Dependency Dashboard

[phisco-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Base branch does not exist - skipping
• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/cache digest to 0057852 (master)
• chore(deps): update actions/checkout digest to 34e1148 (master)
• chore(deps): update actions/create-github-app-token digest to d72941d (master)
• chore(deps): update actions/setup-go digest to 40f1582 (master)
• chore(deps): update actions/stale digest to 5bef64f (master)
• chore(deps): update actions/upload-artifact digest to ea165f8 (master)
• chore(deps): update docker/login-action digest to c94ce9f (master)
• chore(deps): update docker/setup-buildx-action digest to 8d2750c (master)
• chore(deps): update docker/setup-qemu-action digest to c7c5346 (master)
• chore(deps): update gcr.io/distroless/static docker digest to 47b2d72 (master)
• chore(deps): update golangci/golangci-lint-action digest to d6238b0 (master)
• chore(deps): update mheap/require-checklist-action digest to 9c8100a (master)
• fix(deps): update github.com/adalogics/go-fuzz-headers digest to e8a1dd7 (master)
• fix(deps): update github.com/google/go-containerregistry/pkg/authn/k8schain digest to 7ab219a (master)
• fix(deps): update module dario.cat/mergo to v1.0.2 (master)
• fix(deps): update module github.com/go-logr/logr to v1.4.3 (master)
• fix(deps): update module github.com/sirupsen/logrus to v1.9.4 (master)
• chore(deps): update actions/checkout action to v4.3.1 (master)
• chore(deps): update dependency helm/helm to v3.20.2 (master)
• chore(deps): update dependency kubernetes-sigs/kind to v0.31.0 (master)
• chore(deps): update e2e-manifests (master) (xpkg.upbound.io/crossplane-contrib/function-auto-ready, xpkg.upbound.io/crossplane-contrib/function-dummy, xpkg.upbound.io/crossplane-contrib/provider-nop)
• chore(deps): update renovatebot/github-action action to v40.3.6 (master)
• chore(deps): update zeebe-io/backport-action action to v2.5.0 (master)
• fix(deps): update module github.com/alecthomas/kong to v0.9.0 (master)
• fix(deps): update module github.com/aws/smithy-go to v1.25.1 (master)
• fix(deps): update module github.com/bufbuild/buf to v1.69.0 (master)
• fix(deps): update module github.com/crossplane/crossplane-runtime to v1.20.6 (master)
• fix(deps): update module github.com/docker/docker-credential-helpers to v0.9.6 (master)
• fix(deps): update module github.com/docker/go-connections to v0.7.0 (master)
• fix(deps): update module github.com/emicklei/dot to v1.11.0 (master)
• fix(deps): update module github.com/go-git/go-billy/v5 to v5.8.0 (master)
• fix(deps): update module github.com/google/go-cmp to v0.7.0 (master)
• fix(deps): update module github.com/jmattheis/goverter to v1.9.4 (master)
• fix(deps): update module github.com/prometheus/client_golang to v1.23.2 (master)
• fix(deps): update module github.com/spf13/afero to v1.15.0 (master)
• fix(deps): update module github.com/upbound/up-sdk-go to v0.3.0 (master)
• fix(deps): update module golang.org/x/sync to v0.20.0 (master)
• fix(deps): update module golang.org/x/term to v0.42.0 (master)
• fix(deps): update module google.golang.org/grpc/cmd/protoc-gen-go-grpc to v1.6.1 (master)
• chore(deps): update actions/cache action to v5 (master)
• chore(deps): update actions/checkout action to v6 (master)
• chore(deps): update actions/create-github-app-token action to v3 (master)
• chore(deps): update actions/setup-go action to v6 (master)
• chore(deps): update actions/stale action to v10 (master)
• chore(deps): update actions/upload-artifact action to v7 (master)
• chore(deps): update codecov/codecov-action action to v6 (master)
• chore(deps): update dependency golangci/golangci-lint to v2 (master)
• chore(deps): update dependency helm/helm to v4 (master)
• chore(deps): update dependency ubuntu to v24 (master)
• chore(deps): update docker/login-action action to v4 (master)
• chore(deps): update docker/setup-buildx-action action to v4 (master)
• chore(deps): update docker/setup-qemu-action action to v4 (master)
• chore(deps): update github/codeql-action action to v4 (master)
• chore(deps): update golangci/golangci-lint-action action to v9 (master)
• chore(deps): update renovatebot/github-action action to v46 (master)
• chore(deps): update zeebe-io/backport-action action to v4 (master)
• fix(deps): update module github.com/alecthomas/kong to v1 (master)
• fix(deps): update module github.com/crossplane/crossplane-runtime to v2 (master)
• fix(deps): update module github.com/upbound/up-sdk-go to v1 (master)
• chore(deps): update debian:bookworm-slim docker digest to f9c6a2f (release-1.13)
• chore(deps): update gcr.io/distroless/static docker digest to 47b2d72 (release-1.13)
• chore(deps): update mikefarah/yq docker tag to v4.53.2 (release-1.13)
• chore(deps): update xpkg.upbound.io/crossplane-contrib/provider-nop docker tag to v0.5.0 (release-1.13)
• chore(deps): update gcr.io/distroless/static docker digest to 47b2d72 (release-1.15)
• chore(deps): update e2e-manifests (release-1.15) (xpkg.upbound.io/crossplane-contrib/function-auto-ready, xpkg.upbound.io/crossplane-contrib/function-dummy, xpkg.upbound.io/crossplane-contrib/provider-nop)
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update github/codeql-action digest to 0daab03 (master)
• chore(deps): update aquasecurity/trivy-action action to v0.36.0 (master)
• fix(deps): update module github.com/google/go-containerregistry to v0.21.5 (master)

