Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Abandoned Dependencies

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (14)

Datasource	Name	Last Updated
github-actions	grafana/setup-k6-action	2024-07-15
gomod	github.com/grafana/otel-profiling-go	2023-12-05
gomod	github.com/rs/xid	2024-08-23
npm	biome	2016-07-12
npm	install	2019-07-03
npm	tslib	2024-10-31

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/setup-go digest to 40f1582
• chore(deps): update node.js to 0cb1bd3
• chore(deps): update dependency @sveltejs/vite-plugin-svelte to v6.2.4
• chore(deps): update grafana/alloy docker tag to v1.12.2
• fix(deps): update module github.com/go-chi/chi/v5 to v5.2.4
• chore(deps): update dependency @sveltejs/kit to v2.50.0
• chore(deps): update dependency vite to v7.3.1
• chore(deps): update docker/build-push-action action to v6.18.0
• chore(deps): update docker/login-action action to v3.6.0
• chore(deps): update docker/setup-buildx-action action to v3.12.0
• chore(deps): update docker/setup-qemu-action action to v3.7.0
• chore(deps): update grafana/loki docker tag to v3.6.3
• chore(deps): update grafana/pyroscope docker tag to v1.18.0
• fix(deps): update dependency npm to v11.7.0
• fix(deps): update dependency svelte-confetti to v1.4.0
• fix(deps): update module github.com/grafana/quickpizza to v0.15.21
• fix(deps): update module github.com/olahol/melody to v1.4.0
• fix(deps): update module github.com/prometheus/client_golang to v1.23.2
• fix(deps): update module github.com/rs/xid to v1.6.0
• fix(deps): update module go.k6.io/k6 to v0.59.0
• fix(deps): update module golang.org/x/crypto to v0.47.0
• fix(deps): update module golang.org/x/net to v0.49.0
• fix(deps): update module google.golang.org/grpc to v1.78.0
• fix(deps): update opentelemetry-go monorepo to v1.39.0 (go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp, go.opentelemetry.io/otel/exporters/otlp/otlptrace, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/sdk/metric, go.opentelemetry.io/otel/trace)
• fix(deps): update opentelemetry-go-contrib monorepo (go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp, go.opentelemetry.io/contrib/instrumentation/runtime, go.opentelemetry.io/contrib/processors/baggagecopy)
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/github-script action to v8
• chore(deps): update actions/setup-go action to v6
• chore(deps): update actions/setup-node action to v6
• chore(deps): update dependency @sveltejs/adapter-auto to v7
• chore(deps): update dependency tailwindcss to v4
• chore(deps): update helm release k8s-monitoring to v3
• fix(deps): update dependency svelte-confetti to v2
• fix(deps): update module github.com/go-chi/httplog/v2 to v3
• fix(deps): update module github.com/grafana/pyroscope-go/x/k6 to v1
• fix(deps): update module go.k6.io/k6 to v1
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update ghcr.io/grafana/quickpizza-local docker tag to v0.15.21
• chore(deps): update grafana/tempo docker tag to v2.9.1
• chore(deps): update faro-web-sdk monorepo to v2.2.0 (@grafana/faro-instrumentation-replay, @grafana/faro-web-sdk, @grafana/faro-web-tracing)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): pin dependencies (ghcr.io/grafana/quickpizza-local, grafana/alloy, grafana/loki, grafana/pyroscope, grafana/tempo, postgres, prom/prometheus)
• chore(deps): update actions/checkout digest to 34e1148
• chore(deps): update actions/github-script digest to f28e40c
• chore(deps): update dependency autoprefixer to v10.4.23
• fix(deps): update module google.golang.org/protobuf to v1.36.11
• chore(deps): update dcarbone/install-jq-action action to v3.2.0
• chore(deps): update dependency @biomejs/biome to v2.3.11
• chore(deps): update dependency go to v1.25.6
• chore(deps): update dependency svelte to v5.47.0
• chore(deps): update dependency tailwindcss to v3.4.19
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

docker-compose (4)

compose.grafana-cloud.microservices.yaml (9)

• grafana/alloy v1.12.0 → [Updates: v1.12.2, v1.12.0]
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]
• postgres 18.1 → [Updates: 18.1]

compose.grafana-cloud.monolithic.yaml (3)

• grafana/alloy v1.12.0 → [Updates: v1.12.2, v1.12.0]
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]
• postgres 18.1 → [Updates: 18.1]

compose.grafana-local-stack.microservices.yaml (13)

• grafana/alloy v1.12.0 → [Updates: v1.12.2, v1.12.0]
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]
• ghcr.io/grafana/quickpizza-local 0.15.19 → [Updates: 0.15.21, 0.15.19]
• postgres 18.1 → [Updates: 18.1]
• grafana/loki 3.4.3 → [Updates: 3.6.3, 3.4.3]
• prom/prometheus v3.9.1 → [Updates: v3.9.1]
• grafana/pyroscope 1.16.0 → [Updates: 1.18.0, 1.16.0]
• grafana/tempo 2.9.0 → [Updates: 2.9.1, 2.9.0]

compose.grafana-local-stack.monolithic.yaml (7)

