This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/buildtool/build-tools). ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] <!-- rebase-branch=renovate/github.com-go-git-gcfg-2.x -->[chore(deps): update module github.com/go-git/gcfg to v2](../pull/1523) - [ ] <!-- rebase-branch=renovate/github.com-makenowjust-heredoc-2.x -->[chore(deps): update module github.com/makenowjust/heredoc to v2](../pull/1524) - [ ] <!-- rebase-branch=renovate/go.yaml.in-yaml-v2-3.x -->[chore(deps): update module go.yaml.in/yaml/v2 to v3](../pull/1525) - [ ] <!-- rebase-branch=renovate/gopkg.in-evanphx-json-patch.v4-5.x -->[chore(deps): update module gopkg.in/evanphx/json-patch.v4 to v5](../pull/1526) - [ ] <!-- rebase-all-open-prs -->**Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies <details><summary>dockerfile (1)</summary> <blockquote> <details><summary>Dockerfile (2)</summary> - `golang 1.26.4@sha256:f83d23523668b4ea5b644ae7711b2284f35f3bc3369a02655a8bc30d98586c4d` - `debian bookworm-20250520-slim@sha256:90522eeb7e5923ee2b871c639059537b30521272f10ca86fdbbbb2b75a8c40cd` </details> </blockquote> </details> <details><summary>github-actions (12)</summary> <blockquote> <details><summary>.github/workflows/automerge_pr.yaml</summary> </details> <details><summary>.github/workflows/check_release.yaml (3)</summary> - `actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` - `actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16` - `goreleaser/goreleaser-action v7@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94` </details> <details><summary>.github/workflows/codeql.yaml (4)</summary> - `actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` - `github/codeql-action v4@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a` - `github/codeql-action v4@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a` - `github/codeql-action v4@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a` </details> <details><summary>.github/workflows/commitlint.yaml (2)</summary> - `actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` - `wagoid/commitlint-github-action v6@b948419dd99f3fd78a6548d48f94e3df7f6bf3ed` </details> <details><summary>.github/workflows/conventional-labels.yaml (1)</summary> - `bcoe/conventional-release-labels v1@886f696738527c7be444262c327c89436dfb95a8` </details> <details><summary>.github/workflows/copyright-check.yaml (2)</summary> - `actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` - `actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16` </details> <details><summary>.github/workflows/docs.yaml (4)</summary> - `actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` - `actions/setup-python v6@ece7cb06caefa5fff74198d8649806c4678c61a1` - `peaceiris/actions-gh-pages v4@84c30a85c19949d7eee79c4ff27748b70285e453` - `python 3.x` </details> <details><summary>.github/workflows/go.yaml (3)</summary> - `actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` - `actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16` - `codecov/codecov-action v7@fb8b3582c8e4def4969c97caa2f19720cb33a72f` </details> <details><summary>.github/workflows/govuln.yaml (2)</summary> - `actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` - `opzkit/govulncheck-action v1.2.0@914e0763397999f9c7cc3be08b56787060f36dd8` </details> <details><summary>.github/workflows/license-check.yaml (2)</summary> - `actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` - `actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16` </details> <details><summary>.github/workflows/pre-commit.yaml (3)</summary> - `actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` - `actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16` - `pre-commit/action v3.0.1@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd` </details> <details><summary>.github/workflows/release.yaml (3)</summary> - `actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` - `actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16` - `goreleaser/goreleaser-action v7@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94` </details> </blockquote> </details> <details><summary>gomod (1)</summary> <blockquote> <details><summary>go.mod (183)</summary> - `go 1.26.4` - `dario.cat/mergo v1.0.2` - `github.com/Azure/azure-sdk-for-go/sdk/azcore v1.22.0` - `github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.14.0` - `github.com/alecthomas/kong v1.15.0` - `github.com/apex/log v1.9.0` - `github.com/aws/aws-sdk-go-v2 v1.42.1` - `github.com/aws/aws-sdk-go-v2/config v1.32.27` - `github.com/aws/aws-sdk-go-v2/service/ecr v1.58.6` - `github.com/aws/aws-sdk-go-v2/service/sts v1.43.5` - `github.com/caarlos0/env/v11 v11.4.1` - `github.com/containerd/containerd/v2 v2.3.2` - `github.com/containerd/platforms v1.0.0-rc.4` - `github.com/go-git/go-git/v5 v5.19.1` - `github.com/liamg/tml v0.7.1` - `github.com/moby/buildkit v0.31.1` - `github.com/moby/moby/api v1.55.0` - `github.com/moby/moby/client v0.5.0` - `github.com/opencontainers/go-digest v1.0.0` - `github.com/opencontainers/image-spec v1.1.1` - `github.com/spf13/cobra v1.10.2` - `github.com/stretchr/testify v1.11.1` - `github.com/tonistiigi/fsutil v0.0.0-20260630114638-b1eb15549b43@b1eb15549b43` - `gitlab.com/unboundsoftware/apex-mocks v0.2.0` - `golang.org/x/crypto v0.53.0` - `golang.org/x/exp v0.0.0-20260611194520-c48552f49976@c48552f49976` - `golang.org/x/sync v0.21.0` - `google.golang.org/grpc v1.82.0` - `gopkg.in/yaml.v3 v3.0.1` - `k8s.io/cli-runtime v0.36.2` - `k8s.io/client-go v0.36.2` - `k8s.io/klog/v2 v2.140.0` - `k8s.io/kubectl v0.36.2` - `github.com/Azure/azure-sdk-for-go/sdk/internal v1.12.0` - `github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c@faa5f7b0171c` - `github.com/AzureAD/microsoft-authentication-library-for-go v1.7.2` - `github.com/MakeNowJust/heredoc v1.0.0` → [Updates: `v2.0.1`] - `github.com/Microsoft/go-winio v0.6.3-0.20260107145400-75610162e7da@75610162e7da` - `github.com/ProtonMail/go-crypto v1.4.1` - `github.com/aws/aws-sdk-go-v2/credentials v1.19.26` - `github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.30` - `github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.30` - `github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.30` - `github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.31` - `github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.13` - `github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.30` - `github.com/aws/aws-sdk-go-v2/service/signin v1.2.2` - `github.com/aws/aws-sdk-go-v2/service/sso v1.31.5` - `github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.8` - `github.com/aws/smithy-go v1.27.3` - `github.com/blang/semver/v4 v4.0.0` - `github.com/cespare/xxhash/v2 v2.3.0` - `github.com/chai2010/gettext-go v1.0.3` - `github.com/cloudflare/circl v1.6.4` - `github.com/containerd/console v1.0.5` - `github.com/containerd/containerd/api v1.11.1` - `github.com/containerd/continuity v0.5.0` - `github.com/containerd/errdefs v1.0.0` - `github.com/containerd/errdefs/pkg v0.3.0` - `github.com/containerd/log v0.1.0` - `github.com/containerd/ttrpc v1.2.8` - `github.com/containerd/typeurl/v2 v2.3.0` - `github.com/cyphar/filepath-securejoin v0.7.0` - `github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc` - `github.com/distribution/reference v0.6.0` - `github.com/docker/go-connections v0.7.0` - `github.com/docker/go-units v0.5.0` - `github.com/emicklei/go-restful/v3 v3.13.0` - `github.com/emirpasic/gods v1.18.1` - `github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f@1de76d718b3f` - `github.com/fatih/camelcase v1.0.0` - `github.com/felixge/httpsnoop v1.1.0` - `github.com/fxamacker/cbor/v2 v2.9.2` - `github.com/go-errors/errors v1.5.1` - `github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376@3a3c6141e376` → [Updates: `v2.0.2`] - `github.com/go-git/go-billy/v5 v5.9.0` - `github.com/go-logr/logr v1.4.3` - `github.com/go-logr/stdr v1.2.2` - `github.com/go-openapi/jsonpointer v0.24.0` - `github.com/go-openapi/jsonreference v0.21.6` - `github.com/go-openapi/swag v0.27.0` - `github.com/go-openapi/swag/cmdutils v0.27.0` - `github.com/go-openapi/swag/conv v0.27.0` - `github.com/go-openapi/swag/fileutils v0.27.0` - `github.com/go-openapi/swag/jsonutils v0.27.0` - `github.com/go-openapi/swag/loading v0.27.0` - `github.com/go-openapi/swag/mangling v0.27.0` - `github.com/go-openapi/swag/netutils v0.27.0` - `github.com/go-openapi/swag/stringutils v0.27.0` - `github.com/go-openapi/swag/typeutils v0.27.0` - `github.com/go-openapi/swag/yamlutils v0.27.0` - `github.com/gofrs/flock v0.13.0` - `github.com/golang-jwt/jwt/v5 v5.3.1` - `github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8@2c02b8208cf8` - `github.com/google/btree v1.1.3` - `github.com/google/gnostic-models v0.7.1` - `github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510@e7afc7fbc510` - `github.com/google/uuid v1.6.0` - `github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674@e064f32e3674` - `github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0` - `github.com/in-toto/attestation v1.2.0` - `github.com/in-toto/in-toto-golang v0.11.0` - `github.com/inconshreveable/mousetrap v1.1.0` - `github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99@d14ea06fba99` - `github.com/jonboulle/clockwork v0.5.0` - `github.com/json-iterator/go v1.1.12` - `github.com/kevinburke/ssh_config v1.6.0` - `github.com/klauspost/compress v1.19.0` - `github.com/klauspost/cpuid/v2 v2.4.0` - `github.com/kylelemons/godebug v1.1.0` - `github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de@89fcab3d43de` - `github.com/lithammer/dedent v1.1.0` - `github.com/mitchellh/go-wordwrap v1.0.1` - `github.com/moby/docker-image-spec v1.3.1` - `github.com/moby/locker v1.0.1` - `github.com/moby/patternmatcher v0.6.1` - `github.com/moby/spdystream v0.5.1` - `github.com/moby/sys/signal v0.7.1` - `github.com/moby/term v0.5.2` - `github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd` - `github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee@35a7c28c31ee` - `github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00@205db1a8cc00` - `github.com/morikuni/aec v1.1.0` - `github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822` - `github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f@cca7078d478f` - `github.com/peterbourgon/diskv v2.0.1+incompatible` - `github.com/pjbgf/sha1cd v0.6.0` - `github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c@5ac0b6a4141c` - `github.com/pkg/errors v0.9.1` - `github.com/planetscale/vtprotobuf v0.6.1-0.20260702190614-8ae5a48058df@8ae5a48058df` - `github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2` - `github.com/russross/blackfriday/v2 v2.1.0` - `github.com/secure-systems-lab/go-securesystemslib v0.11.0` - `github.com/sergi/go-diff v1.4.0` - `github.com/shibumi/go-pathspec v1.3.0` - `github.com/sirupsen/logrus v1.9.4` - `github.com/skeema/knownhosts v1.3.2` - `github.com/spf13/pflag v1.0.10` - `github.com/tonistiigi/go-csvvalue v0.0.0-20240814133006-030d3b2625d0@030d3b2625d0` - `github.com/tonistiigi/units v0.0.0-20180711220420-6950e57a87ea@6950e57a87ea` - `github.com/tonistiigi/vt100 v0.0.0-20240514184818-90bafcd6abab@90bafcd6abab` - `github.com/x448/float16 v0.8.4` - `github.com/xanzy/ssh-agent v0.3.3` - `github.com/xlab/treeprint v1.2.0` - `go.opentelemetry.io/auto/sdk v1.2.1` - `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.69.0` - `go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.69.0` - `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0` - `go.opentelemetry.io/otel v1.44.0` - `go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0` - `go.opentelemetry.io/otel/metric v1.44.0` - `go.opentelemetry.io/otel/sdk v1.44.0` - `go.opentelemetry.io/otel/trace v1.44.0` - `go.opentelemetry.io/proto/otlp v1.10.0` - `go.yaml.in/yaml/v2 v2.4.4` → [Updates: `v3.0.4`] - `go.yaml.in/yaml/v3 v3.0.4` - `golang.org/x/net v0.56.0` - `golang.org/x/oauth2 v0.36.0` - `golang.org/x/sys v0.46.0` - `golang.org/x/term v0.44.0` - `golang.org/x/text v0.38.0` - `golang.org/x/time v0.15.0` - `google.golang.org/genproto/googleapis/api v0.0.0-20260630182238-925bb5da69e7@925bb5da69e7` - `google.golang.org/genproto/googleapis/rpc v0.0.0-20260630182238-925bb5da69e7@925bb5da69e7` - `google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af@f2248ac996af` - `gopkg.in/evanphx/json-patch.v4 v4.13.0` → [Updates: `v5.9.11`] - `gopkg.in/inf.v0 v0.9.1` - `gopkg.in/warnings.v0 v0.1.2` - `k8s.io/api v0.36.2` - `k8s.io/apimachinery v0.36.2` - `k8s.io/component-base v0.36.2` - `k8s.io/component-helpers v0.36.2` - `k8s.io/kube-openapi v0.0.0-20260624041617-8f3fa4921821@8f3fa4921821` - `k8s.io/metrics v0.36.2` - `k8s.io/streaming v0.36.2` - `k8s.io/utils v0.0.0-20260626114624-be93311217bd@be93311217bd` - `sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730@2d320260d730` - `sigs.k8s.io/kustomize/api v0.21.1` - `sigs.k8s.io/kustomize/kustomize/v5 v5.8.1` - `sigs.k8s.io/kustomize/kyaml v0.21.1` - `sigs.k8s.io/randfill v1.0.0` - `sigs.k8s.io/structured-merge-diff/v6 v6.4.0` - `sigs.k8s.io/yaml v1.6.0` </details> </blockquote> </details> <details><summary>pre-commit (1)</summary> <blockquote> <details><summary>.pre-commit-config.yaml (4)</summary> - `pre-commit/pre-commit-hooks v6.0.0` - `alessandrojcm/commitlint-pre-commit-hook v9.26.0` - `TekWizely/pre-commit-golang v1.0.0-rc.1` - `golangci/golangci-lint v2.12.2` </details> </blockquote> </details> <details><summary>renovate-config (1)</summary> <blockquote> <details><summary>renovate.json</summary> </details> </blockquote> </details> --- - [ ] <!-- manual job -->Check this box to trigger a request for Renovate to run again on this repository
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
Detected Dependencies
dockerfile (1)
github-actions (12)
gomod (1)
pre-commit (1)
renovate-config (1)