dependencies.yaml

dependencies:
  - name: go
    version: 1.23
    refPaths:
    - path: .github/workflows/build.yml
      match: GO_VERSION
    - path: .github/workflows/test.yml
      match: GO_VERSION
    - path: .github/workflows/olm_tests.yaml
      match: GO_VERSION
    - path: Makefile
      match: CI_IMAGE

  - name: golangci-lint
    version: 1.62.0
    refPaths:
    - path: Makefile
      match: GOLANGCI_LINT_VERSION

  - name: repo-infra
    version: v0.2.5
    refPaths:
    - path: Makefile
      match: REPO_INFRA_VERSION

  - name: kustomize
    version: 5.5.0
    refPaths:
    - path: Makefile
      match: KUSTOMIZE_VERSION

  - name: operator-sdk
    version: v1.37.0
    refPaths:
    - path: Makefile
      match: OPERATOR_SDK_VERSION

  - name: olm
    version: v0.30.0
    refPaths:
    - path: hack/ci/e2e-olm.sh
      match: OLM_VERSION

  - name: cert-manager
    version: 1.16.1
    refPaths:
    - path: test/e2e_test.go
      match: cert-manager/cert-manager
    - path: installation-usage.md
      match: cert-manager/cert-manager
    - path: hack/ci/e2e-olm.sh
      match: cert-manager/cert-manager
    - path: hack/ci/install-spo.sh
      match: cert-manager/cert-manager

  - name: kind
    version: 0.25.0
    refPaths:
    - path: test/suite_test.go
      match: kindVersion

  - name: kind-image
    version: 1.31.2
    refPaths:
    - path: test/suite_test.go
      match: kindImage
    - path: .github/workflows/olm_tests.yaml
      match: KIND_IMG_TAG

  - name: e2e-kubernetes
    version: 1.31
    refPaths:
    - path: hack/ci/Vagrantfile-fedora
      match: KUBERNETES_VERSION
    - path: hack/ci/Vagrantfile-ubuntu
      match: KUBERNETES_VERSION
    - path: hack/ci/Vagrantfile-debian
      match: KUBERNETES_VERSION

  - name: e2e-fedora
    version: 39
    refPaths:
    - path: hack/ci/Vagrantfile-fedora
      match: fedora

  - name: e2e-ubuntu
    version: ubuntu2204
    refPaths:
    - path: hack/ci/Vagrantfile-ubuntu
      match: config.vm.box

  - name: debian-base-digest
    version: sha256:0a17678966f63e82e9c5e246d9e654836a33e13650a698adefede61bb5ca099e
    refPaths:
    - path: Dockerfile.build-image
      match: registry.k8s.io/build-image/debian-base

  - name: debian-base
    version: bookworm-v1.0.4
    refPaths:
    - path: Dockerfile.build-image
      match: tag

  - name: nix
    version: 2.25.0
    refPaths:
    - path: Dockerfile.build-image
      match: NIX_VERSION
    - path: .github/workflows/build.yml
      match: NIX_VERSION

  - name: kube-rbac-proxy
    version: 0.16.0
    refPaths:
    - path: internal/pkg/manager/spod/bindata/spod.go
      match: gcr.io/kubebuilder/kube-rbac-proxy
    - path: deploy/kustomize-deployment/manager_deployment.yaml
      match: gcr.io/kubebuilder/kube-rbac-proxy
    - path: deploy/helm/templates/deployment.yaml
      match: gcr.io/kubebuilder/kube-rbac-proxy
    - path: bundle/manifests/security-profiles-operator.clusterserviceversion.yaml
      match: gcr.io/kubebuilder/kube-rbac-proxy
    - path: deploy/openshift-downstream.yaml
      match: gcr.io/kubebuilder/kube-rbac-proxy
    - path: deploy/operator.yaml
      match: gcr.io/kubebuilder/kube-rbac-proxy
    - path: deploy/webhook-operator.yaml
      match: gcr.io/kubebuilder/kube-rbac-proxy
    - path: deploy/openshift-dev.yaml
      match: gcr.io/kubebuilder/kube-rbac-proxy
    - path: deploy/namespace-operator.yaml
      match: gcr.io/kubebuilder/kube-rbac-proxy

  - name: gcb-docker-gcloud
    version: v20241111-71c32dbdcc
    refPaths:
    - path: cloudbuild.yaml
      match: gcr.io/k8s-staging-test-infra/gcb-docker-gcloud

  - name: libbpf
    version: 1.5.0
    refPaths:
    - path: hack/install-libbpf.sh
      match: VERSION

  - name: fedora-vmlinux
    version: 37
    refPaths:
    - path: hack/update-vmlinux
      match: VERSION

  - name: crun
    version: 1.18.2
    refPaths:
    - path: examples/baseprofile-crun.yaml
      match: name
    - path: test/tc_base_profiles_test.go
      match: baseProfileNameCrun
    - path: hack/install-crun
      match: CRUN_VERSION

  - name: runc
    version: v1.2.2
    refPaths:
    - path: examples/baseprofile-runc.yaml
      match: name
    - path: test/tc_base_profiles_test.go
      match: baseProfileNameRunc
    - path: installation-usage.md
      match: baseProfileName

  - name: cosign
    version: v2.4.1
    refPaths:
    - path: hack/ci/Vagrantfile-ubuntu
      match: COSIGN_VERSION
    - path: hack/ci/Vagrantfile-debian
      match: COSIGN_VERSION

  - name: bom
    version: v0.6.0
    refPaths:
    - path: .github/workflows/build.yml
      match: BOM_VERSION

  - name: spo-current
    version: 0.8.5-dev
    refPaths:
    - path: VERSION
      match: ^.*
    - path: bundle/manifests/security-profiles-operator.clusterserviceversion.yaml
      match: "^  name: security-profiles-operator"
    - path: deploy/helm/Chart.yaml
      match: "^appVersion: "
    - path: deploy/helm/Chart.yaml
      match: "^version: "

  - name: clang
    version: 18
    refPaths:
    - path: nix/derivation-bpf.nix
      match: llvmPackages_\d+.clang-unwrapped
    - path: nix/derivation-bpf.nix
      match: llvm_\d+

  # TODO: update to the latest clang of debian 12 packages are available.
  - name: clang-debian-12
    version: 16
    refPaths:
    - path: hack/pull-security-profiles-operator-verify
      match: CLANG_VERSION

  - name: btfhub
    version: 12d2b6bb4664b6b1d15076f8090dcb0e55696d34
    refPaths:
    - path: hack/update-btf
      match: BTFHUB_COMMIT

  - name: flatcar
    version: 3510.2.3
    refPaths:
    - path: hack/ci/Vagrantfile-flatcar
      match: flatcar_production_vagrant
    - path: hack/ci/Vagrantfile-flatcar
      match: flatcar_developer_container

  - name: zeitgeist
    version: 0.5.4
    refPaths:
      - path: Makefile
        match: ZEITGEIST_VERSION

  - name: mdtoc
    version: v1.4.0
    refPaths:
      - path: Makefile
        match: MDTOC_VERSION

  - name: yq
    version: 4.44.3
    refPaths:
      - path: hack/ci/install-yq.sh
        match: YQ_VERSION