Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Pending Status Checks

These updates await pending status checks. To force their creation now, click the checkbox below.

• chore(deps): update module sigs.k8s.io/controller-runtime to v0.20.1
• chore(deps-dev): update github/codeql-action action to v3.28.5
• chore(deps-dev): update anchore/sbom-action action to v0.18.0

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update module gopkg.in/yaml.v2 to v3

Detected dependencies

dockerfile

Dockerfile

• gcr.io/distroless/static latest@sha256:3f2b64ef97bd285e36132c684e6b2ae8f2723293d09aae046196cca64251acac

github-actions

.github/workflows/main.yaml

• step-security/harden-runner v2.10.4@cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• shogo82148/actions-goveralls v1.9.1@e6875f831db61e6abffbd8df91a2eb6cd24b46c9

.github/workflows/pr-actions.yaml

• step-security/harden-runner v2.10.4@cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• zgosalvez/github-actions-ensure-sha-pinned-actions v3.0.20@c3a2b64f69b7a1542a68f44d9edbd9ec3fc1455e

.github/workflows/pr-build.yaml

• step-security/harden-runner v2.10.4@cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78
• actions/setup-python v5.3.0@0b93645e9fea7318ecaed2b359559ac225c90a2b
• helm/chart-testing-action v2.7.0@0d28d3144d3a25ea2cc349d6e59901c4ff469b3b
• step-security/harden-runner v2.10.4@cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• step-security/harden-runner v2.10.4@cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• step-security/harden-runner v2.10.4@cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• step-security/harden-runner v2.10.4@cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• engineerd/setup-kind v0.5.0@aa272fe2a7309878ffc2a81c56cfe3ef108ae7d0
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• imranismail/setup-kustomize v2.1.0@2ba527d4d055ab63514ba50a99456fc35684947f
• step-security/harden-runner v2.10.4@cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78
• actions/setup-python v5.3.0@0b93645e9fea7318ecaed2b359559ac225c90a2b
• helm/chart-testing-action v2.7.0@0d28d3144d3a25ea2cc349d6e59901c4ff469b3b
• helm/kind-action v1.12.0@a1b0e391336a6ee6713a0583f8c6240d70863de3
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16

.github/workflows/pr-goreleaser.yaml

• step-security/harden-runner v2.10.4@cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• goreleaser/goreleaser-action v6.1.0@9ed2f89a662bf1735a48bc8557fd212fa902bebf

.github/workflows/pr-label.yaml

• step-security/harden-runner v2.10.4@cb605e52c26070c328afc4562f0b4ada7618a84e
• pascalgn/size-label-action 6ec5bd0f81af1bd8d691180fbf04453b2c4b1642

.github/workflows/pr-stale.yaml

• actions/stale v9.1.0@5bef64f19d7facfb25b37b414482c7164d639639

.github/workflows/pr-trivy.yaml

• step-security/harden-runner v2.10.4@cb605e52c26070c328afc4562f0b4ada7618a84e
• aquasecurity/trivy-action 0.29.0@18f2510ee396bbf400402947b394f2dd8c87dbb0
• github/codeql-action v3.28.2@d68b2d4edb4189fd2a5366ac14e72027bd4b37dd

.github/workflows/rebase.yaml

• step-security/harden-runner v2.10.4@cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• cirrus-actions/rebase 1.8@b87d48154a87a85666003575337e27b8cd65f691

.github/workflows/release.yaml

• step-security/harden-runner v2.10.4@cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• sigstore/cosign-installer v3.7.0@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
• anchore/sbom-action v0.17.9@df80a981bc6edbc4e220a492d3cbe9f5547a6e75
• goreleaser/goreleaser-action v6.1.0@9ed2f89a662bf1735a48bc8557fd212fa902bebf
• step-security/harden-runner v2.10.4@cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78
• sigstore/cosign-installer v3.7.0@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da

.github/workflows/report-on-vulnerabilities.yaml

• step-security/harden-runner v2.10.4@cb605e52c26070c328afc4562f0b4ada7618a84e
• aquasecurity/trivy-action 0.29.0@18f2510ee396bbf400402947b394f2dd8c87dbb0
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• step-security/harden-runner v2.10.4@cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5

.github/workflows/scan.yaml

• step-security/harden-runner v2.10.4@cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818

.github/workflows/scorecard.yaml

• step-security/harden-runner v2.10.4@cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• github/codeql-action v3.28.2@d68b2d4edb4189fd2a5366ac14e72027bd4b37dd

gomod

go.mod

• go 1.23.0
• go 1.23.5
• github.com/fluxcd/pkg/runtime v0.52.0
• github.com/go-logr/logr v1.4.2
• github.com/kylelemons/godebug v1.1.0
• github.com/onsi/ginkgo/v2 v2.22.2
• github.com/onsi/gomega v1.36.2
• github.com/spf13/pflag v1.0.5
• github.com/stretchr/testify v1.10.0
• gopkg.in/yaml.v2 v2.4.0
• k8s.io/api v0.32.1
• k8s.io/apimachinery v0.32.1
• k8s.io/client-go v0.32.1
• sigs.k8s.io/controller-runtime v0.20.0

helm-values

chart/ratelimit-controller/values.yaml

• quay.io/brancz/kube-rbac-proxy v0.18.2

kustomize

config/base/manager/kustomization.yaml

• ghcr.io/doodlescheduling/ratelimit-controller v2.2.0

---

• Check this box to trigger a request for Renovate to run again on this repository