Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update workflows (actions/cache, actions/checkout, actions/setup-go, actions/setup-java, actions/setup-node, actions/setup-python, github/codeql-action, golangci/golangci-lint-action, ruby/setup-ruby, shivammathur/setup-php)
• fix(deps): update module github.com/google/osv-scalibr to v0.4.5
• fix(deps): update osv-detector minor (github.com/BurntSushi/toml, github.com/gkampitakis/go-snaps, github.com/tidwall/jsonc, golang.org/x/mod, golang.org/x/sync)
• chore(deps): update workflows (major) (actions/download-artifact, actions/upload-artifact, goreleaser/goreleaser-action)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (4)

.github/workflows/checks.yml (8)

• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c → [Updates: v6.3.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c → [Updates: v6.3.0]
• golangci/golangci-lint-action v9.1.0@e7fa5ac41e1cf5b7d48e45e42232ce7ada589601 → [Updates: v9.2.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/setup-node v6.0.0@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 → [Updates: v6.3.0]

.github/workflows/release.yml (11)

• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c → [Updates: v6.3.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c → [Updates: v6.3.0]
• golangci/golangci-lint-action v9.1.0@e7fa5ac41e1cf5b7d48e45e42232ce7ada589601 → [Updates: v9.2.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/setup-node v6.0.0@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 → [Updates: v6.3.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c → [Updates: v6.3.0]
• goreleaser/goreleaser-action v6.4.0@e435ccd777264be153ace6237001ef4d979d3a7a → [Updates: v7.0.0]

.github/workflows/scorecard.yml (4)

• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• github/codeql-action v4.31.5@fdbfb4d2750291e159f0156def62b853c2798ca2 → [Updates: v4.33.0]

.github/workflows/semantic.yml (30)

• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/cache v5.0.1@9255dc7a253b0ccc959486e2bca901246202afeb → [Updates: v5.0.4]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/setup-python v6.1.0@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 → [Updates: v6.2.0]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• actions/cache v5.0.1@9255dc7a253b0ccc959486e2bca901246202afeb → [Updates: v5.0.4]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/cache v5.0.1@9255dc7a253b0ccc959486e2bca901246202afeb → [Updates: v5.0.4]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/setup-python v6.1.0@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 → [Updates: v6.2.0]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• actions/cache v5.0.1@9255dc7a253b0ccc959486e2bca901246202afeb → [Updates: v5.0.4]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• shivammathur/setup-php 2.36.0@44454db4f0199b8b9685a5d763dc37cbf79108e1 → [Updates: 2.37.0]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/setup-python v6.1.0@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 → [Updates: v6.2.0]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• ruby/setup-ruby v1.268.0@8aeb6ff8030dd539317f8e1769a044873b56ea71 → [Updates: v1.295.0]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165 → [Updates: v5.2.0]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• r-lib/actions v2.11.4@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c → [Updates: v6.3.0]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]

gomod (1)

go.mod (10)

• go 1.24.6
• github.com/BurntSushi/toml v1.5.0 → [Updates: v1.6.0]
• github.com/fatih/color v1.18.0
• github.com/gkampitakis/go-snaps v0.5.15 → [Updates: v0.5.21]
• github.com/google/go-cmp v0.7.0
• github.com/google/osv-scalibr v0.4.1-0.20251202121049-5e7e15f4a036@5e7e15f4a036 → [Updates: v0.4.5]
• github.com/tidwall/jsonc v0.3.2 → [Updates: v0.3.3]
• golang.org/x/mod v0.30.0 → [Updates: v0.34.0]
• golang.org/x/sync v0.17.0 → [Updates: v0.20.0]
• gopkg.in/yaml.v3 v3.0.1

---

• Check this box to trigger a request for Renovate to run again on this repository