Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

See Config Migration PR: #227.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
nuget	OpenTracing

Abandoned Dependencies

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (2)

Datasource	Package	Last Updated
gomod	github.com/dennwc/varint	2019-06-16
nuget	StyleCop.Analyzers	2023-12-20

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update busybox:1.37.0-glibc docker digest to 3f9777e
• chore(deps): update grafana/pyroscope docker digest to d5d3818
• chore(deps): update debian docker tag to bullseye-20260316
• fix(deps): update module github.com/grafana/pyroscope/api to v1.3.2
• chore(deps): update dependency go to v1.26.1
• chore(deps): update softprops/action-gh-release action to v2.6.1
• fix(deps): update module github.com/testcontainers/testcontainers-go to v0.41.0
• chore(deps): update actions/setup-go action to v6
• chore(deps): update docker/login-action action to v4
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): pin alpine docker tag to de0eb0b
• chore(deps): update actions/setup-dotnet digest to a66eefa
• chore(deps): update actions/setup-go digest to 40f1582
• chore(deps): update debian:11 docker digest to 943d97f
• chore(deps): update grafana/grafana:latest docker digest to 8374923
• chore(deps): update grafana/shared-workflows/ action to
• chore(deps): update python:3.14 docker digest to ffebef4
• chore(deps): update dotnet monorepo (Microsoft.CodeAnalysis.CSharp.CodeStyle, dotnet-sdk)
• chore(deps): update actions/upload-artifact action to v7
• chore(deps): update debian docker tag to v13
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update alpine docker tag to v3.23
• chore(deps): update dependency opentelemetry to 1.15.0

Vulnerabilities

Important

0/3 CVEs have Renovate fixes.

gomod

itest/go.mod

github.com/docker/docker

• GHSA-6hwg-w5jg-9c6x
• GHSA-j249-ghv5-7mxv
• GHSA-qrqr-3x5j-2xw9

Detected Dependencies

docker-compose (1)

docker-compose-itest.yml (9)

• grafana/pyroscope sha256:0ad897bb457228c7d1133ce7004f83052e635be9daf4a7cc90364317637e9754 → [Updates: undefined]
• rideshare-app-glibc net8.0
• rideshare-app-glibc net7.0
• rideshare-app-glibc net6.0
• rideshare-app-glibc-otel net8.0
• rideshare-app-musl net8.0
• rideshare-app-musl net7.0
• rideshare-app-musl net6.0
• grafana/grafana latest@sha256:ba93c9d192e58b23e064c7f501d453426ccf4a85065bf25b705ab1e98602bfb1 → [Updates: latest]

dockerfile (5)

IntegrationTest/Dockerfile.load-generator (1)

• python 3.14@sha256:1c4c033d666001d84b5c4d85280af2c5a21a4ea1eb86c2fc06e3ef2f33fa6776 → [Updates: 3.14]

itest-with-otel.Dockerfile

itest.Dockerfile

Pyroscope.Dockerfile (2)

• debian 11@sha256:a50c3ed0200d2f58736c3bb02b4a9f174f3d6d3bd866f2f640375f1e82c61348 → [Updates: bullseye-20260316, trixie-20260316, 11]
• busybox 1.37.0-glibc@sha256:ba8e26a0e4dc1178f2c90ff8c4090e1ca351bf8f38b2be3052de194e7e2ad291 → [Updates: 1.37.0-glibc]

Pyroscope.musl.Dockerfile (2)

• alpine 3.18 → [Updates: 3.23, 3.18]
• busybox 1.37.0-musl@sha256:19b646668802469d968a05342a601e78da4322a414a7c09b1c9ee25165042138

github-actions (9)

.github/workflows/build_linux_profiler.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-dotnet 131b410979e0b49e2162c0718030257b22d6dc2c → [Updates: undefined]

.github/workflows/build_managed_helper.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-dotnet 131b410979e0b49e2162c0718030257b22d6dc2c → [Updates: undefined]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]

.github/workflows/build_tracing_packages.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-dotnet 131b410979e0b49e2162c0718030257b22d6dc2c → [Updates: undefined]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-dotnet 131b410979e0b49e2162c0718030257b22d6dc2c → [Updates: undefined]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]

.github/workflows/integration_test.yml (9)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v6, v5]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v6, v5]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v6, v5]
• go stable
• go stable
• go stable

.github/workflows/tag_linux.yml (11)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• grafana/shared-workflows 9be2f51d865bc51202190c8ca09c0382c9a2f7fa → [Updates: undefined]
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.0.0]
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b → [Updates: v2.6.1]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• grafana/shared-workflows 9be2f51d865bc51202190c8ca09c0382c9a2f7fa → [Updates: undefined]
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.0.0]
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b → [Updates: v2.6.1]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• grafana/shared-workflows 9be2f51d865bc51202190c8ca09c0382c9a2f7fa → [Updates: undefined]
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.0.0]

.github/workflows/tag_managed_helper.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-dotnet 131b410979e0b49e2162c0718030257b22d6dc2c → [Updates: undefined]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]
• grafana/shared-workflows 9be2f51d865bc51202190c8ca09c0382c9a2f7fa → [Updates: undefined]
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b → [Updates: v2.6.1]

.github/workflows/tag_tracing_opentelemetry_helper.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-dotnet 131b410979e0b49e2162c0718030257b22d6dc2c → [Updates: undefined]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]
• grafana/shared-workflows 9be2f51d865bc51202190c8ca09c0382c9a2f7fa → [Updates: undefined]
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b → [Updates: v2.6.1]

.github/workflows/tag_tracing_opentracing_helper.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-dotnet 131b410979e0b49e2162c0718030257b22d6dc2c → [Updates: undefined]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]
• grafana/shared-workflows 9be2f51d865bc51202190c8ca09c0382c9a2f7fa → [Updates: undefined]
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b → [Updates: v2.6.1]

.github/workflows/test_cpp_profiler.yml (1)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd

gomod (1)

itest/go.mod (7)

• go 1.24.6
• go 1.24.9 → [Updates: 1.26.1]
• connectrpc.com/connect v1.19.1
• github.com/dennwc/varint v1.0.0
• github.com/grafana/pyroscope/api v1.3.0 → [Updates: v1.3.2]
• github.com/stretchr/testify v1.11.1
• github.com/testcontainers/testcontainers-go v0.37.0 → [Updates: v0.41.0]

nuget (5)

global.json (1)

• dotnet-sdk 10.0.102 → [Updates: 10.0.201]

profiler/Directory.Build.props (1)

• StyleCop.Analyzers 1.2.0-beta.556

Pyroscope/Pyroscope.OpenTelemetry/Pyroscope.OpenTelemetry.csproj (1)

• OpenTelemetry 1.8.0 → [Updates: 1.15.0]

Pyroscope/Pyroscope.OpenTracing/Pyroscope.OpenTracing.csproj (1)

• OpenTracing 0.12.1

shared/CodeAnalysis.props (1)

• Microsoft.CodeAnalysis.CSharp.CodeStyle 5.0.0 → [Updates: 5.3.0]

regex (2)

Pyroscope.Dockerfile (1)

• openssl/openssl 3.5.5 → [Updates: 3.6.1]

Pyroscope.musl.Dockerfile (1)

• openssl/openssl 3.5.5 → [Updates: 3.6.1]

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.