Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Renovate: Update golang Docker tag to v1.24

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Pin alpine Docker tag to d9e853e
• Renovate: Update github.com/sapcc/go-netbox-go digest to 387cca4
• Renovate: Update External dependencies (alpine, github.com/prometheus/client_golang, go.uber.org/zap, k8s.io/api, k8s.io/client-go, sigs.k8s.io/controller-runtime)
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

23/23 CVEs have Renovate fixes.

gomod

go.mod

github.com/klauspost/compress

• GO-2026-5841 (fixed in >= 1.18.7)

go.mongodb.org/mongo-driver

• GHSA-cp6g-7hqx-qxhp (fixed in >= 1.17.7)
• GO-2026-5327 (fixed in >= 1.17.7)

golang.org/x/net

• GHSA-5cv4-jp36-h3mw (fixed in >= 0.55.0)
• GHSA-qxp5-gwg8-xv66 (fixed in >= 0.36.0)
• GHSA-vvgc-356p-c3xw (fixed in >= 0.38.0)
• GO-2024-3333 (fixed in >= 0.33.0)
• GO-2025-3503 (fixed in >= 0.36.0)
• GO-2025-3595 (fixed in >= 0.38.0)
• GO-2026-4440 (fixed in >= 0.45.0)
• GO-2026-4441 (fixed in >= 0.45.0)
• GO-2026-4918 (fixed in >= 0.53.0)
• GO-2026-5025 (fixed in >= 0.55.0)
• GO-2026-5026 (fixed in >= 0.55.0)
• GO-2026-5027 (fixed in >= 0.55.0)
• GO-2026-5028 (fixed in >= 0.55.0)
• GO-2026-5029 (fixed in >= 0.55.0)
• GO-2026-5030 (fixed in >= 0.55.0)
• GO-2026-5942 (fixed in >= 0.56.0)

golang.org/x/oauth2

• GHSA-6v2p-p543-phr9 (fixed in >= 0.27.0)
• GO-2025-3488 (fixed in >= 0.27.0)

golang.org/x/sys

• GO-2026-5024 (fixed in >= 0.44.0)

golang.org/x/text

• GO-2026-5970 (fixed in >= 0.39.0)

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• golang 1.23-alpine3.20 → [Updates: 1.24-alpine3.20, 1.23-alpine3.20]
• alpine 3.20 → [Updates: 3.24, 3.20]

github-actions (4)

.github/workflows/checks.yaml

.github/workflows/ci.yaml

.github/workflows/codeql.yaml

.github/workflows/container-registry-ghcr.yaml

gomod (1)

go.mod (7)

• go 1.27
• github.com/prometheus/client_golang v1.20.5 → [Updates: v1.24.1]
• github.com/sapcc/go-netbox-go v0.0.0-20250507102615-aa8913faf2ba@aa8913faf2ba → [Updates: v0.0.0-20250507102615-aa8913faf2ba]
• go.uber.org/zap v1.27.0 → [Updates: v1.28.0]
• k8s.io/api v0.31.0 → [Updates: v0.37.0]
• k8s.io/client-go v0.31.0 → [Updates: v0.37.0]
• sigs.k8s.io/controller-runtime v0.19.4 → [Updates: v0.25.0]

renovate-config (1)

.github/renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository