fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #92 · DevOpsHiveHQ/kustomize-plugin-merger

renovate · 2026-01-01T04:29:52Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	minor	`v4.2.4` → `v4.3.0`
actions/checkout (changelog)	action	digest	`11bd719` → `11d5960`
actions/checkout	action	minor	`v4.2.2` → `v4.4.0`
actions/dependency-review-action	action	minor	`v4.5.0` → `v4.9.0`
actions/setup-go (changelog)	action	digest	`93397be` → `7b8cf10`
actions/upload-artifact	action	patch	`v3.2.1` → `v3.2.2`
dario.cat/mergo	require	patch	`v1.0.1` → `v1.0.2`
docker/login-action (changelog)	action	digest	`9780b0c` → `c94ce9f`
docker/setup-qemu-action (changelog)	action	digest	`49b3bc8` → `c7c5346`
github.com/knadh/koanf/v2	require	minor	`v2.1.2` → `v2.4.0`
github.com/stretchr/testify	require	minor	`v1.9.0` → `v1.12.1`
github/codeql-action	action	minor	`v2.27.4` → `v2.28.1`
github/codeql-action (changelog)	action	digest	`5b62e7a` → `b8d3b6e`
go (source)	toolchain	minor	`1.23.3` → `1.27.2`
golangci/golangci-lint-action	action	minor	`v6.1.1` → `v6.5.2`
k8s.io/apimachinery	require	minor	`v0.31.2` → `v0.37.1`
k8s.io/kube-openapi	require	digest	`32ad38e` → `ca3452a`
ossf/scorecard-action	action	minor	`v2.4.0` → `v2.5.0`
renovate/renovate	docker	digest	`213766a` → `c5e41a8`
sigs.k8s.io/kustomize/kyaml	require	minor	`v0.18.1` → `v0.21.3`
sigstore/cosign-installer	action	pinDigest	→ `b9c3539`
step-security/harden-runner	action	minor	`v2.10.1` → `v2.22.1`
ubuntu	final	digest	`278628f` → `c098726`

Release Notes

actions/cache

`v4.3.0`

Compare Source

What's Changed

Add note on runner versions by @GhadimiR in #1642
Prepare v4.3.0 release by @Link- in #1655

New Contributors

@GhadimiR made their first contribution in #1642

Full Changelog: actions/cache@v4...v4.3.0

actions/checkout

`v4.4.0`

Compare Source

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v4 by @aiqiaoy in #2502
backport fixes to releases-v4 by @aiqiaoy in #2524

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v4.3.1...v4.4.0

`v4.3.1`

Compare Source

Port v6 cleanup to v4 by @ericsciple in #2305

`v4.3.0`

Compare Source

docs: update README.md by @motss in #1971
Add internal repos for checking out multiple repositories by @mouismail in #1977
Documentation update - add recommended permissions to Readme by @benwells in #2043
Adjust positioning of user email note and permissions heading by @joshmgross in #2044
Update README.md by @nebuk89 in #2194
Update CODEOWNERS for actions by @TingluoHuang in #2224
Update package dependencies by @salmanmkc in #2236

actions/dependency-review-action

`v4.9.0`: Dependency Review Action 4.9.0

Compare Source

This feature release contains a couple of notable changes:

There is a new configuration option show_patched_versions which will add a column to the output, showing the fix version of each vulnerable dependency. Thanks @felickz!
Runs which do not display OpenSSF scorecards no longer fetch scorecard information; previously it was fetched regardless of whether or not it was displayed, causing unneccessary slowness. Great catch @jantiebot!
There are a couple of fixes to purl parsing which should improve match accuracy for allow-package-dependency lists, including case (in)sensitivity and url-encoded namespaces Thanks @juxtin!

What's Changed

Compare normalized purls to account for encoding quirks by @juxtin in #1056
Make purl comparisons case insensitive by @juxtin in #1057
Feat: Add Patched Version to Vulnerabilities summary by @felickz in #1045
fix: only get scorecard levels if user wants to see the OpenSSF scorecard by @jantiebot in #1060
Bump actions/stale from 10.1.0 to 10.2.0 by @dependabot[bot] in #1058
Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1021
Updates for release 4.9.0 by @ahpook in #1064

New Contributors

@jantiebot made their first contribution in #1060

Full Changelog: actions/dependency-review-action@v4.8.3...v4.9.0

`v4.8.3`: 4.8.3

Compare Source

Dependency Review Action v4.8.3

This is a bugfix release that updates a number of upstream dependencies and includes a fix for the earlier feature that detected oversized summaries and upload them as artifacts, which could occasionally crash the action.

We have also updated the release process to use a long-lived v4 branch for the action, instead of a force-pushed tag, which aligns better with git branching strategies; the change should be transparent to end users.

What's Changed

GitHub Actions can't push to our protected main by @dangoor in #1017
Bump actions/stale from 9.1.0 to 10.1.0 by @dependabot[bot] in #995
Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1003
Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #1005
Upgrade glob to address a vulnerability by @brrygrdn in #1024
Bump js-yaml by @dependabot[bot] in #1020
Addressing vulnerabilities by @Ahmed3lmallah in #1036
Bump fast-xml-parser from 5.3.3 to 5.3.5 by @dependabot[bot] in #1050
Bump fast-xml-parser from 5.3.5 to 5.3.6 by @dependabot[bot] in #1053
Properly truncate long summaries and catch errors by @juxtin in #1052
Bump spdx-expression-parse from 3.0.1 to 4.0.0 in the spdx-licenses group across 1 directory by @dependabot[bot] in #931
Changes for Release 4.8.3 by @ahpook in #1054

Full Changelog: https://github.com/actions/dependency-review-action/compare/v4.8.2..v4.8.3

`v4.8.2`

Compare Source

Minor fixes:

Fix PURL parsing for scoped packages (#1008 from @danielhardej)
Fix for large summaries (#1007 from @gitulisca)
README includes a working example for allow-dependencies-licenses (#1009 from @danielhardej)

`v4.8.1`: Dependency Review Action v4.8.1

Compare Source

What's Changed

(bug) Fix spamming link test in deprecation warning (again) by @ahpook in #1000
Bump version for 4.8.1 release by @ahpook in #1001

Full Changelog: actions/dependency-review-action@v4...v4.8.1

`v4.8.0`

Compare Source

What's Changed

Make Ruby Code Scannable by @ljones140 in #978
Batch some contributions for release by @brrygrdn in #986
- Make license lists collapsable by @jasperkamerling
- feat: add large summary handling with artifact upload by @MattMencel

New Contributors

@ljones140 made their first contribution in #978
@jasperkamerling made their first contribution in #986
@MattMencel made their first contribution in #986

Full Changelog: actions/dependency-review-action@v4...v4.8.0

`v4.7.4`

Compare Source

`v4.7.3`: 4.7.3

Compare Source

What's Changed

Add explicit permissions to workflow files by @AshelyTC in #966
Claire153/fix spamming mentioned issue by @claire153 in #974

Full Changelog: actions/dependency-review-action@v4...v4.7.3

`v4.7.2`: 4.7.2

Compare Source

What's Changed

Add Missing Languages to CodeQL Advanced Configuration by @KyFaSt in #945
Deprecate deny lists by @claire153 in #958
Address discrepancy between docs and reality by @ahpook in #960

New Contributors

@KyFaSt made their first contribution in #945
@claire153 made their first contribution in #958
@ahpook made their first contribution in #960

Full Changelog: actions/dependency-review-action@v4...v4.7.2

`v4.7.1`

Compare Source

Packages added to allow-dependencies-licenses will be allowed even if the package in question has no license information #889
License expressions (e.g. Ruby OR GPL-2.0) in the allow list are automatically discarded so that they don't invalidate the whole allow list, which should just be license identifier (e.g. Ruby)

`v4.7.0`

Compare Source

Handle complex license expressions (e.g. MIT AND GPL-2.0) in allow lists (fixes #809 and probably others)
Replace OTHER in package licenses with LicenseRef-clearlydefined-OTHER so that parsing passes

`v4.6.0`

Compare Source

What's Changed

Updating multiple dependency versions by @Ahmed3lmallah in #870
Grouping minor and patch dependabot updates to lessen the number of PRs by @Ahmed3lmallah in #876
Bump actions/stale from 9.0.0 to 9.1.0 by @dependabot in #878
Bump undici from 5.28.4 to 5.28.5 by @dependabot in #877
DR Action should link to the proxima stamp when appropriate in error messages by @AshelyTC in #891
Allow deny package removal by @ellenfieldn in #888
Fix typos by @omahs in #893
Bump esbuild from 0.19.5 to 0.25.0 by @dependabot in #900
Bump octokit and related dependencies by @RomanIakovlev in #904
Bump @babel/helpers from 7.23.2 to 7.26.10 by @dependabot in #905
Bump @octokit/plugin-paginate-rest from 9.1.5 to 9.2.2 by @dependabot in #899
Update transitive dependency spdx-license-ids by @ailox in #855
To not print OpenSSF Scorecard section if no dependencies scanned by @fabasoad in #884
Improve usage of this action in dependency-review.yml by @fabasoad in #883
Clarify comment-summary-in-pr behaviour by @Pantelis-Santorinios in #902
Prepare 4.6.0 Release candidate by @brrygrdn in #910

New Contributors

@AshelyTC made their first contribution in #891
@ellenfieldn made their first contribution in #888
@omahs made their first contribution in #893
@RomanIakovlev made their first contribution in #904
@ailox made their first contribution in #855
@fabasoad made their first contribution in #884
@Pantelis-Santorinios made their first contribution in #902
@brrygrdn made their first contribution in #910

Full Changelog: actions/dependency-review-action@v4.5.0...v4.6.0

actions/upload-artifact

`v3.2.2`

Compare Source

v3.2.2 - What's new

[!Important]
actions/upload-artifact@v3.2.2 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

This is a backport security updates release for GHES users. This version is deprecated on github.com and should not be used!

Node.js 24

This release updates the runtime to Node.js 24. The previous v3.2.1 ran on Node.js 16, which has reached end-of-life. Now this action will run on Node.js 24.

Pin your workflows to: https://github.com/actions/upload-artifact/releases/tag/v3.2.2-node20 which is available if you're still in the process of phasing out Node 20.

What's Changed

Upgrade @actions/artifact to 1.1.3 by @Link-
Security updates for direct and transitive dependencies
Use node20 by @robherley in #606
Ensure hidden files input is used by @joshmgross in #608
Upgrade the actions used in workflows by @Link-

Full Changelog: actions/upload-artifact@v3.2.1...v3.2.2

imdario/mergo (dario.cat/mergo)

`v1.0.2`

Compare Source

What's Changed

Drops gopkg.in/yaml.v3, only used for loading fixtures. Thanks @trim21 for bringing to my attention (#262) that this library is no longer maintained.

Full Changelog: darccio/mergo@v1.0.1...v1.0.2

knadh/koanf (github.com/knadh/koanf/v2)

`v2.4.0`

Compare Source

`v2.3.8`

Compare Source

What's Changed

cliflagv3: read each flag from the command that defines it by @abo3losh1 in #451
fix: preserve config state when a strict merge fails by @flcrom in #452
MapKeys returns an empty slice for a natively-typed map by @dualfroz in #447
Fix Cut/Copy/Slices silently dropping StrictMerge by @VXNCXNX in #443
Fix IntfaceKeysToStrings missing maps inside nested slices by @VXNCXNX in #442
cliflagv2: read each flag from the command that defines it by @abo3losh1 in #453
Fix UnmarshalWithConf ignoring a caller's DecoderConfig.TagName by @VXNCXNX in #441

New Contributors

@abo3losh1 made their first contribution in #451
@flcrom made their first contribution in #452
@dualfroz made their first contribution in #447
@VXNCXNX made their first contribution in #443

Full Changelog: knadh/koanf@v2.3.7...v2.3.8

`v2.3.7`

Compare Source

What's Changed

fix: panic from Vault Provider when Transport is not supplied by @riflowth in #439
Preserve empty slice entries in StringsMap by @jakezwang in #449
Bump google.golang.org/grpc from 1.82.1 to 1.83.1 in /examples by @dependabot[bot] in #446
Fix Slices silently dropping a natively-typed []map[string]any by @Osamaali313 in #448
Accept natively-typed slices and maps in the typed getters by @yu2971512385-ui in #450

New Contributors

@riflowth made their first contribution in #439
@jakezwang made their first contribution in #449
@Osamaali313 made their first contribution in #448
@yu2971512385-ui made their first contribution in #450

Full Changelog: knadh/koanf@v2.3.6...v2.3.7

`v2.3.6`

Compare Source

What's Changed

fix: error on scalar/map type mismatch in MergeStrict regardless of order by @upuddu in #424
Bump google.golang.org/grpc from 1.56.3 to 1.82.1 in /examples by @dependabot[bot] in #430
Bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /providers/kiln by @dependabot[bot] in #427
deps: upgrade go-toml to v2.4.3 by @GreyXor in #419
skip disabled secret on azure kv read by @genlp in #437

New Contributors

@upuddu made their first contribution in #424
@genlp made their first contribution in #437

Full Changelog: knadh/koanf@v2.3.5...v2.3.6

`v2.3.5`

Compare Source

What's Changed

go-toml v3.3.0 by @GreyXor in #410
Bump github.com/go-jose/go-jose/v4 from 4.1.0 to 4.1.4 in /providers/vault by @dependabot[bot] in #411
go-toml v2.3.1 by @GreyXor in #414
feat: Add k8smount provider by @mattdowdell in #409
Bools: return the matched []bool, not the nil intermediate by @c-tonneslan in #416
fix: report the full key path in MergeStrict type-mismatch error by @koriyoshi2041 in #418

New Contributors

@mattdowdell made their first contribution in #409
@c-tonneslan made their first contribution in #416
@koriyoshi2041 made their first contribution in #418

Full Changelog: knadh/koanf@v2.3.4...v2.3.5

`v2.3.4`

Compare Source

What's Changed

Bump github.com/nats-io/nats-server/v2 from 2.10.27 to 2.11.12 in /providers/nats by @dependabot[bot] in #400
Bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 in /providers/kiln by @dependabot[bot] in #399
Bump google.golang.org/grpc from 1.71.1 to 1.79.3 in /providers/etcd by @dependabot[bot] in #405
fix: hold RLock during copy in Get to prevent concurrent map access by @alexchenai in #406
Add ability to check for prior values in cliflagv3.ProviderWithConfig() just like posflag by @knadh in #403

New Contributors

@alexchenai made their first contribution in #406

Full Changelog: knadh/koanf@v2.3.3...v2.3.4

`v2.3.3`

Compare Source

What's Changed

Fix deadlock in recursive Get*() calls in custom merge function. 2f44276
Bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 in /examples by @dependabot[bot] in #398

Full Changelog: knadh/koanf@v2.3.2...v2.3.3

`v2.3.2`

Compare Source

What's Changed

fix: preserve nil pointer types in Get() method by @Asakuri in #397

New Contributors

@Asakuri made their first contribution in #397

Full Changelog: knadh/koanf@v2.3.1...v2.3.2

`v2.3.1`

Compare Source

What's Changed

providers/cliflagv3: Set the flags if they have a default value by @xescugc in #382
fix panic in dotenv parser when callback function is not provided by @nilsocket in #387
Bump golang.org/x/crypto from 0.40.0 to 0.45.0 in /providers/kiln by @dependabot[bot] in #391
Bump golang.org/x/crypto from 0.37.0 to 0.45.0 in /providers/nats by @dependabot[bot] in #390
refactor interface{} to any by @nilsocket in #385
fix: pass event to callback instead of nil when file changes detected by @josepdcs in #384

New Contributors

@xescugc made their first contribution in #382
@nilsocket made their first contribution in #387
@josepdcs made their first contribution in #384

Full Changelog: knadh/koanf@v2.3.0...v2.3.1

`v2.3.0`

Compare Source

What's Changed

feat: add provider for kiln by @Thunderbottom in #369
Fix rendering of header and add it to the table of contents by @remyzandwijk in #373
Bump github.com/go-viper/mapstructure/v2 from 2.0.0-alpha.1 to 2.4.0 in /examples by @dependabot[bot] in #375
feat: add HUML parser support by @rhnvrm in #374
Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.4.0 in /tests by @dependabot[bot] in #376
Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.4.0 in /providers/cliflagv3 by @dependabot[bot] in #378
Bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 in /providers/cliflagv2 by @dependabot[bot] in #380
Add thread safety to resolve race conditions in Issues #305 and #335 by @rhnvrm in #377
fix: bump mapstructure version by @rostislaved in #381

New Contributors

@remyzandwijk made their first contribution in #373
@rostislaved made their first contribution in #381

Full Changelog: knadh/koanf@v2.2.2...v2.3.0

`v2.2.2`

Compare Source

What's Changed

Replace yaml package with go.yaml.in/yaml/v3 by @devhaozi in #365
Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 in /providers/cliflagv2 by @dependabot[bot] in #366
Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 by @dependabot[bot] in #367
feat: config to override env vars by @nickajacks1 in #341

New Contributors

@devhaozi made their first contribution in #365
@nickajacks1 made their first contribution in #341

Full Changelog: knadh/koanf@v2.2.1...v2.2.2

`v2.2.1`

Compare Source

What's Changed

Bump github.com/nats-io/nats-server/v2 from 2.9.23 to 2.10.27 in /providers/nats by @dependabot in #350
Bump golang.org/x/net from 0.36.0 to 0.38.0 in /providers/consul by @dependabot in #351
Bump golang.org/x/net from 0.37.0 to 0.38.0 in /examples by @dependabot in #353
changing cliflagv2 to support variadic forcedinclude parameter by @kooroo in #357
adds urfave/cli/v3 parser by @n0cloud in #361
add toggle to split nats kv on "." delimiter by @nickchomey in #355

New Contributors

@kooroo made their first contribution in #357
@n0cloud made their first contribution in #361
@nickchomey made their first contribution in #355

Full Changelog: knadh/koanf@v2.2.0...v2.2.1

`v2.2.0`

Compare Source

This release sets the min required Go version to v1.23.0

An increasing number of important updates to various deps, including golang.org/x/*, require go >= 1.23.0. It is now untenable
to maintain support for older Go versions. This does not break existing installations, just that further updates will only be available to newer Go versions.

What's Changed

Update CI by @StefMa in #332
Fix typos by @NathanBaulch in #336
adds urfave/cli/v2 flag parser by @joicemjoseph in #330
Bump golang.org/x/net from 0.23.0 to 0.36.0 in /providers/consul by @dependabot in #342
Added support for Azure Keyvault by @arawin1979 in #343
Bump golang.org/x/crypto from 0.21.0 to 0.35.0 in /providers/vault by @dependabot in #348
Bump golang.org/x/crypto from 0.17.0 to 0.35.0 in /providers/nats by @dependabot in #347
Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 in /examples by @dependabot in #346
Bump golang.org/x/net from 0.23.0 to 0.36.0 in /providers/vault by @dependabot in #344
Upgrade min Go version and deps across all providers and parsers by @knadh in #349

New Contributors

@NathanBaulch made their first contribution in #336
@joicemjoseph made their first contribution in #330
@arawin1979 made their first contribution in #343

Full Changelog: knadh/koanf@v2.1.2...v2.2.0

stretchr/testify (github.com/stretchr/testify)

`v1.12.1`

Compare Source

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in #1935
change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in #1772

New Contributors

@harryzcy made their first contribution in #1935
@boekkooi-impossiblecloud made their first contribution in #1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in #1935
change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in #1772

New Contributors

@harryzcy made their first contribution in #1935
@boekkooi-impossiblecloud made their first contribution in #1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

`v1.12.0`

Compare Source

What's Changed

Functional Changes

assert: make *AssertionFunc types just aliases by @dolmen in #1563

Fixes

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in #1775
mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in #1786
suite: validate method signatures and continue execution for valid tests by @vyas-git in #1665
assert.PanicsWithError: report error message by @olivergondza in #1400
assert: IsIncreasing et al can return false w/out failing by @brackendawson in #1787
add type to error message of assert.Same by @egawata in #1792
mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in #1795
assert: truncate very long objects in test failure messages by @brackendawson in #1646
assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in #1888
suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in #1877

Documentation, Build & CI

CI: test also with Go 1.23 by @dolmen in #1783
Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in [#1708

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 04:00 AM and 04:59 AM, on day 1 and 16 of the month (* 4 1,16 * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-01-01T04:29:54Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

15 additional dependencies were updated

Details:

Package	Change
`github.com/fxamacker/cbor/v2`	`v2.7.0` -> `v2.9.1`
`github.com/go-errors/errors`	`v1.4.2` -> `v1.5.1`
`github.com/go-logr/logr`	`v1.4.2` -> `v1.4.3`
`github.com/go-openapi/jsonpointer`	`v0.21.0` -> `v1.0.0`
`github.com/go-openapi/jsonreference`	`v0.20.2` -> `v1.0.0`
`github.com/go-viper/mapstructure/v2`	`v2.2.1` -> `v2.4.0`
`github.com/google/gnostic-models`	`v0.6.8` -> `v0.7.1`
`github.com/knadh/koanf/maps`	`v0.1.1` -> `v0.1.2`
`github.com/modern-go/reflect2`	`v1.0.2` -> `v1.0.3-0.20250322232337-35a7c28c31ee`
`golang.org/x/net`	`v0.28.0` -> `v0.57.0`
`golang.org/x/sys`	`v0.23.0` -> `v0.48.0`
`k8s.io/klog/v2`	`v2.130.1` -> `v2.140.0`
`k8s.io/utils`	`v0.0.0-20240711033017-18e509b52bc8` -> `v0.0.0-20260626114624-be93311217bd`
`sigs.k8s.io/json`	`v0.0.0-20221116044647-bc3834ca7abd` -> `v0.0.0-20250730193827-2d320260d730`
`sigs.k8s.io/yaml`	`v1.4.0` -> `v1.6.0`

renovate Bot requested a review from aabouzaid as a code owner January 1, 2026 04:29

renovate Bot added automerge dependencies labels Jan 1, 2026

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 15 times, most recently from a294b1a to 4501660 Compare January 9, 2026 16:30

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 11 times, most recently from 31cdf47 to ae9c57b Compare January 13, 2026 16:44

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 19 times, most recently from 5795a8b to 96bd8b1 Compare January 22, 2026 20:59

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 10 times, most recently from 9e22c3e to 353aee3 Compare January 26, 2026 14:46

fix(deps): update all non-major dependencies

3a2c260

Navigation Menu

Repository navigation

fix(deps): update all non-major dependencies - #92

fix(deps): update all non-major dependencies#92
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch-digest-pin

renovate Bot commented Jan 1, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Jan 1, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Jan 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

v4.9.0: Dependency Review Action 4.9.0

What's Changed

New Contributors

v4.8.3: 4.8.3

Dependency Review Action v4.8.3

What's Changed

v4.8.1: Dependency Review Action v4.8.1

What's Changed

What's Changed

New Contributors

v4.7.3: 4.7.3

What's Changed

v4.7.2: 4.7.2

What's Changed

New Contributors

What's Changed

New Contributors

v3.2.2 - What's new

Node.js 24

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

Configuration

Uh oh!

renovate Bot commented Jan 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jan 1, 2026 •

edited

Loading

`v4.9.0`: Dependency Review Action 4.9.0

`v4.8.3`: 4.8.3

`v4.8.1`: Dependency Review Action v4.8.1

`v4.7.3`: 4.7.3

`v4.7.2`: 4.7.2

renovate Bot commented Jan 1, 2026 •

edited

Loading