Dependency Dashboard

[crossplane-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update gomod2nix digest to 1201ddd (main)
• chore(deps): update actions/stale action to v10 (main)
• chore(deps): update codecov/codecov-action action to v5 (main)
• chore(deps): update dependency ubuntu to v24 (main)
• chore(deps): update github/codeql-action action to v4 (main)
• chore(deps): update renovatebot/github-action action to v46 (main)
• chore(deps): update zeebe-io/backport-action action to v4 (main)
• chore(deps): update curlimages/curl docker tag to v8.18.0 (release-1.20)
• chore(deps): update curlimages/curl docker tag to v8.18.0 (release-2.0)
• chore(deps): update curlimages/curl docker tag to v8.18.0 (release-2.1)
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package bufbuild/buf-breaking-action).

Files affected: .github/workflows/ci.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update github/codeql-action digest to b5ebac6 (main)
• chore(deps): update actions/create-github-app-token action to v2 (main)
• chore(deps): update actions/github-script action to v8 (main)
• chore(deps): update module golang.org/x/net to v0.45.0 [security] (release-1.20)
• chore(deps): update module golang.org/x/net to v0.45.0 [security] (release-2.0)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

Branch main

github-actions (6)

.github/workflows/backport.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• zeebe-io/backport-action v2.5.0@ef20d86abccbac3ee3a73cb2efbdc06344c390e5 → [Updates: v4.0.1]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/ci.yml (30)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31@4e002c8ec80594ecd40e759629461e26c8abed15
• cachix/cachix-action v16@3ba601ff5bbb07c7220846facfa2cd81eeee15a1
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31@4e002c8ec80594ecd40e759629461e26c8abed15
• cachix/cachix-action v16@3ba601ff5bbb07c7220846facfa2cd81eeee15a1
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31@4e002c8ec80594ecd40e759629461e26c8abed15
• cachix/cachix-action v16@3ba601ff5bbb07c7220846facfa2cd81eeee15a1
• nicknovitski/nix-develop v1@9be7cfb4b10451d3390a75dc18ad0465bed4932a
• github/codeql-action v3@439137e1b50c27ba9e2f9befc93e43091b449c34 → [Updates: v4, v3]
• github/codeql-action v3@439137e1b50c27ba9e2f9befc93e43091b449c34 → [Updates: v4, v3]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• aquasecurity/trivy-action 0.33.1@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8
• github/codeql-action v3@439137e1b50c27ba9e2f9befc93e43091b449c34 → [Updates: v4, v3]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31@4e002c8ec80594ecd40e759629461e26c8abed15
• cachix/cachix-action v16@3ba601ff5bbb07c7220846facfa2cd81eeee15a1
• codecov/codecov-action v4@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 → [Updates: v5]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• bufbuild/buf-setup-action v1
• bufbuild/buf-lint-action v1
• bufbuild/buf-breaking-action v1@a074e988ee34efcd4927079e79c611f428354c01
• bufbuild/buf-push-action v1
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/commands.yml (10)

• xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v8]
• xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• zeebe-io/backport-action v2.5.0@ef20d86abccbac3ee3a73cb2efbdc06344c390e5 → [Updates: v4.0.1]
• xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
• actions-ecosystem/action-remove-labels v1@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/renovate.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/create-github-app-token v1@d72941d797fd3113feb6b93fd0dec494b13a2547 → [Updates: v2]
• renovatebot/github-action v40.3.6@0984fb80fc633b17e57f3e8b6c007fe0dc3e0d62 → [Updates: v46.0.2]

.github/workflows/stale.yml (2)

• actions/stale v9@5bef64f19d7facfb25b37b414482c7164d639639 → [Updates: v10]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/tag.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• negz/create-tag v1@39bae1e0932567a58c20dea5a1a0d18358503320
• ubuntu 22.04 → [Updates: 24.04]

gomod (1)

go.mod (20)

• go 1.25.0
• dario.cat/mergo v1.0.2
• github.com/evanphx/json-patch v5.9.11+incompatible
• github.com/go-logr/logr v1.4.3
• github.com/google/go-cmp v0.7.0
• github.com/prometheus/client_golang v1.23.2
• github.com/spf13/afero v1.15.0
• golang.org/x/time v0.14.0
• google.golang.org/grpc v1.78.0
• google.golang.org/protobuf v1.36.11
• k8s.io/api v0.35.0
• k8s.io/apiextensions-apiserver v0.35.0
• k8s.io/apimachinery v0.35.0
• k8s.io/client-go v0.35.0
• k8s.io/component-base v0.35.0
• k8s.io/klog/v2 v2.130.1
• k8s.io/utils v0.0.0-20260108192941-914a6e750570@914a6e750570
• sigs.k8s.io/controller-runtime v0.23.1
• sigs.k8s.io/controller-tools v0.20.0
• sigs.k8s.io/yaml v1.6.0

nix (1)

flake.nix (2)

• gomod2nix 49662a44272806ff785df2990a420edaaca15db4 → [Updates: undefined]
• nixpkgs nixos-25.11

renovate-config-presets (1)

.github/renovate.json5

Branch release-1.20

dockerfile (1)

Earthfile (1)

• curlimages/curl 8.8.0 → [Updates: 8.18.0]

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (1)

• golang.org/x/net v0.38.0 → [Updates: v0.45.0]

regex (10)

.github/workflows/ci.yml

.github/workflows/ci.yml

.github/workflows/renovate.yml

.github/workflows/renovate.yml

Earthfile

Earthfile

Earthfile

Earthfile

Earthfile

Earthfile

Branch release-2.0

dockerfile (1)

Earthfile (1)

• curlimages/curl 8.8.0 → [Updates: 8.18.0]

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (1)

• golang.org/x/net v0.39.0 → [Updates: v0.45.0]

regex (10)

.github/workflows/ci.yml

.github/workflows/ci.yml

.github/workflows/renovate.yml

.github/workflows/renovate.yml

Earthfile

Earthfile

Earthfile

Earthfile

Earthfile

Earthfile

Branch release-2.1

dockerfile (1)

Earthfile (1)

• curlimages/curl 8.8.0 → [Updates: 8.18.0]

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod

regex (10)

.github/workflows/ci.yml

.github/workflows/ci.yml

.github/workflows/renovate.yml

.github/workflows/renovate.yml

Earthfile

Earthfile

Earthfile

Earthfile

Earthfile

Earthfile