Dependency Dashboard

[red-hat-konflux-kflux-prd-rh03]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.
• ⚠️ WARN: Dependency name is unset, skipping

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (46)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/asaskevich/govalidator	2023-03-01
gomod	github.com/aymerick/douceur	2015-08-27
gomod	github.com/beorn7/perks	2019-07-31
gomod	github.com/blang/semver/v4	2020-05-24
gomod	github.com/cespare/xxhash/v2	2024-04-04
gomod	github.com/davecgh/go-spew	2018-02-21
gomod	github.com/evanphx/json-patch/v5	2025-01-28
gomod	github.com/go-logr/stdr	2021-12-14
gomod	github.com/go-logr/zapr	2023-11-03
gomod	github.com/go-task/slim-sprig/v3	2023-09-14
gomod	github.com/gobuffalo/flect	2024-09-21
gomod	github.com/golang/glog	2025-04-29
gomod	github.com/golang/mock	2022-05-12
gomod	github.com/google/btree	2024-08-21
gomod	github.com/google/go-cmp	2025-01-14
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/gorilla/css	2023-10-18
gomod	github.com/gorilla/websocket	2024-06-14
gomod	github.com/hashicorp/errwrap	2020-07-14
gomod	github.com/hashicorp/go-multierror	2021-03-11
gomod	github.com/inconshreveable/mousetrap	2022-11-27
gomod	github.com/jpillora/backoff	2019-10-03
gomod	github.com/json-iterator/go	2021-09-11
gomod	github.com/kylelemons/godebug	2019-05-05
gomod	github.com/microcosm-cc/bluemonday	2024-07-04
gomod	github.com/mitchellh/mapstructure	2022-04-20
gomod	github.com/modern-go/concurrent	2018-03-06
gomod	github.com/modern-go/reflect2	2021-09-11
gomod	github.com/munnerz/goautoneg	2019-10-10
gomod	github.com/mxk/go-flowrate	2014-04-19
gomod	github.com/nxadm/tail	2023-10-10
gomod	github.com/openshift/operator-custom-metrics	2022-10-31
gomod	github.com/opentracing/opentracing-go	2020-07-01
gomod	github.com/pmezard/go-difflib	2016-01-10
gomod	github.com/prometheus/client_model	2025-04-11
gomod	github.com/skratchdot/open-golang	2020-01-16
gomod	github.com/sykesm/zap-logfmt	2020-09-22
gomod	github.com/x448/float16	2020-01-17
gomod	go.uber.org/multierr	2023-03-29
gomod	gopkg.in/evanphx/json-patch.v4	2025-01-28
gomod	gopkg.in/inf.v0	2018-03-26
gomod	gopkg.in/tomb.v1	2014-10-24
gomod	gopkg.in/yaml.v2	2022-05-27
gomod	gopkg.in/yaml.v3	2022-05-27
gomod	sigs.k8s.io/randfill	2025-03-04
gomod	sigs.k8s.io/yaml	2025-07-24

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (go package github.com/openshift/cluster-version-operator), Failed to look up go package gopkg.in/yaml.v2: no-result, Failed to look up go package k8s.io/code-generator: no-result.

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update gomod dependencies (github.com/Masterminds/semver/v3, github.com/fatih/color, github.com/fsnotify/fsnotify, github.com/fxamacker/cbor/v2, github.com/go-logr/logr, github.com/go-openapi/analysis, github.com/go-openapi/errors, github.com/go-openapi/jsonpointer, github.com/go-openapi/jsonreference, github.com/go-openapi/loads, github.com/go-openapi/runtime, github.com/go-openapi/spec, github.com/go-openapi/strfmt, github.com/go-openapi/swag, github.com/go-openapi/swag/cmdutils, github.com/go-openapi/swag/conv, github.com/go-openapi/swag/fileutils, github.com/go-openapi/swag/jsonname, github.com/go-openapi/swag/jsonutils, github.com/go-openapi/swag/loading, github.com/go-openapi/swag/mangling, github.com/go-openapi/swag/netutils, github.com/go-openapi/swag/stringutils, github.com/go-openapi/swag/typeutils, github.com/go-openapi/swag/yamlutils, github.com/go-openapi/validate, github.com/golang/glog, github.com/google/gnostic-models, github.com/google/pprof, github.com/mattn/go-colorable, github.com/mattn/go-isatty, github.com/microcosm-cc/bluemonday, github.com/onsi/ginkgo/v2, github.com/onsi/gomega, github.com/openshift-online/ocm-api-model/clientapi, github.com/openshift-online/ocm-api-model/model, github.com/openshift-online/ocm-sdk-go, github.com/openshift/api, github.com/openshift/client-go, github.com/openshift/osde2e-common, github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring, github.com/prometheus-operator/prometheus-operator/pkg/client, github.com/prometheus/alertmanager, github.com/prometheus/client_golang, github.com/prometheus/common, github.com/prometheus/procfs, go, go.mongodb.org/mongo-driver, go.opentelemetry.io/auto/sdk, go.opentelemetry.io/otel, go.opentelemetry.io/otel/metric, go.opentelemetry.io/otel/trace, go.uber.org/mock, go.uber.org/zap, go.yaml.in/yaml/v2, golang.org/x/mod, golang.org/x/net, golang.org/x/oauth2, golang.org/x/sync, golang.org/x/sys, golang.org/x/term, golang.org/x/text, golang.org/x/tools, gomodules.xyz/jsonpatch/v2, google.golang.org/protobuf, k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/client-go, k8s.io/gengo/v2, k8s.io/kube-openapi, k8s.io/utils, sigs.k8s.io/controller-runtime, sigs.k8s.io/controller-tools, sigs.k8s.io/e2e-framework, sigs.k8s.io/structured-merge-diff/v6)
• chore(deps): update go-openapi packages to v1 (github.com/go-openapi/jsonpointer, github.com/go-openapi/jsonreference)
• chore(deps): update module github.com/cenkalti/backoff/v4 to v7
• chore(deps): update module github.com/golang-jwt/jwt/v4 to v5
• chore(deps): update module github.com/oklog/ulid to v2
• chore(deps): update module go.mongodb.org/mongo-driver to v2
• chore(deps): update module go.yaml.in/yaml/v2 to v3
• chore(deps): update module gomodules.xyz/jsonpatch/v2 to v3
• chore(deps): update module gopkg.in/evanphx/json-patch.v4 to v5
• fix(deps): update module github.com/onsi/ginkgo to v2
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

gomod (1)

go.mod (136)

• go 1.25.0
• go 1.25.11 → [Updates: 1.26.5]
• github.com/blang/semver/v4 v4.0.0
• github.com/go-logr/logr v1.4.3 → [Updates: v1.4.4]
• github.com/go-openapi/runtime v0.26.2 → [Updates: v0.32.6]
• github.com/go-openapi/strfmt v0.22.0 → [Updates: v0.27.0]
• github.com/golang/mock v1.6.0
• github.com/google/uuid v1.6.0
• github.com/hashicorp/go-multierror v1.1.1
• github.com/jpillora/backoff v1.0.0
• github.com/onsi/ginkgo v1.16.5 → [Updates: v2.32.0]
• github.com/onsi/ginkgo/v2 v2.27.2 → [Updates: v2.32.0]
• github.com/onsi/gomega v1.38.3 → [Updates: v1.42.1]
• github.com/openshift-online/ocm-api-model/clientapi v0.0.449 → [Updates: v0.0.462]
• github.com/openshift-online/ocm-sdk-go v0.1.494 → [Updates: v0.1.505]
• github.com/openshift/api v0.0.0-20260619095050-5346161d1bf2@5346161d1bf2 → [Updates: v0.0.0-20260619095050-5346161d1bf2]
• github.com/openshift/client-go v0.0.0-20260622130833-df412d4d283e@df412d4d283e → [Updates: v0.0.0-20260622130833-df412d4d283e]
• github.com/openshift/cluster-version-operator v1.0.1-0.20251024155448-77782f1a4b96@77782f1a4b96
• github.com/openshift/library-go v0.0.0-20260626085302-dd144d27352b@dd144d27352b → [Updates: v0.0.0-20260724131744-e4053a935312]
• github.com/openshift/operator-custom-metrics v0.5.1
• github.com/openshift/osde2e-common v0.0.0-20251022030855-097ba22da034@097ba22da034 → [Updates: v0.0.0-20260723151626-dcf3e27b8016]
• github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.74.0 → [Updates: v0.92.1]
• github.com/prometheus-operator/prometheus-operator/pkg/client v0.71.0 → [Updates: v0.92.1]
• github.com/prometheus/alertmanager v0.26.0 → [Updates: v0.33.1]
• github.com/prometheus/client_golang v1.23.2 → [Updates: v1.24.1]
• github.com/sykesm/zap-logfmt v0.0.4
• go.uber.org/mock v0.4.0 → [Updates: v0.6.0]
• go.uber.org/zap v1.27.0 → [Updates: v1.28.0]
• gopkg.in/yaml.v2 v2.4.0
• k8s.io/api v0.35.1 → [Updates: v0.36.3]
• k8s.io/apimachinery v0.35.1 → [Updates: v0.36.3]
• k8s.io/client-go v0.35.1 → [Updates: v0.36.3]
• k8s.io/kube-openapi v0.0.0-20260519202549-bbf5c5577288@bbf5c5577288 → [Updates: v0.0.0-20260721132016-d427ff9ee9ad]
• sigs.k8s.io/controller-runtime v0.21.0 → [Updates: v0.24.1]
• sigs.k8s.io/controller-tools v0.20.1 → [Updates: v0.21.0]
• github.com/Masterminds/semver/v3 v3.4.0 → [Updates: v3.5.0]
• github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2@a9d515a09cc2
• github.com/aymerick/douceur v0.2.0
• github.com/beorn7/perks v1.0.1
• github.com/cenkalti/backoff/v4 v4.3.0 → [Updates: v7.0.0]
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/emicklei/go-restful/v3 v3.13.0
• github.com/evanphx/json-patch/v5 v5.9.11
• github.com/fatih/color v1.18.0 → [Updates: v1.19.0]
• github.com/fsnotify/fsnotify v1.9.0 → [Updates: v1.10.1]
• github.com/fxamacker/cbor/v2 v2.9.0 → [Updates: v2.9.2]
• github.com/go-logr/stdr v1.2.2
• github.com/go-logr/zapr v1.3.0
• github.com/go-openapi/analysis v0.22.2 → [Updates: v0.25.5]
• github.com/go-openapi/errors v0.21.0 → [Updates: v0.22.8]
• github.com/go-openapi/jsonpointer v0.21.0 → [Updates: v0.24.0, v1.0.0]
• github.com/go-openapi/jsonreference v0.20.4 → [Updates: v0.21.6, v1.0.0]
• github.com/go-openapi/loads v0.21.5 → [Updates: v0.25.0]
• github.com/go-openapi/spec v0.20.14 → [Updates: v0.22.9]
• github.com/go-openapi/swag v0.25.4 → [Updates: v0.27.3]
• github.com/go-openapi/swag/cmdutils v0.25.4 → [Updates: v0.27.3]
• github.com/go-openapi/swag/conv v0.25.4 → [Updates: v0.27.3]
• github.com/go-openapi/swag/fileutils v0.25.4 → [Updates: v0.27.3]
• github.com/go-openapi/swag/jsonname v0.25.4 → [Updates: v0.27.3]
• github.com/go-openapi/swag/jsonutils v0.25.4 → [Updates: v0.27.3]
• github.com/go-openapi/swag/loading v0.25.4 → [Updates: v0.27.3]
• github.com/go-openapi/swag/mangling v0.25.4 → [Updates: v0.27.3]
• github.com/go-openapi/swag/netutils v0.25.4 → [Updates: v0.27.3]
• github.com/go-openapi/swag/stringutils v0.25.4 → [Updates: v0.27.3]
• github.com/go-openapi/swag/typeutils v0.25.4 → [Updates: v0.27.3]
• github.com/go-openapi/swag/yamlutils v0.25.4 → [Updates: v0.27.3]
• github.com/go-openapi/validate v0.22.6 → [Updates: v0.26.1]
• github.com/go-task/slim-sprig/v3 v3.0.0
• github.com/gobuffalo/flect v1.0.3
• github.com/golang-jwt/jwt/v4 v4.5.2 → [Updates: v5.3.1]
• github.com/golang/glog v1.2.4 → [Updates: v1.2.5]
• github.com/google/btree v1.1.3
• github.com/google/gnostic-models v0.7.0 → [Updates: v0.7.1]
• github.com/google/go-cmp v0.7.0
• github.com/google/pprof v0.0.0-20250403155104-27863c87afa6@27863c87afa6 → [Updates: v0.0.0-20260709232956-b9395ee17fa0]
• github.com/gorilla/css v1.0.1
• github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674@e064f32e3674
• github.com/hashicorp/errwrap v1.1.0
• github.com/inconshreveable/mousetrap v1.1.0
• github.com/json-iterator/go v1.1.12
• github.com/kylelemons/godebug v1.1.0
• github.com/mattn/go-colorable v0.1.13 → [Updates: v0.1.15]
• github.com/mattn/go-isatty v0.0.20 → [Updates: v0.0.24]
• github.com/microcosm-cc/bluemonday v1.0.26 → [Updates: v1.0.27]
• github.com/mitchellh/mapstructure v1.5.0
• github.com/moby/spdystream v0.5.1
• github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd
• github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee@35a7c28c31ee
• github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822
• github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f@cca7078d478f
• github.com/nxadm/tail v1.4.11
• github.com/oklog/ulid v1.3.1 → [Updates: v2.1.2]
• github.com/openshift-online/ocm-api-model/model v0.0.449 → [Updates: v0.0.462]
• github.com/opentracing/opentracing-go v1.2.0
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/prometheus/client_model v0.6.2
• github.com/prometheus/common v0.66.1 → [Updates: v0.70.1]
• github.com/prometheus/procfs v0.16.1 → [Updates: v0.21.1]
• github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966@eef842397966
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/x448/float16 v0.8.4
• go.mongodb.org/mongo-driver v1.13.1 → [Updates: v1.17.9, v2.8.0]
• go.opentelemetry.io/auto/sdk v1.1.0 → [Updates: v1.2.1]
• go.opentelemetry.io/otel v1.36.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/metric v1.36.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/trace v1.36.0 → [Updates: v1.44.0]
• go.uber.org/multierr v1.11.0
• go.yaml.in/yaml/v2 v2.4.3 → [Updates: v2.4.4, v3.0.4]
• go.yaml.in/yaml/v3 v3.0.4 → [Updates: v3.0.5]
• golang.org/x/mod v0.35.0 → [Updates: v0.38.0]
• golang.org/x/net v0.55.1-0.20260602153038-42abb857022c@42abb857022c → [Updates: v0.57.0]
• golang.org/x/oauth2 v0.30.0 → [Updates: v0.36.0]
• golang.org/x/sync v0.20.0 → [Updates: v0.22.0]
• golang.org/x/sys v0.45.0 → [Updates: v0.47.0]
• golang.org/x/term v0.43.0 → [Updates: v0.45.0]
• golang.org/x/text v0.37.0 → [Updates: v0.40.0]
• golang.org/x/time v0.15.0
• golang.org/x/tools v0.44.0 → [Updates: v0.48.0]
• gomodules.xyz/jsonpatch/v2 v2.4.0 → [Updates: v2.5.0, v3.0.1]
• google.golang.org/protobuf v1.36.8 → [Updates: v1.36.11]
• gopkg.in/evanphx/json-patch.v4 v4.13.0 → [Updates: v5.9.11]
• gopkg.in/inf.v0 v0.9.1
• gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7@dd632973f1e7
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/apiextensions-apiserver v0.35.1 → [Updates: v0.36.3]
• k8s.io/code-generator v0.35.1
• k8s.io/gengo/v2 v2.0.0-20250922181213-ec3ebc5fd46b@ec3ebc5fd46b → [Updates: v2.0.0-20260408192533-25e2208e0dc3]
• k8s.io/klog/v2 v2.140.0
• k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2@b8788abfbbc2 → [Updates: v0.0.0-20260707023825-cf1189d6abe3]
• sigs.k8s.io/e2e-framework v0.5.0 → [Updates: v0.7.0]
• sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730@2d320260d730
• sigs.k8s.io/randfill v1.0.0
• sigs.k8s.io/structured-merge-diff/v6 v6.3.2 → [Updates: v6.4.2]
• sigs.k8s.io/yaml v1.6.0

tekton (7)

.tekton/managed-upgrade-operator-agentic-sdlc-check-pull-request.yaml

.tekton/managed-upgrade-operator-e2e-pull-request.yaml

.tekton/managed-upgrade-operator-e2e-push.yaml

.tekton/managed-upgrade-operator-pko-pull-request.yaml

.tekton/managed-upgrade-operator-pko-push.yaml

.tekton/managed-upgrade-operator-pull-request.yaml

.tekton/managed-upgrade-operator-push.yaml

[openshift-bot]

Issues go stale after 90d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle stale

[openshift-bot]

Stale issues rot after 30d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle rotten.
Rotten issues close after an additional 30d of inactivity.
Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle rotten
/remove-lifecycle stale

[openshift-bot]

Rotten issues close after 30d of inactivity.

Reopen the issue by commenting /reopen.
Mark the issue as fresh by commenting /remove-lifecycle rotten.
Exclude this issue from closing again by commenting /lifecycle frozen.

/close not-planned

[openshift-ci]

@openshift-bot: Closing this issue, marking it as "Not Planned".

Details

In response to this:

Rotten issues close after 30d of inactivity.

Reopen the issue by commenting /reopen.
Mark the issue as fresh by commenting /remove-lifecycle rotten.
Exclude this issue from closing again by commenting /lifecycle frozen.

/close not-planned

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.