Dependency Dashboard 🤖

[syself-bot]

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• 🌱 Update github-actions group (actions/cache, actions/create-github-app-token, actions/download-artifact, actions/setup-go, actions/setup-node, actions/upload-artifact, docker/build-push-action, hetznercloud/tps-action, softprops/action-gh-release)
• 🌱 Update containerd/containerd to 1.7.27
• 🌱 Update github-actions group (patch) (renovatebot/github-action, sigstore/cosign-installer)
• 🌱 Update Update Golang Dependencies group (patch) (github.com/go-logr/logr, github.com/guettli/check-conditions, github.com/onsi/ginkgo/v2, github.com/onsi/gomega)
• 🌱 Update image docker.io/library/alpine to v3.22.0
• 🌱 Update Update Golang Dependencies group (minor) (github.com/hetznercloud/hcloud-go/v2, github.com/onsi/gomega, github.com/prometheus/common, golang.org/x/crypto, golang.org/x/exp, k8s.io/utils, sigs.k8s.io/kind)
• 🌱 Update Builder Image group (adrienverge/yamllint, docker.io/aquasec/trivy, docker.io/library/alpine, docker.io/library/golang, golangci/golangci-lint)
• 🌱 Update containerd/containerd to 2.1.1
• 🌱 Update Github Actions group to v2
• 🌱 Update Github Actions group to v42.0.4
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

images/builder/Dockerfile

• docker.io/library/alpine 3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
• docker.io/library/alpine 3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
• docker.io/hadolint/hadolint v2.12.0-alpine@sha256:3c206a451cec6d486367e758645269fd7d696c5ccb6ff59d8b03b0e45268a199
• docker.io/aquasec/trivy 0.60.0@sha256:91c3a842834563a6860dbaec5af7c1949df5caf988f9632ef5cbb0a5cd59d8f8
• docker.io/library/golang 1.23.7-bullseye@sha256:c4f892cd1906e6bf8a0e181f48babf76331c6f5dc786b709ffc9f591cb7edece

images/cache/Dockerfile

• docker.io/library/alpine 3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
• docker.io/library/alpine 3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c

images/caph/Dockerfile

• docker.io/library/golang 1.23.7-bullseye@sha256:15c182db16ffc2d7abc4db2b09f468129b9adec2f7c2ddaa0c909d8cb06f13b5

images/pre-provision-command/Dockerfile

github-actions

.github/actions/e2e/action.yaml

• actions/cache v4@d4323d4df104b026a6aa633fdb11d772146be0bf
• actions/download-artifact v4@cc203385981b70ca67e1cc392babf9cc229d5806
• hetznercloud/tps-action dee5dd2546322c28ed8f74b910189066e8b6f31a
• actions/upload-artifact v4@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1

.github/actions/manager-image/action.yaml

• docker/setup-buildx-action v3.10.0@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2
• docker/login-action v3.4.0@74a5d142397b4f367a81961eba4e8cd7edddf772
• actions/cache v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684
• docker/build-push-action v6.15.0@471d1dc4e07e5cdedd4c2171150001c434f0b7a4
• docker/build-push-action v6@471d1dc4e07e5cdedd4c2171150001c434f0b7a4

.github/actions/metadata/action.yaml

• docker/metadata-action v5.7.0@902fa8ec7d6ecbf8d84d538b9b233a880e428804

.github/actions/setup-go/action.yaml

• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/cache v4@d4323d4df104b026a6aa633fdb11d772146be0bf
• actions/cache v4@d4323d4df104b026a6aa633fdb11d772146be0bf

.github/actions/test-release/action.yaml

• actions/cache v4@d4323d4df104b026a6aa633fdb11d772146be0bf
• actions/upload-artifact v4@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1

.github/workflows/build.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• docker/setup-qemu-action v3@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2
• docker/login-action v3.4.0@74a5d142397b4f367a81961eba4e8cd7edddf772
• sigstore/cosign-installer v3.8.1@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a
• actions/cache v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684
• docker/build-push-action v6.15.0@471d1dc4e07e5cdedd4c2171150001c434f0b7a4
• docker/build-push-action v6@471d1dc4e07e5cdedd4c2171150001c434f0b7a4
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• docker/build-push-action v6.15.0@471d1dc4e07e5cdedd4c2171150001c434f0b7a4

