Dependency Dashboard

[forking-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): update step-security/harden-runner action to v2.10.1

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• fix(deps): update all otel collector packages (go.opentelemetry.io/collector/component, go.opentelemetry.io/collector/component/componentstatus, go.opentelemetry.io/collector/config/configauth, go.opentelemetry.io/collector/config/configgrpc, go.opentelemetry.io/collector/config/confighttp, go.opentelemetry.io/collector/config/configretry, go.opentelemetry.io/collector/config/configtelemetry, go.opentelemetry.io/collector/config/configtls, go.opentelemetry.io/collector/confmap, go.opentelemetry.io/collector/confmap/provider/envprovider, go.opentelemetry.io/collector/confmap/provider/fileprovider, go.opentelemetry.io/collector/confmap/provider/httpprovider, go.opentelemetry.io/collector/confmap/provider/httpsprovider, go.opentelemetry.io/collector/confmap/provider/yamlprovider, go.opentelemetry.io/collector/connector, go.opentelemetry.io/collector/connector/forwardconnector, go.opentelemetry.io/collector/consumer, go.opentelemetry.io/collector/consumer/consumertest, go.opentelemetry.io/collector/exporter, go.opentelemetry.io/collector/exporter/debugexporter, go.opentelemetry.io/collector/exporter/otlpexporter, go.opentelemetry.io/collector/exporter/otlphttpexporter, go.opentelemetry.io/collector/extension, go.opentelemetry.io/collector/extension/extensioncapabilities, go.opentelemetry.io/collector/extension/zpagesextension, go.opentelemetry.io/collector/otelcol, go.opentelemetry.io/collector/pdata, go.opentelemetry.io/collector/processor, go.opentelemetry.io/collector/processor/batchprocessor, go.opentelemetry.io/collector/processor/memorylimiterprocessor, go.opentelemetry.io/collector/receiver, go.opentelemetry.io/collector/receiver/otlpreceiver)
• fix(deps): update module go.opentelemetry.io/collector/config/confignet to v1

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• fix(deps): update module github.com/bsm/sarama-cluster to v2.1.15+incompatible
• chore(deps): update module github.com/shopify/sarama to v1.43.3

Detected dependencies

docker-compose

cmd/tracegen/docker-compose.yml

crossdock/docker-compose.yml

docker-compose/cassandra/v4/docker-compose.yaml

• cassandra 4.1

docker-compose/cassandra/v5/docker-compose.yaml

• cassandra 5.0

docker-compose/elasticsearch/v6/docker-compose.yml

• docker.elastic.co/elasticsearch/elasticsearch-oss 6.8.23

docker-compose/elasticsearch/v7/docker-compose.yml

• docker.elastic.co/elasticsearch/elasticsearch 7.17.22

docker-compose/elasticsearch/v8/docker-compose.yml

• docker.elastic.co/elasticsearch/elasticsearch 8.15.0

docker-compose/kafka-integration-test/docker-compose.yml

• bitnami/kafka 3.8.0

docker-compose/kafka/docker-compose.yml

• index.docker.io/bitnami/kafka 3.7.0

docker-compose/monitor/docker-compose-v2.yml

• yurishkuro/microsim v0.4.1

docker-compose/monitor/docker-compose.yml

• yurishkuro/microsim v0.4.1

docker-compose/opensearch/v1/docker-compose.yml

• opensearchproject/opensearch 1.3.17

docker-compose/opensearch/v2/docker-compose.yml

• opensearchproject/opensearch 2.17.0

docker-compose/tail-sampling/docker-compose.yml

plugin/storage/scylladb/docker-compose.yml

• scylladb/scylla 5.4.7
• scylladb/scylla 5.4.7
• scylladb/scylla 5.4.7

dockerfile

cmd/agent/Dockerfile

cmd/all-in-one/Dockerfile

cmd/collector/Dockerfile

cmd/es-index-cleaner/Dockerfile

cmd/es-rollover/Dockerfile

cmd/ingester/Dockerfile

cmd/jaeger/Dockerfile

cmd/query/Dockerfile

cmd/remote-storage/Dockerfile

docker/base/Dockerfile

• alpine 3.20.3
• alpine 3.20.3

docker/debug/Dockerfile

• golang 1.23.1-alpine
• golang 1.23.1-alpine

plugin/storage/cassandra/Dockerfile

• cassandra 5.0

github-actions

.github/actions/setup-go-tip/action.yml

• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32

.github/actions/setup-node.js/action.yml

• actions/setup-node v4.0.3@1e60f620b9541d16bece96c5465dc8ee9832be0b

.github/actions/upload-codecov/action.yml

• Wandalen/wretry.action v3.5.0

.github/workflows/ci-build-binaries.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32

.github/workflows/ci-crossdock.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• docker/setup-qemu-action v3.2.0@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf

.github/workflows/ci-docker-all-in-one.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• docker/setup-qemu-action v3.2.0@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf

.github/workflows/ci-docker-build.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• docker/setup-qemu-action v3.2.0@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf

.github/workflows/ci-docker-hotrod.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• docker/setup-qemu-action v3.2.0@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf

.github/workflows/ci-e2e-badger.yaml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32

.github/workflows/ci-e2e-cassandra.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32

.github/workflows/ci-e2e-elasticsearch.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• docker/setup-qemu-action v3.2.0@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf

.github/workflows/ci-e2e-grpc.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32

.github/workflows/ci-e2e-kafka.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32

.github/workflows/ci-e2e-memory.yaml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32

.github/workflows/ci-e2e-opensearch.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• docker/setup-qemu-action v3.2.0@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf

.github/workflows/ci-e2e-spm.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32

.github/workflows/ci-e2e-tailsampling-processor.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32

.github/workflows/ci-lint-checks.yaml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-python v5.2.0@f677139bbe7f9c59b41e40162b753c062f5d49a3
• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332

.github/workflows/ci-lint-dependabot-config.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• marocchino/validate-dependabot v3.0.0@d8ae5c0d03dd75fbd0ad5f8ab4ba8101ebbd4b37

.github/workflows/ci-release.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• crazy-max/ghaction-import-gpg v6.1.0@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4
• svenstaro/upload-release-action 2.9.0@04733e069f2d7f7f0b4aebc4fbdbce8613b03ccd
• docker/setup-qemu-action v3.2.0@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf
• anchore/sbom-action v0.17.0@d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5
• svenstaro/upload-release-action 2.9.0@04733e069f2d7f7f0b4aebc4fbdbce8613b03ccd

.github/workflows/ci-unit-tests-go-tip.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332

.github/workflows/ci-unit-tests.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32

.github/workflows/codeql.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• github/codeql-action v3
• github/codeql-action v3
• github/codeql-action v3

.github/workflows/dependency-review.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/dependency-review-action v4.3.3@72eb03d02c7872a771aacd928f3123ac62ad6d3a

.github/workflows/fossa.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• fossa-contrib/fossa-action v3.0.0@cdc5065bcdee31a32e47d4585df72d66e8e941c2

.github/workflows/label-check.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c

.github/workflows/scorecard.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.4.0@50769540e7f4bd5e21e526ee35c689e35e0d6874
• github/codeql-action v3.26.5@2c779ab0d087cd7fe7b826087247c2c81f27bfa6

gomod

docker/debug/go.mod

• go 1.23.0
• github.com/go-delve/delve v1.23.1

go.mod

• go 1.22.0
• go 1.23.1
• github.com/HdrHistogram/hdrhistogram-go v1.1.2
• github.com/Shopify/sarama v1.37.2
• github.com/apache/thrift v0.21.0
• github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2@a9d515a09cc2
• github.com/bsm/sarama-cluster v2.1.13+incompatible
• github.com/crossdock/crossdock-go v0.0.0-20160816171116-049aabb0122b@049aabb0122b
• github.com/dgraph-io/badger/v4 v4.3.0
• github.com/elastic/go-elasticsearch/v8 v8.15.0
• github.com/fsnotify/fsnotify v1.7.0
• github.com/go-logr/zapr v1.3.0
• github.com/gocql/gocql v1.6.0
• github.com/gogo/googleapis v1.4.1
• github.com/gogo/protobuf v1.3.2
• github.com/gorilla/handlers v1.5.2
• github.com/gorilla/mux v1.8.1
• github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.1.0
• github.com/kr/pretty v0.3.1
• github.com/olivere/elastic v6.2.37+incompatible
• github.com/open-telemetry/opentelemetry-collector-contrib/connector/spanmetricsconnector v0.109.0
• github.com/open-telemetry/opentelemetry-collector-contrib/exporter/kafkaexporter v0.109.0
• github.com/open-telemetry/opentelemetry-collector-contrib/exporter/prometheusexporter v0.109.0
• github.com/open-telemetry/opentelemetry-collector-contrib/extension/healthcheckv2extension v0.109.0
• github.com/open-telemetry/opentelemetry-collector-contrib/extension/storage v0.109.0
• github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/jaeger v0.109.0
• github.com/open-telemetry/opentelemetry-collector-contrib/processor/tailsamplingprocessor v0.109.0
• github.com/open-telemetry/opentelemetry-collector-contrib/receiver/jaegerreceiver v0.109.0
• github.com/open-telemetry/opentelemetry-collector-contrib/receiver/kafkareceiver v0.109.0
• github.com/open-telemetry/opentelemetry-collector-contrib/receiver/zipkinreceiver v0.109.0
• github.com/prometheus/client_golang v1.20.4
• github.com/prometheus/client_model v0.6.1
• github.com/prometheus/common v0.59.1
• github.com/soheilhy/cmux v0.1.5
• github.com/spf13/cobra v1.8.1
• github.com/spf13/pflag v1.0.5
• github.com/spf13/viper v1.19.0
• github.com/stretchr/testify v1.9.0
• github.com/uber/jaeger-client-go v2.30.0+incompatible
• github.com/xdg-go/scram v1.1.2
• go.opentelemetry.io/collector/component v0.109.0
• go.opentelemetry.io/collector/component/componentstatus v0.109.0
• go.opentelemetry.io/collector/config/configauth v0.109.0
• go.opentelemetry.io/collector/config/configgrpc v0.109.0
• go.opentelemetry.io/collector/config/confighttp v0.109.0
• go.opentelemetry.io/collector/config/configretry v1.15.0
• go.opentelemetry.io/collector/config/configtls v1.15.0
• go.opentelemetry.io/collector/confmap v1.15.0
• go.opentelemetry.io/collector/confmap/provider/envprovider v1.15.0
• go.opentelemetry.io/collector/confmap/provider/fileprovider v1.15.0
• go.opentelemetry.io/collector/confmap/provider/httpprovider v0.109.0
• go.opentelemetry.io/collector/confmap/provider/httpsprovider v0.109.0
• go.opentelemetry.io/collector/confmap/provider/yamlprovider v0.109.0
• go.opentelemetry.io/collector/connector v0.109.0
• go.opentelemetry.io/collector/connector/forwardconnector v0.109.0
• go.opentelemetry.io/collector/consumer v0.109.0
• go.opentelemetry.io/collector/consumer/consumertest v0.109.0
• go.opentelemetry.io/collector/exporter v0.109.0
• go.opentelemetry.io/collector/exporter/otlpexporter v0.109.0
• go.opentelemetry.io/collector/exporter/otlphttpexporter v0.109.0
• go.opentelemetry.io/collector/extension v0.109.0
• go.opentelemetry.io/collector/extension/ballastextension v0.108.1
• go.opentelemetry.io/collector/extension/zpagesextension v0.109.0
• go.opentelemetry.io/collector/otelcol v0.109.0
• go.opentelemetry.io/collector/pdata v1.15.0
• go.opentelemetry.io/collector/processor v0.109.0
• go.opentelemetry.io/collector/processor/batchprocessor v0.109.0
• go.opentelemetry.io/collector/processor/memorylimiterprocessor v0.109.0
• go.opentelemetry.io/collector/receiver v0.109.0
• go.opentelemetry.io/collector/receiver/otlpreceiver v0.109.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.55.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.55.0
• go.opentelemetry.io/contrib/samplers/jaegerremote v0.24.0
• go.opentelemetry.io/otel v1.30.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.30.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.30.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.30.0
• go.opentelemetry.io/otel/exporters/prometheus v0.52.0
• go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.30.0
• go.opentelemetry.io/otel/metric v1.30.0
• go.opentelemetry.io/otel/sdk v1.30.0
• go.opentelemetry.io/otel/sdk/metric v1.30.0
• go.opentelemetry.io/otel/trace v1.30.0
• go.uber.org/automaxprocs v1.6.0
• go.uber.org/goleak v1.3.0
• go.uber.org/zap v1.27.0
• golang.org/x/net v0.29.0
• golang.org/x/sys v0.25.0
• google.golang.org/grpc v1.67.0
• google.golang.org/protobuf v1.34.2
• gopkg.in/yaml.v3 v3.0.1
• go.opentelemetry.io/collector/config/confignet v0.109.0
• go.opentelemetry.io/collector/config/configtelemetry v0.109.0
• go.opentelemetry.io/collector/exporter/debugexporter v0.109.0
• go.opentelemetry.io/collector/extension/extensioncapabilities v0.109.0
• github.com/Shopify/sarama v1.33.0

internal/tools/go.mod

• go 1.23.0
• github.com/golangci/golangci-lint v1.61.0
• github.com/josephspurrier/goversioninfo v1.4.1
• github.com/vektra/mockery/v2 v2.46.0
• mvdan.cc/gofumpt v0.7.0

jsonnet-bundler

monitoring/jaeger-mixin/jsonnetfile.json

---

• Check this box to trigger a request for Renovate to run again on this repository