Dependency Dashboard

[crossplane-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update gomod2nix digest to 1201ddd (main)
• fix(deps): update github.com/google/go-containerregistry/pkg/authn/k8schain digest to d807d51 (main)
• fix(deps): update k8s.io/utils digest to ff6756f (main)
• fix(deps): update module github.com/crossplane/crossplane/apis/v2 to v2.0.0-20260520054125-bec4d4732495 (main)
• fix(deps): update module github.com/sigstore/sigstore to v1.10.6 (main)
• chore(deps): update zeebe-io/backport-action action to v4.5.2 (main)
• fix(deps): update module github.com/google/go-containerregistry to v0.21.6 (main)
• fix(deps): update module github.com/in-toto/attestation to v1.2.0 (main)
• fix(deps): update module github.com/masterminds/semver/v3 to v3.5.0 (main)
• fix(deps): update module google.golang.org/grpc to v1.81.1 (main)
• fix(deps): update module k8s.io/klog/v2 to v2.140.0 (main)
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.24.1 (main)
• fix(deps): update module sigs.k8s.io/controller-tools to v0.21.0 (main)
• chore(deps): update actions/create-github-app-token action to v3 (main)
• chore(deps): update actions/github-script action to v9 (main)
• chore(deps): update actions/stale action to v10 (main)
• chore(deps): update cachix/cachix-action action to v17 (main)
• chore(deps): update codecov/codecov-action action to v6 (main)
• chore(deps): update dependency ubuntu to v24 (main)
• chore(deps): update curlimages/curl docker tag to v8.20.0 (release-1.20)
• chore(deps): update curlimages/curl docker tag to v8.20.0 (release-2.0)
• chore(deps): update curlimages/curl docker tag to v8.20.0 (release-2.1)
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package bufbuild/buf-breaking-action).

Files affected: .github/workflows/ci.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update cachix/install-nix-action digest to 8aa0397 (main)
• chore(deps): update github/codeql-action digest to 9e0d7b8 (main)
• chore(deps): update renovatebot/github-action action to v46.1.14 (main)
• fix(deps): update module github.com/sigstore/cosign/v3 to v3.0.6 (main)
• fix(deps): update kubernetes monorepo to v0.36.1 (main) (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/client-go, k8s.io/component-base)
• chore(deps): update go toolchain directive to v1.25.10 [security] (release-1.20)
• chore(deps): update module golang.org/x/net to v0.53.0 [security] (release-1.20)
• chore(deps): update module go.opentelemetry.io/otel to v1.41.0 [security] (release-2.0)
• chore(deps): update module golang.org/x/net to v0.53.0 [security] (release-2.0)
• chore(deps): update module go.opentelemetry.io/otel to v1.41.0 [security] (release-2.1)
• chore(deps): update module golang.org/x/net to v0.53.0 [security] (release-2.1)
• chore(deps): update module go.opentelemetry.io/otel to v1.41.0 [security] (release-2.2)
• chore(deps): update module golang.org/x/net to v0.53.0 [security] (release-2.2)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

Branch main

github-actions (6)

.github/workflows/backport.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• zeebe-io/backport-action v4.3.0@3c06f323a58619da1e8522229ebc8d5de2633e46 → [Updates: v4.5.2]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/ci.yml (28)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31@616559265b40713947b9c190a8ff4b507b5df49b → [Updates: v31]
• cachix/cachix-action v16@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 → [Updates: v17]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31@616559265b40713947b9c190a8ff4b507b5df49b → [Updates: v31]
• cachix/cachix-action v16@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 → [Updates: v17]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31@616559265b40713947b9c190a8ff4b507b5df49b → [Updates: v31]
• cachix/cachix-action v16@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 → [Updates: v17]
• nicknovitski/nix-develop v1@9be7cfb4b10451d3390a75dc18ad0465bed4932a
• github/codeql-action v4@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4]
• github/codeql-action v4@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31@616559265b40713947b9c190a8ff4b507b5df49b → [Updates: v31]
• cachix/cachix-action v16@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 → [Updates: v17]
• codecov/codecov-action v4@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 → [Updates: v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• bufbuild/buf-setup-action v1
• bufbuild/buf-lint-action v1
• bufbuild/buf-breaking-action v1@a074e988ee34efcd4927079e79c611f428354c01
• bufbuild/buf-push-action v1
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/commands.yml (10)

• xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• zeebe-io/backport-action v4.3.0@3c06f323a58619da1e8522229ebc8d5de2633e46 → [Updates: v4.5.2]
• xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
• actions-ecosystem/action-remove-labels v1@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/renovate.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/create-github-app-token v2@fee1f7d63c2ff003460e3d139729b119787bc349 → [Updates: v3]
• renovatebot/github-action v46.1.9@eb932558ad942cccfd8211cf535f17ff183a9f74 → [Updates: v46.1.14]

.github/workflows/stale.yml (2)

• actions/stale v9@5bef64f19d7facfb25b37b414482c7164d639639 → [Updates: v10]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/tag.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• negz/create-tag v1@39bae1e0932567a58c20dea5a1a0d18358503320
• ubuntu 22.04 → [Updates: 24.04]

gomod (1)

go.mod (30)

• go 1.25.9
• dario.cat/mergo v1.0.2
• github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6@e8a1dd7889d6
• github.com/Masterminds/semver/v3 v3.4.0 → [Updates: v3.5.0]
• github.com/crossplane/crossplane/apis/v2 v2.0.0-20260424160951-8f231230ebb6@8f231230ebb6 → [Updates: v2.0.0-20260520054125-bec4d4732495]
• github.com/evanphx/json-patch v5.9.11+incompatible
• github.com/go-logr/logr v1.4.3
• github.com/google/go-cmp v0.7.0
• github.com/google/go-containerregistry v0.20.7 → [Updates: v0.21.6]
• github.com/google/go-containerregistry/pkg/authn/k8schain v0.0.0-20230919002926-dbcd01c402b2@dbcd01c402b2 → [Updates: v0.0.0-20260520013816-d807d512681c]
• github.com/in-toto/attestation v1.1.2 → [Updates: v1.2.0]
• github.com/in-toto/in-toto-golang v0.11.0
• github.com/prometheus/client_golang v1.23.2
• github.com/sigstore/cosign/v3 v3.0.5 → [Updates: v3.0.6]
• github.com/sigstore/sigstore v1.10.5 → [Updates: v1.10.6]
• github.com/sirupsen/logrus v1.9.4
• github.com/spf13/afero v1.15.0
• golang.org/x/time v0.15.0
• google.golang.org/grpc v1.79.3 → [Updates: v1.81.1]
• google.golang.org/protobuf v1.36.11
• k8s.io/api v0.35.1 → [Updates: v0.36.1]
• k8s.io/apiextensions-apiserver v0.35.0 → [Updates: v0.36.1]
• k8s.io/apimachinery v0.35.1 → [Updates: v0.36.1]
• k8s.io/client-go v0.35.1 → [Updates: v0.36.1]
• k8s.io/component-base v0.35.0 → [Updates: v0.36.1]
• k8s.io/klog/v2 v2.130.1 → [Updates: v2.140.0]
• k8s.io/utils v0.0.0-20260108192941-914a6e750570@914a6e750570 → [Updates: v0.0.0-20260507154919-ff6756f316d2]
• sigs.k8s.io/controller-runtime v0.23.1 → [Updates: v0.24.1]
• sigs.k8s.io/controller-tools v0.20.0 → [Updates: v0.21.0]
• sigs.k8s.io/yaml v1.6.0

nix (1)

flake.nix (3)

• gomod2nix 49662a44272806ff785df2990a420edaaca15db4 → [Updates: undefined]
• nixpkgs nixos-25.11
• nixpkgs-unstable nixpkgs-unstable

renovate-config (1)

.github/renovate.json5

Branch release-1.20

dockerfile (1)

Earthfile (1)

• curlimages/curl 8.8.0 → [Updates: 8.20.0]

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (3)

• go 1.24.0 → [Updates: 1.25.8]
• go 1.24.13 → [Updates: 1.25.10]
• golang.org/x/net v0.48.0 → [Updates: v0.53.0]

regex (10)

.github/workflows/ci.yml

.github/workflows/ci.yml

.github/workflows/renovate.yml

.github/workflows/renovate.yml

Earthfile

Earthfile

Earthfile

Earthfile

Earthfile

Earthfile

Branch release-2.0

dockerfile (1)

Earthfile (1)

• curlimages/curl 8.19.0 → [Updates: 8.20.0]

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (2)

• go.opentelemetry.io/otel v1.39.0 → [Updates: v1.41.0]
• golang.org/x/net v0.48.0 → [Updates: v0.53.0]

regex (10)

.github/workflows/ci.yml

.github/workflows/ci.yml

.github/workflows/renovate.yml

.github/workflows/renovate.yml

Earthfile

Earthfile

Earthfile

Earthfile

Earthfile

Earthfile

Branch release-2.1

dockerfile (1)

Earthfile (1)

• curlimages/curl 8.19.0 → [Updates: 8.20.0]

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (2)

• go.opentelemetry.io/otel v1.39.0 → [Updates: v1.41.0]
• golang.org/x/net v0.48.0 → [Updates: v0.53.0]

regex (10)

.github/workflows/ci.yml

.github/workflows/ci.yml

.github/workflows/renovate.yml

.github/workflows/renovate.yml

Earthfile

Earthfile

Earthfile

Earthfile

Earthfile

Earthfile

Branch release-2.2

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (2)

• go.opentelemetry.io/otel v1.40.0 → [Updates: v1.41.0]
• golang.org/x/net v0.49.0 → [Updates: v0.53.0]

nix (1)

flake.nix

renovate-config (1)

.github/renovate.json5

Branch release-2.3

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod

nix (1)

flake.nix

renovate-config (1)

.github/renovate.json5