Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update codecov/codecov-action action to v5.5.4
• fix(deps): update module github.com/spf13/cobra to v1.10.2
• chore(deps): update actions/setup-go action to v6.4.0
• chore(deps): update docker/setup-buildx-action action to v3.12.0
• chore(deps): update docker/setup-qemu-action action to v3.7.0
• chore(deps): update ghcr.io/charmbracelet/vhs docker tag to v0.11.0
• fix(deps): update module github.com/protonmail/gopenpgp/v3 to v3.4.1
• fix(deps): update module golang.org/x/term to v0.43.0
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/dependency-review-action action to v5
• chore(deps): update codecov/codecov-action action to v7
• chore(deps): update crazy-max/ghaction-upx action to v4
• chore(deps): update dependency node to v24
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update docker/setup-qemu-action action to v4
• chore(deps): update golangci/golangci-lint-action action to v9
• chore(deps): update goreleaser/goreleaser-action action to v7
• fix(deps): update module github.com/ccoveille/go-safecast to v2
• fix(deps): update module github.com/charmbracelet/lipgloss to v2
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package arduino/setup-task), Failed to look up go package github.com/stretchr/testify: no-result.

Files affected: .github/workflows/build.yml, .github/workflows/release.yml, go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/checkout action to v5.0.1
• chore(deps): update sigstore/cosign-installer action to v3.10.1
• chore(deps): update actions/dependency-review-action action to v4.9.0
• chore(deps): update anchore/sbom-action action to v0.24.0
• chore(deps): update docker/login-action action to v3.7.0
• fix(deps): update module github.com/caarlos0/log to v0.6.0
• fix(deps): update module github.com/ccoveille/go-safecast to v1.8.2
• chore(deps): update actions/setup-node action to v6
• chore(deps): update github/codeql-action action to v4
• chore(deps): update sigstore/cosign-installer action to v4
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update module github.com/tmuniversal/papercrypt to v1.4.0
• fix(deps): update module github.com/tmuniversal/papercrypt to v2

Detected Dependencies

dockerfile (1)

vhs.Dockerfile (1)

• ghcr.io/charmbracelet/vhs v0.10.0 → [Updates: v0.11.0]

github-actions (5)

.github/workflows/build.yml (12)

• caarlos0/meta main
• caarlos0/meta main
• caarlos0/meta main
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.3]
• arduino/setup-task 2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392 → [Updates: v3.7.0, v4.1.0]
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435 → [Updates: v3.12.0, v4.1.0]
• crazy-max/ghaction-upx v3.2.0@db8cc9515a4a7ea1b312cb82fbeae6d716daf777 → [Updates: v4.0.0]
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6.4.0]
• sigstore/cosign-installer v3.10.0@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 → [Updates: v3.10.1, v4.1.2]
• anchore/sbom-action v0.20.6@f8bdd1d8ac5e901a77a92f111440fdb1b593736b → [Updates: v0.24.0]
• codecov/codecov-action v5.5.1@5a1091511ad55cbe89839c7260b706298ca349f7 → [Updates: v5.5.4, v7.0.0]

.github/workflows/codeql.yml (5)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.3]
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6.4.0]
• github/codeql-action v3 → [Updates: v4]
• github/codeql-action v3 → [Updates: v4]
• github/codeql-action v3 → [Updates: v4]

.github/workflows/depsreview.yaml (2)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.3]
• actions/dependency-review-action v4.8.0@56339e523c0409420f6c2c9a2f4292bbb3c07dd3 → [Updates: v4.9.0, v5.0.0]

.github/workflows/lint.yml (3)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.3]
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6.4.0]
• golangci/golangci-lint-action v8.0.0@4afd733a84b1f43292c63897423277bb7f4313a9 → [Updates: v9.2.1]

.github/workflows/release.yml (23)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.3]
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6.4.0]
• arduino/setup-task 2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• goreleaser/goreleaser-action v6.4.0@e435ccd777264be153ace6237001ef4d979d3a7a → [Updates: v7.2.2]
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.3]
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6.4.0]
• arduino/setup-task 2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.3]
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6.4.0]
• golangci/golangci-lint-action v8.0.0@4afd733a84b1f43292c63897423277bb7f4313a9 → [Updates: v9.2.1]
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.3]
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6.4.0]
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444 → [Updates: v6.4.0]
• sigstore/cosign-installer v3.10.0@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 → [Updates: v3.10.1, v4.1.2]
• crazy-max/ghaction-upx v3.2.0@db8cc9515a4a7ea1b312cb82fbeae6d716daf777 → [Updates: v4.0.0]
• arduino/setup-task 2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• goreleaser/goreleaser-action v6.4.0@e435ccd777264be153ace6237001ef4d979d3a7a → [Updates: v7.2.2]
• anchore/sbom-action v0.20.6@f8bdd1d8ac5e901a77a92f111440fdb1b593736b → [Updates: v0.24.0]
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392 → [Updates: v3.7.0, v4.1.0]
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435 → [Updates: v3.12.0, v4.1.0]
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1 → [Updates: v3.7.0, v4.2.0]
• ubuntu 24.04
• node 22 → [Updates: 24]

gomod (1)

go.mod (17)

• go 1.24.6
• github.com/ProtonMail/gopenpgp/v3 v3.3.0 → [Updates: v3.4.1]
• github.com/boombuler/barcode v1.1.0
• github.com/caarlos0/go-version v0.2.2
• github.com/caarlos0/log v0.5.1 → [Updates: v0.6.0]
• github.com/ccoveille/go-safecast v1.6.1 → [Updates: v1.8.2, v2.0.1]
• github.com/charmbracelet/lipgloss v1.1.0 → [Updates: v2.0.3]
• github.com/jung-kurt/gofpdf/v2 v2.17.3
• github.com/makiuchi-d/gozxing v0.1.1
• github.com/manifoldco/promptui v0.9.0
• github.com/muesli/mango-cobra v1.3.0
• github.com/muesli/roff v0.1.0
• github.com/muesli/termenv v0.16.0
• github.com/spf13/cobra v1.10.1 → [Updates: v1.10.2]
• github.com/stretchr/testify v1.11.1
• github.com/tmuniversal/papercrypt v1.3.0 → [Updates: v1.4.0, v2.0.3]
• golang.org/x/term v0.35.0 → [Updates: v0.43.0]

---

• Check this box to trigger a request for Renovate to run again on this repository