Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (18)

Datasource	Package	Last Updated
github-actions	CycloneDX/gh-gomod-generate-sbom	2023-06-05
github-actions	amannn/action-semantic-pull-request	2025-08-22
gomod	github.com/dimiro1/banner	2021-01-04
gomod	github.com/google/go-cmp	2025-02-21
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/gorilla/mux	2023-11-05
gomod	github.com/hashicorp/go-memdb	2025-02-27
gomod	github.com/open-feature/flagd-schemas	2025-09-03
gomod	github.com/robfig/cron/v3	2020-01-04
gomod	github.com/rs/cors	2024-08-29
gomod	github.com/rs/xid	2024-08-23
gomod	github.com/spf13/pflag	2025-09-02
gomod	github.com/spf13/viper	2025-09-08
gomod	go.uber.org/mock	2025-08-18
gomod	gopkg.in/yaml.v3	2022-05-27

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/configure-pages action to v6
• chore(deps): update actions/deploy-pages action to v5
• chore(deps): update actions/github-script action to v9
• chore(deps): update actions/setup-go action to v7
• chore(deps): update actions/upload-pages-artifact action to v5
• chore(deps): update amannn/action-semantic-pull-request action to v6
• chore(deps): update codecov/codecov-action action to v7
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update docker/setup-qemu-action action to v4
• chore(deps): update github/codeql-action action to v4
• chore(deps): update marocchino/sticky-pull-request-comment action to v3
• chore(deps): update softprops/action-gh-release action to v3
• 🔐 Create all pending approval PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/deploy-pages action to v4.0.5
• chore(deps): update actions/upload-pages-artifact action to v3.0.1
• chore(deps): update module buf.build/gen/go/open-feature/flagd/grpc/go to v1.6.2-20260824202443-4824facda674.1
• chore(deps): update module buf.build/gen/go/open-feature/flagd/protocolbuffers/go to v1.36.12-20260824202443-4824facda674.2
• chore(deps): update module github.com/mattn/go-colorable to v0.1.15
• chore(deps): update module github.com/open-feature/open-feature-operator/api to v0.2.50
• chore(deps): update module github.com/santhosh-tekuri/jsonschema/v6 to v6.0.3
• chore(deps): update module github.com/spf13/pflag to v1.0.10
• chore(deps): update module google.golang.org/protobuf to v1.36.12
• chore(deps): update actions/checkout action to v4.4.0
• chore(deps): update actions/github-script action to v7.1.0
• chore(deps): update actions/setup-go action to v5.6.0
• chore(deps): update amannn/action-semantic-pull-request action to v5.5.3
• chore(deps): update aquasecurity/trivy-action action to v0.36.0
• chore(deps): update codecov/codecov-action action to v4.6.0
• chore(deps): update docker/build-push-action action to v5.4.0
• chore(deps): update docker/setup-buildx-action action to v3.12.0
• chore(deps): update docker/setup-qemu-action action to v3.7.0
• chore(deps): update github/codeql-action action to v3.38.2
• chore(deps): update kubernetes monorepo to v0.37.1 (k8s.io/apimachinery, k8s.io/client-go)
• chore(deps): update marocchino/sticky-pull-request-comment action to v2.9.4
• chore(deps): update module buf.build/gen/go/open-feature/flagd/connectrpc/go to v1.21.0-20260824202443-4824facda674.1
• chore(deps): update module connectrpc.com/connect to v1.21.0
• chore(deps): update module connectrpc.com/otelconnect to v0.10.0
• chore(deps): update module github.com/diegoholiveira/jsonlogic/v3 to v3.10.1
• chore(deps): update module github.com/fsnotify/fsnotify to v1.10.1
• chore(deps): update module github.com/klauspost/compress to v1.20.1
• chore(deps): update module github.com/launchdarkly/eventsource to v1.14.0
• chore(deps): update module github.com/open-feature/flagd/core to v0.18.0
• chore(deps): update module github.com/prometheus/client_golang to v1.24.1
• chore(deps): update module github.com/spf13/cobra to v1.10.2
• chore(deps): update module github.com/spf13/viper to v1.21.0
• chore(deps): update module github.com/stretchr/testify to v1.12.1
• chore(deps): update module github.com/twmb/murmur3 to v1.2.0
• chore(deps): update module go.uber.org/mock to v0.6.0
• chore(deps): update module go.uber.org/zap to v1.28.0
• chore(deps): update module gocloud.dev to v0.46.0
• chore(deps): update module golang.org/x/mod to v0.41.0
• chore(deps): update module golang.org/x/net to v0.59.0
• chore(deps): update module golang.org/x/oauth2 to v0.37.0
• chore(deps): update module golang.org/x/sync to v0.23.0
• chore(deps): update module google.golang.org/grpc to v1.84.0
• chore(deps): update opentelemetry-go monorepo (go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/prometheus, go.opentelemetry.io/otel/metric, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/sdk/metric, go.opentelemetry.io/otel/trace)
• chore(deps): update opentelemetry-go-contrib monorepo to v0.71.0 (go.opentelemetry.io/contrib/exporters/autoexport, go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc, go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp)
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update github/codeql-action digest to 1190a97
• chore(deps): update dependency ubuntu to v26

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package marocchino/sticky-pull-request-comment).

Files affected: .github/workflows/lint-pr.yaml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(security): update vulnerability-updates [security] (go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc, go.opentelemetry.io/otel/exporters/otlp/otlptrace, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/sdk/log)
• chore(deps): update actions/checkout digest to 11d5960
• chore(deps): update actions/deploy-pages digest to d6db901
• chore(deps): update actions/github-script digest to f28e40c
• chore(deps): update actions/setup-go digest to 40f1582
• chore(deps): update actions/upload-pages-artifact digest to 56afc60
• chore(deps): update amannn/action-semantic-pull-request digest to e32d7e6
• chore(deps): update codecov/codecov-action digest to b9fd7d1
• chore(deps): update docker/build-push-action digest to ca052bb
• chore(deps): update golang:1.27-alpine docker digest to 8a5910f
• chore(deps): update golang.org/x/exp digest to 85c1c22
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (3)

flagd-proxy/build.Dockerfile (2)

• golang 1.27-alpine@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc → [Updates: 1.27-alpine]
• gcr.io/distroless/static nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3

flagd/build.Dockerfile (2)

• golang 1.27-alpine@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc → [Updates: 1.27-alpine]
• gcr.io/distroless/static nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3

flagd/profile.Dockerfile (2)

• golang 1.27-alpine@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc → [Updates: 1.27-alpine]
• gcr.io/distroless/static nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3

github-actions (5)

.github/workflows/build.yaml (18)

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.4.0, v7.0.1, v4]
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 → [Updates: v5.6.0, v7.0.0, v5]
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.4.0, v7.0.1, v4]
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 → [Updates: v5.6.0, v7.0.0, v5]
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.4.0, v7.0.1, v4]
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 → [Updates: v5.6.0, v7.0.0, v5]
• codecov/codecov-action v4@e0b68c6749509c5f83f984dd99a76a1c1a231044 → [Updates: v4.6.0, v7.1.1, v4]
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.4.0, v7.0.1, v4]
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 → [Updates: v5.6.0, v7.0.0, v5]
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.4.0, v7.0.1, v4]
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 → [Updates: v5.6.0, v7.0.0, v5]
• docker/setup-qemu-action v3@c7c53464625b32c7a7e944ae62b3e17d2b600130 → [Updates: v3.7.0, v4.4.0]
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v3.12.0, v4.4.1]
• docker/build-push-action v5@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 → [Updates: v5.4.0, v7.4.0, v5]
• aquasecurity/trivy-action v0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 → [Updates: v0.36.0]
• github/codeql-action v3@e8893c57a1f3a2b659b6b55564fdfdbbd2982911 → [Updates: v3.38.2, v4.38.2, v3]
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.4.0, v7.0.1, v4]
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 → [Updates: v5.6.0, v7.0.0, v5]

.github/workflows/dev-benches-page.yml (4)

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.4.0, v7.0.1, v4]
• actions/configure-pages v4@1f0c5cde4bc74cd7e1254d0cb4de8d49e9068c7d → [Updates: v6.0.0]
• actions/upload-pages-artifact v3@0252fc4ba7626f0298f0cf00902a25c6afc77fa8 → [Updates: v3.0.1, v5.0.0, v3]
• actions/deploy-pages v4@87c3283f01cd6fe19a0ab93a23b2f6fcba5a8e42 → [Updates: v4.0.5, v5.0.1, v4]

.github/workflows/lint-pr.yaml (3)

• amannn/action-semantic-pull-request v5@e9fabac35e210fea40ca5b14c0da95a099eff26f → [Updates: v5.5.3, v6.1.1, v5]
• marocchino/sticky-pull-request-comment v2@331f8f5b4215f0445d3c07b4967662a32a2d3e31 → [Updates: v2.9.4, v3.0.5]
• marocchino/sticky-pull-request-comment v2@331f8f5b4215f0445d3c07b4967662a32a2d3e31 → [Updates: v2.9.4, v3.0.5]

.github/workflows/markdown-checks.yaml (2)

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.4.0, v7.0.1, v4]
• ubuntu 22.04 → [Updates: 26.04]

.github/workflows/release-please.yaml (12)

• googleapis/release-please-action v5@45996ed1f6d02564a971a2fa1b5860e934307cf7
• actions/github-script v7@60a0d83039c74a4aee543508d2ffcb1c3799cdea → [Updates: v7.1.0, v9.0.0, v7]
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.4.0, v7.0.1, v4]
• docker/setup-qemu-action v3@c7c53464625b32c7a7e944ae62b3e17d2b600130 → [Updates: v3.7.0, v4.4.0]
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v3.12.0, v4.4.1]
• docker/build-push-action v5@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 → [Updates: v5.4.0, v7.4.0, v5]
• docker/build-push-action v5@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 → [Updates: v5.4.0, v7.4.0, v5]
• softprops/action-gh-release v1@de2c0eb89ae2a093876385947365aca7b0e5f844 → [Updates: v3.0.3]
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.4.0, v7.0.1, v4]
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 → [Updates: v5.6.0, v7.0.0, v5]
• CycloneDX/gh-gomod-generate-sbom v2@efc74245d6802c8cefd925620515442756c70d8f
• softprops/action-gh-release v1@de2c0eb89ae2a093876385947365aca7b0e5f844 → [Updates: v3.0.3]

gomod (3)

core/go.mod (42)

• go 1.26.0
• buf.build/gen/go/open-feature/flagd/grpc/go v1.6.1-20260217192757-1388a552fc3c.1@1388a552fc3c → [Updates: v1.6.2-20260824202443-4824facda674.1]
• buf.build/gen/go/open-feature/flagd/protocolbuffers/go v1.36.11-20260217192757-1388a552fc3c.1@1388a552fc3c → [Updates: v1.36.12-20260824202443-4824facda674.2]
• connectrpc.com/connect v1.19.1 → [Updates: v1.21.0]
• connectrpc.com/otelconnect v0.7.2 → [Updates: v0.10.0]
• github.com/diegoholiveira/jsonlogic/v3 v3.9.1 → [Updates: v3.10.1]
• github.com/fsnotify/fsnotify v1.9.0 → [Updates: v1.10.1]
• github.com/google/go-cmp v0.7.0
• github.com/google/uuid v1.6.0
• github.com/hashicorp/go-memdb v1.3.5
• github.com/open-feature/flagd-schemas v0.2.13
• github.com/open-feature/open-feature-operator/api v0.2.47 → [Updates: v0.2.50]
• github.com/prometheus/client_golang v1.23.2 → [Updates: v1.24.1]
• github.com/robfig/cron/v3 v3.0.1
• github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 → [Updates: v6.0.3]
• github.com/stretchr/testify v1.11.1 → [Updates: v1.12.1]
• github.com/twmb/murmur3 v1.1.8 → [Updates: v1.2.0]
• go.opentelemetry.io/contrib/exporters/autoexport v0.67.0 → [Updates: v0.71.0]
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 → [Updates: v0.71.0]
• go.opentelemetry.io/otel v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/exporters/prometheus v0.64.0 → [Updates: v0.68.0]
• go.opentelemetry.io/otel/metric v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/sdk v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/sdk/metric v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/trace v1.45.0 → [Updates: v1.46.0]
• go.uber.org/mock v0.5.2 → [Updates: v0.6.0]
• go.uber.org/zap v1.27.0 → [Updates: v1.28.0]
• gocloud.dev v0.42.0 → [Updates: v0.46.0]
• golang.org/x/exp v0.0.0-20250210185358-939b2ce775ac@939b2ce775ac → [Updates: v0.0.0-20260908205506-85c1c2202aba]
• golang.org/x/mod v0.38.0 → [Updates: v0.41.0]
• golang.org/x/oauth2 v0.36.0 → [Updates: v0.37.0]
• golang.org/x/sync v0.22.0 → [Updates: v0.23.0]
• google.golang.org/grpc v1.83.2 → [Updates: v1.84.0]
• google.golang.org/protobuf v1.36.11 → [Updates: v1.36.12]
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/apimachinery v0.33.2 → [Updates: v0.37.1]
• k8s.io/client-go v0.33.2 → [Updates: v0.37.1]
• go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.18.0 → [Updates: v0.21.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.43.0 → [Updates: v1.45.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.42.0 → [Updates: v1.45.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0 → [Updates: v1.45.0]
• go.opentelemetry.io/otel/sdk/log v0.19.0 → [Updates: v0.21.0]

flagd-proxy/go.mod (17)

