Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update golang Docker tag to v1.25.6
• Update actions/checkout action to v6
• Update sigstore/cosign-installer action to v4
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update docker/login-action digest to c94ce9f
• Update golang.org/x/exp digest to 716be56
• Update module github.com/containerd/containerd to v1.7.30
• Update module github.com/opencontainers/image-spec to v1.1.1
• Update dependency go to v1.25.6
• Update docker/dockerfile Docker tag to v1.21.0
• Update module github.com/moby/buildkit to v0.27.0
• Update module golang.org/x/sync to v0.19.0
• Update sigstore/cosign-installer action to v3.10.1
• Update module github.com/containerd/containerd to v2
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• docker/dockerfile 1.15.1 → [Updates: 1.21.0]
• golang 1.24.3-alpine → [Updates: 1.25.6-alpine]

github-actions (1)

.github/workflows/docker-image.yaml (8)

• actions/checkout v4 → [Updates: v6]
• sigstore/cosign-installer v3.8.1 → [Updates: v3.10.1, v4.0.0]
• docker/metadata-action v5
• docker/setup-qemu-action v3
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/login-action 6d4b68b490aef8836e8fb5e50ee7b3bdfa5894f0 → [Updates: undefined]
• docker/build-push-action v6

gomod (1)

go.mod (9)

• go 1.21
• go 1.24.3 → [Updates: 1.25.6]
• github.com/containerd/containerd v1.7.18 → [Updates: v1.7.30, v2.2.1]
• github.com/moby/buildkit v0.14.1 → [Updates: v0.27.0]
• github.com/opencontainers/image-spec v1.1.0 → [Updates: v1.1.1]
• github.com/pkg/errors v0.9.1
• golang.org/x/exp v0.0.0-20240613232115-7f521ea00fb8@7f521ea00fb8 → [Updates: v0.0.0-20260112195511-716be5621a96]
• golang.org/x/sync v0.7.0 → [Updates: v0.19.0]
• gopkg.in/yaml.v3 v3.0.1

---

• Check this box to trigger a request for Renovate to run again on this repository