Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update module github.com/expr-lang/expr to v1.17.7 [security]
• fix(deps): update module golang.org/x/crypto to v0.45.0 [security]
• fix(deps): update all non-major dependencies (actions/checkout, actions/github-script, actions/setup-go, alpine, codecov/codecov-action, docker/login-action, docker/metadata-action, github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/service/sts, github.com/gin-gonic/gin, github.com/hashicorp/vault/api, github.com/lestrrat-go/jwx/v3, github.com/prometheus/client_golang, github.com/redis/go-redis/v9, github.com/spf13/afero, github.com/urfave/cli/v3, github/codeql-action, go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin, go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace, go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp, go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/otlp/otlptrace, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/trace, go.starlark.net, golang.org/x/oauth2, golang.org/x/sync, golang.org/x/time, gorm.io/gorm, k8s.io/apimachinery)
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/github-script action to v8
• chore(deps): update actions/setup-go action to v6
• chore(deps): update github/codeql-action action to v4
• fix(deps): update module github.com/google/go-github/v74 to v80
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (2)

Dockerfile (1)

• alpine 3.22.1@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1 → [Updates: 3.23.2]

Dockerfile-alpine (1)

• alpine 3.22.1@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1 → [Updates: 3.23.2]

github-actions (11)

.github/workflows/build.yml (2)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.1]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.1.0]

.github/workflows/codeql-analysis.yml (5)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.1]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.1.0]
• github/codeql-action v3.29.11@3c3833e0f8c1c83d449a7478aa59c036a9165498 → [Updates: v3.31.9, v4.31.9]
• github/codeql-action v3.29.11@3c3833e0f8c1c83d449a7478aa59c036a9165498 → [Updates: v3.31.9, v4.31.9]
• github/codeql-action v3.29.11@3c3833e0f8c1c83d449a7478aa59c036a9165498 → [Updates: v3.31.9, v4.31.9]

.github/workflows/integration-test.yml (4)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.1]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.1.0]
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.1]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.1.0]

.github/workflows/jsonschema.yml (3)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.1]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.1.0]
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea → [Updates: v7.1.0, v8.0.0]

.github/workflows/prerelease.yml (10)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.1]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.1.0]
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1 → [Updates: v3.6.0]
• docker/metadata-action v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f → [Updates: v5.10.0]
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.1]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.1.0]
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1 → [Updates: v3.6.0]
• docker/metadata-action v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f → [Updates: v5.10.0]
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83

.github/workflows/publish.yml (10)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.1]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.1.0]
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1 → [Updates: v3.6.0]
• docker/metadata-action v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f → [Updates: v5.10.0]
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.1]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.1.0]
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1 → [Updates: v3.6.0]
• docker/metadata-action v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f → [Updates: v5.10.0]
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83

.github/workflows/reviewdog.yml (6)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.1]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.1.0]
• reviewdog/action-golangci-lint v2.8.0@f9bba13753278f6a73b27a56a3ffb1bfda90ed71
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.1]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.1.0]
• reviewdog/action-golangci-lint v2.8.0@f9bba13753278f6a73b27a56a3ffb1bfda90ed71

.github/workflows/spec.yml (3)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.1]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.1.0]
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea → [Updates: v7.1.0, v8.0.0]

.github/workflows/test.yml (3)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.1]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.1.0]
• codecov/codecov-action v5.5.0@fdcc8476540edceab3de004e990f80d881c6cc00 → [Updates: v5.5.2]

.github/workflows/validate-pr-title.yml

.github/workflows/validate.yml (2)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.1]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.1.0]

gomod (1)

go.mod (54)

• go 1.24.4
• github.com/Bose/minisentinel v0.0.0-20200130220412-917c5a9223bb@917c5a9223bb
• github.com/DATA-DOG/go-sqlmock v1.5.2
• github.com/Masterminds/semver/v3 v3.4.0
• github.com/Masterminds/sprig/v3 v3.3.0
• github.com/adhocore/gronx v1.19.6
• github.com/alicebob/miniredis/v2 v2.35.0
• github.com/aws/aws-sdk-go-v2 v1.39.6 → [Updates: v1.41.0]
• github.com/aws/aws-sdk-go-v2/config v1.31.17 → [Updates: v1.32.6]
• github.com/aws/aws-sdk-go-v2/service/sts v1.39.1 → [Updates: v1.41.5]
• github.com/distribution/reference v0.6.0
• github.com/drone/envsubst v1.0.3
• github.com/expr-lang/expr v1.17.6 → [Updates: v1.17.7]
• github.com/ghodss/yaml v1.0.0
• github.com/gin-gonic/gin v1.10.1 → [Updates: v1.11.0]
• github.com/go-playground/assert/v2 v2.2.0
• github.com/golang-jwt/jwt/v5 v5.3.0
• github.com/google/go-cmp v0.7.0
• github.com/google/go-github/v74 v74.0.0 → [Updates: v80.0.0]
• github.com/google/uuid v1.6.0
• github.com/goware/urlx v0.3.2
• github.com/hashicorp/go-cleanhttp v0.5.2
• github.com/hashicorp/go-multierror v1.1.1
• github.com/hashicorp/go-retryablehttp v0.7.8
• github.com/hashicorp/vault/api v1.20.0 → [Updates: v1.22.0]
• github.com/invopop/jsonschema v0.13.0
• github.com/joho/godotenv v1.5.1
• github.com/lestrrat-go/jwx/v3 v3.0.10 → [Updates: v3.0.12]
• github.com/lib/pq v1.10.9
• github.com/microcosm-cc/bluemonday v1.0.27
• github.com/prometheus/client_golang v1.23.0 → [Updates: v1.23.2]
• github.com/redis/go-redis/v9 v9.12.1 → [Updates: v9.17.2]
• github.com/sirupsen/logrus v1.9.3
• github.com/spf13/afero v1.14.0 → [Updates: v1.15.0]
• github.com/uptrace/opentelemetry-go-extra/otelgorm v0.3.2
• github.com/urfave/cli/v3 v3.4.1 → [Updates: v3.6.1]
• go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin v0.62.0 → [Updates: v0.64.0]
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.62.0 → [Updates: v0.64.0]
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.62.0 → [Updates: v0.64.0]
• go.opentelemetry.io/otel v1.37.0 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.37.0 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.37.0 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/sdk v1.37.0 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/trace v1.37.0 → [Updates: v1.39.0]
• go.starlark.net v0.0.0-20250826212936-2a4f36945129@2a4f36945129 → [Updates: v0.0.0-20260102030733-3fee463870c9]
• go.yaml.in/yaml/v3 v3.0.4
• golang.org/x/crypto v0.41.0 → [Updates: v0.45.0]
• golang.org/x/oauth2 v0.30.0 → [Updates: v0.34.0]
• golang.org/x/sync v0.16.0 → [Updates: v0.19.0]
• golang.org/x/time v0.12.0 → [Updates: v0.14.0]
• gorm.io/driver/postgres v1.6.0
• gorm.io/driver/sqlite v1.6.0
• gorm.io/gorm v1.30.2 → [Updates: v1.31.1]
• k8s.io/apimachinery v0.34.0 → [Updates: v0.35.0]

regex (1)

cmd/vela-server/flags.go (1)

• target/vela-git-slim v0.13.0@sha256:395bb1df81970117f4547c32f80632950f91e1bad38bc6a8e5015fbe3b1fae24

renovate-config-presets (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository