Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update common, image, and storage deps to 7527127 (go.podman.io/common, go.podman.io/image/v5, go.podman.io/storage)
• fix(deps): update github.com/hugelgupf/p9 digest to ba5af0b
• fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.2
• chore(deps): update dependency openapi-schema-validator to ~=0.8.1
• [skip-ci] Update GitHub Artifact Actions (major) (actions/download-artifact, actions/upload-artifact)
• 🔐 Create all rate-limited PRs at once 🔐

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• chore(deps): update module github.com/sigstore/fulcio to v1.8.5 [security]
• fix(deps): update module google.golang.org/grpc to v1.79.1
• fix(deps): update module github.com/kevinburke/ssh_config to v1.6.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module golang.org/x/crypto to v0.45.0 [security]
• chore(deps): update dependency pytest to v9.0.2
• fix(deps): update module github.com/containers/buildah to v1.43.0
• fix(deps): update module github.com/go-swagger/go-swagger to v0.33.1
• fix(deps): update module golang.org/x/net to v0.51.0
• [skip-ci] Update dessant/lock-threads action to v6
• fix(deps): update module github.com/checkpoint-restore/go-criu/v7 to v8
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update module github.com/containers/libhvee to v1

Detected Dependencies

docker-compose (13)

test/compose/cdi_device/docker-compose.yml

test/compose/disable_healthcheck/docker-compose.yml

test/compose/env_and_volume/docker-compose.yml

test/compose/etc_hosts/docker-compose.yml

test/compose/ipam_set_ip/docker-compose.yml

test/compose/mount_and_label/docker-compose.yml

test/compose/port_map_diff_port/docker-compose.yml

test/compose/simple_port_map/docker-compose.yml

test/compose/slirp4netns_opts/docker-compose.yml

test/compose/two_networks/docker-compose.yml

test/compose/update_network_mtu/docker-compose.yml

test/compose/uptwice_idempotent/docker-compose.yml

test/compose/uptwice/docker-compose.yml

dockerfile (37)

contrib/hello/Containerfile

contrib/validatepr/Containerfile

pkg/bindings/test/fixture/Containerfile

test/build/from-multiple-files/Dockerfile1.alpine

test/build/from-multiple-files/Dockerfile2.glob

test/build/from-multiple-files/Dockerfile2.withfrom

test/build/preserve-volumes/Dockerfile

test/build/volume-perms/Dockerfile

test/compose/env_and_volume/read/Dockerfile

test/compose/env_and_volume/write/Dockerfile

test/compose/images/podman-python/Containerfile

test/compose/mount_and_label/frontend/Dockerfile

test/compose/port_map_diff_port/frontend/Dockerfile

test/compose/simple_port_map/frontend/Dockerfile

test/compose/uptwice/Dockerfile

test/e2e/build/basicalpine/Containerfile

test/e2e/build/basicalpine/Containerfile.path

test/e2e/build/basicalpine/Containerfile.volume

test/e2e/build/basicalpine/Containerfile.with_label

test/e2e/build/basicrun/Containerfile

test/e2e/build/buildkit-mount/Containerfilecacheread

test/e2e/build/buildkit-mount/Containerfilecachewrite

test/e2e/build/cache/Dockerfilecacheread

test/e2e/build/cache/Dockerfilecachewrite

test/e2e/build/Containerfile.userns-auto

test/e2e/build/Containerfile.with-multiple-secret

test/e2e/build/Containerfile.with-platform

test/e2e/build/Containerfile.with-secret

test/e2e/build/containerignore-symlink/Dockerfile

test/e2e/build/envwithtab/Dockerfile

test/e2e/build/secret-verify-leak/Containerfile.with-secret-verify-leak

test/e2e/build/squash/Dockerfile.squash-a

test/e2e/build/squash/Dockerfile.squash-b

test/e2e/build/squash/Dockerfile.squash-c

test/e2e/build/workdir-symlink/Dockerfile

test/python/docker/build_labels/Dockerfile

test/testvol/Containerfile (1)

• docker.io/library/golang 1.26-alpine

github-actions (16)

.github/workflows/assign.yml

.github/workflows/check_cirrus_cron.yml (4)

• actions/checkout v6
• dawidd6/action-send-mail v3.12.0@2cea9617b09d79a095af21254fbcb7ae95903dde
• actions/upload-artifact v6 → [Updates: v7]
• dawidd6/action-send-mail v3.12.0@2cea9617b09d79a095af21254fbcb7ae95903dde

.github/workflows/cherry-pick.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/dev-bump.yml (2)

• actions/checkout v6
• actions/checkout v6

.github/workflows/first_contrib_cert_generator.yml (5)

• actions/github-script v8
• actions/checkout v6
• actions/setup-node v6
• actions/github-script v8
• actions/github-script v8

.github/workflows/issue_pr_lock.yml (3)

• actions/create-github-app-token v2
• dessant/lock-threads v5.0.1@1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771 → [Updates: v6.0.0]
• dawidd6/action-send-mail v3.12.0@2cea9617b09d79a095af21254fbcb7ae95903dde

.github/workflows/issue-labeler.yml (1)

• github/issue-labeler v3.4

.github/workflows/labeler.yml (1)

• actions/labeler v6

.github/workflows/mac-pkg.yml (3)

• actions/checkout v6
• actions/setup-go v6
• actions/upload-artifact v6 → [Updates: v7]

.github/workflows/machine-os-pr.yml (2)

• actions/checkout v6
• thollander/actions-comment-pull-request v3.0.1@24bffb9b452ba05a4f3f77933840a6a841d1b32b

.github/workflows/needs-info-labeler.yaml

.github/workflows/release-artifacts.yml (6)

• actions/checkout v6
• actions/setup-go v6
• actions/upload-artifact v6 → [Updates: v7]
• dawidd6/action-send-mail v3.12.0@2cea9617b09d79a095af21254fbcb7ae95903dde
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/release.yml (14)

• actions/checkout v6
• actions/setup-go v6
• actions/upload-artifact v6 → [Updates: v7]
• actions/checkout v6
• actions/setup-go v6
• actions/upload-artifact v6 → [Updates: v7]
• actions/checkout v6
• actions/download-artifact v7 → [Updates: v8]
• actions/setup-go v6
• r-lib/actions v2.11.4@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590
• actions/upload-artifact v6 → [Updates: v7]
• actions/checkout v6
• actions/download-artifact v7 → [Updates: v8]
• dawidd6/action-send-mail v3.12.0@2cea9617b09d79a095af21254fbcb7ae95903dde

.github/workflows/stale.yml (1)

• actions/stale v10

.github/workflows/update-podmanio.yml (2)

• actions/checkout v6
• ubuntu 24.04

.github/workflows/zizmor.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• zizmorcore/zizmor-action v0.5.0@0dce2577a4760a2749d8cfb7a84b7d5585ebcb7d
• ubuntu 24.04

gomod (2)

go.mod (73)

• go 1.24.6
• github.com/Microsoft/go-winio v0.6.2
• github.com/blang/semver/v4 v4.0.0
• github.com/checkpoint-restore/checkpointctl v1.5.0
• github.com/checkpoint-restore/go-criu/v7 v7.2.0 → [Updates: v8.2.0]
• github.com/containernetworking/plugins v1.9.0
• github.com/containers/buildah v1.42.1-0.20260216192603-e473f9d26ec6@e473f9d26ec6 → [Updates: v1.43.0]
• github.com/containers/gvisor-tap-vsock v0.8.8
• github.com/containers/libhvee v0.10.1-0.20250829163521-178d10e67860@178d10e67860 → [Updates: v1.10.1]
• github.com/containers/ocicrypt v1.2.1
• github.com/containers/psgo v1.10.0
• github.com/containers/winquit v1.1.0
• github.com/coreos/go-systemd/v22 v22.7.0
• github.com/crc-org/vfkit v0.6.3
• github.com/cyphar/filepath-securejoin v0.6.1
• github.com/digitalocean/go-qemu v0.0.0-20250212194115-ee9b0668d242@ee9b0668d242
• github.com/docker/distribution v2.8.3+incompatible
• github.com/docker/docker v28.5.2+incompatible
• github.com/docker/go-connections v0.6.0
• github.com/docker/go-plugins-helpers v0.0.0-20240701071450-45e2431495c8@45e2431495c8
• github.com/docker/go-units v0.5.0
• github.com/godbus/dbus/v5 v5.2.2
• github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510@e7afc7fbc510
• github.com/google/uuid v1.6.0
• github.com/gorilla/handlers v1.5.2
• github.com/gorilla/mux v1.8.1
• github.com/gorilla/schema v1.4.1
• github.com/hashicorp/go-multierror v1.1.1
• github.com/hugelgupf/p9 v0.3.1-0.20250420164440-abc96d20b308@abc96d20b308 → [Updates: v0.3.1-0.20250420164440-abc96d20b308]
• github.com/json-iterator/go v1.1.12
• github.com/kevinburke/ssh_config v1.5.0 → [Updates: v1.6.0]
• github.com/klauspost/pgzip v1.2.6
• github.com/linuxkit/virtsock v0.0.0-20241009230534-cb6a20cc0422@cb6a20cc0422
• github.com/mattn/go-shellwords v1.0.12
• github.com/mattn/go-sqlite3 v1.14.34
• github.com/mdlayher/vsock v1.2.1
• github.com/moby/docker-image-spec v1.3.1
• github.com/moby/sys/capability v0.4.0
• github.com/moby/sys/user v0.4.0
• github.com/moby/term v0.5.2
• github.com/nxadm/tail v1.4.11
• github.com/onsi/ginkgo/v2 v2.28.1
• github.com/onsi/gomega v1.39.1
• github.com/opencontainers/cgroups v0.0.6
• github.com/opencontainers/go-digest v1.0.0
• github.com/opencontainers/image-spec v1.1.1
• github.com/opencontainers/runtime-spec v1.3.0
• github.com/opencontainers/runtime-tools v0.9.1-0.20251205004911-5e639034dcdc@5e639034dcdc
• github.com/opencontainers/selinux v1.13.1
• github.com/openshift/imagebuilder v1.2.20
• github.com/rootless-containers/rootlesskit/v2 v2.3.6
• github.com/shirou/gopsutil/v4 v4.26.1 → [Updates: v4.26.2]
• github.com/sirupsen/logrus v1.9.4
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/stretchr/testify v1.11.1
• github.com/vbauerster/mpb/v8 v8.12.0
• github.com/vishvananda/netlink v1.3.1
• go.podman.io/common v0.67.1-0.20260217150212-026c3538f3d1@026c3538f3d1 → [Updates: v0.67.1-0.20260217150212-026c3538f3d1]
• go.podman.io/image/v5 v5.39.2-0.20260217150212-026c3538f3d1@026c3538f3d1 → [Updates: v5.39.2-0.20260217150212-026c3538f3d1]
• go.podman.io/storage v1.62.1-0.20260217150212-026c3538f3d1@026c3538f3d1 → [Updates: v1.62.1-0.20260217150212-026c3538f3d1]
• golang.org/x/crypto v0.48.0
• golang.org/x/net v0.50.0 → [Updates: v0.51.0]
• golang.org/x/sync v0.19.0
• golang.org/x/sys v0.41.0
• golang.org/x/term v0.40.0
• google.golang.org/grpc v1.79.0 → [Updates: v1.79.1]
• google.golang.org/protobuf v1.36.11
• gopkg.in/inf.v0 v0.9.1
• gopkg.in/yaml.v3 v3.0.1
• sigs.k8s.io/yaml v1.6.0
• tags.cncf.io/container-device-interface v1.1.0
• github.com/sigstore/fulcio v1.8.1 → [Updates: v1.8.5]

test/tools/go.mod (5)

• go 1.22.0
• github.com/cpuguy83/go-md2man/v2 v2.0.7
• github.com/go-swagger/go-swagger v0.32.3 → [Updates: v0.33.1]
• github.com/vbatts/git-validation v1.2.2
• golang.org/x/crypto v0.31.0 → [Updates: v0.45.0]

pip_requirements (1)

test/apiv2/python/requirements.txt (8)

• requests-mock ~=1.12.1
• requests ~=2.32.3
• setuptools ~=82.0.0
• python-dateutil ~=2.9.0
• PyYAML ~=6.0.0
• openapi-schema-validator ~=0.7.1 → [Updates: ~=0.8.1]
• pytest ==9.0.1 → [Updates: ==9.0.2]
• docker ~=7.1.0

quadlet (148)

test/e2e/quadlet/a.network.reuse.container

test/e2e/quadlet/a.network.reuse.name.container

test/e2e/quadlet/all-tags.image

test/e2e/quadlet/annotation.container

test/e2e/quadlet/apparmor.container

test/e2e/quadlet/arch-os.image

test/e2e/quadlet/arch.image

test/e2e/quadlet/artifact-mount.container

test/e2e/quadlet/auth.image

test/e2e/quadlet/autoupdate.container

test/e2e/quadlet/basepodman.container

test/e2e/quadlet/basic.container

test/e2e/quadlet/basic.image

test/e2e/quadlet/build-not-found.quadlet.volume

test/e2e/quadlet/build.quadlet.servicename.volume

test/e2e/quadlet/build.quadlet.volume

test/e2e/quadlet/capabilities.container

test/e2e/quadlet/capabilities2.container

test/e2e/quadlet/certs.image

test/e2e/quadlet/cgroups-mode.container

test/e2e/quadlet/comment-with-continuation.container

test/e2e/quadlet/containersconfmodule.container

test/e2e/quadlet/containersconfmodule.image

test/e2e/quadlet/creds.image

test/e2e/quadlet/decrypt.image

test/e2e/quadlet/dependent.container

test/e2e/quadlet/dependent.error.container

test/e2e/quadlet/dependent.image

test/e2e/quadlet/devices.container

test/e2e/quadlet/disableselinux.container

test/e2e/quadlet/dns-options.container

test/e2e/quadlet/dns-search.container

test/e2e/quadlet/dns.container

test/e2e/quadlet/entrypoint.container

test/e2e/quadlet/env-file.container

test/e2e/quadlet/env-host-false.container

test/e2e/quadlet/env-host.container

test/e2e/quadlet/env.container

test/e2e/quadlet/escapes.container

test/e2e/quadlet/exec-unsupported-escape.container

test/e2e/quadlet/exec.container

test/e2e/quadlet/globalargs.container

test/e2e/quadlet/globalargs.image

test/e2e/quadlet/group-add.container

test/e2e/quadlet/group.container

test/e2e/quadlet/health.container

test/e2e/quadlet/host.container

test/e2e/quadlet/hostname.container

test/e2e/quadlet/httpproxy-false.container

test/e2e/quadlet/httpproxy-true.container

test/e2e/quadlet/idmapping-with-remap.container

test/e2e/quadlet/idmapping.container

test/e2e/quadlet/image.container

test/e2e/quadlet/image.volume

test/e2e/quadlet/install.container

test/e2e/quadlet/ip.container

test/e2e/quadlet/label-unsupported-escape.container

test/e2e/quadlet/label.container

test/e2e/quadlet/line-continuation-whitespace.container

test/e2e/quadlet/logdriver.container

test/e2e/quadlet/logopt.container

test/e2e/quadlet/mask.container

test/e2e/quadlet/memory.container

test/e2e/quadlet/merged-override.container

test/e2e/quadlet/merged.container

test/e2e/quadlet/mount-source-missing.container

test/e2e/quadlet/mount.container

test/e2e/quadlet/mount.servicename.container

test/e2e/quadlet/name.container

test/e2e/quadlet/nestedselinux.container

test/e2e/quadlet/network-alias.container

test/e2e/quadlet/network.container

test/e2e/quadlet/network.quadlet.container

test/e2e/quadlet/network.quadlet.servicename.container

test/e2e/quadlet/network.reuse.container

test/e2e/quadlet/network.reuse.name.container

test/e2e/quadlet/no_deps.container

test/e2e/quadlet/no_deps.image

test/e2e/quadlet/notify-healthy.container

test/e2e/quadlet/notify.container

test/e2e/quadlet/oneshot.container

test/e2e/quadlet/os.image

test/e2e/quadlet/other-sections.container

test/e2e/quadlet/pids-limit.container

test/e2e/quadlet/pod.non-quadlet.container

test/e2e/quadlet/pod.not-found.container

test/e2e/quadlet/podmanargs.container

test/e2e/quadlet/policy.image

test/e2e/quadlet/ports_ipv6.container

test/e2e/quadlet/ports.container

test/e2e/quadlet/pull.container

test/e2e/quadlet/quotes.container

test/e2e/quadlet/readonly-notmpfs.container

test/e2e/quadlet/readonly-tmpfs.container

test/e2e/quadlet/readonly.container

test/e2e/quadlet/readwrite-notmpfs.container

test/e2e/quadlet/reloadboth.container

test/e2e/quadlet/reloadcmd-unsupported-escape.container

test/e2e/quadlet/reloadcmd.container

test/e2e/quadlet/reloadsignal.container

test/e2e/quadlet/remap-auto.container

test/e2e/quadlet/remap-auto2.container

test/e2e/quadlet/remap-keep-id.container

test/e2e/quadlet/remap-keep-id2.container

test/e2e/quadlet/remap-manual.container

test/e2e/quadlet/retry.container

test/e2e/quadlet/retry.image

test/e2e/quadlet/seccomp.container

test/e2e/quadlet/secrets.container

test/e2e/quadlet/selinux.container

test/e2e/quadlet/service-dynamicuser.container

test/e2e/quadlet/service-dynamicuser.image

test/e2e/quadlet/service-group.container

test/e2e/quadlet/service-name.container

test/e2e/quadlet/service-name.image

test/e2e/quadlet/service-user.container

test/e2e/quadlet/shmsize.container

test/e2e/quadlet/shortname.container

test/e2e/quadlet/startwithpod_no.container

test/e2e/quadlet/startwithpod_yes.container

test/e2e/quadlet/startwithpod@.container

test/e2e/quadlet/startwithpod@foo.container

test/e2e/quadlet/stopsignal.container

test/e2e/quadlet/stoptimeout.container

test/e2e/quadlet/subidmapping-with-remap.container

test/e2e/quadlet/subidmapping.container

test/e2e/quadlet/sysctl.container

test/e2e/quadlet/template-dependency@.container

test/e2e/quadlet/template@.container

test/e2e/quadlet/template@instance.container

test/e2e/quadlet/test_subdir/mysleep.container

test/e2e/quadlet/test_subdir/sub_one/mysleep_1.container

test/e2e/quadlet/test_subdir/sub_two/mysleep_2.container

test/e2e/quadlet/timezone.container

test/e2e/quadlet/tls-verify.image

test/e2e/quadlet/ulimit.container

test/e2e/quadlet/unit-after-override.container

test/e2e/quadlet/unit-after-override.image

test/e2e/quadlet/unmask.container

test/e2e/quadlet/user.container

test/e2e/quadlet/userns-with-remap.container

test/e2e/quadlet/userns.container

test/e2e/quadlet/variant.image

test/e2e/quadlet/volatiletmp-readonly.container

test/e2e/quadlet/volatiletmp-readwrite.container

test/e2e/quadlet/volume.container

test/e2e/quadlet/volume.servicename.container

test/e2e/quadlet/workingdir.container

regex (2)

.cirrus.yml (1)

• containers/automation_images 20251211t152018z-f43f42d14

Makefile (1)

• golangci/golangci-lint 2.10.1

renovate-config-presets (1)

.github/renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository