Dependency Dashboard

[forking-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• deps: Update gcr.io/distroless/static:nonroot Docker digest to 0c93c98

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package golang.org/x/oauth2: no-result.

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• deps: Update dependencies for github (github/codeql-action, go, golang/govulncheck-action)
• deps: Update Non-major dependency updates (golang.org/x/sys, google.golang.org/api)
• deps: Update dependencies for github (major) (actions/checkout, actions/setup-go, actions/upload-artifact, github/codeql-action, google-github-actions/auth, google-github-actions/get-secretmanager-secrets, google-github-actions/setup-gcloud)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cloudbuild (1)

.ci/cloudbuild.yaml

dockerfile (3)

Dockerfile (2)

• golang 1
• gcr.io/distroless/static nonroot@sha256:dfadf31470f770fcabd48903762dce126958e98d1ce320acf1216bbfaa42d79c → [Updates: nonroot]

Dockerfile.alpine (2)

• golang 1-alpine
• alpine 3@sha256:79ff19e9084a00eece421b2523fb93e22d730e2c0e525905de047e848e56d95f

Dockerfile.bookworm (2)

• golang 1
• gcr.io/cloud-marketplace-containers/google/debian12 sha256:8705219e4580f8c36633a84b491d35a66c3e788e81161d6b5f370daa948b9402

github-actions (9)

.github/workflows/codeql.yml (6)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7.0.0]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.5.0]
• github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2 → [Updates: v3.37.0, v4.37.0]
• github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2 → [Updates: v3.37.0, v4.37.0]
• github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2 → [Updates: v3.37.0, v4.37.0]
• go 1.25 → [Updates: 1.26]

.github/workflows/coverage.yaml (4)

• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.5.0]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7.0.0]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7.0.0]
• go 1.25 → [Updates: 1.26]

.github/workflows/docs.yaml (3)

• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.5.0]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7.0.0]
• go 1.25 → [Updates: 1.26]

.github/workflows/govulncheck.yaml (4)

• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.5.0]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7.0.0]
• golang/govulncheck-action v1@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee → [Updates: v1]
• go 1.25 → [Updates: 1.26]

.github/workflows/labels.yaml (2)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7.0.0]
• micnncim/action-label-syncer v1.3.0@3abd5ab72fda571e69fffd97bd4e0033dd5f495c

.github/workflows/lint.yaml (3)

• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.5.0]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7.0.0]
• go 1.25 → [Updates: 1.26]

.github/workflows/scorecard.yml (4)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7.0.0]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2 → [Updates: v3.37.0, v4.37.0]

.github/workflows/tests.yaml (12)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7.0.0]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.5.0]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7.0.0]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.5.0]
• google-github-actions/auth v2.1.13@c200f3691d83b41bf9bbd8638997a462592937ed → [Updates: v3.0.0]
• google-github-actions/setup-gcloud v2.2.1@e427ad8a34f8676edf47cf7d7925499adf3eb74f → [Updates: v3.0.1]
• google-github-actions/get-secretmanager-secrets v2.2.5@2b5f97c5a4b9c105e64646762ad4fc3f5128e6f5 → [Updates: v3.0.0]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.5.0]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7.0.0]
• go 1.25 → [Updates: 1.26]
• go 1.25 → [Updates: 1.26]
• go 1.25 → [Updates: 1.26]

.github/workflows/v1-periodic.yaml (5)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7.0.0]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.5.0]
• google-github-actions/auth v2.1.13@c200f3691d83b41bf9bbd8638997a462592937ed → [Updates: v3.0.0]
• google-github-actions/get-secretmanager-secrets v2.2.5@2b5f97c5a4b9c105e64646762ad4fc3f5128e6f5 → [Updates: v3.0.0]
• go 1.25 → [Updates: 1.26]

gomod (1)

go.mod (18)

• go 1.25.8
• cloud.google.com/go/cloudsqlconn v1.22.1
• contrib.go.opencensus.io/exporter/prometheus v0.4.2
• contrib.go.opencensus.io/exporter/stackdriver v0.13.14
• github.com/coreos/go-systemd/v22 v22.7.0
• github.com/go-sql-driver/mysql v1.10.0
• github.com/google/go-cmp v0.7.0
• github.com/hanwen/go-fuse/v2 v2.10.1
• github.com/jackc/pgx/v5 v5.10.0
• github.com/microsoft/go-mssqldb v1.10.0
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/spf13/viper v1.21.0
• go.opencensus.io v0.24.0
• golang.org/x/oauth2 v0.36.0
• golang.org/x/sys v0.46.0 → [Updates: v0.47.0]
• google.golang.org/api v0.286.0 → [Updates: v0.288.0]
• gopkg.in/natefinch/lumberjack.v2 v2.2.1

---

• Check this box to trigger a request for Renovate to run again on this repository