---

Warning

Renovate failed to look up the following dependencies: Failed to look up docker package crossplane-contrib/provider-nop: no-result, Could not determine new digest for update (github-tags package aquasecurity/trivy-action), Could not determine new digest for update (github-tags package bufbuild/buf-breaking-action).

Files affected: test/e2e/manifests/pkg/configuration/dependency/provider-dependency.yaml, .github/workflows/ci.yml, .github/workflows/scan.yaml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module github.com/golang-jwt/jwt/v4 to v4.5.2 [security] (master)
• fix(deps): update module github.com/docker/docker to v25.0.13+incompatible [security] (master)
• fix(deps): update module github.com/golang-jwt/jwt/v5 to v5.2.2 [security] (master)
• chore(deps): update module github.com/cloudflare/circl to v1.6.3 [security] (master)
• chore(deps): update module github.com/go-chi/chi/v5 to v5.2.2 [security] (master)
• chore(deps): update module github.com/moby/spdystream to v0.5.1 [security] (master)
• chore(deps): update module github.com/rs/cors to v1.11.0 [security] (master)
• chore(deps): update module go.opentelemetry.io/otel/sdk to v1.43.0 [security] (master)
• chore(deps): update module golang.org/x/crypto to v0.45.0 [security] (master)
• chore(deps): update module golang.org/x/oauth2 to v0.27.0 [security] (master)
• fix(deps): update module github.com/go-git/go-git/v5 to v5.18.0 [security] (master)
• fix(deps): update module golang.org/x/net to v0.45.0 [security] (master)
• fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (master)
• fix(deps): update module google.golang.org/protobuf to v1.33.0 [security] (master)
• chore(deps): update module github.com/docker/cli to v29 [security] (master)
• chore(deps): update dependency golangci/golangci-lint to v1.64.8 (master)
• chore(deps): update golang version to v1.26.2 (master) (go, golang)
• chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.5 [security] (release-1.13)
• chore(deps): update module github.com/golang-jwt/jwt/v4 to v4.5.2 [security] (release-1.13)
• chore(deps): update module github.com/hashicorp/go-retryablehttp to v0.7.7 [security] (release-1.13)
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4 [security] (release-1.13)
• chore(deps): update module github.com/go-chi/chi/v5 to v5.2.2 [security] (release-1.13)
• chore(deps): update module github.com/moby/spdystream to v0.5.1 [security] (release-1.13)
• chore(deps): update module github.com/rs/cors to v1.11.0 [security] (release-1.13)
• chore(deps): update module go.opentelemetry.io/otel/sdk to v1.43.0 [security] (release-1.13)
• chore(deps): update module golang.org/x/crypto to v0.45.0 [security] (release-1.13)
• chore(deps): update module golang.org/x/oauth2 to v0.27.0 [security] (release-1.13)
• fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (release-1.13)
• fix(deps): update module google.golang.org/protobuf to v1.33.0 [security] (release-1.13)
• chore(deps): update module github.com/docker/cli to v29 [security] (release-1.13)
• chore(deps): update module github.com/docker/docker to v25 [security] (release-1.13)
• chore(deps): update module github.com/golang-jwt/jwt/v4 to v4.5.2 [security] (release-1.15)
• fix(deps): update module github.com/docker/docker to v25.0.13+incompatible [security] (release-1.15)
• fix(deps): update module github.com/golang-jwt/jwt/v5 to v5.2.2 [security] (release-1.15)
• chore(deps): update module github.com/cloudflare/circl to v1.6.3 [security] (release-1.15)
• chore(deps): update module github.com/go-chi/chi/v5 to v5.2.2 [security] (release-1.15)
• chore(deps): update module github.com/moby/spdystream to v0.5.1 [security] (release-1.15)
• chore(deps): update module github.com/rs/cors to v1.11.0 [security] (release-1.15)
• chore(deps): update module go.opentelemetry.io/otel/sdk to v1.43.0 [security] (release-1.15)
• chore(deps): update module golang.org/x/crypto to v0.45.0 [security] (release-1.15)
• chore(deps): update module golang.org/x/oauth2 to v0.27.0 [security] (release-1.15)
• fix(deps): update module github.com/go-git/go-git/v5 to v5.18.0 [security] (release-1.15)
• fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (release-1.15)
• fix(deps): update module google.golang.org/protobuf to v1.33.0 [security] (release-1.15)
• chore(deps): update module github.com/docker/cli to v29 [security] (release-1.15)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

