Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (3)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/google/go-cmp	2025-01-14
gomod	github.com/opencontainers/go-digest	2020-05-14
gomod	github.com/opencontainers/image-spec	2025-02-24

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update github.com/tailscale/hujson digest to 78b5b16
• chore(deps): update actions/checkout action to v7.0.1
• chore(deps): update dependency anthropics/claude-code to v2.1.218
• chore(deps): update github/codeql-action action to v4.37.3
• chore(deps): update actions/attest action to v4.2.0
• chore(deps): update dependency golang/vscode-go to v0.56.0
• chore(deps): update docker/login-action action to v4.5.0
• chore(deps): update actions/setup-go action to v7

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (1)

• ghcr.io/bare-devcontainer/golang 1.26-trixie@sha256:25e84aed110160928c06e0d66de2ae56d97f8ab3ddc0296bdab5c2d9e8ee970c

dockerfile (1)

Dockerfile (2)

• docker/dockerfile 1@sha256:87999aa3d42bdc6bea60565083ee17e86d1f3339802f543c0d03998580f9cb89
• golang 1.26.5-trixie@sha256:4ee9ffa999b4583ce281939cdff828763083610292f252279a0cee77473bd9a7

github-actions (4)

.github/workflows/attest-check.yml (1)

• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6

.github/workflows/ci.yml (10)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• docker/setup-qemu-action v4.2.0@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a

.github/workflows/codeql.yml (4)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• github/codeql-action v4.37.0@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 → [Updates: v4.37.3]
• github/codeql-action v4.37.0@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 → [Updates: v4.37.3]

.github/workflows/release.yml (20)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/attest v4.1.1@a1948c3f048ba23858d222213b7c278aabede763 → [Updates: v4.2.0]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• docker/setup-qemu-action v4.2.0@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/login-action v4.4.0@af1e73f918a031802d376d3c8bbc3fe56130a9b0 → [Updates: v4.5.0]
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/attest v4.1.1@a1948c3f048ba23858d222213b7c278aabede763 → [Updates: v4.2.0]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

gomod (1)

go.mod (9)

• go 1.26.5
• github.com/compose-spec/compose-go/v2 v2.13.0
• github.com/google/go-cmp v0.7.0
• github.com/moby/buildkit v0.31.2
• github.com/olareg/olareg v0.2.2
• github.com/opencontainers/go-digest v1.0.0
• github.com/opencontainers/image-spec v1.1.1
• github.com/tailscale/hujson v0.0.0-20260302212456-ecc657c15afd@ecc657c15afd → [Updates: v0.0.0-20260722022634-78b5b162ee49]
• oras.land/oras-go/v2 v2.6.2

regex (2)

.devcontainer/devcontainer.json (3)

• anthropics/claude-code 2.1.206 → [Updates: 2.1.218]
• editorconfig/editorconfig-vscode 0.18.2
• golang/vscode-go 0.54.0 → [Updates: 0.56.0]

Makefile (1)

• golangci/golangci-lint v2.12.2

---

• Check this box to trigger a request for Renovate to run again on this repository