Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency yaml to v2.8.2
• Update bats/bats Docker tag to v1.13.0
• Update dependency gofumpt to v0.9.2
• Update dependency golines to v0.13.0
• Update dependency markdownlint-cli to v0.48.0
• Update golang Docker tag to v1.25
• Update jetpack-io/devbox-install-action action to v0.14.0
• Update module github.com/stretchr/testify to v1.11.1
• Update module go.uber.org/mock to v0.6.0
• Update module golang.org/x/mod to v0.34.0
• Update module golang.org/x/sync to v0.20.0
• Update actions/attest-build-provenance action to v4
• Update actions/checkout action to v6
• Update actions/setup-go action to v6
• Update docker/build-push-action action to v7
• Update docker/login-action action to v4
• Update docker/metadata-action action to v6
• Update goreleaser/goreleaser-action action to v7
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency cspell to v9.7.0
• Update dependency go
• Update dependency gosec to v2.23.0
• Update dependency golangci-lint to v2
• Update module github.com/urfave/cli/v2 to v3
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

devbox (1)

devbox.json (9)

• mockgen 1.6.0
• yarn 1.22.22
• golines 0.12.2 → [Updates: 0.13.0]
• govulncheck 1.1.4
• gofumpt 0.8.0 → [Updates: 0.9.2]
• golangci-lint 1.64.8 → [Updates: 2.10.1]
• gosec 2.22.5 → [Updates: 2.23.0]
• go 1.24.4 → [Updates: 1.26.0]
• gotools 0.34.0

dockerfile (2)

Dockerfile (1)

• golang 1.24-alpine3.21 → [Updates: 1.25-alpine3.21]

test/Dockerfile (2)

• golang 1.24-alpine3.21 → [Updates: 1.25-alpine3.21]
• bats/bats 1.12.0 → [Updates: 1.13.0]

github-actions (3)

.github/workflows/ci.yml (2)

• actions/checkout v4 → [Updates: v6]
• jetpack-io/devbox-install-action v0.13.0 → [Updates: v0.14.0]

.github/workflows/release.yml (8)

• actions/checkout v4 → [Updates: v6]
• actions/setup-go v5 → [Updates: v6]
• goreleaser/goreleaser-action v6 → [Updates: v7]
• actions/checkout v4 → [Updates: v6]
• docker/login-action v3 → [Updates: v4]
• docker/metadata-action v5 → [Updates: v6]
• docker/build-push-action v6 → [Updates: v7]
• actions/attest-build-provenance v2 → [Updates: v4]

.github/workflows/scan.yml (2)

• actions/checkout v4 → [Updates: v6]
• jetpack-io/devbox-install-action v0.13.0 → [Updates: v0.14.0]

gomod (1)

go.mod (9)

• go 1.23.0
• go 1.24.4 → [Updates: 1.26.1]
• github.com/Masterminds/semver v1.5.0
• github.com/pkg/errors v0.9.1
• github.com/stretchr/testify v1.10.0 → [Updates: v1.11.1]
• github.com/urfave/cli/v2 v2.27.7 → [Updates: v3.7.0]
• go.uber.org/mock v0.5.2 → [Updates: v0.6.0]
• golang.org/x/mod v0.26.0 → [Updates: v0.34.0]
• golang.org/x/sync v0.15.0 → [Updates: v0.20.0]

npm (1)

package.json (4)

• cspell 9.1.2 → [Updates: 9.7.0]
• markdownlint-cli 0.45.0 → [Updates: 0.48.0]
• yaml 2.8.0 → [Updates: 2.8.2]
• yarn 1.22.22

---

• Check this box to trigger a request for Renovate to run again on this repository