Dependency Dashboard

[red-hat-konflux-kflux-prd-rh03]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.
• ⚠️ WARN: Dependency name is unset, skipping

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (43)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	cloud.google.com/go/auth/oauth2adapt	2025-03-20
gomod	github.com/Azure/go-autorest	2020-06-23
gomod	github.com/Azure/go-autorest/autorest	2025-01-28
gomod	github.com/Azure/go-autorest/autorest/adal	2024-05-30
gomod	github.com/Azure/go-autorest/autorest/azure/auth	2024-05-30
gomod	github.com/Azure/go-autorest/autorest/azure/cli	2025-01-28
gomod	github.com/Azure/go-autorest/autorest/date	2025-01-28
gomod	github.com/Azure/go-autorest/autorest/to	2025-01-28
gomod	github.com/Azure/go-autorest/logger	2025-01-28
gomod	github.com/Azure/go-autorest/tracing	2025-01-28
gomod	github.com/beorn7/perks	2019-07-31
gomod	github.com/cespare/xxhash/v2	2024-04-04
gomod	github.com/davecgh/go-spew	2018-02-21
gomod	github.com/dimchansky/utfbom	2020-11-06
gomod	github.com/evanphx/json-patch	2025-01-28
gomod	github.com/evanphx/json-patch/v5	2025-01-28
gomod	github.com/go-logr/logr	2025-05-19
gomod	github.com/go-logr/stdr	2021-12-14
gomod	github.com/go-logr/zapr	2023-11-03
gomod	github.com/go-task/slim-sprig/v3	2023-09-14
gomod	github.com/google/go-cmp	2025-01-14
gomod	github.com/google/s2a-go	2025-01-06
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/gorilla/websocket	2024-06-14
gomod	github.com/jmespath/go-jmespath	2020-09-18
gomod	github.com/json-iterator/go	2021-09-11
gomod	github.com/kylelemons/godebug	2019-05-05
gomod	github.com/mitchellh/go-homedir	2019-01-27
gomod	github.com/modern-go/concurrent	2018-03-06
gomod	github.com/modern-go/reflect2	2021-09-11
gomod	github.com/munnerz/goautoneg	2019-10-10
gomod	github.com/openshift/operator-custom-metrics	2022-10-31
gomod	github.com/operator-framework/operator-lib	2025-06-21
gomod	github.com/pkg/errors	2020-01-14
gomod	github.com/pmezard/go-difflib	2016-01-10
gomod	github.com/prometheus/client_model	2025-04-11
gomod	github.com/sykesm/zap-logfmt	2020-09-22
gomod	github.com/x448/float16	2020-01-17
gomod	go.uber.org/multierr	2023-03-29
gomod	gopkg.in/evanphx/json-patch.v4	2025-01-28
gomod	gopkg.in/inf.v0	2018-03-26
gomod	gopkg.in/yaml.v3	2022-05-27
gomod	sigs.k8s.io/randfill	2025-03-04

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update gomod dependencies (github.com/go-openapi/jsonpointer, github.com/googleapis/enterprise-certificate-proxy, github.com/onsi/ginkgo/v2, github.com/onsi/gomega, github.com/openshift/api, github.com/openshift/client-go, github.com/prometheus/procfs, golang.org/x/tools, google.golang.org/api, google.golang.org/genproto/googleapis/rpc, k8s.io/kube-openapi, k8s.io/utils)
• chore(deps): update module github.com/golang-jwt/jwt/v4 to v5
• chore(deps): update module go.yaml.in/yaml/v2 to v3
• chore(deps): update module gomodules.xyz/jsonpatch/v2 to v3
• chore(deps): update module gopkg.in/evanphx/json-patch.v4 to v5
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

gomod (1)

go.mod (125)

• go 1.26.0
• github.com/Azure/azure-sdk-for-go v68.0.0+incompatible
• github.com/Azure/go-autorest/autorest v0.11.30
• github.com/Azure/go-autorest/autorest/azure/auth v0.5.13
• github.com/Azure/go-autorest/autorest/to v0.4.1
• github.com/aws/aws-sdk-go v1.55.8
• github.com/go-logr/logr v1.4.3
• github.com/lib/pq v1.12.3
• github.com/onsi/ginkgo/v2 v2.31.0 → [Updates: v2.32.0]
• github.com/onsi/gomega v1.42.0 → [Updates: v1.42.1]
• github.com/openshift/api v0.0.0-20260624175654-50c3975e874f@50c3975e874f → [Updates: v0.0.0-20260624175654-50c3975e874f]
• github.com/openshift/aws-account-operator/api v0.0.0-20260611202156-0869a2932f4a@0869a2932f4a → [Updates: v0.0.0-20260629212053-0c6265b0bbbd]
• github.com/openshift/client-go v0.0.0-20260622130833-df412d4d283e@df412d4d283e → [Updates: v0.0.0-20260622130833-df412d4d283e]
• github.com/openshift/hive/apis v0.0.0-20260617005215-7c2c258614b2@7c2c258614b2 → [Updates: v0.0.0-20260629193524-2ea50dca914c]
• github.com/openshift/operator-custom-metrics v0.5.1
• github.com/openshift/osde2e-common v0.0.0-20260618165637-751e0d23bb9d@751e0d23bb9d
• github.com/operator-framework/operator-lib v0.19.0
• github.com/pkg/errors v0.9.1
• github.com/prometheus/client_golang v1.23.2
• github.com/prometheus/client_model v0.6.2
• github.com/stretchr/testify v1.11.1
• github.com/sykesm/zap-logfmt v0.0.4
• go.uber.org/zap v1.28.0
• golang.org/x/oauth2 v0.36.0
• google.golang.org/api v0.285.0 → [Updates: v0.286.0]
• k8s.io/api v0.36.2
• k8s.io/apiextensions-apiserver v0.36.2
• k8s.io/apimachinery v0.36.2
• k8s.io/client-go v0.36.2
• k8s.io/kube-openapi v0.0.0-20260618221249-bc653b64f974@bc653b64f974 → [Updates: v0.0.0-20260624041617-8f3fa4921821]
• sigs.k8s.io/controller-runtime v0.24.1
• github.com/eggsampler/acme/v3 v3.8.1
• cloud.google.com/go/auth v0.20.0
• cloud.google.com/go/auth/oauth2adapt v0.2.8
• cloud.google.com/go/compute/metadata v0.9.0
• github.com/Azure/go-autorest v14.2.0+incompatible
• github.com/Azure/go-autorest/autorest/adal v0.9.24
• github.com/Azure/go-autorest/autorest/azure/cli v0.4.7
• github.com/Azure/go-autorest/autorest/date v0.3.1
• github.com/Azure/go-autorest/logger v0.2.2
• github.com/Azure/go-autorest/tracing v0.6.1
• github.com/Masterminds/semver/v3 v3.5.0
• github.com/beorn7/perks v1.0.1
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/dimchansky/utfbom v1.1.1
• github.com/emicklei/go-restful/v3 v3.13.0
• github.com/evanphx/json-patch v5.9.11+incompatible
• github.com/evanphx/json-patch/v5 v5.9.11
• github.com/felixge/httpsnoop v1.1.0
• github.com/fsnotify/fsnotify v1.10.1
• github.com/fxamacker/cbor/v2 v2.9.2
• github.com/go-logr/stdr v1.2.2
• github.com/go-logr/zapr v1.3.0
• github.com/go-openapi/jsonpointer v0.23.1 → [Updates: v0.23.2]
• github.com/go-openapi/jsonreference v0.21.6
• github.com/go-openapi/swag v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/cmdutils v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/conv v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/fileutils v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/jsonname v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/jsonutils v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/loading v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/mangling v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/netutils v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/stringutils v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/typeutils v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/yamlutils v0.26.1 → [Updates: v0.27.0]
• github.com/go-task/slim-sprig/v3 v3.0.0
• github.com/golang-jwt/jwt/v4 v4.5.2 → [Updates: v5.3.1]
• github.com/google/gnostic-models v0.7.1
• github.com/google/go-cmp v0.7.0
• github.com/google/pprof v0.0.0-20260604005048-7023385849c0@7023385849c0
• github.com/google/s2a-go v0.1.9
• github.com/google/uuid v1.6.0
• github.com/googleapis/enterprise-certificate-proxy v0.3.16 → [Updates: v0.3.17]
• github.com/googleapis/gax-go/v2 v2.22.0
• github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674@e064f32e3674
• github.com/jmespath/go-jmespath v0.4.0
• github.com/json-iterator/go v1.1.12
• github.com/kylelemons/godebug v1.1.0
• github.com/mitchellh/go-homedir v1.1.0
• github.com/moby/spdystream v0.5.1
• github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd
• github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee@35a7c28c31ee
• github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822
• github.com/openshift/installer v1.4.22-ec5
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.92.0
• github.com/prometheus/common v0.69.0
• github.com/prometheus/procfs v0.20.1 → [Updates: v0.21.0]
• github.com/spf13/pflag v1.0.10
• github.com/x448/float16 v0.8.4
• go.opentelemetry.io/auto/sdk v1.2.1
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0
• go.opentelemetry.io/otel v1.44.0
• go.opentelemetry.io/otel/metric v1.44.0
• go.opentelemetry.io/otel/trace v1.44.0
• go.uber.org/multierr v1.11.0
• go.yaml.in/yaml/v2 v2.4.4 → [Updates: v3.0.4]
• go.yaml.in/yaml/v3 v3.0.4
• golang.org/x/crypto v0.53.0
• golang.org/x/mod v0.37.0
• golang.org/x/net v0.56.0
• golang.org/x/sync v0.21.0
• golang.org/x/sys v0.46.0
• golang.org/x/term v0.44.0
• golang.org/x/text v0.38.0
• golang.org/x/time v0.15.0
• golang.org/x/tools v0.46.0 → [Updates: v0.47.0]
• gomodules.xyz/jsonpatch/v2 v2.5.0 → [Updates: v3.0.1]
• google.golang.org/genproto/googleapis/rpc v0.0.0-20260618152121-87f3d3e198d3@87f3d3e198d3 → [Updates: v0.0.0-20260622175928-b703f567277d]
• google.golang.org/grpc v1.81.1
• google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af@f2248ac996af
• gopkg.in/evanphx/json-patch.v4 v4.13.0 → [Updates: v5.9.11]
• gopkg.in/inf.v0 v0.9.1
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/klog/v2 v2.140.0
• k8s.io/streaming v0.36.2
• k8s.io/utils v0.0.0-20260617174310-a95e086a2553@a95e086a2553 → [Updates: v0.0.0-20260626114624-be93311217bd]
• sigs.k8s.io/e2e-framework v0.7.0
• sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730@2d320260d730
• sigs.k8s.io/randfill v1.0.0
• sigs.k8s.io/structured-merge-diff/v6 v6.4.0
• sigs.k8s.io/yaml v1.6.0

tekton (6)

.tekton/certman-operator-e2e-pull-request.yaml

.tekton/certman-operator-e2e-push.yaml

.tekton/certman-operator-pko-pull-request.yaml

.tekton/certman-operator-pko-push.yaml

.tekton/certman-operator-pull-request.yaml

.tekton/certman-operator-push.yaml

[openshift-bot]

Issues go stale after 90d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle stale

[openshift-bot]

Stale issues rot after 30d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle rotten.
Rotten issues close after an additional 30d of inactivity.
Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle rotten
/remove-lifecycle stale

[openshift-bot]

Rotten issues close after 30d of inactivity.

Reopen the issue by commenting /reopen.
Mark the issue as fresh by commenting /remove-lifecycle rotten.
Exclude this issue from closing again by commenting /lifecycle frozen.

/close

[openshift-ci]

@openshift-bot: Closing this issue.

Details

In response to this:

Rotten issues close after 30d of inactivity.

Reopen the issue by commenting /reopen.
Mark the issue as fresh by commenting /remove-lifecycle rotten.
Exclude this issue from closing again by commenting /lifecycle frozen.

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-bot]

Rotten issues close after 30d of inactivity.

Reopen the issue by commenting /reopen.
Mark the issue as fresh by commenting /remove-lifecycle rotten.
Exclude this issue from closing again by commenting /lifecycle frozen.

/close not-planned

[openshift-ci]

@openshift-bot: Closing this issue, marking it as "Not Planned".

Details

In response to this:

Rotten issues close after 30d of inactivity.

Reopen the issue by commenting /reopen.
Mark the issue as fresh by commenting /remove-lifecycle rotten.
Exclude this issue from closing again by commenting /lifecycle frozen.

/close not-planned

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.