Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update arduino/setup-task action to v3

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update golang docker tag to v1.26.5
• chore(deps): update actions/setup-go action to v7

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update platform-mesh/.github digest to cd5bbb0
• fix(deps): update kubernetes monorepo to v0.36.2 (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/client-go)
• fix(deps): update module github.com/cert-manager/cert-manager to v1.21.0
• fix(deps): update module github.com/fluxcd/helm-controller/api to v1.6.2
• fix(deps): update module github.com/fluxcd/source-controller/api to v1.9.2
• fix(deps): update module github.com/kcp-dev/multicluster-provider to v0.8.0
• fix(deps): update module github.com/kcp-dev/sdk to v0.32.3
• fix(deps): update module github.com/platform-mesh/subroutines to v0.5.10
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.24.1
• fix(deps): update module sigs.k8s.io/multicluster-runtime to v0.24.1
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• golang 1.26.4-trixie@sha256:68b7145ec43d1820b9a56704554b53d1520aa2a15cb5233e374188a31b2a1bce → [Updates: 1.26.5-trixie]

github-actions (6)

.github/workflows/auto-labeler.yml

.github/workflows/ci.yml

.github/workflows/job-golang-test-source.yml (3)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611 → [Updates: v3.0.0]

.github/workflows/ossf-scorecard.yml

.github/workflows/release.yml (7)

• platform-mesh/.github main@03e076ff9aebe43ead6b9d77f3bb764a9d411347 → [Updates: main]
• platform-mesh/.github main@03e076ff9aebe43ead6b9d77f3bb764a9d411347 → [Updates: main]
• platform-mesh/.github main@03e076ff9aebe43ead6b9d77f3bb764a9d411347 → [Updates: main]
• platform-mesh/.github main@03e076ff9aebe43ead6b9d77f3bb764a9d411347 → [Updates: main]
• platform-mesh/.github main@03e076ff9aebe43ead6b9d77f3bb764a9d411347 → [Updates: main]
• platform-mesh/.github main@03e076ff9aebe43ead6b9d77f3bb764a9d411347 → [Updates: main]
• platform-mesh/.github main@03e076ff9aebe43ead6b9d77f3bb764a9d411347 → [Updates: main]

.github/workflows/zizmor.yml (1)

• platform-mesh/.github main@03e076ff9aebe43ead6b9d77f3bb764a9d411347 → [Updates: main]

gomod (1)

go.mod (36)

• go 1.26.1
• github.com/open-component-model/open-component-model/kubernetes/controller v0.11.0
• github.com/ThalesGroup/crypto11 v1.6.2
• k8s.io/api v0.35.4 → [Updates: v0.36.2]
• k8s.io/apimachinery v0.35.4 → [Updates: v0.36.2]
• k8s.io/client-go v0.35.4 → [Updates: v0.36.2]
• github.com/cert-manager/cert-manager v1.20.3 → [Updates: v1.21.0]
• github.com/creasty/defaults v1.8.0
• github.com/fluxcd/helm-controller/api v1.5.5 → [Updates: v1.6.2]
• github.com/fluxcd/source-controller/api v1.8.5 → [Updates: v1.9.2]
• github.com/go-logr/logr v1.4.3
• github.com/kcp-dev/kcp/sdk v0.28.3
• github.com/kcp-dev/multicluster-provider v0.7.1 → [Updates: v0.8.0]
• github.com/kcp-dev/sdk v0.31.2 → [Updates: v0.32.3]
• github.com/mandelsoft/goutils v0.0.0-20260507153918-c39bb4bb4b7b@c39bb4bb4b7b
• github.com/mitchellh/copystructure v1.2.0
• github.com/opencontainers/go-digest v1.0.0
• github.com/platform-mesh/golang-commons v0.17.27
• github.com/platform-mesh/subroutines v0.4.3 → [Updates: v0.5.10]
• github.com/prometheus/client_golang v1.23.2
• github.com/rs/zerolog v1.35.1
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/stretchr/testify v1.11.1
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/api v0.35.4 → [Updates: v0.36.2]
• k8s.io/apiextensions-apiserver v0.35.4 → [Updates: v0.36.2]
• k8s.io/apimachinery v0.36.0 → [Updates: v0.36.2]
• k8s.io/client-go v0.35.4 → [Updates: v0.36.2]
• k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3@cf1189d6abe3
• sigs.k8s.io/controller-runtime v0.23.3 → [Updates: v0.24.1]
• sigs.k8s.io/kustomize/api v0.21.1
• sigs.k8s.io/kustomize/kyaml v0.21.1
• sigs.k8s.io/multicluster-runtime v0.23.3 → [Updates: v0.24.1]
• sigs.k8s.io/yaml v1.6.0

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository