Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps-dev): update actions/checkout digest to 11bd719
• chore(deps-dev): update pascalgn/size-label-action digest to 6ec5bd0
• chore(deps): update module github.com/alitto/pond to v2
• chore(deps-dev): update actions/setup-go action to v5.1.0
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

Dockerfile

github-actions

.github/workflows/main.yaml

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe
• shogo82148/actions-goveralls v1.9.0@785c9d68212c91196d3994652647f8721918ba11

.github/workflows/pr-actions.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• zgosalvez/github-actions-ensure-sha-pinned-actions v3.0.17@5d6ac37a4cef8b8df67f482a8e384987766f0213

.github/workflows/pr-build.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe
• shogo82148/actions-goveralls v1.9.0@785c9d68212c91196d3994652647f8721918ba11

.github/workflows/pr-goreleaser.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• goreleaser/goreleaser-action v6.1.0@9ed2f89a662bf1735a48bc8557fd212fa902bebf

.github/workflows/pr-label.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• pascalgn/size-label-action 49850f3557d4b77f0b2e759829defd77ccc07c54

.github/workflows/pr-stale.yaml

• actions/stale v9.0.0@28ca1036281a5e5922ead5184a1bbf96e5fc984e

.github/workflows/pr-trivy.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• aquasecurity/trivy-action 0.29.0@18f2510ee396bbf400402947b394f2dd8c87dbb0
• github/codeql-action v3.27.5@f09c1c0a94de965c15400f5634aa42fac8fb8f88

.github/workflows/publish-release.yaml

• Actions-R-Us/actions-tagger v2.0.3@330ddfac760021349fef7ff62b372f2f691c20fb

.github/workflows/rebase.yaml

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• cirrus-actions/rebase 1.8@b87d48154a87a85666003575337e27b8cd65f691

.github/workflows/release.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• sigstore/cosign-installer v3.7.0@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
• anchore/sbom-action v0.17.8@55dc4ee22412511ee8c3142cbea40418e6cec693
• goreleaser/goreleaser-action v6.1.0@9ed2f89a662bf1735a48bc8557fd212fa902bebf

.github/workflows/report-on-vulnerabilities.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• aquasecurity/trivy-action 0.29.0@18f2510ee396bbf400402947b394f2dd8c87dbb0
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5

.github/workflows/scan.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818

.github/workflows/scorecard.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• github/codeql-action v3.27.5@f09c1c0a94de965c15400f5634aa42fac8fb8f88

gomod

go.mod

• go 1.22.0
• github.com/alitto/pond v1.9.2
• github.com/crossplane/crossplane-runtime v1.18.0
• github.com/go-logr/logr v1.4.2
• github.com/go-logr/zapr v1.3.0
• github.com/sethvargo/go-envconfig v1.1.0
• github.com/spf13/pflag v1.0.5
• github.com/upbound/provider-terraform v0.19.0
• go.uber.org/zap v1.27.0
• k8s.io/api v0.31.3
• k8s.io/apimachinery v0.31.3

homebrew

Formula/tfxunpack.rb

• DoodleScheduling/tfxunpack v0.1.0

---

• Check this box to trigger a request for Renovate to run again on this repository