Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• fix(deps): update github.com/openfga/api/proto digest to dd87be8
• fix(deps): update k8s.io/utils digest to a95e086
• fix(deps): update module github.com/platform-mesh/golang-commons to v0.17.14
• fix(deps): update module github.com/fluxcd/helm-controller/api to v1.6.0
• fix(deps): update module github.com/fluxcd/source-controller/api to v1.9.0
• fix(deps): update module github.com/kcp-dev/multicluster-provider to v0.8.0
• fix(deps): update module github.com/kcp-dev/multicluster-provider/client to v0.8.0
• fix(deps): update module github.com/kcp-dev/sdk to v0.32.0
• fix(deps): update module github.com/openfga/language/pkg/go to v0.3.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update platform-mesh/.github digest to 05d96c3
• fix(deps): update module github.com/platform-mesh/account-operator to v0.14.58
• fix(deps): update kubernetes monorepo to v0.36.2 (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/client-go)
• fix(deps): update module github.com/platform-mesh/subroutines to v0.5.7
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.24.1
• fix(deps): update module sigs.k8s.io/multicluster-runtime to v0.24.1
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• golang 1.26@sha256:792443b89f65105abba56b9bd5e97f680a80074ac62fc844a584212f8c8102c3
• gcr.io/distroless/static nonroot@sha256:963fa6c544fe5ce420f1f54fb88b6fb01479f054c8056d0f74cc2c6000df5240

github-actions (4)

.github/workflows/auto-labeler.yml

.github/workflows/ci.yml (3)

• platform-mesh/.github main@068efd5c6c7a6d0c4b28f5887de7ca156cb5f7b8 → [Updates: main]
• platform-mesh/.github main@068efd5c6c7a6d0c4b28f5887de7ca156cb5f7b8 → [Updates: main]
• platform-mesh/.github main@068efd5c6c7a6d0c4b28f5887de7ca156cb5f7b8 → [Updates: main]

.github/workflows/ossf-scorecard.yml

.github/workflows/release.yml (7)

• platform-mesh/.github main@068efd5c6c7a6d0c4b28f5887de7ca156cb5f7b8 → [Updates: main]
• platform-mesh/.github main@068efd5c6c7a6d0c4b28f5887de7ca156cb5f7b8 → [Updates: main]
• platform-mesh/.github main@068efd5c6c7a6d0c4b28f5887de7ca156cb5f7b8 → [Updates: main]
• platform-mesh/.github main@068efd5c6c7a6d0c4b28f5887de7ca156cb5f7b8 → [Updates: main]
• platform-mesh/.github main@068efd5c6c7a6d0c4b28f5887de7ca156cb5f7b8 → [Updates: main]
• platform-mesh/.github main@068efd5c6c7a6d0c4b28f5887de7ca156cb5f7b8 → [Updates: main]
• platform-mesh/.github main@068efd5c6c7a6d0c4b28f5887de7ca156cb5f7b8 → [Updates: main]

gomod (1)

go.mod (33)

• go 1.26.0
• github.com/coreos/go-oidc v2.5.0+incompatible
• github.com/fluxcd/helm-controller/api v1.5.5 → [Updates: v1.6.0]
• github.com/fluxcd/source-controller/api v1.8.5 → [Updates: v1.9.0]
• github.com/go-logr/logr v1.4.3
• github.com/google/gnostic-models v0.7.1
• github.com/jellydator/ttlcache/v3 v3.4.0
• github.com/kcp-dev/logicalcluster/v3 v3.0.5
• github.com/kcp-dev/multicluster-provider v0.7.1 → [Updates: v0.8.0]
• github.com/kcp-dev/multicluster-provider/client v0.7.1 → [Updates: v0.8.0]
• github.com/kcp-dev/sdk v0.31.2 → [Updates: v0.32.0]
• github.com/openfga/api/proto v0.0.0-20260319214821-f153694bfc20@f153694bfc20 → [Updates: v0.0.0-20260619182052-dd87be81488e]
• github.com/openfga/language/pkg/go v0.2.1 → [Updates: v0.3.0]
• github.com/platform-mesh/account-operator v0.14.57 → [Updates: v0.14.58]
• github.com/platform-mesh/golang-commons v0.17.11 → [Updates: v0.17.14]
• github.com/platform-mesh/subroutines v0.4.3 → [Updates: v0.5.7]
• github.com/prometheus/client_golang v1.23.2
• github.com/rs/zerolog v1.35.1
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/spf13/viper v1.21.0
• github.com/stretchr/testify v1.11.1
• golang.org/x/oauth2 v0.36.0
• google.golang.org/grpc v1.81.1
• google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af@f2248ac996af
• k8s.io/api v0.35.4 → [Updates: v0.36.2]
• k8s.io/apiextensions-apiserver v0.35.4 → [Updates: v0.36.2]
• k8s.io/apimachinery v0.36.0 → [Updates: v0.36.2]
• k8s.io/client-go v0.35.4 → [Updates: v0.36.2]
• k8s.io/utils v0.0.0-20260507154919-ff6756f316d2@ff6756f316d2 → [Updates: v0.0.0-20260617174310-a95e086a2553]
• sigs.k8s.io/controller-runtime v0.23.3 → [Updates: v0.24.1]
• sigs.k8s.io/multicluster-runtime v0.23.3 → [Updates: v0.24.1]
• sigs.k8s.io/yaml v1.6.0

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository