Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (1)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/go-kit/log	2022-04-27

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• [skip-release] Update codecov/codecov-action action to v6

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (docker package ghcr.io/libops/go1.25).

Files affected: Dockerfile

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module github.com/prometheus/prometheus to v0.311.3 [security]
• chore(deps): update module go.opentelemetry.io/otel to v1.41.0 [security]
• chore(deps): update module golang.org/x/net to v0.53.0 [security]
• chore(deps): update module google.golang.org/grpc to v1.79.3 [security]
• [skip-release] Update github-actions (actions/checkout, actions/setup-go, codecov/codecov-action, golangci/golangci-lint-action, libops/.github)
• fix(deps): update module github.com/googlecloudplatform/prometheus-engine to v0.17.2
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update module github.com/prometheus/prometheus to v2

Vulnerabilities

Important

7/9 CVEs have Renovate fixes.

gomod

go.mod

github.com/aws/aws-sdk-go

• GO-2022-0635
• GO-2022-0646

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• ghcr.io/libops/go1.25 main@sha256:f43c9b34f888d2ac53e87c8e061554f826b8eb580863d7b21fd787b6f0378f8f
• ghcr.io/libops/go1.25 main@sha256:f43c9b34f888d2ac53e87c8e061554f826b8eb580863d7b21fd787b6f0378f8f

github-actions (1)

.github/workflows/build-push.yml (6)

• actions/checkout v6@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6]
• actions/setup-go v6@4dc6199c7b1a012772edbd06daecab0f50c9053c → [Updates: v6]
• golangci/golangci-lint-action v9@e7fa5ac41e1cf5b7d48e45e42232ce7ada589601 → [Updates: v9]
• codecov/codecov-action v5@5a1091511ad55cbe89839c7260b706298ca349f7 → [Updates: v6, v5]
• libops/.github main → [Updates: main]
• ubuntu 24.04

gomod (1)

go.mod (9)

• go 1.25.3
• github.com/GoogleCloudPlatform/prometheus-engine v0.8.0 → [Updates: v0.17.2]
• github.com/go-kit/log v0.2.1
• github.com/prometheus/client_golang v1.23.2
• github.com/prometheus/prometheus v1.99.0 → [Updates: v2.5.0+incompatible]
• go.opentelemetry.io/otel v1.38.0 → [Updates: v1.41.0]
• golang.org/x/net v0.47.0 → [Updates: v0.53.0]
• google.golang.org/grpc v1.77.0 → [Updates: v1.79.3]
• github.com/prometheus/prometheus v0.41.0 → [Updates: v0.311.3]

renovate-config (1)

renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository