Dependency Dashboard

[crossplane-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: No releases satisfy vulnerabilityFixVersion
• ⚠️ WARN: Package lookup failures

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• fix(deps): update k8s.io/utils digest to cf1189d (main)

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package bufbuild/buf-breaking-action).

Files affected: .github/workflows/ci.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): lock file maintenance (main)
• fix(deps): update module github.com/crossplane/crossplane/apis/v2 to v2.4.1 (main)
• fix(deps): update module github.com/sigstore/sigstore to v1.11.0 (main)
• chore(deps): lock file maintenance (release-2.2)
• chore(deps): update module golang.org/x/crypto to v0.56.0 [security] (release-2.3)
• chore(deps): lock file maintenance (release-2.3)
• chore(deps): update module golang.org/x/crypto to v0.56.0 [security] (release-2.4)
• chore(deps): lock file maintenance (release-2.4)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

Branch main

github-actions (6)

.github/workflows/backport.yml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• zeebe-io/backport-action v4.6.0@2e830a1d0b8269505846ddd407a70876913ad1f8
• ubuntu 26.04

.github/workflows/ci.yml (28)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31@13d8dd58da0234aa297dedd986986ccb8e7f3e24
• cachix/cachix-action v17@38b082610b782e7e93e209c35fd730d399dee866
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31@13d8dd58da0234aa297dedd986986ccb8e7f3e24
• cachix/cachix-action v17@38b082610b782e7e93e209c35fd730d399dee866
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31@13d8dd58da0234aa297dedd986986ccb8e7f3e24
• cachix/cachix-action v17@38b082610b782e7e93e209c35fd730d399dee866
• nicknovitski/nix-develop v1@9be7cfb4b10451d3390a75dc18ad0465bed4932a
• github/codeql-action v4@1c5b675653bb5c22dbe9b12b556ec555138e09fd
• github/codeql-action v4@1c5b675653bb5c22dbe9b12b556ec555138e09fd
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31@13d8dd58da0234aa297dedd986986ccb8e7f3e24
• cachix/cachix-action v17@38b082610b782e7e93e209c35fd730d399dee866
• codecov/codecov-action v7@303a32d7a59b442fa8d48b6a1cc6825c09c847a5
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• bufbuild/buf-setup-action v1
• bufbuild/buf-lint-action v1
• bufbuild/buf-breaking-action v1@a074e988ee34efcd4927079e79c611f428354c01
• bufbuild/buf-push-action v1
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04

.github/workflows/commands.yml (10)

• xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• zeebe-io/backport-action v4.6.0@2e830a1d0b8269505846ddd407a70876913ad1f8
• xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
• actions-ecosystem/action-remove-labels v1@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04

.github/workflows/renovate.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• renovatebot/github-action v46.3.3@9fea9f0fbf80401026d11d03911d62b1f70fef1f

.github/workflows/stale.yml (2)

• actions/stale v11@4391f3da665fdf50b6810c1a66712fb9ba21aa93
• ubuntu 26.04

.github/workflows/tag.yml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• negz/create-tag v2@8dce6c9d9b12d161abe01c02d2b03f19e2e9e9bb
• ubuntu 26.04

gomod (1)

go.mod (30)

• go 1.26.0
• dario.cat/mergo v1.0.2
• github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6@e8a1dd7889d6
• github.com/Masterminds/semver/v3 v3.5.0
• github.com/crossplane/crossplane/apis/v2 v2.3.4 → [Updates: v2.4.1]
• github.com/evanphx/json-patch v5.9.11+incompatible
• github.com/go-logr/logr v1.4.4
• github.com/google/go-cmp v0.7.0
• github.com/google/go-containerregistry v0.22.1
• github.com/google/go-containerregistry/pkg/authn/k8schain v0.0.0-20260911193048-0c8bedb78437@0c8bedb78437
• github.com/in-toto/attestation v1.2.0
• github.com/in-toto/in-toto-golang v0.11.0
• github.com/prometheus/client_golang v1.24.1
• github.com/sigstore/cosign/v3 v3.1.3
• github.com/sigstore/sigstore v1.10.8 → [Updates: v1.11.0]
• github.com/sirupsen/logrus v1.10.2
• github.com/spf13/afero v1.15.0
• golang.org/x/time v0.16.0
• google.golang.org/grpc v1.84.0
• google.golang.org/protobuf v1.36.12
• k8s.io/api v0.37.0
• k8s.io/apiextensions-apiserver v0.37.0
• k8s.io/apimachinery v0.37.0
• k8s.io/client-go v0.37.0
• k8s.io/component-base v0.37.0
• k8s.io/klog/v2 v2.140.0
• k8s.io/utils v0.0.0-20260626114624-be93311217bd@be93311217bd → [Updates: v0.0.0-20260707023825-cf1189d6abe3]
• sigs.k8s.io/controller-runtime v0.25.1
• sigs.k8s.io/controller-tools v0.22.0
• sigs.k8s.io/yaml v1.6.0

nix (1)

flake.nix (3)

• gomod2nix 1201ddd1279c35497754f016ef33d5e060f3da8d
• nixpkgs nixos-26.05
• nixpkgs-unstable nixpkgs-unstable

renovate-config (1)

.github/renovate.json5

Branch release-1.20

dockerfile (1)

Earthfile (1)

• curlimages/curl 8.22.0

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (1)

• google.golang.org/grpc v1.83.2

regex (10)

.github/workflows/ci.yml

.github/workflows/ci.yml

.github/workflows/renovate.yml

.github/workflows/renovate.yml

Earthfile

Earthfile

Earthfile

Earthfile

Earthfile

Earthfile

Branch release-2.2

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (1)

• google.golang.org/grpc v1.83.2

nix (1)

flake.nix

renovate-config (1)

.github/renovate.json5

Branch release-2.3

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (2)

• google.golang.org/grpc v1.83.2
• golang.org/x/crypto v0.55.0 → [Updates: v0.56.0]

nix (1)

flake.nix

renovate-config (1)

.github/renovate.json5

Branch release-2.4

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (2)

• google.golang.org/grpc v1.83.2
• golang.org/x/crypto v0.55.0 → [Updates: v0.56.0]

nix (1)

flake.nix

renovate-config (1)

.github/renovate.json5