Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update module github.com/stretchr/testify to v1.12.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update github/codeql-action action to v4.37.7
• fix(deps): update module github.com/google/go-github/v85 to v90
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update module github.com/puzpuzpuz/xsync to v4

Detected Dependencies

github-actions (5)

.github/workflows/codeql.yml (5)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• github/codeql-action v4.37.6@5595ccaf912efad79be6eef63a5619ff05969be3 → [Updates: v4.37.7]
• github/codeql-action v4.37.6@5595ccaf912efad79be6eef63a5619ff05969be3 → [Updates: v4.37.7]
• github/codeql-action v4.37.6@5595ccaf912efad79be6eef63a5619ff05969be3 → [Updates: v4.37.7]

.github/workflows/releaser.yml (8)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• slsa-framework/slsa-github-generator v2.1.0
• slsa-framework/slsa-verifier v2.7.1@ea584f4502babc6f60d9bc799dbbb13c1caa9ee6

.github/workflows/security-scan.yml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• anchore/scan-action v7.4.0@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2
• github/codeql-action v4.37.6@5595ccaf912efad79be6eef63a5619ff05969be3 → [Updates: v4.37.7]

.github/workflows/test.yml (16)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• arduino/setup-task v3.0.0@c0bc642852239c2689f73f4ea6459c29405f3c52
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• arduino/setup-task v3.0.0@c0bc642852239c2689f73f4ea6459c29405f3c52
• coverallsapp/github-action v2.3.8@8d6379e14d29928660c4ba802d8e85393440b329
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• golangci/golangci-lint-action v9.3.0@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• arduino/setup-task v3.0.0@c0bc642852239c2689f73f4ea6459c29405f3c52
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

.github/workflows/triage.yml (1)

• stacklok/.github v1@b43e3f174f9bbf2ca4efe6e421a1d007e7fa1b8f

gomod (1)

go.mod (13)

• go 1.26.3
• github.com/deckarep/golang-set/v2 v2.9.0
• github.com/go-git/go-billy/v5 v5.9.1
• github.com/google/go-containerregistry v0.21.9
• github.com/google/go-github/v85 v85.0.0 → [Updates: v90.0.0]
• github.com/moby/buildkit v0.32.2
• github.com/olekukonko/tablewriter v1.1.4
• github.com/puzpuzpuz/xsync v1.5.2 → [Updates: v4.5.0]
• github.com/spf13/cobra v1.10.2
• github.com/stretchr/testify v1.11.1 → [Updates: v1.12.0]
• golang.org/x/sync v0.22.0
• gopkg.in/h2non/gock.v1 v1.1.2
• gopkg.in/yaml.v3 v3.0.1

---

• Check this box to trigger a request for Renovate to run again on this repository