Dependency Dashboard

[red-hat-konflux]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information
• ⚠️ WARN: Dependency name is unset, skipping
• ⚠️ WARN: Hidden Unicode characters have been discovered in file(s) in your repository. See your Renovate logs for more details. Please confirm that they are intended to be there, as they could be an attempt to "smuggle" text into your codebase, or used to confuse tools like Renovate or Large Language Models (LLMs)
• ⚠️ WARN: Package lookup failures
• ⚠️ WARN: Some upgrade(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• OCM-00000 | ci: Update openshift-ocm to v0.0.461

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package github.com/AlecAivazis/survey/v2: no-result, Failed to look up go package github.com/aws/aws-sdk-go-v2/service/cloudformation: no-result.

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• OCM-00000 | ci: Update aws-sdk (github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/credentials, github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs, github.com/aws/aws-sdk-go-v2/service/ec2, github.com/aws/aws-sdk-go-v2/service/iam, github.com/aws/aws-sdk-go-v2/service/organizations, github.com/aws/aws-sdk-go-v2/service/route53, github.com/aws/aws-sdk-go-v2/service/s3, github.com/aws/aws-sdk-go-v2/service/secretsmanager, github.com/aws/aws-sdk-go-v2/service/servicequotas, github.com/aws/aws-sdk-go-v2/service/sts)
• OCM-00000 | ci: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26.4-1782980183
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• OCM-00000 | ci: Update github.com/nathan-fiscaletti/consolesize-go digest to 3bac975
• OCM-00000 | ci: Update module github.com/alessio/shellescape to v1.6.0
• OCM-00000 | ci: Update helpers to v3
• OCM-00000 | ci: Update module github.com/dchest/validator to v1
• OCM-00000 | ci: Update module github.com/golang-jwt/jwt/v4 to v5
• OCM-00000 | ci: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v9

Detected Dependencies

dockerfile (4)

Dockerfile (1)

• registry.access.redhat.com/ubi9/go-toolset 1.25.8 → [Updates: 1.26.4-1782980183, 9.8-1782980183]

images/Dockerfile.e2e (3)

• registry.access.redhat.com/ubi9/go-toolset 1.25.8 → [Updates: 1.26.4-1782980183, 9.8-1782980183]
• registry.access.redhat.com/ubi9/go-toolset 1.25.8 → [Updates: 1.26.4-1782980183, 9.8-1782980183]
• registry.access.redhat.com/ubi9/go-toolset 1.25.8 → [Updates: 1.26.4-1782980183, 9.8-1782980183]

images/Dockerfile.konflux (1)

• registry.access.redhat.com/ubi9/go-toolset 1.25.8 → [Updates: 1.26.4-1782980183, 9.8-1782980183]

images/Dockerfile.release

gomod (7)

.bingo/bingo.mod (2)

• go 1.25.8
• github.com/bwplotka/bingo v0.10.0

.bingo/gci.mod (2)

• go 1.25.8
• github.com/daixiang0/gci v0.14.0

.bingo/go-bindata.mod (2)

• go 1.25.8
• github.com/go-bindata/go-bindata v3.1.2+incompatible

.bingo/golangci-lint.mod (2)

• go 1.25.8
• github.com/golangci/golangci-lint/v2 v2.12.2

.bingo/goreleaser.mod (1)

• go 1.25.8

.bingo/mockgen.mod (1)

• go 1.25.8

go.mod (50)