Branch master

crossplane (23)

test/e2e/manifests/apiextensions/composition/bind-existing-xr/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/composition-selection/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/functions/setup/functions.yaml (2)

• xpkg.upbound.io/crossplane-contrib/function-dummy v0.2.1 → [Updates: v0.4.1]
• xpkg.upbound.io/crossplane-contrib/function-auto-ready v0.2.1 → [Updates: v0.6.4]

test/e2e/manifests/apiextensions/composition/functions/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/invalid-composed/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/minimal/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/patch-and-transform/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/propagate-field-removals/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/realtime-compositions/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/realtime-revision-selection/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/validation/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/environment/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/usage/composition/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/usage/standalone/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

test/e2e/manifests/lifecycle/upgrade/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

test/e2e/manifests/pkg/configuration/dependency/configuration.yaml (1)

• crossplane/e2e-depends-on-provider-nop v0.2.0

test/e2e/manifests/pkg/configuration/dependency/provider-dependency.yaml (1)

• crossplane-contrib/provider-nop v0.2.0

test/e2e/manifests/pkg/configuration/private/configuration.yaml

test/e2e/manifests/pkg/deployment-runtime-config/setup/functions.yaml (2)

• xpkg.upbound.io/crossplane-contrib/function-dummy v0.2.1 → [Updates: v0.4.1]
• xpkg.upbound.io/crossplane-contrib/function-auto-ready v0.2.1 → [Updates: v0.6.4]

test/e2e/manifests/pkg/deployment-runtime-config/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

test/e2e/manifests/pkg/externally-managed-service-account/setup/functions.yaml (2)

• xpkg.upbound.io/crossplane-contrib/function-dummy v0.2.1 → [Updates: v0.4.1]
• xpkg.upbound.io/crossplane-contrib/function-auto-ready v0.2.1 → [Updates: v0.6.4]

test/e2e/manifests/pkg/externally-managed-service-account/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

test/e2e/manifests/pkg/provider/provider-upgrade.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

dockerfile (1)

cluster/images/crossplane/Dockerfile (1)

• gcr.io/distroless/static sha256:7e5c6a2a4ae854242874d36171b31d26e0539c98fc6080f942f16b03e82851ab → [Updates: undefined]

github-actions (9)

.github/workflows/backport.yml (3)

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• zeebe-io/backport-action v2.4.1@e8161d6a0dbfa2651b7daa76cbb75bc7c925bbf3 → [Updates: v2.5.0, v4.5.0]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/ci.yml (57)

