Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update all non-major dependencies (github.com/goproxy/goproxy, go, goreleaser, just, lefthook)

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-digest package actions/checkout), Could not determine new digest for update (github-digest package docker/setup-buildx-action), Could not determine new digest for update (github-digest package docker/login-action), Could not determine new digest for update (github-digest package docker/metadata-action), Could not determine new digest for update (github-digest package docker/build-push-action).

Files affected: .github/workflows/publish-docker.yml

---

Detected Dependencies

dockerfile (1)

docker/Dockerfile (1)

• alpine 3.23

github-actions (4)

.github/workflows/ci.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a

.github/workflows/lint-pr.yml (1)

• amannn/action-semantic-pull-request v6@48f256284bd46cdaab1048c3721360e808335d50

.github/workflows/publish-docker.yml (6)

• actions/checkout pin@v6@0c366fd6a839edf440554fa01a7085ccba70ac98
• docker/setup-buildx-action pin@v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action pin@v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1
• docker/metadata-action pin@v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• docker/build-push-action pin@v6.18.0@8c1e8f8e5bf845ba3773a14f3967965548a2341e

.github/workflows/release.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a

gomod (1)

go.mod (22)

• go 1.25.5
• github.com/alecthomas/hcl/v2 v2.6.0
• github.com/alecthomas/kong v1.15.0
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/goproxy/goproxy v0.26.0 → [Updates: v0.26.1]
• github.com/lmittmann/tint v1.1.3
• github.com/minio/minio-go/v7 v7.0.100
• github.com/open-policy-agent/opa v1.15.2
• github.com/prometheus/client_golang v1.23.2
• go.etcd.io/bbolt v1.4.3
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0
• go.opentelemetry.io/otel v1.43.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.43.0
• go.opentelemetry.io/otel/exporters/prometheus v0.65.0
• go.opentelemetry.io/otel/metric v1.43.0
• go.opentelemetry.io/otel/sdk v1.43.0
• go.opentelemetry.io/otel/sdk/metric v1.43.0
• golang.org/x/mod v0.35.0
• golang.org/x/sync v0.20.0
• github.com/alecthomas/assert/v2 v2.11.0
• github.com/alecthomas/chroma/v2 v2.23.1
• github.com/alecthomas/errors v0.9.1

hermit (1)

bin/hermit (11)

• actionlint 1.6.26
• bit 0.4.0
• git-lfs 3.7.1
• go 1.26.1 → [Updates: 1.26.2]
• goreleaser 2.14.3 → [Updates: 2.15.2]
• gosimports 0.3.8
• gotestsum 1.13.0
• just 1.48.1 → [Updates: 1.49.0]
• lefthook 2.1.4 → [Updates: 2.1.5]
• proctor 0.9.3
• svu 3.4.0

---

• Check this box to trigger a request for Renovate to run again on this repository