Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update module github.com/jackc/pgx/v5 to v5.9.2
• fix(deps): update module github.com/zsais/go-gin-prometheus to v1.0.3
• chore(deps): update softprops/action-gh-release action to v2.6.2
• fix(deps): update module github.com/coreos/go-oidc/v3 to v3.18.0
• fix(deps): update module github.com/gin-gonic/gin to v1.12.0
• fix(deps): update module github.com/lib/pq to v1.12.3
• fix(deps): update module github.com/nats-io/nats.go to v1.51.0
• fix(deps): update module golang.org/x/oauth2 to v0.36.0
• fix(deps): update module golang.org/x/text to v0.36.0
• fix(deps): update module google.golang.org/grpc to v1.80.0
• chore(deps): update actions/deploy-pages action to v5
• chore(deps): update actions/upload-pages-artifact action to v5
• chore(deps): update docker/login-action action to v4
• chore(deps): update mcr.microsoft.com/vscode/devcontainers/go docker tag to v2
• chore(deps): update oryd/hydra docker tag to v26
• chore(deps): update softprops/action-gh-release action to v3
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update module github.com/gin-contrib/cors to v1.7.7
• fix(deps): update module github.com/gin-contrib/zap to v1.1.7
• fix(deps): update module github.com/goccy/go-json to v0.10.6
• chore(deps): update anchore/sbom-action action to v0.24.0
• chore(deps): update golang docker tag to v1.26.2
• fix(deps): update go opentelemetry packages and libraries (github.com/XSAM/otelsql, go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin, go.opentelemetry.io/otel/exporters/otlp/otlptrace, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc)
• fix(deps): update module github.com/pressly/goose/v3 to v3.27.0
• chore(deps): update actions/upload-artifact action to v7
• chore(deps): update goreleaser/goreleaser-action action to v7
• fix(deps): update module github.com/aarondl/null/v8 to v9
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

.devcontainer/docker-compose.yml (6)

• postgres 18
• postgres 18
• oryd/hydra v1.11.10 → [Updates: v26.2.0]
• oryd/hydra v1.11.10 → [Updates: v26.2.0]
• jaegertracing/all-in-one 1.60
• ghcr.io/metal-toolbox/audittail v0.9.0

dockerfile (3)

.devcontainer/Dockerfile.dev (1)

• mcr.microsoft.com/vscode/devcontainers/go 1.24-bullseye → [Updates: 2.0-bullseye]

Dockerfile

Dockerfile.dev (1)

• golang 1.25.7 → [Updates: 1.26.2]

github-actions (3)

.github/workflows/main.yaml (9)

• metal-toolbox/ci-toolbox v0.0.2
• metal-toolbox/ci-toolbox v0.0.2
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• metal-toolbox/ci-toolbox v0.0.2
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.1]
• metal-toolbox/ci-toolbox v0.0.2
• metal-toolbox/ci-toolbox v0.0.2
• golang 1.25.7 → [Updates: 1.26.2]
• postgres 18

.github/workflows/openapi.yaml (6)

• actions/checkout v6
• actions/setup-node v6
• actions/upload-pages-artifact v4 → [Updates: v5]
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b → [Updates: v2.6.2, v3.0.0]
• actions/deploy-pages v4 → [Updates: v5]
• node 24

.github/workflows/release.yml (6)

• docker/login-action v3 → [Updates: v4]
• actions/checkout v6
• actions/setup-go v6
• sigstore/cosign-installer main
• anchore/sbom-action v0.22.2 → [Updates: v0.24.0]
• goreleaser/goreleaser-action v6 → [Updates: v7]

gomod (1)

go.mod (45)

• go 1.25.7
• dario.cat/mergo v1.0.2
• github.com/XSAM/otelsql v0.41.0 → [Updates: v0.42.0]
• github.com/aarondl/null/v8 v8.1.3 → [Updates: v9.0.1]
• github.com/aarondl/sqlboiler/v4 v4.19.7
• github.com/aarondl/strmangle v0.0.9
• github.com/cockroachdb/cockroach-go/v2 v2.4.3
• github.com/coreos/go-oidc/v3 v3.17.0 → [Updates: v3.18.0]
• github.com/friendsofgo/errors v0.9.2
• github.com/gin-contrib/cors v1.7.6 → [Updates: v1.7.7]
• github.com/gin-contrib/zap v1.1.6 → [Updates: v1.1.7]
• github.com/gin-gonic/gin v1.11.0 → [Updates: v1.12.0]
• github.com/go-jose/go-jose/v4 v4.1.4
• github.com/goccy/go-json v0.10.5 → [Updates: v0.10.6]
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/google/uuid v1.6.0
• github.com/gosimple/slug v1.15.0
• github.com/jackc/pgx/v5 v5.9.0 → [Updates: v5.9.2]
• github.com/jmoiron/sqlx v1.4.0
• github.com/lib/pq v1.11.2 → [Updates: v1.12.3]
• github.com/metal-toolbox/auditevent v0.9.0
• github.com/metal-toolbox/iam-runtime v0.4.1
• github.com/metal-toolbox/iam-runtime-contrib v1.0.1
• github.com/mitchellh/go-homedir v1.1.0
• github.com/nats-io/nats.go v1.48.0 → [Updates: v1.51.0]
• github.com/peterldowns/pgtestdb v0.1.1
• github.com/pressly/goose/v3 v3.26.0 → [Updates: v3.27.0]
• github.com/santhosh-tekuri/jsonschema/v6 v6.0.2
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/spf13/viper v1.21.0
• github.com/stretchr/testify v1.11.1
• github.com/zsais/go-gin-prometheus v1.0.2 → [Updates: v1.0.3]
• go.hollow.sh/toolbox v0.6.3
• go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin v0.65.0 → [Updates: v0.68.0]
• go.opentelemetry.io/otel v1.43.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0 → [Updates: v1.43.0]
• go.opentelemetry.io/otel/sdk v1.43.0
• go.uber.org/zap v1.27.1
• golang.org/x/oauth2 v0.35.0 → [Updates: v0.36.0]
• google.golang.org/grpc v1.79.3 → [Updates: v1.80.0]
• github.com/prometheus/client_golang v1.23.2
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.40.0 → [Updates: v1.43.0]
• go.opentelemetry.io/otel/trace v1.43.0
• golang.org/x/text v0.34.0 → [Updates: v0.36.0]

---

• Check this box to trigger a request for Renovate to run again on this repository