.github/workflows/e2e-basic-baremetal.yaml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/e2e-basic.yaml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/e2e-feature-baremetal.yaml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/e2e-feature.yaml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/e2e-periodic.yaml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/e2e-upgrade-caph.yaml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/e2e-upgrade-kubernetes.yaml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/main-promote-builder-image.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ghcr.io/syself/caph-builder 1.0.23

.github/workflows/pr-e2e.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/pr-lint.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ghcr.io/syself/caph-builder 1.0.23

.github/workflows/pr-verify.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4@cdca7365b2dadb8aad0a33bc7601856ffabcc48e
• pascalgn/size-label-action v0.5.5@f8edde36b3be04b4f65dcfead05dc8691b374348
• actions/labeler v5@8558fd74291d67161a8a78ce36a881fa63b766a9
• EndBug/label-sync v2@52074158190acb45f3077f9099fea818aa43f97a
• node 22

.github/workflows/release.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• docker/setup-qemu-action v3@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2
• docker/login-action v3.4.0@74a5d142397b4f367a81961eba4e8cd7edddf772
• sigstore/cosign-installer v3.8.1@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a
• docker/build-push-action v6@471d1dc4e07e5cdedd4c2171150001c434f0b7a4
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• softprops/action-gh-release v2@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda

.github/workflows/report-bin-size.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02

.github/workflows/schedule-cache-cleaner-caph-image.yml

• actions/cache v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684
• ubuntu 24.04

.github/workflows/schedule-scan-image.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ghcr.io/syself/caph-builder 1.0.23

.github/workflows/schedule-update-bot.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/create-github-app-token v1@21cfef2b496dd8ef5b904c159339626a10ad380e
• renovatebot/github-action v41.0.18@c21017a4a2fc9f42953bcc907e375a5a544557ec

.github/workflows/test.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• test-summary/action v2.4@31493c76ec9e7aa675f1585d3ed6f1da69269a86
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02

gomod

go.mod

• go 1.23.7
• github.com/blang/semver/v4 v4.0.0
• github.com/bramvdbogaerde/go-scp v1.5.0
• github.com/go-logr/logr v1.4.2
• github.com/go-logr/zapr v1.3.0
• github.com/guettli/check-conditions v0.0.9
• github.com/hetznercloud/hcloud-go/v2 v2.19.1
• github.com/onsi/ginkgo/v2 v2.23.0
• github.com/onsi/gomega v1.36.2
• github.com/prometheus/common v0.63.0
• github.com/spf13/pflag v1.0.6
• github.com/stoewer/go-strcase v1.3.0
• github.com/stretchr/testify v1.10.0
• github.com/syself/hrobot-go v0.2.6
• go.uber.org/zap v1.27.0
• golang.org/x/crypto v0.36.0
• golang.org/x/exp v0.0.0-20250305212735-054e65f0b394@054e65f0b394
• golang.org/x/mod v0.24.0
• k8s.io/klog/v2 v2.130.1
• k8s.io/utils v0.0.0-20241210054802-24370beab758@24370beab758
• sigs.k8s.io/controller-runtime v0.18.7
• sigs.k8s.io/kind v0.27.0

regex

templates/cluster-templates/bases/hcloud-kcp-ubuntu.yaml

• containerd/containerd 1.7.26

templates/cluster-templates/bases/hetznerbaremetal-kcp-ubuntu.yaml

• containerd/containerd 1.7.26

templates/cluster-templates/bases/kct-md-0-ubuntu.yaml

• containerd/containerd 1.7.26

images/builder/Dockerfile

• lycheeverse/lychee v0.15.1
• golangci/golangci-lint v1.64.7
• debian_11/skopeo 1.2.2+dfsg1-1+b6
• adrienverge/yamllint v1.36.2
• opt-nc/yamlfixer 0.9.15

[guettli]

@batistein do we need this issue, or should I close it?

Update: This issue is important, and must not get closed. It gets used by Renovate to have a Dashboard of the open PRs.