Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Repository Problems Renovate tried to run on this repository, but found these problems. - ⚠️ WARN: Hidden Unicode characters have been discovered in file(s) in your repository. See your Renovate logs for more details. Please confirm that they are intended to be there, as they could be an attempt to "smuggle" text into your codebase, or used to confuse tools like Renovate or Large Language Models (LLMs) - ⚠️ WARN: Error updating branch: update failure ## Abandoned Dependencies The following dependencies have not received updates for an extended period and may be unmaintained. > [!NOTE] Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity. > View abandoned dependencies (4) | Datasource | Package | Last Updated | |------------|------|-------------| | pip_requirements | [jinja2](https://redirect.github.com/pallets/jinja) | `2025-03-05` | | pip_requirements | [markdown_include](https://redirect.github.com/cmacmackin/markdown-include) | `2023-02-07` | | pip_requirements | [mkdocs-github-admonitions-plugin](https://redirect.github.com/pgijsbers/admonitions) | `2025-06-02` | | regex | [gotestyourself/gotestsum](https://redirect.github.com/gotestyourself/gotestsum) | `2025-09-11` | ## Awaiting Schedule The following updates are awaiting their schedule. To get an update now, click on a checkbox below. - [ ] chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.97.4 ## Errored The following updates encountered an error and will be retried. To force a retry now, click on a checkbox below. - [ ] chore(deps): pin dependencies ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [chore(deps): update group node to v24.21.0](../pull/28423) (`docker.io/library/node`, `node`) - [ ] [chore(deps): lock file maintenance](../pull/28077) - [ ] **Click on this checkbox to rebase all open PRs at once** ## Vulnerabilities > [!IMPORTANT] > `11`/`16` CVEs have Renovate fixes. gomod

gitops-engine/go.mod

k8s.io/kubernetes

- [GO-2025-3521](https://osv.dev/vulnerability/GO-2025-3521) - [GO-2025-3547](https://osv.dev/vulnerability/GO-2025-3547)

go.mod

github.com/go-git/go-git/v5

- [GHSA-hc8v-wwc9-vgxm](https://osv.dev/vulnerability/GHSA-hc8v-wwc9-vgxm) (fixed in >= 5.19.2) - [GHSA-qgq7-7hm3-q39j](https://osv.dev/vulnerability/GHSA-qgq7-7hm3-q39j) (fixed in >= 5.19.2) - [GO-2026-6213](https://osv.dev/vulnerability/GO-2026-6213) (fixed in >= 5.19.2) - [GO-2026-6214](https://osv.dev/vulnerability/GO-2026-6214) (fixed in >= 5.19.2)

golang.org/x/crypto

- [GO-2026-5932](https://osv.dev/vulnerability/GO-2026-5932)

k8s.io/kubernetes

- [GO-2025-3521](https://osv.dev/vulnerability/GO-2025-3521) - [GO-2025-3547](https://osv.dev/vulnerability/GO-2025-3547)

hack/get-previous-release/go.mod

golang.org/x/mod

- [GO-2026-6179](https://osv.dev/vulnerability/GO-2026-6179) (fixed in >= 0.40.0) - [GO-2026-6180](https://osv.dev/vulnerability/GO-2026-6180) (fixed in >= 0.40.0)

npm

ui/pnpm-workspace.yaml

dompurify

- [GHSA-55q2-fjhq-7xh7](https://osv.dev/vulnerability/GHSA-55q2-fjhq-7xh7) (fixed in >= 3.4.13) - [GHSA-c2j3-45gr-mqc4](https://osv.dev/vulnerability/GHSA-c2j3-45gr-mqc4) (fixed in >= 3.4.12) - [GHSA-cmwh-pvxp-8882](https://osv.dev/vulnerability/GHSA-cmwh-pvxp-8882) (fixed in >= 3.4.11) - [GHSA-gvmj-g25r-r7wr](https://osv.dev/vulnerability/GHSA-gvmj-g25r-r7wr) (fixed in >= 3.4.8) - [GHSA-vxr8-fq34-vvx9](https://osv.dev/vulnerability/GHSA-vxr8-fq34-vvx9) (fixed in >= 3.4.9)

## Detected Dependencies dockerfile (8)

Dockerfile (4) - `docker.io/library/golang 1.27.1@sha256:f773aa2679c165b2d4ccf04c1de9ef5f34c0e4fd7008b3c449d4cdc47d83af55` → [Updates: `1.27.1`] - `docker.io/library/ubuntu 26.04@sha256:2260313b31c8c011cd2eebe728008efac1b3982be73eb71348ea2648d2c0e09b` → [Updates: `26.04`] - `docker.io/library/node 24.17.0@sha256:032e78d7e54e352129831743737e3a83171d9cc5b5896f411649c597ce0b11ea` → [Updates: `24.21.0`, `24.17.0`] - `docker.io/library/golang 1.27.1@sha256:f773aa2679c165b2d4ccf04c1de9ef5f34c0e4fd7008b3c449d4cdc47d83af55` → [Updates: `1.27.1`] Dockerfile.dev Dockerfile.tilt (1) - `docker.io/library/golang 1.27.1@sha256:f773aa2679c165b2d4ccf04c1de9ef5f34c0e4fd7008b3c449d4cdc47d83af55` → [Updates: `1.27.1`] Dockerfile.ui.tilt (1) - `docker.io/library/node 24.17.0@sha256:032e78d7e54e352129831743737e3a83171d9cc5b5896f411649c597ce0b11ea` → [Updates: `24.21.0`, `24.17.0`] hack/Dockerfile.dev-tools test/container/Dockerfile (6) - `docker.io/library/redis 8.10.1@sha256:691577adaf11927f4bb8871d40a5dd69a5c300d4453b742e8f6383c3e6e8d2e1` → [Updates: `8.10.1`] - `docker.io/library/node 24.17.0@sha256:032e78d7e54e352129831743737e3a83171d9cc5b5896f411649c597ce0b11ea` → [Updates: `24.21.0`, `24.17.0`] - `docker.io/library/golang 1.27.1@sha256:f773aa2679c165b2d4ccf04c1de9ef5f34c0e4fd7008b3c449d4cdc47d83af55` → [Updates: `1.27.1`] - `docker.io/library/registry 3.1@sha256:85347ed2ecde64161c7a4788a4d7d3dcc9d6f86f7be95834022e3c6a423a945a` → [Updates: `3.1`] - `docker.io/bitnamilegacy/kubectl 1.33@sha256:cd354d5b25562b195b277125439c23e4046902d7f1abc0dc3c75aad04d298c17` - `docker.io/library/ubuntu 26.04@sha256:2260313b31c8c011cd2eebe728008efac1b3982be73eb71348ea2648d2c0e09b` → [Updates: `26.04`] test/e2e/multiarch-container/Dockerfile (1) - `docker.io/library/busybox sha256:dc2d74b28e4cf8984fa52af1f39bc7c3d9c73760b41a74d629f5d11b1ab28616` test/remote/Dockerfile (2) - `docker.io/library/golang 1.27.1@sha256:f773aa2679c165b2d4ccf04c1de9ef5f34c0e4fd7008b3c449d4cdc47d83af55` → [Updates: `1.27.1`] - `docker.io/library/ubuntu 26.04@sha256:2260313b31c8c011cd2eebe728008efac1b3982be73eb71348ea2648d2c0e09b` → [Updates: `26.04`]

github-actions (16)

.github/workflows/bump-major-version.yaml .github/workflows/cherry-pick-single.yml .github/workflows/cherry-pick.yml .github/workflows/ci-build.yaml .github/workflows/codeql.yml .github/workflows/image-reuse.yaml .github/workflows/image.yaml .github/workflows/init-release.yaml .github/workflows/issue-triage.lock.yml .github/workflows/pr-title-check.yml .github/workflows/release.yaml .github/workflows/renovate.yaml (2) - `renovatebot/github-action v46.3.1@dcfba84a42d1b5d5e49bf131b1bf53511851a123` - `ghcr.io/renovatebot/renovate 44.86.0@sha256:ddeb1fd3f0210fae3b3db123e65957caea6b356a9198deba44b4b5bded06c0f2` .github/workflows/scorecard.yaml .github/workflows/stale.yaml .github/workflows/update-snyk.yaml .github/workflows/zizmor.yaml

gomod (3)

gitops-engine/go.mod (1) - `go 1.27.0` go.mod (1) - `go 1.27.0` hack/get-previous-release/go.mod (1) - `go 1.27.0`

helm-requirements (1)

manifests/ha/base/redis-ha/chart/requirements.yaml

helm-values (3)

util/helm/testdata/dependency/values.yaml util/helm/testdata/minio/values.yaml util/helm/testdata/redis/values.yaml

helmv3 (9)