• go 1.25.8
• github.com/AlecAivazis/survey/v2 v2.3.7
• github.com/Masterminds/semver v1.5.0
• github.com/PuerkitoBio/goquery v1.12.0
• github.com/aws/aws-sdk-go-v2 v1.42.0 → [Updates: v1.42.1]
• github.com/aws/aws-sdk-go-v2/config v1.32.25 → [Updates: v1.32.27]
• github.com/aws/aws-sdk-go-v2/credentials v1.19.24 → [Updates: v1.19.26]
• github.com/aws/aws-sdk-go-v2/service/cloudformation v1.72.1
• github.com/aws/aws-sdk-go-v2/service/ec2 v1.308.0 → [Updates: v1.311.0]
• github.com/aws/aws-sdk-go-v2/service/iam v1.54.5 → [Updates: v1.54.7]
• github.com/aws/aws-sdk-go-v2/service/organizations v1.51.10 → [Updates: v1.51.12]
• github.com/aws/aws-sdk-go-v2/service/s3 v1.104.0 → [Updates: v1.104.2]
• github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.42.3 → [Updates: v1.42.5]
• github.com/aws/aws-sdk-go-v2/service/servicequotas v1.35.7 → [Updates: v1.35.9]
• github.com/aws/aws-sdk-go-v2/service/sts v1.43.3 → [Updates: v1.43.5]
• github.com/aws/smithy-go v1.27.3
• github.com/briandowns/spinner v1.23.2
• github.com/dchest/validator v0.0.0-20191217151620-8e45250f2371@8e45250f2371 → [Updates: v1.0.0]
• github.com/dustin/go-humanize v1.0.1
• github.com/golang-jwt/jwt/v4 v4.5.2 → [Updates: v5.3.1]
• github.com/golang/glog v1.2.5
• github.com/google/go-cmp v0.7.0
• github.com/google/uuid v1.6.0
• github.com/hashicorp/go-version v1.9.0
• github.com/nathan-fiscaletti/consolesize-go v0.0.0-20210105204122-a87d9f614b9d@a87d9f614b9d → [Updates: v0.0.0-20260406063853-3bac975de715]
• github.com/onsi/ginkgo/v2 v2.32.0
• github.com/onsi/gomega v1.42.1
• github.com/openshift-online/ocm-api-model/clientapi v0.0.460 → [Updates: v0.0.461]
• github.com/openshift-online/ocm-common v0.0.44
• github.com/openshift-online/ocm-sdk-go v0.1.504
• github.com/pkg/errors v0.9.1
• github.com/robfig/cron/v3 v3.0.1
• github.com/sirupsen/logrus v1.9.4
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/zgalor/weberr v0.9.0
• gitlab.com/c0b/go-ordered-json v0.0.0-20201030195603-febf46534d5a@febf46534d5a
• go.uber.org/mock v0.6.0
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/apimachinery v0.35.6
• k8s.io/utils v0.0.0-20260626114624-be93311217bd@be93311217bd
• sigs.k8s.io/yaml v1.6.0
• github.com/alessio/shellescape v1.4.1 → [Updates: v1.6.0]
• github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.78.0 → [Updates: v1.78.2]
• github.com/aws/aws-sdk-go-v2/service/route53 v1.63.3 → [Updates: v1.63.5]
• github.com/go-logr/logr v1.4.3
• golang.org/x/crypto v0.53.0
• golang.org/x/text v0.38.0
• gopkg.in/yaml.v2 v2.4.0 → [Updates: v3.0.1]
• github.com/kubermatic/glog-logrus v0.0.0-20180829085450-3fa5b9870d1d@3fa5b9870d1d

tekton (9)

.tekton/hcp-advanced-e2e-test.yaml

.tekton/rosa-cli-e2e-test-pull-request.yaml (19)

• quay.io/konflux-ci/tekton-catalog/task-init 0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08
• quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta 0.2@sha256:12cbcf0b408e906f84e7eb3c62c6cd618e2b1f78a40218e10940fbaf2c45455d
• quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta 0.3@sha256:92956e75cd4714286f9c0c043f5301d1c0df1d750884edeceee87e0a91cc1975
• quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta 0.10@sha256:62de839675c8da5040939d59a6f96bc52f86952a9fe7a06accb17921cef3a9d3
• quay.io/konflux-ci/tekton-catalog/task-build-image-index 0.3@sha256:70c52e88e737340e7b58418fda38c13273aa7cdf587b825778e3560aca1d1133
• quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta 0.3@sha256:7c5575ac8e292f27f57716c021ab0324460dc958e73946724c588c5228e5f372
• quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.5@sha256:e78d0d3baf3c8cfc1a5ad278196b74032d9568b143a87c7a79ab780fedfb296e
• quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.3@sha256:9ff424d913dd7681031a93d8bdbed622cd5536633f8ed0dbb4a9021055cf9d21
• quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 0.2@sha256:3c4f60ebda2225eff6a6bc387d9bbd443f1264d756bf385f97cc684992e904a0
• quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta 0.5@sha256:fda2e510511f5588de3882612f53eb06ea833889bc47da3d60ef7273555067bc
• quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.3@sha256:53a02326bfb930ca5ef6bfa7a33acca833d57752f34f3cb79255fe2e25e7d217
• quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta 0.3@sha256:e92d00ed858233d0096627861192d3e4fc013cf1559c0d0b0ea0657d3377ce75
• quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check 0.2@sha256:8b501440a960aec446db2ebc6625a49d0317a9fc7bf0f7bd9b18cb63052db7de
• quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta 0.1@sha256:fc685d6f7dfb7c9ab2f2db38bbe2c8d383407847350ccd8b96352322c487b13c
• quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta 0.4@sha256:5807ffe3a0cca5cf970076bbc7a404642cc6e3eebe64e9e5e6a4f20da740bf73
• quay.io/konflux-ci/tekton-catalog/task-apply-tags 0.3@sha256:3ab844157eccd68e95e4852adc06c3c4ea674edb7865a474b0a898227f2893d6
• quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta 0.3@sha256:f3e97e6eaf09d6585e915c3e7b82d110d97e34202bf591a2d990127ba5bb362d
• quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2@sha256:65370ccb44ff82e4ce128addd913f3c96b298607b3760ee1339ed10011a4bd6b
• quay.io/konflux-ci/tekton-catalog/task-show-sbom 0.1@sha256:8fe70a95c28b1ac92abd67a7477ad960218f3f570a9f8a12ad082dff7e9c9579

