Dependency Dashboard

[forking-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• fix(deps): update osv-scanner minor (github.com/ossf/osv-schema/bindings/go, google.golang.org/grpc, osv.dev/bindings/go)
• fix(deps): update module github.com/charmbracelet/lipgloss to v2
• chore(deps): lock file maintenance

Detected dependencies

bundler

docs/Gemfile

• github-pages "~> 232"
• jekyll-feed "~> 0.15"
• tzinfo ">= 1", "< 3"
• wdm "~> 0.2.0"
• http_parser.rb "~> 0.8.0"
• webrick "~> 1.7"

dockerfile

Dockerfile

• golang 1.24.5-alpine3.21@sha256:6edc20586dd08dacad538c1f09984bc2aa61720be59056cf75429691f294d731
• alpine 3.22@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1

action.dockerfile

• golang 1.24.5-alpine3.21@sha256:6edc20586dd08dacad538c1f09984bc2aa61720be59056cf75429691f294d731
• alpine 3.22@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1

goreleaser-action.dockerfile

• golang 1.24.5-alpine3.21@sha256:6edc20586dd08dacad538c1f09984bc2aa61720be59056cf75429691f294d731

goreleaser.dockerfile

• golang 1.24.5-alpine3.21@sha256:6edc20586dd08dacad538c1f09984bc2aa61720be59056cf75429691f294d731

github-actions

.github/workflows/checks.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/download-artifact v4.3.0@d3f86a106a0bac45b974a628896c90dbdf5c8093
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• docker/setup-qemu-action v3@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435
• goreleaser/goreleaser-action v6.3.0@9c156ee8a17a598857849441385a2041ef570552

.github/workflows/codeql-analysis.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• github/codeql-action v3.29.2@181d5eefc20863364f96762470ba6f862bdef56b
• github/codeql-action v3.29.2@181d5eefc20863364f96762470ba6f862bdef56b
• github/codeql-action v3.29.2@181d5eefc20863364f96762470ba6f862bdef56b

.github/workflows/goreleaser-nightly.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• docker/setup-qemu-action v3@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3@74a5d142397b4f367a81961eba4e8cd7edddf772
• goreleaser/goreleaser-action v6.3.0@9c156ee8a17a598857849441385a2041ef570552

.github/workflows/goreleaser.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• docker/setup-qemu-action v3@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3@74a5d142397b4f367a81961eba4e8cd7edddf772
• goreleaser/goreleaser-action v6.3.0@9c156ee8a17a598857849441385a2041ef570552
• slsa-framework/slsa-github-generator v2.1.0

.github/workflows/links.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• tcort/github-action-markdown-link-check v1.1.0@a800ad5f1c35bf61987946fd31c15726a1c9f2ba

.github/workflows/lint-action/action.yml

• golangci/golangci-lint-action v8.0.0@4afd733a84b1f43292c63897423277bb7f4313a9

.github/workflows/osv-scanner-reusable-pr.yml

.github/workflows/osv-scanner-reusable.yml

.github/workflows/osv-scanner-unified-action.yml

.github/workflows/pr-check.yml

• amannn/action-semantic-pull-request v5.5.3@0723387faaf9b38adef4775cd42cfd5155ed6017

.github/workflows/prerelease-check.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• tcort/github-action-markdown-link-check v1.1.0@a800ad5f1c35bf61987946fd31c15726a1c9f2ba
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/download-artifact v4.3.0@d3f86a106a0bac45b974a628896c90dbdf5c8093
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5

.github/workflows/renovate-validator.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020

.github/workflows/scorecards.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.2@05b42c624433fc40578a4040d5cf5e36ddca8cde
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• github/codeql-action v3.29.2@181d5eefc20863364f96762470ba6f862bdef56b

.github/workflows/snapshots.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• peter-evans/create-pull-request v7.0.8@271a8d0340265f705b14b6d32b9829c1cb33d45e

.github/workflows/staleness.yml

• actions/stale v9.1.0@5bef64f19d7facfb25b37b414482c7164d639639

.github/workflows/test-action/action.yml

• codecov/codecov-action v5.4.3@18283e04ce6e62d37312384ff67231eb8fd56d24

gomod

go.mod

• deps.dev/api/v3 v3.0.0-20250630145910-0bba51f925b0@0bba51f925b0
• deps.dev/util/maven v0.0.0-20250630145910-0bba51f925b0@0bba51f925b0
• deps.dev/util/resolve v0.0.0-20250630145910-0bba51f925b0@0bba51f925b0
• deps.dev/util/semver v0.0.0-20250630145910-0bba51f925b0@0bba51f925b0
• github.com/BurntSushi/toml v1.5.0
• github.com/CycloneDX/cyclonedx-go v0.9.2
• github.com/charmbracelet/bubbles v0.21.0
• github.com/charmbracelet/bubbletea v1.3.6
• github.com/charmbracelet/glamour v0.10.0
• github.com/charmbracelet/lipgloss v1.1.1-0.20250404203927-76690c660834@76690c660834
• github.com/gkampitakis/go-snaps v0.5.13
• github.com/go-git/go-billy/v5 v5.6.2
• github.com/go-git/go-git/v5 v5.16.2
• github.com/google/go-cmp v0.7.0
• github.com/google/osv-scalibr v0.3.1
• github.com/ianlancetaylor/demangle v0.0.0-20250628045327-2d64ad6b7ec5@2d64ad6b7ec5
• github.com/jedib0t/go-pretty/v6 v6.6.7
• github.com/muesli/reflow v0.3.0
• github.com/opencontainers/go-digest v1.0.0
• github.com/ossf/osv-schema/bindings/go v0.0.0-20250715064423-7310c9ec4b2a@7310c9ec4b2a
• github.com/owenrumney/go-sarif/v3 v3.2.1
• github.com/package-url/packageurl-go v0.1.3
• github.com/pandatix/go-cvss v0.6.2
• github.com/tidwall/gjson v1.18.0
• github.com/tidwall/pretty v1.2.1
• github.com/tidwall/sjson v1.2.5
• github.com/urfave/cli/v3 v3.3.8
• golang.org/x/net v0.42.0
• golang.org/x/sync v0.16.0
• golang.org/x/term v0.33.0
• google.golang.org/grpc v1.74.0
• google.golang.org/protobuf v1.36.6
• gopkg.in/ini.v1 v1.67.0
• gopkg.in/yaml.v3 v3.0.1
• osv.dev/bindings/go v0.0.0-20250716051240-efc8ec45c9b0@efc8ec45c9b0

---

• Check this box to trigger a request for Renovate to run again on this repository