Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update docker/setup-buildx-action action to v3.12.0
• Update kubernetes monorepo to v0.37.0 (k8s.io/apimachinery, k8s.io/client-go)
• Update module google.golang.org/grpc to v1.83.2
• Update registry.k8s.io/sig-storage/csi-node-driver-registrar Docker tag to v2.17.0
• Update actions/checkout action to v7
• Update actions/setup-go action to v7
• Update actions/upload-artifact action to v7
• Update dependency sigstore/cosign to v3
• Update docker/build-push-action action to v7
• Update docker/login-action action to v4
• Update docker/metadata-action action to v6
• Update docker/setup-buildx-action action to v4
• Update registry.k8s.io/sig-storage/csi-provisioner Docker tag to v6
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package github.com/digitalocean/go-libvirt: no-result.

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update module github.com/spf13/cobra to v1.10.2
• Update module google.golang.org/protobuf to v1.36.12
• Update sigstore/cosign-installer action to v3.10.1
• Update dependency sigstore/cosign to v2.6.5
• Update docker/build-push-action action to v6.19.2
• Update docker/login-action action to v3.7.0
• Update docker/metadata-action action to v5.10.0
• Update go toolchain directive to v1.27.0
• Update golang Docker tag to v1.27.0
• Update sigstore/cosign-installer action to v4
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• golang 1.25.1-alpine → [Updates: 1.27.0-alpine]
• golang 1.25.1-bookworm → [Updates: 1.27.0-bookworm]

github-actions (4)

.github/workflows/auto-assign-PRs.yml (1)

• hkusu/review-assign-action v1

.github/workflows/ci-helm-ghcr.yaml (1)

• actions/checkout v4 → [Updates: v7]

.github/workflows/docker-publish.yml (7)

• actions/checkout v4 → [Updates: v7]
• sigstore/cosign-installer v3.10.0@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 → [Updates: v3.10.1, v4.1.2]
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435 → [Updates: v3.12.0, v4.3.0]
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1 → [Updates: v3.7.0, v4.6.0]
• docker/metadata-action v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f → [Updates: v5.10.0, v6.2.0]
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v6.19.2, v7.3.0]
• sigstore/cosign v2.1.1 → [Updates: v2.6.5, v3.1.3]

.github/workflows/go.yml (5)

• actions/checkout v4 → [Updates: v7]
• actions/setup-go v5 → [Updates: v7]
• actions/upload-artifact v4 → [Updates: v7]
• svenstaro/upload-release-action v2
• go 1.25 → [Updates: 1.27]

gomod (1)

go.mod (9)

• go 1.24.0
• go 1.25.1 → [Updates: 1.27.0]
• github.com/akutz/gofsutil v0.1.2
• github.com/digitalocean/go-libvirt v0.0.0-20250902164301-14aca49c5ed4@14aca49c5ed4
• github.com/spf13/cobra v1.10.1 → [Updates: v1.10.2]
• google.golang.org/grpc v1.75.1 → [Updates: v1.83.2]
• google.golang.org/protobuf v1.36.9 → [Updates: v1.36.12]
• k8s.io/apimachinery v0.34.1 → [Updates: v0.37.0]
• k8s.io/client-go v0.34.1 → [Updates: v0.37.0]

helm-values (1)

helm/kvm-csi-driver/values.yaml (2)

• registry.k8s.io/sig-storage/csi-provisioner v5.3.0 → [Updates: v6.3.0]
• registry.k8s.io/sig-storage/csi-node-driver-registrar v2.14.0 → [Updates: v2.17.0]

---

• Check this box to trigger a request for Renovate to run again on this repository