Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package arduino/setup-task).

Files affected: .github/workflows/e2e-tests.yml

---

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• chore(deps): update ghcr.io/stacklok/toolhive docker tag to v0.0.47
• chore(deps): update ghcr.io/stacklok/toolhive/operator docker tag to v0.0.47
• fix(deps): update module github.com/lestrrat-go/jwx/v2 to v3

Detected dependencies

dockerfile

containers/egress-proxy/Dockerfile

• alpine 3.22.0

github-actions

.github/workflows/e2e-tests.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02

.github/workflows/image-build-and-publish.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• docker/login-action v3.4.0@74a5d142397b4f367a81961eba4e8cd7edddf772
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• sigstore/cosign-installer v3.9.0@fb28c2b6339dcd94da6e4cbcbc5e888961f6f8c3
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• docker/login-action v3.4.0@74a5d142397b4f367a81961eba4e8cd7edddf772
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/metadata-action v5.7.0@902fa8ec7d6ecbf8d84d538b9b233a880e428804
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• sigstore/cosign-installer v3.9.0@fb28c2b6339dcd94da6e4cbcbc5e888961f6f8c3
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• arduino/setup-task v2
• docker/login-action v3.4.0@74a5d142397b4f367a81961eba4e8cd7edddf772
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• sigstore/cosign-installer v3.9.0@fb28c2b6339dcd94da6e4cbcbc5e888961f6f8c3

.github/workflows/lint-helm-charts.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-python v5@a26af69be951a213d495a4c3e4e4022e16d87065
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• pre-commit/action v3.0.1@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd
• go ^1

.github/workflows/lint.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• golangci/golangci-lint-action v8.0.0@4afd733a84b1f43292c63897423277bb7f4313a9

.github/workflows/operator-ci.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• arduino/setup-task v2
• golangci/golangci-lint-action v8.0.0@4afd733a84b1f43292c63897423277bb7f4313a9
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• arduino/setup-task v2
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• arduino/setup-task v2
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• arduino/setup-task v2
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• arduino/setup-task v2

.github/workflows/releaser-helm-charts.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• helm/chart-releaser-action v1.7.0@cae68fefc6b5f367a0275617c9f83181ba54714f
• docker/login-action v3.4.0@74a5d142397b4f367a81961eba4e8cd7edddf772
• sigstore/cosign-installer v3.9.0@fb28c2b6339dcd94da6e4cbcbc5e888961f6f8c3

.github/workflows/releaser.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• anchore/sbom-action v0.20.1@9246b90769f852b3a8921f330c59e0b3f439d6e9
• sigstore/cosign-installer v3.9.0@fb28c2b6339dcd94da6e4cbcbc5e888961f6f8c3
• goreleaser/goreleaser-action v6@9c156ee8a17a598857849441385a2041ef570552

.github/workflows/spellcheck.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• codespell-project/actions-codespell v2@406322ec52dd7b488e48c1c4b82e2a8b3a1bf630

.github/workflows/test-helm-charts.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• azure/setup-helm v4.3.0@b9e51907a09c216f16ebe8536097933489208112
• actions/setup-python v5@a26af69be951a213d495a4c3e4e4022e16d87065
• helm/chart-testing-action v2.7.0@0d28d3144d3a25ea2cc349d6e59901c4ff469b3b
• helm/kind-action v1.12.0@a1b0e391336a6ee6713a0583f8c6240d70863de3

.github/workflows/test.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• arduino/setup-task v2

.github/workflows/update-docs-website.yml

.github/workflows/update-registry.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• peter-evans/create-pull-request v7@271a8d0340265f705b14b6d32b9829c1cb33d45e

.github/workflows/verify-docgen.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5

.github/workflows/verify-swagger.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• arduino/setup-task v2

gomod

go.mod

• go 1.24.1
• github.com/1password/onepassword-sdk-go v0.3.1
• github.com/cedar-policy/cedar-go v1.2.3
• github.com/cenkalti/backoff/v5 v5.0.2
• github.com/containerd/errdefs v1.0.0
• github.com/docker/docker v28.2.2+incompatible
• github.com/docker/go-connections v0.5.0
• github.com/go-chi/chi/v5 v5.2.2
• github.com/gofrs/flock v0.12.1
• github.com/google/go-containerregistry v0.20.6
• github.com/google/uuid v1.6.0
• github.com/lestrrat-go/jwx/v2 v2.1.6
• github.com/lmittmann/tint v1.1.2
• github.com/mark3labs/mcp-go v0.32.0
• github.com/onsi/ginkgo/v2 v2.23.4
• github.com/onsi/gomega v1.37.0
• github.com/ory/fosite v0.49.0
• github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c@5ac0b6a4141c
• github.com/prometheus/client_golang v1.22.0
• github.com/sigstore/protobuf-specs v0.4.3
• github.com/sigstore/sigstore-go v1.0.0
• github.com/spf13/viper v1.20.1
• github.com/stretchr/testify v1.10.0
• github.com/swaggo/swag/v2 v2.0.0-rc4
• github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a@992244df8c5a
• github.com/tidwall/gjson v1.18.0
• github.com/zalando/go-keyring v0.2.6
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.36.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.36.0
• go.opentelemetry.io/otel/exporters/prometheus v0.58.0
• go.opentelemetry.io/otel/sdk v1.36.0
• go.opentelemetry.io/otel/sdk/metric v1.36.0
• go.uber.org/mock v0.5.2
• golang.org/x/exp/jsonrpc2 v0.0.0-20250620022241-b7579e27df2b@b7579e27df2b
• golang.org/x/mod v0.25.0
• golang.org/x/oauth2 v0.30.0
• golang.org/x/sync v0.15.0
• golang.org/x/term v0.32.0
• gopkg.in/yaml.v3 v3.0.1
• gotest.tools v2.2.0+incompatible
• k8s.io/api v0.33.2
• k8s.io/apimachinery v0.33.2
• sigs.k8s.io/controller-runtime v0.21.0
• sigs.k8s.io/yaml v1.4.0
• github.com/Microsoft/go-winio v0.6.2
• github.com/adrg/xdg v0.5.3
• github.com/go-logr/logr v1.4.3
• github.com/golang-jwt/jwt/v5 v5.2.2
• github.com/opencontainers/go-digest v1.0.0
• github.com/spf13/cobra v1.9.1
• go.opentelemetry.io/otel v1.36.0
• go.opentelemetry.io/otel/metric v1.36.0
• go.opentelemetry.io/otel/trace v1.36.0
• k8s.io/client-go v0.33.2

helm-values

deploy/charts/operator/values.yaml

• ghcr.io/stacklok/toolhive/operator v0.0.45
• ghcr.io/stacklok/toolhive v0.0.45

---

• Check this box to trigger a request for Renovate to run again on this repository