Dependency Dashboard

[red-hat-konflux-kflux-prd-rh02]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• OCM-00000 | ci: Update Konflux references (quay.io/konflux-ci/tekton-catalog/task-apply-tags, quay.io/konflux-ci/tekton-catalog/task-build-image-index, quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta, quay.io/konflux-ci/tekton-catalog/task-clair-scan, quay.io/konflux-ci/tekton-catalog/task-clamav-scan, quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks, quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta, quay.io/konflux-ci/tekton-catalog/task-init, quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta, quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta, quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan, quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta, quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta, quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta, quay.io/konflux-ci/tekton-catalog/task-show-sbom, quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta)
• OCM-00000 | ci: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26.5-1786023237
• OCM-00000 | ci: Update aws-sdk (github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/credentials, github.com/aws/aws-sdk-go-v2/service/cloudformation, github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs, github.com/aws/aws-sdk-go-v2/service/ec2, github.com/aws/aws-sdk-go-v2/service/iam, github.com/aws/aws-sdk-go-v2/service/organizations, github.com/aws/aws-sdk-go-v2/service/route53, github.com/aws/aws-sdk-go-v2/service/s3, github.com/aws/aws-sdk-go-v2/service/secretsmanager, github.com/aws/aws-sdk-go-v2/service/servicequotas, github.com/aws/aws-sdk-go-v2/service/sts, github.com/aws/smithy-go)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• OCM-00000 | ci: Update module github.com/openshift-online/ocm-api-model/clientapi to v0.0.463

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• OCM-00000 | ci: Update module go.uber.org/mock to v0.6.0
• OCM-00000 | ci: Update module golang.org/x/vuln to v1.6.0
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• OCM-00000 | ci: Update module github.com/golang-jwt/jwt/v4 to v5
• OCM-00000 | ci: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v9

Detected Dependencies

dockerfile (5)

Dockerfile (1)

• registry.access.redhat.com/ubi9/go-toolset 1.26.5-1784190466 → [Updates: 1.26.5-1786023237, 9.8-1786023237]

Dockerfile.clients (1)

• registry.access.redhat.com/ubi9/go-toolset 1.26.5-1784190466 → [Updates: 1.26.5-1786023237, 9.8-1786023237]

images/Dockerfile.e2e (3)

• registry.access.redhat.com/ubi9/go-toolset 1.26.5-1784190466 → [Updates: 1.26.5-1786023237, 9.8-1786023237]
• registry.access.redhat.com/ubi9/go-toolset 1.26.5-1784190466 → [Updates: 1.26.5-1786023237, 9.8-1786023237]
• registry.access.redhat.com/ubi9/go-toolset 1.26.5-1784190466 → [Updates: 1.26.5-1786023237, 9.8-1786023237]

images/Dockerfile.konflux (1)

• registry.access.redhat.com/ubi9/go-toolset 1.26.5-1784190466 → [Updates: 1.26.5-1786023237, 9.8-1786023237]

images/Dockerfile.release

gomod (8)

.bingo/bingo.mod (2)

• go 1.26.3
• github.com/bwplotka/bingo v0.10.0

.bingo/gci.mod (2)

• go 1.26.3
• github.com/daixiang0/gci v0.14.0

.bingo/go-bindata.mod (2)

• go 1.26.3
• github.com/go-bindata/go-bindata v3.1.2+incompatible

.bingo/golangci-lint.mod (2)

• go 1.26.3
• github.com/golangci/golangci-lint/v2 v2.12.2

.bingo/goreleaser.mod (1)

• go 1.26.3

.bingo/govulncheck.mod (2)

• go 1.25.8
• golang.org/x/vuln v1.1.4 → [Updates: v1.6.0]

.bingo/mockgen.mod (2)

• go 1.26.3
• go.uber.org/mock v0.4.0 → [Updates: v0.6.0]

go.mod (43)

• go 1.26.3
• github.com/AlecAivazis/survey/v2 v2.3.7
• github.com/Masterminds/semver v1.5.0
• github.com/aws/aws-sdk-go-v2 v1.42.1 → [Updates: v1.43.3]
• github.com/aws/aws-sdk-go-v2/config v1.32.30 → [Updates: v1.32.34]
• github.com/aws/aws-sdk-go-v2/credentials v1.19.29 → [Updates: v1.19.33]
• github.com/aws/aws-sdk-go-v2/service/cloudformation v1.74.1 → [Updates: v1.76.0]
• github.com/aws/aws-sdk-go-v2/service/ec2 v1.316.1 → [Updates: v1.318.1]
• github.com/aws/aws-sdk-go-v2/service/iam v1.55.1 → [Updates: v1.57.1]
• github.com/aws/aws-sdk-go-v2/service/organizations v1.52.1 → [Updates: v1.53.3]
• github.com/aws/aws-sdk-go-v2/service/s3 v1.105.2 → [Updates: v1.106.4]
• github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.43.1 → [Updates: v1.44.3]
• github.com/aws/aws-sdk-go-v2/service/servicequotas v1.36.1 → [Updates: v1.37.3]
• github.com/aws/aws-sdk-go-v2/service/sts v1.44.1 → [Updates: v1.45.3]
• github.com/aws/smithy-go v1.27.4 → [Updates: v1.27.6]
• github.com/briandowns/spinner v1.23.2
• github.com/golang-jwt/jwt/v4 v4.5.2 → [Updates: v5.3.1]
• github.com/golang/glog v1.2.5
• github.com/google/go-cmp v0.7.0
• github.com/hashicorp/go-version v1.9.0
• github.com/onsi/ginkgo/v2 v2.32.0
• github.com/onsi/gomega v1.42.1
• github.com/openshift-online/ocm-api-model/clientapi v0.0.462 → [Updates: v0.0.463]
• github.com/openshift-online/ocm-common v0.0.44
• github.com/openshift-online/ocm-sdk-go v0.1.505
• github.com/robfig/cron/v3 v3.0.1
• github.com/sirupsen/logrus v1.9.4
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/zgalor/weberr v0.9.0
• go.uber.org/mock v0.6.0
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/apimachinery v0.36.3
• k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3@cf1189d6abe3
• sigs.k8s.io/yaml v1.6.0
• github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.79.1 → [Updates: v1.81.0]
• github.com/aws/aws-sdk-go-v2/service/route53 v1.64.1 → [Updates: v1.65.5]
• github.com/go-logr/logr v1.4.4
• golang.org/x/crypto v0.54.0
• golang.org/x/net v0.57.0
• golang.org/x/term v0.45.0
• golang.org/x/text v0.40.0
• github.com/kubermatic/glog-logrus v0.0.0-20180829085450-3fa5b9870d1d@3fa5b9870d1d

regex (1)

hack/govulncheck.sh (1)

• jqlang/jq 1.8.2

tekton (1)

.tekton/rosa-github-release.yaml (19)

• quay.io/konflux-ci/tekton-catalog/task-init 0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08 → [Updates: 0.4.3]
• quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta 0.2@sha256:e5ba1f8549e6a0f043629ef00bea7511957121e05304b688f40ff12304560f38 → [Updates: 0.2.5]
• quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta 0.3@sha256:92956e75cd4714286f9c0c043f5301d1c0df1d750884edeceee87e0a91cc1975 → [Updates: 0.7.1]
• quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta 0.10@sha256:daa9a28265b8d92033ac94f610ff6bc3135e1b2cbf65076af74a76dd940a46a9 → [Updates: 0.11.0]
• quay.io/konflux-ci/tekton-catalog/task-build-image-index 0.3@sha256:70c52e88e737340e7b58418fda38c13273aa7cdf587b825778e3560aca1d1133 → [Updates: 0.3.1, 0.3]
• quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta 0.3@sha256:2dd5b3e88f2ff3ea5679dfae07a14ee840b828610edd0c2e1ff2d8b25e808fe2 → [Updates: 0.3]
• quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.5@sha256:0ccc688a77e9b7b0b8973c132a1e840844137e77f887be4a0bec8893b0776872
• quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.3@sha256:f5b4415db9ac1fba3e11d993a617e0b275d1f0ed2fc669b12c400ed848c39174 → [Updates: 0.3.2]
• quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 0.2@sha256:2e5ebe0b462fd19d85ad314f2709a27b905b729046b5d9bce282b10d333e9d6c → [Updates: 0.2]
• quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta 0.5@sha256:b865be59a6ea0cf86e08fc8085784981a00f2c6f9d9018d4f62f210b9c572ae0 → [Updates: 0.5]
• quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.3@sha256:53a02326bfb930ca5ef6bfa7a33acca833d57752f34f3cb79255fe2e25e7d217 → [Updates: 0.3.1]
• quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta 0.3@sha256:e92d00ed858233d0096627861192d3e4fc013cf1559c0d0b0ea0657d3377ce75
• quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check 0.2@sha256:8b501440a960aec446db2ebc6625a49d0317a9fc7bf0f7bd9b18cb63052db7de
• quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta 0.1@sha256:2e8a61aaaacd8939b01b50cc1cb1abeb8ce377be824630c45401e96114744bff → [Updates: 0.1]
• quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta 0.4@sha256:924deef20c28aea91528879a423761c47d09b5f4d6aa9946db352c0aa371439e → [Updates: 0.4]
• quay.io/konflux-ci/tekton-catalog/task-apply-tags 0.3@sha256:6387614ae4f9efa8abb7c4175db0ce5d958bc2b90665b4704880e46fbe0535bf → [Updates: 0.3]
• quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta 0.3@sha256:f3e97e6eaf09d6585e915c3e7b82d110d97e34202bf591a2d990127ba5bb362d → [Updates: 0.3.1]
• quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2@sha256:0b4bf0cf43edc2db2f1507c01c06a201f24485cb5fde3bffcbbe3103fd4a3c36 → [Updates: 0.2.1, 0.2]
• quay.io/konflux-ci/tekton-catalog/task-show-sbom 0.1@sha256:8fe70a95c28b1ac92abd67a7477ad960218f3f570a9f8a12ad082dff7e9c9579 → [Updates: 0.3]