Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update pre-commit hook pre-commit/pre-commit-hooks to v6
• chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v44
• fix(deps): update module github.com/gdamore/tcell/v2 to v3
• fix(deps): update module github.com/johanneskaufmann/html-to-markdown to v2
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update github/codeql-action digest to cdf488f
• fix(deps): update golang.org/x/exp digest to e88cd73
• chore(deps): update go indirect dependencies (cloud.google.com/go/auth, github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp, github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric, github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping, github.com/PuerkitoBio/goquery, github.com/aws/smithy-go, github.com/envoyproxy/go-control-plane/envoy, github.com/googleapis/gax-go/v2, github.com/mattn/go-runewidth, go.opentelemetry.io/contrib/detectors/gcp, go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc, go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp, go.opentelemetry.io/otel, go.opentelemetry.io/otel/metric, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/sdk/metric, go.opentelemetry.io/otel/trace, google.golang.org/grpc)
• fix(deps): update all non-major dependencies (cloud.google.com/go/storage, github.com/golangci/golangci-lint/v2/cmd/golangci-lint, github.com/securego/gosec/v2/cmd/gosec, google.golang.org/api, securego/gosec)
• fix(deps): update aws-go-sdk-v2 monorepo (github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/credentials, github.com/aws/aws-sdk-go-v2/feature/ec2/imds, github.com/aws/aws-sdk-go-v2/internal/configsources, github.com/aws/aws-sdk-go-v2/internal/endpoints/v2, github.com/aws/aws-sdk-go-v2/internal/v4a, github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding, github.com/aws/aws-sdk-go-v2/service/internal/checksum, github.com/aws/aws-sdk-go-v2/service/internal/presigned-url, github.com/aws/aws-sdk-go-v2/service/internal/s3shared, github.com/aws/aws-sdk-go-v2/service/s3, github.com/aws/aws-sdk-go-v2/service/signin, github.com/aws/aws-sdk-go-v2/service/sso, github.com/aws/aws-sdk-go-v2/service/ssooidc, github.com/aws/aws-sdk-go-v2/service/sts)
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update golang:1.27-alpine docker digest to cf6fca6
• chore(deps): update mcr.microsoft.com/devcontainers/go:1-bookworm docker digest to eb89cbc
• chore(deps): update mcr.microsoft.com/devcontainers/go docker tag to v2

Detected Dependencies

dockerfile (3)

.devcontainer/Dockerfile (1)

• mcr.microsoft.com/devcontainers/go 1-bookworm@sha256:30cbde1de62f190904446d8b81dcfd0befcfd60889419edb8872d598be9632cc → [Updates: 2-bookworm, 1-bookworm]

Dockerfile (2)

• golang 1.27-alpine@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc → [Updates: 1.27-alpine]
• alpine 3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b

Dockerfile.distroless (2)

• golang 1.27-alpine@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc → [Updates: 1.27-alpine]
• gcr.io/distroless/static-debian12 sha256:d75cdd72874d4790092fcb1b058493ecf6bb5bf2b2b897045b00ff01d91843f2

github-actions (10)

.github/workflows/codeql-analysis.yml (4)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• github/codeql-action v4@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 → [Updates: v4]
• github/codeql-action v4@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 → [Updates: v4]
• github/codeql-action v4@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 → [Updates: v4]

.github/workflows/dependency-review.yml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294

.github/workflows/docker-images.yml (15)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-buildx-action v4@37fe631027851001ddb9b187196cc803df7f5f0e
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-buildx-action v4@37fe631027851001ddb9b187196cc803df7f5f0e
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f
• docker/metadata-action v6@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• docker/setup-buildx-action v4@37fe631027851001ddb9b187196cc803df7f5f0e
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f
• docker/metadata-action v6@dc802804100637a589fabce1cb79ff13a1411302

.github/workflows/dockerhub-description.yml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• peter-evans/dockerhub-description v5@1b9a80c056b620d92cedb9d9b5a223409c68ddfa

.github/workflows/go.yml (6)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• lyricwulf/abc v1@66857ee5082bf5a43e736fd9c54c2e545d64e7ea
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e

.github/workflows/gosec.yml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• securego/gosec v2.28.0@9e75c0576c9878035d4221392108d458abe10fc3 → [Updates: v2.29.0]
• github/codeql-action v4@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 → [Updates: v4]

.github/workflows/makefile.yml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e

.github/workflows/project.yml (1)

• actions/add-to-project v2.0.0@5afcf98fcd03f1c2f92c3c83f58ae24323cc57fd

.github/workflows/trivy.yml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 → [Updates: v4]

.github/workflows/vendored.yml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e

gomod (2)

cmd/ccat/_gen/go.mod (3)

• go 1.27.0
• mvdan.cc/gofumpt v0.11.0 → [Updates: v0.12.0]
• golang.org/x/tools v0.49.0

go.mod (155)

• go 1.27.0
• cloud.google.com/go/storage v1.65.0 → [Updates: v1.66.0]
• git.sr.ht/~adnano/go-gemini v0.2.6
• github.com/JohannesKaufmann/html-to-markdown v1.6.0 → [Updates: v2.5.2]
• github.com/OneOfOne/xxhash v1.2.8
• github.com/PaesslerAG/jsonpath v0.1.1
• github.com/aixiansheng/lzfse v0.2.4
• github.com/alecthomas/chroma/v2 v2.27.0
• github.com/atotto/clipboard v0.1.4
• github.com/aws/aws-sdk-go-v2 v1.43.7 → [Updates: v1.45.1]
• github.com/aws/aws-sdk-go-v2/config v1.32.37 → [Updates: v1.33.2]
• github.com/aws/aws-sdk-go-v2/service/s3 v1.107.3 → [Updates: v1.110.0]
• github.com/aws/aws-sdk-go-v2/service/sts v1.45.7 → [Updates: v1.48.0]
• github.com/batmac/go-curl v0.0.1
• github.com/cosnicolaou/pbzip2 v1.0.6
• github.com/creativeprojects/go-selfupdate v1.6.0
• github.com/docker/go-units v0.5.0
• github.com/dsnet/compress v0.0.1
• github.com/eliukblau/pixterm v1.3.3
• github.com/gabriel-vasile/mimetype v1.4.15
• github.com/gage-technologies/mistral-go v1.1.0
• github.com/gdamore/tcell/v2 v2.13.10 → [Updates: v3.4.2]
• github.com/google/generative-ai-go v0.20.1
• github.com/google/renameio/v2 v2.0.2
• github.com/gowebpki/jcs v1.0.1
• github.com/hbollon/go-edlib v1.7.0
• github.com/kevinburke/nacl v0.9.0
• github.com/klauspost/compress v1.19.2 → [Updates: v1.20.0]
• github.com/klauspost/pgzip v1.2.6
• github.com/kofalt/go-memoize v0.0.0-20240506050413-9e5eb99a0f2a@9e5eb99a0f2a
• github.com/magefile/mage v1.17.2
• github.com/minio/minio-go/v7 v7.3.0
• github.com/minio/minlz v1.2.0
• github.com/mitchellh/go-homedir v1.1.0
• github.com/mmcdole/gofeed v1.4.2
• github.com/muesli/reflow v0.3.0
• github.com/patrickmn/go-cache v2.1.0+incompatible
• github.com/pierrec/lz4/v4 v4.1.29
• github.com/psanford/wormhole-william v1.0.8
• github.com/rivo/tview v0.42.0
• github.com/robert-nix/ansihtml v1.0.1
• github.com/sashabaranov/go-openai v1.42.0
• github.com/spf13/pflag v1.0.10
• github.com/tetratelabs/wazero v1.12.0
• github.com/titanous/json5 v1.0.0
• github.com/tmc/keyring v0.1.0
• github.com/traefik/yaegi v0.16.1
• github.com/ulikunitz/xz v0.5.16
• github.com/zeebo/xxh3 v1.1.0
• golang.org/x/exp v0.0.0-20250819193227-8b4c13bb791b@8b4c13bb791b → [Updates: v0.0.0-20260824195058-e88cd73687aa]
• golang.org/x/term v0.45.0
• google.golang.org/api v0.293.0 → [Updates: v0.296.0]
• howett.net/plist v1.0.1
• sigs.k8s.io/yaml v1.6.0
• cel.dev/expr v0.25.3
• cloud.google.com/go v0.123.0
• cloud.google.com/go/auth v0.23.1 → [Updates: v0.23.2]
• cloud.google.com/go/auth/oauth2adapt v0.2.8
• cloud.google.com/go/compute/metadata v0.9.0
• cloud.google.com/go/iam v1.13.0
• cloud.google.com/go/longrunning v1.2.0
• cloud.google.com/go/monitoring v1.30.0
• code.gitea.io/sdk/gitea v0.25.1
• github.com/42wim/httpsig v1.2.4
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.35.0 → [Updates: v1.37.0]
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.59.0 → [Updates: v0.61.0]
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.59.0 → [Updates: v0.61.0]
• github.com/Masterminds/semver/v3 v3.5.0
• github.com/PaesslerAG/gval v1.2.4
• github.com/PuerkitoBio/goquery v1.12.0 → [Updates: v1.13.0]
• github.com/andybalholm/cascadia v1.3.4 → [Updates: v1.3.5]
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.18 → [Updates: v1.7.20]
• github.com/aws/aws-sdk-go-v2/credentials v1.19.37 → [Updates: v1.20.2]
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.38 → [Updates: v1.19.1]
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.38 → [Updates: v1.5.1]
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.38 → [Updates: v2.8.1]
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.39 → [Updates: v1.5.1]
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.17 → [Updates: v1.13.19]
• github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.31 → [Updates: v1.11.1]
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.38 → [Updates: v1.14.1]
• github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.39 → [Updates: v1.20.1]
• github.com/aws/aws-sdk-go-v2/service/signin v1.5.7 → [Updates: v1.8.0]
• github.com/aws/aws-sdk-go-v2/service/sso v1.33.7 → [Updates: v1.36.0]
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.7 → [Updates: v1.41.0]
• github.com/aws/smithy-go v1.27.8 → [Updates: v1.28.1]
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/clipperhouse/uax29/v2 v2.7.0
• github.com/cncf/xds/go v0.0.0-20260202195803-dba9d589def2@dba9d589def2
• github.com/danieljoos/wincred v1.2.3
• github.com/davidmz/go-pageant v1.0.2
• github.com/disintegration/imaging v1.6.2
• github.com/dlclark/regexp2/v2 v2.7.1 → [Updates: v2.8.0]
• github.com/dustin/go-humanize v1.0.1
• github.com/envoyproxy/go-control-plane/envoy v1.37.0 → [Updates: v1.39.0]
• github.com/envoyproxy/protoc-gen-validate v1.3.3
• github.com/felixge/httpsnoop v1.1.0
• github.com/gdamore/encoding v1.0.1
• github.com/go-fed/httpsig v1.1.0
• github.com/go-jose/go-jose/v4 v4.1.4 → [Updates: v4.1.5]
• github.com/go-logr/logr v1.4.4
• github.com/go-logr/stdr v1.2.2
• github.com/godbus/dbus/v5 v5.2.2
• github.com/google/go-github/v86 v86.0.0 → [Updates: v90.0.0]
• github.com/google/go-querystring v1.2.0
• github.com/google/s2a-go v0.1.9
• github.com/google/uuid v1.6.0
• github.com/googleapis/enterprise-certificate-proxy v0.3.20
• github.com/googleapis/gax-go/v2 v2.23.0 → [Updates: v2.24.0]
• github.com/hashicorp/go-cleanhttp v0.5.2
• github.com/hashicorp/go-retryablehttp v0.7.8
• github.com/hashicorp/go-version v1.9.0
• github.com/klauspost/cpuid/v2 v2.4.0
• github.com/klauspost/crc32 v1.3.0
• github.com/lucasb-eyer/go-colorful v1.4.1
• github.com/mattn/go-runewidth v0.0.27 → [Updates: v0.0.28]
• github.com/minio/crc64nvme v1.1.1
• github.com/minio/md5-simd v1.1.2
• github.com/mmcdole/goxpp/v2 v2.0.0
• github.com/philhofer/fwd v1.2.0
• github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10@0393e58bdf10 → [Updates: v0.6.1-0.20240319094008-0393e58bdf10]
• github.com/rivo/uniseg v0.4.7
• github.com/rs/xid v1.6.0
• github.com/shopspring/decimal v1.4.0
• github.com/spiffe/go-spiffe/v2 v2.8.1
• github.com/tinylib/msgp v1.6.4
• gitlab.com/gitlab-org/api/client-go v1.46.0 → [Updates: v2.61.0]
• go.opentelemetry.io/auto/sdk v1.2.1
• go.opentelemetry.io/contrib/detectors/gcp v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.70.0 → [Updates: v0.71.0]
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.70.0 → [Updates: v0.71.0]
• go.opentelemetry.io/otel v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/metric v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/sdk v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/sdk/metric v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/trace v1.45.0 → [Updates: v1.46.0]
• go.yaml.in/yaml/v2 v2.4.4 → [Updates: v3.0.5]
• go.yaml.in/yaml/v3 v3.0.5
• golang.org/x/crypto v0.55.0 → [Updates: v0.56.0]
• golang.org/x/image v0.45.0
• golang.org/x/net v0.58.0
• golang.org/x/oauth2 v0.36.0
• golang.org/x/sync v0.22.0
• golang.org/x/sys v0.47.0
• golang.org/x/text v0.41.0
• golang.org/x/time v0.15.0
• google.golang.org/genproto v0.0.0-20260519071638-aa98bba5eb94@aa98bba5eb94 → [Updates: v0.0.0-20260908043556-f8649ddbbfe6]
• google.golang.org/genproto/googleapis/api v0.0.0-20260630182238-925bb5da69e7@925bb5da69e7 → [Updates: v0.0.0-20260908043556-f8649ddbbfe6]
• google.golang.org/genproto/googleapis/rpc v0.0.0-20260807164820-c8921c73eeea@c8921c73eeea → [Updates: v0.0.0-20260908043556-f8649ddbbfe6]
• google.golang.org/grpc v1.83.1 → [Updates: v1.83.2]
• google.golang.org/protobuf v1.36.12
• gopkg.in/ini.v1 v1.67.3
• gopkg.in/yaml.v2 v2.4.0 → [Updates: v3.0.1]
• gopkg.in/yaml.v3 v3.0.1
• nhooyr.io/websocket v1.8.17
• salsa.debian.org/vasudev/gospake2 v0.0.0-20210510093858-d91629950ad1@d91629950ad1

pre-commit (1)

.pre-commit-config.yaml (6)

• pre-commit/pre-commit-hooks v5.0.0 → [Updates: v6.0.0]
• zricethezav/gitleaks v8.30.1
• Bahjat/pre-commit-golang v1.0.6
• renovatebot/pre-commit-hooks 40.62.1 → [Updates: 44.53.0]
• pre-commit-ci/pre-commit-ci-config v1.6.1
• python-jsonschema/check-jsonschema 0.38.0

regex (2)

.pre-commit-config.yaml (1)

• github.com/golangci/golangci-lint/v2/cmd/golangci-lint v2.13.1 → [Updates: v2.13.2]

Makefile (4)

• golang.org/x/vuln/cmd/govulncheck v1.7.0
• github.com/securego/gosec/v2/cmd/gosec v2.28.0 → [Updates: v2.29.0]
• mvdan.cc/gofumpt v0.11.0 → [Updates: v0.12.0]
• github.com/golangci/golangci-lint/v2/cmd/golangci-lint v2.13.1 → [Updates: v2.13.2]

---

• Check this box to trigger a request for Renovate to run again on this repository