Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (3)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/google/go-dap	2024-02-26
gomod	github.com/peterh/liner	2022-01-14
gomod	gopkg.in/yaml.v2	2022-05-27

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update module github.com/xo/terminfo to v1

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(security/unknown/): update module golang.org/x/crypto to v0.55.0 [security]
• chore(deps): pin actions/setup-go action to 924ae3a
• chore(deps): update actions/checkout digest to d23441a
• chore(deps): update goreleaser/goreleaser-action action to v7.2.3
• chore(deps): update module github.com/mattn/go-runewidth to v0.0.28
• chore(deps): update module golang.org/x/sys to v0.47.0
• chore(deps): update module gopkg.in/yaml.v2 to v2.4.0
• chore(deps): update module sigs.k8s.io/yaml to v1.6.0
• fix(deps): update module github.com/lmittmann/tint to v1.2.0
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-go action to v7
• chore(deps): update module gopkg.in/yaml.v2 to v3
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update module github.com/google/go-jsonnet to v0.22.0

Vulnerabilities

Important

1/2 CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/crypto

• GO-2026-5932
• GO-2026-6303 (fixed in >= 0.55.0)

Detected Dependencies

github-actions (2)

.github/workflows/ci.yml (3)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• actions/setup-go v6 → [Updates: v7, v6]
• go 1.26

.github/workflows/release.yml (4)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• actions/setup-go v6 → [Updates: v7, v6]
• goreleaser/goreleaser-action v7.2.2@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 → [Updates: v7.2.3]
• go 1.26

gomod (1)

go.mod (12)

• go 1.25.6
• github.com/google/go-dap v0.12.0
• github.com/google/go-jsonnet v0.20.1-0.20240611134004-2b4d7535f540@2b4d7535f540 → [Updates: v0.22.0]
• github.com/gookit/color v1.6.1
• github.com/lmittmann/tint v1.1.3 → [Updates: v1.2.0]
• github.com/peterh/liner v1.2.2
• github.com/mattn/go-runewidth v0.0.3 → [Updates: v0.0.28]
• github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e@abceb7e1c41e → [Updates: v1.0.0]
• golang.org/x/crypto v0.52.0 → [Updates: v0.55.0]
• golang.org/x/sys v0.45.0 → [Updates: v0.47.0]
• gopkg.in/yaml.v2 v2.2.8 → [Updates: v2.4.0, v3.0.1]
• sigs.k8s.io/yaml v1.1.0 → [Updates: v1.6.0]

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.