Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: Package lookup failures

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update opensearchproject/opensearch Docker tag to v1.3.17
• Update Wandalen/wretry.action action to v3.5.0
• Update bitnami/kafka Docker tag to v3.7.0
• Update cassandra Docker tag to v4.1
• Update docker.elastic.co/elasticsearch/elasticsearch Docker tag to v7.17.21
• Update jaegertracing/jaeger-cassandra-schema Docker tag to v1.58
• Update jaegertracing/jaeger-collector Docker tag to v1.58
• Update jaegertracing/jaeger-query Docker tag to v1.58
• Update module github.com/Shopify/sarama to v1.43.2
• Update module github.com/gocql/gocql to v1.6.0
• Update module github.com/golangci/golangci-lint to v1.59.1
• Update scylladb/scylla Docker tag to v5.4.7
• Update svenstaro/upload-release-action action to v2.9.0
• Update yurishkuro/microsim Docker tag to v0.3.0
• Update cassandra Docker tag to v5
• Update docker.elastic.co/elasticsearch/elasticsearch Docker tag to v8.14.0
• Update module github.com/dgraph-io/badger/v3 to v4
• Update module github.com/grpc-ecosystem/go-grpc-middleware to v2
• Update module gopkg.in/yaml.v2 to v3
• Update opensearchproject/opensearch Docker tag to v2.14.0
• Update scylladb/scylla Docker tag to v6
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package svenstaro/upload-release-action).

Files affected: .github/workflows/ci-release.yml

---

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update fossa-contrib/fossa-action digest to fa38445
• Update github/codeql-action digest to 81b8143
• Update module github.com/gorilla/handlers to v1.5.2
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update actions/setup-node digest to 60edb5d
• Update actions/dependency-review-action action to v4.3.3
• Update actions/upload-artifact action to v4.3.3
• Update github/codeql-action action to v3.25.8
• Update module github.com/bsm/sarama-cluster to v2.1.15+incompatible

Detected dependencies

docker-compose

cmd/tracegen/docker-compose.yml

crossdock/docker-compose.yml

docker-compose/cassandra/v3/docker-compose.yaml

• cassandra 3.11

docker-compose/cassandra/v4/docker-compose.yaml

• cassandra 4.0

docker-compose/elasticsearch/v7/docker-compose.yml

• docker.elastic.co/elasticsearch/elasticsearch 7.14.0

docker-compose/elasticsearch/v8/docker-compose.yml

• docker.elastic.co/elasticsearch/elasticsearch 8.8.2

docker-compose/kafka-integration-test/docker-compose.yml

• bitnami/kafka 3.6.0

docker-compose/kafka/docker-compose.yml

docker-compose/monitor/docker-compose.yml

• yurishkuro/microsim 0.2.0

docker-compose/opensearch/v1/docker-compose.yml

• opensearchproject/opensearch 1.3.9

docker-compose/opensearch/v2/docker-compose.yml

• opensearchproject/opensearch 2.5.0

plugin/storage/scylladb/docker-compose.yml

• jaegertracing/jaeger-collector 1.43
• jaegertracing/jaeger-query 1.43
• jaegertracing/jaeger-cassandra-schema 1.43
• scylladb/scylla 5.1.7
• scylladb/scylla 5.1.7
• scylladb/scylla 5.1.7

dockerfile

cmd/agent/Dockerfile

cmd/all-in-one/Dockerfile

cmd/collector/Dockerfile

cmd/es-index-cleaner/Dockerfile

cmd/es-rollover/Dockerfile

cmd/ingester/Dockerfile

cmd/jaeger/Dockerfile

cmd/query/Dockerfile

cmd/remote-storage/Dockerfile

docker/base/Dockerfile

• alpine 3.20.0
• alpine 3.20.0

docker/debug/Dockerfile

• golang 1.22.4-alpine
• golang 1.22.4-alpine

plugin/storage/cassandra/Dockerfile

• cassandra 4.1

github-actions

.github/actions/setup-node.js/action.yml

• actions/setup-node v4.0.2@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c

.github/actions/upload-codecov/action.yml

• Wandalen/wretry.action v3.4.0

.github/workflows/ci-all-in-one-build.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/setup-go v5.0.1@cdcb36043654635271a94b9a6d1392de5bb323a7
• docker/setup-qemu-action v3.0.0@68827325e0b33c7199eb31dd4e31fbe9023e06e3

.github/workflows/ci-badger.yaml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/setup-go v5.0.1@cdcb36043654635271a94b9a6d1392de5bb323a7

.github/workflows/ci-build-binaries.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/setup-go v5.0.1@cdcb36043654635271a94b9a6d1392de5bb323a7

.github/workflows/ci-cassandra.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/setup-go v5.0.1@cdcb36043654635271a94b9a6d1392de5bb323a7

.github/workflows/ci-crossdock.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/setup-go v5.0.1@cdcb36043654635271a94b9a6d1392de5bb323a7
• docker/setup-qemu-action v3.0.0@68827325e0b33c7199eb31dd4e31fbe9023e06e3

.github/workflows/ci-docker-build.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/setup-go v5.0.1@cdcb36043654635271a94b9a6d1392de5bb323a7
• docker/setup-qemu-action v3.0.0@68827325e0b33c7199eb31dd4e31fbe9023e06e3

.github/workflows/ci-elasticsearch.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/setup-go v5.0.1@cdcb36043654635271a94b9a6d1392de5bb323a7
• docker/setup-qemu-action v3.0.0@68827325e0b33c7199eb31dd4e31fbe9023e06e3

.github/workflows/ci-grpc.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/setup-go v5.0.1@cdcb36043654635271a94b9a6d1392de5bb323a7

.github/workflows/ci-hotrod.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/setup-go v5.0.1@cdcb36043654635271a94b9a6d1392de5bb323a7
• docker/setup-qemu-action v3.0.0@68827325e0b33c7199eb31dd4e31fbe9023e06e3

.github/workflows/ci-kafka.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/setup-go v5.0.1@cdcb36043654635271a94b9a6d1392de5bb323a7

.github/workflows/ci-label-check.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6

.github/workflows/ci-lint-checks.yaml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/setup-python v5
• actions/setup-go v5.0.1@cdcb36043654635271a94b9a6d1392de5bb323a7

.github/workflows/ci-opensearch.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/setup-go v5.0.1@cdcb36043654635271a94b9a6d1392de5bb323a7
• docker/setup-qemu-action v3.0.0@68827325e0b33c7199eb31dd4e31fbe9023e06e3

.github/workflows/ci-protogen-tests.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/setup-go v5.0.1@cdcb36043654635271a94b9a6d1392de5bb323a7

.github/workflows/ci-release-testing.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/setup-go v5.0.1@cdcb36043654635271a94b9a6d1392de5bb323a7
• crazy-max/ghaction-import-gpg v6.1.0@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4
• docker/setup-qemu-action v3.0.0@68827325e0b33c7199eb31dd4e31fbe9023e06e3
• anchore/sbom-action v0.16.0@e8d2a6937ecead383dfe75190d104edd1f9c5751

.github/workflows/ci-release.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/setup-go v5.0.1@cdcb36043654635271a94b9a6d1392de5bb323a7
• crazy-max/ghaction-import-gpg v6.1.0@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4
• svenstaro/upload-release-action v2.7.0@1beeb572c19a9242f4361f4cee78f8e0d9aec5df
• docker/setup-qemu-action v3.0.0@68827325e0b33c7199eb31dd4e31fbe9023e06e3
• anchore/sbom-action v0.16.0@e8d2a6937ecead383dfe75190d104edd1f9c5751
• svenstaro/upload-release-action v2.7.0@1beeb572c19a9242f4361f4cee78f8e0d9aec5df

.github/workflows/ci-unit-tests-go-tip.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29

.github/workflows/ci-unit-tests.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/setup-go v5.0.1@cdcb36043654635271a94b9a6d1392de5bb323a7

.github/workflows/ci-validation-of-shell-scripts.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29

.github/workflows/codeql.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• github/codeql-action 9fdb3e49720b44c48891d036bb502feb25684276
• github/codeql-action 9fdb3e49720b44c48891d036bb502feb25684276
• github/codeql-action 9fdb3e49720b44c48891d036bb502feb25684276

.github/workflows/dependency-review.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/dependency-review-action v4.3.2@0c155c5e8556a497adf53f2c18edabf945ed8e70

.github/workflows/fossa.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/setup-go v5.0.1@cdcb36043654635271a94b9a6d1392de5bb323a7
• fossa-contrib/fossa-action cdc5065bcdee31a32e47d4585df72d66e8e941c2

.github/workflows/scorecard.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• ossf/scorecard-action v2.3.3@dc50aa9510b46c811795eb24b2f1ba02a914e534
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• github/codeql-action v3.25.6@9fdb3e49720b44c48891d036bb502feb25684276

.github/workflows/validate-dependabot-config.yml

• actions/checkout v4
• marocchino/validate-dependabot v3

gomod

go.mod

• go 1.21.0
• go 1.22.4
• github.com/HdrHistogram/hdrhistogram-go v1.1.2
• github.com/Shopify/sarama v1.37.2
• github.com/apache/thrift v0.20.0
• github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2@a9d515a09cc2
• github.com/bsm/sarama-cluster v2.1.13+incompatible
• github.com/crossdock/crossdock-go v0.0.0-20160816171116-049aabb0122b@049aabb0122b
• github.com/dgraph-io/badger/v3 v3.2103.5
• github.com/elastic/go-elasticsearch/v8 v8.14.0
• github.com/fsnotify/fsnotify v1.7.0
• github.com/go-logr/zapr v1.3.0
• github.com/gocql/gocql v1.3.2
• github.com/gogo/googleapis v1.4.1
• github.com/gogo/protobuf v1.3.2
• github.com/gorilla/handlers v1.5.1
• github.com/gorilla/mux v1.8.1
• github.com/grpc-ecosystem/go-grpc-middleware v1.4.0
• github.com/kr/pretty v0.3.1
• github.com/olivere/elastic v6.2.37+incompatible
• github.com/open-telemetry/opentelemetry-collector-contrib/connector/spanmetricsconnector v0.102.0
• github.com/open-telemetry/opentelemetry-collector-contrib/exporter/kafkaexporter v0.102.0
• github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/jaeger v0.102.0
• github.com/open-telemetry/opentelemetry-collector-contrib/receiver/jaegerreceiver v0.102.0
• github.com/open-telemetry/opentelemetry-collector-contrib/receiver/kafkareceiver v0.102.0
• github.com/open-telemetry/opentelemetry-collector-contrib/receiver/zipkinreceiver v0.102.0
• github.com/prometheus/client_golang v1.19.1
• github.com/prometheus/client_model v0.6.1
• github.com/prometheus/common v0.54.0
• github.com/soheilhy/cmux v0.1.5
• github.com/spf13/cobra v1.8.0
• github.com/spf13/pflag v1.0.5
• github.com/spf13/viper v1.19.0
• github.com/stretchr/testify v1.9.0
• github.com/uber/jaeger-client-go v2.30.0+incompatible
• github.com/xdg-go/scram v1.1.2
• go.opentelemetry.io/collector/component v0.102.1
• go.opentelemetry.io/collector/config/configgrpc v0.102.1
• go.opentelemetry.io/collector/config/confighttp v0.102.1
• go.opentelemetry.io/collector/config/configretry v0.102.1
• go.opentelemetry.io/collector/config/configtls v0.102.1
• go.opentelemetry.io/collector/confmap v0.102.1
• go.opentelemetry.io/collector/confmap/converter/expandconverter v0.102.1
• go.opentelemetry.io/collector/confmap/provider/envprovider v0.102.1
• go.opentelemetry.io/collector/confmap/provider/fileprovider v0.102.1
• go.opentelemetry.io/collector/confmap/provider/httpprovider v0.102.1
• go.opentelemetry.io/collector/confmap/provider/httpsprovider v0.102.1
• go.opentelemetry.io/collector/confmap/provider/yamlprovider v0.102.1
• go.opentelemetry.io/collector/connector v0.102.1
• go.opentelemetry.io/collector/connector/forwardconnector v0.102.1
• go.opentelemetry.io/collector/consumer v0.102.1
• go.opentelemetry.io/collector/exporter v0.102.1
• go.opentelemetry.io/collector/exporter/otlpexporter v0.102.1
• go.opentelemetry.io/collector/exporter/otlphttpexporter v0.102.1
• go.opentelemetry.io/collector/extension v0.102.1
• go.opentelemetry.io/collector/extension/ballastextension v0.102.1
• go.opentelemetry.io/collector/extension/zpagesextension v0.102.1
• go.opentelemetry.io/collector/otelcol v0.102.1
• go.opentelemetry.io/collector/pdata v1.9.0
• go.opentelemetry.io/collector/processor v0.102.1
• go.opentelemetry.io/collector/processor/batchprocessor v0.102.1
• go.opentelemetry.io/collector/processor/memorylimiterprocessor v0.102.1
• go.opentelemetry.io/collector/receiver v0.102.1
• go.opentelemetry.io/collector/receiver/otlpreceiver v0.102.1
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.52.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.52.0
• go.opentelemetry.io/otel v1.27.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.27.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.27.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.27.0
• go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.27.0
• go.opentelemetry.io/otel/metric v1.27.0
• go.opentelemetry.io/otel/sdk v1.27.0
• go.opentelemetry.io/otel/trace v1.27.0
• go.uber.org/automaxprocs v1.5.3
• go.uber.org/goleak v1.3.0
• go.uber.org/zap v1.27.0
• golang.org/x/net v0.26.0
• golang.org/x/sys v0.21.0
• google.golang.org/grpc v1.64.0
• google.golang.org/protobuf v1.34.2
• gopkg.in/yaml.v2 v2.4.0
• github.com/open-telemetry/opentelemetry-collector-contrib/extension/storage v0.102.0
• go.opentelemetry.io/collector/config/configauth v0.102.1
• go.opentelemetry.io/collector/exporter/debugexporter v0.102.1
• gopkg.in/yaml.v3 v3.0.1
• github.com/Shopify/sarama v1.33.0

internal/tools/go.mod

• go 1.22.3
• github.com/golangci/golangci-lint v1.55.2
• github.com/josephspurrier/goversioninfo v1.4.0
• github.com/vektra/mockery/v2 v2.43.2
• mvdan.cc/gofumpt v0.6.0

jsonnet-bundler

monitoring/jaeger-mixin/jsonnetfile.json

---

• Check this box to trigger a request for Renovate to run again on this repository