Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency bazel_features to v1.47.1
• Update dependency googleapis to v0.0.0-20260514-1dbb1a14
• Update dependency hermetic_launcher to v0.0.8
• Update bazel-contrib/.github action to v7.6.0
• Update dependency requests to v2.34.2
• Update dependency testcontainers to v4.14.2
• Update dependency wrapt to v2.2.0
• Update dependency certifi to v2026
• Update dependency packaging to v26
• Update dependency platforms to v1.1.0
• Update dependency protobuf to v35
• Update dependency rules_python to v2.0.1
• Update module cloud.google.com/go/longrunning to v1
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (docker package mcr.microsoft.com/windows/nanoserver).

Files affected: e2e/generic/MODULE.bazel

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency idna to v3.15 [SECURITY]
• Update dependency urllib3 to v2.7.0 [SECURITY]
• Update container images (alpine, debian, distroless_cc, distroless_static, envoy, neo4j, nginx, ubuntu)
• Update dependency aspect_rules_py to v1.11.5
• Update dependency aspect_rules_js to v3.1.2
• Update dependency bazel to v9.1.0
• Update dependency bazel_skylib to v1.9.0
• Update dependency gazelle to v0.51.0
• Update dependency protobuf to v34.1
• Update dependency rules_go to v0.60.0
• Update dependency tar.bzl to v0.10.4
• Update Go dependencies (cloud.google.com/go/longrunning, github.com/aws/aws-sdk-go-v2/service/s3, github.com/containerd/containerd/api, github.com/google/go-containerregistry, golang.org/x/term, google.golang.org/genproto/googleapis/api, google.golang.org/genproto/googleapis/bytestream, google.golang.org/genproto/googleapis/rpc, google.golang.org/grpc)
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update github.com/malt3/go-containerregistry digest to f80cb9a
• Update dependency charset-normalizer to v3.4.7
• Update dependency certifi to v2025.11.12
• Update dependency pygments to v2.20.0
• Update dependency rules_python to v1.9.0

Detected Dependencies

bazel (1)

img/dependencies.bzl (5)

• bazel_skylib 1.7.1 → [Updates: 1.9.0]
• platforms 0.0.11 → [Updates: 1.1.0]
• package_metadata v0.0.6
• bazel_features v1.47.0 → [Updates: v1.47.1]
• rules_runfiles_group v0.0.1-rc.3

bazel-module (10)

e2e/cc/MODULE.bazel (4)

• bazel_skylib 1.8.1 → [Updates: 1.9.0]
• platforms 0.0.11 → [Updates: 1.1.0]
• rules_cc 0.2.18
• distroless_cc nonroot@sha256:2575808fe33e2a728348040ef2fd6757b0200a73ca8daebd0c258e2601e76c6d → [Updates: nonroot]

e2e/cc/toolchain.MODULE.bazel (2)

• hermetic_cc_toolchain 4.1.0
• toolchains_llvm 1.7.0

e2e/generic/MODULE.bazel (16)

• bazel_skylib 1.7.1 → [Updates: 1.9.0]
• container_structure_test 1.22.1
• platforms 0.0.11 → [Updates: 1.1.0]
• rules_distroless 0.8.0
• rules_pkg 1.2.0
• rules_python 2.0.0 → [Updates: 2.0.1]
• rules_runfiles_group 0.0.1-rc.5
• rules_shell 0.8.0
• tar.bzl 0.7.0 → [Updates: 0.10.4]
• alpine 3.23@sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375 → [Updates: 3.23]
• cuda 13.0.0-tensorrt-runtime-ubuntu24.04@sha256:198208c45877a84c8fb35a06956e7fbef4ffabfa36f9c82148dc7bac454ba02a
• envoy v1.36.3@sha256:d68fc27a15a17ae3b13df8c8631523a2fe1192b39ec867dffe870b666c55c2dd → [Updates: v1.38.0]
• neo4j 5.26.18-ubi9@sha256:5bd040cfe84b953a893c943cf3be4e4dc3b2758c154c192a6196de9d1e31b11b → [Updates: 5.26.24-ubi9]
• distroless_static sha256:3f2b64ef97bd285e36132c684e6b2ae8f2723293d09aae046196cca64251acac → [Updates: undefined]
• nanoserver sha256:4bfc3ec32a8b9bb5e7a182440c517b0706267d88fda77b54acddf819920400ad
• nginx sha256:029d4461bd98f124e531380505ceea2072418fdf28752aa73b7b273ba3048903 → [Updates: undefined]

e2e/go/MODULE.bazel (2)

• rules_go 0.59.0 → [Updates: 0.60.0]
• bazel_skylib 1.8.1 → [Updates: 1.9.0]

e2e/js/MODULE.bazel (6)

• aspect_bazel_lib 2.22.5
• aspect_rules_js 3.0.3 → [Updates: 3.1.2]
• bazel_skylib 1.8.1 → [Updates: 1.9.0]
• platforms 0.0.11 → [Updates: 1.1.0]
• rules_nodejs 6.7.4
• debian latest@sha256:0d01188e8dd0ac63bf155900fad49279131a876a1ea7fac917c62e87ccb2732d → [Updates: latest]

e2e/python/MODULE.bazel (6)

• rules_python 1.8.3 → [Updates: 1.9.0, 2.0.1]
• aspect_bazel_lib 2.22.5
• aspect_rules_py 1.11.2 → [Updates: 1.11.5]
• bazel_skylib 1.8.1 → [Updates: 1.9.0]
• platforms 0.0.11 → [Updates: 1.1.0]
• ubuntu latest@sha256:c35e29c9450151419d9448b0fd75374fec4fff364a27f176fb458d472dfc9e54 → [Updates: latest]

e2e/sbom/MODULE.bazel (4)

• bazel_skylib 1.7.1 → [Updates: 1.9.0]
• package_metadata 0.0.10
• platforms 0.0.11 → [Updates: 1.1.0]
• alpine 3.23@sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375 → [Updates: 3.23]

img_tool/MODULE.bazel (8)

• rules_img 0.3.11
• bazel_lib 3.3.1
• bazel_skylib 1.9.0
• gazelle 0.50.0 → [Updates: 0.51.0]
• googleapis 0.0.0-20260325-8b491c86 → [Updates: 0.0.0-20260514-1dbb1a14]
• platforms 1.1.0
• protobuf 34.1 → [Updates: 35.0]
• rules_go 0.60.0

MODULE.bazel (20)

• bazel_features 1.47.0 → [Updates: 1.47.1]
• bazel_skylib 1.9.0
• platforms 1.0.0 → [Updates: 1.1.0]
• hermetic_launcher 0.0.5 → [Updates: 0.0.8]
• package_metadata 0.0.10
• rules_runfiles_group 0.0.1-rc.5
• aspect_bazel_lib 2.22.5
• bazel_lib 3.3.1
• bazel_skylib_gazelle_plugin 1.9.0
• buildifier_prebuilt 8.5.1.2
• gazelle 0.47.0 → [Updates: 0.51.0]
• protobuf 34.0.bcr.1 → [Updates: 34.1, 35.0]
• rules_android 0.7.2
• rules_bazel_integration_test 0.37.1
• rules_go 0.60.0
• rules_img_pull_tool 0.3.11
• rules_img_tool 0.3.11
• rules_pkg 1.2.0
• rules_python 2.0.0 → [Updates: 2.0.1]
• stardoc 0.8.1

pull_tool/MODULE.bazel (4)

• rules_img 0.3.11
• bazel_skylib 1.9.0
• gazelle 0.50.0 → [Updates: 0.51.0]
• rules_go 0.60.0

bazelisk (1)

.bazelversion (1)

• bazel 9.0.2 → [Updates: 9.1.0]

github-actions (3)

.github/workflows/ci.yml (7)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• bazel-contrib/setup-bazel 0.19.0@c5acdfb288317d0b5c0bbd7a396a3dc868bb0f86
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• bazel-contrib/setup-bazel 0.19.0@c5acdfb288317d0b5c0bbd7a396a3dc868bb0f86
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• bazel-contrib/setup-bazel 0.19.0@c5acdfb288317d0b5c0bbd7a396a3dc868bb0f86
• ubuntu 24.04

.github/workflows/publish.yaml (1)

• bazel-contrib/publish-to-bcr v1.2.0

.github/workflows/release.yaml (2)

• bazel-contrib/.github v7.4.0 → [Updates: v7.6.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd

gomod (2)

img_tool/go.mod (23)

• go 1.26.1
• cloud.google.com/go/longrunning v0.12.0 → [Updates: v0.13.0, v1.0.0]
• github.com/aws/aws-sdk-go-v2 v1.41.7
• github.com/aws/aws-sdk-go-v2/config v1.32.17
• github.com/aws/aws-sdk-go-v2/service/s3 v1.100.1 → [Updates: v1.101.0]
• github.com/bazelbuild/rules_go v0.60.0
• github.com/containerd/containerd/api v1.11.0 → [Updates: v1.11.1]
• github.com/containerd/platforms v1.0.0-rc.4
• github.com/containerd/stargz-snapshotter/estargz v0.18.2
• github.com/google/uuid v1.6.0
• github.com/jedib0t/go-pretty/v6 v6.7.10
• github.com/klauspost/compress v1.18.6
• github.com/klauspost/pgzip v1.2.6
• github.com/malt3/go-containerregistry v0.0.0-20260417112622-6e740c37a969@6e740c37a969 → [Updates: v0.0.0-20260417112622-6e740c37a969]
• github.com/opencontainers/go-digest v1.0.0
• github.com/opencontainers/image-spec v1.1.1
• golang.org/x/sync v0.20.0
• golang.org/x/term v0.42.0 → [Updates: v0.43.0]
• google.golang.org/genproto/googleapis/api v0.0.0-20260427160629-7cedc36a6bc4@7cedc36a6bc4 → [Updates: v0.0.0-20260519071638-aa98bba5eb94]
• google.golang.org/genproto/googleapis/bytestream v0.0.0-20260427160629-7cedc36a6bc4@7cedc36a6bc4 → [Updates: v0.0.0-20260519071638-aa98bba5eb94]
• google.golang.org/genproto/googleapis/rpc v0.0.0-20260427160629-7cedc36a6bc4@7cedc36a6bc4 → [Updates: v0.0.0-20260519071638-aa98bba5eb94]
• google.golang.org/grpc v1.80.0 → [Updates: v1.81.1]
• google.golang.org/protobuf v1.36.11

pull_tool/go.mod (2)

• go 1.26.1
• github.com/google/go-containerregistry v0.21.5 → [Updates: v0.21.6]

npm (1)

e2e/js/package.json (1)

• meaning-of-life 1.0.0

pip_requirements (2)

e2e/generic/integrationtest/testcontainers/requirements_lock.txt (15)

• certifi ==2025.10.5 → [Updates: ==2025.11.12, ==2026.5.20]
• charset-normalizer ==3.4.4 → [Updates: ==3.4.7]
• docker ==7.1.0
• idna ==3.11 → [Updates: ==3.15]
• iniconfig ==2.3.0
• packaging ==25.0 → [Updates: ==26.2]
• pluggy ==1.6.0
• pygments ==2.19.2 → [Updates: ==2.20.0]
• pytest ==9.0.3
• python-dotenv ==1.2.2
• requests ==2.32.5 → [Updates: ==2.34.2]
• testcontainers ==4.13.2 → [Updates: ==4.14.2]
• typing-extensions ==4.15.0
• urllib3 ==2.6.1 → [Updates: ==2.7.0]
• wrapt ==2.0.0 → [Updates: ==2.2.0]

e2e/python/requirements/requirements_lock.txt (1)

• cowsay ==6.1

---

• Check this box to trigger a request for Renovate to run again on this repository