.tekton/rosa-cli-e2e-test-push.yaml (19)

• quay.io/konflux-ci/tekton-catalog/task-init 0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08
• quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta 0.2@sha256:12cbcf0b408e906f84e7eb3c62c6cd618e2b1f78a40218e10940fbaf2c45455d
• quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta 0.3@sha256:92956e75cd4714286f9c0c043f5301d1c0df1d750884edeceee87e0a91cc1975
• quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta 0.10@sha256:62de839675c8da5040939d59a6f96bc52f86952a9fe7a06accb17921cef3a9d3
• quay.io/konflux-ci/tekton-catalog/task-build-image-index 0.3@sha256:70c52e88e737340e7b58418fda38c13273aa7cdf587b825778e3560aca1d1133
• quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta 0.3@sha256:7c5575ac8e292f27f57716c021ab0324460dc958e73946724c588c5228e5f372
• quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.5@sha256:e78d0d3baf3c8cfc1a5ad278196b74032d9568b143a87c7a79ab780fedfb296e
• quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.3@sha256:9ff424d913dd7681031a93d8bdbed622cd5536633f8ed0dbb4a9021055cf9d21
• quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 0.2@sha256:3c4f60ebda2225eff6a6bc387d9bbd443f1264d756bf385f97cc684992e904a0
• quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta 0.5@sha256:fda2e510511f5588de3882612f53eb06ea833889bc47da3d60ef7273555067bc
• quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.3@sha256:53a02326bfb930ca5ef6bfa7a33acca833d57752f34f3cb79255fe2e25e7d217
• quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta 0.3@sha256:e92d00ed858233d0096627861192d3e4fc013cf1559c0d0b0ea0657d3377ce75
• quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check 0.2@sha256:8b501440a960aec446db2ebc6625a49d0317a9fc7bf0f7bd9b18cb63052db7de
• quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta 0.1@sha256:fc685d6f7dfb7c9ab2f2db38bbe2c8d383407847350ccd8b96352322c487b13c
• quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta 0.4@sha256:5807ffe3a0cca5cf970076bbc7a404642cc6e3eebe64e9e5e6a4f20da740bf73
• quay.io/konflux-ci/tekton-catalog/task-apply-tags 0.3@sha256:3ab844157eccd68e95e4852adc06c3c4ea674edb7865a474b0a898227f2893d6
• quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta 0.3@sha256:f3e97e6eaf09d6585e915c3e7b82d110d97e34202bf591a2d990127ba5bb362d
• quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2@sha256:65370ccb44ff82e4ce128addd913f3c96b298607b3760ee1339ed10011a4bd6b
• quay.io/konflux-ci/tekton-catalog/task-show-sbom 0.1@sha256:8fe70a95c28b1ac92abd67a7477ad960218f3f570a9f8a12ad082dff7e9c9579

.tekton/rosa-pull-request.yaml (19)

• quay.io/konflux-ci/tekton-catalog/task-init 0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08
• quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta 0.2@sha256:12cbcf0b408e906f84e7eb3c62c6cd618e2b1f78a40218e10940fbaf2c45455d
• quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta 0.3@sha256:92956e75cd4714286f9c0c043f5301d1c0df1d750884edeceee87e0a91cc1975
• quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta 0.10@sha256:62de839675c8da5040939d59a6f96bc52f86952a9fe7a06accb17921cef3a9d3
• quay.io/konflux-ci/tekton-catalog/task-build-image-index 0.3@sha256:70c52e88e737340e7b58418fda38c13273aa7cdf587b825778e3560aca1d1133
• quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta 0.3@sha256:7c5575ac8e292f27f57716c021ab0324460dc958e73946724c588c5228e5f372
• quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.5@sha256:e78d0d3baf3c8cfc1a5ad278196b74032d9568b143a87c7a79ab780fedfb296e
• quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.3@sha256:9ff424d913dd7681031a93d8bdbed622cd5536633f8ed0dbb4a9021055cf9d21
• quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 0.2@sha256:3c4f60ebda2225eff6a6bc387d9bbd443f1264d756bf385f97cc684992e904a0
• quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta 0.5@sha256:fda2e510511f5588de3882612f53eb06ea833889bc47da3d60ef7273555067bc
• quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.3@sha256:53a02326bfb930ca5ef6bfa7a33acca833d57752f34f3cb79255fe2e25e7d217
• quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta 0.3@sha256:e92d00ed858233d0096627861192d3e4fc013cf1559c0d0b0ea0657d3377ce75
• quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check 0.2@sha256:8b501440a960aec446db2ebc6625a49d0317a9fc7bf0f7bd9b18cb63052db7de
• quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta 0.1@sha256:fc685d6f7dfb7c9ab2f2db38bbe2c8d383407847350ccd8b96352322c487b13c
• quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta 0.4@sha256:5807ffe3a0cca5cf970076bbc7a404642cc6e3eebe64e9e5e6a4f20da740bf73
• quay.io/konflux-ci/tekton-catalog/task-apply-tags 0.3@sha256:3ab844157eccd68e95e4852adc06c3c4ea674edb7865a474b0a898227f2893d6
• quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta 0.3@sha256:f3e97e6eaf09d6585e915c3e7b82d110d97e34202bf591a2d990127ba5bb362d
• quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2@sha256:65370ccb44ff82e4ce128addd913f3c96b298607b3760ee1339ed10011a4bd6b
• quay.io/konflux-ci/tekton-catalog/task-show-sbom 0.1@sha256:8fe70a95c28b1ac92abd67a7477ad960218f3f570a9f8a12ad082dff7e9c9579

.tekton/rosa-push.yaml (19)

• quay.io/konflux-ci/tekton-catalog/task-init 0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08
• quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta 0.2@sha256:12cbcf0b408e906f84e7eb3c62c6cd618e2b1f78a40218e10940fbaf2c45455d
• quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta 0.3@sha256:92956e75cd4714286f9c0c043f5301d1c0df1d750884edeceee87e0a91cc1975
• quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta 0.10@sha256:62de839675c8da5040939d59a6f96bc52f86952a9fe7a06accb17921cef3a9d3
• quay.io/konflux-ci/tekton-catalog/task-build-image-index 0.3@sha256:70c52e88e737340e7b58418fda38c13273aa7cdf587b825778e3560aca1d1133
• quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta 0.3@sha256:7c5575ac8e292f27f57716c021ab0324460dc958e73946724c588c5228e5f372
• quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.5@sha256:e78d0d3baf3c8cfc1a5ad278196b74032d9568b143a87c7a79ab780fedfb296e
• quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.3@sha256:9ff424d913dd7681031a93d8bdbed622cd5536633f8ed0dbb4a9021055cf9d21
• quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 0.2@sha256:3c4f60ebda2225eff6a6bc387d9bbd443f1264d756bf385f97cc684992e904a0
• quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta 0.5@sha256:fda2e510511f5588de3882612f53eb06ea833889bc47da3d60ef7273555067bc
• quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.3@sha256:53a02326bfb930ca5ef6bfa7a33acca833d57752f34f3cb79255fe2e25e7d217
• quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta 0.3@sha256:e92d00ed858233d0096627861192d3e4fc013cf1559c0d0b0ea0657d3377ce75
• quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check 0.2@sha256:8b501440a960aec446db2ebc6625a49d0317a9fc7bf0f7bd9b18cb63052db7de
• quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta 0.1@sha256:fc685d6f7dfb7c9ab2f2db38bbe2c8d383407847350ccd8b96352322c487b13c
• quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta 0.4@sha256:5807ffe3a0cca5cf970076bbc7a404642cc6e3eebe64e9e5e6a4f20da740bf73
• quay.io/konflux-ci/tekton-catalog/task-apply-tags 0.3@sha256:3ab844157eccd68e95e4852adc06c3c4ea674edb7865a474b0a898227f2893d6
• quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta 0.3@sha256:f3e97e6eaf09d6585e915c3e7b82d110d97e34202bf591a2d990127ba5bb362d
• quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2@sha256:65370ccb44ff82e4ce128addd913f3c96b298607b3760ee1339ed10011a4bd6b
• quay.io/konflux-ci/tekton-catalog/task-show-sbom 0.1@sha256:8fe70a95c28b1ac92abd67a7477ad960218f3f570a9f8a12ad082dff7e9c9579

.tekton/steps/clean-up-step.yaml

.tekton/steps/export-resources-record-step.yaml

.tekton/steps/run-e2e-day1-step.yaml

.tekton/steps/run-e2e-day2-step.yaml