Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/IBM/sarama). ## Abandoned Dependencies The following dependencies have not received updates for an extended period and may be unmaintained. > [!NOTE] Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity. > View abandoned dependencies (8) | Datasource | Package | Last Updated | |------------|------|-------------| | gomod | [github.com/davecgh/go-spew](https://redirect.github.com/davecgh/go-spew) | `2018-02-21` | | gomod | [github.com/eapache/go-resiliency](https://redirect.github.com/eapache/go-resiliency) | `2024-07-19` | | gomod | [github.com/jcmturner/gofork](https://redirect.github.com/jcmturner/gofork) | `2022-07-26` | | gomod | [github.com/jcmturner/gokrb5/v8](https://redirect.github.com/jcmturner/gokrb5) | `2023-02-25` | | gomod | [github.com/rcrowley/go-metrics](https://redirect.github.com/rcrowley/go-metrics) | `2025-04-01` | | gomod | [go.uber.org/goleak](https://redirect.github.com/uber-go/goleak) | `2023-10-24` | | regex | [gotestyourself/gotestsum](https://redirect.github.com/gotestyourself/gotestsum) | `2025-09-11` | | regex | [mfridman/tparse](https://redirect.github.com/mfridman/tparse) | `2025-08-24` | ## Rate-Limited The following updates are currently rate-limited. To force their creation now, click on a checkbox below. - [ ] fix(deps): update module github.com/pierrec/lz4/v4 to v4.1.30 - [ ] chore(ci): Update github/codeql-action action to v4.38.1 - [ ] chore(deps): update docker/bake-action action to v7.4.0 - [ ] chore(deps): update docker/setup-buildx-action action to v4.4.1 - [ ] fix(deps): update module golang.org/x/net to v0.59.0 - [ ] fix(deps): update module golang.org/x/sys to v0.48.0 - [ ] **Create all rate-limited PRs at once** ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [chore(ci): Update registry.access.redhat.com/ubi9/ubi-minimal:9.8 Docker digest to 7b8e25a](../pull/3731) - [ ] [chore(deps): update dependency vearutop/teststat to v0.1.29](../pull/3730) - [ ] [chore(deps): update module golang.org/x/crypto to v0.57.0](../pull/3738) - [ ] [fix(deps): update module golang.org/x/sync to v0.23.0](../pull/3745) - [ ] **Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies docker-compose (1)

docker-compose.yml (2) - `ghcr.io/shopify/toxiproxy 2.12.0` - `docker.io/library/zookeeper 3.7.2`

dockerfile (1)

Dockerfile.kafka (1) - `registry.access.redhat.com/ubi9/ubi-minimal 9.8@sha256:8eb2830d0936237fc13a1f2f7e45aecf90d69043380ad167fad0343632937f41` → [Updates: `9.8`]

github-actions (11)

.github/workflows/apidiff.yml (3) - `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` .github/workflows/cache-cleanup.yml .github/workflows/ci.yml (6) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e` - `golangci/golangci-lint-action v9.3.0@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a` - `golangci/golangci-lint-action v9.3.0@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e` .github/workflows/codeql-analysis.yml (5) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `github/codeql-action v4.37.8@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28` → [Updates: `v4.38.1`] - `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e` - `github/codeql-action v4.37.8@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28` → [Updates: `v4.38.1`] - `github/codeql-action v4.37.8@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28` → [Updates: `v4.38.1`] .github/workflows/dependency-review.yml (2) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294` .github/workflows/fuzz.yml (3) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e` - `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` .github/workflows/fvt.yml (5) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `docker/setup-buildx-action v4.3.0@37fe631027851001ddb9b187196cc803df7f5f0e` → [Updates: `v4.4.1`] - `docker/bake-action v7.3.0@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b` → [Updates: `v7.4.0`] - `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e` - `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` .github/workflows/i386.yml (4) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e` .github/workflows/renovate-config.yml (2) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` .github/workflows/scorecard.yml (4) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc` - `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `github/codeql-action v4.37.8@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28` → [Updates: `v4.38.1`] .github/workflows/stale.yml (1) - `actions/stale v11.0.0@4391f3da665fdf50b6810c1a66712fb9ba21aa93`

gomod (1)

go.mod (14) - `go 1.25.0` - `github.com/davecgh/go-spew v1.1.1` - `github.com/eapache/go-resiliency v1.7.0` - `github.com/jcmturner/gofork v1.7.6` - `github.com/jcmturner/gokrb5/v8 v8.4.4` - `github.com/klauspost/compress v1.20.0` - `github.com/pierrec/lz4/v4 v4.1.29` → [Updates: `v4.1.30`] - `github.com/rcrowley/go-metrics v0.0.0-20250401214520-65e299d6c5c9@65e299d6c5c9` - `github.com/stretchr/testify v1.12.1` - `go.uber.org/goleak v1.3.0` - `golang.org/x/net v0.58.0` → [Updates: `v0.59.0`] - `golang.org/x/sync v0.22.0` → [Updates: `v0.23.0`] - `golang.org/x/sys v0.47.0` → [Updates: `v0.48.0`] - `golang.org/x/crypto v0.55.0` → [Updates: `v0.57.0`]

regex (2)

.github/workflows/ci.yml (3) - `golangci/golangci-lint v2.13.2` - `dominikh/go-tools 2026.2.1` - `mfridman/tparse v0.18.0` Makefile (2) - `gotestyourself/gotestsum v1.13.0` - `vearutop/teststat v0.1.27` → [Updates: `v0.1.29`]

--- - [ ] Check this box to trigger a request for Renovate to run again on this repository