Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps-dev): update actions/checkout digest
• chore(deps-dev): update pascalgn/size-label-action digest to 6ec5bd0
• chore(deps-dev): update github/codeql-action action to v3.27.2
• chore(deps): update module github.com/alitto/pond to v2
• chore(deps-dev): update actions/checkout action
• chore(deps-dev): update actions/setup-go action to v5.1.0
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

Dockerfile

github-actions

.github/workflows/main.yaml

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe
• shogo82148/actions-goveralls v1.9.0@785c9d68212c91196d3994652647f8721918ba11

.github/workflows/pr-actions.yaml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• zgosalvez/github-actions-ensure-sha-pinned-actions v3.0.16@38608ef4fb69adae7f1eac6eeb88e67b7d083bfd

.github/workflows/pr-build.yaml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v3@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
• actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe
• shogo82148/actions-goveralls v1.9.0@785c9d68212c91196d3994652647f8721918ba11

.github/workflows/pr-goreleaser.yaml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• goreleaser/goreleaser-action v6.1.0@9ed2f89a662bf1735a48bc8557fd212fa902bebf

.github/workflows/pr-label.yaml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• pascalgn/size-label-action 49850f3557d4b77f0b2e759829defd77ccc07c54

.github/workflows/pr-stale.yaml

• actions/stale v9.0.0@28ca1036281a5e5922ead5184a1bbf96e5fc984e

.github/workflows/pr-trivy.yaml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• aquasecurity/trivy-action 0.28.0@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2
• github/codeql-action v3.27.1@4f3212b61783c3c68e8309a0f18a699764811cda

.github/workflows/publish-release.yaml

• Actions-R-Us/actions-tagger v2.0.3@330ddfac760021349fef7ff62b372f2f691c20fb

.github/workflows/rebase.yaml

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• cirrus-actions/rebase 1.8@b87d48154a87a85666003575337e27b8cd65f691

.github/workflows/release.yaml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• sigstore/cosign-installer v3.7.0@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
• anchore/sbom-action v0.17.7@fc46e51fd3cb168ffb36c6d1915723c47db58abb
• goreleaser/goreleaser-action v6.1.0@9ed2f89a662bf1735a48bc8557fd212fa902bebf

.github/workflows/report-on-vulnerabilities.yaml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• aquasecurity/trivy-action 0.28.0@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5

.github/workflows/scan.yaml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818

.github/workflows/scorecard.yaml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• github/codeql-action v3.27.1@4f3212b61783c3c68e8309a0f18a699764811cda

gomod

go.mod

• go 1.22.0
• github.com/alitto/pond v1.9.2
• github.com/crossplane/crossplane-runtime v1.18.0
• github.com/go-logr/logr v1.4.2
• github.com/go-logr/zapr v1.3.0
• github.com/sethvargo/go-envconfig v1.1.0
• github.com/spf13/pflag v1.0.5
• github.com/upbound/provider-terraform v0.19.0
• go.uber.org/zap v1.27.0
• k8s.io/api v0.31.2
• k8s.io/apimachinery v0.31.2

homebrew

Formula/tfxunpack.rb

• DoodleScheduling/tfxunpack v0.1.0

---

• Check this box to trigger a request for Renovate to run again on this repository