Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/checkout action to v7

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update module github.com/go-git/go-billy/v5 to v5.9.0 [security]
• chore(deps): update actions/checkout digest to df4cb1c
• chore(deps): update github/codeql-action digest to 8aad20d
• chore(deps): update golangci/golangci-lint-action digest to 82606bf
• chore(deps): update goreleaser/goreleaser-action digest to 5daf1e9
• chore(deps): update sigstore/cosign-installer action to v4.1.2
• fix(deps): update module github.com/google/go-containerregistry to v0.21.7
• fix(deps): update module github.com/moby/buildkit to v0.31.0
• fix(deps): update module golang.org/x/sync to v0.21.0
• fix(deps): update module github.com/google/go-github/v85 to v88
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update module github.com/puzpuzpuz/xsync to v4

Detected Dependencies

github-actions (5)

.github/workflows/codeql.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• github/codeql-action v4@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4]
• github/codeql-action v4@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4]
• github/codeql-action v4@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4]

.github/workflows/releaser.yml (8)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]
• goreleaser/goreleaser-action v7@1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8 → [Updates: v7]
• slsa-framework/slsa-github-generator v2.1.0
• slsa-framework/slsa-verifier v2.7.1@ea584f4502babc6f60d9bc799dbbb13c1caa9ee6

.github/workflows/security-scan.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• anchore/scan-action v7.4.0@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2
• github/codeql-action v4@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4]

.github/workflows/test.yml (16)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• coverallsapp/github-action v2.3.6@648a8eb78e6d50909eff900e4ec85cab4524a45b
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• golangci/golangci-lint-action v9@1e7e51e771db61008b38414a730f564565cf7c20 → [Updates: v9]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

.github/workflows/triage.yml (1)

• stacklok/.github v1@b43e3f174f9bbf2ca4efe6e421a1d007e7fa1b8f

gomod (1)

go.mod (13)

• go 1.25.7
• github.com/deckarep/golang-set/v2 v2.9.0
• github.com/go-git/go-billy/v5 v5.8.0 → [Updates: v5.9.0]
• github.com/google/go-containerregistry v0.21.5 → [Updates: v0.21.7]
• github.com/google/go-github/v85 v85.0.0 → [Updates: v88.0.0]
• github.com/moby/buildkit v0.29.0 → [Updates: v0.31.0]
• github.com/olekukonko/tablewriter v1.1.4
• github.com/puzpuzpuz/xsync v1.5.2 → [Updates: v4.5.0]
• github.com/spf13/cobra v1.10.2
• github.com/stretchr/testify v1.11.1
• golang.org/x/sync v0.20.0 → [Updates: v0.21.0]
• gopkg.in/h2non/gock.v1 v1.1.2
• gopkg.in/yaml.v3 v3.0.1

---

• Check this box to trigger a request for Renovate to run again on this repository