• grafana/alloy v1.12.0 → [Updates: v1.12.2, v1.12.0]
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]
• postgres 18.1 → [Updates: 18.1]
• grafana/loki 3.4.3 → [Updates: 3.6.3, 3.4.3]
• prom/prometheus v3.9.1 → [Updates: v3.9.1]
• grafana/pyroscope 1.16.0@sha256:58e49fa3443195c7b95f5c9821ce8920a8627f215c2ccdf955a9cd78c76a3468 → [Updates: 1.18.0]
• grafana/tempo 2.9.0 → [Updates: 2.9.1, 2.9.0]

dockerfile (1)

Dockerfile (3)

• node 24-bullseye@sha256:de951ccb5f52277af681a421e3328760fc4d22fbf20c391d78ef85af58430df6 → [Updates: 24-bullseye]
• golang 1.24-bullseye@sha256:2cdc80dc25edcb96ada1654f73092f2928045d037581fa4aa7c40d18af7dd85a
• gcr.io/distroless/static-debian11 sha256:1dbe426d60caed5d19597532a2d74c8056cd7b1674042b88f7328690b5ead8ed

github-actions (10)

.github/workflows/build_and_test_no_docker.yaml (6)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.1]
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v6, v5]
• actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v6]
• grafana/setup-k6-action v1@ffe7d7290dfa715e48c2ccc924d068444c94bde2
• dcarbone/install-jq-action v3.0.1@e397bd87438d72198f81efd21f876461183d383a → [Updates: v3.2.0]
• node 22

.github/workflows/docker.yaml (7)

• actions/checkout v3.6.0@f43a0e5ff2bd294095638e18286ca9a3d1956744 → [Updates: v6.0.1]
• docker/login-action v3.4.0@74a5d142397b4f367a81961eba4e8cd7edddf772 → [Updates: v3.6.0]
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392 → [Updates: v3.7.0]
• docker/setup-buildx-action v3.10.0@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 → [Updates: v3.12.0]
• actions/github-script v7@60a0d83039c74a4aee543508d2ffcb1c3799cdea → [Updates: v8, v7]
• docker/build-push-action v6.16.0@14487ce63c7a62a4a324b0bfb37086795e31c6c1 → [Updates: v6.18.0]
• ubuntu 24.04

.github/workflows/example_basic_test.yaml (4)

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 → [Updates: v6, v4]
• grafana/setup-k6-action v1@ffe7d7290dfa715e48c2ccc924d068444c94bde2
• grafana/run-k6-action v1@a15e2072ede004e8d46141e33d7f7dad8ad08d9d
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]

.github/workflows/example_browser_test.yaml (4)

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 → [Updates: v6, v4]
• grafana/setup-k6-action v1@ffe7d7290dfa715e48c2ccc924d068444c94bde2
• grafana/run-k6-action v1@a15e2072ede004e8d46141e33d7f7dad8ad08d9d
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]

.github/workflows/example_cli_flags_test.yaml (4)

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 → [Updates: v6, v4]
• grafana/setup-k6-action v1@ffe7d7290dfa715e48c2ccc924d068444c94bde2
• grafana/run-k6-action v1@a15e2072ede004e8d46141e33d7f7dad8ad08d9d
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]

.github/workflows/example_env_var.yaml (4)

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 → [Updates: v6, v4]
• grafana/setup-k6-action v1@ffe7d7290dfa715e48c2ccc924d068444c94bde2
• grafana/run-k6-action v1@a15e2072ede004e8d46141e33d7f7dad8ad08d9d
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]

.github/workflows/example_specific_k6_version.yaml (4)

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 → [Updates: v6, v4]
• grafana/setup-k6-action v1@ffe7d7290dfa715e48c2ccc924d068444c94bde2
• grafana/run-k6-action v1@a15e2072ede004e8d46141e33d7f7dad8ad08d9d
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]

.github/workflows/example_verify_scripts.yaml (4)

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 → [Updates: v6, v4]
• grafana/setup-k6-action v1@ffe7d7290dfa715e48c2ccc924d068444c94bde2
• grafana/run-k6-action v1@a15e2072ede004e8d46141e33d7f7dad8ad08d9d
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]

.github/workflows/k6_browser_tests.yaml (4)

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 → [Updates: v6, v4]
• grafana/setup-k6-action v1@ffe7d7290dfa715e48c2ccc924d068444c94bde2
• grafana/run-k6-action v1@a15e2072ede004e8d46141e33d7f7dad8ad08d9d
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]

.github/workflows/k6_tests.yaml (4)

