Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps-dev): update actions/setup-go action to v4.2.1
• chore(deps-dev): update actions/setup-python action to v4.9.1
• chore(deps-dev): update actions/upload-artifact action to v3.2.1
• chore(deps-dev): update aquasecurity/trivy-action action to v0.33.1
• chore(deps-dev): update dependency go to v1.25.4
• chore(deps-dev): update dependency python to 3.14
• chore(deps-dev): update docker/login-action action to v3.6.0
• chore(deps-dev): update goreleaser/goreleaser-action action to v5.1.0
• chore(deps-dev): update helm/chart-testing-action action to v2.8.0
• chore(deps-dev): update helm/kind-action action to v1.13.0
• chore(deps-dev): update imranismail/setup-kustomize action to v2.1.0
• chore(deps-dev): update ossf/scorecard-action action to v2.4.3
• chore(deps-dev): update shogo82148/actions-goveralls action to v1.10.0
• chore(deps-dev): update sigstore/cosign-installer action to v3.10.1
• chore(deps-dev): update step-security/harden-runner action to v2.13.2
• chore(deps): update module github.com/prometheus/client_golang to v1.23.2
• chore(deps): update module github.com/prometheus/client_model to v0.6.2
• chore(deps): update module github.com/prometheus/common to v0.67.4
• chore(deps): update module github.com/spf13/viper to v1.21.0
• chore(deps): update module github.com/testcontainers/testcontainers-go to v0.40.0
• chore(deps): update module go.mongodb.org/mongo-driver to v1.17.6
• chore(deps): update module go.uber.org/zap to v1.27.1
• chore(deps-dev): update actions/cache action to v4
• chore(deps-dev): update actions/checkout action to v6
• chore(deps-dev): update actions/dependency-review-action action to v4
• chore(deps-dev): update actions/setup-go action to v6
• chore(deps-dev): update actions/setup-python action to v6
• chore(deps-dev): update actions/stale action to v10
• chore(deps-dev): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps-dev): update github/codeql-action action to v4
• chore(deps-dev): update goreleaser/goreleaser-action action to v6
• chore(deps-dev): update sigstore/cosign-installer action to v4
• chore(deps-dev): update zgosalvez/github-actions-ensure-sha-pinned-actions action to v4
• chore(deps): update module go.mongodb.org/mongo-driver to v2
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps-dev): update actions/checkout digest to 34e1148
• chore(deps-dev): update pascalgn/size-label-action digest to 6ec5bd0
• chore(deps): update gcr.io/distroless/static:nonroot docker digest to e8a4044
• chore(deps-dev): update actions/dependency-review-action action to v3.1.5
• chore(deps-dev): update jasonetco/create-an-issue action to v2.9.2
• chore(deps): update module github.com/spf13/pflag to v1.0.10
• chore(deps-dev): update actions/cache action to v3.5.0
• chore(deps-dev): update actions/checkout action to v4.3.1
• chore(deps-dev): update anchore/sbom-action action to v0.20.10
• chore(deps-dev): update github/codeql-action action to v2.28.1
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

Dockerfile

• gcr.io/distroless/static nonroot@sha256:92d40eea0b5307a94f2ebee3e94095e704015fb41e35fc1fcbd1d151cc282222

github-actions

.github/workflows/main.yaml

• step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895
• actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac
• actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe
• shogo82148/actions-goveralls v1.8.0@7b1bd2871942af030d707d6574e5f684f9891fb2
• go 1.20.5

.github/workflows/pr-actions.yaml

• step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• zgosalvez/github-actions-ensure-sha-pinned-actions v2.1.6@99589360fda82ecfac331cc6bfc9d7d74487359c

.github/workflows/pr-build.yaml

• step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895
• actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac
• azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78
• actions/setup-python v4.7.1@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
• helm/chart-testing-action v2.6.1@e6669bcd63d7cb57cb4380c33043eebe5d111992
• step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895
• actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac
• actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe
• step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895
• actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac
• actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe
• actions/cache v3.3.2@704facf57e6136b1bc63b828d79edcd491f0ee84
• shogo82148/actions-goveralls v1.8.0@7b1bd2871942af030d707d6574e5f684f9891fb2
• actions/upload-artifact v3.1.3@a8a3f3ad30e3422c9c7b888a15615d19a852ae32
• step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895
• actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac
• azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78
• actions/setup-python v4.7.1@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
• helm/chart-testing-action v2.6.1@e6669bcd63d7cb57cb4380c33043eebe5d111992
• helm/kind-action v1.8.0@dda0770415bac9fc20092cacbc54aa298604d140
• actions/download-artifact v3.0.2@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
• step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895
• actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac
• actions/download-artifact v3.0.2@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
• engineerd/setup-kind v0.5.0@aa272fe2a7309878ffc2a81c56cfe3ef108ae7d0
• imranismail/setup-kustomize v2.0.0@6691bdeb1b0a3286fb7f70fd1423c10e81e5375f
• python 3.7
• go 1.20.5
• go 1.20.5
• python 3.7

.github/workflows/pr-dependency-review.yaml

• step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/dependency-review-action v3.1.3@7bbfa034e752445ea40215fff1c3bf9597993d3f

.github/workflows/pr-label.yaml

• step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895
• pascalgn/size-label-action b1f4946f381d38d3b5960f76b514afdfef39b609

.github/workflows/pr-nancy.yaml

• step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895
• actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac
• actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe
• sonatype-nexus-community/nancy-github-action v1.0.3@726e338312e68ecdd4b4195765f174d3b3ce1533
• go 1.20.5

.github/workflows/pr-stale.yaml

• actions/stale v8.0.0@1160a2240286f5da8ec72b1c0816ce2481aabf84

.github/workflows/pr-trivy.yaml

• step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895
• aquasecurity/trivy-action 0.14.0@2b6a709cf9c4025c5438138008beaddbb02086f0

.github/workflows/rebase.yaml

• step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895
• actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac
• cirrus-actions/rebase 1.8@b87d48154a87a85666003575337e27b8cd65f691

.github/workflows/release.yaml

• step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895
• actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac
• actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• sigstore/cosign-installer v3.2.0@1fc5bd396d372bee37d608f955b336615edf79c8
• anchore/sbom-action v0.14.3@78fc58e266e87a38d4194b2137a3d4e9bcaf7ca1
• goreleaser/goreleaser-action v5.0.0@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8
• step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895
• actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac
• azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78
• sigstore/cosign-installer v3.2.0@1fc5bd396d372bee37d608f955b336615edf79c8
• go 1.20.5

.github/workflows/report-on-vulnerabilities.yaml

• step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895
• aquasecurity/trivy-action 0.14.0@2b6a709cf9c4025c5438138008beaddbb02086f0
• actions/upload-artifact v3.1.3@a8a3f3ad30e3422c9c7b888a15615d19a852ae32
• step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v3.0.2@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
• JasonEtco/create-an-issue v2.9.1@e27dddc79c92bc6e4562f268fffa5ed752639abd

.github/workflows/scan.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818

.github/workflows/scorecard.yaml

• step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• ossf/scorecard-action v2.3.1@0864cf19026789058feabb7e87baa5f140aac736
• actions/upload-artifact v3.1.3@a8a3f3ad30e3422c9c7b888a15615d19a852ae32
• github/codeql-action v2.22.7@66b90a5db151a8042fa97405c6cf843bbe433f7b

gomod

go.mod

• go 1.20
• github.com/hashicorp/go-multierror v1.1.1
• github.com/pkg/errors v0.9.1
• github.com/prometheus/client_golang v1.16.0
• github.com/prometheus/client_model v0.3.0
• github.com/prometheus/common v0.42.0
• github.com/spf13/pflag v1.0.5
• github.com/spf13/viper v1.17.0
• github.com/testcontainers/testcontainers-go v0.26.0
• github.com/tj/assert v0.0.3
• go.mongodb.org/mongo-driver v1.12.1
• go.uber.org/zap v1.26.0

helm-values

chart/mongodb-query-exporter/values.yaml

kustomize

config/base/kustomization.yaml

• raffis/mongodb-query-exporter 2.0.1

renovate-config-presets

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository

[raffis]

/rebase