Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency go to v1.26.5
• chore(deps): update dependency golangci/golangci-lint to v2.12.2
• chore(deps): update examples (xpkg.upbound.io/crossplane-contrib/function-go-templating, xpkg.upbound.io/crossplane-contrib/function-patch-and-transform)
• chore(deps): update dependency crossplane/cli to v2
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module go.opentelemetry.io/otel to v1.44.0 [security]
• chore(deps): pin dependencies (actions/checkout, actions/download-artifact, actions/setup-go, actions/upload-artifact, docker/build-push-action, docker/login-action, docker/setup-buildx-action, docker/setup-qemu-action, golangci/golangci-lint-action)
• chore(deps): update dependency docker/buildx to v0.36.1
• fix(deps): update kubernetes monorepo to v0.36.3 (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery)
• fix(deps): update module sigs.k8s.io/controller-tools to v0.21.0
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

crossplane (2)

example/functions.yaml (1)

• xpkg.upbound.io/crossplane-contrib/function-patch-and-transform v0.1.4 → [Updates: v0.10.8]

example/multistep/functions.yaml (2)

• xpkg.upbound.io/crossplane-contrib/function-patch-and-transform v0.5.0 → [Updates: v0.10.8]
• xpkg.upbound.io/crossplane-contrib/function-go-templating v0.4.1 → [Updates: v0.12.3]

dockerfile (1)

Dockerfile (2)

• docker/dockerfile 1
• golang 1

github-actions (2)

.github/workflows/ci.yml (18)

• actions/checkout v7 → [Updates: v7]
• actions/setup-go v7 → [Updates: v7]
• golangci/golangci-lint-action v9 → [Updates: v9]
• actions/checkout v7 → [Updates: v7]
• actions/setup-go v7 → [Updates: v7]
• docker/setup-qemu-action v4 → [Updates: v4]
• docker/setup-buildx-action v4 → [Updates: v4]
• actions/checkout v7 → [Updates: v7]
• docker/build-push-action v7 → [Updates: v7]
• actions/upload-artifact v7 → [Updates: v7]
• actions/checkout v7 → [Updates: v7]
• actions/download-artifact v8 → [Updates: v8]
• docker/login-action v4 → [Updates: v4]
• docker/login-action v4.6.0 → [Updates: v4.6.0]
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/tag.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• negz/create-tag v1@39bae1e0932567a58c20dea5a1a0d18358503320

gomod (1)

go.mod (14)

• go 1.25.12 → [Updates: 1.26.5]
• github.com/alecthomas/kong v1.16.0
• github.com/crossplane/crossplane-runtime/v2 v2.3.3
• github.com/crossplane/crossplane/apis/v2 v2.3.4
• github.com/crossplane/function-sdk-go v0.7.1
• github.com/google/go-cmp v0.7.0
• github.com/pkg/errors v0.9.1
• google.golang.org/protobuf v1.36.11
• k8s.io/api v0.35.3 → [Updates: v0.36.3]
• k8s.io/apiextensions-apiserver v0.35.3 → [Updates: v0.36.3]
• k8s.io/apimachinery v0.35.3 → [Updates: v0.36.3]
• k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3@cf1189d6abe3
• sigs.k8s.io/controller-tools v0.20.1 → [Updates: v0.21.0]
• go.opentelemetry.io/otel v1.43.0 → [Updates: v1.44.0]

regex (5)

.github/workflows/ci.yml (1)

• go 1.25.12 → [Updates: 1.26.5]

.github/workflows/ci.yml (1)

• golangci/golangci-lint v2.4.0 → [Updates: v2.12.2]

.github/workflows/ci.yml (1)

• docker/buildx v0.23.0 → [Updates: v0.36.1]

.github/workflows/ci.yml (1)

• crossplane/cli ' # TODO(negz): Pin to a version once v1.14 is released. → [Updates: v2.4.1]

Dockerfile

---

• Check this box to trigger a request for Renovate to run again on this repository