Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• [skip-release] Update github-actions (major) (actions/checkout, actions/setup-go, codecov/codecov-action, docker/build-push-action, docker/setup-buildx-action)

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-digest package libops/.github).

Files affected: .github/workflows/lint-test-build.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module go.opentelemetry.io/otel to v1.44.0 [security]
• chore(deps): update module golang.org/x/net to v0.56.0 [security]
• chore(deps): update module golang.org/x/text to v0.39.0 [security]
• chore(deps): update module google.golang.org/grpc to v1.82.1 [security]
• [skip-release] Update github-actions (actions/checkout, actions/setup-go, codecov/codecov-action, docker/build-push-action, docker/setup-buildx-action, golangci/golangci-lint-action, goreleaser/goreleaser-action)
• fix(deps): update bump-dependencies (golang, google.golang.org/api)
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

5/6 CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/crypto

• GO-2026-5932

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• golang 1.25.12-alpine@sha256:56961d79ea8129efddcc0b8643fd8a5416b4e6228cfd477e3fd61deb2672c587 → [Updates: 1.26.5-alpine]
• alpine 3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b

github-actions (3)

.github/workflows/github-release.yml (1)

• libops/actions main@ef667db8c16533a257d841e75df5c3388152b2d7

.github/workflows/goreleaser.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v7, v6]
• goreleaser/goreleaser-action v7@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 → [Updates: v7]
• ubuntu 24.04
• go >=1.25.0

.github/workflows/lint-test-build.yml (11)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v7, v6]
• golangci/golangci-lint-action v9@82606bf257cbaff209d206a39f5134f0cfbfd2ee → [Updates: v9]
• codecov/codecov-action v6@e79a6962e0d4c0c17b229090214935d2e33f8354 → [Updates: v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435 → [Updates: v4, v3]
• docker/build-push-action v6@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v7, v6]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• libops/.github credential-free-required-status@057262171193c6d563e7b08ae93d0c4aebfce2bd
• libops/.github resilient-guarded-signed-image-publisher@8e27d95846671a9e319f1900e86a488a1d4f39b3
• ubuntu 24.04

gomod (1)

go.mod (7)

• go 1.25.8
• golang.org/x/oauth2 v0.36.0
• google.golang.org/api v0.282.0 → [Updates: v0.291.0]
• go.opentelemetry.io/otel v1.43.0 → [Updates: v1.44.0]
• golang.org/x/net v0.55.0 → [Updates: v0.56.0]
• golang.org/x/text v0.37.0 → [Updates: v0.39.0]
• google.golang.org/grpc v1.81.1 → [Updates: v1.82.1]

renovate-config (1)

renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository