Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update anthropics/claude-code-action digest to 593d7a5
• Update container and docker libraries to v0.21.6
• Update golangci/golangci-lint-action action to v9.2.1
• Update mcp and protocol libraries to v0.54.1
• Update module github.com/lestrrat-go/httprc/v3 to v3.0.6
• Update module github.com/pressly/goose/v3 to v3.27.1
• Update module github.com/shirou/gopsutil/v4 to v4.26.5
• Update module oras.land/oras-go/v2 to v2.6.1
• Update release and publishing actions to v6.0.2
• Update security scanning and signing actions to v4.1.2
• Update actions/create-github-app-token action to v3.2.0
• Update auth and security libraries to v1.8.0
• Update aws-sdk-go-v2 monorepo (github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/service/sts)
• Update dependency helm/helm to v3.21.0
• Update dependency kubernetes-sigs/kind to v0.32.0
• Update dockerfile template base images to v0.22.0
• Update ghcr.io/stacklok/thv-registry-api Docker tag to v1.4.6
• Update kubernetes dependencies (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/client-go, k8s.io/utils, sigs.k8s.io/controller-runtime)
• Update module github.com/getsentry/sentry-go to v0.46.2
• Update module github.com/getsentry/sentry-go/otel to v0.46.2
• Update module github.com/go-chi/chi/v5 to v5.3.0
• Update module github.com/lestrrat-go/jwx/v3 to v3.1.1
• Update module github.com/redis/go-redis/v9 to v9.20.0
• Update module github.com/tidwall/gjson to v1.19.0
• Update module go.uber.org/zap to v1.28.0
• Update module golang.org/x/crypto to v0.53.0
• Update module golang.org/x/mod to v0.37.0
• Update module golang.org/x/sync to v0.21.0
• Update module golang.org/x/sys to v0.46.0
• Update module golang.org/x/term to v0.44.0
• Update module modernc.org/sqlite to v1.52.0
• Update opentelemetry and observability (go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp, go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/exporters/prometheus, go.opentelemetry.io/otel/metric, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/sdk/metric, go.opentelemetry.io/otel/trace)
• Update testing libraries (github.com/onsi/ginkgo/v2, github.com/onsi/gomega)
• Update cli and ui libraries to v2 (github.com/charmbracelet/bubbles, github.com/charmbracelet/bubbletea, github.com/charmbracelet/lipgloss)
• Update core workflow actions (major) (actions/download-artifact, actions/github-script, actions/upload-artifact)
• Update module github.com/lestrrat-go/jwx/v3 to v4
• Update release and publishing actions to v7
• 🔐 Create all awaiting schedule PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update module github.com/stacklok/toolhive-core to v0.0.23

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package arduino/setup-task), Could not determine new digest for update (github-digest package helm/kind-action), Failed to look up go package k8s.io/apimachinery: no-result.

Files affected: .github/workflows/e2e-tests.yml, .github/workflows/operator-ci.yml, .github/workflows/test-e2e-lifecycle.yml, go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update core workflow actions to df4cb1c

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update module github.com/1password/onepassword-sdk-go to v0.4.0
• Update module github.com/go-jose/go-jose/v3 to v4

Detected Dependencies

dockerfile (1)

containers/egress-proxy/Dockerfile (1)

• alpine 3.23.4

github-actions (25)

.github/workflows/api-compat-noop.yml

.github/workflows/api-compat.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c

.github/workflows/claude.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• anthropics/claude-code-action v1@fbda2eb1bdc90d319b8d853f5deb53bca199a7c1 → [Updates: v1]

.github/workflows/create-release-pr.yml (4)

• actions/create-github-app-token v3.1.1@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 → [Updates: v3.2.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• stacklok/releaseo v0.0.4@80e8d8131d41cf8763254d02360f2c5ce9b7c0df

.github/workflows/create-release-tag.yml (2)

• actions/create-github-app-token v3.1.1@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 → [Updates: v3.2.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]

.github/workflows/e2e-tests.yml (8)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• actions/download-artifact v7@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]

.github/workflows/helm-charts-test.yml (7)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• azure/setup-helm v5.0.0@dda3372f752e03dde6b3237bc9431cdc2f7a02a2
• helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
• arduino/setup-task v2
• helm/kind-action v1.14.0@ef37e7f390d99f746eb8b610417061a60e82a6cc

.github/workflows/helm-publish.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• azure/setup-helm v5.0.0@dda3372f752e03dde6b3237bc9431cdc2f7a02a2
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]

.github/workflows/image-build-and-publish.yml (29)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]

.github/workflows/issue-triage.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• anthropics/claude-code-base-action beta@e8132bc5e637a42c27763fc757faa37e1ee43b34

.github/workflows/license-headers.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c

.github/workflows/lint.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• golangci/golangci-lint-action v9.2.0@1e7e51e771db61008b38414a730f564565cf7c20 → [Updates: v9.2.1]

.github/workflows/operator-ci.yml (22)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• azure/setup-helm v5.0.0@dda3372f752e03dde6b3237bc9431cdc2f7a02a2
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2
• kyverno/action-install-chainsaw v0.2.15@1223ef75bedeb59c4e7b5455463d4316e76dff01
• helm/kind-action pin@v1.12.0@ef37e7f390d99f746eb8b610417061a60e82a6cc

.github/workflows/pr-size-label-apply.yml (8)

• actions/download-artifact v7@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8]
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/download-artifact v7@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8]
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]

.github/workflows/pr-size-labeler.yml (3)

• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]

.github/workflows/releaser.yml (8)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]
• goreleaser/goreleaser-action v7@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89
• slackapi/slack-github-action v3.0.3@45a88b9581bfab2566dc881e2cd66d334e621e2c

.github/workflows/renovate-config-validation.yml (1)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]

.github/workflows/security-scan.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• anchore/scan-action v7.4.0@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2
• github/codeql-action v4@8aad20d150bbac5944a9f9d289da16a4b0d87c1e
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• golang/govulncheck-action v1@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee

.github/workflows/skills-build-and-publish.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee

.github/workflows/spellcheck.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• codespell-project/actions-codespell v2@406322ec52dd7b488e48c1c4b82e2a8b3a1bf630

.github/workflows/test-e2e-lifecycle.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• azure/setup-helm v5.0.0@dda3372f752e03dde6b3237bc9431cdc2f7a02a2
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2
• helm/kind-action pin@v1.12.0@ef37e7f390d99f746eb8b610417061a60e82a6cc

.github/workflows/test.yml (7)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• arduino/setup-task v2
• codecov/codecov-action v6.0.1@cddd853df119a48c5be31a973f8cd97e12e35e16 → [Updates: v6.0.2, v7.0.0, v6.0.1]
• coverallsapp/github-action v2@5cbfd81b66ca5d10c19b062c04de0199c215fb6e

.github/workflows/triage.yml (1)

• stacklok/.github v1@b43e3f174f9bbf2ca4efe6e421a1d007e7fa1b8f

.github/workflows/verify-docgen.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c

.github/workflows/verify-gen.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• arduino/setup-task v2

gomod (1)

go.mod (97)

• go 1.26
• dario.cat/mergo v1.0.2
• github.com/1password/onepassword-sdk-go v0.3.1 → [Updates: v0.4.0]
• github.com/alicebob/miniredis/v2 v2.38.0
• github.com/atotto/clipboard v0.1.4
• github.com/aws/aws-sdk-go-v2 v1.41.9 → [Updates: v1.42.0]
• github.com/aws/aws-sdk-go-v2/config v1.32.20 → [Updates: v1.32.24]
• github.com/aws/aws-sdk-go-v2/service/sts v1.42.3 → [Updates: v1.43.3]
• github.com/cedar-policy/cedar-go v1.6.1 → [Updates: v1.8.0]
• github.com/cenkalti/backoff/v5 v5.0.3
• github.com/charmbracelet/bubbles v1.0.0 → [Updates: v2.1.0]
• github.com/charmbracelet/bubbletea v1.3.10 → [Updates: v2.0.7]
• github.com/charmbracelet/lipgloss v1.1.0 → [Updates: v2.0.3]
• github.com/charmbracelet/x/ansi v0.11.7
• github.com/containerd/errdefs v1.0.0
• github.com/coreos/go-oidc/v3 v3.18.0
• github.com/evanphx/json-patch/v5 v5.9.11
• github.com/go-chi/chi/v5 v5.2.5 → [Updates: v5.3.0]
• github.com/go-git/go-billy/v5 v5.9.0
• github.com/go-git/go-git/v5 v5.19.1
• github.com/go-jose/go-jose/v3 v3.0.5 → [Updates: v4.1.4]
• github.com/go-jose/go-jose/v4 v4.1.4
• github.com/gofrs/flock v0.13.0
• github.com/google/cel-go v0.28.1
• github.com/google/go-cmp v0.7.0
• github.com/google/go-containerregistry v0.21.5 → [Updates: v0.21.6]
• github.com/google/uuid v1.6.0
• github.com/lestrrat-go/httprc/v3 v3.0.5 → [Updates: v3.0.6]
• github.com/lestrrat-go/jwx/v3 v3.0.13 → [Updates: v3.1.1, v4.0.2]
• github.com/mark3labs/mcp-go v0.54.0 → [Updates: v0.54.1]
• github.com/moby/moby/client v0.4.1
• github.com/modelcontextprotocol/registry v1.7.9
• github.com/oauth2-proxy/mockoidc v0.0.0-20240214162133-caebfff84d25@caebfff84d25
• github.com/olekukonko/tablewriter v1.1.4
• github.com/onsi/ginkgo/v2 v2.28.1 → [Updates: v2.29.0]
• github.com/onsi/gomega v1.39.1 → [Updates: v1.41.0]
• github.com/ory/fosite v0.49.0
• github.com/pelletier/go-toml/v2 v2.3.1
• github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c@5ac0b6a4141c
• github.com/pressly/goose/v3 v3.27.0 → [Updates: v3.27.1]
• github.com/prometheus/client_golang v1.23.2
• github.com/redis/go-redis/v9 v9.19.0 → [Updates: v9.20.0]
• github.com/shirou/gopsutil/v4 v4.26.3 → [Updates: v4.26.5]
• github.com/spf13/viper v1.21.0
• github.com/stacklok/toolhive-catalog v0.20260603.0
• github.com/stacklok/toolhive-core v0.0.21 → [Updates: v0.0.23]
• github.com/stretchr/testify v1.11.1
• github.com/swaggo/swag/v2 v2.0.0-rc5
• github.com/tailscale/hujson v0.0.0-20260302212456-ecc657c15afd@ecc657c15afd
• github.com/testcontainers/testcontainers-go v0.42.0
• github.com/tidwall/gjson v1.18.0 → [Updates: v1.19.0]
• github.com/xeipuuv/gojsonschema v1.2.0
• github.com/zalando/go-keyring v0.2.8
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.43.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/exporters/prometheus v0.65.0 → [Updates: v0.66.0]
• go.opentelemetry.io/otel/sdk v1.43.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/sdk/metric v1.43.0 → [Updates: v1.44.0]
• go.uber.org/mock v0.6.0
• go.uber.org/zap v1.27.1 → [Updates: v1.28.0]
• golang.ngrok.com/ngrok/v2 v2.1.4
• golang.org/x/exp/jsonrpc2 v0.0.0-20260603202125-055de637280b@055de637280b
• golang.org/x/mod v0.36.0 → [Updates: v0.37.0]
• golang.org/x/oauth2 v0.36.0
• golang.org/x/sync v0.20.0 → [Updates: v0.21.0]
• golang.org/x/term v0.43.0 → [Updates: v0.44.0]
• golang.org/x/time v0.15.0
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/api v0.35.3 → [Updates: v0.36.1]
• k8s.io/apimachinery v0.35.3
• k8s.io/utils v0.0.0-20260319190234-28399d86e0b5@28399d86e0b5 → [Updates: v0.0.0-20260507154919-ff6756f316d2]
• modernc.org/sqlite v1.48.0 → [Updates: v1.52.0]
• sigs.k8s.io/controller-runtime v0.23.3 → [Updates: v0.24.1]
• sigs.k8s.io/yaml v1.6.0
• github.com/getsentry/sentry-go/otel v0.44.1 → [Updates: v0.46.2]
• github.com/hashicorp/golang-lru/v2 v2.0.7
• go.starlark.net v0.0.0-20260522144826-ec58d4b459e2@ec58d4b459e2
• github.com/getsentry/sentry-go v0.44.1 → [Updates: v0.46.2]
• github.com/moby/moby/api v1.54.2
• github.com/muesli/termenv v0.16.0
• k8s.io/apiextensions-apiserver v0.35.0 → [Updates: v0.36.1]
• oras.land/oras-go/v2 v2.6.0 → [Updates: v2.6.1]
• github.com/Microsoft/go-winio v0.6.2
• github.com/adrg/xdg v0.5.3
• github.com/go-logr/logr v1.4.3
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/opencontainers/go-digest v1.0.0
• github.com/opencontainers/image-spec v1.1.1
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 → [Updates: v0.69.0]
• go.opentelemetry.io/otel v1.43.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/metric v1.43.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/trace v1.43.0 → [Updates: v1.44.0]
• golang.org/x/crypto v0.52.0 → [Updates: v0.53.0]
• golang.org/x/sys v0.45.0 → [Updates: v0.46.0]
• k8s.io/client-go v0.35.3 → [Updates: v0.36.1]

helm-values (1)

deploy/charts/operator/values.yaml (4)

• ghcr.io/stacklok/toolhive/operator v0.29.1
• ghcr.io/stacklok/toolhive/proxyrunner v0.29.1
• ghcr.io/stacklok/toolhive/vmcp v0.29.1
• ghcr.io/stacklok/thv-registry-api v1.3.0 → [Updates: v1.4.6]

regex (8)

.github/workflows/helm-charts-test.yml (1)

• helm/helm 3.20.2 → [Updates: 3.21.0, 4.2.0]

.github/workflows/operator-ci.yml (3)

• kindest/node 1.33.7 → [Updates: 1.36.1]
• kindest/node 1.34.3 → [Updates: 1.36.1]
• kindest/node 1.35.1 → [Updates: 1.36.1]

.github/workflows/operator-ci.yml (1)

• kubernetes-sigs/kind 0.31.0 → [Updates: 0.32.0]

.github/workflows/operator-ci.yml (1)

• kyverno/chainsaw 0.2.15

.github/workflows/test-e2e-lifecycle.yml (3)

• kindest/node 1.33.7 → [Updates: 1.36.1]
• kindest/node 1.34.3 → [Updates: 1.36.1]
• kindest/node 1.35.1 → [Updates: 1.36.1]

.github/workflows/test-e2e-lifecycle.yml (1)

• kubernetes-sigs/kind 0.31.0 → [Updates: 0.32.0]

cmd/thv/app/inspector/version.go (1)

• ghcr.io/modelcontextprotocol/inspector 0.21.2 → [Updates: 0.22.0]

pkg/container/templates/go.tmpl (1)

• index.docker.io/library/alpine 3.23@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11

---

• Check this box to trigger a request for Renovate to run again on this repository