Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update github actions (major) (actions/checkout, actions/setup-node, peter-evans/create-pull-request)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update non-major dependencies (astro, github.com/digitalocean/godo, github.com/goreleaser/goreleaser/v2, golang.org/x/crypto)
• chore(deps): update github actions (github/codeql-action, renovatebot/github-action)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile.release (2)

• docker/dockerfile 1.25
• golang 1.26.5-bookworm

github-actions (8)

.github/workflows/ci.yml (7)

• actions/checkout v7.0.0
• actions/setup-go v6.5.0
• golangci/golangci-lint-action v9.3.0
• actions/upload-artifact v7.0.1
• actions/checkout v7.0.0
• actions/download-artifact v8.0.1
• SonarSource/sonarqube-scan-action v8.2.0

.github/workflows/codeql.yml (4)

• actions/checkout v7.0.0
• github/codeql-action v4.36.3 → [Updates: v4.37.0]
• actions/setup-go v6.5.0
• github/codeql-action v4.36.3 → [Updates: v4.37.0]

.github/workflows/docs.yml (5)

• actions/checkout v7.0.0
• actions/setup-node v6.4.0
• actions/upload-pages-artifact v5.0.0
• actions/deploy-pages v5.0.0
• node 24

.github/workflows/openwiki-update.yml (4)

• actions/checkout v4 → [Updates: v7]
• actions/setup-node v4 → [Updates: v6]
• peter-evans/create-pull-request v7 → [Updates: v8]
• node 24

.github/workflows/release-please.yml (1)

• googleapis/release-please-action v5.0.0

.github/workflows/release.yml (13)

• actions/checkout v7.0.0
• actions/setup-go v6.5.0
• goreleaser/goreleaser-action v7.2.3
• actions/attest-build-provenance v4.1.1
• actions/checkout v7.0.0
• docker/setup-qemu-action v4.2.0
• docker/setup-buildx-action v4.2.0
• docker/login-action v4.4.0
• docker/build-push-action v7.3.0
• actions/attest-build-provenance v4.1.1
• aquasecurity/trivy-action v0.36.0
• github/codeql-action v4.36.3 → [Updates: v4.37.0]
• aquasecurity/trivy-action v0.36.0

.github/workflows/renovate.yml (2)

• actions/checkout v7.0.0
• renovatebot/github-action v46.1.17 → [Updates: v46.1.18]

.github/workflows/security.yml (8)

• actions/checkout v7.0.0
• actions/setup-go v6.5.0
• actions/checkout v7.0.0
• actions/dependency-review-action v5.0.0
• actions/checkout v7.0.0
• aquasecurity/trivy-action v0.36.0
• github/codeql-action v4.36.3 → [Updates: v4.37.0]
• aquasecurity/trivy-action v0.36.0

gomod (1)

go.mod (12)

• go 1.26.5
• charm.land/bubbles/v2 v2.1.1
• charm.land/bubbletea/v2 v2.0.8
• charm.land/lipgloss/v2 v2.0.5
• filippo.io/age v1.3.1
• github.com/a-h/templ v0.3.1020
• github.com/digitalocean/godo v1.197.0 → [Updates: v1.198.0]
• github.com/getsops/sops/v3 v3.13.2
• github.com/mattn/go-isatty v0.0.22
• github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c@5ac0b6a4141c
• golang.org/x/crypto v0.53.0 → [Updates: v0.54.0]
• gopkg.in/yaml.v3 v3.0.1

npm (1)

docs/package.json (4)

• @astrojs/starlight ^0.41.1
• astro ^7.0.3 → [Updates: ^7.0.3]
• sharp ^0.35.2
• node >=20.19.0

regex (5)

.github/workflows/release.yml (1)

• github.com/goreleaser/goreleaser/v2 v2.16.0 → [Updates: v2.17.0]

.github/workflows/release.yml (1)

• anchore/syft v1.46.0

.github/workflows/release.yml (1)

• aquasecurity/trivy v0.72.0

.github/workflows/security.yml (1)

• golang.org/x/vuln v1.5.0

.github/workflows/security.yml (1)

• aquasecurity/trivy v0.72.0

---

• Check this box to trigger a request for Renovate to run again on this repository