Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update github/codeql-action digest to 99df26d
• chore(deps): update golang:1.25 docker digest to 9669c2e
• chore(deps): update golang:alpine docker digest to 0178a64
• chore(deps): update docker/build-push-action action to v7.3.0
• chore(deps): update docker/setup-buildx-action action to v4.2.0
• chore(deps): update github/codeql-action action to v4.37.0
• fix(deps): update module golang.org/x/mod to v0.38.0
• chore(deps): update dawidd6/action-homebrew-bump-formula action to v8
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update hashicorp/setup-terraform action to v4.0.1
• fix(deps): update module github.com/caarlos0/env/v11 to v11.4.1
• fix(deps): update module github.com/hashicorp/terraform-exec to v0.25.2
• fix(deps): update module github.com/mattn/go-colorable to v0.1.15
• chore(deps): update golang docker tag to v1.26
• chore(deps): update actions/dependency-review-action action to v5
• fix(deps): update module github.com/arsham/figurine to v2

Detected Dependencies

dockerfile (2)

.devcontainer/Dockerfile (2)

• golang 1.25@sha256:fb63357477ff4b1eba77af03185a0cafc475961e627cd3f78a7364ba66898187 → [Updates: 1.26, 1.25]
• mcr.microsoft.com/vscode/devcontainers/base debian@sha256:1a00517e89d3075f8c9dc8d9911404de0ff8991a4d71c62068573e9b016a89da

Dockerfile (2)

• golang alpine@sha256:3ad57304ad93bbec8548a0437ad9e06a455660655d9af011d58b993f6f615648 → [Updates: alpine]
• alpine 3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b

github-actions (5)

.github/workflows/build.yaml (13)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16
• goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• cloudsmith-io/action v0.6.14@7af394e0f8add4867bce109385962dafecad1b8d
• cloudsmith-io/action v0.6.14@7af394e0f8add4867bce109385962dafecad1b8d
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• docker/setup-qemu-action v4.2.0@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/login-action v4.4.0@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• dawidd6/action-homebrew-bump-formula v7@1446dca236b0440c6f02723a3f14f13be2c04ab0 → [Updates: v8]

.github/workflows/codeql.yml (4)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• github/codeql-action v4@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4]
• github/codeql-action v4@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4]

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/dependency-review-action v4.9.0@2031cfc080254a8a887f58cffee85186f0e49e48 → [Updates: v5.0.0]

.github/workflows/scorecard.yml (5)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.37.0]

.github/workflows/test.yml (16)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• hashicorp/setup-terraform v4.0.0@5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85 → [Updates: v4.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• hashicorp/setup-terraform v4.0.0@5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85 → [Updates: v4.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• hashicorp/setup-terraform v4.0.0@5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85 → [Updates: v4.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• hashicorp/setup-terraform v4.0.0@5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85 → [Updates: v4.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16

gomod (2)

go.mod (12)

• go 1.25.8
• github.com/arsham/figurine v1.3.0 → [Updates: v2.1.1]
• github.com/awalterschulze/gographviz v2.0.3+incompatible
• github.com/briandowns/spinner v1.23.2
• github.com/caarlos0/env/v11 v11.4.0 → [Updates: v11.4.1]
• github.com/fatih/color v1.19.0
• github.com/hashicorp/terraform-exec v0.25.1 → [Updates: v0.25.2]
• github.com/jwalton/go-supportscolor v1.2.0
• github.com/mattn/go-colorable v0.1.14 → [Updates: v0.1.15]
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• golang.org/x/mod v0.36.0 → [Updates: v0.38.0]

tools/go.mod (3)

• go 1.26.3
• github.com/golangci/golangci-lint/v2 v2.12.2
• github.com/hashicorp/copywrite v0.25.3

---

• Check this box to trigger a request for Renovate to run again on this repository