Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): pin dependencies
• chore(deps): update actions/setup-go digest to 40f1582
• chore(deps): update docker/build-push-action digest to 10e90e3
• chore(deps): update docker/setup-buildx-action digest to 8d2750c
• chore(deps): update docker/setup-qemu-action digest to c7c5346
• fix(deps): update module oras.land/oras-go/v2 to v2.6.1
• chore(deps): update alpine docker tag to v3.24.1
• fix(deps): update module github.com/masterminds/semver/v3 to v3.5.0
• fix(deps): update module golang.org/x/sync to v0.21.0
• 🔐 Create all pending approval PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update golang to v1.26

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package aquasecurity/trivy-action).

Files affected: .github/workflows/docker-build.yaml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/checkout digest to 34e1148
• chore(deps): update amannn/action-semantic-pull-request digest to e32d7e6
• chore(deps): update docker/login-action digest to c94ce9f
• chore(deps): update docker/metadata-action digest to c299e40
• chore(deps): update github/codeql-action digest to dd903d2
• chore(deps): update alpine docker tag to v3.22.4
• chore(deps): update dependency golangci/golangci-lint to v2.2.2
• chore(deps): update sigstore/cosign-installer action to v3.9.2
• chore(deps): update dependency golangci/golangci-lint to v2.12.2
• chore(deps): update dependency nunnatsa/ginkgolinter to v0.23.0
• chore(deps): update github actions (minor) (aquasecurity/trivy-action, sigstore/cosign-installer)
• chore(deps): update github actions (major) (actions/checkout, actions/setup-go, amannn/action-semantic-pull-request, docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action, docker/setup-qemu-action, github/codeql-action, sigstore/cosign-installer)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• golang 1.24 → [Updates: 1.26]
• alpine 3.22.0 → [Updates: 3.22.4, 3.24.1]

github-actions (7)

.github/workflows/ci-pr-title.yaml (1)

• amannn/action-semantic-pull-request v5@0723387faaf9b38adef4775cd42cfd5155ed6017 → [Updates: v6, v5]

.github/workflows/codeql.yaml (1)

• cloudoperators/common main → [Updates: main]

.github/workflows/docker-build.yaml (10)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• sigstore/cosign-installer v3.9.1@398d4b0eeef1380460a10c8013a76f728fb906ac → [Updates: v3.9.2, v3.10.1, v4.1.2]
• docker/setup-qemu-action v3@29109295f81e9208d7d86ff1c6c12d2833863392 → [Updates: v4, v3]
• docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435 → [Updates: v4, v3]
• docker/login-action v3@74a5d142397b4f367a81961eba4e8cd7edddf772 → [Updates: v4, v3]
• docker/metadata-action v5@902fa8ec7d6ecbf8d84d538b9b233a880e428804 → [Updates: v6, v5]
• docker/build-push-action v6@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v7, v6]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• aquasecurity/trivy-action 0.32.0@dc5a429b52fcf669ce959baa2c2dd26090d2a6c4 → [Updates: v0.36.0]
• github/codeql-action v3@181d5eefc20863364f96762470ba6f862bdef56b → [Updates: v4, v3]

.github/workflows/license.yaml (1)

• cloudoperators/common main → [Updates: main]

.github/workflows/reuse.yaml (1)

• cloudoperators/common main → [Updates: main]

.github/workflows/stale.yaml (1)

• cloudoperators/common main → [Updates: main]

.github/workflows/test.yaml (4)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v6, v5]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• actions/setup-go v5@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v6, v5]

gomod (1)

go.mod (6)

• go 1.23.0
• github.com/Masterminds/semver/v3 v3.4.0 → [Updates: v3.5.0]
• github.com/opencontainers/image-spec v1.1.1
• github.com/pkg/errors v0.9.1
• golang.org/x/sync v0.14.0 → [Updates: v0.21.0]
• oras.land/oras-go/v2 v2.6.0 → [Updates: v2.6.1]

regex (2)

Makefile (1)

• golangci/golangci-lint 2.2.1 → [Updates: 2.2.2, 2.12.2]

Makefile (1)

• nunnatsa/ginkgolinter 0.19.1 → [Updates: 0.23.0]

renovate-config (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository