Dependency Dashboard

[forking-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): update actions/dependency-review-action action to v4.5.0
• chore(deps): update azure/setup-kubectl action to v4

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• fix(deps): update module github.com/bsm/sarama-cluster to v2.1.15+incompatible
• chore(deps): update module github.com/shopify/sarama to v1.43.3

Detected dependencies

docker-compose

cmd/tracegen/docker-compose.yml

crossdock/docker-compose.yml

docker-compose/cassandra/v4/docker-compose.yaml

• cassandra 4.1

docker-compose/cassandra/v5/docker-compose.yaml

• cassandra 5.0

docker-compose/elasticsearch/v6/docker-compose.yml

• docker.elastic.co/elasticsearch/elasticsearch-oss 6.8.23

docker-compose/elasticsearch/v7/docker-compose.yml

• docker.elastic.co/elasticsearch/elasticsearch 7.17.22

docker-compose/elasticsearch/v8/docker-compose.yml

• docker.elastic.co/elasticsearch/elasticsearch 8.16.0

docker-compose/kafka-integration-test/docker-compose.yml

• bitnami/kafka 3.9.0

docker-compose/kafka/docker-compose.yml

• index.docker.io/bitnami/kafka 3.7.0

docker-compose/monitor/docker-compose-v2.yml

• yurishkuro/microsim v0.4.1
• prom/prometheus v3.0.1

docker-compose/monitor/docker-compose.yml

• yurishkuro/microsim v0.4.1

docker-compose/opensearch/v1/docker-compose.yml

• opensearchproject/opensearch 1.3.17

docker-compose/opensearch/v2/docker-compose.yml

• opensearchproject/opensearch 2.18.0

docker-compose/tail-sampling/docker-compose.yml

plugin/storage/scylladb/docker-compose.yml

• scylladb/scylla 5.4.7
• scylladb/scylla 5.4.7
• scylladb/scylla 5.4.7

dockerfile

cmd/agent/Dockerfile

cmd/all-in-one/Dockerfile

cmd/collector/Dockerfile

cmd/es-index-cleaner/Dockerfile

cmd/es-rollover/Dockerfile

cmd/ingester/Dockerfile

cmd/jaeger/Dockerfile

cmd/query/Dockerfile

cmd/remote-storage/Dockerfile

docker/base/Dockerfile

• alpine 3.20.3
• alpine 3.20.3

docker/debug/Dockerfile

• golang 1.23.3-alpine
• golang 1.23.3-alpine

plugin/storage/cassandra/Dockerfile

• cassandra 5.0

github-actions

.github/actions/setup-go-tip/action.yml

• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed

.github/actions/setup-node.js/action.yml

• actions/setup-node v4.1.0@39370e3970a6d050c480ffad4ff0ed4d3fdee5af

.github/actions/upload-codecov/action.yml

• Wandalen/wretry.action v3.7.0

.github/workflows/ci-build-binaries.yml

• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed

.github/workflows/ci-crossdock.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
• docker/setup-qemu-action v3.2.0@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf

.github/workflows/ci-docker-all-in-one.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
• docker/setup-qemu-action v3.2.0@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf

.github/workflows/ci-docker-build.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
• docker/setup-qemu-action v3.2.0@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf

.github/workflows/ci-docker-hotrod.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
• docker/setup-qemu-action v3.2.0@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf
• azure/setup-kubectl v3
• imranismail/setup-kustomize v2
• helm/kind-action v1

.github/workflows/ci-e2e-badger.yaml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed

.github/workflows/ci-e2e-cassandra.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed

.github/workflows/ci-e2e-elasticsearch.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
• docker/setup-qemu-action v3.2.0@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf

.github/workflows/ci-e2e-grpc.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed

.github/workflows/ci-e2e-kafka.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed

.github/workflows/ci-e2e-memory.yaml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed

.github/workflows/ci-e2e-opensearch.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
• docker/setup-qemu-action v3.2.0@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf

.github/workflows/ci-e2e-spm.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed

.github/workflows/ci-e2e-tailsampling-processor.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed

.github/workflows/ci-lint-checks.yaml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-python v5.3.0@0b93645e9fea7318ecaed2b359559ac225c90a2b
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938

.github/workflows/ci-lint-dependabot-config.yml

• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• marocchino/validate-dependabot v3.0.0@d8ae5c0d03dd75fbd0ad5f8ab4ba8101ebbd4b37

.github/workflows/ci-release.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
• crazy-max/ghaction-import-gpg v6.2.0@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5
• svenstaro/upload-release-action 2.9.0@04733e069f2d7f7f0b4aebc4fbdbce8613b03ccd
• docker/setup-qemu-action v3.2.0@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf
• anchore/sbom-action v0.17.0@d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5
• svenstaro/upload-release-action 2.9.0@04733e069f2d7f7f0b4aebc4fbdbce8613b03ccd

.github/workflows/ci-unit-tests-go-tip.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938

.github/workflows/ci-unit-tests.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed

.github/workflows/codeql.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• github/codeql-action v3
• github/codeql-action v3
• github/codeql-action v3

.github/workflows/dependency-review.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/dependency-review-action v4.4.0@4081bf99e2866ebe428fc0477b69eb4fcda7220a

.github/workflows/fossa.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
• fossa-contrib/fossa-action v3.0.0@cdc5065bcdee31a32e47d4585df72d66e8e941c2

.github/workflows/label-check.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7

.github/workflows/scorecard.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.4.0@50769540e7f4bd5e21e526ee35c689e35e0d6874
• github/codeql-action v3.27.0@662472033e021d55d94146f66f6058822b0b39fd

gomod

docker/debug/go.mod

• go 1.23.0
• github.com/go-delve/delve v1.23.1

go.mod

• go 1.22.7
• go 1.23.3
• github.com/HdrHistogram/hdrhistogram-go v1.1.2
• github.com/Shopify/sarama v1.37.2
• github.com/apache/thrift v0.21.0
• github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2@a9d515a09cc2
• github.com/bsm/sarama-cluster v2.1.13+incompatible
• github.com/crossdock/crossdock-go v0.0.0-20160816171116-049aabb0122b@049aabb0122b
• github.com/dgraph-io/badger/v4 v4.5.0
• github.com/elastic/go-elasticsearch/v8 v8.16.0
• github.com/fsnotify/fsnotify v1.8.0
• github.com/go-logr/zapr v1.3.0
• github.com/gocql/gocql v1.7.0
• github.com/gogo/googleapis v1.4.1
• github.com/gogo/protobuf v1.3.2
• github.com/gorilla/handlers v1.5.2
• github.com/gorilla/mux v1.8.1
• github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.1.0
• github.com/kr/pretty v0.3.1
• github.com/olivere/elastic v6.2.37+incompatible
• github.com/open-telemetry/opentelemetry-collector-contrib/connector/spanmetricsconnector v0.114.0
• github.com/open-telemetry/opentelemetry-collector-contrib/exporter/kafkaexporter v0.114.0
• github.com/open-telemetry/opentelemetry-collector-contrib/exporter/prometheusexporter v0.114.0
• github.com/open-telemetry/opentelemetry-collector-contrib/extension/healthcheckv2extension v0.114.0
• github.com/open-telemetry/opentelemetry-collector-contrib/extension/storage v0.114.0
• github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/jaeger v0.114.0
• github.com/open-telemetry/opentelemetry-collector-contrib/processor/attributesprocessor v0.114.0
• github.com/open-telemetry/opentelemetry-collector-contrib/processor/tailsamplingprocessor v0.114.0
• github.com/open-telemetry/opentelemetry-collector-contrib/receiver/jaegerreceiver v0.114.0
• github.com/open-telemetry/opentelemetry-collector-contrib/receiver/kafkareceiver v0.114.0
• github.com/open-telemetry/opentelemetry-collector-contrib/receiver/zipkinreceiver v0.114.0
• github.com/prometheus/client_golang v1.20.5
• github.com/prometheus/client_model v0.6.1
• github.com/prometheus/common v0.60.1
• github.com/soheilhy/cmux v0.1.5
• github.com/spf13/cobra v1.8.1
• github.com/spf13/pflag v1.0.5
• github.com/spf13/viper v1.19.0
• github.com/stretchr/testify v1.10.0
• github.com/uber/jaeger-client-go v2.30.0+incompatible
• github.com/xdg-go/scram v1.1.2
• go.opentelemetry.io/collector/component v0.114.0
• go.opentelemetry.io/collector/component/componentstatus v0.114.0
• go.opentelemetry.io/collector/component/componenttest v0.114.0
• go.opentelemetry.io/collector/config/configauth v0.114.0
• go.opentelemetry.io/collector/config/configgrpc v0.114.0
• go.opentelemetry.io/collector/config/confighttp v0.114.0
• go.opentelemetry.io/collector/config/configretry v1.20.0
• go.opentelemetry.io/collector/config/configtls v1.20.0
• go.opentelemetry.io/collector/confmap v1.20.0
• go.opentelemetry.io/collector/confmap/provider/envprovider v1.20.0
• go.opentelemetry.io/collector/confmap/provider/fileprovider v1.20.0
• go.opentelemetry.io/collector/confmap/provider/httpprovider v1.20.0
• go.opentelemetry.io/collector/confmap/provider/httpsprovider v1.20.0
• go.opentelemetry.io/collector/confmap/provider/yamlprovider v1.20.0
• go.opentelemetry.io/collector/connector v0.114.0
• go.opentelemetry.io/collector/connector/forwardconnector v0.114.0
• go.opentelemetry.io/collector/consumer v0.114.0
• go.opentelemetry.io/collector/consumer/consumertest v0.114.0
• go.opentelemetry.io/collector/exporter v0.114.0
• go.opentelemetry.io/collector/exporter/exportertest v0.114.0
• go.opentelemetry.io/collector/exporter/otlpexporter v0.114.0
• go.opentelemetry.io/collector/exporter/otlphttpexporter v0.114.0
• go.opentelemetry.io/collector/extension v0.114.0
• go.opentelemetry.io/collector/extension/extensiontest v0.114.0
• go.opentelemetry.io/collector/extension/zpagesextension v0.114.0
• go.opentelemetry.io/collector/otelcol v0.114.0
• go.opentelemetry.io/collector/pdata v1.20.0
• go.opentelemetry.io/collector/pipeline v0.114.0
• go.opentelemetry.io/collector/processor v0.114.0
• go.opentelemetry.io/collector/processor/batchprocessor v0.114.0
• go.opentelemetry.io/collector/processor/memorylimiterprocessor v0.114.0
• go.opentelemetry.io/collector/processor/processortest v0.114.0
• go.opentelemetry.io/collector/receiver v0.114.0
• go.opentelemetry.io/collector/receiver/otlpreceiver v0.114.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.57.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.57.0
• go.opentelemetry.io/contrib/samplers/jaegerremote v0.26.0
• go.opentelemetry.io/otel v1.32.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.32.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.32.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.32.0
• go.opentelemetry.io/otel/exporters/prometheus v0.54.0
• go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.32.0
• go.opentelemetry.io/otel/metric v1.32.0
• go.opentelemetry.io/otel/sdk v1.32.0
• go.opentelemetry.io/otel/sdk/metric v1.32.0
• go.opentelemetry.io/otel/trace v1.32.0
• go.uber.org/automaxprocs v1.6.0
• go.uber.org/goleak v1.3.0
• go.uber.org/zap v1.27.0
• golang.org/x/net v0.31.0
• golang.org/x/sys v0.27.0
• google.golang.org/grpc v1.68.0
• google.golang.org/protobuf v1.35.2
• gopkg.in/yaml.v3 v3.0.1
• go.opentelemetry.io/collector/config/confignet v1.20.0
• go.opentelemetry.io/collector/config/configopaque v1.20.0
• go.opentelemetry.io/collector/config/configtelemetry v0.114.0
• go.opentelemetry.io/collector/exporter/debugexporter v0.114.0
• go.opentelemetry.io/collector/extension/extensioncapabilities v0.114.0
• github.com/Shopify/sarama v1.33.0

internal/tools/go.mod

• go 1.23.0
• github.com/golangci/golangci-lint v1.62.2
• github.com/josephspurrier/goversioninfo v1.4.1
• github.com/vektra/mockery/v2 v2.49.1
• mvdan.cc/gofumpt v0.7.0

jsonnet-bundler

monitoring/jaeger-mixin/jsonnetfile.json

---

• Check this box to trigger a request for Renovate to run again on this repository