• go 1.27
• buf.build/gen/go/open-feature/flagd/grpc/go v1.6.1-20260217192757-1388a552fc3c.1@1388a552fc3c → [Updates: v1.6.2-20260824202443-4824facda674.1]
• buf.build/gen/go/open-feature/flagd/protocolbuffers/go v1.36.11-20260217192757-1388a552fc3c.1@1388a552fc3c → [Updates: v1.36.12-20260824202443-4824facda674.2]
• github.com/dimiro1/banner v1.1.0
• github.com/mattn/go-colorable v0.1.14 → [Updates: v0.1.15]
• github.com/open-feature/flagd/core v0.15.6 → [Updates: v0.18.0]
• github.com/prometheus/client_golang v1.23.2 → [Updates: v1.24.1]
• github.com/spf13/cobra v1.9.1 → [Updates: v1.10.2]
• github.com/spf13/viper v1.20.1 → [Updates: v1.21.0]
• go.opentelemetry.io/otel/exporters/prometheus v0.64.0 → [Updates: v0.68.0]
• go.opentelemetry.io/otel/metric v1.44.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/sdk/metric v1.44.0 → [Updates: v1.46.0]
• go.uber.org/zap v1.27.0 → [Updates: v1.28.0]
• golang.org/x/net v0.58.0 → [Updates: v0.59.0]
• golang.org/x/sync v0.22.0 → [Updates: v0.23.0]
• google.golang.org/grpc v1.83.2 → [Updates: v1.84.0]
• go.opentelemetry.io/otel/sdk v1.44.0 → [Updates: v1.45.0]

flagd/go.mod (34)

• go 1.27
• buf.build/gen/go/open-feature/flagd/connectrpc/go v1.19.1-20260217192757-1388a552fc3c.2@1388a552fc3c → [Updates: v1.21.0-20260824202443-4824facda674.1]
• buf.build/gen/go/open-feature/flagd/grpc/go v1.6.1-20260217192757-1388a552fc3c.1@1388a552fc3c → [Updates: v1.6.2-20260824202443-4824facda674.1]
• buf.build/gen/go/open-feature/flagd/protocolbuffers/go v1.36.11-20260217192757-1388a552fc3c.1@1388a552fc3c → [Updates: v1.36.12-20260824202443-4824facda674.2]
• connectrpc.com/connect v1.19.1 → [Updates: v1.21.0]
• github.com/dimiro1/banner v1.1.0
• github.com/gorilla/mux v1.8.1
• github.com/klauspost/compress v1.18.0 → [Updates: v1.20.1]
• github.com/launchdarkly/eventsource v1.11.0 → [Updates: v1.14.0]
• github.com/mattn/go-colorable v0.1.14 → [Updates: v0.1.15]
• github.com/open-feature/flagd/core v0.17.0 → [Updates: v0.18.0]
• github.com/prometheus/client_golang v1.23.2 → [Updates: v1.24.1]
• github.com/rs/cors v1.11.1
• github.com/rs/xid v1.6.0
• github.com/spf13/cobra v1.9.1 → [Updates: v1.10.2]
• github.com/spf13/pflag v1.0.6 → [Updates: v1.0.10]
• github.com/spf13/viper v1.20.1 → [Updates: v1.21.0]
• github.com/stretchr/testify v1.11.1 → [Updates: v1.12.1]
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.62.0 → [Updates: v0.71.0]
• go.opentelemetry.io/otel v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/sdk v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/sdk/metric v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/trace v1.45.0 → [Updates: v1.46.0]
• go.uber.org/mock v0.5.2 → [Updates: v0.6.0]
• go.uber.org/zap v1.27.0 → [Updates: v1.28.0]
• golang.org/x/net v0.58.0 → [Updates: v0.59.0]
• golang.org/x/sync v0.22.0 → [Updates: v0.23.0]
• google.golang.org/grpc v1.83.2 → [Updates: v1.84.0]
• google.golang.org/protobuf v1.36.11 → [Updates: v1.36.12]
• go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.18.0 → [Updates: v0.21.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.43.0 → [Updates: v1.45.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.42.0 → [Updates: v1.45.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0 → [Updates: v1.45.0]
• go.opentelemetry.io/otel/sdk/log v0.19.0 → [Updates: v0.21.0]

---

• Check this box to trigger a request for Renovate to run again on this repository

[kunalworldwide]

@/tmp/f1.txt