Dependency Dashboard #6
Description
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Awaiting Schedule
The following updates are awaiting their schedule. To get an update now, click on a checkbox below.
- fix(deps): update osv-scanner minor (
github.com/ossf/osv-schema/bindings/go,github.com/urfave/cli/v3,golang.org/x/net,golang.org/x/term,google.golang.org/grpc,google.golang.org/protobuf,osv.dev/bindings/go) - fix(deps): update module github.com/google/osv-scalibr to v0.3.2
- chore(deps): update golang docker tag to v1.25.0
- chore(deps): update workflows (
amannn/action-semantic-pull-request,codecov/codecov-action,github/codeql-action,goreleaser/goreleaser-action) - fix(deps): update module github.com/charmbracelet/lipgloss to v2
- chore(deps): lock file maintenance
Detected dependencies
bundler
docs/Gemfile
github-pages "~> 232"jekyll-feed "~> 0.15"tzinfo ">= 1", "< 3"wdm "~> 0.2.0"http_parser.rb "~> 0.8.0"webrick "~> 1.7"
dockerfile
action.dockerfile
golang 1.24.6-alpine3.21@sha256:50f8a10a46c0c26b5b816a80314f1999196c44c3e3571f41026b061339c29db6alpine 3.22@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1Dockerfile
golang 1.24.6-alpine3.21@sha256:50f8a10a46c0c26b5b816a80314f1999196c44c3e3571f41026b061339c29db6alpine 3.22@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1docs/docs.Dockerfile
ruby 3goreleaser-action.dockerfile
golang 1.24.6-alpine3.21@sha256:50f8a10a46c0c26b5b816a80314f1999196c44c3e3571f41026b061339c29db6goreleaser.dockerfile
golang 1.24.6-alpine3.21@sha256:50f8a10a46c0c26b5b816a80314f1999196c44c3e3571f41026b061339c29db6
github-actions
.github/workflows/checks.yml
actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5docker/setup-qemu-action v3@29109295f81e9208d7d86ff1c6c12d2833863392docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435goreleaser/goreleaser-action v6.3.0@9c156ee8a17a598857849441385a2041ef570552.github/workflows/codeql-analysis.yml
actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5github/codeql-action v3.29.8@76621b61decf072c1cee8dd1ce2d2a82d33c17edgithub/codeql-action v3.29.8@76621b61decf072c1cee8dd1ce2d2a82d33c17edgithub/codeql-action v3.29.8@76621b61decf072c1cee8dd1ce2d2a82d33c17ed.github/workflows/goreleaser-nightly.yml
actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5docker/setup-qemu-action v3@29109295f81e9208d7d86ff1c6c12d2833863392docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435docker/login-action v3@184bdaa0721073962dff0199f1fb9940f07167d1goreleaser/goreleaser-action v6.3.0@9c156ee8a17a598857849441385a2041ef570552.github/workflows/goreleaser.yml
actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5docker/setup-qemu-action v3@29109295f81e9208d7d86ff1c6c12d2833863392docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435docker/login-action v3@184bdaa0721073962dff0199f1fb9940f07167d1goreleaser/goreleaser-action v6.3.0@9c156ee8a17a598857849441385a2041ef570552slsa-framework/slsa-github-generator v2.1.0.github/workflows/links.yml
actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8tcort/github-action-markdown-link-check v1.1.0@a800ad5f1c35bf61987946fd31c15726a1c9f2ba.github/workflows/lint-action/action.yml
golangci/golangci-lint-action v8.0.0@4afd733a84b1f43292c63897423277bb7f4313a9.github/workflows/osv-scanner-reusable-pr.yml
.github/workflows/osv-scanner-reusable.yml
.github/workflows/osv-scanner-unified-action.yml
.github/workflows/pr-check.yml
amannn/action-semantic-pull-request v6.0.1@fdd4d3ddf614fbcd8c29e4b106d3bbe0cb2c605d.github/workflows/prerelease-check.yml
actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8tcort/github-action-markdown-link-check v1.1.0@a800ad5f1c35bf61987946fd31c15726a1c9f2baactions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5.github/workflows/renovate-validator.yml
actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020.github/workflows/scorecards.yml
actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8ossf/scorecard-action v2.4.2@05b42c624433fc40578a4040d5cf5e36ddca8cdeactions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02github/codeql-action v3.29.8@76621b61decf072c1cee8dd1ce2d2a82d33c17ed.github/workflows/snapshots.yml
actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5peter-evans/create-pull-request v7.0.8@271a8d0340265f705b14b6d32b9829c1cb33d45e.github/workflows/staleness.yml
actions/stale v9.1.0@5bef64f19d7facfb25b37b414482c7164d639639.github/workflows/test-action/action.yml
codecov/codecov-action v5.4.3@18283e04ce6e62d37312384ff67231eb8fd56d24
gomod
go.mod
go 1.24.6deps.dev/api/v3 v3.0.0-20250729065307-991cf8720f82@991cf8720f82deps.dev/util/maven v0.0.0-20250729065307-991cf8720f82@991cf8720f82deps.dev/util/resolve v0.0.0-20250729065307-991cf8720f82@991cf8720f82deps.dev/util/semver v0.0.0-20250729065307-991cf8720f82@991cf8720f82github.com/BurntSushi/toml v1.5.0github.com/CycloneDX/cyclonedx-go v0.9.2github.com/charmbracelet/bubbles v0.21.0github.com/charmbracelet/bubbletea v1.3.6github.com/charmbracelet/glamour v0.10.0github.com/charmbracelet/lipgloss v1.1.1-0.20250404203927-76690c660834@76690c660834github.com/gkampitakis/go-snaps v0.5.14github.com/go-git/go-git/v5 v5.16.2github.com/google/go-cmp v0.7.0github.com/google/osv-scalibr v0.3.2-0.20250812004447-f38f28e2746b@f38f28e2746bgithub.com/ianlancetaylor/demangle v0.0.0-20250628045327-2d64ad6b7ec5@2d64ad6b7ec5github.com/jedib0t/go-pretty/v6 v6.6.8github.com/muesli/reflow v0.3.0github.com/opencontainers/go-digest v1.0.0github.com/ossf/osv-schema/bindings/go v0.0.0-20250804010012-a529c42c15de@a529c42c15degithub.com/owenrumney/go-sarif/v3 v3.2.1github.com/package-url/packageurl-go v0.1.3github.com/pandatix/go-cvss v0.6.2github.com/tidwall/gjson v1.18.0github.com/tidwall/pretty v1.2.1github.com/tidwall/sjson v1.2.5github.com/urfave/cli/v3 v3.3.8golang.org/x/net v0.42.0golang.org/x/sync v0.16.0golang.org/x/term v0.33.0google.golang.org/grpc v1.74.2google.golang.org/protobuf v1.36.6gopkg.in/ini.v1 v1.67.0gopkg.in/yaml.v3 v3.0.1osv.dev/bindings/go v0.0.0-20250731024040-0ecbb9ee94cb@0ecbb9ee94cb
- Check this box to trigger a request for Renovate to run again on this repository