Dependency Dashboard

[forking-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• deps: Update module google.golang.org/api to v0.290.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• deps: Update gcr.io/distroless/static:nonroot Docker digest to 23795be
• deps: Update dependencies for github (actions/checkout, github/codeql-action, go, golang/govulncheck-action, ossf/scorecard-action)
• deps: Update dependencies for github (major) (actions/checkout, actions/setup-go, actions/upload-artifact, github/codeql-action, google-github-actions/auth, google-github-actions/get-secretmanager-secrets, google-github-actions/setup-gcloud)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cloudbuild (1)

.ci/cloudbuild.yaml

dockerfile (2)

Dockerfile (2)

• golang 1
• gcr.io/distroless/static nonroot@sha256:dfadf31470f770fcabd48903762dce126958e98d1ce320acf1216bbfaa42d79c → [Updates: nonroot]

Dockerfile.alpine (2)

• golang 1-alpine
• alpine 3@sha256:79ff19e9084a00eece421b2523fb93e22d730e2c0e525905de047e848e56d95f

github-actions (9)

.github/workflows/codeql.yml (6)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v4.4.0, v7.0.1]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v7.0.0]
• github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2 → [Updates: v3.37.3, v4.37.3]
• github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2 → [Updates: v3.37.3, v4.37.3]
• github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2 → [Updates: v3.37.3, v4.37.3]
• go 1.25 → [Updates: 1.26]

.github/workflows/coverage.yaml (4)

• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v7.0.0]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v4.4.0, v7.0.1]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v4.4.0, v7.0.1]
• go 1.25 → [Updates: 1.26]

.github/workflows/docs.yaml (3)

• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v7.0.0]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v4.4.0, v7.0.1]
• go 1.25 → [Updates: 1.26]

.github/workflows/govulncheck.yaml (4)

• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v7.0.0]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v4.4.0, v7.0.1]
• golang/govulncheck-action v1@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee → [Updates: v1]
• go 1.25 → [Updates: 1.26]

.github/workflows/labels.yaml (2)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v4.4.0, v7.0.1]
• micnncim/action-label-syncer v1.3.0@3abd5ab72fda571e69fffd97bd4e0033dd5f495c

.github/workflows/lint.yaml (3)

• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v7.0.0]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v4.4.0, v7.0.1]
• go 1.25 → [Updates: 1.26]

.github/workflows/scorecard.yml (4)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v4.4.0, v7.0.1]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a → [Updates: v2.4.4]
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2 → [Updates: v3.37.3, v4.37.3]

.github/workflows/tests.yaml (12)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v4.4.0, v7.0.1]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v7.0.0]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v4.4.0, v7.0.1]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v7.0.0]
• google-github-actions/auth v2.1.13@c200f3691d83b41bf9bbd8638997a462592937ed → [Updates: v3.0.0]
• google-github-actions/setup-gcloud v2.2.1@e427ad8a34f8676edf47cf7d7925499adf3eb74f → [Updates: v3.0.1]
• google-github-actions/get-secretmanager-secrets v2.2.5@2b5f97c5a4b9c105e64646762ad4fc3f5128e6f5 → [Updates: v3.0.0]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v7.0.0]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v4.4.0, v7.0.1]
• go 1.25 → [Updates: 1.26]
• go 1.25 → [Updates: 1.26]
• go 1.25 → [Updates: 1.26]

.github/workflows/v1-periodic.yaml (5)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v4.4.0, v7.0.1]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v7.0.0]
• google-github-actions/auth v2.1.13@c200f3691d83b41bf9bbd8638997a462592937ed → [Updates: v3.0.0]
• google-github-actions/get-secretmanager-secrets v2.2.5@2b5f97c5a4b9c105e64646762ad4fc3f5128e6f5 → [Updates: v3.0.0]
• go 1.25 → [Updates: 1.26]

gomod (1)

go.mod (18)

• go 1.25.8
• cloud.google.com/go/cloudsqlconn v1.23.0
• contrib.go.opencensus.io/exporter/prometheus v0.4.2
• contrib.go.opencensus.io/exporter/stackdriver v0.13.14
• github.com/coreos/go-systemd/v22 v22.7.0
• github.com/go-sql-driver/mysql v1.10.0
• github.com/google/go-cmp v0.7.0
• github.com/hanwen/go-fuse/v2 v2.11.0
• github.com/jackc/pgx/v5 v5.10.0
• github.com/microsoft/go-mssqldb v1.10.0
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/spf13/viper v1.21.0
• go.opencensus.io v0.24.0
• golang.org/x/oauth2 v0.36.0
• golang.org/x/sys v0.47.0
• google.golang.org/api v0.289.0 → [Updates: v0.290.0]
• gopkg.in/natefinch/lumberjack.v2 v2.2.1

---

• Check this box to trigger a request for Renovate to run again on this repository