reposerver/repository/testdata/helm-with-dependencies-alias/Chart.yaml reposerver/repository/testdata/helm-with-dependencies/Chart.yaml reposerver/repository/testdata/helm-with-local-dependency/Chart.yaml test/e2e/testdata/helm-oci-authed-with-dependencies/Chart.yaml test/e2e/testdata/helm-oci-with-dependencies/Chart.yaml test/e2e/testdata/helm-with-dependencies/Chart.yaml test/e2e/testdata/helm-with-multiple-dependencies-permission-denied/Chart.yaml test/e2e/testdata/helm-with-multiple-dependencies/Chart.yaml util/helm/testdata/dependency/Chart.yaml

kustomize (14)

manifests/base/commit-server/kustomization.yaml manifests/base/kustomization.yaml manifests/base/redis/kustomization.yaml manifests/core-install/kustomization.yaml manifests/ha/base/controller-deployment/kustomization.yaml manifests/ha/base/kustomization.yaml reposerver/repository/testdata/app-parameters/multi/kustomization.yaml reposerver/repository/testdata/app-parameters/single-app-only/kustomization.yaml reposerver/repository/testdata/app-parameters/single-global/kustomization.yaml test/e2e/testdata/kustomize-api-versions/kustomization.yaml test/e2e/testdata/kustomize-kube-version/kustomization.yaml test/manifests/cmp/kustomization.yaml test/remote/manifests/kustomization.yaml util/kustomize/testdata/kustomization_yaml_components_monorepo/envs/inseng-pdx-egert-sandbox/namespaces/inst-system/apps/hello-world/kustomization.yaml

npm (2)

ui/package.json ui/pnpm-workspace.yaml

nvm (1)

ui/.nvmrc (1) - `node 24.17.0` → [Updates: `24.21.0`]

pip_requirements (1)

docs/requirements.txt (7) - `mkdocs ==1.6.1` - `mkdocs-github-admonitions-plugin ==0.1.1` - `markdown_include ==0.8.1` - `pygments ==2.21.0` - `jinja2 ==3.1.6` - `markdown ==3.10.3` - `pymdown-extensions ==12.0.1`

regex (19)

.github/workflows/ci-build.yaml (4) - `golang 1.27.1` - `node 24.17.0` → [Updates: `24.21.0`] - `node 24.17.0` → [Updates: `24.21.0`] - `github.com/golangci/golangci-lint/v2 v2.13.2` .github/workflows/ci-build.yaml (1) - `dexidp/dex 2.45.1` .github/workflows/ci-build.yaml (1) - `docker.io/library/redis 8.10.1-alpine` → [Updates: `8.10.1-alpine`] .github/workflows/image.yaml (2) - `golang 1.27.1` - `golang 1.27.1` .github/workflows/release.yaml (2) - `golang 1.27.1` - `golang 1.27.1` .github/workflows/renovate.yaml (1) - `ghcr.io/renovatebot/renovate 44.86.0@sha256:ddeb1fd3f0210fae3b3db123e65957caea6b356a9198deba44b4b5bded06c0f2` → [Updates: `44.97.4`] Dockerfile (2) - `git 1:2.47.3-0+deb13u1` - `git 1:2.53.0-1ubuntu1` Dockerfile.tilt (1) - `git 1:2.47.3-0+deb13u1` hack/installers/install-codegen-go-tools.sh (1) - `github.com/vektra/mockery/v3 3.8.0` hack/installers/install-gotestsum.sh (1) - `gotestyourself/gotestsum 1.13.0` hack/installers/install-lint-tools.sh (1) - `github.com/golangci/golangci-lint/v2 2.13.2` hack/tool-versions.sh (3) - `helm/helm 4.3.0` - `kubernetes-sigs/kustomize 5.8.1` - `git-lfs/git-lfs 3.8.0` manifests/base/dex/argocd-dex-server-deployment.yaml (1) - `dexidp/dex 2.45.1` manifests/base/redis/argocd-redis-deployment.yaml (1) - `docker.io/library/redis 8.10.1-alpine` → [Updates: `8.10.1-alpine`] manifests/ha/base/redis-ha/chart/values.yaml (1) - `docker.io/library/redis 8.10.1-alpine` → [Updates: `8.10.1-alpine`] Procfile (1) - `dexidp/dex 2.45.1` test/container/Dockerfile (1) - `git 1:2.53.0-1ubuntu1` test/container/Procfile (1) - `dexidp/dex 2.45.1` test/remote/Dockerfile (1) - `git 1:2.53.0-1ubuntu1`