Dependency Dashboard

[renovate[bot]]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• [ ] chore(deps-dev): update pascalgn/size-label-action digest to 49850f3
• [ ] chore(deps-dev): update actions/cache action to v3.3.3
• [ ] chore(deps-dev): update actions/checkout action to v4.1.7
• [ ] chore(deps-dev): update actions/dependency-review-action action to v3.1.5
• [ ] chore(deps-dev): update jasonetco/create-an-issue action to v2.9.2
• [ ] chore(deps): update module github.com/spf13/viper to v1.19.0
• [ ] chore(deps): update module github.com/testcontainers/testcontainers-go to v0.33.0
• [ ] chore(deps): update module go.mongodb.org/mongo-driver to v1.16.1
• [ ] chore(deps): update module go.uber.org/zap to v1.27.0
• [ ] chore(deps-dev): update actions/setup-python action to v4.8.0
• [ ] chore(deps-dev): update actions/upload-artifact action to v3.2.1
• [ ] chore(deps-dev): update aquasecurity/trivy-action action to v0.24.0
• [ ] chore(deps-dev): update docker/login-action action to v3.3.0
• [ ] chore(deps-dev): update goreleaser/goreleaser-action action to v5.1.0
• [ ] chore(deps-dev): update helm/kind-action action to v1.10.0
• [ ] chore(deps-dev): update imranismail/setup-kustomize action to v2.1.0
• [ ] chore(deps-dev): update ossf/scorecard-action action to v2.4.0
• [ ] chore(deps-dev): update shogo82148/actions-goveralls action to v1.9.0
• [ ] chore(deps-dev): update sigstore/cosign-installer action to v3.6.0
• [ ] chore(deps-dev): update step-security/harden-runner action to v2.9.1
• [ ] chore(deps-dev): update actions/cache action to v4
• [ ] chore(deps-dev): update actions/dependency-review-action action to v4
• [ ] chore(deps-dev): update actions/setup-go action to v5
• [ ] chore(deps-dev): update actions/setup-python action to v5
• [ ] chore(deps-dev): update actions/stale action to v9
• [ ] chore(deps-dev): update github artifact actions to v4 (major) (actions/download-artifact, actions/upload-artifact)
• [ ] chore(deps-dev): update github/codeql-action action to v3
• [ ] chore(deps-dev): update goreleaser/goreleaser-action action to v6
• [ ] 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• [ ] chore(deps): update gcr.io/distroless/static:nonroot docker digest to 42d15c6
• [ ] chore(deps-dev): update actions/checkout digest to 692973e
• [ ] chore(deps-dev): update github/codeql-action digest to f0a1281
• [ ] chore(deps): update module github.com/prometheus/client_golang to v1.20.2
• [ ] chore(deps): update module github.com/prometheus/client_model to v0.6.1
• [ ] chore(deps): update module github.com/prometheus/common to v0.57.0
• [ ] chore(deps-dev): update anchore/sbom-action action to v0.17.2
• [ ] chore(deps-dev): update github/codeql-action action to v2.26.6
• [ ] chore(deps-dev): update fossa-contrib/fossa-action action to v3
• [ ] chore(deps-dev): update zgosalvez/github-actions-ensure-sha-pinned-actions action to v3
• [ ] Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

Dockerfile

- `gcr.io/distroless/static nonroot@sha256:92d40eea0b5307a94f2ebee3e94095e704015fb41e35fc1fcbd1d151cc282222`

github-actions

.github/workflows/main.yaml

- `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac` - `actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe` - `actions/cache v3.3.2@704facf57e6136b1bc63b828d79edcd491f0ee84` - `shogo82148/actions-goveralls v1.8.0@7b1bd2871942af030d707d6574e5f684f9891fb2`

.github/workflows/pr-actions.yaml

- `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11` - `zgosalvez/github-actions-ensure-sha-pinned-actions v2.1.6@99589360fda82ecfac331cc6bfc9d7d74487359c`

.github/workflows/pr-build.yaml

- `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac` - `azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78` - `actions/setup-python v4.7.1@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236` - `helm/chart-testing-action v2.6.1@e6669bcd63d7cb57cb4380c33043eebe5d111992` - `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac` - `actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe` - `actions/cache v3.3.2@704facf57e6136b1bc63b828d79edcd491f0ee84` - `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac` - `actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe` - `actions/cache v3.3.2@704facf57e6136b1bc63b828d79edcd491f0ee84` - `shogo82148/actions-goveralls v1.8.0@7b1bd2871942af030d707d6574e5f684f9891fb2` - `actions/upload-artifact v3.1.3@a8a3f3ad30e3422c9c7b888a15615d19a852ae32` - `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac` - `azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78` - `actions/setup-python v4.7.1@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236` - `helm/chart-testing-action v2.6.1@e6669bcd63d7cb57cb4380c33043eebe5d111992` - `helm/kind-action v1.8.0@dda0770415bac9fc20092cacbc54aa298604d140` - `actions/download-artifact v3.0.2@9bc31d5ccc31df68ecc42ccf4149144866c47d8a` - `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac` - `actions/download-artifact v3.0.2@9bc31d5ccc31df68ecc42ccf4149144866c47d8a` - `engineerd/setup-kind v0.5.0@aa272fe2a7309878ffc2a81c56cfe3ef108ae7d0` - `imranismail/setup-kustomize v2.0.0@6691bdeb1b0a3286fb7f70fd1423c10e81e5375f`

.github/workflows/pr-dependency-review.yaml

- `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11` - `actions/dependency-review-action v3.1.3@7bbfa034e752445ea40215fff1c3bf9597993d3f`

.github/workflows/pr-label.yaml

- `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `pascalgn/size-label-action b1f4946f381d38d3b5960f76b514afdfef39b609`

.github/workflows/pr-nancy.yaml

- `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac` - `actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe` - `actions/cache v3.3.2@704facf57e6136b1bc63b828d79edcd491f0ee84` - `sonatype-nexus-community/nancy-github-action v1.0.3@726e338312e68ecdd4b4195765f174d3b3ce1533`

.github/workflows/pr-stale.yaml

- `actions/stale v8.0.0@1160a2240286f5da8ec72b1c0816ce2481aabf84`

.github/workflows/pr-trivy.yaml

- `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `aquasecurity/trivy-action 0.14.0@2b6a709cf9c4025c5438138008beaddbb02086f0`

.github/workflows/rebase.yaml

- `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac` - `cirrus-actions/rebase 1.8@b87d48154a87a85666003575337e27b8cd65f691`

.github/workflows/release.yaml

- `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac` - `actions/setup-go v4.1.0@93397bea11091df50f3d7e59dc26a7711a8bcfbe` - `docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d` - `sigstore/cosign-installer v3.2.0@1fc5bd396d372bee37d608f955b336615edf79c8` - `anchore/sbom-action v0.14.3@78fc58e266e87a38d4194b2137a3d4e9bcaf7ca1` - `goreleaser/goreleaser-action v5.0.0@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8` - `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac` - `azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78` - `sigstore/cosign-installer v3.2.0@1fc5bd396d372bee37d608f955b336615edf79c8`

.github/workflows/report-on-vulnerabilities.yaml

- `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `aquasecurity/trivy-action 0.14.0@2b6a709cf9c4025c5438138008beaddbb02086f0` - `actions/upload-artifact v3.1.3@a8a3f3ad30e3422c9c7b888a15615d19a852ae32` - `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11` - `actions/download-artifact v3.0.2@9bc31d5ccc31df68ecc42ccf4149144866c47d8a` - `JasonEtco/create-an-issue v2.9.1@e27dddc79c92bc6e4562f268fffa5ed752639abd`

.github/workflows/scan.yaml

- `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac` - `fossa-contrib/fossa-action v2.0.0@6728dc6fe9a068c648d080c33829ffbe56565023` - `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `actions/checkout v4@3df4ab11eba7bda6032a0b82a6bb43b11571feac` - `github/codeql-action codeql-bundle-20221020@5f18c9ab80428f9d5a42da9ab35e6d8a1b9a9bc4` - `github/codeql-action codeql-bundle-20221020@5f18c9ab80428f9d5a42da9ab35e6d8a1b9a9bc4` - `github/codeql-action codeql-bundle-20221020@5f18c9ab80428f9d5a42da9ab35e6d8a1b9a9bc4`

.github/workflows/scorecard.yaml

- `step-security/harden-runner v2.6.1@eb238b55efaa70779f274895e782ed17c84f2895` - `actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11` - `ossf/scorecard-action v2.3.1@0864cf19026789058feabb7e87baa5f140aac736` - `actions/upload-artifact v3.1.3@a8a3f3ad30e3422c9c7b888a15615d19a852ae32` - `github/codeql-action v2.22.7@66b90a5db151a8042fa97405c6cf843bbe433f7b`

gomod

go.mod

- `go 1.20` - `github.com/hashicorp/go-multierror v1.1.1` - `github.com/pkg/errors v0.9.1` - `github.com/prometheus/client_golang v1.16.0` - `github.com/prometheus/client_model v0.3.0` - `github.com/prometheus/common v0.42.0` - `github.com/spf13/pflag v1.0.5` - `github.com/spf13/viper v1.17.0` - `github.com/testcontainers/testcontainers-go v0.26.0` - `github.com/tj/assert v0.0.3` - `go.mongodb.org/mongo-driver v1.12.1` - `go.uber.org/zap v1.26.0`

helm-values

chart/mongodb-query-exporter/values.yaml

kustomize

config/base/kustomization.yaml

- `raffis/mongodb-query-exporter 2.0.1`

---

• [ ] Check this box to trigger a request for Renovate to run again on this repository

[raffis]

/rebase