Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/setup-go digest to 40f1582
• fix(deps): update module github.com/google/go-containerregistry to v0.20.7
• fix(deps): update module github.com/spf13/cobra to v1.10.2
• fix(deps): update module github.com/go-git/go-billy/v5 to v5.7.0
• chore(deps): update actions/checkout action to v6
• fix(deps): update module github.com/google/go-github/v66 to v80
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package arduino/setup-task).

Files affected: .github/workflows/test.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/checkout digest to 34e1148
• chore(deps): update github/codeql-action digest to 5d4e8d1
• chore(deps): update dependency go to v1.25.5
• chore(deps): update sigstore/cosign-installer action to v3.10.1
• chore(deps): update anchore/sbom-action action to v0.21.0
• fix(deps): update module github.com/moby/buildkit to v0.26.3
• fix(deps): update module github.com/olekukonko/tablewriter to v1.1.2
• fix(deps): update module golang.org/x/sync to v0.19.0
• chore(deps): update golangci/golangci-lint-action action to v9
• chore(deps): update sigstore/cosign-installer action to v4
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update actions/setup-go action to v6
• fix(deps): update module github.com/puzpuzpuz/xsync to v4

Detected Dependencies

github-actions (4)

.github/workflows/codeql.yml (5)

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• github/codeql-action v4@e296a935590eb16afc0c0108289f68c87e2a89a5
• github/codeql-action v4@e296a935590eb16afc0c0108289f68c87e2a89a5
• github/codeql-action v4@e296a935590eb16afc0c0108289f68c87e2a89a5

.github/workflows/releaser.yml (8)

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• anchore/sbom-action v0.20.5@da167eac915b4e86f08b264dbdbc867b61be6f0c
• sigstore/cosign-installer v3.10.0@d7543c93d881b35a8faa02e8e3605f69b7a1ce62
• goreleaser/goreleaser-action v6@e435ccd777264be153ace6237001ef4d979d3a7a
• slsa-framework/slsa-github-generator v2.1.0
• slsa-framework/slsa-verifier v2.7.1@ea584f4502babc6f60d9bc799dbbb13c1caa9ee6

.github/workflows/test.yml (16)

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• arduino/setup-task v1@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f
• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• arduino/setup-task v1@b91d5d2c96a56797b48ac1e0e89220bf64044611
• coverallsapp/github-action v2.3.6@648a8eb78e6d50909eff900e4ec85cab4524a45b
• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• golangci/golangci-lint-action v8@4afd733a84b1f43292c63897423277bb7f4313a9
• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• arduino/setup-task v1@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131

.github/workflows/trivy.yml (3)

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955
• aquasecurity/trivy-action 0.33.1@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8
• github/codeql-action v4@e296a935590eb16afc0c0108289f68c87e2a89a5

gomod (1)

go.mod (14)

• go 1.24.0
• go 1.25.2
• github.com/deckarep/golang-set/v2 v2.8.0
• github.com/go-git/go-billy/v5 v5.6.2
• github.com/google/go-containerregistry v0.20.6
• github.com/google/go-github/v66 v66.0.0
• github.com/moby/buildkit v0.25.1
• github.com/olekukonko/tablewriter v1.0.9
• github.com/puzpuzpuz/xsync v1.5.2
• github.com/spf13/cobra v1.10.1
• github.com/stretchr/testify v1.11.1
• golang.org/x/sync v0.17.0
• gopkg.in/h2non/gock.v1 v1.1.2
• gopkg.in/yaml.v3 v3.0.1

---

• Check this box to trigger a request for Renovate to run again on this repository