Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update groovy docker tag to v4.0.33
• chore(deps): update mikefarah/yq docker tag to v4.53.6
• chore(deps): update dependency mysql2 to v3.24.1
• chore(deps): update maniator/gh docker tag to v2.98.0
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up docker package hub.pingcap.net/bases/pingcap-base: no-result, Could not determine new digest for update (github-digest package docker/setup-buildx-action).

Files affected: tools/check_artifact/Dockerfile, .github/workflows/pull-ci-runtime-images.yaml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency mysql2 to v3.23.4
• chore(deps): update go toolchain directive to v1.26.7
• chore(deps): update golang docker tag to v1.25.14
• chore(deps): update golang docker tag to v1.26.7
• chore(deps): update docker docker tag to v28.5
• chore(deps): update ghcr.io/fluxcd/flux-cli docker tag to v2.9.4
• chore(deps): update go toolchain directive to v1.27.0
• chore(deps): update rust docker tag to v1.98.0
• fix(deps): update module golang.org/x/mod to v0.40.0
• fix(deps): update module github.com/google/go-github/v83 to v90
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

ansible (16)

tekton/v1/tasks/echo.yaml (1)

• alpine 3.24

tekton/v1/tasks/git-clone.yaml

tekton/v1/tasks/github-set-status.yaml (1)

• python 3.14

tekton/v1/tasks/golang-build.yaml

tekton/v1/tasks/golang-test.yaml

tekton/v1/tasks/ks3utils.yaml (1)

• ghcr.io/pingcap-qe/cd/utils/ks3util v2025.10.26-7-geb77a69

tekton/v1/tasks/multi-arch-image-collect.yaml (1)

• ghcr.io/pingcap-qe/cd/utils/release v2025.10.12-7-gfdd779c

tekton/v1/tasks/multi-arch-image-push.yaml (1)

• mikefarah/yq 4.53.4 → [Updates: 4.53.6]

tekton/v1/tasks/pingcap-build-binaries-darwin.yaml (2)

• ghcr.io/pingcap-qe/cd/utils/release v2025.10.12-7-gfdd779c
• ghcr.io/pingcap-qe/cd/utils/release v2025.10.12-7-gfdd779c

tekton/v1/tasks/pingcap-build-binaries-linux.yaml (2)

• ghcr.io/pingcap-qe/cd/utils/release v2025.10.12-7-gfdd779c
• ghcr.io/pingcap-qe/cd/utils/release v2025.10.12-7-gfdd779c

tekton/v1/tasks/pingcap-build-images.yaml (2)

• ghcr.io/pingcap-qe/cd/utils/release v2025.10.12-7-gfdd779c
• gcr.io/kaniko-project/executor v1.24.0-debug

tekton/v1/tasks/pingcap-get-builder-image.yaml (1)

• ghcr.io/pingcap-qe/cd/utils/release v2025.10.12-7-gfdd779c

tekton/v1/tasks/pingcap-get-set-release-version.yaml (4)

• alpine/git v2.54.0
• denoland/deno 2.9.5
• alpine/git v2.54.0
• alpine/git v2.54.0

tekton/v1/tasks/pingcap-git-clone-ext.yaml (1)

• alpine/git v2.54.0

tekton/v1/tasks/pingcap-git-clone.yaml (2)

• alpine 3.24
• alpine/git v2.54.0

tekton/v1/tasks/zot-validate-repair-image.yaml (1)

• ghcr.io/pingcap-qe/cd/utils/release v2026.7.12-4-g372cd24

deno (1)

tools/reporters/ci/flaky-tests/deno.json (9)

• @std/assert ^1.0.19
• @std/cli ^1.0.32
• @std/path ^1.1.6
• @std/yaml ^1.2.0
• @octokit/rest ^22.0.1
• @octokit/plugin-throttling ^11.0.5
• @octokit/plugin-retry ^8.1.1
• mysql2 ^3.11.5 → [Updates: ^3.11.5]
• nodemailer ^6.9.16

dockerfile (8)

dockerfiles/ci/base/Dockerfile (4)

• quay.io/rockylinux/rockylinux 8.10.20240528 → [Updates: 10.1.20251126]
• ghcr.io/oras-project/oras v1.3.3
• docker.io/docker 28.5.2-cli → [Updates: 29.7.2-cli]
• docker.io/docker 28.5.2-cli → [Updates: 29.7.2-cli]

dockerfiles/ci/jenkins/Dockerfile

dockerfiles/ci/jenkins/tiflash/Dockerfile (1)

• ghcr.io/pingcap-qe/cd/builders/tiflash v2024.10.8-14-g52a7228

dockerfiles/ci/jenkins/tikv/Dockerfile (1)

• ghcr.io/pingcap-qe/cd/builders/tikv v2026.3.22-3-g892e449

dockerfiles/ci/tici/Dockerfile (3)

• ghcr.io/pingcap-qe/cd/builders/tiflash v2024.10.8-135-g43bfc3c-centos7
• mikefarah/yq 4.53.4 → [Updates: 4.53.6]
• ghcr.io/oras-project/oras v1.3.3

dockerfiles/ci/tidb-operator/backup-manager-base/Dockerfile (2)

• docker/dockerfile 1
• ghcr.io/pingcap-qe/bases/pingcap-base v1.12.3@sha256:eee0c7a72ce382ec2bca340c6ab4c996e56a5d9deb3745ebcbe43d65bec86b88

dockerfiles/ci/tidb-operator/e2e-base/Dockerfile (2)

• docker/dockerfile 1
• debian bookworm-slim@sha256:abd67ffcfa541b485a3dff59865ab629aa048a6c613e639d36e7456b0b229241

tools/check_artifact/Dockerfile (2)

• hub.pingcap.net/bases/pingcap-base v1
• bitnami/oras 1.2.2-debian-12-r8

github-actions (3)

.github/workflows/pull-ci-runtime-images.yaml (2)

• docker/setup-buildx-action https://github.com/docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
• ubuntu 24.04

.github/workflows/release-ci-runtime-images.yaml (5)

• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/weekly-release.yaml

gomod (3)

tools/error-log-review/go.mod (4)

• go 1.25.0
• github.com/google/go-github/v83 v83.0.0 → [Updates: v90.0.0]
• golang.org/x/oauth2 v0.36.0
• gopkg.in/yaml.v3 v3.0.1

tools/gomod-sync/go.mod (3)

• go 1.25.0
• go 1.26.6 → [Updates: 1.26.7, 1.27.0]
• golang.org/x/mod v0.39.0 → [Updates: v0.40.0]

tools/list-go-dependencies/go.mod (5)

• go 1.25.0
• go 1.26.6 → [Updates: 1.26.7, 1.27.0]
• github.com/PuerkitoBio/goquery v1.12.0
• github.com/rs/zerolog v1.35.1
• golang.org/x/mod v0.39.0 → [Updates: v0.40.0]

regex (60)

dockerfiles/ci/base/Dockerfile (5)

• golang 1.25.13 → [Updates: 1.25.14, 1.27.0]
• bazelbuild/bazelisk v1.29.0
• codecov/uploader v0.8.0
• codecov/codecov-cli v11.3.1
• krallin/tini v0.19.0

dockerfiles/ci/skaffold.yaml (1)

• golang 1.25.13 → [Updates: 1.25.14, 1.27.0]

prow-jobs/pingcap-inc/enterprise-extensions/postsubmits.yaml (2)

• denoland/deno 2.9.5
• denoland/deno 2.9.5

prow-jobs/pingcap-inc/enterprise-plugin/presubmits.yaml (1)

• ghcr.io/pingcap-qe/cd/builders/tidb v2025.8.10-8-g63921ca-centos7-go1.23

prow-jobs/pingcap-inc/ticdc/release-presubmits.yaml (1)

• ghcr.io/pingcap-qe/ci/base v2025.12.7-3-g1c0b8cf-go1.25

prow-jobs/pingcap-inc/tici/presubmits.yaml (3)

• ghcr.io/pingcap-qe/ci/tici v2025.10.12-22-g0eba311
• ghcr.io/pingcap-qe/ci/tici v2025.10.12-22-g0eba311
• ghcr.io/pingcap-qe/ci/tici v2026.3.1-1-gaebccea

prow-jobs/pingcap-inc/tiflash-scripts/presubmits.yaml (1)

• ghcr.io/pingcap-qe/cd/builders/tiflash v2025.8.10-2-gc9e3144-centos7

prow-jobs/pingcap-inc/tiflow/release-presubmits.yaml (3)

• ghcr.io/pingcap-qe/ci/base v2026.3.8-1-g9d412f4-go1.25
• ghcr.io/pingcap-qe/ci/base v2026.3.8-1-g9d412f4-go1.25
• ghcr.io/pingcap-qe/ci/base v2026.3.8-1-g9d412f4-go1.25

prow-jobs/pingcap-qe/ci/periodics.yaml (2)

• denoland/deno 2.9.5
• denoland/deno 2.9.5

prow-jobs/pingcap-qe/ci/presubmits.yaml (9)

• ghcr.io/pingcap-qe/cd/utils/release v2026.3.29-14-g90ae7ef
• alpine 3.24
• alpine 3.24
• alpine 3.24
• groovy 4.0.32-jdk17 → [Updates: 4.0.33-jdk17, 5.1.0-jdk17]
• alpine 3.24
• ghcr.io/ti-community-infra/prow/checkconfig v20250905-a0cfed255
• ghcr.io/fluxcd/flux-cli v2.8.8 → [Updates: v2.9.4]
• mikefarah/yq 4.53.4 → [Updates: 4.53.6]

prow-jobs/pingcap-qe/ee-infra/presubmits.yaml (2)

• ghcr.io/opentofu/opentofu 1.12
• ghcr.io/opentofu/opentofu 1.12

prow-jobs/pingcap/community/postsubmits.yaml (2)

• denoland/deno 2.9.5
• denoland/deno 2.9.5

prow-jobs/pingcap/docs-cn/latest-postsubmits.yaml (1)

• ghcr.io/pingcap-qe/cd/builders/docs v2026.4.12-47-gbef444c_linux_amd64

prow-jobs/pingcap/docs-cn/latest-presubmits.yaml

prow-jobs/pingcap/docs-tidb-operator/latest-postsubmits.yaml (1)

• ghcr.io/pingcap-qe/cd/builders/docs v2026.4.12-47-gbef444c_linux_amd64

prow-jobs/pingcap/docs/latest-postsubmits.yaml (1)

• ghcr.io/pingcap-qe/cd/builders/docs v2026.4.12-47-gbef444c_linux_amd64

prow-jobs/pingcap/docs/latest-presubmits.yaml

prow-jobs/pingcap/monitoring/periodics.yaml (6)

• golang 1.25.13 → [Updates: 1.25.14, 1.27.0]
• golang 1.25.13 → [Updates: 1.25.14, 1.27.0]
• golang 1.25.13 → [Updates: 1.25.14, 1.27.0]
• golang 1.21.13 → [Updates: 1.27.0]
• golang 1.21.13 → [Updates: 1.27.0]
• golang 1.21.13 → [Updates: 1.27.0]

prow-jobs/pingcap/ng-monitoring/postsubmits.yaml (2)

• denoland/deno 2.9.5
• denoland/deno 2.9.5

prow-jobs/pingcap/ticdc/common-postsubmits.yaml (1)

• denoland/deno 2.9.5

prow-jobs/pingcap/ticdc/latest-presubmits-next-gen.yaml (1)

• ghcr.io/pingcap-qe/ci/base v2026.3.15-1-g5625431-go1.25

prow-jobs/pingcap/ticdc/latest-presubmits.yaml (2)

• ghcr.io/pingcap-qe/ci/base v2026.3.15-1-g5625431-go1.25
• ghcr.io/pingcap-qe/ci/base v2024.10.8-32-ge807718-go1.23

prow-jobs/pingcap/ticdc/release-9.0-beta-presubmits.yaml (1)

