >= 0.52.0)
• GO-2026-5017 (fixed in >= 0.52.0)
• GO-2026-5018 (fixed in >= 0.52.0)
• GO-2026-5019 (fixed in >= 0.52.0)
• GO-2026-5020 (fixed in >= 0.52.0)
• GO-2026-5021 (fixed in >= 0.52.0)
• GO-2026-5023 (fixed in >= 0.52.0)
• GO-2026-5033 (fixed in >= 0.52.0)

golang.org/x/net

• GO-2026-4918 (fixed in >= 0.53.0)
• GO-2026-5025 (fixed in >= 0.55.0)
• GO-2026-5026 (fixed in >= 0.55.0)
• GO-2026-5027 (fixed in >= 0.55.0)
• GO-2026-5028 (fixed in >= 0.55.0)
• GO-2026-5029 (fixed in >= 0.55.0)
• GO-2026-5030 (fixed in >= 0.55.0)

golang.org/x/sys

• GO-2026-5024 (fixed in >= 0.44.0)

Detected Dependencies

github-actions (4)

.github/workflows/golangci-lint.yml (3)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.3]
• golangci/golangci-lint-action v8.0.0@4afd733a84b1f43292c63897423277bb7f4313a9 → [Updates: v9.2.1]
• golangci/golangci-lint latest

.github/workflows/jsonnetfmt.yml (2)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.3]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.4.0]

.github/workflows/release.yml (3)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.3]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.4.0]
• goreleaser/goreleaser-action v6.3.0@9c156ee8a17a598857849441385a2041ef570552 → [Updates: v6.4.0, v7.2.2]

.github/workflows/test.yml (2)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.3]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.4.0]

gomod (1)

go.mod (13)

• go 1.24.0 → [Updates: 1.24.3]
• go 1.24.2 → [Updates: 1.25.11]
• github.com/JohannesKaufmann/html-to-markdown v1.6.0 → [Updates: v2.5.1]
• github.com/google/go-jsonnet v0.21.0 → [Updates: v0.22.0]
• github.com/grafana/tanka v0.32.1-0.20250521123240-fa219d35d24f@fa219d35d24f → [Updates: v0.37.2]
• github.com/hexops/gotextdiff v1.0.3
• github.com/jdbaldry/go-language-server-protocol v0.0.0-20211013214444-3022da0884b2@3022da0884b2
• github.com/mitchellh/mapstructure v1.5.0
• github.com/sirupsen/logrus v1.9.3 → [Updates: v1.9.4]
• github.com/stretchr/testify v1.10.0 → [Updates: v1.11.1]
• golang.org/x/crypto v0.45.0 → [Updates: v0.52.0]
• golang.org/x/net v0.47.0 → [Updates: v0.55.0]
• golang.org/x/sys v0.38.0 → [Updates: v0.44.0]

jsonnet-bundler (1)

pkg/server/testdata/jsonnetfile.json (3)

• github.com/grafana/jsonnet-libs/ksonnet-util master → [Updates: master]
• github.com/jsonnet-libs/k8s-libsonnet/1.30 main → [Updates: main]
• github.com/grafana/grafonnet/gen/grafonnet-latest main → [Updates: main]

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.