Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• [skip-release] Update github-actions (major) (actions/checkout, actions/setup-go, codecov/codecov-action, docker/build-push-action, docker/setup-buildx-action)

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-digest package libops/.github).

Files affected: .github/workflows/lint-test-build.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module go.opentelemetry.io/otel to v1.44.0 [security]
• chore(deps): update module golang.org/x/net to v0.56.0 [security]
• chore(deps): update module golang.org/x/text to v0.39.0 [security]
• chore(deps): update module google.golang.org/grpc to v1.82.1 [security]
• [skip-release] Update github-actions (actions/checkout, actions/setup-go, codecov/codecov-action, docker/build-push-action, docker/setup-buildx-action, golangci/golangci-lint-action, goreleaser/goreleaser-action)
• fix(deps): update bump-dependencies (golang, google.golang.org/api)
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

5/6 CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/crypto

• GO-2026-5932

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• golang 1.25.12-alpine@sha256:56961d79ea8129efddcc0b8643fd8a5416b4e6228cfd477e3fd61deb2672c587 → [Updates: 1.26.5-alpine]
• alpine 3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b

github-actions (3)

.github/workflows/github-release.yml (1)

• libops/actions main@ef667db8c16533a257d841e75df5c3388152b2d7

.github/workflows/goreleaser.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v7, v6]
• goreleaser/goreleaser-action v7@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 → [Updates: v7]
• ubuntu 24.04
• go >=1.25.0

.github/workflows/lint-test-build.yml (11)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v7, v6]
• golangci/golangci-lint-action v9@82606bf257cbaff209d206a39f5134f0cfbfd2ee → [Updates: v9]
• codecov/codecov-action v6@e79a6962e0d4c0c17b229090214935d2e33f8354 → [Updates: v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435 → [Updates: v4, v3]
• docker/build-push-action v6@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v7, v6]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• libops/.github credential-free-required-status@057262171193c6d563e7b08ae93d0c4aebfce2bd
• libops/.github resilient-guarded-signed-image-publisher@8e27d95846671a9e319f1900e86a488a1d4f39b3
• ubuntu 24.04

gomod (1)

go.mod (7)

• go 1.25.8
• golang.org/x/oauth2 v0.36.0
• google.golang.org/api v0.282.0 → [Updates: v0.291.0]
• go.opentelemetry.io/otel v1.43.0 → [Updates: v1.44.0]
• golang.org/x/net v0.55.0 → [Updates: v0.56.0]
• golang.org/x/text v0.37.0 → [Updates: v0.39.0]
• google.golang.org/grpc v1.81.1 → [Updates: v1.82.1]

renovate-config (1)

renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository