Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency pymdown-extensions to v10.21.3
• chore(deps): update dependency zipp to v3.23.1
• chore(deps): update dependency certifi to v2026.5.20
• chore(deps): update dependency idna to v3.18
• chore(deps): update dependency packaging to v26.2
• chore(deps): update dependency pathspec to v1.1.1
• chore(deps): update dependency requests to v2.34.2
• chore(deps): update dependency urllib3 to v2.7.0
• fix(deps): update module github.com/getsops/sops/v3 to v3.13.1
• fix(deps): update module golang.org/x/term to v0.43.0
• chore(deps): update actions/upload-pages-artifact action to v5
• chore(deps): update cycjimmy/semantic-release-action action to v6
• chore(deps): update dependency backrefs to v7
• chore(deps): update dependency zipp to v4
• chore(deps): update gitleaks/gitleaks-action action to v3
• chore(deps): update monitoring (major) (kube-prometheus-stack, prometheus-operator-crds)
• fix(deps): update kubernetes go modules to v4
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package github.com/spf13/cobra: no-result.

Files affected: cluster-bootstrap-cli/go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency click to v8.4.1
• chore(deps): update dependency platformdirs to v4.10.0
• chore(deps): update helm charts (argo-cd, external-secrets, reloader, trivy-operator)
• chore(deps): update monitoring to v82.18.0
• fix(deps): update kubernetes go modules (helm.sh/helm/v3, k8s.io/api, k8s.io/apimachinery, k8s.io/client-go)
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency mkdocs-material to v9.7.6
• fix(deps): update module github.com/fatih/color to v1.19.0
• fix(deps): update module github.com/charmbracelet/huh to v2

Detected Dependencies

github-actions (2)

.github/workflows/ci.yml (19)

• actions/checkout v6
• dorny/paths-filter v4
• actions/checkout v6
• actions/setup-go v6
• actions/upload-artifact v7
• actions/checkout v6
• actions/setup-go v6
• golangci/golangci-lint-action v9
• actions/checkout v6
• actions/setup-go v6
• aquasecurity/trivy-action master
• actions/checkout v6
• gitleaks/gitleaks-action v2 → [Updates: v3]
• actions/checkout v6
• azure/setup-helm v5
• actions/checkout v6
• azure/setup-helm v5
• actions/checkout v6
• reviewdog/action-actionlint v1

.github/workflows/release.yml (15)

• actions/create-github-app-token v3
• actions/checkout v6
• actions/setup-node v6
• cycjimmy/semantic-release-action v4 → [Updates: v6.0.0]
• actions/create-github-app-token v3
• actions/checkout v6
• actions/setup-go v6
• goreleaser/goreleaser-action v7
• actions/checkout v6
• actions/setup-python v6
• actions/configure-pages v6
• actions/upload-pages-artifact v4 → [Updates: v5]
• actions/deploy-pages v5
• node 24
• python 3.x

gomod (1)

cluster-bootstrap-cli/go.mod (12)

• go 1.25.0
• github.com/charmbracelet/huh v0.8.0 → [Updates: v2.0.3]
• github.com/fatih/color v1.18.0 → [Updates: v1.19.0]
• github.com/getsops/sops/v3 v3.11.0 → [Updates: v3.13.1]
• github.com/spf13/cobra v1.10.2
• github.com/stretchr/testify v1.11.1
• golang.org/x/term v0.40.0 → [Updates: v0.43.0]
• gopkg.in/yaml.v3 v3.0.1
• helm.sh/helm/v3 v3.20.0 → [Updates: v3.21.0, v4.2.0]
• k8s.io/api v0.35.1 → [Updates: v0.36.1]
• k8s.io/apimachinery v0.35.1 → [Updates: v0.36.1]
• k8s.io/client-go v0.35.1 → [Updates: v0.36.1]

helmv3 (7)

components/argocd/Chart.yaml (1)

• argo-cd 9.4.17 → [Updates: 9.5.17]

components/external-secrets/Chart.yaml (1)

• external-secrets 2.2.0 → [Updates: 2.5.0]

components/kube-prometheus-stack/Chart.yaml (1)

• kube-prometheus-stack 82.17.0 → [Updates: 82.18.0, 86.1.1]

components/prometheus-operator-crds/Chart.yaml (1)

• prometheus-operator-crds 28.0.1 → [Updates: 29.0.0]

components/reloader/Chart.yaml (1)

• reloader 2.2.9 → [Updates: 2.2.12]

components/trivy-operator/Chart.yaml (1)

• trivy-operator 0.32.1 → [Updates: 0.33.1]

components/vault/Chart.yaml (1)

• vault 0.32.0

pip_requirements (1)

requirements.txt (31)

• babel ==2.18.0
• backrefs ==6.2 → [Updates: ==7.0]
• certifi ==2026.2.25 → [Updates: ==2026.5.20]
• charset-normalizer ==3.4.7
• click ==8.3.1 → [Updates: ==8.4.1]
• colorama ==0.4.6
• ghp-import ==2.1.0
• idna ==3.11 → [Updates: ==3.18]
• importlib_metadata ==9.0.0
• Jinja2 ==3.1.6
• Markdown ==3.10.2
• MarkupSafe ==3.0.3
• mergedeep ==1.3.4
• mkdocs ==1.6.1
• mkdocs-get-deps ==0.2.2
• mkdocs-material ==9.7.2 → [Updates: ==9.7.6]
• mkdocs-material-extensions ==1.3.1
• packaging ==26.0 → [Updates: ==26.2]
• paginate ==0.5.7
• pathspec ==1.0.4 → [Updates: ==1.1.1]
• platformdirs ==4.9.4 → [Updates: ==4.10.0]
• Pygments ==2.20.0
• pymdown-extensions ==10.21.2 → [Updates: ==10.21.3]
• python-dateutil ==2.9.0.post0
• PyYAML ==6.0.3
• pyyaml_env_tag ==1.1
• requests ==2.33.1 → [Updates: ==2.34.2]
• six ==1.17.0
• urllib3 ==2.6.3 → [Updates: ==2.7.0]
• watchdog ==6.0.0
• zipp ==3.23.0 → [Updates: ==3.23.1, ==4.1.0]

---

• Check this box to trigger a request for Renovate to run again on this repository