Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): pin stefanprodan/helm-gh-pages action to 89c6698
• chore(deps): update devcontainers/ci digest to 513af61
• chore(deps): update goreleaser/goreleaser-action digest to e435ccd
• fix(deps): update github.com/authzed/grpcutil digest to e237581
• fix(deps): update golang.org/x/exp digest to 764159d
• chore(deps): update module github.com/authzed/zed to v1.14.1
• fix(deps): update module github.com/cockroachdb/cockroach-go/v2 to v2.4.3
• fix(deps): update module github.com/hashicorp/go-retryablehttp to v0.7.8
• fix(deps): update module github.com/spf13/pflag to v1.0.10
• chore(deps): update ghcr.io/navikt/mock-oauth2-server docker tag to v2.3.0
• chore(deps): update jaegertracing/all-in-one docker tag to v1.76.0
• chore(deps): update module github.com/daixiang0/gci to v0.14.0
• chore(deps): update module github.com/golangci/golangci-lint/v2 to v2.12.2
• chore(deps): update module github.com/nats-io/natscli to v0.4.0
• chore(deps): update module golang.org/x/tools to v0.48.0
• fix(deps): update go opentelemetry packages and libraries (github.com/XSAM/otelsql, go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc, go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp, go.opentelemetry.io/otel, go.opentelemetry.io/otel/trace)
• fix(deps): update module github.com/authzed/authzed-go to v1.10.0
• fix(deps): update module github.com/labstack/echo/v4 to v4.15.4
• fix(deps): update module github.com/pressly/goose/v3 to v3.27.3
• fix(deps): update module github.com/spf13/cobra to v1.10.2
• fix(deps): update module github.com/spf13/viper to v1.21.0
• fix(deps): update module github.com/stretchr/testify to v1.11.1
• fix(deps): update module go.uber.org/zap to v1.28.0
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-go action to v7
• chore(deps): update azure/setup-helm action to v5
• chore(deps): update cockroachdb/cockroach docker tag to v26
• chore(deps): update codecov/codecov-action action to v7
• chore(deps): update docker/setup-qemu-action action to v4
• chore(deps): update ghcr.io/navikt/mock-oauth2-server docker tag to v5
• chore(deps): update googleapis/release-please-action action to v5
• chore(deps): update goreleaser/goreleaser-action action to v7
• chore(deps): update mcr.microsoft.com/vscode/devcontainers/go docker tag to v2
• fix(deps): update module github.com/labstack/echo/v4 to v5
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.4 [security]
• fix(deps): update module github.com/jackc/pgx/v5 to v5.9.2 [security]
• fix(deps): update module google.golang.org/grpc to v1.79.3 [security]
• chore(deps): update actions/checkout digest to 11d5960
• chore(deps): update actions/setup-go digest to 40f1582
• chore(deps): update codecov/codecov-action digest to 0fb7174
• chore(deps): update docker/setup-qemu-action digest to c7c5346
• chore(deps): update googleapis/release-please-action digest to 5c625bf
• chore(deps): update authzed/spicedb docker tag to v1.54.0
• chore(deps): update cockroachdb/cockroach docker tag to v24.3.34
• chore(deps): update helm release common to v2.41.0
• chore(deps): update module github.com/nats-io/nsc/v2 to v2.15.0
• fix(deps): update module go.infratographer.com/x to v0.13.2
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (1)

• ghcr.io/devcontainers/features/sshd 1

docker-compose (1)

.devcontainer/docker-compose.yml (6)

• cockroachdb/cockroach v24.1.3 → [Updates: v24.3.34, v26.2.4]
• authzed/spicedb v1.23.1 → [Updates: v1.54.0]
• cockroachdb/cockroach v24.1.3 → [Updates: v24.3.34, v26.2.4]
• authzed/spicedb v1.23.1 → [Updates: v1.54.0]
• jaegertracing/all-in-one 1.68.0 → [Updates: 1.76.0]
• ghcr.io/navikt/mock-oauth2-server 2.1.10 → [Updates: 2.3.0, 5.0.2]

dockerfile (2)

.devcontainer/Dockerfile (1)

• mcr.microsoft.com/vscode/devcontainers/go 1-1.24-bullseye → [Updates: 2-1.24-bullseye]

Dockerfile

github-actions (5)

.github/workflows/image-main-latest.yml (4)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• actions/setup-go v5@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b → [Updates: v7, v5]
• docker/setup-qemu-action v3@29109295f81e9208d7d86ff1c6c12d2833863392 → [Updates: v4, v3]
• goreleaser/goreleaser-action v6@9c156ee8a17a598857849441385a2041ef570552 → [Updates: v7, v6]

.github/workflows/lint-helm.yml (2)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78 → [Updates: v5.0.1]

.github/workflows/release-please.yaml (1)

• googleapis/release-please-action v4@a02a34c4d625f9be7cb89156071d8567266a2445 → [Updates: v5, v4]

.github/workflows/release.yml (6)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• docker/setup-qemu-action v3@29109295f81e9208d7d86ff1c6c12d2833863392 → [Updates: v4, v3]
• actions/setup-go v5@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b → [Updates: v7, v5]
• goreleaser/goreleaser-action v6@9c156ee8a17a598857849441385a2041ef570552 → [Updates: v7, v6]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• stefanprodan/helm-gh-pages master → [Updates: master]

.github/workflows/test.yaml (3)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• devcontainers/ci v0.3@8bf61b26e9c3a98f69cb6ce2f88d24ff59b785c6 → [Updates: v0.3]
• codecov/codecov-action v5@ad3126e916f78f00edff4ed0317cf185271ccc2d → [Updates: v7, v5]

gomod (1)

go.mod (32)

• go 1.24.0
• github.com/XSAM/otelsql v0.38.0 → [Updates: v0.43.0]
• github.com/authzed/authzed-go v1.3.0 → [Updates: v1.10.0]
• github.com/authzed/grpcutil v0.0.0-20250221190651-1985b19b35b8@1985b19b35b8 → [Updates: v0.0.0-20260105210157-e237581949c2]
• github.com/cockroachdb/cockroach-go/v2 v2.4.0 → [Updates: v2.4.3]
• github.com/go-jose/go-jose/v4 v4.1.0 → [Updates: v4.1.4]
• github.com/hashicorp/go-cleanhttp v0.5.2
• github.com/hashicorp/go-retryablehttp v0.7.7 → [Updates: v0.7.8]
• github.com/jackc/pgx/v5 v5.7.4 → [Updates: v5.9.2]
• github.com/labstack/echo/v4 v4.13.3 → [Updates: v4.15.4, v5.3.1]
• github.com/pkg/errors v0.9.1
• github.com/pressly/goose/v3 v3.24.2 → [Updates: v3.27.3]
• github.com/spf13/cobra v1.9.1 → [Updates: v1.10.2]
• github.com/spf13/pflag v1.0.6 → [Updates: v1.0.10]
• github.com/spf13/viper v1.20.1 → [Updates: v1.21.0]
• github.com/stretchr/testify v1.10.0 → [Updates: v1.11.1]
• go.infratographer.com/x v0.9.2 → [Updates: v0.13.2]
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 → [Updates: v0.69.0]
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 → [Updates: v0.69.0]
• go.opentelemetry.io/otel v1.35.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/trace v1.35.0 → [Updates: v1.44.0]
• go.uber.org/multierr v1.11.0
• go.uber.org/zap v1.27.0 → [Updates: v1.28.0]
• golang.org/x/exp v0.0.0-20250408133849-7e4ce0ab07d0@7e4ce0ab07d0 → [Updates: v0.0.0-20260718201538-764159d718ef]
• google.golang.org/grpc v1.71.1 → [Updates: v1.79.3]
• gopkg.in/yaml.v3 v3.0.1
• github.com/authzed/zed v1.14.0 → [Updates: v1.14.1]
• github.com/daixiang0/gci v0.13.6 → [Updates: v0.14.0]
• github.com/golangci/golangci-lint/v2 v2.1.2 → [Updates: v2.12.2]
• github.com/nats-io/natscli v0.2.2 → [Updates: v0.4.0]
• github.com/nats-io/nsc/v2 v2.10.3-0.20250415141057-4d9e789cb5c2@4d9e789cb5c2 → [Updates: v2.15.0]
• golang.org/x/tools v0.32.0 → [Updates: v0.48.0]

helm-values (1)

chart/permissions-api/values.yaml

helmv3 (1)

chart/permissions-api/Chart.yaml (1)

• common 2.27.0 → [Updates: 2.41.0]

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository