Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• fix(deps): update module sigs.k8s.io/controller-tools to v0.21.0

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency golangci/golangci-lint to v2.12.2
• chore(deps): update examples (xpkg.upbound.io/crossplane-contrib/function-go-templating, xpkg.upbound.io/crossplane-contrib/function-patch-and-transform)
• chore(deps): update dependency crossplane/cli to v2
• chore(deps): update negz/create-tag action to v2
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module golang.org/x/mod to v0.40.0 [security]
• chore(deps): pin dependencies (actions/checkout, actions/download-artifact, actions/setup-go, actions/upload-artifact, docker/build-push-action, docker/login-action, docker/setup-buildx-action, docker/setup-qemu-action, golangci/golangci-lint-action)
• chore(deps): update dependency go to v1.25.13
• chore(deps): update dependency go to v1.26.6
• fix(deps): update kubernetes monorepo to v0.36.3 (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

crossplane (2)

example/functions.yaml (1)

• xpkg.upbound.io/crossplane-contrib/function-patch-and-transform v0.1.4 → [Updates: v0.10.9]

example/multistep/functions.yaml (2)

• xpkg.upbound.io/crossplane-contrib/function-patch-and-transform v0.5.0 → [Updates: v0.10.9]
• xpkg.upbound.io/crossplane-contrib/function-go-templating v0.4.1 → [Updates: v0.12.3]

dockerfile (1)

Dockerfile (2)

• docker/dockerfile 1
• golang 1

github-actions (2)

.github/workflows/ci.yml (18)

• actions/checkout v7 → [Updates: v7]
• actions/setup-go v7 → [Updates: v7]
• golangci/golangci-lint-action v9 → [Updates: v9]
• actions/checkout v7 → [Updates: v7]
• actions/setup-go v7 → [Updates: v7]
• docker/setup-qemu-action v4 → [Updates: v4]
• docker/setup-buildx-action v4 → [Updates: v4]
• actions/checkout v7 → [Updates: v7]
• docker/build-push-action v7 → [Updates: v7]
• actions/upload-artifact v7 → [Updates: v7]
• actions/checkout v7 → [Updates: v7]
• actions/download-artifact v8 → [Updates: v8]
• docker/login-action v4 → [Updates: v4]
• docker/login-action v4.6.0 → [Updates: v4.6.0]
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/tag.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• negz/create-tag v1@39bae1e0932567a58c20dea5a1a0d18358503320 → [Updates: v2]

gomod (1)

go.mod (14)

• go 1.25.12 → [Updates: 1.25.13, 1.26.6]
• github.com/alecthomas/kong v1.16.0 → [Updates: v1.16.1]
• github.com/crossplane/crossplane-runtime/v2 v2.3.3
• github.com/crossplane/crossplane/apis/v2 v2.3.4
• github.com/crossplane/function-sdk-go v0.7.1
• github.com/google/go-cmp v0.7.0
• github.com/pkg/errors v0.9.1
• google.golang.org/protobuf v1.36.11 → [Updates: v1.36.12]
• k8s.io/api v0.35.3 → [Updates: v0.36.3]
• k8s.io/apiextensions-apiserver v0.35.3 → [Updates: v0.36.3]
• k8s.io/apimachinery v0.35.3 → [Updates: v0.36.3]
• k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3@cf1189d6abe3
• sigs.k8s.io/controller-tools v0.20.1 → [Updates: v0.21.0]
• golang.org/x/mod v0.37.0 → [Updates: v0.40.0]

regex (5)

.github/workflows/ci.yml (1)

• go 1.25.12 → [Updates: 1.25.13, 1.26.6]

.github/workflows/ci.yml (1)

• golangci/golangci-lint v2.4.0 → [Updates: v2.12.2]

.github/workflows/ci.yml (1)

• docker/buildx v0.36.1

.github/workflows/ci.yml (1)

• crossplane/cli ' # TODO(negz): Pin to a version once v1.14 is released. → [Updates: v2.4.1]

Dockerfile

---

• Check this box to trigger a request for Renovate to run again on this repository