Dependency Dashboard

[felix-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update all non-major dependencies (actions/checkout, actions/setup-go, astral-sh/setup-uv, github/codeql-action, golangci/golangci-lint-action)
• Update actions/setup-go action to v7
• Update astral-sh/setup-uv action to v9
• Update golangci/golangci-lint-action action to v9
• Update goreleaser/goreleaser-action action to v7
• Update hashicorp/setup-terraform action to v4
• Update opentofu/setup-opentofu action to v2
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update actions/checkout action to v7

Vulnerabilities

Important

3/4 CVEs have possible Renovate fixes.
See osvVulnerabilityAlerts to allow Renovate to supply fixes.

gomod

go.mod

golang.org/x/crypto

• GO-2026-5932

Detected Dependencies

github-actions (7)

.github/workflows/licensing.yaml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]

.github/workflows/release.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• crazy-max/ghaction-import-gpg v7.0.0@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd
• goreleaser/goreleaser-action v6.4.0@e435ccd777264be153ace6237001ef4d979d3a7a → [Updates: v7.2.3]

.github/workflows/test-extensive.yml (9)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• golangci/golangci-lint-action v9.2.0@1e7e51e771db61008b38414a730f564565cf7c20 → [Updates: v9.3.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd → [Updates: v4.0.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• opentofu/setup-opentofu v1.0.8@9d84900f3238fab8cd84ce47d658d25dd008be2f → [Updates: v2.0.2]

.github/workflows/test.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• golangci/golangci-lint-action v7.0.1@9fae48acfc02a90574d7c304a1758ef9895495fa → [Updates: v9.3.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd → [Updates: v4.0.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]

.github/workflows/update-openapi.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• planetscale/ghcommit-action v0.2.22@a6b150b81dca5dd027baa898604418eec9e11465

.github/workflows/validate-renovate.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• ghcr.io/renovatebot/renovate 44.13.1@sha256:3e4149122921d530218a4ca809c59636faa668b330e4c9ea7f9ee1e20ea505dd → [Updates: 44.35.0]

.github/workflows/zizmor.yaml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.3.2, v9.0.0]
• github/codeql-action v4.37.3@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 → [Updates: v4.37.6]

gomod (1)

go.mod

renovate-config (1)

renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository