Update all non-major dependencies by csi-components-e2e · Pull Request #164 · aws/csi-components

csi-components-e2e · 2026-09-25T15:29:24Z

This PR contains the following updates:

Package	Change	Type	Update
github.com/mikefarah/yq/v4	`4.53.6` → `4.54.1`		minor
mikefarah/yq	`4.53.6` → `4.54.1`		minor
renovatebot/github-action	`v46.3.3` → `v46.3.6`	action	patch

Release Notes

mikefarah/yq (github.com/mikefarah/yq/v4)

`v4.54.1`: - if-then-else

Compare Source

Added jq style if-then-elif-else-end conditional operator (#2871) Thanks to @anandghegde
- Added @base64url/@base64urld operators (RFC 4648 §5) (#2827) Thanks @MsfPablo
- Fixed: preserve explicit assignments in read-only expressions (#2850) Thanks @RRXXZZYY
- Fixed: error on int64 overflow in +, -, * instead of silently wrapping (#2826) Thanks @MsfPablo
- Fixed(toml): quote empty keys (#2870) Thanks @jakezwang
- Fixed: /dev/null was triggering colour output (#2852) Thanks @laraibg786
- Fixed dead snapcraft confinement link in README (#2840) Thanks @ShurongCAO
- Bumped dependencies

renovatebot/github-action (renovatebot/github-action)

`v46.3.6`

Compare Source

Bug Fixes

ensure logs use coloured output (#1083) (c368bd1), closes #970

Documentation

update references to renovatebot/github-action to v46.3.5 (95f5665)

Miscellaneous Chores

deps: update dependency typescript-eslint to v8.70.1 (339064e)
deps: update semantic-release monorepo (a0ea084)

Continuous Integration

deps: update ghcr.io/renovatebot/renovate docker tag to v44.116.0 (ecd6815)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.116.1 (687bf74)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.117.0 (38b166e)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.117.1 (d2f2ff9)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.117.2 (79feb4a)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.118.1 (b33ff4f)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.119.1 (1155eb1)

`v46.3.5`

Compare Source

Documentation

update references to renovatebot/github-action to v46.3.4 (daa3d6d)

Miscellaneous Chores

deps: update commitlint monorepo to v21.2.3 (4857c68)
deps: update dependency @types/node to v24.13.6 (c9c68ec)

Build System

deps: lock file maintenance (be286e9)

Continuous Integration

deps: update ghcr.io/renovatebot/renovate docker tag to v44.115.10 (3cbf83a)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.115.12 (005d8b7)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.115.13 (dbe3ae6)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.115.5 (398f238)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.115.6 (a5ad697)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.115.7 (8e0a2ed)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.115.9 (cd624bc)

`v46.3.4`

Compare Source

Bug Fixes

allow renovate-image to take a full digest-pinned image (#1082) (16deced)

Miscellaneous Chores

deps: update dependency @types/node to v24.13.5 (a6b6810)
deps: update dependency prettier to v3.9.7 (4c5732b)
deps: update dependency prettier to v3.9.8 (10c72ed)

Continuous Integration

deps: update ghcr.io/renovatebot/renovate docker tag to v44.105.4 (bf42745)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.106.0 (d0ccb74)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.107.0 (9f490cc)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.108.1 (31beecb)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.108.2 (0facf98)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.109.1 (e1c7618)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.111.2 (d7d48a9)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.111.3 (09451de)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.111.4 (8c96461)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.112.3 (507727b)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.113.0 (fa32a68)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.115.0 (9b4d9e8)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.115.1 (0918312)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.115.2 (56af4b3)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.115.4 (63d12f6)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

github-actions · 2026-09-25T15:30:08Z

Trivy Output

702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-snapshotter:3741a131c8333ec4ed22af46c70ec706a7067b5a-v8.6.0-eksbuild.8

Report Summary

┌──────────────────────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                                      Target                                      │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ 702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-snapshotter:3741a131c8333ec4ed- │  amazon  │        0        │    -    │
│ 22af46c70ec706a7067b5a-v8.6.0-eksbuild.8 (amazon 2023.12.20260918 (Amazon        │          │                 │         │
│ Linux))                                                                          │          │                 │         │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ csi-snapshotter                                                                  │ gobinary │        2        │    -    │
└──────────────────────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


csi-snapshotter (gobinary)
==========================
Total: 2 (UNKNOWN: 0, LOW: 2, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────┐
│                           Library                            │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                         Title                         │
├──────────────────────────────────────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────┤
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace            │ CVE-2026-81870 │ LOW      │ fixed  │ v1.43.0           │ 1.45.0        │ github.com/open-telemetry/opentelemetry-go:           │
│                                                              │                │          │        │                   │               │ OpenTelemetry-Go: Information disclosure via exporter │
│                                                              │                │          │        │                   │               │ configuration logging                                 │
│                                                              │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-81870            │
├──────────────────────────────────────────────────────────────┤                │          │        │                   │               │                                                       │
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptrace- │                │          │        │                   │               │                                                       │
│ grpc                                                         │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
└──────────────────────────────────────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────┘
702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-attacher:3741a131c8333ec4ed22af46c70ec706a7067b5a-v4.12.0-eksbuild.8

Report Summary

┌──────────────────────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                                      Target                                      │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ 702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-attacher:3741a131c8333ec4ed22a- │  amazon  │        0        │    -    │
│ f46c70ec706a7067b5a-v4.12.0-eksbuild.8 (amazon 2023.12.20260918 (Amazon Linux))  │          │                 │         │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ csi-attacher                                                                     │ gobinary │        2        │    -    │
└──────────────────────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


csi-attacher (gobinary)
=======================
Total: 2 (UNKNOWN: 0, LOW: 2, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────┐
│                           Library                            │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                         Title                         │
├──────────────────────────────────────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────┤
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace            │ CVE-2026-81870 │ LOW      │ fixed  │ v1.43.0           │ 1.45.0        │ github.com/open-telemetry/opentelemetry-go:           │
│                                                              │                │          │        │                   │               │ OpenTelemetry-Go: Information disclosure via exporter │
│                                                              │                │          │        │                   │               │ configuration logging                                 │
│                                                              │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-81870            │
├──────────────────────────────────────────────────────────────┤                │          │        │                   │               │                                                       │
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptrace- │                │          │        │                   │               │                                                       │
│ grpc                                                         │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
└──────────────────────────────────────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────┘
702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-provisioner:3741a131c8333ec4ed22af46c70ec706a7067b5a-v6.3.0-eksbuild.7

Report Summary

┌──────────────────────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                                      Target                                      │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ 702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-provisioner:3741a131c8333ec4ed- │  amazon  │        0        │    -    │
│ 22af46c70ec706a7067b5a-v6.3.0-eksbuild.7 (amazon 2023.12.20260918 (Amazon        │          │                 │         │
│ Linux))                                                                          │          │                 │         │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ csi-provisioner                                                                  │ gobinary │        3        │    -    │
└──────────────────────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


csi-provisioner (gobinary)
==========================
Total: 3 (UNKNOWN: 0, LOW: 3, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────┐
│                           Library                            │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                         Title                         │
├──────────────────────────────────────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────┤
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace            │ CVE-2026-81870 │ LOW      │ fixed  │ v1.44.0           │ 1.45.0        │ github.com/open-telemetry/opentelemetry-go:           │
│                                                              │                │          │        │                   │               │ OpenTelemetry-Go: Information disclosure via exporter │
│                                                              │                │          │        │                   │               │ configuration logging                                 │
│                                                              │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-81870            │
├──────────────────────────────────────────────────────────────┤                │          │        │                   │               │                                                       │
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptrace- │                │          │        │                   │               │                                                       │
│ grpc                                                         │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
├──────────────────────────────────────────────────────────────┤                │          │        │                   │               │                                                       │
│ go.opentelemetry.io/otel/sdk                                 │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
└──────────────────────────────────────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────┘
702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-resizer:3741a131c8333ec4ed22af46c70ec706a7067b5a-v2.2.1-eksbuild.6

Report Summary

┌──────────────────────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                                      Target                                      │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ 702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-resizer:3741a131c8333ec4ed22af- │  amazon  │        0        │    -    │
│ 46c70ec706a7067b5a-v2.2.1-eksbuild.6 (amazon 2023.12.20260918 (Amazon Linux))    │          │                 │         │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ csi-resizer                                                                      │ gobinary │        2        │    -    │
└──────────────────────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


csi-resizer (gobinary)
======================
Total: 2 (UNKNOWN: 0, LOW: 2, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────┐
│                           Library                            │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                         Title                         │
├──────────────────────────────────────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────┤
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace            │ CVE-2026-81870 │ LOW      │ fixed  │ v1.40.0           │ 1.45.0        │ github.com/open-telemetry/opentelemetry-go:           │
│                                                              │                │          │        │                   │               │ OpenTelemetry-Go: Information disclosure via exporter │
│                                                              │                │          │        │                   │               │ configuration logging                                 │
│                                                              │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-81870            │
├──────────────────────────────────────────────────────────────┤                │          │        │                   │               │                                                       │
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptrace- │                │          │        │                   │               │                                                       │
│ grpc                                                         │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
└──────────────────────────────────────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────┘
702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-node-driver-registrar:3741a131c8333ec4ed22af46c70ec706a7067b5a-v2.17.0-eksbuild.7

Report Summary

┌──────────────────────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                                      Target                                      │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ 702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-node-driver-registrar:3741a131- │  amazon  │        0        │    -    │
│ c8333ec4ed22af46c70ec706a7067b5a-v2.17.0-eksbuild.7 (amazon 2023.12.20260918     │          │                 │         │
│ (Amazon Linux))                                                                  │          │                 │         │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ csi-node-driver-registrar                                                        │ gobinary │        0        │    -    │
└──────────────────────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)

702945799511.dkr.ecr.us-west-2.amazonaws.com/livenessprobe:3741a131c8333ec4ed22af46c70ec706a7067b5a-v2.19.0-eksbuild.7

Report Summary

┌──────────────────────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                                      Target                                      │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ 702945799511.dkr.ecr.us-west-2.amazonaws.com/livenessprobe:3741a131c8333ec4ed22- │  amazon  │        0        │    -    │
│ af46c70ec706a7067b5a-v2.19.0-eksbuild.7 (amazon 2023.12.20260918 (Amazon Linux)) │          │                 │         │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ livenessprobe                                                                    │ gobinary │        0        │    -    │
└──────────────────────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)

702945799511.dkr.ecr.us-west-2.amazonaws.com/snapshot-controller:3741a131c8333ec4ed22af46c70ec706a7067b5a-v8.6.0-eksbuild.8

Report Summary

┌──────────────────────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                                      Target                                      │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ 702945799511.dkr.ecr.us-west-2.amazonaws.com/snapshot-controller:3741a131c8333e- │  amazon  │        0        │    -    │
│ c4ed22af46c70ec706a7067b5a-v8.6.0-eksbuild.8 (amazon 2023.12.20260918 (Amazon    │          │                 │         │
│ Linux))                                                                          │          │                 │         │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ snapshot-controller                                                              │ gobinary │        2        │    -    │
└──────────────────────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


snapshot-controller (gobinary)
==============================
Total: 2 (UNKNOWN: 0, LOW: 2, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────┐
│                           Library                            │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                         Title                         │
├──────────────────────────────────────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────┤
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace            │ CVE-2026-81870 │ LOW      │ fixed  │ v1.43.0           │ 1.45.0        │ github.com/open-telemetry/opentelemetry-go:           │
│                                                              │                │          │        │                   │               │ OpenTelemetry-Go: Information disclosure via exporter │
│                                                              │                │          │        │                   │               │ configuration logging                                 │
│                                                              │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-81870            │
├──────────────────────────────────────────────────────────────┤                │          │        │                   │               │                                                       │
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptrace- │                │          │        │                   │               │                                                       │
│ grpc                                                         │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
└──────────────────────────────────────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────┘
702945799511.dkr.ecr.us-west-2.amazonaws.com/volume-modifier-for-k8s:3741a131c8333ec4ed22af46c70ec706a7067b5a-v0.9.6-eksbuild.1

Report Summary

┌──────────────────────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                                      Target                                      │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ 702945799511.dkr.ecr.us-west-2.amazonaws.com/volume-modifier-for-k8s:3741a131c8- │  amazon  │        0        │    -    │
│ 333ec4ed22af46c70ec706a7067b5a-v0.9.6-eksbuild.1 (amazon 2023.12.20260918        │          │                 │         │
│ (Amazon Linux))                                                                  │          │                 │         │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ volume-modifier-for-k8s                                                          │ gobinary │        0        │    -    │
└──────────────────────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)

public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.66.0

Report Summary

┌──────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                              Target                              │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.66.0 (amazon │  amazon  │        2        │    -    │
│ 2023.12.20260831 (Amazon Linux))                                 │          │                 │         │
├──────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ usr/bin/aws-ebs-csi-driver                                       │ gobinary │        0        │    -    │
└──────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.66.0 (amazon 2023.12.20260831 (Amazon Linux))
=================================================================================================
Total: 2 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 2, CRITICAL: 0)

┌──────────────┬────────────────┬──────────┬────────┬──────────────────────┬──────────────────────┬────────────────────────────────────────────────────────┐
│   Library    │ Vulnerability  │ Severity │ Status │  Installed Version   │    Fixed Version     │                         Title                          │
├──────────────┼────────────────┼──────────┼────────┼──────────────────────┼──────────────────────┼────────────────────────────────────────────────────────┤
│ pcre2        │ CVE-2026-89161 │ HIGH     │ fixed  │ 10.40-1.amzn2023.0.3 │ 10.40-1.amzn2023.0.4 │ pcre2: PCRE2: Memory corruption vulnerability in       │
│              │                │          │        │                      │                      │ pcre2_jit_match                                        │
│              │                │          │        │                      │                      │ https://avd.aquasec.com/nvd/cve-2026-89161             │
├──────────────┼────────────────┤          │        ├──────────────────────┼──────────────────────┼────────────────────────────────────────────────────────┤
│ systemd-libs │ CVE-2026-16742 │          │        │ 252.23-12.amzn2023   │ 252.23-13.amzn2023   │ systemd: systemd-homed: Local privilege escalation via │
│              │                │          │        │                      │                      │ missing home-record signature verification             │
│              │                │          │        │                      │                      │ https://avd.aquasec.com/nvd/cve-2026-16742             │
└──────────────┴────────────────┴──────────┴────────┴──────────────────────┴──────────────────────┴────────────────────────────────────────────────────────┘

| datasource | package | from | to | | --------------- | -------------------------- | ------- | ------- | | go | github.com/mikefarah/yq/v4 | v4.53.6 | v4.54.1 | | github-releases | mikefarah/yq | 4.53.6 | 4.54.1 | | github-tags | renovatebot/github-action | v46.3.3 | v46.3.6 |

csi-components-e2e added the dependencies Pull requests that update a dependency file label Sep 25, 2026

csi-components-e2e enabled auto-merge (squash) September 25, 2026 15:29

csi-components-e2e force-pushed the renovate/all-non-major-dependencies branch from 3fef57e to 10a0930 Compare September 28, 2026 02:36

csi-components-e2e changed the title ~~Update renovatebot/github-action action to v46.3.4~~ Update renovatebot/github-action action to v46.3.5 Sep 28, 2026

csi-components-e2e force-pushed the renovate/all-non-major-dependencies branch from 10a0930 to 186026e Compare September 29, 2026 04:36

csi-components-e2e changed the title ~~Update renovatebot/github-action action to v46.3.5~~ Update all non-major dependencies Sep 29, 2026

csi-components-e2e force-pushed the renovate/all-non-major-dependencies branch from 186026e to 6290870 Compare September 29, 2026 13:54

torredil approved these changes Sep 29, 2026

View reviewed changes

csi-components-e2e merged commit f9d9f0f into main Sep 29, 2026
13 checks passed

csi-components-e2e deleted the renovate/all-non-major-dependencies branch September 29, 2026 17:47

Navigation Menu

Repository navigation

Update all non-major dependencies - #164

Update all non-major dependencies#164
csi-components-e2e merged 1 commit into
mainfrom
renovate/all-non-major-dependencies

csi-components-e2e commented Sep 25, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 25, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

csi-components-e2e commented Sep 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v4.54.1: - if-then-else

v46.3.6

Bug Fixes

Documentation

Miscellaneous Chores

Continuous Integration

v46.3.5

Documentation

Miscellaneous Chores

Build System

Continuous Integration

v46.3.4

Bug Fixes

Miscellaneous Chores

Continuous Integration

Configuration

Uh oh!

github-actions Bot commented Sep 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Trivy Output

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

csi-components-e2e commented Sep 25, 2026 •

edited

Loading

`v4.54.1`: - if-then-else

`v46.3.6`

`v46.3.5`

`v46.3.4`

github-actions Bot commented Sep 25, 2026 •

edited

Loading