Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package k8s.io/api: no-result.

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Renovate: Update github.com/digitalocean/go-libvirt digest to 1a83157
• Renovate: Update External dependencies to v0.36.4 (k8s.io/apimachinery, k8s.io/client-go)
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

3/4 CVEs have Renovate fixes.

gomod

go.mod

github.com/google/cel-go

• GO-2026-6094 (fixed in >= 0.30.0)

golang.org/x/crypto

• GO-2026-5932

golang.org/x/mod

• GO-2026-6179 (fixed in >= 0.40.0)
• GO-2026-6180 (fixed in >= 0.40.0)

Detected Dependencies

github-actions (6)

.github/workflows/checks.yaml

.github/workflows/ci.yaml

.github/workflows/codeql.yaml

.github/workflows/container-registry-ghcr.yaml

.github/workflows/helm-oci-package-ghcr.yaml

.github/workflows/stale.yaml (1)

• actions/stale v11

gomod (1)

go.mod (14)

• go 1.26.0
• github.com/cert-manager/cert-manager v1.21.1
• github.com/cobaltcore-dev/openstack-hypervisor-operator v1.2.3
• github.com/coreos/go-systemd/v22 v22.7.0
• github.com/digitalocean/go-libvirt v0.0.0-20260609165003-6254771e63a8@6254771e63a8 → [Updates: v0.0.0-20260814190004-1a83157e1858]
• github.com/godbus/dbus/v5 v5.2.2
• github.com/onsi/ginkgo/v2 v2.32.1
• github.com/onsi/gomega v1.42.1
• github.com/sapcc/go-api-declarations v1.25.0
• github.com/stretchr/testify v1.12.1
• k8s.io/api v0.36.3
• k8s.io/apimachinery v0.36.3 → [Updates: v0.36.4]
• k8s.io/client-go v0.36.3 → [Updates: v0.36.4]
• sigs.k8s.io/controller-runtime v0.24.1

helm-values (1)

charts/kvm-node-agent/values.yaml (1)

• busybox 1.38@sha256:dc2d74b28e4cf8984fa52af1f39bc7c3d9c73760b41a74d629f5d11b1ab28616

renovate-config (1)

.github/renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository