Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package GitHubSecurityLab/actions-permissions).

Files affected: .github/workflows/pr-test.yaml, .github/workflows/release.yaml, .github/workflows/vulnerability-check.yaml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update Go deps (cloud.google.com/go/containeranalysis, cloud.google.com/go/grafeas, cloud.google.com/go/kms, github.com/golangci/golangci-lint/v2, github.com/goreleaser/goreleaser/v2, github.com/rhysd/actionlint, google.golang.org/api)
• Update module github.com/AsaiYusuke/jsonpath to v2
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (5)

.github/actions/setup-go/action.yaml (1)

• go 1.26.x

.github/workflows/codeql.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/pr-test.yaml (5)

• GitHubSecurityLab/actions-permissions v1.0.2@bf82d13b9b10051d224345ab9184f5ede0a94289
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• zizmorcore/zizmor-action v0.5.2@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8
• GitHubSecurityLab/actions-permissions v1.0.2@bf82d13b9b10051d224345ab9184f5ede0a94289
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/release.yaml (2)

• GitHubSecurityLab/actions-permissions v1.0.2@bf82d13b9b10051d224345ab9184f5ede0a94289
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/vulnerability-check.yaml (2)

• GitHubSecurityLab/actions-permissions v1.0.2@bf82d13b9b10051d224345ab9184f5ede0a94289
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

gomod (1)

go.mod (19)

• cloud.google.com/go/containeranalysis v0.14.2 → [Updates: v0.15.0]
• cloud.google.com/go/grafeas v0.3.17 → [Updates: v0.4.0]
• cloud.google.com/go/kms v1.26.0 → [Updates: v1.27.0]
• github.com/AsaiYusuke/jsonpath v1.6.0 → [Updates: v2.2.0]
• github.com/buildkite/shellwords v1.0.1
• github.com/google/go-containerregistry v0.21.3 → [Updates: v0.21.4]
• github.com/googleapis/gax-go/v2 v2.21.0
• google.golang.org/api v0.273.1 → [Updates: v0.274.0]
• google.golang.org/genproto v0.0.0-20260401024825-9d38bb4040a9@9d38bb4040a9 → [Updates: v0.0.0-20260406210006-6f92a3bedf2d]
• google.golang.org/protobuf v1.36.11
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/api v0.35.3
• k8s.io/apimachinery v0.35.3
• k8s.io/cli-runtime v0.35.3
• k8s.io/client-go v0.35.3
• github.com/golangci/golangci-lint/v2 v2.3.0 → [Updates: v2.11.4]
• github.com/goreleaser/goreleaser/v2 v2.11.2 → [Updates: v2.15.2]
• github.com/rhysd/actionlint v1.7.7 → [Updates: v1.7.12]
• golang.org/x/vuln v1.1.4

renovate-config-presets (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository