Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps-dev): update actions/checkout digest to 34e1148
• chore(deps-dev): update actions/checkout action to v7
• chore(deps-dev): update actions/setup-go action to v6
• chore(deps-dev): update actions/stale action to v10
• chore(deps-dev): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps-dev): update github/codeql-action action to v4.37.0
• chore(deps-dev): update zgosalvez/github-actions-ensure-sha-pinned-actions action to v5
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (10)

.github/workflows/main.yaml (5)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.5.0]
• shogo82148/actions-goveralls v1.11.0@9606dbc5ac5cf888a0e9ef901515c3cd516a2790
• go 1.26.x

.github/workflows/pr-actions.yaml (3)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7.0.0]
• zgosalvez/github-actions-ensure-sha-pinned-actions v3.0.25@fc87bb5b5a97953d987372e74478de634726b3e5 → [Updates: v5.0.5]

.github/workflows/pr-build.yaml (8)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.5.0]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.5.0]
• go 1.26.x
• go 1.26.x

.github/workflows/pr-label.yaml (1)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920

.github/workflows/pr-stale.yaml (1)

• actions/stale v9.1.0@5bef64f19d7facfb25b37b414482c7164d639639 → [Updates: v10.4.0]

.github/workflows/pr-trivy.yaml (3)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.33.0@b1bff81932f5cdfc8695c7752dcee935dcd061c8 → [Updates: v4.37.0]

.github/workflows/rebase.yaml (3)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• cirrus-actions/rebase 1.8@b87d48154a87a85666003575337e27b8cd65f691

.github/workflows/report-on-vulnerabilities.yaml (7)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7.0.0]
• actions/download-artifact v4.3.0@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8.0.1]
• JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5

.github/workflows/scan.yaml (5)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818

.github/workflows/scorecard.yaml (5)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7.0.0]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• github/codeql-action v3.37.0@02c5e83432fe5497fd85b873b6c9f16a8578e1d9 → [Updates: v4.37.0]

gomod (1)

go.mod (2)

• go 1.26
• github.com/stretchr/testify v1.11.1

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository