Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update module modernc.org/sqlite to v1.50.1
• chore(deps): update golang-x (golang.org/x/crypto, golang.org/x/sys, golang.org/x/term, golang.org/x/text)
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update module github.com/nyaruka/phonenumbers to v1.7.4
• chore(deps): update go-indirect (github.com/alecthomas/chroma/v2, github.com/anthropics/anthropic-sdk-go, github.com/buger/jsonparser, github.com/charmbracelet/ultraviolet, github.com/charmbracelet/x/exp/charmtone, github.com/charmbracelet/x/exp/slice, github.com/google/jsonschema-go, github.com/invopop/jsonschema, github.com/ollama/ollama, github.com/tidwall/gjson, golang.org/x/exp, golang.org/x/net, golang.org/x/tools, google.golang.org/api, google.golang.org/genai, google.golang.org/genproto/googleapis/rpc, google.golang.org/grpc)
• chore(deps): update module github.com/mark3labs/mcp-go to v0.54.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update docker-images (caddy, golang, postgres)
• chore(deps): update github-actions (actions/create-github-app-token, cachix/install-nix-action, github/codeql-action, step-security/harden-runner, trufflesecurity/trufflehog, useblacksmith/setup-docker-builder)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (3)

deploy/docker-compose.caddy.yml (1)

• caddy sha256:25cdc846626b62d05f6b633b9b40c2c9f6ef89b515dc76133cefd920f7dbe562 → [Updates: undefined]

deploy/docker-compose.test.yml

deploy/docker-compose.yml (1)

• postgres sha256:78481659c47e862334611ccdaf7c369c986b3046da9857112f3b309114a65fb4 → [Updates: undefined]

dockerfile (1)

deploy/relay/Dockerfile (2)

• golang sha256:b54cbf583d390341599d7bcbc062425c081105cc5ef6d170ced98ef9d047c716 → [Updates: undefined]
• gcr.io/distroless/static-debian12 sha256:20bc6c0bc4d625a22a8fde3e55f6515709b32055ef8fb9cfbddaa06d1760f838

github-actions (7)

.github/workflows/ci.yml (28)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31.10.5@ab739621df7a23f52766f9ccc97f38da6b7af14f → [Updates: v31.10.6]
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31.10.5@ab739621df7a23f52766f9ccc97f38da6b7af14f → [Updates: v31.10.6]
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• useblacksmith/setup-docker-builder v1@ac083cc84672d01c60d5e8561d0a939b697de542 → [Updates: v1]
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• go 1.26
• go 1.26
• go 1.26
• node lts/*

.github/workflows/lint.yml (19)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• golangci/golangci-lint-action v9.2.0@1e7e51e771db61008b38414a730f564565cf7c20
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31.10.5@ab739621df7a23f52766f9ccc97f38da6b7af14f → [Updates: v31.10.6]
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• go 1.26
• go 1.26
• go 1.26

.github/workflows/pages.yml (6)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/configure-pages v6.0.0@45bfe0192ca1faeb007ade9deae92b16b8254a0d
• cachix/install-nix-action v31.10.5@ab739621df7a23f52766f9ccc97f38da6b7af14f → [Updates: v31.10.6]
• actions/upload-pages-artifact v5@fc324d3547104276b827a68afc52ff2a11cc49c9
• actions/deploy-pages v5.0.0@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128

.github/workflows/release.yml (7)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• useblacksmith/setup-docker-builder v1@ac083cc84672d01c60d5e8561d0a939b697de542 → [Updates: v1]
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121
• goreleaser/goreleaser-action v7.2.1@1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8
• go 1.26

.github/workflows/scheduled-release.yml (5)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/create-github-app-token v3.1.1@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 → [Updates: v3.2.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• node lts/*

.github/workflows/security.yml (19)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31.10.5@ab739621df7a23f52766f9ccc97f38da6b7af14f → [Updates: v31.10.6]
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• trufflesecurity/trufflehog v3.95.2@17456f8c7d042d8c82c9a8ca9e937231f9f42e26 → [Updates: v3.95.3]
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4.35.4]
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4.35.4]
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• go 1.26
• go 1.26

.github/workflows/update-vendor-hash.yml (6)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.19.2]
• actions/create-github-app-token v3.1.1@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 → [Updates: v3.2.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31.10.5@ab739621df7a23f52766f9ccc97f38da6b7af14f → [Updates: v31.10.6]

gomod (1)

go.mod (126)

• go 1.26
• charm.land/fang/v2 v2.0.1
• github.com/BurntSushi/toml v1.6.0
• github.com/adrg/xdg v0.5.3
• github.com/brianvoe/gofakeit/v7 v7.14.1
• github.com/dustin/go-humanize v1.0.1
• github.com/go-playground/validator/v10 v10.30.2
• github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510@e7afc7fbc510
• github.com/iancoleman/strcase v0.3.0
• github.com/itchyny/gojq v0.12.19
• github.com/mark3labs/mcp-go v0.49.0 → [Updates: v0.54.0]
• github.com/mozilla-ai/any-llm-go v0.9.0
• github.com/nyaruka/phonenumbers v1.7.1 → [Updates: v1.7.4]
• github.com/oklog/ulid/v2 v2.1.1
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/stretchr/testify v1.11.1
• github.com/tj/go-naturaldate v1.3.0
• golang.org/x/crypto v0.50.0 → [Updates: v0.51.0]
• golang.org/x/sys v0.43.0 → [Updates: v0.44.0]
• golang.org/x/term v0.42.0 → [Updates: v0.43.0]
• golang.org/x/text v0.36.0 → [Updates: v0.37.0]
• gorm.io/driver/postgres v1.6.0
• gorm.io/gorm v1.31.1
• modernc.org/sqlite v1.50.0 → [Updates: v1.50.1]
• github.com/charmbracelet/ultraviolet v0.0.0-20260422141423-a0f1f21775f7@a0f1f21775f7 → [Updates: v0.0.0-20260511121909-c840852527f3]
• github.com/charmbracelet/x/exp/charmtone v0.0.0-20260427100455-1ea3e7f8134f@1ea3e7f8134f → [Updates: v0.0.0-20260511125431-fe5d686e0c99]
• github.com/charmbracelet/x/exp/ordered v0.1.0
• github.com/charmbracelet/x/termios v0.1.1
• github.com/charmbracelet/x/windows v0.2.2
• github.com/google/jsonschema-go v0.4.2 → [Updates: v0.4.3]
• github.com/invopop/jsonschema v0.13.0 → [Updates: v0.14.0]
• github.com/jackc/pgpassfile v1.0.0
• github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761@5a60cdf6a761
• github.com/jackc/pgx/v5 v5.9.2
• github.com/jackc/puddle/v2 v2.2.2
• github.com/muesli/mango v0.2.0
• github.com/muesli/mango-cobra v1.3.0
• github.com/muesli/mango-pflag v0.2.0
• github.com/muesli/roff v0.1.0
• github.com/spf13/cast v1.10.0
• github.com/yosida95/uritemplate/v3 v3.0.2
• golang.org/x/tools v0.44.0 → [Updates: v0.45.0]
• google.golang.org/api v0.276.0 → [Updates: v0.279.0]
• charm.land/bubbles/v2 v2.1.0
• charm.land/bubbletea/v2 v2.0.6
• charm.land/glamour/v2 v2.0.0
• charm.land/huh/v2 v2.0.3
• charm.land/lipgloss/v2 v2.0.3
• cloud.google.com/go v0.123.0
• cloud.google.com/go/auth v0.20.0
• cloud.google.com/go/compute/metadata v0.9.0
• github.com/alecthomas/chroma/v2 v2.23.1 → [Updates: v2.24.1]
• github.com/anthropics/anthropic-sdk-go v1.38.0 → [Updates: v1.43.0]
• github.com/atotto/clipboard v0.1.4
• github.com/aymerick/douceur v0.2.0
• github.com/bahlo/generic-list-go v0.2.0
• github.com/buger/jsonparser v1.1.2 → [Updates: v1.2.0]
• github.com/catppuccin/go v0.3.0
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/charmbracelet/colorprofile v0.4.3
• github.com/charmbracelet/harmonica v0.2.0
• github.com/charmbracelet/x/ansi v0.11.7
• github.com/charmbracelet/x/exp/slice v0.0.0-20260427100455-1ea3e7f8134f@1ea3e7f8134f → [Updates: v0.0.0-20260511125431-fe5d686e0c99]
• github.com/charmbracelet/x/exp/strings v0.1.0
• github.com/charmbracelet/x/term v0.2.2
• github.com/clipperhouse/displaywidth v0.11.0
• github.com/clipperhouse/uax29/v2 v2.7.0
• github.com/davecgh/go-spew v1.1.1
• github.com/dlclark/regexp2 v1.12.0 → [Updates: v2.0.2]
• github.com/felixge/httpsnoop v1.0.4
• github.com/gabriel-vasile/mimetype v1.4.13
• github.com/go-logr/logr v1.4.3
• github.com/go-logr/stdr v1.2.2
• github.com/go-playground/locales v0.14.1
• github.com/go-playground/universal-translator v0.18.1
• github.com/google/go-cmp v0.7.0
• github.com/google/s2a-go v0.1.9
• github.com/google/uuid v1.6.0
• github.com/googleapis/enterprise-certificate-proxy v0.3.15
• github.com/googleapis/gax-go/v2 v2.22.0
• github.com/gorilla/css v1.0.1
• github.com/gorilla/websocket v1.5.3
• github.com/inconshreveable/mousetrap v1.1.0
• github.com/itchyny/timefmt-go v0.1.8
• github.com/jinzhu/inflection v1.0.0
• github.com/jinzhu/now v1.1.5
• github.com/leodido/go-urn v1.4.0
• github.com/lrstanley/bubblezone/v2 v2.0.0
• github.com/lucasb-eyer/go-colorful v1.4.0
• github.com/mailru/easyjson v0.9.2
• github.com/mattn/go-isatty v0.0.22
• github.com/mattn/go-runewidth v0.0.23
• github.com/microcosm-cc/bluemonday v1.0.27
• github.com/mitchellh/hashstructure/v2 v2.0.2
• github.com/muesli/cancelreader v0.2.2
• github.com/ncruces/go-strftime v1.0.0
• github.com/ollama/ollama v0.21.2 → [Updates: v0.23.4]
• github.com/openai/openai-go v1.12.0 → [Updates: v3.35.0]
• github.com/pmezard/go-difflib v1.0.0
• github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec@24d4a6f8daec
• github.com/rivo/uniseg v0.4.7
• github.com/tidwall/gjson v1.18.0 → [Updates: v1.19.0]
• github.com/tidwall/match v1.2.0
• github.com/tidwall/pretty v1.2.1
• github.com/tidwall/sjson v1.2.5
• github.com/wk8/go-ordered-map/v2 v2.1.8
• github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e@abceb7e1c41e
• github.com/yuin/goldmark v1.8.2
• github.com/yuin/goldmark-emoji v1.0.6
• go.opentelemetry.io/auto/sdk v1.2.1
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0
• go.opentelemetry.io/otel v1.43.0
• go.opentelemetry.io/otel/metric v1.43.0
• go.opentelemetry.io/otel/trace v1.43.0
• golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f@746e56fc9e2f → [Updates: v0.0.0-20260508232706-74f9aab9d74a]
• golang.org/x/net v0.53.0 → [Updates: v0.54.0]
• golang.org/x/sync v0.20.0
• google.golang.org/genai v1.54.0 → [Updates: v1.57.0]
• google.golang.org/genproto/googleapis/rpc v0.0.0-20260420184626-e10c466a9529@e10c466a9529 → [Updates: v0.0.0-20260511170946-3700d4141b60]
• google.golang.org/grpc v1.80.0 → [Updates: v1.81.0]
• google.golang.org/protobuf v1.36.11
• gopkg.in/yaml.v3 v3.0.1
• modernc.org/libc v1.72.0 → [Updates: v2.1.30]
• modernc.org/mathutil v1.7.1
• modernc.org/memory v1.11.0

nix (1)

flake.nix (4)

• flake-utils lock file @ 11707dc2f618dd54ca8739b309ec4fc024de578b
• git-hooks lock file @ 9c4469b68b62e122c3b3d2ab0ed3caeb04ff1ac4
• gitignore lock file @ 637db329424fd7e46cf4185293b9cc8c88c95394
• nixpkgs nixos-unstable-small

---

• Check this box to trigger a request for Renovate to run again on this repository