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 → [Updates: v6, v4]
• grafana/setup-k6-action v1@ffe7d7290dfa715e48c2ccc924d068444c94bde2
• grafana/run-k6-action v1@a15e2072ede004e8d46141e33d7f7dad8ad08d9d
• ghcr.io/grafana/quickpizza-local 0.15.21 → [Updates: 0.15.21]

gomod (2)

go.mod (35)

• go 1.24.0
• go 1.24.6 → [Updates: 1.25.6]
• github.com/go-chi/chi/v5 v5.2.3 → [Updates: v5.2.4]
• github.com/go-chi/cors v1.2.2
• github.com/go-chi/httplog/v2 v2.1.1 → [Updates: v3.3.0]
• github.com/grafana/otel-profiling-go v0.5.1
• github.com/grafana/pyroscope-go v1.2.7
• github.com/grafana/pyroscope-go/x/k6 v0.0.0-20240618140011-f1a626fc4fe0@f1a626fc4fe0 → [Updates: v1.0.2]
• github.com/hashicorp/go-retryablehttp v0.7.8
• github.com/olahol/melody v1.1.3 → [Updates: v1.4.0]
• github.com/prometheus/client_golang v1.14.1-0.20221122130035-8b6e68085b10@8b6e68085b10 → [Updates: v1.23.2]
• github.com/rs/xid v1.4.0 → [Updates: v1.6.0]
• github.com/uptrace/bun v1.2.16
• github.com/uptrace/bun/dbfixture v1.2.16
• github.com/uptrace/bun/dialect/pgdialect v1.2.16
• github.com/uptrace/bun/dialect/sqlitedialect v1.2.16
• github.com/uptrace/bun/driver/pgdriver v1.2.16
• github.com/uptrace/bun/driver/sqliteshim v1.2.16
• github.com/uptrace/bun/extra/bunotel v1.2.16
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 → [Updates: v0.64.0]
• go.opentelemetry.io/contrib/instrumentation/runtime v0.63.0 → [Updates: v0.64.0]
• go.opentelemetry.io/contrib/processors/baggagecopy v0.11.0 → [Updates: v0.12.0]
• go.opentelemetry.io/otel v1.38.0 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.38.0 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.38.0 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.38.0 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/sdk v1.38.0 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/sdk/metric v1.38.0 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/trace v1.38.0 → [Updates: v1.39.0]
• golang.org/x/crypto v0.45.0 → [Updates: v0.47.0]
• golang.org/x/net v0.47.0 → [Updates: v0.49.0]
• google.golang.org/grpc v1.75.0 → [Updates: v1.78.0]
• google.golang.org/protobuf v1.36.9 → [Updates: v1.36.11]

k6/extensions/internal/go.mod (3)

• go 1.20
• github.com/grafana/quickpizza v0.0.5 → [Updates: v0.15.21]
• go.k6.io/k6 v0.46.0 → [Updates: v0.59.0, v1.5.0]

npm (1)

pkg/web/package.json (20)

• install 0.13.0
• npm 11.4.2 → [Updates: 11.7.0]
• svelte-confetti 1.2.2 → [Updates: 1.4.0, 2.3.2]
• @biomejs/biome 2.2.4 → [Updates: 2.3.11]
• @grafana/faro-instrumentation-replay 2.1.0 → [Updates: 2.2.0]
• @grafana/faro-web-sdk 2.1.0 → [Updates: 2.2.0]
• @grafana/faro-web-tracing 2.1.0 → [Updates: 2.2.0]
• @sveltejs/adapter-auto 6.1.1 → [Updates: 7.0.0]
• @sveltejs/adapter-static 3.0.10
• @sveltejs/kit 2.49.5 → [Updates: 2.50.0]
• @sveltejs/vite-plugin-svelte 6.2.1 → [Updates: 6.2.4]
• autoprefixer 10.4.22 → [Updates: 10.4.23]
• biome 0.3.3
• postcss 8.5.6
• svelte 5.38.6 → [Updates: 5.47.0]
• svelte-check 4.3.5
• tailwindcss 3.2.7 → [Updates: 3.4.19, 4.1.18]
• tslib 2.8.1
• typescript 5.9.3
• vite 7.1.11 → [Updates: 7.3.1]

terraform (11)

deployments/terraform/alloy.tf (1)

• grafana/alloy v1.12.0 → [Updates: v1.12.2, v1.12.0]

deployments/terraform/database.tf (1)

• postgres 18 → [Updates: 18]

deployments/terraform/k8-monitoring.tf (1)

• k8s-monitoring 1.6.48 → [Updates: 3.7.2]

deployments/terraform/qp-catalog.tf

deployments/terraform/qp-config.tf

deployments/terraform/qp-copy.tf

deployments/terraform/qp-grpc.tf

deployments/terraform/qp-public-api.tf

deployments/terraform/qp-recommendations.tf

deployments/terraform/qp-ws.tf

deployments/terraform/terraform.tf (3)

• helm 3.1.1
• kubernetes >= 2.38.0
• hashicorp/terraform >= 1.8.0

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.