Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps-dev): update actions/checkout digest to 11bd719
• chore(deps-dev): update pascalgn/size-label-action digest to 6ec5bd0
• chore(deps): update module github.com/upbound/provider-terraform to v0.19.2
• chore(deps): update kubernetes packages (k8s.io/api, k8s.io/apimachinery)
• chore(deps): update module github.com/alitto/pond to v2
• chore(deps-dev): update actions/setup-go action to v5.2.0
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

Dockerfile

github-actions

.github/workflows/main.yaml

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe
• shogo82148/actions-goveralls v1.9.0@785c9d68212c91196d3994652647f8721918ba11

.github/workflows/pr-actions.yaml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• zgosalvez/github-actions-ensure-sha-pinned-actions v3.0.20@c3a2b64f69b7a1542a68f44d9edbd9ec3fc1455e

.github/workflows/pr-build.yaml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe
• shogo82148/actions-goveralls v1.9.0@785c9d68212c91196d3994652647f8721918ba11

.github/workflows/pr-goreleaser.yaml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• goreleaser/goreleaser-action v6.1.0@9ed2f89a662bf1735a48bc8557fd212fa902bebf

.github/workflows/pr-label.yaml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• pascalgn/size-label-action 49850f3557d4b77f0b2e759829defd77ccc07c54

.github/workflows/pr-stale.yaml

• actions/stale v9.0.0@28ca1036281a5e5922ead5184a1bbf96e5fc984e

.github/workflows/pr-trivy.yaml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• aquasecurity/trivy-action 0.29.0@18f2510ee396bbf400402947b394f2dd8c87dbb0
• github/codeql-action v3.28.1@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c

.github/workflows/publish-release.yaml

• Actions-R-Us/actions-tagger v2.0.3@330ddfac760021349fef7ff62b372f2f691c20fb

.github/workflows/rebase.yaml

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• cirrus-actions/rebase 1.8@b87d48154a87a85666003575337e27b8cd65f691

.github/workflows/release.yaml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• sigstore/cosign-installer v3.7.0@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
• anchore/sbom-action v0.17.9@df80a981bc6edbc4e220a492d3cbe9f5547a6e75
• goreleaser/goreleaser-action v6.1.0@9ed2f89a662bf1735a48bc8557fd212fa902bebf

.github/workflows/report-on-vulnerabilities.yaml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• aquasecurity/trivy-action 0.29.0@18f2510ee396bbf400402947b394f2dd8c87dbb0
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5

.github/workflows/scan.yaml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818

.github/workflows/scorecard.yaml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• github/codeql-action v3.28.1@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c

gomod

go.mod

• go 1.22.0
• github.com/alitto/pond v1.9.2
• github.com/crossplane/crossplane-runtime v1.18.0
• github.com/go-logr/logr v1.4.2
• github.com/go-logr/zapr v1.3.0
• github.com/sethvargo/go-envconfig v1.1.0
• github.com/spf13/pflag v1.0.5
• github.com/upbound/provider-terraform v0.19.0
• go.uber.org/zap v1.27.0
• k8s.io/api v0.31.3
• k8s.io/apimachinery v0.31.4

homebrew

Formula/tfxunpack.rb

• DoodleScheduling/tfxunpack v0.1.0

---

• Check this box to trigger a request for Renovate to run again on this repository