Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (29)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	amannn/action-semantic-pull-request	2025-08-22
github-actions	tibdex/github-app-token	2023-09-19
gomod	github.com/ProtonMail/go-mime	2023-03-22
gomod	github.com/STARRY-S/zip	2025-04-08
gomod	github.com/aymanbagabas/go-osc52/v2	2023-03-06
gomod	github.com/bodgit/plumbing	2022-11-18
gomod	github.com/bodgit/windows	2022-09-14
gomod	github.com/davecgh/go-spew	2018-02-21
gomod	github.com/dsnet/compress	2019-03-06
gomod	github.com/erikgeiser/coninput	2021-10-04
gomod	github.com/google/btree	2024-08-21
gomod	github.com/gregjones/httpcache	2019-06-11
gomod	github.com/h2non/filetype	2021-11-21
gomod	github.com/hashicorp/golang-lru/v2	2023-09-29
gomod	github.com/klauspost/pgzip	2023-05-04
gomod	github.com/kr/pretty	2022-08-29
gomod	github.com/mattn/go-localereader	2022-06-17
gomod	github.com/mikelolasagasti/xz	2025-06-09
gomod	github.com/muesli/ansi	2023-03-16
gomod	github.com/muesli/cancelreader	2022-06-22
gomod	github.com/muesli/termenv	2025-02-21
gomod	github.com/peterbourgon/diskv	2017-08-14
gomod	github.com/pkg/errors	2020-01-14
gomod	github.com/pmezard/go-difflib	2016-01-10
gomod	github.com/rivo/uniseg	2024-02-08
gomod	github.com/sorairolake/lzip-go	2025-08-22
gomod	gopkg.in/check.v1	2020-11-30
gomod	gopkg.in/yaml.v3	2022-05-27

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/setup-python digest to ece7cb0
• chore(deps): update softprops/action-gh-release digest to 3d0d988
• chore(deps): update module github.com/andybalholm/brotli to v1.2.2
• chore(deps): update module github.com/bodgit/sevenzip to v1.6.5
• chore(deps): update module github.com/charmbracelet/x/ansi to v0.11.8
• chore(deps): update module github.com/cloudflare/circl to v1.6.5
• chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.1
• chore(deps): update module github.com/mattn/go-colorable to v0.1.15
• chore(deps): update module github.com/mattn/go-isatty to v0.0.24
• chore(deps): update module github.com/mattn/go-runewidth to v0.0.28
• chore(deps): update module github.com/pierrec/lz4/v4 to v4.1.29
• chore(deps): update sigstore/cosign-installer action to v4.1.2
• fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.15
• fix(deps): update module github.com/rs/zerolog to v1.35.1
• fix(deps): update module github.com/ulikunitz/xz to v0.5.16
• chore(deps): update dependency go to 1.27.x
• chore(deps): update docker/dockerfile docker tag to v1.26
• chore(deps): update module github.com/nwaples/rardecode/v2 to v2.4.1
• chore(deps): update module github.com/rogpeppe/go-internal to v1.16.0
• fix(deps): update golang (golang, golang.org/x/term, golangci/golangci-lint-action)
• fix(deps): update module github.com/pelletier/go-toml/v2 to v2.4.3
• fix(deps): update module github.com/stretchr/testify to v1.12.1
• fix(deps): update module github.com/urfave/cli/v3 to v3.11.0
• chore(deps): update 1password/load-secrets-action action to v5
• chore(deps): update actions/cache action to v6
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-go action to v7
• chore(deps): update actions/setup-node action to v7
• chore(deps): update actions/setup-python action to v7
• chore(deps): update module github.com/xo/terminfo to v1
• fix(deps): update module github.com/charmbracelet/bubbles to v2
• fix(deps): update module github.com/charmbracelet/bubbletea to v2
• fix(deps): update module github.com/charmbracelet/lipgloss to v2
• fix(deps): update module github.com/google/go-github/v84 to v90
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update cgr.dev/chainguard/wolfi-base:latest docker digest to a31344a

