Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Abandoned Dependencies The following dependencies have not received updates for an extended period and may be unmaintained. View abandoned dependencies (25) > [!NOTE] Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity. > | Datasource | Package | Last Updated | |------------|------|-------------| | gomod | `buf.build/gen/go/gogo/protobuf/protocolbuffers/go` | `2024-06-17` | | gomod | [github.com/Soontao/goHttpDigestClient](https://redirect.github.com/Soontao/goHttpDigestClient) | `2017-03-20` | | gomod | [github.com/beorn7/perks](https://redirect.github.com/beorn7/perks) | `2019-07-31` | | gomod | [github.com/bufbuild/protocompile](https://redirect.github.com/bufbuild/protocompile) | `2024-08-30` | | gomod | [github.com/cespare/xxhash/v2](https://redirect.github.com/cespare/xxhash) | `2024-04-04` | | gomod | [github.com/go-logr/stdr](https://redirect.github.com/go-logr/stdr) | `2021-12-15` | | gomod | [github.com/go-sourcemap/sourcemap](https://redirect.github.com/go-sourcemap/sourcemap) | `2024-03-13` | | gomod | [github.com/golang/protobuf](https://redirect.github.com/golang/protobuf) | `2024-03-06` | | gomod | [github.com/google/uuid](https://redirect.github.com/google/uuid) | `2024-01-23` | | gomod | [github.com/gorilla/websocket](https://redirect.github.com/gorilla/websocket) | `2024-06-14` | | gomod | [github.com/inconshreveable/mousetrap](https://redirect.github.com/inconshreveable/mousetrap) | `2022-11-27` | | gomod | [github.com/influxdata/influxdb1-client](https://redirect.github.com/influxdata/influxdb1-client) | `2022-03-02` | | gomod | [github.com/jhump/protoreflect/v2](https://redirect.github.com/jhump/protoreflect) | `2024-09-14` | | gomod | [github.com/mstoykov/atlas](https://redirect.github.com/mstoykov/atlas) | `2022-08-11` | | gomod | [github.com/mstoykov/envconfig](https://redirect.github.com/mstoykov/envconfig) | `2024-04-04` | | gomod | [github.com/munnerz/goautoneg](https://redirect.github.com/munnerz/goautoneg) | `2019-10-10` | | gomod | [github.com/nu7hatch/gouuid](https://redirect.github.com/nu7hatch/gouuid) | `2013-12-21` | | gomod | [github.com/nxadm/tail](https://redirect.github.com/nxadm/tail) | `2023-10-10` | | gomod | [github.com/pkg/browser](https://redirect.github.com/pkg/browser) | `2024-01-02` | | gomod | [github.com/r3labs/sse/v2](https://redirect.github.com/r3labs/sse) | `2023-01-18` | | gomod | [github.com/serenize/snaker](https://redirect.github.com/serenize/snaker) | `2020-10-27` | | gomod | [github.com/tidwall/pretty](https://redirect.github.com/tidwall/pretty) | `2022-10-01` | | gomod | [go.uber.org/goleak](https://redirect.github.com/uber-go/goleak) | `2023-10-24` | | gomod | [gopkg.in/validator.v2](https://redirect.github.com/go-validator/validator) | `2022-04-05` | | gomod | [gopkg.in/yaml.v3](https://redirect.github.com/go-yaml/yaml) | `2022-05-27` | ## Awaiting Schedule The following updates are awaiting their schedule. To get an update now, click on a checkbox below. - [ ] fix(deps): update github.com/chromedp/cdproto digest to 686a5c7 (master) - [ ] chore(deps): update anchore/sbom-action action to v0.24.2 (master) - [ ] chore(deps): update dependency grafana/k6-ci to v0.5.1 (master) - [ ] chore(deps): update grafana/shared-workflows/aws-auth action to v1.0.5 (master) - [ ] chore(deps): update grafana/shared-workflows/login-to-gar action to v1.0.3 (master) - [ ] chore(deps): update crazy-max/ghaction-chocolatey action to v4.1.0 (master) - [ ] chore(deps): update docker/login-action action to v4.6.0 (master) - [ ] chore(deps): update github/codeql-action action to v4.38.0 (master) - [ ] fix(deps): update examples/ (master) (`go`, `go.k6.io/k6/v2`, `grafana/alloy`, `grafana/grafana`, `influxdb`, `prom/prometheus`) - [ ] chore(deps): update actions/setup-go action to v7 (master) - [ ] chore(deps): update actions/stale action to v11 (master) - [ ] chore(deps): update examples/ (master) (major) (`grafana/grafana`, `influxdb`) - [ ] chore(deps): update grafana/shared-workflows/get-vault-secrets action to v2.0.2 (master) - [ ] **Create all awaiting schedule PRs at once** ## Pending Status Checks The following updates await pending status checks. To force their creation now, click on a checkbox below. - [ ] chore(deps): update grafana/shared-workflows digest to 2f1ddaf (master) - [ ] fix(deps): update github.com/grafana/k6-cloud-openapi-client-go digest to 9373d55 (master) - [ ] fix(deps): update github.com/grafana/sobek digest to 8a431c4 (master) - [ ] fix(deps): update module google.golang.org/grpc to v1.84.0 (master) ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [chore(deps): update debian:13 docker digest to f324c7f (master)](../pull/6263) - [ ] [fix(deps): update github.com/go-json-experiment/json digest to c27c302 (master)](../pull/6330) - [ ] [chore(deps): update golang docker tag to v1.27.1 (master)](../pull/6376) - [ ] [fix(deps): update module buf.build/gen/go/prometheus/prometheus/protocolbuffers/go to v1.36.12-20260707164124-2360da55afce.2 (master)](../pull/6302) - [ ] [fix(deps): update module github.com/andybalholm/brotli to v1.2.4 (master)](../pull/6405) - [ ] [fix(deps): update module github.com/jhump/protoreflect to v1.18.1 (master)](../pull/6377) - [ ] [fix(deps): update module github.com/prometheus/client_model to v0.6.3 (master)](../pull/6378) - [ ] [fix(deps): update golangx (master)](../pull/6356) (`golang.org/x/crypto`, `golang.org/x/net`, `golang.org/x/sync`, `golang.org/x/term`, `golang.org/x/time`) - [ ] [fix(deps): update module github.com/puerkitobio/goquery to v1.13.0 (master)](../pull/6359) - [ ] [fix(security/unknown/): update module golang.org/x/crypto to v0.56.0 [security] (v1.x)](../pull/6352) - [ ] **Click on this checkbox to rebase all open PRs at once** ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] [fix(deps): update module github.com/grpc-ecosystem/go-grpc-middleware to v2 (master)](../pull/6078) ## Vulnerabilities > [!IMPORTANT] > `0`/`1` CVEs have Renovate fixes. gomod

go.mod

golang.org/x/crypto

- [GO-2026-5932](https://osv.dev/vulnerability/GO-2026-5932)

## Detected Dependencies Branch master

docker-compose (4)

examples/docker-compose/influxdb-v1/docker-compose.yml (2) - `influxdb 1.12@sha256:35e9976120a18fff82fefcc06d631de7585f33e7b096e9128465e6c15a9233fc` → [Updates: `1.13`, `2.9`, `1.12`] - `grafana/grafana 9.5.21@sha256:ec106c7d446c88377f9d6c4cd363361b5846c361a28f5669d1b5e92926d94891` → [Updates: `13.2.1`] examples/docker-compose/opentelemetry/docker-compose.yml (3) - `prom/prometheus v3.11.0@sha256:dda13e28bf95a5e5ca5b8ed56852006094c1c8e8871d9c9dbeed30aa6e55271f` → [Updates: `v3.14.0`] - `grafana/alloy v1.15.0@sha256:579582bce40049f2e27bd1e445000689c907a41f0495cb0d0c7f65609316ba7c` → [Updates: `v1.19.2`] - `grafana/grafana 12.4.2@sha256:83749231c3835e390a3144e5e940203e42b9589761f20ef3169c716e734ad505` → [Updates: `12.4.10`, `13.2.1`] examples/experimental/docker-compose.yml (1) - `redis alpine@sha256:81b6f81d6a6c5b9019231a2e8eb10085e3a139a34f833dcc965a8a959b040b72` → [Updates: `alpine`] packaging/docker-compose.yml

dockerfile (2)

Dockerfile (2) - `golang 1.27.0-alpine@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc` → [Updates: `1.27.1-alpine`] - `alpine 3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b` packaging/Dockerfile (1) - `debian 13@sha256:fac46bff2e02f51425b6e33b0e1169f55dfb053d83511ca28aa50c09fd5ed7a4` → [Updates: `13`]

github-actions (18)

.github/actions/test-common/action.yml (2) - `actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16` → [Updates: `v7`] - `go ${{ inputs.go_version }}` .github/workflows/auto-approve-renovate.yml (1) - `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`] .github/workflows/browser_e2e.yml (3) - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16` → [Updates: `v7`] - `go 1.x` .github/workflows/build.yml (33) - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16` → [Updates: `v7`] - `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `grafana/shared-workflows login-to-gar/v1.0.1@c7ad5f57693ac858c698d95783685a9cbfd91223` → [Updates: `login-to-gar/v1.0.3`] - `docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121` → [Updates: `v4.6.0`] - `actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `grafana/shared-workflows get-vault-secrets/v1.3.2@a53fc80bc30b0a16a262520465db899fa3af08b7` → [Updates: `get-vault-secrets/v2.0.2`] - `grafana/shared-workflows azure-trusted-signing/v1.0.3@6a042eda14a697e71944976ab618d27104d9fed4` - `actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `crazy-max/ghaction-chocolatey v4.0.0@dff3862348493b11fba2fbc49147b6d2dfe09b66` → [Updates: `v4.1.0`] - `actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `grafana/shared-workflows get-vault-secrets/v1.3.2@a53fc80bc30b0a16a262520465db899fa3af08b7` → [Updates: `get-vault-secrets/v2.0.2`] - `grafana/shared-workflows azure-trusted-signing/v1.0.3@6a042eda14a697e71944976ab618d27104d9fed4` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610` → [Updates: `v0.24.2`] - `grafana/shared-workflows get-vault-secrets/v1.3.2@a53fc80bc30b0a16a262520465db899fa3af08b7` → [Updates: `get-vault-secrets/v2.0.2`] - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `grafana/shared-workflows get-vault-secrets/v1.3.2@a53fc80bc30b0a16a262520465db899fa3af08b7` → [Updates: `get-vault-secrets/v2.0.2`] - `grafana/shared-workflows aws-auth/v1.0.4@bb04b9b1c3903959957c63d1370b2d49a4b978d0` → [Updates: `aws-auth/v1.0.5`] - `docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121` → [Updates: `v4.6.0`] - `go ${{ needs.configure.outputs.go_version }}` - `windows 2025` .github/workflows/codeql-analysis.yml (3) - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `github/codeql-action v4.35.4@68bde559dea0fdcac2102bfdf6230c5f70eb485e` → [Updates: `v4.38.0`] - `github/codeql-action v4.35.4@68bde559dea0fdcac2102bfdf6230c5f70eb485e` → [Updates: `v4.38.0`] .github/workflows/feature-briefs.yml (1) - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` .github/workflows/issue-auto-assign.yml (1) - `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3` .github/workflows/lint.yml (5) - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`] - `actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16` → [Updates: `v7`] - `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`] - `go ${{ steps.go_versions.outputs.prev }}` .github/workflows/packager.yml (2) - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121` → [Updates: `v4.6.0`] .github/workflows/publish-techdocs.yaml (1) - `grafana/shared-workflows main@86e65f7130d6e52d79f4b56a925b431c4aaea359` → [Updates: `main`] .github/workflows/second-approve-renovate.yml .github/workflows/stale.yml (1) - `actions/stale v10@1e223db275d687790206a7acac4d1a11bd6fe629` → [Updates: `v11`] .github/workflows/summary-code-generation.yml (1) - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` .github/workflows/tc39.yml (4) - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`] - `actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16` → [Updates: `v7`] - `go ${{ steps.go_versions.outputs.current }}` .github/workflows/test-browser.yml (4) - `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`] - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` .github/workflows/test.yml (4) - `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`] - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` .github/workflows/wpt.yml (4) - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`] - `actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16` → [Updates: `v7`] - `go ${{ steps.go_versions.outputs.current }}` .github/workflows/xk6.yml (4) - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`] - `actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16` → [Updates: `v7`] - `go ${{ steps.go_versions.outputs.current }}`

gomod (2)

examples/grpc_server/go.mod (8) - `go 1.25.0` → [Updates: `1.26.0`] - `go.k6.io/k6/v2 v2.0.0-rc1` → [Updates: `v2.2.0`] - `google.golang.org/grpc v1.83.2` → [Updates: `v1.84.0`] - `golang.org/x/net v0.58.0` → [Updates: `v0.59.0`] - `golang.org/x/sys v0.47.0` → [Updates: `v0.48.0`] - `golang.org/x/text v0.41.0` → [Updates: `v0.42.0`] - `google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa@3dc84a4a5aaa` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`] - `google.golang.org/protobuf v1.36.11` → [Updates: `v1.36.12`] go.mod (93) - `go 1.26.0` - `buf.build/gen/go/prometheus/prometheus/protocolbuffers/go v1.36.11-20260707164124-2360da55afce.1@2360da55afce` → [Updates: `v1.36.12-20260707164124-2360da55afce.2`] - `github.com/Azure/go-ntlmssp v0.1.1` - `github.com/Masterminds/semver/v3 v3.5.0` - `github.com/PuerkitoBio/goquery v1.12.0` → [Updates: `v1.13.0`] - `github.com/Soontao/goHttpDigestClient v0.0.0-20170320082612-6d28bb1415c5@6d28bb1415c5` - `github.com/andybalholm/brotli v1.2.3` → [Updates: `v1.2.4`] - `github.com/bufbuild/protocompile v0.14.1` - `github.com/chromedp/cdproto v0.0.0-20250803210736-d308e07a266d@d308e07a266d` → [Updates: `v0.0.0-20260912003405-686a5c723acc`] - `github.com/evanw/esbuild v0.28.2` - `github.com/fatih/color v1.19.0` - `github.com/go-json-experiment/json v0.0.0-20250211171154-1ae217ad3535@1ae217ad3535` → [Updates: `v0.0.0-20260820222146-c27c302e5fc3`] - `github.com/go-sourcemap/sourcemap v2.1.4+incompatible` - `github.com/golang/protobuf v1.5.4` - `github.com/google/uuid v1.6.0` - `github.com/gorilla/websocket v1.5.3` - `github.com/grafana/k6-cloud-openapi-client-go v0.0.3-0.20260716125012-97c96146fa7c@97c96146fa7c` → [Updates: `v0.0.3-0.20260716125012-97c96146fa7c`] - `github.com/grafana/k6provider v0.5.0` - `github.com/gra