Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (12)

Datasource	Package	Last Updated
gomod	github.com/Masterminds/sprig/v3	2024-08-29
gomod	github.com/atotto/clipboard	2021-02-24
gomod	github.com/google/go-cmp	2025-02-21
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/jmespath/go-jmespath	2020-09-18
gomod	github.com/muesli/reflow	2021-05-17
gomod	github.com/muesli/termenv	2025-02-21
gomod	github.com/segmentio/cli	2024-02-09
gomod	github.com/spf13/pflag	2025-09-02
gomod	github.com/spf13/viper	2025-09-08
gomod	gopkg.in/yaml.v3	2022-05-27
gomod	sigs.k8s.io/yaml	2025-07-24

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update github/gh-aw-actions action to v0.89.21

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update alpine:3 docker digest to 294b683
• fix(deps): update github.com/kong/sdk-konnect-go digest to 64878de
• chore(deps): update dependency goreleaser/goreleaser to v2.18.2
• chore(deps): update zgosalvez/github-actions-ensure-sha-pinned-actions action to v5.0.9
• fix(deps): update all non-major dependencies with stable versions (@types/node, astro, jsdom, prettier, prettier-plugin-astro, vitest)
• fix(deps): update module charm.land/bubbletea/v2 to v2.0.10
• fix(deps): update module github.com/daveshanley/vacuum to v0.30.6
• chore(deps): update docker/build-push-action action to v7.4.0
• chore(deps): update docker/setup-buildx-action action to v4.4.1
• chore(deps): update docker/setup-qemu-action action to v4.4.0
• chore(deps): update golangci-lint to v2.14.0 (golangci-lint, golangci/golangci-lint)
• chore(deps): update kong/ksai-public action to v3.106.0
• chore(deps): update dependency macos to v26
• chore(deps): update dependency ubuntu to v26

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package Homebrew/actions).

Files affected: .github/workflows/apple-signing-validation.yml, .github/workflows/homebrew-packaging-validation.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): lock file maintenance

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update module github.com/charmbracelet/glamour to v2

Detected Dependencies

asdf (1)

.tool-versions (2)

• golangci-lint 2.13.2 → [Updates: 2.14.0]
• node 24.21.0

dockerfile (1)

Dockerfile (2)

• alpine 3@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b → [Updates: 3]
• alpine 3@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b → [Updates: 3]

github-actions (20)

.github/workflows/adhoc-prerelease-cleanup.yml

.github/workflows/adhoc-prerelease.yml (6)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• goreleaser/goreleaser v2.18.1 → [Updates: v2.18.2]

.github/workflows/apple-notary-diagnostics.yml (6)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• macos 15 → [Updates: 26]

.github/workflows/apple-signing-validation.yml (17)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• Homebrew/actions 2026.08.31@3cdb78d0f62ad29dd32de765782654f4eedea607
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• Homebrew/actions 2026.08.31@3cdb78d0f62ad29dd32de765782654f4eedea607
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• macos 15 → [Updates: 26]
• goreleaser/goreleaser v2.18.1 → [Updates: v2.18.2]
• ubuntu 24.04 → [Updates: 26.04]

.github/workflows/checks.yaml (4)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1

.github/workflows/copilot-setup-steps.yml (2)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• github/gh-aw-actions v0.89.17@f3b81cdb3070066a47faa9bdf440f4f1dc78b1f0 → [Updates: v0.89.21]

.github/workflows/declarative-benchmark.yaml (4)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/docker-publish.yml (10)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/setup-qemu-action v4.3.0@1f40c72289eff860ee54a304f1438e3cff362e0a → [Updates: v4.4.0]
• docker/setup-buildx-action v4.3.0@37fe631027851001ddb9b187196cc803df7f5f0e → [Updates: v4.4.1]
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a → [Updates: v7.4.0]
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a → [Updates: v7.4.0]

.github/workflows/e2e-main-debounce.yaml (1)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1

.github/workflows/e2e-replay.yaml (11)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/e2e-required-status.yaml (4)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3

.github/workflows/e2e.yaml (42)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• kong/setup-deck v1.7.1@6ea0a466ee5826ddb531cbe851ba8e5a77a0e041
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/homebrew-packaging-validation.yml (10)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• Homebrew/actions 2026.08.31@3cdb78d0f62ad29dd32de765782654f4eedea607
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• Homebrew/actions 2026.08.31@3cdb78d0f62ad29dd32de765782654f4eedea607
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• ubuntu 24.04 → [Updates: 26.04]

.github/workflows/ksai.yaml (3)

• Kong/ksai-public v3.104.1@b48732f9f399390aac5145e83f55fef27dfee884 → [Updates: v3.106.0]
• Kong/ksai-public v3.104.1@b48732f9f399390aac5145e83f55fef27dfee884 → [Updates: v3.106.0]
• Kong/ksai-public v3.104.1@b48732f9f399390aac5145e83f55fef27dfee884 → [Updates: v3.106.0]

.github/workflows/sdk-prerelease-preview.yml (6)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3

.github/workflows/security.yaml (3)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• zgosalvez/github-actions-ensure-sha-pinned-actions v5.0.8@60e3a74c7b74a319e8e53e46bc455205f7173e1a → [Updates: v5.0.9]

.github/workflows/site-checks.yaml (5)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• node 24

.github/workflows/site-pages.yaml (8)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• actions/configure-pages v6.0.0@45bfe0192ca1faeb007ade9deae92b16b8254a0d
• actions/upload-pages-artifact v5.0.0@fc324d3547104276b827a68afc52ff2a11cc49c9
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/deploy-pages v5.0.1@368f82528645a54fb793d4d04e342629a3f51346
• node 24

.github/workflows/sync-get-konghq-installer.yml (4)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/test.yaml (5)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• golangci/golangci-lint-action v9.3.0@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• golangci/golangci-lint v2.13.2 → [Updates: v2.14.0]

gomod (2)

docs/examples/extensions/go/go.mod (2)

• go 1.26.8
• github.com/kong/kongctl v1.17.0

go.mod (40)

• go 1.26.8
• charm.land/bubbles/v2 v2.2.1
• charm.land/bubbletea/v2 v2.0.9 → [Updates: v2.0.10]
• charm.land/lipgloss/v2 v2.0.6
• github.com/Kong/sdk-konnect-go v0.68.2-0.20260922202403-4d68939eb6fd@4d68939eb6fd → [Updates: v0.68.2-0.20260922202403-4d68939eb6fd]
• github.com/Masterminds/semver/v3 v3.5.0
• github.com/Masterminds/sprig/v3 v3.3.0
• github.com/ajg/form v1.9.0
• github.com/alecthomas/chroma/v2 v2.27.0
• github.com/atotto/clipboard v0.1.4
• github.com/charmbracelet/colorprofile v0.4.3
• github.com/charmbracelet/glamour v1.0.0 → [Updates: v2.0.1]
• github.com/charmbracelet/x/ansi v0.11.8
• github.com/daveshanley/vacuum v0.30.3 → [Updates: v0.30.6]
• github.com/google/go-cmp v0.7.0
• github.com/google/uuid v1.6.0
• github.com/itchyny/gojq v0.12.19
• github.com/jmespath/go-jmespath v0.4.0
• github.com/kong/go-apiops v0.4.6
• github.com/lrstanley/bubbletint/v2 v2.0.2
• github.com/lucasb-eyer/go-colorful v1.4.1
• github.com/mattn/go-isatty v0.0.24
• github.com/mattn/go-runewidth v0.0.30
• github.com/muesli/reflow v0.3.0
• github.com/muesli/termenv v0.16.0
• github.com/oapi-codegen/oapi-codegen/v2 v2.8.0
• github.com/oapi-codegen/runtime v1.7.0
• github.com/santhosh-tekuri/jsonschema/v6 v6.0.3
• github.com/segmentio/cli v0.8.1
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/spf13/viper v1.21.0
• github.com/stretchr/testify v1.12.1
• go.yaml.in/yaml/v4 v4.0.0-rc.6
• golang.org/x/sync v0.23.0
• golang.org/x/sys v0.48.0
• golang.org/x/term v0.46.0
• golang.org/x/text v0.42.0
• gopkg.in/yaml.v3 v3.0.1
• sigs.k8s.io/yaml v1.6.0

npm (1)

site/package.json (13)

• @fontsource-variable/funnel-sans 5.3.0
• @fontsource-variable/roboto-mono 5.3.0
• astro 7.3.2 → [Updates: 7.3.5]
• yaml 2.9.1
• @astrojs/check 0.9.10
• @playwright/test 1.63.0
• @types/node 24.13.4 → [Updates: 24.13.6]
• jsdom 30.0.1 → [Updates: 30.1.1]
• prettier 3.9.6 → [Updates: 3.9.9]
• prettier-plugin-astro 1.0.0 → [Updates: 1.0.1]
• typescript 6.0.3
• vitest 5.0.0 → [Updates: 5.0.1]
• node >=24

pip_requirements (1)

scripts/e2e_replay_requirements.txt (1)

• PyYAML ==6.0.3

regex (1)

.github/workflows/checks.yaml (1)

• up-to-date 4.0.0@11e80bb231ae182696a52f7ec7b0b9fae53303bf

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository