chore(deps): upgrade all dependencies

chore(deps): add renovate configuration file

chore(deps): update actions/setup-go action to v6

chore(deps): update actions/checkout action to v5

chore(deps): update module github.com/go-git/go-git/v5 to v5.16.3

chore(deps): update alpine docker tag to v3.22.2

chore(deps): update dependency go to v1.25.3

chore(deps): update docker.io/golang docker tag to v1.25.3

chore(deps): update module gitlab.com/gitlab-org/api/client-go to v0.157.0

Author: dependabot[bot]

.github/workflows/go.yml

@@ -15,13 +15,13 @@ jobs:
     name: Lint and Unit Test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
-          go-version: "1.24.4"
+          go-version: "1.25.3"
       - run: go mod tidy
       - run: go install gotest.tools/gotestsum@latest
       - run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@latest

.github/workflows/release.yml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
@@ -36,12 +36,12 @@ jobs:
         arch: [amd64, arm64]
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
-          go-version: 1.24.2
+          go-version: "1.25.3"
 
       - name: Build
         run: go mod tidy && go build -ldflags "-X main.version=${{ github.ref_name }}" -o gitlab-sync_${{ matrix.os }}_${{ matrix.arch }} cmd/main.go
@@ -65,7 +65,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 

Containerfile

@@ -1,4 +1,4 @@
-FROM docker.io/golang:1.24.4-alpine AS build
+FROM docker.io/golang:1.25.3-alpine AS build
 
 ARG VERSION="dev"
 
@@ -15,7 +15,7 @@ ENV GO111MODULE=on \
 RUN go mod tidy && \
     go build -ldflags "-X 'main.version=${VERSION}'" -o /app/bin/gitlab-sync ./cmd/main.go
 
-FROM alpine:3.22.0 AS security_provider
+FROM alpine:3.22.2 AS security_provider
 
 RUN addgroup -S gitlab-sync \
     && adduser -S gitlab-sync -G gitlab-sync

go.mod

@@ -1,13 +1,13 @@
 module gitlab-sync
 
-go 1.24.4
+go 1.24.7
 
 require (
 	github.com/Masterminds/semver/v3 v3.4.0
-	github.com/go-git/go-git/v5 v5.16.2
+	github.com/go-git/go-git/v5 v5.16.3
 	github.com/hashicorp/go-retryablehttp v0.7.8
-	github.com/spf13/cobra v1.9.1
-	gitlab.com/gitlab-org/api/client-go v0.134.0
+	github.com/spf13/cobra v1.10.1
+	gitlab.com/gitlab-org/api/client-go v0.157.0
 	go.uber.org/zap v1.27.0
 )
 
@@ -25,17 +25,19 @@ require (
 	github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
-	github.com/kevinburke/ssh_config v1.2.0 // indirect
-	github.com/pjbgf/sha1cd v0.4.0 // indirect
+	github.com/kevinburke/ssh_config v1.4.0 // indirect
+	github.com/klauspost/cpuid/v2 v2.3.0 // indirect
+	github.com/pjbgf/sha1cd v0.5.0 // indirect
 	github.com/sergi/go-diff v1.4.0 // indirect
 	github.com/skeema/knownhosts v1.3.1 // indirect
-	github.com/spf13/pflag v1.0.6 // indirect
+	github.com/spf13/pflag v1.0.10 // indirect
 	github.com/xanzy/ssh-agent v0.3.3 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
-	golang.org/x/crypto v0.40.0 // indirect
-	golang.org/x/net v0.42.0 // indirect
-	golang.org/x/oauth2 v0.30.0 // indirect
-	golang.org/x/sys v0.34.0 // indirect
-	golang.org/x/time v0.12.0 // indirect
+	golang.org/x/crypto v0.42.0 // indirect
+	golang.org/x/exp v0.0.0-20250911091902-df9299821621 // indirect
+	golang.org/x/net v0.44.0 // indirect
+	golang.org/x/oauth2 v0.31.0 // indirect
+	golang.org/x/sys v0.36.0 // indirect
+	golang.org/x/time v0.13.0 // indirect
 	gopkg.in/warnings.v0 v0.1.2 // indirect
 )

renovate.json

@@ -0,0 +1,3 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json"
+}