Dependency Dashboard

[red-hat-konflux-kflux-prd-rh02]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• OCM-00000 | ci: Update Konflux references (quay.io/konflux-ci/tekton-catalog/task-apply-tags, quay.io/konflux-ci/tekton-catalog/task-build-image-index, quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta, quay.io/konflux-ci/tekton-catalog/task-clair-scan, quay.io/konflux-ci/tekton-catalog/task-clamav-scan, quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks, quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta, quay.io/konflux-ci/tekton-catalog/task-init, quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta, quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta, quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan, quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta, quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta, quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta, quay.io/konflux-ci/tekton-catalog/task-show-sbom, quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta)
• OCM-00000 | ci: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26.7-1789950433
• OCM-00000 | ci: Update aws-sdk (github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/credentials, github.com/aws/aws-sdk-go-v2/service/cloudformation, github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs, github.com/aws/aws-sdk-go-v2/service/ec2, github.com/aws/aws-sdk-go-v2/service/iam, github.com/aws/aws-sdk-go-v2/service/organizations, github.com/aws/aws-sdk-go-v2/service/route53, github.com/aws/aws-sdk-go-v2/service/s3, github.com/aws/aws-sdk-go-v2/service/secretsmanager, github.com/aws/aws-sdk-go-v2/service/servicequotas, github.com/aws/aws-sdk-go-v2/service/sts, github.com/aws/smithy-go)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• OCM-00000 | ci: Update module github.com/openshift-online/ocm-sdk-go to v0.1.514

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• OCM-00000 | ci: Update module github.com/golang-jwt/jwt/v4 to v5
• OCM-00000 | ci: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v9

Detected Dependencies

dockerfile (5)

Dockerfile (1)

• registry.access.redhat.com/ubi9/go-toolset 1.26.5-1784190466 → [Updates: 1.26.7-1789950433, 9.8-1789950433]

Dockerfile.clients (1)

• registry.access.redhat.com/ubi9/go-toolset 1.26.5-1784190466 → [Updates: 1.26.7-1789950433, 9.8-1789950433]

images/Dockerfile.e2e (3)

• registry.access.redhat.com/ubi9/go-toolset 1.26.5-1784190466 → [Updates: 1.26.7-1789950433, 9.8-1789950433]
• registry.access.redhat.com/ubi9/go-toolset 1.26.5-1784190466 → [Updates: 1.26.7-1789950433, 9.8-1789950433]
• registry.access.redhat.com/ubi9/go-toolset 1.26.5-1784190466 → [Updates: 1.26.7-1789950433, 9.8-1789950433]

images/Dockerfile.konflux (1)

• registry.access.redhat.com/ubi9/go-toolset 1.26.5-1784190466 → [Updates: 1.26.7-1789950433, 9.8-1789950433]

images/Dockerfile.release

gomod (1)

go.mod (43)

• go 1.26.5
• github.com/AlecAivazis/survey/v2 v2.3.7
• github.com/Masterminds/semver v1.5.0
• github.com/aws/aws-sdk-go-v2 v1.42.1 → [Updates: v1.47.0]
• github.com/aws/aws-sdk-go-v2/config v1.32.30 → [Updates: v1.33.5]
• github.com/aws/aws-sdk-go-v2/credentials v1.19.29 → [Updates: v1.20.5]
• github.com/aws/aws-sdk-go-v2/service/cloudformation v1.74.1 → [Updates: v1.81.0]
• github.com/aws/aws-sdk-go-v2/service/ec2 v1.316.1 → [Updates: v1.335.0]
• github.com/aws/aws-sdk-go-v2/service/iam v1.55.1 → [Updates: v1.64.0]
• github.com/aws/aws-sdk-go-v2/service/organizations v1.52.1 → [Updates: v1.60.0]
• github.com/aws/aws-sdk-go-v2/service/s3 v1.105.2 → [Updates: v1.113.1]
• github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.43.1 → [Updates: v1.50.0]
• github.com/aws/aws-sdk-go-v2/service/servicequotas v1.36.1 → [Updates: v1.43.0]
• github.com/aws/aws-sdk-go-v2/service/sts v1.44.1 → [Updates: v1.51.0]
• github.com/aws/smithy-go v1.27.4 → [Updates: v1.28.2]
• github.com/briandowns/spinner v1.23.2
• github.com/golang-jwt/jwt/v4 v4.5.2 → [Updates: v5.3.1]
• github.com/golang/glog v1.2.5
• github.com/google/go-cmp v0.7.0
• github.com/hashicorp/go-version v1.9.0
• github.com/onsi/ginkgo/v2 v2.33.0
• github.com/onsi/gomega v1.43.1
• github.com/openshift-online/ocm-api-model/clientapi v0.0.468
• github.com/openshift-online/ocm-common v0.0.45
• github.com/openshift-online/ocm-sdk-go v0.1.513 → [Updates: v0.1.514]
• github.com/robfig/cron/v3 v3.0.1
• github.com/sirupsen/logrus v1.10.2
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/zgalor/weberr v0.9.0
• go.uber.org/mock v0.6.0
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/apimachinery v0.37.0
• k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3@cf1189d6abe3
• sigs.k8s.io/yaml v1.6.0
• github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.79.1 → [Updates: v1.88.0]
• github.com/aws/aws-sdk-go-v2/service/route53 v1.64.1 → [Updates: v1.70.0]
• github.com/go-logr/logr v1.4.4
• golang.org/x/crypto v0.57.0
• golang.org/x/net v0.59.0
• golang.org/x/term v0.46.0
• golang.org/x/text v0.42.0
• github.com/kubermatic/glog-logrus v0.0.0-20180829085450-3fa5b9870d1d@3fa5b9870d1d

pre-commit (1)

.pre-commit-config.yaml (2)

• pre-commit/pre-commit-hooks v6.0.0
• gitleaks/gitleaks v8.30.1@83d9cd684c87d95d656c1458ef04895a7f1cbd8e

regex (2)

hack/govulncheck.sh (1)

• jqlang/jq 1.8.2

pkg/info/info.go (1)

• openshift/rosa 1.2.65

tekton (1)

.tekton/rosa-github-release.yaml (19)

• quay.io/konflux-ci/tekton-catalog/task-init 0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08 → [Updates: 0.4.3]
• quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta 0.2@sha256:e5ba1f8549e6a0f043629ef00bea7511957121e05304b688f40ff12304560f38 → [Updates: 0.2.6]
• quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta 0.9.0@sha256:4486aaa69770d6b27c59c8df7d82e450d95dab2302aef9b8a345f2ac0fabbab0 → [Updates: 0.10.3]
• quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta 0.12.0@sha256:de5580c99ca52588f9b8cec452023bc7e3de470a594c99243320752d250bb2a2 → [Updates: 0.12.2, 0.12.0]
• quay.io/konflux-ci/tekton-catalog/task-build-image-index 0.3@sha256:d52f2cdd06eace149f75e2a874b70875b7d43a825e6ebed6d52ab84d0a2059e5 → [Updates: 0.4]
• quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta 0.3@sha256:c7ecd1e518007e31e19188333a17dd3558e222ce2e3b2a484a1e59ec069799cf → [Updates: 0.3.2, 0.3]
• quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.5@sha256:0ccc688a77e9b7b0b8973c132a1e840844137e77f887be4a0bec8893b0776872
• quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.3@sha256:f5b4415db9ac1fba3e11d993a617e0b275d1f0ed2fc669b12c400ed848c39174 → [Updates: 0.4.1, 0.3]
• quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 0.2@sha256:4619769705d4999e129b779d7699d89d33c47f7ab80d73ad6e3dcd8a6a4e43a7 → [Updates: 0.2]
• quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.3@sha256:53a02326bfb930ca5ef6bfa7a33acca833d57752f34f3cb79255fe2e25e7d217 → [Updates: 0.3.4, 0.3]
• quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta 0.3@sha256:e92d00ed858233d0096627861192d3e4fc013cf1559c0d0b0ea0657d3377ce75
• quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check 0.2@sha256:8b501440a960aec446db2ebc6625a49d0317a9fc7bf0f7bd9b18cb63052db7de
• quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta 0.5@sha256:b78e9c05c5126613eddee53f2f3534a9b86bfca17d903599f2fa465b7938e241 → [Updates: 0.5]
• quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta 0.1@sha256:beb05ae2fad733783b3b17e05871e0eaf527a07c904cf3fb2cb551025007eec1 → [Updates: 0.1]
• quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta 0.4@sha256:d09f717cb84f0699a531773bc498745deef2c006a81918aa73b3be6d2f4778bd → [Updates: 0.4]
• quay.io/konflux-ci/tekton-catalog/task-apply-tags 0.3@sha256:f89a59d4d043fd3c545a9cb5e89b53396f1e04017c6f68da1e50626715c2d423 → [Updates: 0.3.1, 0.3]
• quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta 0.3@sha256:f3e97e6eaf09d6585e915c3e7b82d110d97e34202bf591a2d990127ba5bb362d → [Updates: 0.3.1]
• quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2@sha256:cc5133504ff03909ae970db81a986cb25a5532b2faf62a8ede5c60f28b716f54 → [Updates: 0.2.2, 0.2]
• quay.io/konflux-ci/tekton-catalog/task-show-sbom 0.1@sha256:8fe70a95c28b1ac92abd67a7477ad960218f3f570a9f8a12ad082dff7e9c9579 → [Updates: 0.3]