Dependency Dashboard

[qubesome-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update monthly github actions updates (actions/checkout, github/codeql-action)
• chore(deps): update monthly github actions updates (major) (actions/checkout, github/codeql-action)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• fix(deps): update module github.com/go-git/go-git/v6 to v6.0.0-20251112161705-8cc3e21f07a9
• chore(deps): update dependency protocolbuffers/protobuf to v33.1
• fix(deps): update module golang.org/x/term to v0.37.0

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package form3tech-oss/go-ci-fuzz).

Files affected: .github/workflows/fuzz.yml

---

Detected dependencies

github-actions

.github/workflows/codeql.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• github/codeql-action v3.29.5@0499de31b99561a6d14a36a5f662c2a54f91beee
• github/codeql-action v3.29.5@0499de31b99561a6d14a36a5f662c2a54f91beee

.github/workflows/fuzz.yml

• actions/checkout v4.2.2@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00
• form3tech-oss/go-ci-fuzz 4663eaaadb263d2621592c62681dac7f7002d582

.github/workflows/release.yml

• actions/checkout v4.2.2@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00
• anchore/sbom-action v0.20.9@8e94d75ddd33f69f691467e42275782e4bfefe84
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad
• goreleaser/goreleaser-action v6.4.0@e435ccd777264be153ace6237001ef4d979d3a7a
• actions/attest-build-provenance v3.0.0@977bb373ede98d70efdf65b84cb5f73e068dcc2a

.github/workflows/scorecard.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v5.0.0@330a01c490aca151604b8cf639adc76d48f6c5d4
• github/codeql-action v3.29.5@0499de31b99561a6d14a36a5f662c2a54f91beee

.github/workflows/test.yml

• actions/checkout v4.2.2@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00

gomod

go.mod

• go 1.24.0
• github.com/cyphar/filepath-securejoin v0.6.0
• github.com/go-git/go-git/v6 v6.0.0-20250628104446-20c25df268c3@20c25df268c3
• github.com/google/uuid v1.6.0
• github.com/stretchr/testify v1.11.1
• github.com/urfave/cli/v3 v3.6.0
• github.com/zalando/go-keyring v0.2.6
• golang.org/x/sys v0.38.0
• golang.org/x/term v0.36.0
• google.golang.org/grpc v1.76.0
• google.golang.org/protobuf v1.36.10
• gopkg.in/yaml.v3 v3.0.1

regex

hack/base.mk

• golangci/golangci-lint v2.6.1
• protocolbuffers/protobuf 33.0

hack/base.mk

• golangci/golangci-lint v2.6.1
• protocolbuffers/protobuf 33.0

renovate-config-presets

.renovaterc.json5