Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package k8s.io/client-go: no-result.

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Pin ghcr.io/cobaltcore-dev/labels-injector Docker tag to 2dcc349
• Renovate: Update module sigs.k8s.io/controller-runtime to v0.24.1
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

4/4 CVEs have Renovate fixes.

gomod

go.mod

go.opentelemetry.io/otel

• GHSA-mh2q-q3fh-2475 (fixed in >= 1.41.0)

go.opentelemetry.io/otel/sdk

• GHSA-hfvc-g4fc-pqhx (fixed in >= 1.43.0)

google.golang.org/grpc

• GHSA-p77j-4mvh-x3m3 (fixed in >= 1.79.3)
• GO-2026-4762 (fixed in >= 1.79.3)

Detected Dependencies

github-actions (5)

.github/workflows/checks.yaml

.github/workflows/ci.yaml

.github/workflows/codeql.yaml

.github/workflows/container-registry-ghcr.yaml

.github/workflows/helm-oci-package-ghcr.yaml

gomod (1)

go.mod (6)

• go 1.26
• github.com/sapcc/go-api-declarations v1.24.0
• k8s.io/api v0.35.1
• k8s.io/apimachinery v0.35.1
• k8s.io/client-go v0.35.1
• sigs.k8s.io/controller-runtime v0.23.1 → [Updates: v0.24.1]

helm-values (1)

charts/labels-injector/values.yaml (1)

• ghcr.io/cobaltcore-dev/labels-injector latest → [Updates: latest]

renovate-config (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository