Dependency Dashboard

[forking-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): update github-actions deps (docker/setup-qemu-action, step-security/harden-runner)

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• fix(deps): update module github.com/bsm/sarama-cluster to v2.1.15+incompatible
• fix(deps): update module github.com/shopify/sarama to v1.45.0

Detected dependencies

docker-compose

cmd/tracegen/docker-compose.yml

crossdock/docker-compose.yml

docker-compose/cassandra/v4/docker-compose.yaml

• cassandra 4.1

docker-compose/cassandra/v5/docker-compose.yaml

• cassandra 5.0

docker-compose/elasticsearch/v6/docker-compose.yml

• docker.elastic.co/elasticsearch/elasticsearch-oss 6.8.23

docker-compose/elasticsearch/v7/docker-compose.yml

• docker.elastic.co/elasticsearch/elasticsearch 7.17.22

docker-compose/elasticsearch/v8/docker-compose.yml

• docker.elastic.co/elasticsearch/elasticsearch 8.17.0

docker-compose/kafka/docker-compose.yml

• index.docker.io/bitnami/kafka 3.7.0

docker-compose/kafka/v3/docker-compose.yml

• bitnami/kafka 3.9.0

docker-compose/monitor/docker-compose-v1.yml

• yurishkuro/microsim v0.5.0

docker-compose/monitor/docker-compose.yml

• yurishkuro/microsim v0.5.0
• prom/prometheus v3.2.0

docker-compose/opensearch/v1/docker-compose.yml

• opensearchproject/opensearch 1.3.17

docker-compose/opensearch/v2/docker-compose.yml

• opensearchproject/opensearch 2.19.0

docker-compose/scylladb/docker-compose.yml

• scylladb/scylla 5.4.7
• scylladb/scylla 5.4.7
• scylladb/scylla 5.4.7

docker-compose/tail-sampling/docker-compose.yml

dockerfile

cmd/agent/Dockerfile

cmd/all-in-one/Dockerfile

cmd/collector/Dockerfile

cmd/es-index-cleaner/Dockerfile

cmd/es-rollover/Dockerfile

cmd/ingester/Dockerfile

cmd/jaeger/Dockerfile

cmd/query/Dockerfile

cmd/remote-storage/Dockerfile

docker/base/Dockerfile

• alpine 3.21.3
• alpine 3.21.3

docker/debug/Dockerfile

• golang 1.24.0-alpine
• golang 1.24.0-alpine

internal/storage/v1/cassandra/Dockerfile

• cassandra 5.0

github-actions

.github/actions/setup-go-tip/action.yml

• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34

.github/actions/setup-node.js/action.yml

• actions/setup-node v4.2.0@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a

.github/actions/upload-codecov/action.yml

• Wandalen/wretry.action v3.8.0

.github/actions/verify-metrics-snapshot/action.yaml

• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/cache 1bd1e32a3bdc45362d1e726936510720a7c30a57
• actions/cache 1bd1e32a3bdc45362d1e726936510720a7c30a57
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08

.github/workflows/ci-build-binaries.yml

• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34

.github/workflows/ci-crossdock.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• docker/setup-qemu-action v3.3.0@53851d14592bedcffcf25ea515637cff71ef929a

.github/workflows/ci-docker-all-in-one.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• docker/setup-qemu-action v3.3.0@53851d14592bedcffcf25ea515637cff71ef929a

.github/workflows/ci-docker-build.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• docker/setup-qemu-action v3.3.0@53851d14592bedcffcf25ea515637cff71ef929a

.github/workflows/ci-docker-hotrod.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• docker/setup-qemu-action v3.3.0@53851d14592bedcffcf25ea515637cff71ef929a
• azure/setup-kubectl v4
• imranismail/setup-kustomize v2
• helm/kind-action v1

.github/workflows/ci-e2e-badger.yaml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34

.github/workflows/ci-e2e-cassandra.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34

.github/workflows/ci-e2e-elasticsearch.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• docker/setup-qemu-action v3.3.0@53851d14592bedcffcf25ea515637cff71ef929a

.github/workflows/ci-e2e-grpc.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34

.github/workflows/ci-e2e-kafka.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34

.github/workflows/ci-e2e-memory.yaml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34

.github/workflows/ci-e2e-opensearch.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• docker/setup-qemu-action v3.3.0@53851d14592bedcffcf25ea515637cff71ef929a

.github/workflows/ci-e2e-spm.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34

.github/workflows/ci-e2e-tailsampling-processor.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34

.github/workflows/ci-lint-checks.yaml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-python v5.4.0@42375524e23c412d93fb67b49958b491fce71c38
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57
• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57

.github/workflows/ci-lint-dependabot-config.yml

• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• marocchino/validate-dependabot v3.0.0@d8ae5c0d03dd75fbd0ad5f8ab4ba8101ebbd4b37

.github/workflows/ci-release.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• crazy-max/ghaction-import-gpg v6.2.0@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5
• svenstaro/upload-release-action 2.9.0@04733e069f2d7f7f0b4aebc4fbdbce8613b03ccd
• docker/setup-qemu-action v3.3.0@53851d14592bedcffcf25ea515637cff71ef929a
• anchore/sbom-action v0.18.0@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0
• svenstaro/upload-release-action 2.9.0@04733e069f2d7f7f0b4aebc4fbdbce8613b03ccd

.github/workflows/ci-unit-tests-go-tip.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938

.github/workflows/ci-unit-tests.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34

.github/workflows/codeql.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• github/codeql-action v3
• github/codeql-action v3
• github/codeql-action v3

.github/workflows/dco_merge_group.yml

.github/workflows/dependency-review.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/dependency-review-action v4.5.0@3b139cfc5fae8b618d3eae3675e383bb1769c019

.github/workflows/fossa.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• fossa-contrib/fossa-action v3.0.0@cdc5065bcdee31a32e47d4585df72d66e8e941c2

.github/workflows/label-check.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7

.github/workflows/scorecard.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.0@d632683dd7b4114ad314bca15554477dd762a938
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• github/codeql-action v3.28.0@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169

