Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update module github.com/hashicorp/terraform-exec to v0.25.2

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update github/codeql-action digest to 68bde55
• chore(deps): update golang:1.25 docker digest to 315d6d3
• chore(deps): update golang:alpine docker digest to 91eda97
• chore(deps): update hashicorp/setup-terraform action to v4.0.1
• fix(deps): update module github.com/caarlos0/env/v11 to v11.4.1
• fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.12.2
• fix(deps): update module github.com/hashicorp/copywrite to v0.25.3
• fix(deps): update module golang.org/x/mod to v0.36.0
• chore(deps): update actions/dependency-review-action action to v5
• fix(deps): update module github.com/arsham/figurine to v2
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update golang docker tag to v1.26

Detected Dependencies

dockerfile (2)

.devcontainer/Dockerfile (2)

• golang 1.25@sha256:5a79b94c34c299ac0361fbb7c7fca6dc552e166b42341050323fa3ab137d7be9 → [Updates: 1.26, 1.25]
• mcr.microsoft.com/vscode/devcontainers/base debian@sha256:e389149057371298eaeb72e736fc2c4dcb79974de222dd471d2e6d675d2f61c4

Dockerfile (2)

• golang alpine@sha256:f85330846cde1e57ca9ec309382da3b8e6ae3ab943d2739500e08c86393a21b1 → [Updates: alpine]
• alpine 3.23.4@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11

github-actions (5)

.github/workflows/build.yaml (13)

• step-security/harden-runner v2.19.2@9ca718d3bf646d6534007c269a635b3e54cadf99
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• goreleaser/goreleaser-action v7.2.1@1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8
• cloudsmith-io/action v0.6.14@7af394e0f8add4867bce109385962dafecad1b8d
• cloudsmith-io/action v0.6.14@7af394e0f8add4867bce109385962dafecad1b8d
• step-security/harden-runner v2.19.2@9ca718d3bf646d6534007c269a635b3e54cadf99
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121
• docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f
• step-security/harden-runner v2.19.2@9ca718d3bf646d6534007c269a635b3e54cadf99
• mislav/bump-homebrew-formula-action v4.1@ccf2332299a883f6af50a1d2d41e5df7904dd769

.github/workflows/codeql.yml (4)

• step-security/harden-runner v2.19.2@9ca718d3bf646d6534007c269a635b3e54cadf99
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• github/codeql-action v4@e46ed2cbd01164d986452f91f178727624ae40d7 → [Updates: v4]
• github/codeql-action v4@e46ed2cbd01164d986452f91f178727624ae40d7 → [Updates: v4]

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.19.2@9ca718d3bf646d6534007c269a635b3e54cadf99
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/dependency-review-action v4.9.0@2031cfc080254a8a887f58cffee85186f0e49e48 → [Updates: v5.0.0]

.github/workflows/scorecard.yml (5)

• step-security/harden-runner v2.19.2@9ca718d3bf646d6534007c269a635b3e54cadf99
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.35.4@68bde559dea0fdcac2102bfdf6230c5f70eb485e

.github/workflows/test.yml (16)

• step-security/harden-runner v2.19.2@9ca718d3bf646d6534007c269a635b3e54cadf99
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hashicorp/setup-terraform v4.0.0@5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85 → [Updates: v4.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• step-security/harden-runner v2.19.2@9ca718d3bf646d6534007c269a635b3e54cadf99
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hashicorp/setup-terraform v4.0.0@5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85 → [Updates: v4.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• step-security/harden-runner v2.19.2@9ca718d3bf646d6534007c269a635b3e54cadf99
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hashicorp/setup-terraform v4.0.0@5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85 → [Updates: v4.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• step-security/harden-runner v2.19.2@9ca718d3bf646d6534007c269a635b3e54cadf99
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hashicorp/setup-terraform v4.0.0@5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85 → [Updates: v4.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c

gomod (1)

go.mod (14)

• go 1.25.8
• github.com/arsham/figurine v1.3.0 → [Updates: v2.0.0]
• github.com/awalterschulze/gographviz v2.0.3+incompatible
• github.com/briandowns/spinner v1.23.2
• github.com/caarlos0/env/v11 v11.4.0 → [Updates: v11.4.1]
• github.com/fatih/color v1.19.0
• github.com/golangci/golangci-lint/v2 v2.12.1 → [Updates: v2.12.2]
• github.com/hashicorp/copywrite v0.24.2 → [Updates: v0.25.3]
• github.com/hashicorp/terraform-exec v0.25.1 → [Updates: v0.25.2]
• github.com/jwalton/go-supportscolor v1.2.0
• github.com/mattn/go-colorable v0.1.14
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• golang.org/x/mod v0.35.0 → [Updates: v0.36.0]

---

• Check this box to trigger a request for Renovate to run again on this repository