Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (2)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/hashicorp/hcl/v2	2025-07-07
gomod	gopkg.in/yaml.v3	2022-05-27

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/setup-python digest to ece7cb0 in .github/workflows/docs.yml (main)
• chore(deps): update golangci/golangci-lint-action digest to ba0d7d2 in .github/workflows/lint.yml (main)
• chore(deps): update hashicorp/setup-terraform digest to dfe3c3f in .github/workflows/integration.yml (main)
• chore(deps): update ossf/scorecard-action action to v2.4.4 in .github/workflows/scorecard.yml (main)
• fix(deps): update module github.com/rs/zerolog to v1.35.1 in go.mod (main)
• chore(deps): update dependency golangci/golangci-lint to v2.13.2 in .github/workflows/lint.yml (main)
• chore(deps): update github/codeql-action action to v4.37.9 in .github/workflows/scorecard.yml (main)
• chore(deps): update go module directive to v1.27.1 in lambda/go.mod (main)
• fix(deps): update module cloud.google.com/go/storage to v1.66.0 in go.mod (main)
• fix(deps): update module github.com/aws/aws-lambda-go to v1.55.0 in lambda/go.mod (main)
• fix(deps): update module github.com/terramate-io/terramate to v0.17.2 in go.mod (main)
• fix(deps): update module github.com/zclconf/go-cty to v1.19.0 in go.mod (main)
• chore(deps): update actions/checkout action to v7 in .github/workflows/test.yml (main)
• chore(deps): update actions/github-script action to v8 in .github/workflows/scorecard-pr.yml (main)
• chore(deps): update actions/github-script action to v9 in .github/workflows/scorecard-pr.yml (main)
• chore(deps): update actions/labeler action to v7 in .github/workflows/labeler.yml (main)
• chore(deps): update actions/setup-go action to v7 in .github/workflows/test.yml (main)
• chore(deps): update actions/setup-python action to v7 in .github/workflows/docs.yml (main)
• chore(deps): update actions/upload-artifact action to v5 in .github/workflows/scorecard.yml (main)
• chore(deps): update actions/upload-artifact action to v6 in .github/workflows/scorecard.yml (main)
• chore(deps): update actions/upload-artifact action to v7 in .github/workflows/scorecard.yml (main)
• fix(deps): update module github.com/google/go-github/v84 to v85 in go.mod (main)
• fix(deps): update module github.com/google/go-github/v84 to v86 in go.mod (main)
• fix(deps): update module github.com/google/go-github/v84 to v87 in go.mod (main)
• fix(deps): update module github.com/google/go-github/v84 to v88 in go.mod (main)
• fix(deps): update module github.com/google/go-github/v84 to v89 in go.mod (main)
• fix(deps): update module github.com/google/go-github/v84 to v90 in go.mod (main)
• chore(deps): lock file maintenance in e2e/stack-c/main.tf (main)
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update actions/deploy-pages digest to 368f825 in .github/workflows/docs.yml (main)
• fix(deps): update module github.com/google/go-github/v84 to v91 in go.mod (main)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module github.com/klauspost/compress to v1.18.7 [security] (main)
• chore(deps): update module github.com/sigstore/rekor to v1.5.2 [security] (main)
• chore(deps): update module go.opentelemetry.io/otel to v1.44.0 [security] (main)
• chore(deps): update module golang.org/x/crypto to v0.56.0 [security] (main)
• chore(deps): update module golang.org/x/mod to v0.40.0 [security] (main)
• chore(deps): update module golang.org/x/net to v0.56.0 [security] (main)
• chore(deps): update module golang.org/x/sys to v0.44.0 [security] (main)
• chore(deps): update module golang.org/x/text to v0.39.0 [security] (main)
• chore(deps): update module google.golang.org/grpc to v1.83.1 [security] (main)
• chore(deps): update module github.com/gruntwork-io/terragrunt to v1 [security] (main)
• chore(deps): update actions/checkout digest to d23441a in .github/workflows/test.yml (main)
• chore(deps): update actions/create-github-app-token digest to bcd2ba4 in .github/workflows/cross-repo-test.yml (main)
• chore(deps): update actions/github-script digest to f28e40c in .github/workflows/scorecard-pr.yml (main)
• chore(deps): update actions/labeler digest to b8dd2d9 in .github/workflows/labeler.yml (main)
• chore(deps): update actions/setup-go digest to 924ae3a in .github/workflows/test.yml (main)
• chore(deps): update aws-actions/configure-aws-credentials digest to cbe3b39 in .github/workflows/release.yml (main)
• chore(deps): update dorny/paths-filter digest to 0e4a8c6 in .github/workflows/test.yml (main)
• chore(deps): update goreleaser/goreleaser-action digest to f06c13b in .github/workflows/release.yml (main)
• fix(deps): update aws-sdk-go-v2 monorepo in lambda/go.mod (main) (github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/service/s3, github.com/aws/aws-sdk-go-v2/service/secretsmanager)
• chore(deps): update dorny/paths-filter action to v4 in .github/workflows/test.yml (main)
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update module github.com/sigstore/timestamp-authority to v2 [security] (main)

Detected Dependencies

docker-compose (1)

e2e/docker-compose.yaml (2)

• minio/minio latest@sha256:14cea493d9a34af32f524e538b8346cf79f3321eff8e708c1e2960462bd8936e
• minio/mc latest@sha256:a7fe349ef4bd8521fb8497f55c6042871b2ae640607cf99d9bede5e9bdf11727

github-actions (14)

.github/workflows/codeql.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4.37.9]
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4.37.9]
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4.37.9]

.github/workflows/cross-repo-test.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• dorny/paths-filter v3@de90cc6fb38fc0963ad72b210f1f284cd68cea36 → [Updates: v4, v3]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v7, v6]
• actions/create-github-app-token v3@f8d387b68d61c58ab83c6c016672934102569859 → [Updates: v3]

.github/workflows/docs.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v7, v6]
• actions/upload-pages-artifact v5@fc324d3547104276b827a68afc52ff2a11cc49c9
• actions/deploy-pages v5@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 → [Updates: v5]
• python 3.14

.github/workflows/e2e.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• dorny/paths-filter v3@de90cc6fb38fc0963ad72b210f1f284cd68cea36 → [Updates: v4, v3]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v7, v6]
• hashicorp/setup-terraform v4@5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85 → [Updates: v4]

.github/workflows/integration.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• dorny/paths-filter v3@de90cc6fb38fc0963ad72b210f1f284cd68cea36 → [Updates: v4, v3]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v7, v6]
• hashicorp/setup-terraform v4@5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85 → [Updates: v4]

.github/workflows/label-old-prs.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/labeler v6@634933edcd8ababfe52f92936142cc22ac488b1b → [Updates: v7, v6]

.github/workflows/labeler.yml (1)

• actions/labeler v6@634933edcd8ababfe52f92936142cc22ac488b1b → [Updates: v7, v6]

.github/workflows/lint.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• dorny/paths-filter v3@de90cc6fb38fc0963ad72b210f1f284cd68cea36 → [Updates: v4, v3]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v7, v6]
• golangci/golangci-lint-action v9@1e7e51e771db61008b38414a730f564565cf7c20 → [Updates: v9]
• golangci/golangci-lint v2.11.4 → [Updates: v2.13.2]

.github/workflows/neptune.yml

.github/workflows/release.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v7, v6]
• goreleaser/goreleaser-action v7@ec59f474b9834571250b370d4735c50f8e2d1e29 → [Updates: v7]
• aws-actions/configure-aws-credentials v6@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 → [Updates: v6]

.github/workflows/scorecard-pr.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/github-script v7@60a0d83039c74a4aee543508d2ffcb1c3799cdea → [Updates: v8, v9, v7]

.github/workflows/scorecard.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a → [Updates: v2.4.4]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v5, v6, v7]
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4.37.9]

.github/workflows/security.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v7, v6]

.github/workflows/test.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• dorny/paths-filter v3@de90cc6fb38fc0963ad72b210f1f284cd68cea36 → [Updates: v4, v3]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v7, v6]

gomod (2)

go.mod (24)

• go 1.26.2 → [Updates: 1.27.1]
• cloud.google.com/go/storage v1.62.0 → [Updates: v1.66.0]
• github.com/aws/aws-sdk-go-v2 v1.41.5 → [Updates: v1.45.1]
• github.com/aws/aws-sdk-go-v2/config v1.32.14 → [Updates: v1.33.2]
• github.com/aws/aws-sdk-go-v2/service/s3 v1.98.0 → [Updates: v1.110.0]
• github.com/google/go-github/v84 v84.0.0 → [Updates: v85.0.0, v86.0.0, v87.0.0, v88.0.0, v89.0.0, v90.0.0, v91.0.0]
• github.com/hashicorp/hcl/v2 v2.24.0
• github.com/rs/zerolog v1.35.0 → [Updates: v1.35.1]
• github.com/spf13/cobra v1.10.2
• github.com/terramate-io/terramate v0.16.0 → [Updates: v0.17.2]
• github.com/zclconf/go-cty v1.18.0 → [Updates: v1.19.0]
• golang.org/x/oauth2 v0.36.0
• gopkg.in/yaml.v3 v3.0.1
• github.com/gruntwork-io/terragrunt v0.82.0 → [Updates: v1.0.4]
• github.com/klauspost/compress v1.18.5 → [Updates: v1.18.7]
• github.com/sigstore/rekor v1.5.0 → [Updates: v1.5.2]
• github.com/sigstore/timestamp-authority v1.2.9 → [Updates: v2.0.3]
• go.opentelemetry.io/otel v1.43.0 → [Updates: v1.44.0]
• golang.org/x/crypto v0.49.0 → [Updates: v0.56.0]
• golang.org/x/mod v0.33.0 → [Updates: v0.40.0]
• golang.org/x/net v0.52.0 → [Updates: v0.56.0]
• golang.org/x/sys v0.42.0 → [Updates: v0.44.0]
• golang.org/x/text v0.35.0 → [Updates: v0.39.0]
• google.golang.org/grpc v1.80.0 → [Updates: v1.83.1]

lambda/go.mod (6)

• go 1.26.2 → [Updates: 1.27.1]
• github.com/aws/aws-lambda-go v1.54.0 → [Updates: v1.55.0]
• github.com/aws/aws-sdk-go-v2 v1.41.5 → [Updates: v1.45.1]
• github.com/aws/aws-sdk-go-v2/config v1.32.14 → [Updates: v1.33.2]
• github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.41.5 → [Updates: v1.47.0]
• github.com/golang-jwt/jwt/v5 v5.3.1

terraform (3)

e2e/stack-a/main.tf (2)

• local ~> 2.0
• null ~> 3.0

e2e/stack-b/main.tf (2)

• local ~> 2.0
• null ~> 3.0

e2e/stack-c/main.tf (2)

• local ~> 2.0
• null ~> 3.0

---

• Check this box to trigger a request for Renovate to run again on this repository