Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update module github.com/zsais/go-gin-prometheus to v1.0.3
• fix(deps): update module github.com/gin-gonic/gin to v1.12.0
• fix(deps): update module golang.org/x/oauth2 to v0.36.0
• fix(deps): update module golang.org/x/text to v0.35.0
• chore(deps): update docker/login-action action to v4
• chore(deps): update mcr.microsoft.com/vscode/devcontainers/go docker tag to v2
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update anchore/sbom-action action to v0.23.1
• chore(deps): update golang docker tag to v1.26.1
• fix(deps): update go opentelemetry packages and libraries (go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin, go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/otlp/otlptrace, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/trace)
• fix(deps): update module github.com/nats-io/nats.go to v1.49.0
• fix(deps): update module github.com/pressly/goose/v3 to v3.27.0
• fix(deps): update module google.golang.org/grpc to v1.79.2
• chore(deps): update actions/upload-artifact action to v7
• chore(deps): update goreleaser/goreleaser-action action to v7
• chore(deps): update oryd/hydra docker tag to v25
• fix(deps): update module github.com/aarondl/null/v8 to v9
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

.devcontainer/docker-compose.yml (6)

• postgres 18
• postgres 18
• oryd/hydra v1.11.10 → [Updates: v25.4.0]
• oryd/hydra v1.11.10 → [Updates: v25.4.0]
• jaegertracing/all-in-one 1.60
• ghcr.io/metal-toolbox/audittail v0.9.0

dockerfile (3)

.devcontainer/Dockerfile.dev (1)

• mcr.microsoft.com/vscode/devcontainers/go 1.24-bullseye → [Updates: 2.0-bullseye]

Dockerfile

Dockerfile.dev (1)

• golang 1.25.7 → [Updates: 1.26.1]

github-actions (3)

.github/workflows/main.yaml (9)

• metal-toolbox/ci-toolbox v0.0.1
• metal-toolbox/ci-toolbox v0.0.1
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• metal-toolbox/ci-toolbox v0.0.1
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• metal-toolbox/ci-toolbox v0.0.1
• metal-toolbox/ci-toolbox v0.0.1
• golang 1.25.7 → [Updates: 1.26.1]
• postgres 18

.github/workflows/openapi.yaml (6)

• actions/checkout v6
• actions/setup-node v6
• actions/upload-pages-artifact v4
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b
• actions/deploy-pages v4
• node 24

.github/workflows/release.yml (5)

• docker/login-action v3 → [Updates: v4]
• actions/checkout v6
• actions/setup-go v6
• anchore/sbom-action v0.22.2 → [Updates: v0.23.1]
• goreleaser/goreleaser-action v6 → [Updates: v7]

gomod (1)

go.mod (45)

• go 1.25.7
• dario.cat/mergo v1.0.2
• github.com/XSAM/otelsql v0.41.0
• github.com/aarondl/null/v8 v8.1.3 → [Updates: v9.0.1]
• github.com/aarondl/sqlboiler/v4 v4.19.7
• github.com/aarondl/strmangle v0.0.9
• github.com/cockroachdb/cockroach-go/v2 v2.4.3
• github.com/coreos/go-oidc/v3 v3.17.0
• github.com/friendsofgo/errors v0.9.2
• github.com/gin-contrib/cors v1.7.6
• github.com/gin-contrib/zap v1.1.6
• github.com/gin-gonic/gin v1.11.0 → [Updates: v1.12.0]
• github.com/go-jose/go-jose/v4 v4.1.3
• github.com/goccy/go-json v0.10.5
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/google/uuid v1.6.0
• github.com/gosimple/slug v1.15.0
• github.com/jackc/pgx/v5 v5.8.0
• github.com/jmoiron/sqlx v1.4.0
• github.com/lib/pq v1.11.2
• github.com/metal-toolbox/auditevent v0.9.0
• github.com/metal-toolbox/iam-runtime v0.4.1
• github.com/metal-toolbox/iam-runtime-contrib v1.0.1
• github.com/mitchellh/go-homedir v1.1.0
• github.com/nats-io/nats.go v1.48.0 → [Updates: v1.49.0]
• github.com/peterldowns/pgtestdb v0.1.1
• github.com/pressly/goose/v3 v3.26.0 → [Updates: v3.27.0]
• github.com/santhosh-tekuri/jsonschema/v6 v6.0.2
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/spf13/viper v1.21.0
• github.com/stretchr/testify v1.11.1
• github.com/zsais/go-gin-prometheus v1.0.2 → [Updates: v1.0.3]
• go.hollow.sh/toolbox v0.6.3
• go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin v0.65.0 → [Updates: v0.67.0]
• go.opentelemetry.io/otel v1.40.0 → [Updates: v1.42.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0 → [Updates: v1.42.0]
• go.opentelemetry.io/otel/sdk v1.40.0 → [Updates: v1.42.0]
• go.uber.org/zap v1.27.1
• golang.org/x/oauth2 v0.35.0 → [Updates: v0.36.0]
• google.golang.org/grpc v1.78.0 → [Updates: v1.79.2]
• github.com/prometheus/client_golang v1.23.2
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.40.0 → [Updates: v1.42.0]
• go.opentelemetry.io/otel/trace v1.40.0 → [Updates: v1.42.0]
• golang.org/x/text v0.34.0 → [Updates: v0.35.0]

---

• Check this box to trigger a request for Renovate to run again on this repository