Dependency Dashboard

[red-hat-konflux]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information
• ⚠️ WARN: Some upgrade(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information
• ⚠️ WARN: Package lookup failures

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• OCM-00000 | ci: Update module github.com/go-logr/logr to v1.4.4

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package go.uber.org/mock: no-result, Failed to look up go package github.com/aws/aws-sdk-go-v2/service/s3: no-result, Failed to look up go package github.com/onsi/gomega: no-result.

Files affected: .bingo/mockgen.mod, go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• OCM-00000 | ci: Update Konflux references
• OCM-00000 | ci: Update aws-sdk (github.com/aws/aws-sdk-go-v2/service/route53, github.com/aws/aws-sdk-go-v2/service/servicequotas)
• OCM-00000 | ci: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26.5-1784190466
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• OCM-00000 | ci: Update github.com/nathan-fiscaletti/consolesize-go digest to 3bac975
• OCM-00000 | ci: Update bingo-tooling to v1.6.0
• OCM-00000 | ci: Update module github.com/alessio/shellescape to v1.6.0
• OCM-00000 | ci: Update helpers to v3
• OCM-00000 | ci: Update module github.com/dchest/validator to v1
• OCM-00000 | ci: Update module github.com/golang-jwt/jwt/v4 to v5
• OCM-00000 | ci: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v9

Detected Dependencies

dockerfile (5)

Dockerfile (1)

• registry.access.redhat.com/ubi9/go-toolset 1.26.5-1783931515 → [Updates: 1.26.5-1784190466, 9.8-1784190466]

Dockerfile.clients (1)

• registry.access.redhat.com/ubi9/go-toolset 1.26.5-1783931515 → [Updates: 1.26.5-1784190466, 9.8-1784190466]

images/Dockerfile.e2e (3)

• registry.access.redhat.com/ubi9/go-toolset 1.26.5-1783931515 → [Updates: 1.26.5-1784190466, 9.8-1784190466]
• registry.access.redhat.com/ubi9/go-toolset 1.26.5-1783931515 → [Updates: 1.26.5-1784190466, 9.8-1784190466]
• registry.access.redhat.com/ubi9/go-toolset 1.26.5-1783931515 → [Updates: 1.26.5-1784190466, 9.8-1784190466]

images/Dockerfile.konflux (1)

• registry.access.redhat.com/ubi9/go-toolset 1.26.5-1783931515 → [Updates: 1.26.5-1784190466, 9.8-1784190466]

images/Dockerfile.release

gomod (8)

.bingo/bingo.mod (2)

• go 1.26.3
• github.com/bwplotka/bingo v0.10.0

.bingo/gci.mod (2)

• go 1.26.3
• github.com/daixiang0/gci v0.14.0

.bingo/go-bindata.mod (2)

• go 1.26.3
• github.com/go-bindata/go-bindata v3.1.2+incompatible

.bingo/golangci-lint.mod (2)

• go 1.26.3
• github.com/golangci/golangci-lint/v2 v2.12.2

.bingo/goreleaser.mod (1)

• go 1.26.3

.bingo/govulncheck.mod (2)

• go 1.25.8
• golang.org/x/vuln v1.1.4 → [Updates: v1.6.0]

.bingo/mockgen.mod (2)

• go 1.26.3
• go.uber.org/mock v0.4.0

go.mod (50)