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 → [Updates: v6, v5]
• actions/cache v4@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 → [Updates: v5, v4]
• actions/cache v4@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 → [Updates: v5, v4]
• fkirc/skip-duplicate-actions v5.3.1@f75f66ce1886f00957d99748a42c724f4330bdcf
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 → [Updates: v6, v5]
• actions/cache v4@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 → [Updates: v5, v4]
• actions/cache v4@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 → [Updates: v5, v4]
• golangci/golangci-lint-action v4@3cfe3a4abbb849e10058ce4af15d205b6da42804 → [Updates: v9, v4]
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 → [Updates: v6, v5]
• actions/cache v4@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 → [Updates: v5, v4]
• actions/cache v4@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 → [Updates: v5, v4]
• github/codeql-action v3@e8893c57a1f3a2b659b6b55564fdfdbbd2982911 → [Updates: v4, v3]
• github/codeql-action v3@e8893c57a1f3a2b659b6b55564fdfdbbd2982911 → [Updates: v4, v3]
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• aquasecurity/trivy-action 0.19.0@d710430a6722f083d3b36b8339ff66b32f22ee55 → [Updates: v0.36.0]
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 → [Updates: v6, v5]
• actions/cache v4@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 → [Updates: v5, v4]
• actions/cache v4@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 → [Updates: v5, v4]
• codecov/codecov-action v3@ab904c41d6ece82784817410c45d8b8c02684457 → [Updates: v6]
• docker/setup-qemu-action v3@68827325e0b33c7199eb31dd4e31fbe9023e06e3 → [Updates: v4, v3]
• docker/setup-buildx-action v3@f95db51fddba0c2d1ec667646a06c2ce06100226 → [Updates: v4, v3]
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 → [Updates: v6, v5]
• actions/cache v4@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 → [Updates: v5, v4]
• actions/cache v4@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 → [Updates: v5, v4]
• actions/upload-artifact v4@1746f4ab65b179e0ea60a494b83293b640dd5bba → [Updates: v7, v4]
• jlumbroso/free-disk-space v1.3.1@54081f138730dfa15788a46383842cd2f914a1be
• docker/setup-qemu-action v3@68827325e0b33c7199eb31dd4e31fbe9023e06e3 → [Updates: v4, v3]
• docker/setup-buildx-action v3@f95db51fddba0c2d1ec667646a06c2ce06100226 → [Updates: v4, v3]
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 → [Updates: v6, v5]
• actions/cache v4@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 → [Updates: v5, v4]
• actions/cache v4@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 → [Updates: v5, v4]
• actions/upload-artifact v4@1746f4ab65b179e0ea60a494b83293b640dd5bba → [Updates: v7, v4]
• docker/login-action v3@e92390c5fb421da1463c202d546fed0ec5c39f20 → [Updates: v4, v3]
• docker/login-action v3@e92390c5fb421da1463c202d546fed0ec5c39f20 → [Updates: v4, v3]
• actions/upload-artifact v4@1746f4ab65b179e0ea60a494b83293b640dd5bba → [Updates: v7, v4]
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• bufbuild/buf-setup-action v1
• bufbuild/buf-lint-action v1
• bufbuild/buf-breaking-action v1@a074e988ee34efcd4927079e79c611f428354c01
• bufbuild/buf-breaking-action v1@a074e988ee34efcd4927079e79c611f428354c01
• bufbuild/buf-push-action v1
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/commands.yml (7)

• xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• zeebe-io/backport-action v2.4.1@e8161d6a0dbfa2651b7daa76cbb75bc7c925bbf3 → [Updates: v2.5.0, v4.5.0]
• xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
• actions-ecosystem/action-remove-labels v1@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/pr.yml (2)

• mheap/require-checklist-action v2@01fe24747f8630a056d9ca79dfbbb755579850ab → [Updates: v2]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/promote.yml (5)

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 → [Updates: v6, v5]
• docker/login-action v3@e92390c5fb421da1463c202d546fed0ec5c39f20 → [Updates: v4, v3]
• docker/login-action v3@e92390c5fb421da1463c202d546fed0ec5c39f20 → [Updates: v4, v3]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/renovate.yml (3)

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.3.1, v6.0.2]
• actions/create-github-app-token v1@7bfa3a4717ef143a604ee0a99d859b8886a96d00 → [Updates: v3, v1]
• renovatebot/github-action v40.1.10@2e021d24483d81e77e0e902d0809adfbfff276fc → [Updates: v40.3.6, v46.1.13]

.github/workflows/scan.yaml (5)

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• docker/login-action v3@e92390c5fb421da1463c202d546fed0ec5c39f20 → [Updates: v4, v3]
• aquasecurity/trivy-action 0.19.0@d710430a6722f083d3b36b8339ff66b32f22ee55 → [Updates: v0.36.0]
• actions/upload-artifact v4@1746f4ab65b179e0ea60a494b83293b640dd5bba → [Updates: v7, v4]
• github/codeql-action v3@e8893c57a1f3a2b659b6b55564fdfdbbd2982911 → [Updates: v4, v3]

.github/workflows/stale.yml (2)

• actions/stale v9@28ca1036281a5e5922ead5184a1bbf96e5fc984e → [Updates: v10, v9]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/tag.yml (3)

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• negz/create-tag v1@39bae1e0932567a58c20dea5a1a0d18358503320
• ubuntu 22.04 → [Updates: 24.04]

gomod (1)

go.mod (42)

• go 1.21
• go 1.21.6 → [Updates: 1.26.2]
• dario.cat/mergo v1.0.0 → [Updates: v1.0.2]
• github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24@ced1acdcaa24 → [Updates: v0.0.0-20240806141605-e8a1dd7889d6]
• github.com/Masterminds/semver v1.5.0
• github.com/alecthomas/kong v0.8.1 → [Updates: v0.9.0, v1.15.0]
• github.com/bufbuild/buf v1.27.2 → [Updates: v1.69.0]
• github.com/crossplane/crossplane-runtime v1.16.0-rc.1.0.20240226223305-2c81cc6326e5 → [Updates: v1.20.6, v2.2.1]
• github.com/docker/docker v25.0.5+incompatible → [Updates: v25.0.13+incompatible]
• github.com/docker/go-connections v0.5.0 → [Updates: v0.7.0]
• github.com/emicklei/dot v1.6.1 → [Updates: v1.11.0]
• github.com/go-git/go-billy/v5 v5.5.0 → [Updates: v5.8.0]
• github.com/go-git/go-git/v5 v5.11.0 → [Updates: v5.18.0]
• github.com/golang-jwt/jwt/v5 v5.2.0 → [Updates: v5.2.2]
• github.com/google/go-cmp v0.6.0 → [Updates: v0.7.0]
• github.com/google/go-containerregistry v0.19.0 → [Updates: v0.21.5]
• github.com/google/go-containerregistry/pkg/authn/k8schain v0.0.0-20230919002926-dbcd01c402b2@dbcd01c402b2 → [Updates: v0.0.0-20260505214906-7ab219a508a2]
• github.com/jmattheis/goverter v1.3.2 → [Updates: v1.9.4]
• github.com/pkg/errors v0.9.1
• github.com/sirupsen/logrus v1.9.3 → [Updates: v1.9.4]
• github.com/spf13/afero v1.11.0 → [Updates: v1.15.0]
• github.com/upbound/up-sdk-go v0.1.1-0.20240122203953-2d00664aab8e@2d00664aab8e → [Updates: v0.3.0, v1.16.0]
• golang.org/x/sync v0.6.0 → [Updates: v0.20.0]
• google.golang.org/grpc v1.61.0 → [Updates: v1.79.3]
• google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.3.0 → [Updates: v1.6.1]
• google.golang.org/protobuf v1.31.0 → [Updates: v1.33.0]
• github.com/cloudflare/circl v1.3.7 → [Updates: v1.6.3]
• github.com/golang-jwt/jwt/v4 v4.5.0 → [Updates: v4.5.2]
• github.com/aws/smithy-go v1.19.0 → [Updates: v1.25.1]
• github.com/docker/cli v24.0.7+incompatible → [Updates: v29.2.0+incompatible]
• github.com/docker/docker-credential-helpers v0.8.1 → [Updates: v0.9.6]
• github.com/go-chi/chi/v5 v5.0.11 → [Updates: v5.2.2]
• github.com/go-logr/logr v1.4.1 → [Updates: v1.4.3]
• github.com/google/uuid v1.6.0
• github.com/moby/spdystream v0.2.0 → [Updates: v0.5.1]
• github.com/prometheus/client_golang v1.18.0 → [Updates: v1.23.2]
• github.com/rs/cors v1.10.1 → [Updates: v1.11.0]
• go.opentelemetry.io/otel/sdk v1.19.0 → [Updates: v1.43.0]
• golang.org/x/crypto v0.21.0 → [Updates: v0.45.0]
• golang.org/x/net v0.23.0 → [Updates: v0.45.0]
• golang.org/x/oauth2 v0.15.0 → [Updates: v0.27.0]
• golang.org/x/term v0.18.0 → [Updates: v0.42.0]

helm-values (1)

cluster/charts/crossplane/values.yaml

regex (12)

