Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency go to 1.26
• chore(deps): update dependency go to v1.26.0
• chore(deps): update actions/attest-build-provenance action to v4

Pending Branch Automerge

The following updates await pending status checks before automerging. To abort the branch automerge and create a PR instead, click on a checkbox below.

• chore(deps): update actions/checkout digest to de0fac2
• chore(deps): update actions/setup-go digest to 4b73464
• chore(deps): update actions/setup-node digest to 6044e13
• chore(deps): update busybox:1.37.0-glibc docker digest to ba8e26a
• chore(deps): update docker/build-push-action digest to 10e90e3
• chore(deps): update docker/login-action digest to 3227f53
• chore(deps): update docker/metadata-action digest to c299e40

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package softprops/action-gh-release).

Files affected: .github/workflows/build.yml

---

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (1)

• ghcr.io/devcontainers/features/node 1

dockerfile (1)

Dockerfile (1)

• busybox 1.37.0-glibc@sha256:3bf024f5b91b256d55fcecaa910a7f671bdd2b6bb5bb22ac6b774cc4678f2093 → [Updates: 1.37.0-glibc]

github-actions (3)

.github/workflows/build.yml (17)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6]
• octokit/request-action v2.4.0@dad4362715b7fb2ddedf9772c8670824af564f0d
• crftd-tech/trunkver 1.1.2@d0490489c86c5475a3e271d97c05fa928e3a8cd1
• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6]
• actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6]
• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad
• actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6]
• softprops/action-gh-release v2.5@a06a81a03ee405af7f2048a818ed3f03bbf83c7b
• docker/login-action 28fdb31ff34708d19615a74d67103ddc2ea9725c → [Updates: undefined]
• docker/metadata-action v5@318604b99e75e41977312d83839a89be02ca4893 → [Updates: v5]
• docker/build-push-action 9e436ba9f2d7bcd1d038c8e55d039d37896ddc5d → [Updates: undefined]
• actions/attest-build-provenance v3.2.0@96278af6caaf10aea03fd8d33a09a777ca52d62f → [Updates: v4.1.0]
• actions/attest-build-provenance v3.2.0@96278af6caaf10aea03fd8d33a09a777ca52d62f → [Updates: v4.1.0]
• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6]
• go 1.25 → [Updates: 1.26]
• go 1.25 → [Updates: 1.26]

.github/workflows/publish-website.yml (6)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6]
• actions/setup-node v6@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 → [Updates: v6]
• crftd-tech/trunkver main
• actions/upload-pages-artifact v4@7b1f4a764d45c48632c6b24a0339c27f5614fb0b
• actions/configure-pages v5@983d7736d9b0ae728b81ab479565c72886d7745b
• actions/deploy-pages v4@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e

.github/workflows/update-readme.yml (1)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6]

gomod (1)

go.mod (4)

• go 1.25.6 → [Updates: 1.26.0]
• github.com/spf13/cobra v1.10.2
• github.com/stretchr/testify v1.11.1
• github.com/Masterminds/semver/v3 v3.4.0

npm (1)

website/package.json (3)

• @11ty/eleventy ^3.0.0
• @11ty/eleventy-plugin-syntaxhighlight ^5.0.0
• prismjs ^1.29.0

nvm (1)

website/.nvmrc

---

• Check this box to trigger a request for Renovate to run again on this repository