Renovate(bot) : dependency dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (20)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	CycloneDX/gh-gomod-generate-sbom	2023-06-05
gomod	github.com/bahlo/generic-list-go	2022-02-08
gomod	github.com/ccojocar/zxcvbn-go	2025-04-08
gomod	github.com/cespare/xxhash/v2	2024-04-04
gomod	github.com/davecgh/go-spew	2018-02-21
gomod	github.com/felixge/httpsnoop	2023-03-12
gomod	github.com/go-logr/logr	2025-05-19
gomod	github.com/go-logr/stdr	2021-12-14
gomod	github.com/go-task/slim-sprig/v3	2023-09-14
gomod	github.com/google/go-cmp	2025-01-14
gomod	github.com/google/s2a-go	2025-01-06
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/gorilla/websocket	2024-06-14
gomod	github.com/pmezard/go-difflib	2016-01-10
gomod	github.com/santhosh-tekuri/jsonschema/v6	2025-05-23
gomod	github.com/tidwall/pretty	2022-10-01
gomod	github.com/tidwall/sjson	2022-08-05
gomod	github.com/wk8/go-ordered-map/v2	2023-06-27
gomod	github.com/xo/terminfo	2022-09-10
gomod	gopkg.in/yaml.v3	2022-05-27

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update all dependencies (docker/setup-qemu-action, github.com/anthropics/anthropic-sdk-go, github.com/invopop/jsonschema, go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp, go.opentelemetry.io/otel, go.opentelemetry.io/otel/metric, go.opentelemetry.io/otel/trace, google.golang.org/api)

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package cloud.google.com/go/auth: no-result.

Files affected: go.mod

---

Detected Dependencies

dockerfile (1)

Dockerfile

github-actions (4)

.github/workflows/action-integration.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4@7211b7c8077ea37d8641b6271f6a365a22a5fbfa
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3

.github/workflows/ci.yml (17)

• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• golangci/golangci-lint-action v9@82606bf257cbaff209d206a39f5134f0cfbfd2ee
• securego/gosec master
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ccojocar/barry main
• github/codeql-action v4@7211b7c8077ea37d8641b6271f6a365a22a5fbfa
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• codecov/codecov-action v6@e79a6962e0d4c0c17b229090214935d2e33f8354
• go 1.26.3
• go 1.26.3

.github/workflows/release.yml (11)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• docker/setup-qemu-action v4@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4]
• docker/setup-buildx-action v4@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/login-action v4@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• CycloneDX/gh-gomod-generate-sbom v2@efc74245d6802c8cefd925620515442756c70d8f
• docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• goreleaser/goreleaser-action v7@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89
• docker/build-push-action v7@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• go 1.26.3

.github/workflows/scan.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• securego/gosec v2.26.1@4a3bd8af174872c778439083ded7adbf3747e770
• github/codeql-action v4@7211b7c8077ea37d8641b6271f6a365a22a5fbfa

gomod (1)

go.mod (61)

• github.com/BurntSushi/toml v1.6.0
• github.com/anthropics/anthropic-sdk-go v1.45.0 → [Updates: v1.46.0]
• github.com/ccojocar/zxcvbn-go v1.0.4
• github.com/google/uuid v1.6.0
• github.com/gookit/color v1.6.1
• github.com/lib/pq v1.12.3
• github.com/mozilla/tls-observatory v0.0.0-20250923143331-eef96233227e@eef96233227e
• github.com/onsi/ginkgo/v2 v2.29.0
• github.com/onsi/gomega v1.41.0
• github.com/openai/openai-go/v3 v3.37.0
• github.com/santhosh-tekuri/jsonschema/v6 v6.0.2
• github.com/stretchr/testify v1.11.1
• go.yaml.in/yaml/v3 v3.0.4
• golang.org/x/crypto v0.52.0
• golang.org/x/sync v0.20.0
• golang.org/x/text v0.37.0
• golang.org/x/tools v0.45.0
• google.golang.org/genai v1.58.0
• cloud.google.com/go v0.123.0
• cloud.google.com/go/auth v0.20.0
• cloud.google.com/go/compute/metadata v0.9.0
• github.com/Masterminds/semver/v3 v3.5.0
• github.com/bahlo/generic-list-go v0.2.0
• github.com/buger/jsonparser v1.2.0
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/davecgh/go-spew v1.1.1
• github.com/felixge/httpsnoop v1.0.4
• github.com/go-logr/logr v1.4.3
• github.com/go-logr/stdr v1.2.2
• github.com/go-task/slim-sprig/v3 v3.0.0
• github.com/google/go-cmp v0.7.0
• github.com/google/pprof v0.0.0-20260507013755-92041b743c96@92041b743c96
• github.com/google/s2a-go v0.1.9
• github.com/googleapis/enterprise-certificate-proxy v0.3.16
• github.com/googleapis/gax-go/v2 v2.22.0
• github.com/gorilla/websocket v1.5.3
• github.com/invopop/jsonschema v0.13.0 → [Updates: v0.14.0]
• github.com/mailru/easyjson v0.9.2
• github.com/pmezard/go-difflib v1.0.0
• github.com/standard-webhooks/standard-webhooks/libraries v0.0.1
• github.com/stretchr/objx v0.5.3
• github.com/tidwall/gjson v1.19.0
• github.com/tidwall/match v1.2.0
• github.com/tidwall/pretty v1.2.1
• github.com/tidwall/sjson v1.2.5
• github.com/wk8/go-ordered-map/v2 v2.1.8
• github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e@abceb7e1c41e
• go.opentelemetry.io/auto/sdk v1.2.1
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0 → [Updates: v0.69.0]
• go.opentelemetry.io/otel v1.43.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/metric v1.43.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/trace v1.43.0 → [Updates: v1.44.0]
• golang.org/x/mod v0.36.0
• golang.org/x/net v0.55.0
• golang.org/x/sys v0.45.0
• google.golang.org/api v0.274.0 → [Updates: v0.282.0]
• google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa@3dc84a4a5aaa
• google.golang.org/grpc v1.81.1
• google.golang.org/protobuf v1.36.11
• gopkg.in/yaml.v3 v3.0.1
• go 1.25.8

html (1)

report/html/template.html (5)

• bulma 1.0.4@sha512-yh2RE0wZCVZeysGiqTwDTO/dKelCbS9bP2L94UvOFtl/FKXcNAje3Y2oBg/ZMZ3LS1sicYk4dYVGtDex75fvvA==
• highlight.js 11.11.1@sha512-hasIneQUHlh06VNBe7f6ZcHmeRTLIaQWFd43YriJ0UND19bvYRauxthDg8E4eVNPm9bRUhr5JGeqH7FRFXQu5g==
• highlight.js 11.11.1@sha512-EBLzUL8XLl+va/zAsmXwS7Z2B1F9HUHkZwyS/VKwh3S7T/U0nF4BaU29EP/ZSf6zgiIxYAnKLu6bJ8dqpmX5uw==
• highlight.js 11.11.1@sha512-weC0VNVf2qQR6OY675qO0AEL92gt3h5f2VGjhMUvi/UqFHaWzIEL5S/8Dt763fWfKftchzb7GryvEj/2HC9Exw==
• babel-standalone 7.28.4@sha512-BCw4VuBF2HKIgxDP8K7DRHcHzazAAND+5+2E7GgX3CC1u1pteJ415mMJlQfUORjkFT64irzu1jIV93Vfvzkevw==

---

• Check this box to trigger a request for Renovate to run again on this repository