gomod

docker/debug/go.mod

• go 1.24.0
• github.com/go-delve/delve v1.24.0

go.mod

• go 1.23.7
• go 1.24.0
• github.com/HdrHistogram/hdrhistogram-go v1.1.2
• github.com/Shopify/sarama v1.37.2
• github.com/apache/thrift v0.21.0
• github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2@a9d515a09cc2
• github.com/bsm/sarama-cluster v2.1.13+incompatible
• github.com/crossdock/crossdock-go v0.0.0-20160816171116-049aabb0122b@049aabb0122b
• github.com/dgraph-io/badger/v4 v4.5.1
• github.com/elastic/go-elasticsearch/v8 v8.17.1
• github.com/fsnotify/fsnotify v1.8.0
• github.com/go-logr/zapr v1.3.0
• github.com/gocql/gocql v1.7.0
• github.com/gogo/protobuf v1.3.2
• github.com/gorilla/handlers v1.5.2
• github.com/gorilla/mux v1.8.1
• github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0
• github.com/jaegertracing/jaeger-idl v0.5.0
• github.com/kr/pretty v0.3.1
• github.com/olivere/elastic v6.2.37+incompatible
• github.com/open-telemetry/opentelemetry-collector-contrib/connector/spanmetricsconnector v0.120.1
• github.com/open-telemetry/opentelemetry-collector-contrib/exporter/kafkaexporter v0.120.1
• github.com/open-telemetry/opentelemetry-collector-contrib/exporter/prometheusexporter v0.120.1
• github.com/open-telemetry/opentelemetry-collector-contrib/extension/healthcheckv2extension v0.120.1
• github.com/open-telemetry/opentelemetry-collector-contrib/extension/storage v0.120.1
• github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/jaeger v0.120.1
• github.com/open-telemetry/opentelemetry-collector-contrib/processor/attributesprocessor v0.120.1
• github.com/open-telemetry/opentelemetry-collector-contrib/processor/tailsamplingprocessor v0.120.1
• github.com/open-telemetry/opentelemetry-collector-contrib/receiver/jaegerreceiver v0.120.1
• github.com/open-telemetry/opentelemetry-collector-contrib/receiver/kafkareceiver v0.120.1
• github.com/open-telemetry/opentelemetry-collector-contrib/receiver/zipkinreceiver v0.120.1
• github.com/prometheus/client_golang v1.21.0
• github.com/prometheus/client_model v0.6.1
• github.com/prometheus/common v0.62.0
• github.com/spf13/cobra v1.9.1
• github.com/spf13/pflag v1.0.6
• github.com/spf13/viper v1.19.0
• github.com/stretchr/testify v1.10.0
• github.com/uber/jaeger-client-go v2.30.0+incompatible
• github.com/xdg-go/scram v1.1.2
• go.opentelemetry.io/collector/component v0.120.0
• go.opentelemetry.io/collector/component/componentstatus v0.120.0
• go.opentelemetry.io/collector/component/componenttest v0.120.0
• go.opentelemetry.io/collector/config/configauth v0.120.0
• go.opentelemetry.io/collector/config/configgrpc v0.120.0
• go.opentelemetry.io/collector/config/confighttp v0.120.0
• go.opentelemetry.io/collector/config/confighttp/xconfighttp v0.120.0
• go.opentelemetry.io/collector/config/configretry v1.26.0
• go.opentelemetry.io/collector/config/configtls v1.26.0
• go.opentelemetry.io/collector/confmap v1.26.0
• go.opentelemetry.io/collector/confmap/provider/envprovider v1.26.0
• go.opentelemetry.io/collector/confmap/provider/fileprovider v1.26.0
• go.opentelemetry.io/collector/confmap/provider/httpprovider v1.26.0
• go.opentelemetry.io/collector/confmap/provider/httpsprovider v1.26.0
• go.opentelemetry.io/collector/confmap/provider/yamlprovider v1.26.0
• go.opentelemetry.io/collector/connector v0.120.0
• go.opentelemetry.io/collector/connector/forwardconnector v0.120.0
• go.opentelemetry.io/collector/consumer v1.26.0
• go.opentelemetry.io/collector/consumer/consumertest v0.120.0
• go.opentelemetry.io/collector/exporter v0.120.0
• go.opentelemetry.io/collector/exporter/exportertest v0.120.0
• go.opentelemetry.io/collector/exporter/nopexporter v0.120.0
• go.opentelemetry.io/collector/exporter/otlpexporter v0.120.0
• go.opentelemetry.io/collector/exporter/otlphttpexporter v0.120.0
• go.opentelemetry.io/collector/extension v0.120.0
• go.opentelemetry.io/collector/extension/zpagesextension v0.120.0
• go.opentelemetry.io/collector/featuregate v1.26.0
• go.opentelemetry.io/collector/otelcol v0.120.0
• go.opentelemetry.io/collector/pdata v1.26.0
• go.opentelemetry.io/collector/pipeline v0.120.0
• go.opentelemetry.io/collector/processor v0.120.0
• go.opentelemetry.io/collector/processor/batchprocessor v0.120.0
• go.opentelemetry.io/collector/processor/memorylimiterprocessor v0.120.0
• go.opentelemetry.io/collector/processor/processortest v0.120.0
• go.opentelemetry.io/collector/receiver v0.120.0
• go.opentelemetry.io/collector/receiver/nopreceiver v0.120.0
• go.opentelemetry.io/collector/receiver/otlpreceiver v0.120.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.59.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0
• go.opentelemetry.io/contrib/samplers/jaegerremote v0.28.0
• go.opentelemetry.io/otel v1.34.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.34.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.34.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.34.0
• go.opentelemetry.io/otel/exporters/prometheus v0.56.0
• go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.34.0
• go.opentelemetry.io/otel/metric v1.34.0
• go.opentelemetry.io/otel/sdk v1.34.0
• go.opentelemetry.io/otel/sdk/metric v1.34.0
• go.opentelemetry.io/otel/trace v1.34.0
• go.uber.org/automaxprocs v1.6.0
• go.uber.org/goleak v1.3.0
• go.uber.org/zap v1.27.0
• golang.org/x/net v0.35.0
• golang.org/x/sys v0.30.0
• google.golang.org/grpc v1.70.0
• google.golang.org/protobuf v1.36.5
• gopkg.in/yaml.v3 v3.0.1
• go.opentelemetry.io/collector/client v1.26.0
• go.opentelemetry.io/collector/config/confignet v1.26.0
• go.opentelemetry.io/collector/config/configopaque v1.26.0
• go.opentelemetry.io/collector/confmap/xconfmap v0.120.0
• go.opentelemetry.io/collector/exporter/debugexporter v0.120.0
• go.opentelemetry.io/collector/extension/extensioncapabilities v0.120.0
• go.opentelemetry.io/proto/otlp v1.5.0
• github.com/Shopify/sarama v1.33.0

internal/tools/go.mod

• go 1.24.0
• github.com/golangci/golangci-lint v1.64.5
• github.com/josephspurrier/goversioninfo v1.4.1
• github.com/vektra/mockery/v2 v2.52.3
• mvdan.cc/gofumpt v0.7.0

jsonnet-bundler

monitoring/jaeger-mixin/jsonnetfile.json

---

• Check this box to trigger a request for Renovate to run again on this repository