.github/workflows/ci.yml (1)

• golang 1.22.0 → [Updates: 1.26.2]

.github/workflows/ci.yml (1)

• golangci/golangci-lint 1.56.2 → [Updates: 1.64.8, 2.12.1]

.github/workflows/ci.yml (1)

• golang 1.22.0 → [Updates: 1.26.2]

.github/workflows/ci.yml (1)

• golangci/golangci-lint 1.56.2 → [Updates: 1.64.8, 2.12.1]

.github/workflows/promote.yml (1)

• golang 1.22.0 → [Updates: 1.26.2]

.github/workflows/promote.yml (1)

• golang 1.22.0 → [Updates: 1.26.2]

Makefile (1)

• golangci/golangci-lint 1.56.2 → [Updates: 1.64.8, 2.12.1]

Makefile (1)

• helm/helm v3.14.0 → [Updates: v3.20.2, v4.1.4]

Makefile (1)

• kubernetes-sigs/kind v0.21.0 → [Updates: v0.31.0]

Makefile (1)

• golangci/golangci-lint 1.56.2 → [Updates: 1.64.8, 2.12.1]

Makefile (1)

• helm/helm v3.14.0 → [Updates: v3.20.2, v4.1.4]

Makefile (1)

• kubernetes-sigs/kind v0.21.0 → [Updates: v0.31.0]

Branch release-1.13

crossplane (10)

test/e2e/manifests/apiextensions/composition/minimal/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/patch-and-transform/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/validation/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/lifecycle/upgrade/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/pkg/configuration/dependency/configuration.yaml (1)

• crossplane/e2e-depends-on-provider-nop v0.1.0

test/e2e/manifests/pkg/configuration/dependency/provider-dependency.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/pkg/configuration/private/configuration.yaml

test/e2e/manifests/pkg/provider/provider-upgrade.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/xfnrunner/private-registry/pull/prerequisites/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/xfnrunner/tmp-writer/prerequisites/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

dockerfile (4)

cluster/images/crossplane/Dockerfile (1)

• gcr.io/distroless/static sha256:7198a357ff3a8ef750b041324873960cf2153c11cc50abb9d8d5f8bb089f6b4e → [Updates: undefined]

cluster/images/xfn/Dockerfile (1)

• debian bookworm-slim@sha256:9bd077d2f77c754f4f7f5ee9e6ded9ff1dff92c6dce877754da21b917c122c77 → [Updates: bookworm-slim]

test/e2e/testdata/images/labelizer/Dockerfile (1)

• mikefarah/yq 4.34.2 → [Updates: 4.53.2]

test/e2e/testdata/images/tmp-writer/Dockerfile (1)

• mikefarah/yq 4.34.1 → [Updates: 4.53.2]

github-actions (9)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/configurations.yml

.github/workflows/pr.yml

.github/workflows/promote.yml

.github/workflows/scan.yaml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (14)

• github.com/cyphar/filepath-securejoin v0.2.3 → [Updates: v0.2.4]
• google.golang.org/grpc v1.56.2 → [Updates: v1.79.3]
• google.golang.org/protobuf v1.31.0 → [Updates: v1.33.0]
• github.com/docker/cli v24.0.4+incompatible → [Updates: v29.2.0+incompatible]
• github.com/docker/docker v24.0.4+incompatible → [Updates: v25.0.13+incompatible]
• github.com/go-chi/chi/v5 v5.0.8 → [Updates: v5.2.2]
• github.com/go-jose/go-jose/v3 v3.0.0 → [Updates: v3.0.5]
• github.com/golang-jwt/jwt/v4 v4.5.0 → [Updates: v4.5.2]
• github.com/hashicorp/go-retryablehttp v0.7.1 → [Updates: v0.7.7]
• github.com/moby/spdystream v0.2.0 → [Updates: v0.5.1]
• github.com/rs/cors v1.9.0 → [Updates: v1.11.0]
• go.opentelemetry.io/otel/sdk v1.16.0 → [Updates: v1.43.0]
• golang.org/x/crypto v0.11.0 → [Updates: v0.45.0]
• golang.org/x/oauth2 v0.8.0 → [Updates: v0.27.0]

helm-values (1)

cluster/charts/crossplane/values.yaml

regex (12)

.github/workflows/ci.yml

.github/workflows/ci.yml

.github/workflows/ci.yml

.github/workflows/ci.yml

.github/workflows/promote.yml

.github/workflows/promote.yml

Makefile

Makefile

Makefile

Makefile

Makefile

Makefile

Branch release-1.15

crossplane (22)

test/e2e/manifests/apiextensions/composition/bind-existing-xr/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/composition-selection/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/functions/setup/functions.yaml (2)

• xpkg.upbound.io/crossplane-contrib/function-dummy v0.2.1 → [Updates: v0.4.1]
• xpkg.upbound.io/crossplane-contrib/function-auto-ready v0.2.1 → [Updates: v0.6.4]

test/e2e/manifests/apiextensions/composition/functions/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/minimal/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/patch-and-transform/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/propagate-field-removals/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/realtime-compositions/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/realtime-revision-selection/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/composition/validation/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/environment/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/usage/composition/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

test/e2e/manifests/apiextensions/usage/standalone/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

test/e2e/manifests/lifecycle/upgrade/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/pkg/configuration/dependency/configuration.yaml (1)

• crossplane/e2e-depends-on-provider-nop v0.2.0

test/e2e/manifests/pkg/configuration/dependency/provider-dependency.yaml (1)

• crossplane-contrib/provider-nop v0.2.0

test/e2e/manifests/pkg/configuration/private/configuration.yaml

test/e2e/manifests/pkg/deployment-runtime-config/setup/functions.yaml (2)

• xpkg.upbound.io/crossplane-contrib/function-dummy v0.2.1 → [Updates: v0.4.1]
• xpkg.upbound.io/crossplane-contrib/function-auto-ready v0.2.1 → [Updates: v0.6.4]

test/e2e/manifests/pkg/deployment-runtime-config/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/pkg/externally-managed-service-account/setup/functions.yaml (2)

• xpkg.upbound.io/crossplane-contrib/function-dummy v0.2.1 → [Updates: v0.4.1]
• xpkg.upbound.io/crossplane-contrib/function-auto-ready v0.2.1 → [Updates: v0.6.4]

test/e2e/manifests/pkg/externally-managed-service-account/setup/provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.0 → [Updates: v0.5.0]

test/e2e/manifests/pkg/provider/provider-upgrade.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-nop v0.2.1 → [Updates: v0.5.0]

dockerfile (1)

cluster/images/crossplane/Dockerfile (1)

• gcr.io/distroless/static sha256:9be3fcc6abeaf985b5ecce59451acbcbb15e7be39472320c538d0d55a0834edc → [Updates: undefined]

github-actions (8)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/pr.yml

.github/workflows/promote.yml

.github/workflows/scan.yaml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (14)

• github.com/docker/docker v25.0.2+incompatible → [Updates: v25.0.13+incompatible]
• github.com/go-git/go-git/v5 v5.11.0 → [Updates: v5.18.0]
• github.com/golang-jwt/jwt/v5 v5.2.0 → [Updates: v5.2.2]
• google.golang.org/grpc v1.61.0 → [Updates: v1.79.3]
• google.golang.org/protobuf v1.31.0 → [Updates: v1.33.0]
• github.com/cloudflare/circl v1.3.7 → [Updates: v1.6.3]
• github.com/golang-jwt/jwt/v4 v4.5.0 → [Updates: v4.5.2]
• github.com/docker/cli v24.0.7+incompatible → [Updates: v29.2.0+incompatible]
• github.com/go-chi/chi/v5 v5.0.11 → [Updates: v5.2.2]
• github.com/moby/spdystream v0.2.0 → [Updates: v0.5.1]
• github.com/rs/cors v1.10.1 → [Updates: v1.11.0]
• go.opentelemetry.io/otel/sdk v1.19.0 → [Updates: v1.43.0]
• golang.org/x/crypto v0.18.0 → [Updates: v0.45.0]
• golang.org/x/oauth2 v0.15.0 → [Updates: v0.27.0]

helm-values (1)

cluster/charts/crossplane/values.yaml

regex (12)

.github/workflows/ci.yml

.github/workflows/ci.yml

.github/workflows/ci.yml

.github/workflows/ci.yml

.github/workflows/promote.yml

.github/workflows/promote.yml

Makefile

Makefile

Makefile

Makefile

Makefile

Makefile