Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update module github.com/go-git/go-billy/v5 to v5.9.0 [security]
• chore(deps): update actions/checkout digest to df4cb1c
• chore(deps): update github/codeql-action digest to 87557b9
• chore(deps): update golangci/golangci-lint-action digest to 82606bf
• chore(deps): update goreleaser/goreleaser-action digest to 5daf1e9
• chore(deps): update sigstore/cosign-installer action to v4.1.2
• fix(deps): update module github.com/google/go-containerregistry to v0.21.6
• fix(deps): update module github.com/moby/buildkit to v0.30.0
• fix(deps): update module github.com/google/go-github/v85 to v88
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update module github.com/puzpuzpuz/xsync to v4

Detected Dependencies

github-actions (5)

.github/workflows/codeql.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• github/codeql-action v4@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4]
• github/codeql-action v4@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4]
• github/codeql-action v4@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4]

.github/workflows/releaser.yml (8)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]
• goreleaser/goreleaser-action v7@1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8 → [Updates: v7]
• slsa-framework/slsa-github-generator v2.1.0
• slsa-framework/slsa-verifier v2.7.1@ea584f4502babc6f60d9bc799dbbb13c1caa9ee6

.github/workflows/security-scan.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• anchore/scan-action v7.4.0@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2
• github/codeql-action v4@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4]

.github/workflows/test.yml (16)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• coverallsapp/github-action v2.3.6@648a8eb78e6d50909eff900e4ec85cab4524a45b
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• golangci/golangci-lint-action v9@1e7e51e771db61008b38414a730f564565cf7c20 → [Updates: v9]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

.github/workflows/triage.yml (1)

• stacklok/.github v1@b43e3f174f9bbf2ca4efe6e421a1d007e7fa1b8f

gomod (1)

go.mod (13)

• go 1.25.7
• github.com/deckarep/golang-set/v2 v2.9.0
• github.com/go-git/go-billy/v5 v5.8.0 → [Updates: v5.9.0]
• github.com/google/go-containerregistry v0.21.5 → [Updates: v0.21.6]
• github.com/google/go-github/v85 v85.0.0 → [Updates: v88.0.0]
• github.com/moby/buildkit v0.29.0 → [Updates: v0.30.0]
• github.com/olekukonko/tablewriter v1.1.4
• github.com/puzpuzpuz/xsync v1.5.2 → [Updates: v4.5.0]
• github.com/spf13/cobra v1.10.2
• github.com/stretchr/testify v1.11.1
• golang.org/x/sync v0.20.0
• gopkg.in/h2non/gock.v1 v1.1.2
• gopkg.in/yaml.v3 v3.0.1

---

• Check this box to trigger a request for Renovate to run again on this repository