• go 1.26.3
• github.com/AlecAivazis/survey/v2 v2.3.7
• github.com/Masterminds/semver v1.5.0
• github.com/PuerkitoBio/goquery v1.12.0
• github.com/aws/aws-sdk-go-v2 v1.42.1
• github.com/aws/aws-sdk-go-v2/config v1.32.30
• github.com/aws/aws-sdk-go-v2/credentials v1.19.29
• github.com/aws/aws-sdk-go-v2/service/cloudformation v1.74.1
• github.com/aws/aws-sdk-go-v2/service/ec2 v1.316.1
• github.com/aws/aws-sdk-go-v2/service/iam v1.55.1
• github.com/aws/aws-sdk-go-v2/service/organizations v1.52.1 → [Updates: v1.52.2]
• github.com/aws/aws-sdk-go-v2/service/s3 v1.105.2
• github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.43.1
• github.com/aws/aws-sdk-go-v2/service/servicequotas v1.36.0 → [Updates: v1.36.1]
• github.com/aws/aws-sdk-go-v2/service/sts v1.44.1
• github.com/aws/smithy-go v1.27.4
• github.com/briandowns/spinner v1.23.2
• github.com/dchest/validator v0.0.0-20191217151620-8e45250f2371@8e45250f2371 → [Updates: v1.0.0]
• github.com/dustin/go-humanize v1.0.1
• github.com/golang-jwt/jwt/v4 v4.5.2 → [Updates: v5.3.1]
• github.com/golang/glog v1.2.5
• github.com/google/go-cmp v0.7.0
• github.com/google/uuid v1.6.0
• github.com/hashicorp/go-version v1.9.0
• github.com/nathan-fiscaletti/consolesize-go v0.0.0-20210105204122-a87d9f614b9d@a87d9f614b9d → [Updates: v0.0.0-20260406063853-3bac975de715]
• github.com/onsi/ginkgo/v2 v2.32.0
• github.com/onsi/gomega v1.42.1
• github.com/openshift-online/ocm-api-model/clientapi v0.0.461
• github.com/openshift-online/ocm-common v0.0.44
• github.com/openshift-online/ocm-sdk-go v0.1.505
• github.com/pkg/errors v0.9.1
• github.com/robfig/cron/v3 v3.0.1
• github.com/sirupsen/logrus v1.9.4
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/zgalor/weberr v0.9.0
• gitlab.com/c0b/go-ordered-json v0.0.0-20201030195603-febf46534d5a@febf46534d5a
• go.uber.org/mock v0.6.0
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/apimachinery v0.36.2
• k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3@cf1189d6abe3
• sigs.k8s.io/yaml v1.6.0
• github.com/alessio/shellescape v1.4.1 → [Updates: v1.6.0]
• github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.79.1
• github.com/aws/aws-sdk-go-v2/service/route53 v1.64.0 → [Updates: v1.64.1]
• github.com/go-logr/logr v1.4.3 → [Updates: v1.4.4]
• golang.org/x/crypto v0.54.0
• golang.org/x/text v0.40.0
• gopkg.in/yaml.v2 v2.4.0 → [Updates: v3.0.1]
• github.com/kubermatic/glog-logrus v0.0.0-20180829085450-3fa5b9870d1d@3fa5b9870d1d

regex (1)

hack/govulncheck.sh (1)

• jqlang/jq 1.8.2

tekton (1)

.tekton/rosa-github-release.yaml (19)

• quay.io/konflux-ci/tekton-catalog/task-init 0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08
• quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta 0.2@sha256:e5ba1f8549e6a0f043629ef00bea7511957121e05304b688f40ff12304560f38
• quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta 0.3@sha256:92956e75cd4714286f9c0c043f5301d1c0df1d750884edeceee87e0a91cc1975
• quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta 0.10@sha256:daa9a28265b8d92033ac94f610ff6bc3135e1b2cbf65076af74a76dd940a46a9
• quay.io/konflux-ci/tekton-catalog/task-build-image-index 0.3@sha256:70c52e88e737340e7b58418fda38c13273aa7cdf587b825778e3560aca1d1133
• quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta 0.3@sha256:2dd5b3e88f2ff3ea5679dfae07a14ee840b828610edd0c2e1ff2d8b25e808fe2
• quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.5@sha256:0ccc688a77e9b7b0b8973c132a1e840844137e77f887be4a0bec8893b0776872
• quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.3@sha256:f5b4415db9ac1fba3e11d993a617e0b275d1f0ed2fc669b12c400ed848c39174
• quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 0.2@sha256:2e5ebe0b462fd19d85ad314f2709a27b905b729046b5d9bce282b10d333e9d6c
• quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta 0.5@sha256:b865be59a6ea0cf86e08fc8085784981a00f2c6f9d9018d4f62f210b9c572ae0
• quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.3@sha256:53a02326bfb930ca5ef6bfa7a33acca833d57752f34f3cb79255fe2e25e7d217
• quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta 0.3@sha256:e92d00ed858233d0096627861192d3e4fc013cf1559c0d0b0ea0657d3377ce75
• quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check 0.2@sha256:8b501440a960aec446db2ebc6625a49d0317a9fc7bf0f7bd9b18cb63052db7de
• quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta 0.1@sha256:2e8a61aaaacd8939b01b50cc1cb1abeb8ce377be824630c45401e96114744bff
• quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta 0.4@sha256:924deef20c28aea91528879a423761c47d09b5f4d6aa9946db352c0aa371439e
• quay.io/konflux-ci/tekton-catalog/task-apply-tags 0.3@sha256:6387614ae4f9efa8abb7c4175db0ce5d958bc2b90665b4704880e46fbe0535bf
• quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta 0.3@sha256:f3e97e6eaf09d6585e915c3e7b82d110d97e34202bf591a2d990127ba5bb362d
• quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2@sha256:53678a169a41152bb6a4ea69d2a345fff8124e857b4146bf9ba45a4f0385a8bb → [Updates: 0.2]
• quay.io/konflux-ci/tekton-catalog/task-show-sbom 0.1@sha256:8fe70a95c28b1ac92abd67a7477ad960218f3f570a9f8a12ad082dff7e9c9579