Renovate Dashboard 🤖

[kguardian-bot]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Package lookup failures

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (git-refs package https://github.com/libbpf/vmlinux.h.git), Failed to look up github-tags package aquasecurity/trivy-action: no-result.

Files affected: controller/Cargo.toml, .github/workflows/security-scan.yaml

---

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• chore(deps): update debian docker tag to v12.15
• chore(deps): update debian docker tag to v13

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update rust crate diesel to v2.3.11
• chore(deps): update rust crate uuid to v1.23.5
• chore(deps): update actions/attest-build-provenance action to v4
• chore(deps): update dependency typescript to v7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cargo (2)

broker/Cargo.toml (15)

• dotenv 0.15
• actix-web 4.11
• actix-cors 0.7
• diesel 2.3.6 → [Updates: 2.3.6]
• serde 1.0.228
• serde_json 1.0.149
• uuid 1.21.0 → [Updates: 1.21.0]
• thiserror 2.0.18
• tracing 0.1.44
• chrono 0.4.43
• diesel_migrations 2.1.0
• tracing-subscriber 0.3.22
• reqwest 0.13
• tokio 1
• serde_urlencoded 0.7

controller/Cargo.toml (29)

• anyhow 1.0.102
• libbpf-rs 0.26.0
• libbpf-sys 1.6.3
• plain 0.2
• time 0.3.47
• tokio 1.49.0
• kube 4.0.0
• k8s-openapi 0.28.0
• futures 0.3.32
• thiserror 2.0.18
• tracing 0.1.44
• serde 1.0.228
• serde_derive 1.0.228
• serde_json 1.0.149
• tracing-subscriber 0.3.22
• containerd-client 0.9.0
• regex 1.12.3
• procfs 0.18.0
• reqwest 0.13.2
• uuid 1.21.0 → [Updates: 1.21.0]
• chrono 0.4.43
• openssl 0.10.73
• lazy_static 1.5.0
• libseccomp 0.4
• moka 0.12.13
• dashmap 6.1
• rustls 0.23
• libbpf-cargo 0.26.0
• vmlinux 0.0@db131a55c624fbe1da97de90ac08e9cec9e8ed49

dockerfile (8)

advisor/Dockerfile (1)

• golang 1.26-alpine

broker/Dockerfile

controller/Dockerfile (2)

• ubuntu 26.04
• debian 12.9-slim → [Updates: 12.15-slim, 13.6-slim]

dev/controller.Dockerfile (1)

• debian 13-slim

evaluator/Dockerfile (2)

• golang 1.26-alpine
• alpine 3.24

frontend/Dockerfile (2)

• node 24-alpine
• node 24-alpine

llm-bridge/Dockerfile (2)

• node 24-alpine
• node 24-alpine

mcp-server/Dockerfile (2)

• golang 1.26-alpine
• alpine 3.24

github-actions (17)

.github/workflows/advisor-image-release.yaml (6)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a

.github/workflows/advisor-release.yml (3)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16
• actions/attest-build-provenance v3@977bb373ede98d70efdf65b84cb5f73e068dcc2a → [Updates: v4]

.github/workflows/advisor-test.yaml (6)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16
• golangci/golangci-lint-action v9@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/broker-release.yaml (6)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a

.github/workflows/charts-docs.yaml (2)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• stefanzweifel/git-auto-commit-action v7@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d

.github/workflows/charts-lint.yaml (7)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-python v6@ece7cb06caefa5fff74198d8649806c4678c61a1
• azure/setup-helm v5@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
• helm/kind-action v1.14.0@ef37e7f390d99f746eb8b610417061a60e82a6cc
• python 3.14
• helm v4.2.3

.github/workflows/charts-release.yaml (3)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• azure/setup-helm v5@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310

.github/workflows/controller-release.yaml (15)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• dtolnay/rust-toolchain master@fa04a1451ff1842e2626ccb99004d0195b455a88
• dtolnay/rust-toolchain master@fa04a1451ff1842e2626ccb99004d0195b455a88
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• rust nightly
• rust stable

.github/workflows/evaluator-release.yaml (6)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a

.github/workflows/frontend-release.yaml (6)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a

.github/workflows/llm-bridge-release.yaml (6)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a

.github/workflows/mcp-server-release.yaml (6)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a

.github/workflows/pr-build.yaml (65)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• dorny/paths-filter v4@7b450fff21473bca461d4b92ce414b9d0420d706
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• dtolnay/rust-toolchain master@fa04a1451ff1842e2626ccb99004d0195b455a88
• dtolnay/rust-toolchain master@fa04a1451ff1842e2626ccb99004d0195b455a88
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• dtolnay/rust-toolchain master@fa04a1451ff1842e2626ccb99004d0195b455a88
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• dtolnay/rust-toolchain master@fa04a1451ff1842e2626ccb99004d0195b455a88
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• azure/setup-helm v5@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• rust nightly
• rust stable
• rust stable
• rust stable

.github/workflows/release-please.yaml (1)

• googleapis/release-please-action v5@45996ed1f6d02564a971a2fa1b5860e934307cf7

.github/workflows/renovate-automerge.yaml

.github/workflows/renovate.yaml (4)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• suzuki-shunsuke/github-action-renovate-config-validator v2.1.0@ee9f69e1f683ed0d08225086482b34fc9abe9300
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• renovatebot/github-action v46.1.19@22e0a16091fc706b04affe6ae53d5e3358ac4023

.github/workflows/security-scan.yaml (15)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1
• github/codeql-action v4@99df26d4f13ea111d4ec1a7dddef6063f76b97e9
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1
• github/codeql-action v4@99df26d4f13ea111d4ec1a7dddef6063f76b97e9
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• github/codeql-action v4@99df26d4f13ea111d4ec1a7dddef6063f76b97e9
• github/codeql-action v4@99df26d4f13ea111d4ec1a7dddef6063f76b97e9
• github/codeql-action v4@99df26d4f13ea111d4ec1a7dddef6063f76b97e9
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• azure/setup-helm v5@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• actions/setup-python v6@ece7cb06caefa5fff74198d8649806c4678c61a1
• github/codeql-action v4@99df26d4f13ea111d4ec1a7dddef6063f76b97e9
• python 3.14

gomod (3)

advisor/go.mod (11)

• go 1.26.0
• go 1.26.5
• github.com/cilium/cilium v1.19.5
• github.com/rs/zerolog v1.35.1
• github.com/spf13/cobra v1.10.2
• github.com/stretchr/testify v1.11.1
• k8s.io/api v0.36.2
• k8s.io/apimachinery v0.36.2
• k8s.io/cli-runtime v0.36.2
• k8s.io/client-go v0.36.2
• sigs.k8s.io/yaml v1.6.0

evaluator/go.mod (6)

• go 1.26.0
• go 1.26.5
• github.com/sirupsen/logrus v1.9.4
• k8s.io/api v0.36.2
• k8s.io/apimachinery v0.36.2
• k8s.io/client-go v0.36.2

mcp-server/go.mod (4)

• go 1.25.0
• go 1.26.5
• github.com/modelcontextprotocol/go-sdk v1.6.1
• github.com/sirupsen/logrus v1.9.4

helm-values (1)

charts/kguardian/values.yaml (8)

• ghcr.io/kguardian-dev/kguardian/controller 1.9.1
• ghcr.io/kguardian-dev/kguardian/broker 1.11.0
• postgres 18-alpine
• ghcr.io/kguardian-dev/kguardian/frontend 1.11.0
• ghcr.io/kguardian-dev/kguardian/llm-bridge 1.4.0
• ghcr.io/kguardian-dev/kguardian/advisor v1.6.0
• ghcr.io/kguardian-dev/kguardian/mcp-server 1.5.0
• ghcr.io/kguardian-dev/kguardian/evaluator v0.3.2

npm (2)

frontend/package.json (26)

• @tailwindcss/typography ^0.5.19
• axios ^1.12.2
• elkjs ^0.11.0
• lucide-react ^1.0.0
• react ^19.1.1
• react-dom ^19.1.1
• react-markdown ^10.1.0
• reactflow ^11.11.4
• remark-gfm ^4.0.1
• @eslint/js ^10.0.0
• @tailwindcss/postcss ^4.1.16
• @types/node ^24.6.0
• @types/react ^19.1.16
• @types/react-dom ^19.1.9
• @vitejs/plugin-react ^6.0.0
• autoprefixer ^10.4.21
• esbuild ^0.28.0
• eslint ^10.0.0
• eslint-plugin-react-hooks ^7.0.0
• eslint-plugin-react-refresh ^0.5.0
• globals ^17.0.0
• postcss ^8.5.6
• tailwindcss ^4.1.16
• typescript ~6.0.0 → [Updates: ~7.0.0]
• typescript-eslint ^8.45.0
• vite ^8.0.0

llm-bridge/package.json (16)

• @anthropic-ai/sdk ^0.111.0
• @modelcontextprotocol/sdk ^1.23.0
• axios ^1.7.9
• cors ^2.8.5
• dotenv ^17.0.0
• express ^5.0.0
• express-rate-limit ^8.2.1
• zod ^4.0.0
• @eslint/js ^10.0.0
• @types/cors ^2.8.17
• @types/express ^5.0.0
• @types/node ^24.0.0
• eslint ^10.0.0
• tsx ^4.19.2
• typescript ^6.0.0 → [Updates: ^7.0.0]
• typescript-eslint ^8.59.0

nvm (1)

frontend/.nvmrc (1)

• node 24

renovate-config (1)

.github/renovate.json5