• ghcr.io/pingcap-qe/ci/base v2024.10.8-32-ge807718-go1.23

prow-jobs/pingcap/tidb-binlog/latest-presubmits.yaml (5)

• ghcr.io/pingcap-qe/cd/builders/tidb v2024.10.8-12-gb9ffe36-centos7-go1.21
• ghcr.io/pingcap-qe/cd/builders/tidb v2024.10.8-12-gb9ffe36-centos7-go1.21
• ghcr.io/pingcap-qe/cd/builders/tidb v2024.10.8-12-gb9ffe36-centos7-go1.21
• ghcr.io/pingcap-qe/ci/base v2024.10.8-81-gec616ff-go1.21
• wurstmeister/kafka 2.12-2.4.1

prow-jobs/pingcap/tidb-engine-ext/latest-presubmits.yaml (1)

• ghcr.io/pingcap-qe/cd/builders/tiflash v2026.3.8-1-g9d412f4_linux_amd64

prow-jobs/pingcap/tidb-operator/latest-presubmits.yaml (3)

• maniator/gh v2.97.0 → [Updates: v2.98.0]
• docker 28.1-dind → [Updates: 28.5-dind, 29.7-dind]
• ubuntu 22.04 → [Updates: 26.04]

prow-jobs/pingcap/tidb-operator/release-1.x-presubmits.yaml (16)

• docker 28.1-dind → [Updates: 28.5-dind, 29.7-dind]
• ubuntu 22.04 → [Updates: 26.04]
• docker 28.1-dind → [Updates: 28.5-dind, 29.7-dind]
• ubuntu 22.04 → [Updates: 26.04]
• docker 28.1-dind → [Updates: 28.5-dind, 29.7-dind]
• ubuntu 22.04 → [Updates: 26.04]
• docker 28.1-dind → [Updates: 28.5-dind, 29.7-dind]
• ubuntu 22.04 → [Updates: 26.04]
• docker 28.1-dind → [Updates: 28.5-dind, 29.7-dind]
• ubuntu 22.04 → [Updates: 26.04]
• docker 28.1-dind → [Updates: 28.5-dind, 29.7-dind]
• ubuntu 22.04 → [Updates: 26.04]
• docker 28.1-dind → [Updates: 28.5-dind, 29.7-dind]
• ubuntu 22.04 → [Updates: 26.04]
• docker 28.1-dind → [Updates: 28.5-dind, 29.7-dind]
• ubuntu 22.04 → [Updates: 26.04]

prow-jobs/pingcap/tidb/common-postsubmits.yaml (3)

• purelind/python3-requests 3.9.18-slim
• golang 1.25.13 → [Updates: 1.25.14, 1.27.0]
• denoland/deno 2.9.5

prow-jobs/pingcap/tidb/common-presubmits.yaml (1)

• golang 1.26.6 → [Updates: 1.26.7, 1.27.0]

prow-jobs/pingcap/tidb/latest-periodics.yaml (2)

• ghcr.io/pingcap-qe/ci/base v2025.11.30-5-gd8d742b-go1.25
• ghcr.io/pingcap-qe/ci/base v2025.11.30-5-gd8d742b-go1.25

prow-jobs/pingcap/tidb/latest-postsubmits.yaml (1)

• ghcr.io/pingcap-qe/cd/builders/tidb v2025.12.7-14-g6fd6d9d-go1.25

prow-jobs/pingcap/tidb/latest-presubmits-canary.yaml (2)

• ghcr.io/pingcap-qe/ci/base v2026.4.12-20-gc13354a-go1.25
• ghcr.io/pingcap-qe/ci/base v2026.4.12-20-gc13354a-go1.25

prow-jobs/pingcap/tidb/latest-presubmits.yaml (1)

• ghcr.io/pingcap-qe/ci/base v2024.10.8-32-ge807718-go1.23

prow-jobs/pingcap/tiflash/common-postsubmits.yaml (1)

• denoland/deno 2.9.5

prow-jobs/pingcap/tiflash/latest-presubmits.yaml (2)

• ghcr.io/pingcap-qe/cd/builders/tiflash v2025.8.10-2-gc9e3144-centos7
• ghcr.io/pingcap-qe/ci/base v2024.10.8-32-ge807718-go1.23

prow-jobs/pingcap/tiflow/common-postsubmits.yaml (2)

• golang 1.25.13 → [Updates: 1.25.14, 1.27.0]
• denoland/deno 2.9.5

prow-jobs/pingcap/tiflow/latest-presubmits-wip.yaml (2)

• ghcr.io/pingcap-qe/ci/base v2026.3.8-1-g9d412f4-go1.25
• ghcr.io/pingcap-qe/ci/base v2026.3.8-1-g9d412f4-go1.25

prow-jobs/pingcap/tiflow/latest-presubmits.yaml (4)

• ghcr.io/pingcap-qe/ci/base v2026.4.12-10-gc29110c-go1.25
• ghcr.io/pingcap-qe/ci/base v2026.4.12-10-gc29110c-go1.25
• ghcr.io/pingcap-qe/ci/base v2026.4.12-10-gc29110c-go1.25
• ghcr.io/pingcap-qe/ci/base v2024.10.8-32-ge807718-go1.23

prow-jobs/pingcap/tiflow/release-8.5-presubmits.yaml (3)

• ghcr.io/pingcap-qe/ci/base v2026.3.8-1-g9d412f4-go1.25
• ghcr.io/pingcap-qe/ci/base v2026.3.8-1-g9d412f4-go1.25
• ghcr.io/pingcap-qe/ci/base v2026.3.15-1-g5625431-go1.25

prow-jobs/pingcap/tiproxy/latest-presubmits.yaml (3)

• ghcr.io/pingcap-qe/ci/base v2026.2.1-19-g6374cbf-go1.25
• ghcr.io/pingcap-qe/ci/base v2026.2.1-19-g6374cbf-go1.25
• ghcr.io/pingcap-qe/ci/base v2026.2.1-19-g6374cbf-go1.25

prow-jobs/ti-community-infra/configs/presubmits.yaml (2)

• ghcr.io/fluxcd/flux-cli v2.8.8 → [Updates: v2.9.4]
• ghcr.io/fluxcd/flux-cli v2.8.8 → [Updates: v2.9.4]

prow-jobs/tikv/client-go/latest-presubmits-nextgen.yaml (1)

• ghcr.io/pingcap-qe/ci/base v2026.7.12-6-gc8582dde-go1.25

prow-jobs/tikv/community/postsubmits.yaml (1)

• denoland/deno 2.9.5

prow-jobs/tikv/pd/common-presubmits.yaml (1)

• golang 1.26.6 → [Updates: 1.26.7, 1.27.0]

prow-jobs/tikv/pd/latest-presubmits-next-gen.yaml (4)

• ghcr.io/pingcap-qe/cd/builders/pd v2026.1.18-8-gbb5ada9-centos7-go1.25
• ghcr.io/pingcap-qe/ci/base v2026.1.18-8-gbb5ada9-go1.25
• ghcr.io/pingcap-qe/ci/base v2026.1.18-8-gbb5ada9-go1.25
• ghcr.io/pingcap-qe/ci/base v2026.1.18-8-gbb5ada9-go1.25

prow-jobs/tikv/pd/latest-presubmits.yaml (3)

• ghcr.io/pingcap-qe/cd/builders/pd v2026.1.18-8-gbb5ada9-centos7-go1.25
• ghcr.io/pingcap-qe/ci/base v2026.1.18-8-gbb5ada9-go1.25
• ghcr.io/pingcap-qe/ci/base v2026.1.18-8-gbb5ada9-go1.25

prow-jobs/tikv/pd/release-6.5-fips-presubmits.yaml (1)

• ghcr.io/pingcap-qe/cd/builders/pd v2024.10.8-91-g6221afa-centos7-go1.19

prow-jobs/tikv/pd/release-6.5-presubmits.yaml (1)

• ghcr.io/pingcap-qe/cd/builders/pd v2024.10.8-91-g6221afa-centos7-go1.19

prow-jobs/tikv/pd/release-7.1-presubmits.yaml (1)

• ghcr.io/pingcap-qe/cd/builders/pd v2024.10.8-91-g6221afa-centos7-go1.20

prow-jobs/tikv/pd/release-7.5-presubmits.yaml (1)

• ghcr.io/pingcap-qe/cd/builders/pd v2024.10.8-91-g6221afa-centos7-go1.21

prow-jobs/tikv/pd/release-8.1-presubmits.yaml (1)

• ghcr.io/pingcap-qe/cd/builders/pd v2024.10.8-91-g6221afa-centos7-go1.21

prow-jobs/tikv/pd/release-8.5-presubmits.yaml (1)

• ghcr.io/pingcap-qe/cd/builders/pd v2025.5.11-8-g6a5de16-centos7-go1.23

prow-jobs/tikv/pd/release-9.0-beta-presubmits.yaml (1)

• ghcr.io/pingcap-qe/cd/builders/pd v2025.5.11-8-g6a5de16-centos7-go1.23

prow-jobs/tikv/raft-engine/presubmits.yaml (2)

• rust 1.85.1 → [Updates: 1.98.0]
• rust 1.85.1 → [Updates: 1.98.0]

prow-jobs/tikv/rocksdb/latest-presubmits.yaml (6)

• ghcr.io/pingcap-qe/cd/builders/tikv v2025.12.14-1-g33e22ac-centos7-devtoolset8
• ghcr.io/pingcap-qe/cd/builders/tikv v2025.12.14-1-g33e22ac-centos7-devtoolset8
• ghcr.io/pingcap-qe/cd/builders/tikv v2025.12.14-1-g33e22ac-centos7-devtoolset8
• ghcr.io/pingcap-qe/cd/builders/tikv v2025.12.14-1-g33e22ac-centos7-devtoolset8
• ghcr.io/pingcap-qe/cd/builders/tikv v2025.12.14-1-g33e22ac-centos7-devtoolset8
• ghcr.io/pingcap-qe/cd/builders/tikv v2025.12.14-1-g33e22ac-centos7-devtoolset8

prow-jobs/tikv/rust-rocksdb/latest-presubmits.yaml (3)

• ghcr.io/pingcap-qe/cd/builders/tikv v2026.3.22-3-g892e449
• ghcr.io/pingcap-qe/cd/builders/tikv v2026.3.22-3-g892e449
• ghcr.io/pingcap-qe/cd/builders/tikv v2026.3.22-3-g892e449

prow-jobs/tikv/tikv/common-presubmits.yaml (1)

• mikefarah/yq 4.53.4 → [Updates: 4.53.6]

prow-jobs/tikv/tikv/latest-postsubmits.yaml (1)

• ghcr.io/pingcap-qe/ci/base v2025.12.7-10-gf44bb75-go1.25

prow-jobs/tikv/tikv/latest-presubmits.yaml (2)

• ghcr.io/pingcap-qe/cd/builders/tikv v2026.3.22-3-g892e449
• ghcr.io/pingcap-qe/ci/base v2024.10.8-32-ge807718-go1.23

prow-jobs/tikv/titan/latest-presubmits.yaml (7)

• ghcr.io/pingcap-qe/cd/builders/tikv v2025.12.14-1-g33e22ac-centos7-devtoolset8
• ghcr.io/pingcap-qe/cd/builders/tikv v2025.12.14-1-g33e22ac-centos7-devtoolset8
• ghcr.io/pingcap-qe/cd/builders/tikv v2025.12.14-1-g33e22ac-centos7-devtoolset8
• ghcr.io/pingcap-qe/cd/builders/tikv v2025.12.14-1-g33e22ac-centos7-devtoolset8
• ghcr.io/pingcap-qe/cd/builders/tikv v2025.12.14-1-g33e22ac-centos7-devtoolset8
• ghcr.io/pingcap-qe/cd/builders/tikv v2025.12.14-1-g33e22ac-centos7-devtoolset8
• ghcr.io/pingcap-qe/cd/builders/tikv v2025.12.14-1-g33e22ac-centos7-devtoolset8

---

• Check this box to trigger a request for Renovate to run again on this repository