Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (2)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/kballard/go-shellquote	2018-04-28
gomod	gopkg.in/yaml.v3	2022-05-27

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• [skip-release] Update golangci/golangci-lint-action digest to 82606bf

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [security]
• chore(deps): update module golang.org/x/net to v0.55.0 [security]
• fix(deps): update module golang.org/x/crypto to v0.52.0 [security]
• fix(deps): update module golang.org/x/sys to v0.44.0 [security]
• fix(deps): update bump-dependencies (charm.land/bubbletea/v2, charm.land/lipgloss/v2, github.com/NimbleMarkets/ntcharts/v2, golang.org/x/term)
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

26/32 CVEs have Renovate fixes.

gomod

go.mod

github.com/docker/docker

• GHSA-6hwg-w5jg-9c6x
• GHSA-j249-ghv5-7mxv
• GHSA-pxq6-2prw-chj9
• GHSA-qrqr-3x5j-2xw9
• GO-2026-4883
• GO-2026-4887

Detected Dependencies

github-actions (3)

.github/workflows/github-release.yaml (1)

• libops/actions main@ef667db8c16533a257d841e75df5c3388152b2d7

.github/workflows/goreleaser.yaml (1)

• libops/terraform-linux-packages main@4a8eafe5a90d5f811e389d2d55015287896c2a66

.github/workflows/lint-test.yaml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• golangci/golangci-lint-action v9@1e7e51e771db61008b38414a730f564565cf7c20 → [Updates: v9]
• ubuntu 24.04
• go >=1.26.1

gomod (1)

go.mod (21)

• go 1.26.1
• charm.land/bubbles/v2 v2.1.0
• charm.land/bubbletea/v2 v2.0.2 → [Updates: v2.0.6]
• charm.land/fang/v2 v2.0.1
• charm.land/glamour/v2 v2.0.0
• charm.land/lipgloss/v2 v2.0.2 → [Updates: v2.0.3]
• github.com/NimbleMarkets/ntcharts/v2 v2.0.0 → [Updates: v2.0.3]
• github.com/docker/docker v28.5.2+incompatible
• github.com/joho/godotenv v1.5.1
• github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51@95032a82bc51
• github.com/lrstanley/bubblezone/v2 v2.0.0
• github.com/pkg/sftp v1.13.10
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• golang.org/x/crypto v0.49.0 → [Updates: v0.52.0]
• golang.org/x/sys v0.42.0 → [Updates: v0.44.0]
• golang.org/x/term v0.41.0 → [Updates: v0.43.0]
• google.golang.org/protobuf v1.36.11
• gopkg.in/yaml.v3 v3.0.1
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.35.0 → [Updates: v1.43.0]
• golang.org/x/net v0.52.0 → [Updates: v0.55.0]

renovate-config (1)

renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository