Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (1)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	gopkg.in/yaml.v3	2022-05-27

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• [skip-release] Update github-actions to v7 (actions/setup-go, codecov/codecov-action)

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-digest package libops/.github).

Files affected: .github/workflows/lint-test-build.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• [skip-release] Update actions/checkout digest to 3d3c42e
• fix(deps): update bump-dependencies (ghcr.io/libops/go, golang.org/x/sync, google.golang.org/api)
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

0/1 CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/crypto

• GO-2026-5932

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• ghcr.io/libops/go 1.26.5@sha256:ea764e85e42a243217c621891123b3fda9374674c29d59785414fc6b15815b3d → [Updates: 1.26.5]
• ghcr.io/libops/base 3.2.2.0@sha256:aa0c61029734f3293bca068a95c72c0b07ac949292c446c83ada78e81a42c85d

github-actions (3)

.github/workflows/github-release.yml (1)

• libops/actions main@ef667db8c16533a257d841e75df5c3388152b2d7

.github/workflows/goreleaser.yml (7)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• goreleaser/goreleaser-action v7@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/lint-test-build.yml (7)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• golangci/golangci-lint-action v9@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• libops/.github guarded-signed-image-publisher@a86300fb8020d0f7141bb9f833d89b5dbd7aa4d7
• ubuntu 24.04
• golangci/golangci-lint v2.12.2

gomod (1)

go.mod (4)

• go 1.25.0
• golang.org/x/sync v0.21.0 → [Updates: v0.22.0]
• google.golang.org/api v0.276.0 → [Updates: v0.293.0]
• gopkg.in/yaml.v3 v3.0.1

renovate-config (1)

renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository