Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@ui5/webcomponents-ngx

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update gcr.io/distroless/static:nonroot docker digest to f7f8f72
• chore(deps): update dependency @hono/node-server to v2.0.8
• chore(deps): update dependency picomatch to v4.0.5
• chore(deps): update dependency rollup to v4.62.2
• chore(deps): update dependency vite to v8.1.3
• chore(deps): update docker/build-push-action action to v7.3.0
• chore(deps): update docker/login-action action to v4.4.0
• chore(deps): update docker/metadata-action action to v6.2.0
• chore(deps): update docker/setup-buildx-action action to v4.2.0
• chore(deps): update docker/setup-qemu-action action to v4.2.0
• chore(deps): update node.js to v24.17.0
• fix(deps): update module github.com/kcp-dev/sdk to v0.32.3
• chore(deps): update actions/checkout action to v7
• chore(deps): update azure/setup-helm action to v5
• 🔐 Create all rate-limited PRs at once 🔐

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• chore(deps): update dependency @angular/common to v20.3.25 [security]
• chore(deps): update dependency @angular/compiler to v20.3.25 [security]
• chore(deps): update dependency @angular/core to v20.3.25 [security]

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): pin ghcr.io/platform-mesh/provider-quickstart-armament-sync docker tag to e5a41e4
• fix(deps): pin dependencies (@angular/build, @angular/cli, @angular/compiler-cli, @angular/forms, @angular/platform-browser, @angular/router, typescript, zone.js)
• chore(deps): update ghcr.io/platform-mesh/provider-quickstart docker digest to 974823d
• chore(deps): update ghcr.io/platform-mesh/provider-quickstart-portal docker digest to 4992748
• chore(deps): update golang:1.26 docker digest to d52df9c
• chore(deps): update nginx:alpine docker digest to 54f2a90
• chore(deps): update common docker tag to v0.13.0
• chore(deps): update dependency @luigi-project/client to v2.31.0
• fix(deps): update fundamental ngx and angular (major) (@angular/build, @angular/cli, @angular/compiler-cli, @angular/forms, @angular/platform-browser, @angular/router, typescript)
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update node.js to 40ad9f3
• chore(deps): update dependency jasmine-core to v6.3.0
• fix(deps): update module github.com/kcp-dev/multicluster-provider to v0.8.0
• fix(deps): update dependency @luigi-project/client-support-angular to v22

Detected Dependencies

dockerfile (3)

deploy/armament-sync.Dockerfile (2)

• golang 1.26@sha256:8f4cb3b8d3fd8c3e6eccfde0fcf54e8cea74fbb04cea961a92ee1a913d22cb17 → [Updates: 1.26]
• gcr.io/distroless/static nonroot@sha256:963fa6c544fe5ce420f1f54fb88b6fb01479f054c8056d0f74cc2c6000df5240 → [Updates: nonroot]

deploy/Dockerfile (2)

• golang 1.26@sha256:8f4cb3b8d3fd8c3e6eccfde0fcf54e8cea74fbb04cea961a92ee1a913d22cb17 → [Updates: 1.26]
• gcr.io/distroless/static nonroot@sha256:963fa6c544fe5ce420f1f54fb88b6fb01479f054c8056d0f74cc2c6000df5240 → [Updates: nonroot]

deploy/portal.Dockerfile (2)

• node 24.16@sha256:8530f76a96d88820d288761f022e318970dda93d01536919fbc16076b7983e63 → [Updates: 24.17, 24.16]
• nginx alpine@sha256:8b1e78743a03dbb2c95171cc58639fef29abc8816598e27fb910ed2e621e589a → [Updates: alpine]

github-actions (3)

.github/workflows/build-images.yaml (21)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• docker/setup-qemu-action v4.1.0@06116385d9baf250c9f4dcb4858b16962ea869c3 → [Updates: v4.2.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• docker/setup-qemu-action v4.1.0@06116385d9baf250c9f4dcb4858b16962ea869c3 → [Updates: v4.2.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• docker/setup-qemu-action v4.1.0@06116385d9baf250c9f4dcb4858b16962ea869c3 → [Updates: v4.2.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• azure/setup-helm v4.3.1@1a275c3b69536ee54be43f2070a358922e12c8d4 → [Updates: v5.0.1]

.github/workflows/ossf-scorecard.yml

.github/workflows/zizmor.yml (1)

• platform-mesh/.github main@03e076ff9aebe43ead6b9d77f3bb764a9d411347

gomod (1)

go.mod (11)

• go 1.26.3
• github.com/kcp-dev/multicluster-provider v0.7.1-0.20260518112010-9eefa0f96ce0@9eefa0f96ce0 → [Updates: v0.8.0]
• github.com/kcp-dev/sdk v0.31.2 → [Updates: v0.32.3]
• github.com/spf13/pflag v1.0.10
• k8s.io/api v0.36.2
• k8s.io/apimachinery v0.36.2
• k8s.io/client-go v0.36.2
• k8s.io/klog/v2 v2.140.0
• sigs.k8s.io/controller-runtime v0.24.1
• sigs.k8s.io/multicluster-runtime v0.24.1
• sigs.k8s.io/yaml v1.6.0

helm-values (3)

deploy/helm/wildwest-armament-sync/values.yaml (1)

• ghcr.io/platform-mesh/provider-quickstart-armament-sync unknown version → [Updates: ``]

deploy/helm/wildwest-controller/values.yaml (1)

• ghcr.io/platform-mesh/provider-quickstart sha256:ee2b38054919b66bdc52d89d6ea94fe58f25e2937368a57e1d6421b7bc49cfcb → [Updates: ``]

deploy/helm/wildwest-portal/values.yaml (1)

• ghcr.io/platform-mesh/provider-quickstart-portal sha256:492e26c751201806f4fab02cc67294a74f9b2b2e0de7534b63ba9aec8543d5f6 → [Updates: ``]

helmv3 (3)

deploy/helm/wildwest-armament-sync/Chart.yaml (1)

• common 0.12.2 → [Updates: 0.13.0]

deploy/helm/wildwest-controller/Chart.yaml (1)

• common 0.12.2 → [Updates: 0.13.0]

deploy/helm/wildwest-portal/Chart.yaml (1)

• common 0.12.2 → [Updates: 0.13.0]

npm (1)

portal/package.json (30)

• @angular/common ^20.3.19 → [Updates: ^20.3.19]
• @angular/compiler ^20.3.19 → [Updates: ^20.3.19]
• @angular/core ^20.3.19 → [Updates: ^20.3.19]
• @angular/forms ^20.3.19 → [Updates: ^20.3.19, ^22.0.0]
• @angular/platform-browser ^20.3.19 → [Updates: ^20.3.19, ^22.0.0]
• @angular/router ^20.3.19 → [Updates: ^20.3.19, ^22.0.0]
• @luigi-project/client ^2.27.0 → [Updates: ^2.27.0]
• @luigi-project/client-support-angular ^20.0.1 → [Updates: ^22.0.0]
• @ui5/webcomponents-ngx ^0.5.10
• rxjs ~7.8.0
• tslib ^2.3.0
• zone.js ~0.15.0 → [Updates: ~0.16.0]
• @angular/build ^20.3.24 → [Updates: 20.3.27, ^20.3.27, ^22.0.0]
• @angular/cli ^20.3.24 → [Updates: 20.3.27, ^20.3.27, ^22.0.0]
• @angular/compiler-cli ^20.3.19 → [Updates: 20.3.24, ^20.3.24, ^22.0.0]
• @types/jasmine 6.0.0
• jasmine-core 6.2.0 → [Updates: 6.3.0]
• karma 6.4.4
• karma-chrome-launcher 3.2.0
• karma-coverage 2.2.1
• karma-jasmine 5.1.0
• karma-jasmine-html-reporter 2.2.0
• typescript ~5.9.2 → [Updates: 5.9.3, ~7.0.0]
• vite ^8.0.0 → [Updates: ^8.0.0]
• rollup ^4.60.1 → [Updates: ^4.60.1]
• flatted ^3.4.2
• lodash ^4.18.1
• minimatch ^10.2.5
• @hono/node-server ^2.0.0 → [Updates: ^2.0.0]
• picomatch ^4.0.4 → [Updates: ^4.0.4]

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository