Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update all non-major dependencies in .github/workflows/scorecard.yml (actions/upload-artifact, docker/setup-buildx-action, github/codeql-action)

Detected dependencies

dockerfile

Dockerfile

• golang 1.23.4-alpine3.19@sha256:5f3336882ad15d10ac1b59fbaba7cb84c35d4623774198b36ae60edeba45fd84

github-actions

.github/workflows/codeql.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• github/codeql-action v3.27.9@df409f7d9260372bd5f19e5b04e83cb3c43714ae
• github/codeql-action v3.27.9@df409f7d9260372bd5f19e5b04e83cb3c43714ae
• github/codeql-action v3.27.9@df409f7d9260372bd5f19e5b04e83cb3c43714ae

.github/workflows/release.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• docker/setup-qemu-action v3.2.0@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf
• docker/setup-buildx-action v3.7.1@c47758b77c9736f4b2ef4073d4d51994fabfe349
• actions/setup-go v5.2.0@3041bf56c941b39c61721a86cd11f3bb1338122a
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• goreleaser/goreleaser-action v6.1.0@9ed2f89a662bf1735a48bc8557fd212fa902bebf
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• sigstore/cosign-installer v3.7.0@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
• docker/setup-qemu-action v3@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf
• docker/setup-buildx-action v3.7.1@c47758b77c9736f4b2ef4073d4d51994fabfe349
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• docker/bake-action v5.11.0@3fc70e1131fee40a422dd8dd0ff22014ae20a1f3

.github/workflows/scorecard.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• github/codeql-action v3.27.9@df409f7d9260372bd5f19e5b04e83cb3c43714ae

.github/workflows/test.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.2.0@3041bf56c941b39c61721a86cd11f3bb1338122a
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.2.0@3041bf56c941b39c61721a86cd11f3bb1338122a
• golangci/golangci-lint-action v6@971e284b6050e8a5849b72094c50ab08da042db8

gomod

go.mod

• go 1.22.3
• github.com/spf13/cobra v1.8.1
• github.com/stretchr/testify v1.10.0
• gopkg.in/yaml.v3 v3.0.1

---

• Check this box to trigger a request for Renovate to run again on this repository