Dependency Dashboard

Author: renovate[bot]Created Dec 6, 2025Updated Sep 18, 2026
> ℹ️ **Note** > > This PR body was truncated due to platform limits. This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/cert-manager/cert-manager). ## Repository Problems These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/cert-manager/cert-manager). - ⚠️ WARN: Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information - ⚠️ WARN: Some upgrade(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information - ⚠️ WARN: Error updating branch: update failure - ⚠️ WARN: getChangeLogJSON error ## Abandoned Dependencies The following dependencies have not received updates for an extended period and may be unmaintained. > [!NOTE] Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity. > View abandoned dependencies (270) | Datasource | Package | Last Updated | |------------|------|-------------| | gomod | [cloud.google.com/go/auth/oauth2adapt](https://redirect.github.com/googleapis/google-cloud-go) | `2025-03-20` | | gomod | [github.com/AdaLogics/go-fuzz-headers](https://redirect.github.com/AdaLogics/go-fuzz-headers) | `2024-08-06` | | gomod | [github.com/Khan/genqlient](https://redirect.github.com/Khan/genqlient) | `2025-05-18` | | gomod | [github.com/NYTimes/gziphandler](https://redirect.github.com/NYTimes/gziphandler) | `2019-02-21` | | gomod | [github.com/antlr4-go/antlr/v4](https://redirect.github.com/antlr4-go/antlr) | `2024-05-15` | | gomod | [github.com/benbjohnson/clock](https://redirect.github.com/benbjohnson/clock) | `2023-05-18` | | gomod | [github.com/beorn7/perks](https://redirect.github.com/beorn7/perks) | `2019-07-31` | | gomod | [github.com/blang/semver/v4](https://redirect.github.com/blang/semver) | `2020-05-24` | | gomod | [github.com/cespare/xxhash/v2](https://redirect.github.com/cespare/xxhash) | `2024-04-04` | | gomod | [github.com/coreos/go-semver](https://redirect.github.com/coreos/go-semver) | `2023-01-16` | | gomod | [github.com/davecgh/go-spew](https://redirect.github.com/davecgh/go-spew) | `2018-02-21` | | gomod | [github.com/emicklei/go-restful/v3](https://redirect.github.com/emicklei/go-restful) | `2025-08-15` | | gomod | [github.com/evanphx/json-patch/v5](https://redirect.github.com/evanphx/json-patch) | `2025-01-28` | | gomod | [github.com/frankban/quicktest](https://redirect.github.com/frankban/quicktest) | `2023-08-01` | | gomod | [github.com/go-errors/errors](https://redirect.github.com/go-errors/errors) | `2023-09-15` | | gomod | [github.com/go-logr/stdr](https://redirect.github.com/go-logr/stdr) | `2021-12-15` | | gomod | [github.com/go-logr/zapr](https://redirect.github.com/go-logr/zapr) | `2023-11-03` | | gomod | [github.com/go-task/slim-sprig/v3](https://redirect.github.com/go-task/slim-sprig) | `2023-09-14` | | gomod | [github.com/golang/protobuf](https://redirect.github.com/golang/protobuf) | `2024-03-06` | | gomod | [github.com/golang/snappy](https://redirect.github.com/golang/snappy) | `2025-03-07` | | gomod | [github.com/google/btree](https://redirect.github.com/google/btree) | `2024-08-21` | | gomod | [github.com/google/go-cmp](https://redirect.github.com/google/go-cmp) | `2025-02-21` | | gomod | [github.com/google/uuid](https://redirect.github.com/google/uuid) | `2024-01-23` | | gomod | [github.com/gorilla/websocket](https://redirect.github.com/gorilla/websocket) | `2024-06-14` | | gomod | [github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus](https://redirect.github.com/grpc-ecosystem/go-grpc-middleware) | `2025-06-16` | | gomod | [github.com/hashicorp/errwrap](https://redirect.github.com/hashicorp/errwrap) | `2020-07-14` | | gomod | [github.com/hashicorp/go-cleanhttp](https://redirect.github.com/hashicorp/go-cleanhttp) | `2021-02-03` | | gomod | [github.com/hashicorp/go-multierror](https://redirect.github.com/hashicorp/go-multierror) | `2021-03-11` | | gomod | [github.com/hashicorp/go-retryablehttp](https://redirect.github.com/hashicorp/go-retryablehttp) | `2025-06-18` | | gomod | [github.com/hashicorp/go-rootcerts](https://redirect.github.com/hashicorp/go-rootcerts) | `2019-12-10` | | gomod | [github.com/hashicorp/go-secure-stdlib/cryptoutil](https://redirect.github.com/hashicorp/go-secure-stdlib) | `2025-01-16` | | gomod | [github.com/hashicorp/go-secure-stdlib/parseutil](https://redirect.github.com/hashicorp/go-secure-stdlib) | `2025-03-06` | | gomod | [github.com/hashicorp/go-secure-stdlib/strutil](https://redirect.github.com/hashicorp/go-secure-stdlib) | `2021-11-22` | | gomod | [github.com/hashicorp/go-sockaddr](https://redirect.github.com/hashicorp/go-sockaddr) | `2024-09-25` | | gomod | [github.com/inconshreveable/mousetrap](https://redirect.github.com/inconshreveable/mousetrap) | `2022-11-27` | | gomod | [github.com/json-iterator/go](https://redirect.github.com/json-iterator/go) | `2021-09-11` | | gomod | [github.com/kylelemons/godebug](https://redirect.github.com/kylelemons/godebug) | `2019-05-05` | | gomod | [github.com/liggitt/tabwriter](https://redirect.github.com/liggitt/tabwriter) | `2018-12-28` | | gomod | [github.com/mitchellh/go-homedir](https://redirect.github.com/mitchellh/go-homedir) | `2019-01-27` | | gomod | [github.com/mitchellh/mapstructure](https://redirect.github.com/mitchellh/mapstructure) | `2022-04-20` | | gomod | [github.com/moby/term](https://redirect.github.com/moby/term) | `2025-01-02` | | gomod | [github.com/modern-go/concurrent](https://redirect.github.com/modern-go/concurrent) | `2018-03-06` | | gomod | [github.com/modern-go/reflect2](https://redirect.github.com/modern-go/reflect2) | `2021-09-11` | | gomod | [github.com/monochromegane/go-gitignore](https://redirect.github.com/monochromegane/go-gitignore) | `2020-06-26` | | gomod | [github.com/munnerz/crd-schema-fuzz](https://redirect.github.com/munnerz/crd-schema-fuzz) | `2025-06-06` | | gomod | [github.com/munnerz/goautoneg](https://redirect.github.com/munnerz/goautoneg) | `2019-10-10` | | gomod | [github.com/nrdcg/goacmedns](https://redirect.github.com/nrdcg/goacmedns) | `2025-01-09` | | gomod | [github.com/pavlo-v-chernykh/keystore-go/v4](https://redirect.github.com/pavlo-v-chernykh/keystore-go) | `2023-08-31` | | gomod | [github.com/peterbourgon/diskv](https://redirect.github.com/peterbourgon/diskv) | `2017-08-14` | | gomod | [github.com/pierrec/lz4](https://redirect.github.com/pierrec/lz4) | `2021-06-03` | | gomod | [github.com/pkg/browser](https://redirect.github.com/pkg/browser) | `2024-01-02` | | gomod | [github.com/pmezard/go-difflib](https://redirect.github.com/pmezard/go-difflib) | `2016-01-10` | | gomod | [github.com/ryanuber/go-glob](https://redirect.github.com/ryanuber/go-glob) | `2019-01-24` | | gomod | [github.com/spf13/pflag](https://redirect.github.com/spf13/pflag) | `2025-09-02` | | gomod | [github.com/tidwall/match](https://redirect.github.com/tidwall/match) | `2025-09-05` | | gomod | [github.com/tidwall/pretty](https://redirect.github.com/tidwall/pretty) | `2022-10-01` | | gomod | [github.com/tidwall/sjson](https://redirect.github.com/tidwall/sjson) | `2022-08-05` | | gomod | [github.com/x448/float16](https://redirect.github.com/x448/float16) | `2020-01-17` | | gomod | [github.com/xlab/treeprint](https://redirect.github.com/xlab/treeprint) | `2023-03-09` | | gomod | [github.com/youmark/pkcs8](https://redirect.github.com/youmark/pkcs8) | `2024-07-26` | | gomod | [go.opentelemetry.io/auto/sdk](https://redirect.github.com/open-telemetry/opentelemetry-go-instrumentation) | `2025-09-15` | | gomod | [go.uber.org/multierr](https://redirect.github.com/uber-go/multierr) | `2023-03-29` | | gomod | [go.uber.org/ratelimit](https://redirect.github.com/uber-go/ratelimit) | `2024-03-04` | | gomod | [gopkg.in/evanphx/json-patch.v4](https://gopkg.in/evanphx/json-patch.v4) | `2025-01-28` | | gomod | [gopkg.in/inf.v0](https://redirect.github.com/go-inf/inf) | `2018-03-26` | | gomod | [gopkg.in/yaml.v3](https://redirect.github.com/go-yaml/yaml) | `2022-05-27` | | gomod | [sigs.k8s.io/randfill](https://redirect.github.com/kubernetes-sigs/randfill) | `2025-03-04` | | gomod | [sigs.k8s.io/yaml](https://redirect.github.com/kubernetes-sigs/yaml) | `2025-07-24` | ## Pending Approval The following branches are pending approval. To create them, click on a checkbox below. - [ ] fix(deps): update k8s.io/kube-openapi digest to 7970a1e (master) - [ ] fix(deps): update module github.com/akamai/akamaiopen-edgegrid-golang/v13 to v14 (master) - [ ] fix(deps): update module sigs.k8s.io/structured-merge-diff/v6 to v7 (master) - [ ] **Create all pending approval PRs at once** ## Errored The following updates encountered an error and will be retried. To force a retry now, click on a checkbox below. - [ ] chore(deps): pin cr.kgateway.dev/kgateway-dev/charts/kgateway docker tag to ca19647 (master) ## Pending Status Checks The following updates await pending status checks. To force their creation now, click on a checkbox below. - [ ] fix(deps): update github.com/onsi deps (master) (`github.com/onsi/ginkgo/v2`, `github.com/onsi/gomega`) ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [chore(deps): update module go.opentelemetry.io/otel/exporters/otlp/otlptrace to v1.45.0 [security] (master)](../pull/9363) - [ ] [chore(deps): update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc to v1.45.0 [security] (master)](../pull/9364) - [ ] [chore(deps): update module go.opentelemetry.io/otel/sdk to v1.45.0 [security] (master)](../pull/9365) - [ ] [chore(deps): update cr.kgateway.dev/kgateway-dev/charts/kgateway docker tag to v2.4.5 (master)](../pull/9360) - [ ] [fix(deps): update cloud go deps (master)](../pull/9362) (`github.com/aws/aws-sdk-go-v2/config`, `github.com/aws/aws-sdk-go-v2/credentials`, `github.com/aws/aws-sdk-go-v2/service/sts`, `google.golang.org/api`) - [ ] **Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies > [!NOTE] > Detected dependencies section has been truncated dockerfile (7)
hack/containers/Containerfile.acmesolver hack/containers/Containerfile.cainjector hack/containers/Containerfile.controller hack/containers/Containerfile.startupapicheck hack/containers/Containerfile.webhook make/config/pebble/Containerfile.pebble make/config/samplewebhook/Containerfile.samplewebhook
github-actions (1)
.github/workflows/scorecards.yml (4) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc` - `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63`
gomod (8)
cmd/acmesolver/go.mod (43) - `go 1.26.0` - `github.com/spf13/cobra v1.10.2` - `k8s.io/component-base v0.37.0` - `github.com/beorn7/perks v1.0.1` - `github.com/blang/semver/v4 v4.0.0` - `github.com/cespare/xxhash/v2 v2.3.0` - `github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc` - `github.com/fxamacker/cbor/v2 v2.9.1` → [Updates: `v2.9.4`] - `github.com/go-logr/logr v1.4.4` - `github.com/go-logr/zapr v1.3.0` - `github.com/inconshreveable/mousetrap v1.1.0` - `github.com/json-iterator/go v1.1.12` - `github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd` - `github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee@35a7c28c31ee` - `github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822` - `github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2` - `github.com/prometheus/client_golang v1.24.1` - `github.com/prometheus/client_model v0.6.2` → [Updates: `v0.6.3`] - `github.com/prometheus/common v0.70.1` → [Updates: `v0.71.0`] - `github.com/prometheus/procfs v0.21.1` → [Updates: `v0.22.0`] - `github.com/spf13/pflag v1.0.10` - `github.com/x448/float16 v0.8.4` - `go.opentelemetry.io/otel v1.44.0` → [Updates: `v1.46.0`] - `go.opentelemetry.io/otel/trace v1.44.0` → [Updates: `v1.46.0`] - `go.uber.org/multierr v1.11.0` - `go.uber.org/zap v1.28.0` - `go.yaml.in/yaml/v2 v2.4.4` → [Updates: `v3.0.5`] - `golang.org/x/net v0.58.0` → [Updates: `v0.59.0`] - `golang.org/x/sys v0.48.0` - `golang.org/x/text v0.42.0` - `google.golang.org/protobuf v1.36.12` - `gopkg.in/inf.v0 v0.9.1` - `k8s.io/api v0.37.0` - `k8s.io/apiextensions-apiserver v0.37.0` - `k8s.io/apimachinery v0.37.0` - `k8s.io/klog/v2 v2.140.0` - `k8s.io/kube-openapi v0.0.0-20260721132016-d427ff9ee9ad@d427ff9ee9ad` → [Updates: `v0.0.0-20260911184034-7970a1e230da`] - `k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3@cf1189d6abe3` - `sigs.k8s.io/gateway-api v1.6.2` - `sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730@2d320260d730` → [Updates: `v0.0.0-20260909141634-11ed52e25bc5`] - `sigs.k8s.io/randfill v1.0.0` - `sigs.k8s.io/structured-merge-diff/v6 v6.4.2` → [Updates: `v7.0.0`] - `sigs.k8s.io/yaml v1.6.0` cmd/cainjector/go.mod (77) - `go 1.26.0` - `github.com/spf13/cobra v1.10.2` - `github.com/spf13/pflag v1.0.10` - `k8s.io/api v0.37.0` - `k8s.io/apiextensions-apiserver v0.37.0` - `k8s.io/apimachinery v0.37.0` - `k8s.io/client-go v0.37.0` - `k8s.io/component-base v0.37.0` - `k8s.io/kube-aggregator v0.37.0` - `sigs.k8s.io/controller-runtime v0.25.1` - `github.com/Azure/go-ntlmssp v0.1.1` - `github.com/beorn7/perks v1.0.1` - `github.com/blang/semver/v4 v4.0.0` - `github.com/cespare/xxhash/v2 v2.3.0` - `github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc` - `github.com/emicklei/go-restful/v3 v3.13.0` - `github.com/evanphx/json-patch/v5 v5.9.11` - `github.com/fsnotify/fsnotify v1.9.0` → [Updates: `v1.10.1`] - `github.com/fxamacker/cbor/v2 v2.9.1` → [Updates: `v2.9.4`] - `github.com/go-asn1-ber/asn1-ber v1.5.8` - `github.com/go-ldap/ldap/v3 v3.4.14` - `github.com/go-logr/logr v1.4.4` - `github.com/go-logr/zapr v1.3.0` - `github.com/go-openapi/jsonpointer v1.0.1` - `github.com/go-openapi/jsonreference v1.0.2` - `github.com/go-openapi/swag v0.27.1` → [Updates: `v0.29.2`] - `github.com/go-openapi/swag/cmdutils v0.27.1` → [Updates: `v0.29.2`] - `github.com/go-openapi/swag/conv v0.27.1` → [Updates: `v0.29.2`] - `github.com/go-openapi/swag/fileutils v0.27.1` → [Updates: `v0.29.2`] - `github.com/go-openapi/swag/jsonutils v0.27.1` → [Updates: `v0.29.2`] - `github.com/go-openapi/swag/loading v0.27.1` → [Updates: `v0.29.2`] - `github.com/go-openapi/swag/mangling v0.27.1` → [Updates: `v0.29.2`] - `github.com/go-openapi/swag/netutils v0.27.1` → [Updates: `v0.29.2`] - `github.com/go-openapi/swag/pools v0.27.1` → [Updates: `v0.29.2`] - `github.com/go-openapi/swag/stringutils v0.27.1` → [Updates: `v0.29.2`] - `github.com/go-openapi/swag/typeutils v0.27.1` → [Updates: `v0.29.2`] - `github.com/go-openapi/swag/yamlutils v0.27.1` → [Updates: `v0.29.2`] - `github.com/google/gnostic-models v0.7.1` - `github.com/google/go-cmp v0.7.0` - `github.com/google/uuid v1.6.0` - `github.com/inconshreveable/mousetrap v1.1.0` - `github.com/json-iterator/go v1.1.12` - `github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd` - `github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee@35a7c28c31ee` - `github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822` - `github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2` - `github.com/prometheus/client_golang v1.24.1` - `github.com/prometheus/client_model v0.6.2` → [Updates: `v0.6.3`] - `github.com/prometheus/common v0.70.1` → [Updates: `v0.71.0`] - `github.com/prometheus/procfs v0.21.1` → [Updates: `v0.22.0`] - `github.com/x448/float16 v0.8.4` - `go.opentelemetry.io/otel v1.44.0` → [Updates: `v1.46.0`] - `go.opentelemetry.io/otel/trace v1.44.0` → [Updates: `v1.46.0`] - `go.uber.org/multierr v1.11.0` - `go.uber.org/zap v1.28.0` - `go.yaml.in/yaml/v2 v2.4.4` → [Updates: `v3.0.5`] - `go.yaml.in/yaml/v3 v3.0.5` - `golang.org/x/crypto v0.57.0` - `golang.org/x/net v0.58.0` → [Updates: `v0.59.0`] - `golang.org/x/oauth2 v0.37.0` - `golang.org/x/sync v0.23.0` - `golang.org/x/sys v0.48.0` - `golang.org/x/term v0.46.0` - `golang.org/x/text v0.42.0` - `golang.org/x/time v0.15.0` → [Updates: `v0.16.0`] - `gomodules.xyz/jsonpatch/v2 v2.5.0` → [Updates: `v3.0.1`] - `google.golang.org/protobuf v1.36.12` - `gopkg.in/evanphx/json-patch.v4 v4.13.0` → [Updates: `v5.9.11`] - `gopkg.in/inf.v0 v0.9.1` - `k8s.io/klog/v2 v2.140.0` - `k8s.io/kube-openapi v0.0.0-20260721132016-d427ff9ee9ad@d427ff9ee9ad` → [Updates: `v0.0.0-20260911184034-7970a1e230da`] - `k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3@cf1189d6abe3` - `sigs.k8s.io/gateway-api v1.6.2` - `sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730@2d320260d730` → [Updates: `v0.0.0-20260909141634-11ed52e25bc5`] - `sigs.k8s.io/randfill v1.0.0` - `sigs.k8s.io/structured-merge-diff/v6 v6.4.2` → [Updates: `v7.0.0`] - `sigs.k8s.io/yaml v1.6.0` cmd/controller/go.mod (175) - `go 1.26.0` - `github.com/go-logr/logr v1.4.4` - `github.com/spf13/cobra v1.10.2` - `github.com/spf13/pflag v1.0.10` - `golang.org/x/sync v0.23.0` - `k8s.io/apimachinery v0.37.0` - `k8s.io/client-go v0.37.0` - `k8s.io/component-base v0.37.0` - `cel.dev/expr v0.25.2` → [Updates: `v0.25.3`] - `cloud.google.com/go/auth v0.23.2` → [Updates: `v0.23.3`] - `cloud.google.com/go/auth/oauth2adapt v0.2.8` - `cloud.google.com/go/compute/metadata v0.9.0` → [Updates: `v0.9.1`] - `github.com/Azure/azure-sdk-for-go/sdk/azcore v1.23.1` - `github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.14.1` - `github.com/Azure/azure-sdk-for-go/sdk/internal v1.12.0` - `github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/dns/armdns v1.2.0` - `github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/privatedns/armprivatedns/v2 v2.0.0` - `github.com/Azure/go-ntlms

Source: cert-manager/cert-manager