Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/setup-go digest to 40f1582
• fix(deps): update module github.com/google/go-containerregistry to v0.20.7
• fix(deps): update module github.com/spf13/cobra to v1.10.2
• fix(deps): update module github.com/go-git/go-billy/v5 to v5.7.0
• chore(deps): update actions/checkout action to v6
• fix(deps): update module github.com/google/go-github/v66 to v80
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package arduino/setup-task).

Files affected: .github/workflows/test.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/checkout digest to 34e1148
• chore(deps): update github/codeql-action digest to 5d4e8d1
• chore(deps): update dependency go to v1.25.5
• chore(deps): update sigstore/cosign-installer action to v3.10.1
• chore(deps): update anchore/sbom-action action to v0.21.0
• fix(deps): update module github.com/moby/buildkit to v0.26.3
• fix(deps): update module github.com/olekukonko/tablewriter to v1.1.2
• fix(deps): update module golang.org/x/sync to v0.19.0
• chore(deps): update golangci/golangci-lint-action action to v9
• chore(deps): update sigstore/cosign-installer action to v4
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update actions/setup-go action to v6
• fix(deps): update module github.com/puzpuzpuz/xsync to v4

Detected Dependencies

github-actions (4)

.github/workflows/codeql.yml (5)

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 → [Updates: v6, v4]
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v6, v5]
• github/codeql-action v4@e296a935590eb16afc0c0108289f68c87e2a89a5 → [Updates: v4]
• github/codeql-action v4@e296a935590eb16afc0c0108289f68c87e2a89a5 → [Updates: v4]
• github/codeql-action v4@e296a935590eb16afc0c0108289f68c87e2a89a5 → [Updates: v4]

.github/workflows/releaser.yml (8)

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 → [Updates: v6, v4]
• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 → [Updates: v6, v4]
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v6, v5]
• anchore/sbom-action v0.20.5@da167eac915b4e86f08b264dbdbc867b61be6f0c → [Updates: v0.21.0]
• sigstore/cosign-installer v3.10.0@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 → [Updates: v3.10.1, v4.0.0]
• goreleaser/goreleaser-action v6@e435ccd777264be153ace6237001ef4d979d3a7a
• slsa-framework/slsa-github-generator v2.1.0
• slsa-framework/slsa-verifier v2.7.1@ea584f4502babc6f60d9bc799dbbb13c1caa9ee6

.github/workflows/test.yml (16)

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 → [Updates: v6, v4]
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v6, v5]
• arduino/setup-task v1@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f
• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 → [Updates: v6, v4]
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v6, v5]
• arduino/setup-task v1@b91d5d2c96a56797b48ac1e0e89220bf64044611
• coverallsapp/github-action v2.3.6@648a8eb78e6d50909eff900e4ec85cab4524a45b
• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 → [Updates: v6, v4]
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v6, v5]
• golangci/golangci-lint-action v8@4afd733a84b1f43292c63897423277bb7f4313a9 → [Updates: v9]
• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 → [Updates: v6, v4]
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v6, v5]
• arduino/setup-task v1@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 → [Updates: v6, v4]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131

.github/workflows/trivy.yml (3)

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 → [Updates: v6, v4]
• aquasecurity/trivy-action 0.33.1@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8
• github/codeql-action v4@e296a935590eb16afc0c0108289f68c87e2a89a5 → [Updates: v4]

gomod (1)

go.mod (14)

• go 1.24.0
• go 1.25.2 → [Updates: 1.25.5]
• github.com/deckarep/golang-set/v2 v2.8.0
• github.com/go-git/go-billy/v5 v5.6.2 → [Updates: v5.7.0]
• github.com/google/go-containerregistry v0.20.6 → [Updates: v0.20.7]
• github.com/google/go-github/v66 v66.0.0 → [Updates: v80.0.0]
• github.com/moby/buildkit v0.25.1 → [Updates: v0.26.3]
• github.com/olekukonko/tablewriter v1.0.9 → [Updates: v1.1.2]
• github.com/puzpuzpuz/xsync v1.5.2 → [Updates: v4.2.0]
• github.com/spf13/cobra v1.10.1 → [Updates: v1.10.2]
• github.com/stretchr/testify v1.11.1
• golang.org/x/sync v0.17.0 → [Updates: v0.19.0]
• gopkg.in/h2non/gock.v1 v1.1.2
• gopkg.in/yaml.v3 v3.0.1

---

• Check this box to trigger a request for Renovate to run again on this repository