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module github.com/klauspost/compress to v1.18.7 [security]
• chore(deps): update module golang.org/x/crypto to v0.52.0 [security]
• chore(deps): update module golang.org/x/sys to v0.44.0 [security]
• chore(deps): update module golang.org/x/text to v0.39.0 [security]
• chore(deps): update 1password/load-secrets-action digest to eb2efd0
• chore(deps): update actions/cache digest to caa2961
• chore(deps): update actions/checkout digest to d23441a
• chore(deps): update actions/setup-go digest to 924ae3a
• chore(deps): update actions/setup-node digest to 2499707
• chore(deps): update actions/upload-artifact digest to 043fb46
• chore(deps): update goreleaser/goreleaser-action digest to f06c13b
• chore(deps): update module github.com/minio/minlz to v1.2.0
• fix(deps): update module github.com/protonmail/gopenpgp/v2 to v3
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (3)

• docker/dockerfile 1.23-labs@sha256:7eca9451d94f9b8ad22e44988b92d595d3e4d65163794237949a8c3413fbed5d → [Updates: 1.26-labs]
• cgr.dev/chainguard/wolfi-base latest@sha256:52e71f61c6afd1f8d2625cff4465d8ecee156668ca665f7e9c582d1cc914eb6a → [Updates: latest]
• golang 1.24.0@sha256:4546829ecda4404596cf5c9d8936488283910a3564ffc8fe4f32b33ddaeff239 → [Updates: 1.26.6, 1.24.0]

github-actions (8)

.github/workflows/commit-lint.yaml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• wagoid/commitlint-github-action v6@b948419dd99f3fd78a6548d48f94e3df7f6bf3ed

.github/workflows/docs.yml (7)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/configure-pages v6@45bfe0192ca1faeb007ade9deae92b16b8254a0d
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v7, v6]
• actions/cache v5@668228422ae6a00e4ad889ee87cd7109ec5666a7 → [Updates: v6, v5]
• actions/upload-pages-artifact v5@fc324d3547104276b827a68afc52ff2a11cc49c9
• actions/deploy-pages v5@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128
• python 3.x

.github/workflows/golangci-lint.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v7, v6]
• golangci/golangci-lint-action v9@1e7e51e771db61008b38414a730f564565cf7c20 → [Updates: v9]
• go 1.26.x → [Updates: 1.27.x]

.github/workflows/goreleaser.yml (9)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v7, v6]
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]
• 1password/load-secrets-action v4@92467eb28f72e8255933372f1e0707c567ce2259 → [Updates: v5, v4]
• goreleaser/goreleaser-action v7@ec59f474b9834571250b370d4735c50f8e2d1e29 → [Updates: v7]
• actions/upload-artifact v7@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7]
• go 1.26.x → [Updates: 1.27.x]

.github/workflows/installers.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• tibdex/github-app-token v2@3beb63f4bd073e61482598c45c71c1019b59b73a
• softprops/action-gh-release v3@b4309332981a82ec1c5618f44dd2e27cc8bfbfda → [Updates: v3]

.github/workflows/semantic-lint.yml (1)

• amannn/action-semantic-pull-request v6@48f256284bd46cdaab1048c3721360e808335d50

.github/workflows/semantic.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-node v6@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v7, v6]
• tibdex/github-app-token v2@3beb63f4bd073e61482598c45c71c1019b59b73a
• cycjimmy/semantic-release-action v6.0.0@b12c8f6015dc215fe37bc154d4ad456dd3833c90

.github/workflows/tests.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v7, v6]
• go 1.26.x → [Updates: 1.27.x]

gomod (1)

go.mod (66)

• go 1.26.1
• github.com/ProtonMail/gopenpgp/v2 v2.10.0 → [Updates: v3.4.1]
• github.com/charmbracelet/bubbles v1.0.0 → [Updates: v2.2.0]
• github.com/charmbracelet/bubbletea v1.3.10 → [Updates: v2.0.9]
• github.com/charmbracelet/lipgloss v1.1.0 → [Updates: v2.0.6]
• github.com/dsnet/compress v0.0.2-0.20230904184137-39efe44ab707@39efe44ab707
• github.com/gabriel-vasile/mimetype v1.4.13 → [Updates: v1.4.15]
• github.com/google/go-github/v84 v84.0.0 → [Updates: v90.0.0]
• github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79@901d90724c79
• github.com/h2non/filetype v1.1.3
• github.com/mholt/archives v0.1.5
• github.com/pelletier/go-toml/v2 v2.3.0 → [Updates: v2.4.3]
• github.com/peterbourgon/diskv v2.0.1+incompatible
• github.com/rs/zerolog v1.35.0 → [Updates: v1.35.1]
• github.com/stretchr/testify v1.11.1 → [Updates: v1.12.1]
• github.com/ulikunitz/xz v0.5.15 → [Updates: v0.5.16]
• github.com/urfave/cli/v3 v3.8.0 → [Updates: v3.11.0]
• golang.org/x/term v0.41.0 → [Updates: v0.45.0]
• gopkg.in/yaml.v3 v3.0.1
• github.com/ProtonMail/go-crypto v1.4.1
• github.com/ProtonMail/go-mime v0.0.0-20230322103455-7d82a3887f2f@7d82a3887f2f
• github.com/STARRY-S/zip v0.2.3
• github.com/andybalholm/brotli v1.2.1 → [Updates: v1.2.2]
• github.com/aymanbagabas/go-osc52/v2 v2.0.1
• github.com/bodgit/plumbing v1.3.0
• github.com/bodgit/sevenzip v1.6.1 → [Updates: v1.6.5]
• github.com/bodgit/windows v1.0.1
• github.com/charmbracelet/colorprofile v0.4.3
• github.com/charmbracelet/x/ansi v0.11.7 → [Updates: v0.11.8]
• github.com/charmbracelet/x/cellbuf v0.0.15
• github.com/charmbracelet/x/term v0.2.2
• github.com/clipperhouse/displaywidth v0.11.0
• github.com/clipperhouse/uax29/v2 v2.7.0
• github.com/cloudflare/circl v1.6.3 → [Updates: v1.6.5]
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f@1c3628e74d0f
• github.com/google/btree v1.1.3
• github.com/google/go-querystring v1.2.0
• github.com/hashicorp/golang-lru/v2 v2.0.7
• github.com/klauspost/compress v1.18.5 → [Updates: v1.18.7]
• github.com/klauspost/pgzip v1.2.6
• github.com/kr/pretty v0.3.1
• github.com/lucasb-eyer/go-colorful v1.4.0 → [Updates: v1.4.1]
• github.com/mattn/go-colorable v0.1.14 → [Updates: v0.1.15]
• github.com/mattn/go-isatty v0.0.22 → [Updates: v0.0.24]
• github.com/mattn/go-localereader v0.0.1
• github.com/mattn/go-runewidth v0.0.23 → [Updates: v0.0.28]
• github.com/mikelolasagasti/xz v1.0.1
• github.com/minio/minlz v1.1.0 → [Updates: v1.2.0]
• github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6@276c6243b2f6
• github.com/muesli/cancelreader v0.2.2
• github.com/muesli/termenv v0.16.0
• github.com/nwaples/rardecode/v2 v2.2.2 → [Updates: v2.4.1]
• github.com/pierrec/lz4/v4 v4.1.26 → [Updates: v4.1.29]
• github.com/pkg/errors v0.9.1
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/rivo/uniseg v0.4.7
• github.com/rogpeppe/go-internal v1.14.1 → [Updates: v1.16.0]
• github.com/sorairolake/lzip-go v0.3.8
• github.com/spf13/afero v1.15.0
• github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e@abceb7e1c41e → [Updates: v1.0.0]
• go4.org v0.0.0-20260112195520-a5071408f32f@a5071408f32f
• golang.org/x/crypto v0.49.0 → [Updates: v0.52.0]
• golang.org/x/sys v0.42.0 → [Updates: v0.44.0]
• golang.org/x/text v0.35.0 → [Updates: v0.39.0]
• gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c@10cb98267c6c

regex (2)

.github/workflows/goreleaser.yml (1)

• golang 1.26 → [Updates: 1.27, 1.26]

.github/workflows/tests.yml (1)

• golang 1.26 → [Updates: 1.27, 1.26]

---

• Check this box to trigger a request for Renovate to run again on this repository