Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed (Blocked)

The Config Migration branch exists but has been modified by another user. Renovate will not push to this branch unless it is first deleted.

See Config Migration PR: #133.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (3)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	creyD/prettier_action	2025-06-09
gomod	github.com/coreos/go-semver	2023-01-16
poetry	mkdocs-git-committers-plugin-2	2025-01-30

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): pin dependency poetry-core to ==2.4.1
• fix(deps): update github.com/shurcool/githubv4 digest to 2402fdf
• chore(deps): update actions/create-github-app-token action to v2.2.2
• fix(deps): update dependency mkdocs-git-revision-date-localized-plugin to v1.5.4
• fix(deps): update dependency mkdocs-material to v9.7.7
• fix(deps): update python to v3.14.7
• chore(deps): update docker/build-push-action action to v6.19.2
• chore(deps): update docker/login-action action to v3.7.0
• fix(deps): update dependency mike to v2.2.0
• fix(deps): update module go.uber.org/zap to v1.28.0
• chore(deps): update actions/cache action to v6
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/create-github-app-token action to v3
• chore(deps): update actions/setup-go action to v7
• chore(deps): update actions/setup-python action to v7
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update docker/setup-qemu-action action to v4
• chore(deps): update goreleaser/goreleaser-action action to v7
• chore(deps): update release-drafter/release-drafter action to v7
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package github.com/google/go-containerregistry: no-result, Failed to look up go package golang.org/x/oauth2: no-result.

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update gcr.io/distroless/static:nonroot docker digest to 1c2c046
• chore(deps): update actions/cache action to v5.1.0
• chore(deps): update actions/checkout action to v6.1.0
• chore(deps): update actions/setup-go action to v6.5.0
• chore(deps): update actions/setup-python action to v6.3.0
• chore(deps): update dependency goreleaser to v2.18.0
• chore(deps): update dependency poetry to v2.4.2
• chore(deps): update go toolchain directive to v1.27.0
• chore(deps): update golang docker tag to v1.27.0
• chore(deps): update release-drafter/release-drafter action to v6.4.0
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• golang 1.25.5-alpine@sha256:ac09a5f469f307e5da71e766b0bd59c9c49ea460a528cc3e6686513d64a6f1fb → [Updates: 1.27.0-alpine]
• gcr.io/distroless/static nonroot@sha256:2b7c93f6d6648c11f0e80a48558c8f77885eb0445213b8e69a6a0d7c89fc6ae4 → [Updates: nonroot]

github-actions (5)

.github/workflows/build.yaml (10)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c → [Updates: v6.5.0, v7.0.0]
• goreleaser/goreleaser-action v6.4.0@e435ccd777264be153ace6237001ef4d979d3a7a → [Updates: v7.2.3]
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.1.0, v7.0.1]
• docker/setup-qemu-action v3.7.0@c7c53464625b32c7a7e944ae62b3e17d2b600130 → [Updates: v4.2.0]
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.3.0]
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v6.19.2, v7.3.0]
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v6.19.2, v7.3.0]
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/check_pr_labels.yaml (1)

• ubuntu 24.04

.github/workflows/ci.yaml (16)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.1.0, v7.0.1]
• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf → [Updates: v2.2.2, v3.2.0]
• release-drafter/release-drafter v6.1.0@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5 → [Updates: v6.4.0, v7.7.0]
• docker/setup-qemu-action v3.7.0@c7c53464625b32c7a7e944ae62b3e17d2b600130 → [Updates: v4.2.0]
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.3.0]
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef → [Updates: v3.7.0, v4.6.0]
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v6.19.2, v7.3.0]
• release-drafter/release-drafter v6.1.0@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5 → [Updates: v6.4.0, v7.7.0]
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c → [Updates: v6.5.0, v7.0.0]
• goreleaser/goreleaser-action v6.4.0@e435ccd777264be153ace6237001ef4d979d3a7a → [Updates: v7.2.3]
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.1.0, v7.0.1]
• actions/setup-python v6.1.0@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 → [Updates: v6.3.0, v7.0.0]
• actions/cache v5.0.1@9255dc7a253b0ccc959486e2bca901246202afeb → [Updates: v5.1.0, v6.1.0]
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/labeler.yaml (2)

• release-drafter/release-drafter v6.1.0@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5 → [Updates: v6.4.0, v7.7.0]
• ubuntu 24.04

.github/workflows/prettier.yaml (4)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.1.0, v7.0.1]
• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf → [Updates: v2.2.2, v3.2.0]
• creyD/prettier_action v4.6@8c18391fdc98ed0d884c6345f03975edac71b8f0
• ubuntu 24.04

gomod (1)

go.mod (8)

• go 1.24.0
• go 1.25.5 → [Updates: 1.27.0]
• github.com/coreos/go-semver v0.3.1
• github.com/google/go-containerregistry v0.20.7
• github.com/shurcooL/githubv4 v0.0.0-20240727222349-48295856cce7@48295856cce7 → [Updates: v0.0.0-20260209031235-2402fdf4a9ed]
• github.com/spf13/cobra v1.10.2
• go.uber.org/zap v1.27.1 → [Updates: v1.28.0]
• golang.org/x/oauth2 v0.34.0

poetry (1)

pyproject.toml (7)

• poetry-core >=2.0 → [Updates: ==2.4.1]
• python 3.14.2 → [Updates: 3.14.7]
• mkdocs ==1.6.1
• mkdocs-material ==9.7.1 → [Updates: ==9.7.7]
• mike ==2.1.3 → [Updates: ==2.2.0]
• mkdocs-git-revision-date-localized-plugin ==1.5.0 → [Updates: ==1.5.4]
• mkdocs-git-committers-plugin-2 ==2.5.0

regex (2)

.github/workflows/build.yaml (1)

• goreleaser v2.13.2 → [Updates: v2.18.0]

.github/workflows/ci.yaml (2)

• goreleaser v2.13.2 → [Updates: v2.18.0]
• poetry 2.2.1 → [Updates: 2.4.2]

---

• Check this box to trigger a request for Renovate to run again on this repository