Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (39)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/BobuSumisu/aho-corasick	2020-07-16
gomod	github.com/adrg/strutil	2023-09-27
gomod	github.com/alecthomas/kingpin/v2	2023-09-30
gomod	github.com/aymanbagabas/go-osc52	2023-03-06
gomod	github.com/bill-rich/go-syslog	2019-08-15
gomod	github.com/crewjam/rfc5424	2020-05-29
gomod	github.com/csnewman/dextk	2024-06-05
gomod	github.com/dustin/go-humanize	2023-01-10
gomod	github.com/felixge/fgprof	2024-08-30
gomod	github.com/go-errors/errors	2023-09-15
gomod	github.com/go-logr/zapr	2023-11-03
gomod	github.com/go-redis/redis	2020-08-07
gomod	github.com/gobwas/glob	2018-02-08
gomod	github.com/google/go-cmp	2025-01-14
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/hashicorp/go-retryablehttp	2025-06-18
gomod	github.com/hashicorp/golang-lru/v2	2023-09-21
gomod	github.com/k0kubun/go-ansi	2018-05-17
gomod	github.com/klauspost/pgzip	2022-09-30
gomod	github.com/kylelemons/godebug	2019-05-05
gomod	github.com/marusama/semaphore/v2	2021-03-28
gomod	github.com/mitchellh/go-ps	2020-02-03
gomod	github.com/muesli/reflow	2021-05-17
gomod	github.com/patrickmn/go-cache	2017-07-22
gomod	github.com/paulbellamy/ratecounter	2017-07-19
gomod	github.com/pkg/errors	2020-01-14
gomod	github.com/repeale/fp-go	2022-09-06
gomod	github.com/sassoftware/go-rpmutils	2024-05-07
gomod	github.com/sendgrid/sendgrid-go	2025-05-29
gomod	github.com/sergi/go-diff	2025-06-05
gomod	github.com/shuheiktgw/go-travis	2020-04-29
gomod	github.com/trufflesecurity/disk-buffer-reader	2023-11-29
gomod	github.com/trufflesecurity/overseer	2024-11-07
gomod	github.com/trufflesecurity/waas-client-library-go	2024-06-14
gomod	go.uber.org/automaxprocs	2024-09-23
gomod	gopkg.in/h2non/gock.v1	2021-08-03
gomod	gopkg.in/yaml.v2	2022-05-27
gomod	gopkg.in/yaml.v3	2022-05-27
gomod	sigs.k8s.io/yaml	2025-07-24

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update github/codeql-action digest to 5595cca
• Update module github.com/aymanbagabas/go-osc52 to v1.2.2
• Update module github.com/charmbracelet/bubbletea to v1.3.10
• Update module github.com/envoyproxy/protoc-gen-validate to v1.3.3
• Update module github.com/gabriel-vasile/mimetype to v1.4.15
• Update module github.com/go-git/go-git/v5 to v5.19.2
• Update module github.com/go-logr/logr to v1.4.4
• Update module github.com/jlaffaye/ftp to v0.2.2
• Update module github.com/mattn/go-isatty to v0.0.24
• Update module go.mongodb.org/mongo-driver to v1.17.9
• Update alpine Docker tag to v3.24
• Update go toolchain directive to v1.26.5
• Update module cloud.google.com/go/secretmanager to v1.21.0
• Update module cloud.google.com/go/storage to v1.64.0
• Update module github.com/bradleyfalzon/ghinstallation/v2 to v2.19.0
• Update module github.com/brianvoe/gofakeit/v7 to v7.15.0
• Update module github.com/charmbracelet/bubbles to v0.21.1
• Update module github.com/couchbase/gocb/v2 to v2.12.4
• Update module github.com/elastic/go-elasticsearch/v8 to v8.19.6
• Update module github.com/fatih/color to v1.19.0
• Update module github.com/getsentry/sentry-go to v0.48.0
• Update module github.com/go-sql-driver/mysql to v1.10.0
• Update module github.com/golang-jwt/jwt/v5 to v5.3.1
• Update module github.com/google/go-containerregistry to v0.21.8
• Update module github.com/googleapis/gax-go/v2 to v2.23.0
• Update module github.com/jedib0t/go-pretty/v6 to v6.8.3
• Update module github.com/jpillora/overseer to v1.5.0
• Update module github.com/lestrrat-go/jwx/v3 to v3.2.0
• Update module github.com/lib/pq to v1.12.3
• Update module github.com/mholt/archives to v0.1.5
• Update module github.com/microsoft/go-mssqldb to v1.10.0
• Update module github.com/moby/moby/client to v0.5.1
• Update module github.com/prometheus/client_golang to v1.24.1
• Update module github.com/rabbitmq/amqp091-go to v1.13.0
• Update module github.com/schollz/progressbar/v3 to v3.19.1
• Update module github.com/sergi/go-diff to v1.4.0
• Update module github.com/TheZeroSlave/zapsentry to v1.24.0
• Update module github.com/wasilibs/go-re2 to v1.12.0
• Update module github.com/xo/dburl to v0.24.2
• Update module gitlab.com/gitlab-org/api/client-go to v1.46.0
• Update module go.uber.org/zap to v1.28.0
• Update module golang.org/x/crypto to v0.54.0
• Update module golang.org/x/net to v0.57.0
• Update module golang.org/x/oauth2 to v0.36.0
• Update module golang.org/x/sync to v0.22.0
• Update module golang.org/x/text to v0.40.0
• Update module golang.org/x/time to v0.15.0
• Update module google.golang.org/api to v0.291.0
• Update module pault.ag/go/debian to v0.21.0
• Update module pgregory.net/rapid to v1.3.0
• Update module sigs.k8s.io/yaml to v1.6.0
• Update testcontainers-go monorepo to v0.43.0 (github.com/testcontainers/testcontainers-go, github.com/testcontainers/testcontainers-go/modules/elasticsearch, github.com/testcontainers/testcontainers-go/modules/mongodb, github.com/testcontainers/testcontainers-go/modules/mssql, github.com/testcontainers/testcontainers-go/modules/mysql, github.com/testcontainers/testcontainers-go/modules/postgres)
• Update github-actions (major) (actions/cache, actions/checkout, actions/setup-go, sigstore/cosign-installer)
• Update module github.com/aymanbagabas/go-osc52 to v2
• Update module github.com/charmbracelet/bubbles to v2
• Update module github.com/charmbracelet/bubbletea to v2
• Update module github.com/charmbracelet/glamour to v2
• Update module github.com/charmbracelet/lipgloss to v2
• Update module github.com/elastic/go-elasticsearch/v8 to v9
• Update module github.com/google/go-github/v67 to v89
• Update module github.com/lestrrat-go/jwx/v3 to v4
• Update module github.com/lrstanley/bubblezone to v2
• Update module gitlab.com/gitlab-org/api/client-go to v2
• Update module go.mongodb.org/mongo-driver to v2
• Update module gopkg.in/yaml.v2 to v3
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update dependency trufflesecurity/.github to v1.0.4

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (go package github.com/bill-rich/go-syslog).

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update github.com/trufflesecurity/ldap-verify digest to 2e245c1
• Update aws-sdk-go-v2 monorepo (github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/credentials, github.com/aws/aws-sdk-go-v2/feature/s3/manager, github.com/aws/aws-sdk-go-v2/service/s3, github.com/aws/aws-sdk-go-v2/service/sns, github.com/aws/aws-sdk-go-v2/service/sts)
• Update module github.com/aws/smithy-go to v1.27.6
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (3)

Dockerfile (1)

• alpine 3.22 → [Updates: 3.24]

Dockerfile.goreleaser (1)

• alpine 3.22 → [Updates: 3.24]

hack/Dockerfile.protos (1)

• golang 1.25-bullseye

github-actions (10)

.github/workflows/codeql-analysis.yml (5)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• github/codeql-action v4@f205ea1c3313d32999d8d6a48b4f6530d4437b38 → [Updates: v4]
• github/codeql-action v4@f205ea1c3313d32999d8d6a48b4f6530d4437b38 → [Updates: v4]
• go 1.26

.github/workflows/detector-corpora-test.yml (11)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• peter-evans/find-comment v4@b30e6a3c0ed37e7c023ccd3f1db5c6c0b0c23aad
• peter-evans/create-or-update-comment v5@e8674b075228eee787fea43ef493e45ece1004c9
• aws-actions/configure-aws-credentials v6@e6de054238d6b7531b4efff3b6587d9aade6a06c
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• peter-evans/find-comment v4@b30e6a3c0ed37e7c023ccd3f1db5c6c0b0c23aad
• peter-evans/create-or-update-comment v5@e8674b075228eee787fea43ef493e45ece1004c9
• go 1.26

.github/workflows/detector-tests.yml (4)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• jaxxstorm/action-install-gh-release v3.0.0@25e24d2d23ae098373794ef1d6faecb48ee52da8
• rwx-research/setup-captain v1.4.1@f761ee3671e4c027299f8a5842a53fba8ddd8e37

.github/workflows/lint.yml (12)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• golangci/golangci-lint-action v9@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• go 1.26
• golangci/golangci-lint v2.12.2
• go 1.26
• go 1.26

.github/workflows/performance.yml (4)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• go 1.26

.github/workflows/release-bot.yml (2)

• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f

.github/workflows/release.yml (8)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• sigstore/cosign-installer v3.10.1@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 → [Updates: v4.1.2]
• goreleaser/goreleaser-action v7@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• go 1.26

.github/workflows/secrets.yml (1)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]

.github/workflows/smoke.yml (6)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• go 1.26
• go 1.26

.github/workflows/test.yml (9)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• buildpulse/buildpulse-action main@0b048a4942e59de0796568d1035946e283be6b3a
• mikepenz/action-junit-report v6@d9f48fc87bc235f7e214acf696ca5abc0a986f16
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• go 1.26
• go 1.26

gomod (1)

go.mod (111)

• go 1.25.0
• go 1.25.10 → [Updates: 1.26.5]
• github.com/trufflesecurity/overseer v1.2.8
• github.com/trufflesecurity/waas-client-library-go v1.0.9
• cloud.google.com/go/secretmanager v1.16.0 → [Updates: v1.21.0]
• cloud.google.com/go/storage v1.56.1 → [Updates: v1.64.0]
• github.com/BobuSumisu/aho-corasick v1.0.3
• github.com/TheZeroSlave/zapsentry v1.23.0 → [Updates: v1.24.0]
• github.com/adrg/strutil v0.3.1
• github.com/alecthomas/kingpin/v2 v2.4.0
• github.com/avast/apkparser v0.0.0-20260423123151-7fcaee440f68@7fcaee440f68
• github.com/aws/aws-sdk-go-v2 v1.43.0 → [Updates: v1.43.3]
• github.com/aws/aws-sdk-go-v2/config v1.32.31 → [Updates: v1.32.34]
• github.com/aws/aws-sdk-go-v2/credentials v1.19.30 → [Updates: v1.19.33]
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.35 → [Updates: v1.22.38]
• github.com/aws/aws-sdk-go-v2/service/s3 v1.106.0 → [Updates: v1.106.3]
• github.com/aws/aws-sdk-go-v2/service/sns v1.42.0 → [Updates: v1.42.3]
• github.com/aws/aws-sdk-go-v2/service/sts v1.45.0 → [Updates: v1.45.3]
• github.com/aws/smithy-go v1.27.3 → [Updates: v1.27.6]
• github.com/aymanbagabas/go-osc52 v1.2.1 → [Updates: v1.2.2, v2.0.1]
• github.com/bill-rich/go-syslog v0.0.0-20220413021637-49edb52a574c@49edb52a574c
• github.com/bradleyfalzon/ghinstallation/v2 v2.16.0 → [Updates: v2.19.0]
• github.com/brianvoe/gofakeit/v7 v7.6.0 → [Updates: v7.15.0]
• github.com/charmbracelet/bubbles v0.18.0 → [Updates: v0.21.1, v2.1.1]
• github.com/charmbracelet/bubbletea v1.3.6 → [Updates: v1.3.10, v2.0.8]
• github.com/charmbracelet/glamour v0.10.0 → [Updates: v2.0.1]
• github.com/charmbracelet/lipgloss v1.1.1-0.20250404203927-76690c660834@76690c660834 → [Updates: v2.0.5]
• github.com/couchbase/gocb/v2 v2.11.0 → [Updates: v2.12.4]
• github.com/crewjam/rfc5424 v0.1.0
• github.com/csnewman/dextk v0.3.0
• github.com/dustin/go-humanize v1.0.1
• github.com/elastic/go-elasticsearch/v8 v8.17.1 → [Updates: v8.19.6, v9.4.2]
• github.com/envoyproxy/protoc-gen-validate v1.3.0 → [Updates: v1.3.3]
• github.com/fatih/color v1.18.0 → [Updates: v1.19.0]
• github.com/felixge/fgprof v0.9.5
• github.com/gabriel-vasile/mimetype v1.4.10 → [Updates: v1.4.15]
• github.com/getsentry/sentry-go v0.32.0 → [Updates: v0.48.0]
• github.com/go-errors/errors v1.5.1
• github.com/go-git/go-git/v5 v5.19.1 → [Updates: v5.19.2]
• github.com/go-logr/logr v1.4.3 → [Updates: v1.4.4]
• github.com/go-logr/zapr v1.3.0
• github.com/go-redis/redis v6.15.9+incompatible
• github.com/go-sql-driver/mysql v1.8.1 → [Updates: v1.10.0]
• github.com/gobwas/glob v0.2.3
• github.com/golang-jwt/jwt/v5 v5.2.3 → [Updates: v5.3.1]
• github.com/google/go-cmp v0.7.0
• github.com/google/go-containerregistry v0.20.6 → [Updates: v0.21.8]
• github.com/google/go-github/v67 v67.0.0 → [Updates: v89.0.0]
• github.com/google/uuid v1.6.0
• github.com/googleapis/gax-go/v2 v2.16.0 → [Updates: v2.23.0]
• github.com/hashicorp/go-retryablehttp v0.7.8
• github.com/hashicorp/golang-lru/v2 v2.0.7
• github.com/jedib0t/go-pretty/v6 v6.6.8 → [Updates: v6.8.3]
• github.com/jlaffaye/ftp v0.2.0 → [Updates: v0.2.2]
• github.com/joho/godotenv v1.5.1
• github.com/jpillora/overseer v1.1.6 → [Updates: v1.5.0]
• github.com/k0kubun/go-ansi v0.0.0-20180517002512-3bf9e2903213@3bf9e2903213
• github.com/klauspost/pgzip v1.2.6
