Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Note

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (3)

Datasource	Name	Last Updated
gomod	github.com/jessevdk/go-flags	2024-06-15
gomod	github.com/willabides/actionslog	2023-07-20
gomod	gopkg.in/yaml.v3	2022-05-27

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release.
Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• fix(deps): update golang.org/x/exp digest to 87e1e73
• chore(deps): update docker/metadata-action action to v5.10.0

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected dependencies

dockerfile

Dockerfile

• golang 1.25.4-alpine3.22@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb

github-actions

.github/workflows/build.yml

• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef
• docker/metadata-action v5.9.0@318604b99e75e41977312d83839a89be02ca4893
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• anchore/sbom-action v0.20.10@fbfd9c6c189226748411491745178e0c2017392d
• actions/attest-sbom v3.0.0@4651f806c01d8637787e274ac3bdf724ef169f34
• anchore/sbom-action v0.20.10@fbfd9c6c189226748411491745178e0c2017392d
• actions/attest-sbom v3.0.0@4651f806c01d8637787e274ac3bdf724ef169f34
• actions/attest-build-provenance v3.0.0@977bb373ede98d70efdf65b84cb5f73e068dcc2a

.github/workflows/lint.yml

• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c
• golangci/golangci-lint-action v9.1.0@e7fa5ac41e1cf5b7d48e45e42232ce7ada589601
• grafana/shared-workflows lint-pr-title/v1.2.1@5f4c48c03125ef179c36a821d5b801fc876e672c

.github/workflows/release.yml

• googleapis/release-please-action v4.4.0@16a9c90856f42705d54a6fda1823352bdc62cf38

gomod

go.mod

• go 1.25.0
• github.com/jessevdk/go-flags v1.6.1
• github.com/lmittmann/tint v1.1.2
• github.com/palantir/policy-bot v1.39.3
• github.com/redmatter/go-globre/v2 v2.0.0
• github.com/stretchr/testify v1.11.1
• github.com/willabides/actionslog v0.5.1
• golang.org/x/exp v0.0.0-20251113190631-e25ba8c21ef6@e25ba8c21ef6
• golang.org/x/term v0.37.0
• gopkg.in/yaml.v3 v3.0.1

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.