Dependency Dashboard

Project settings are at https://developer.mend.io/ ## Abandoned Dependencies The following dependencies have not received updates for an extended period and may be unmaintained. > [!NOTE] Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity. > View abandoned dependencies (20) | Datasource | Package | Last Updated | |------------|------|-------------| | github-actions | [Wandalen/wretry.action](https://redirect.github.com/Wandalen/wretry.action) | `2025-01-09` | | github-actions | [oracle-actions/configure-kubectl-oke](https://redirect.github.com/oracle-actions/configure-kubectl-oke) | `2024-06-17` | | gomod | [github.com/asaskevich/govalidator](https://redirect.github.com/asaskevich/govalidator) | `2023-03-01` | | gomod | [github.com/davecgh/go-spew](https://redirect.github.com/davecgh/go-spew) | `2018-02-21` | | gomod | [github.com/go-logr/zapr](https://redirect.github.com/go-logr/zapr) | `2023-11-03` | | gomod | [github.com/gogo/googleapis](https://redirect.github.com/gogo/googleapis) | `2021-03-16` | | gomod | [github.com/gogo/protobuf](https://redirect.github.com/gogo/protobuf) | `2021-01-10` | | gomod | [github.com/google/uuid](https://redirect.github.com/google/uuid) | `2024-01-23` | | gomod | [github.com/gorilla/handlers](https://redirect.github.com/gorilla/handlers) | `2023-11-05` | | gomod | [github.com/gorilla/websocket](https://redirect.github.com/gorilla/websocket) | `2024-06-14` | | gomod | [github.com/kr/pretty](https://redirect.github.com/kr/pretty) | `2022-08-29` | | gomod | [github.com/pmezard/go-difflib](https://redirect.github.com/pmezard/go-difflib) | `2016-01-10` | | gomod | [github.com/spf13/pflag](https://redirect.github.com/spf13/pflag) | `2025-09-02` | | gomod | [github.com/spf13/viper](https://redirect.github.com/spf13/viper) | `2025-09-08` | | gomod | [github.com/wadey/gocovmerge](https://redirect.github.com/wadey/gocovmerge) | `2016-03-31` | | gomod | [go.uber.org/automaxprocs](https://redirect.github.com/uber-go/automaxprocs) | `2024-09-23` | | gomod | [go.uber.org/goleak](https://redirect.github.com/uber-go/goleak) | `2023-10-24` | | gomod | [gotest.tools/gotestsum](https://redirect.github.com/gotestyourself/gotestsum) | `2025-09-11` | ## Awaiting Schedule The following updates are awaiting their schedule. To get an update now, click on a checkbox below. - [ ] fix(deps): update all golang.org/x packages (`golang.org/x/exp`, `golang.org/x/sys`, `golang.org/x/vuln`) - [ ] fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.13.2 - [ ] fix(deps): update module github.com/grafana/grafana-foundation-sdk/go to v0.0.20 - [ ] chore(deps): update github-actions deps (`astral-sh/setup-uv`, `github/codeql-action`) - [ ] fix(deps): update all elasticsearch client packages (`github.com/elastic/elastic-transport-go/v8`, `github.com/elastic/go-elasticsearch/v9`) - [ ] fix(deps): update module github.com/prometheus/common to v0.71.0 - [ ] fix(deps): update module github.com/vektra/mockery/v3 to v3.8.0 - [ ] fix(deps): update module mvdan.cc/gofumpt to v0.12.0 - [ ] chore(deps): lock file maintenance - [ ] **Create all awaiting schedule PRs at once** ## Pending Status Checks The following updates await pending status checks. To force their creation now, click on a checkbox below. - [ ] chore(deps): update cassandra:5.0.9 docker digest to 86d5312 - [ ] chore(deps): update opensearchproject/opensearch:3.8.0 docker digest to fafe3fc - [ ] fix(deps): update github.com/ag-ui-protocol/ag-ui/sdks/community/go digest to f08ccf8 - [ ] fix(deps): update google.golang.org/genproto/googleapis/api digest to eeb232e - [ ] chore(deps): update alpine docker tag to v3.24.2 - [ ] chore(deps): update clickhouse/clickhouse-server docker tag to v26.8.6 - [ ] chore(deps): update docker.elastic.co/elasticsearch/elasticsearch docker tag to v9.5.4 - [ ] chore(deps): update all jaeger docker images to v2.21.0 (`cr.jaegertracing.io/jaegertracing/jaeger`, `cr.jaegertracing.io/jaegertracing/jaeger-tracegen`) - [ ] fix(deps): update all otel collector contrib packages to v0.161.0 (`github.com/open-telemetry/opentelemetry-collector-contrib/connector/spanmetricsconnector`, `github.com/open-telemetry/opentelemetry-collector-contrib/exporter/kafkaexporter`, `github.com/open-telemetry/opentelemetry-collector-contrib/exporter/prometheusexporter`, `github.com/open-telemetry/opentelemetry-collector-contrib/extension/basicauthextension`, `github.com/open-telemetry/opentelemetry-collector-contrib/extension/healthcheckv2extension`, `github.com/open-telemetry/opentelemetry-collector-contrib/extension/pprofextension`, `github.com/open-telemetry/opentelemetry-collector-contrib/extension/sigv4authextension`, `github.com/open-telemetry/opentelemetry-collector-contrib/extension/storage`, `github.com/open-telemetry/opentelemetry-collector-contrib/pkg/core/xidutils`, `github.com/open-telemetry/opentelemetry-collector-contrib/pkg/pdatatest`, `github.com/open-telemetry/opentelemetry-collector-contrib/pkg/pdatautil`, `github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/jaeger`, `github.com/open-telemetry/opentelemetry-collector-contrib/processor/attributesprocessor`, `github.com/open-telemetry/opentelemetry-collector-contrib/processor/filterprocessor`, `github.com/open-telemetry/opentelemetry-collector-contrib/processor/tailsamplingprocessor`, `github.com/open-telemetry/opentelemetry-collector-contrib/receiver/jaegerreceiver`, `github.com/open-telemetry/opentelemetry-collector-contrib/receiver/kafkareceiver`, `github.com/open-telemetry/opentelemetry-collector-contrib/receiver/zipkinreceiver`) - [ ] fix(deps): update all otel collector packages (`go.opentelemetry.io/collector/client`, `go.opentelemetry.io/collector/cmd/builder`, `go.opentelemetry.io/collector/component`, `go.opentelemetry.io/collector/component/componentstatus`, `go.opentelemetry.io/collector/component/componenttest`, `go.opentelemetry.io/collector/config/configauth`, `go.opentelemetry.io/collector/config/configgrpc`, `go.opentelemetry.io/collector/config/confighttp`, `go.opentelemetry.io/collector/config/confighttp/xconfighttp`, `go.opentelemetry.io/collector/config/configmiddleware`, `go.opentelemetry.io/collector/config/confignet`, `go.opentelemetry.io/collector/config/configopaque`, `go.opentelemetry.io/collector/config/configoptional`, `go.opentelemetry.io/collector/config/configretry`, `go.opentelemetry.io/collector/config/configtelemetry`, `go.opentelemetry.io/collector/config/configtls`, `go.opentelemetry.io/collector/confmap`, `go.opentelemetry.io/collector/confmap/provider/envprovider`, `go.opentelemetry.io/collector/confmap/provider/fileprovider`, `go.opentelemetry.io/collector/confmap/provider/httpprovider`, `go.opentelemetry.io/collector/confmap/provider/httpsprovider`, `go.opentelemetry.io/collector/confmap/provider/yamlprovider`, `go.opentelemetry.io/collector/connector`, `go.opentelemetry.io/collector/connector/forwardconnector`, `go.opentelemetry.io/collector/consumer`, `go.opentelemetry.io/collector/consumer/consumertest`, `go.opentelemetry.io/collector/exporter`, `go.opentelemetry.io/collector/exporter/debugexporter`, `go.opentelemetry.io/collector/exporter/exporterhelper`, `go.opentelemetry.io/collector/exporter/exportertest`, `go.opentelemetry.io/collector/exporter/nopexporter`, `go.opentelemetry.io/collector/exporter/otlpexporter`, `go.opentelemetry.io/collector/exporter/otlphttpexporter`, `go.opentelemetry.io/collector/extension`, `go.opentelemetry.io/collector/extension/extensionauth`, `go.opentelemetry.io/collector/extension/extensioncapabilities`, `go.opentelemetry.io/collector/extension/zpagesextension`, `go.opentelemetry.io/collector/featuregate`, `go.opentelemetry.io/collector/otelcol`, `go.opentelemetry.io/collector/pdata`, `go.opentelemetry.io/collector/pdata/xpdata`, `go.opentelemetry.io/collector/pipeline`, `go.opentelemetry.io/collector/processor`, `go.opentelemetry.io/collector/processor/batchprocessor`, `go.opentelemetry.io/collector/processor/memorylimiterprocessor`, `go.opentelemetry.io/collector/processor/processorhelper`, `go.opentelemetry.io/collector/processor/processortest`, `go.opentelemetry.io/collector/receiver`, `go.opentelemetry.io/collector/receiver/nopreceiver`, `go.opentelemetry.io/collector/receiver/otlpreceiver`, `go.opentelemetry.io/collector/service`) - [ ] fix(deps): update module google.golang.org/grpc to v1.84.0 ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] [fix(deps): update module github.com/modelcontextprotocol/go-sdk to v1.7.0](../pull/9506) - [ ] [fix(deps): update dependency websockets to v17](../pull/9428) ## Detected Dependencies docker-compose (18)

cmd/tracegen/docker-compose.yml (2) - `cr.jaegertracing.io/jaegertracing/jaeger 2.20.0@sha256:46a886260e04002d8f45e213fc39063fa11a50446048fdaa64786fc0840cb9f8` → [Updates: `2.21.0`] - `cr.jaegertracing.io/jaegertracing/jaeger-tracegen 2.20.0@sha256:be38b7a33c51ff4835708319abbdb284e1ff34e5fde2d047fc453e7c01d0708b` → [Updates: `2.21.0`] docker-compose/cassandra/v4/docker-compose.yaml (1) - `cassandra 4.1@sha256:b9451ebdfa53f9e22b470e1420f2a94a3433738b7f25350472d3443f0b203b75` → [Updates: `6.0`, `4.1`] docker-compose/cassandra/v5/docker-compose.yaml (1) - `cassandra 5.0@sha256:70b40a2025d450f7865c5ec6f1ebea13108166f81fe41462069690cb4d9690f2` → [Updates: `6.0`, `5.0`] docker-compose/clickhouse/docker-compose.yml (1) - `clickhouse/clickhouse-server 25.12.11@sha256:8a790dd3468db22b1d4e7b18a176f378ff5ff6053b9c48dd4ea1fa71a24c5ba6` → [Updates: `26.8.2`] docker-compose/elasticsearch/v7/docker-compose.yml (1) - `docker.elastic.co/elasticsearch/elasticsearch 7.17.22@sha256:a0e01a200a316bac8d661e1acae368fd40c9c618847205a12f443c09c36e6eb3` → [Updates: `7.17.29`, `9.5.4`] docker-compose/elasticsearch/v8/docker-compose.yml (1) - `docker.elastic.co/elasticsearch/elasticsearch 8.19.0@sha256:e1e66bfabae0fd03a0a36651a9bb198e7f061e0c99f457a6203b116e053e9cdb` → [Updates: `8.19.21`, `9.5.4`] docker-compose/elasticsearch/v9/docker-compose.yml (1) - `docker.elastic.co/elasticsearch/elasticsearch 9.5.3@sha256:f456578fc2a620a8a4f4c21d070fff1f6070345adb2be5e5626b65be72aea350` → [Updates: `9.5.4`] docker-compose/kafka/docker-compose.yml (4) - `cr.jaegertracing.io/jaegertracing/jaeger-remote-storage sha256:e78c6093ac38f7cdccf0877750bb21f2cbcc08c2fd3e578966b5796a31f26643` → [Updates: `undefined`] - `cr.jaegertracing.io/jaegertracing/jaeger 2.20.0@sha256:46a886260e04002d8f45e213fc39063fa11a50446048fdaa64786fc0840cb9f8` → [Updates: `2.21.0`] - `cr.jaegertracing.io/jaegertracing/jaeger 2.20.0@sha256:46a886260e04002d8f45e213fc39063fa11a50446048fdaa64786fc0840cb9f8` → [Updates: `2.21.0`] - `cr.jaegertracing.io/jaegertracing/jaeger 2.20.0@sha256:46a886260e04002d8f45e213fc39063fa11a50446048fdaa64786fc0840cb9f8` → [Updates: `2.21.0`] docker-compose/kafka/v3/docker-compose.yml (1) - `apache/kafka 3.9.0@sha256:fbc7d7c428e3755cf36518d4976596002477e4c052d1f80b5b9eafd06d0fff2f` → [Updates: `3.9.2`, `4.3.1`] docker-compose/monitor/docker-compose-clickhouse.yml (2) - `clickhouse/clickhouse-server 26.8.2@sha256:fa394da808cc53f76d0344429421d6c422a6ee85fe7450135c0e3cff4df9bcbb` → [Updates: `26.8.6`] - `yurishkuro/microsim v0.6.0@sha256:fd75a9b3dd1bb4d7d305a562edeac60051a7fec784b898ff7ab834eacc73f41e` docker-compose/monitor/docker-compose-elasticsearch.yml (2) - `docker.elastic.co/elasticsearch/elasticsearch 9.5.3@sha256:f456578fc2a620a8a4f4c21d070fff1f6070345adb2be5e5626b65be72aea350` → [Updates: `9.5.4`] - `yurishkuro/microsim v0.6.0@sha256:fd75a9b3dd1bb4d7d305a562edeac60051a7fec784b898ff7ab834eacc73f41e` docker-compose/monitor/docker-compose-opensearch.yml (2) - `opensearchproject/opensearch 3.8.0@sha256:bcc1797519726ceb6d651d4a3e60b7c30da91793914a8dfe75fd441d4f641509` → [Updates: `3.8.0`] - `yurishkuro/microsim v0.6.0@sha256:fd75a9b3dd1bb4d7d305a562edeac60051a7fec784b898ff7ab834eacc73f41e` docker-compose/monitor/docker-compose.yml (3) - `yurishkuro/microsim v0.6.0@sha256:fd75a9b3dd1bb4d7d305a562edeac60051a7fec784b898ff7ab834eacc73f41e` - `prom/prometheus v3.14.0@sha256:5ce7540c3c00ef4ab0c9d2c995c6a5b9c421f44b4a115d97a2c7af3b1c21cbb0` - `grafana/grafana 12.4.2@sha256:83749231c3835e390a3144e5e940203e42b9589761f20ef3169c716e734ad505` → [Updates: `12.4.10`, `13.2.1`] docker-compose/opensearch/v1/docker-compose.yml (1) - `opensearchproject/opensearch 1.3.17@sha256:749c568af3106a12b1600673ab8dd2d1980d1c699a09f10cbcf6a003d8e38aed` → [Updates: `1.3.20`, `3.7.0`] docker-compose/opensearch/v2/docker-compose.yml (1) - `opensearchproject/opensearch 2.19.6@sha256:8690b204fe914c60ca76d451ac73bc0481e034d32d3779944c8caca56a2b003f` → [Updates: `3.7.0`, `2.19.6`] docker-compose/opensearch/v3/docker-compose.yml (1) - `opensearchproject/opensearch 3.8.0@sha256:bcc1797519726ceb6d651d4a3e60b7c30da91793914a8dfe75fd441d4f641509` → [Updates: `3.8.0`] docker-compose/scylladb/docker-compose.yml (3) - `scylladb/scylla 5.4.7@sha256:d73f652cbce3622827eeff35a650936d70b2bf2939ea5dd6b7e6c3e8944537fe` → [Updates: `5.4.9`, `6.2.3`] - `scylladb/scylla 5.4.7@sha256:d73f652cbce3622827eeff35a650936d70b2bf2939ea5dd6b7e6c3e8944537fe` → [Updates: `5.4.9`, `6.2.3`] - `scylladb/scylla 5.4.7@sha256:d73f652cbce3622827eeff35a650936d70b2bf2939ea5dd6b7e6c3e8944537fe` → [Updates: `5.4.9`, `6.2.3`] docker-compose/tail-sampling/docker-compose.yml (1) - `cr.jaegertracing.io/jaegertracing/jaeger-tracegen 2.20.0@sha256:be38b7a33c51ff4835708319abbdb284e1ff34e5fde2d047fc453e7c01d0708b` → [Updates: `2.21.0`]

dockerfile (7)

cmd/es-index-cleaner/Dockerfile cmd/es-rollover/Dockerfile cmd/jaeger/Dockerfile cmd/remote-storage/Dockerfile internal/storage/v1/cassandra/Dockerfile (1) - `cassandra 5.0.9@sha256:d35e159439b302146f964919904f84fd3c2cebf347272b8cb8c4368c1cf200e5` → [Updates: `5.0.9`] scripts/build/docker/base/Dockerfile (2) - `alpine 3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b` → [Updates: `3.24.2`] - `alpine 3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b` → [Updates: `3.24.2`] scripts/build/docker/debug/Dockerfile (1) - `ghcr.io/jaegertracing/base-image-with-debugger 0.2.0@sha256:e7173c919595b6dd6b5b83bec6ea40842036e8847b46675a0d697a05f55ff9ad`

github-actions (44)

.github/actions/pr-quota-manager/action.yml (1) - `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3` .github/actions/setup-go-tip/action.yml (1) - `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e` .github/actions/setup-go/action.yml (2) - `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e` - `go 1.27.x` .github/actions/setup-node.js/action.yml (2) - `pnpm/action-setup v6.1.0@ea17c68df8912ef543352723c149a84f56e3d413` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` .github/actions/upload-codecov/action.yml (2) - `actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f` → [Updates: `v7.0.1`] - `Wandalen/wretry.action v3.8.0@e68c23e6309f2871ca8ae4763e7629b9c258e1ea` .github/actions/verify-metrics-snapshot/action.yaml (2) - `actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f` → [Updates: `v7.0.1`] - `actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f` → [Updates: `v7.0.1`] .github/workflows/ci-ai-sidecar-gemini.yml (6) - `step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c` → [Updates: `v2.21.1`] - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97` - `astral-sh/setup-uv v10.0.1@20cfd1bf945f4377ade1205e4dbc17946fc9a30d` → [Updates: `v10.1.0`] - `python 3.14` - `astral-sh/uv 0.12.5` → [Updates: `0.12.13`] .github/workflows/ci-backward-compatibility.yml (3) - `step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c` → [Updates: `v2.21.1`] - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] .github/workflows/ci-build-binaries.yml (3) - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c` → [Updates: `v2.21.1`] - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] .github/workflows/ci-deploy-demo.yml (4) - `oracle-actions/configure-kubectl-oke v1.5.0@77a733d79446dabe7bf0e58eb56197d33ce4dc58` - `azur