Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update fkirc/skip-duplicate-actions action to v5.3.2
• fix(deps): update module github.com/crossplane/crossplane/apis/v2 to v2.3.4
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.24.1
• chore(deps): update codecov/codecov-action action to v7
• chore(deps): update dependency ubuntu to v24
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update docker/setup-qemu-action action to v4
• chore(deps): update github/codeql-action action to v4
• chore(deps): update golangci/golangci-lint-action action to v9
• chore(deps): update korthout/backport-action action to v4
• chore(deps): update xt0rted/slash-command-action action to v2
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update gcr.io/distroless/static docker digest to 9197324
• chore(deps): update github.com/crossplane/crossplane-tools digest to 659f1dc
• chore(deps): update module sigs.k8s.io/controller-tools to v0.21.0
• fix(deps): update kubernetes monorepo to v0.36.3 (k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/client-go)
• fix(deps): update module google.golang.org/grpc to v1.83.0
• chore(deps): update actions/cache action to v6
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/github-script action to v9
• chore(deps): update actions/setup-go action to v7
• chore(deps): update actions/upload-artifact action to v7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

cluster/images/provider-template/Dockerfile (1)

• gcr.io/distroless/static sha256:d9f9472a8f4541368192d714a995eb1a99bab1f7071fc8bde261d7eda3b667d8 → [Updates: undefined]

github-actions (6)

.github/workflows/backport.yml (3)

• actions/checkout v6 → [Updates: v7]
• korthout/backport-action v1 → [Updates: v4]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/ci.yml (28)

• fkirc/skip-duplicate-actions v5.3.1 → [Updates: v5.3.2]
• actions/checkout v6 → [Updates: v7]
• actions/setup-go v3 → [Updates: v7]
• actions/cache v5 → [Updates: v6]
• actions/cache v5 → [Updates: v6]
• golangci/golangci-lint-action v7 → [Updates: v9]
• actions/checkout v6 → [Updates: v7]
• actions/setup-go v3 → [Updates: v7]
• actions/cache v5 → [Updates: v6]
• actions/cache v5 → [Updates: v6]
• actions/checkout v6 → [Updates: v7]
• actions/setup-go v3 → [Updates: v7]
• actions/cache v5 → [Updates: v6]
• actions/cache v5 → [Updates: v6]
• codecov/codecov-action v3 → [Updates: v7]
• docker/setup-qemu-action v2 → [Updates: v4]
• docker/setup-buildx-action v3 → [Updates: v4]
• docker/login-action v1 → [Updates: v4]
• actions/checkout v6 → [Updates: v7]
• actions/setup-go v3 → [Updates: v7]
• actions/cache v5 → [Updates: v6]
• actions/cache v5 → [Updates: v6]
• actions/upload-artifact v4 → [Updates: v7]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/codeql.yml (6)

• fkirc/skip-duplicate-actions v5.3.1 → [Updates: v5.3.2]
• actions/checkout v6 → [Updates: v7]
• github/codeql-action v3 → [Updates: v4]
• github/codeql-action v3 → [Updates: v4]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/commands.yml (7)

• xt0rted/slash-command-action v1 → [Updates: v2]
• actions/github-script v4 → [Updates: v9]
• xt0rted/slash-command-action v1 → [Updates: v2]
• actions/checkout v6 → [Updates: v7]
• korthout/backport-action v1 → [Updates: v4]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/promote.yml (3)

• actions/checkout v6 → [Updates: v7]
• docker/login-action v1 → [Updates: v4]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/tag.yml (3)

• actions/checkout v6 → [Updates: v7]
• negz/create-tag v1
• ubuntu 22.04 → [Updates: 24.04]

gomod (1)

go.mod (12)

• go 1.25.11
• github.com/alecthomas/kingpin/v2 v2.4.0
• github.com/crossplane/crossplane-runtime/v2 v2.3.3
• github.com/crossplane/crossplane/apis/v2 v2.3.3 → [Updates: v2.3.4]
• github.com/google/go-cmp v0.7.0
• google.golang.org/grpc v1.79.3 → [Updates: v1.83.0]
• k8s.io/apiextensions-apiserver v0.35.0 → [Updates: v0.36.3]
• k8s.io/apimachinery v0.35.1 → [Updates: v0.36.3]
• k8s.io/client-go v0.35.1 → [Updates: v0.36.3]
• sigs.k8s.io/controller-runtime v0.23.1 → [Updates: v0.24.1]
• github.com/crossplane/crossplane-tools v0.0.0-20260715161912-60e57f817ad1@60e57f817ad1 → [Updates: v0.0.0-20260719180100-659f1dc036c5]
• sigs.k8s.io/controller-tools v0.20.0 → [Updates: v0.21.0]

---

• Check this box to trigger a request for Renovate to run again on this repository