• github.com/kylelemons/godebug v1.1.0
• github.com/lestrrat-go/jwx/v3 v3.0.12 → [Updates: v3.2.0, v4.2.0]
• github.com/lib/pq v1.10.9 → [Updates: v1.12.3]
• github.com/lrstanley/bubblezone v0.0.0-20250404061050-e13639e27357@e13639e27357 → [Updates: v2.0.0]
• github.com/marusama/semaphore/v2 v2.5.0
• github.com/mattn/go-isatty v0.0.20 → [Updates: v0.0.24]
• github.com/mholt/archives v0.0.0-20241216060121-23e0af8fe73d@23e0af8fe73d → [Updates: v0.1.5]
• github.com/microsoft/go-mssqldb v1.8.2 → [Updates: v1.10.0]
• github.com/mitchellh/go-ps v1.0.0
• github.com/moby/moby/client v0.4.1 → [Updates: v0.5.1]
• github.com/muesli/reflow v0.3.0
• github.com/patrickmn/go-cache v2.1.0+incompatible
• github.com/paulbellamy/ratecounter v0.2.0
• github.com/pkg/errors v0.9.1
• github.com/prometheus/client_golang v1.20.5 → [Updates: v1.24.1]
• github.com/rabbitmq/amqp091-go v1.10.0 → [Updates: v1.13.0]
• github.com/repeale/fp-go v0.11.1
• github.com/sassoftware/go-rpmutils v0.4.0
• github.com/schollz/progressbar/v3 v3.17.1 → [Updates: v3.19.1]
• github.com/sendgrid/sendgrid-go v3.16.1+incompatible
• github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3@5b0b94c5c0d3 → [Updates: v1.4.0]
• github.com/shuheiktgw/go-travis v0.3.1
• github.com/shurcooL/githubv4 v0.0.0-20260209031235-2402fdf4a9ed@2402fdf4a9ed
• github.com/stretchr/testify v1.11.1
• github.com/testcontainers/testcontainers-go v0.42.0 → [Updates: v0.43.0]
• github.com/testcontainers/testcontainers-go/modules/elasticsearch v0.42.0 → [Updates: v0.43.0]
• github.com/testcontainers/testcontainers-go/modules/mongodb v0.42.0 → [Updates: v0.43.0]
• github.com/testcontainers/testcontainers-go/modules/mssql v0.42.0 → [Updates: v0.43.0]
• github.com/testcontainers/testcontainers-go/modules/mysql v0.42.0 → [Updates: v0.43.0]
• github.com/testcontainers/testcontainers-go/modules/postgres v0.42.1-0.20260423004847-9fc0246c3859@9fc0246c3859 → [Updates: v0.43.0]
• github.com/trufflesecurity/disk-buffer-reader v0.2.1
• github.com/trufflesecurity/ldap-verify v0.0.0-20260401205135-1cad02b26426@1cad02b26426 → [Updates: v0.0.0-20260401205135-1cad02b26426]
• github.com/wasilibs/go-re2 v1.9.0 → [Updates: v1.12.0]
• github.com/xo/dburl v0.23.8 → [Updates: v0.24.2]
• gitlab.com/gitlab-org/api/client-go v1.12.0 → [Updates: v1.46.0, v2.55.1]
• go.mongodb.org/mongo-driver v1.17.7 → [Updates: v1.17.9, v2.8.0]
• go.uber.org/automaxprocs v1.6.0
• go.uber.org/mock v0.6.0
• go.uber.org/zap v1.27.0 → [Updates: v1.28.0]
• golang.org/x/crypto v0.52.0 → [Updates: v0.54.0]
• golang.org/x/net v0.55.0 → [Updates: v0.57.0]
• golang.org/x/oauth2 v0.34.0 → [Updates: v0.36.0]
• golang.org/x/sync v0.20.0 → [Updates: v0.22.0]
• golang.org/x/text v0.37.0 → [Updates: v0.40.0]
• golang.org/x/time v0.14.0 → [Updates: v0.15.0]
• google.golang.org/api v0.259.0 → [Updates: v0.291.0]
• google.golang.org/protobuf v1.36.11
• gopkg.in/h2non/gock.v1 v1.1.2
• gopkg.in/yaml.v2 v2.4.0 → [Updates: v3.0.1]
• gopkg.in/yaml.v3 v3.0.1
• pault.ag/go/debian v0.18.0 → [Updates: v0.21.0]
• pgregory.net/rapid v1.2.0 → [Updates: v1.3.0]
• sigs.k8s.io/yaml v1.4.0 → [Updates: v1.6.0]

renovate-config (1)

.github/renovate.json (1)

• trufflesecurity/.github v1.0.3 → [Updates: v1.0.4]

---

• Check this box to trigger a request for Renovate to run again on this repository