Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Repology lookup failed with unexpected error

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (37)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	amannn/action-semantic-pull-request	2025-08-22
github-actions	google/clusterfuzzlite	2023-08-09
gomod	github.com/Masterminds/sprig/v3	2024-08-29
gomod	github.com/agext/levenshtein	2020-03-12
gomod	github.com/briandowns/spinner	2025-01-20
gomod	github.com/cactus/go-statsd-client/v5	2025-09-07
gomod	github.com/cactus/go-statsd-client/v6	2025-09-07
gomod	github.com/drmaxgit/go-azuredevops	2025-06-09
gomod	github.com/go-ozzo/ozzo-validation	2019-08-07
gomod	github.com/go-test/deep	2024-06-23
gomod	github.com/gofri/go-github-ratelimit/v2	2025-03-12
gomod	github.com/google/shlex	2019-12-02
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/gorilla/mux	2023-11-05
gomod	github.com/gorilla/websocket	2024-06-14
gomod	github.com/hashicorp/go-getter/v2	2024-07-24
gomod	github.com/hashicorp/go-multierror	2021-03-11
gomod	github.com/hashicorp/golang-lru/v2	2023-09-29
gomod	github.com/hashicorp/hcl/v2	2025-07-07
gomod	github.com/jpillora/backoff	2019-10-03
gomod	github.com/kr/pretty	2022-08-29
gomod	github.com/microcosm-cc/bluemonday	2024-07-04
gomod	github.com/mitchellh/colorstring	2019-02-13
gomod	github.com/mitchellh/go-homedir	2019-01-27
gomod	github.com/mohae/deepcopy	2017-09-29
gomod	github.com/opentofu/tofudl	2025-05-15
gomod	github.com/pkg/errors	2020-01-14
gomod	github.com/remeh/sizedwaitgroup	2019-11-17
gomod	github.com/rivo/uniseg	2024-02-08
gomod	github.com/spf13/pflag	2025-09-02
gomod	github.com/uber-go/tally/v4	2025-04-02
gomod	github.com/urfave/negroni/v3	2024-06-04
gomod	go.uber.org/mock	2025-08-18
npm	markdown-it-footnote	2023-12-06
npm	sitemap-ts	2025-07-21
npm	vitepress-plugin-mermaid	2024-09-24

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update crate-ci/typos action to v1.50.1 in .github/workflows/website.yml (main)
• chore(deps): update dependency @playwright/test to v1.63.0 in package.json (main)
• chore(deps): update dependency hashicorp/terraform to v1.16.1 in testdrive/utils.go (main)
• chore(deps): update dependency open-policy-agent/conftest to v0.69.0 in dockerfile (main)
• chore(deps): update dependency open-policy-agent/conftest to v0.69.0 in testing/dockerfile (main)
• chore(deps): update github/codeql-action action to v4.37.9 in .github/workflows/scorecard.yml (main)
• chore(deps): update go to v1.27.1 in go.mod (main) (go, golang)
• chore(deps): update hadolint/hadolint-action action to v3.5.0 in .github/workflows/atlantis-image.yml (main)
• chore(deps): update lycheeverse/lychee-action action to v2.9.0 in .github/workflows/website.yml (main)
• chore(deps): update node.js to v24.20.0 in .node-version (main) (node, @types/node)
• chore(deps): update redis docker tag to v8.10 in docker-compose.yml (main)
• chore(deps): update sigstore/cosign-installer action to v4.1.2 in .github/workflows/atlantis-image.yml (main)
• chore(deps): update step-security/harden-runner action to v2.21.1 in .github/workflows/website.yml (main)
• chore(deps): update terraform null to v3.3.1 in server/controllers/events/testdata/test-repos/workspace-parallel-yaml/staging/versions.tf (main)
• chore(deps): update terraform random to v3.9.0 in server/controllers/events/testdata/test-repos/state-rm-single-project/versions.tf (main)
• fix(deps): update aws-sdk-go-v2 monorepo in go.mod (main) (github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/service/s3)
• fix(deps): update module code.gitea.io/sdk/gitea to v0.25.1 in go.mod (main)
• fix(deps): update module github.com/alicebob/miniredis/v2 to v2.39.0 in go.mod (main)
• fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.19.0 in go.mod (main)
• fix(deps): update module github.com/cactus/go-statsd-client/v5 to v5.1.0 in go.mod (main)
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.7.0 in go.mod (main)
• fix(deps): update module github.com/redis/go-redis/v9 to v9.22.0 in go.mod (main)
• fix(deps): update module github.com/slack-go/slack to v0.29.0 in go.mod (main)
• fix(deps): update module github.com/stretchr/testify to v1.12.1 in go.mod (main)
• fix(deps): update module github.com/zclconf/go-cty to v1.19.0 in go.mod (main)
• fix(deps): update module go.etcd.io/bbolt to v1.5.0 in go.mod (main)
• fix(deps): update module go.uber.org/zap to v1.28.0 in go.mod (main)
• chore(deps): update actions/attest-build-provenance action to v3 in .github/workflows/atlantis-image.yml (main)
• chore(deps): update actions/attest-build-provenance action to v4 in .github/workflows/atlantis-image.yml (main)
• chore(deps): update actions/dependency-review-action action to v5 in .github/workflows/dependency-review.yml (main)
• chore(deps): update actions/setup-go action to v7 in .github/workflows/update-top-issues-ranking.yml (main)
• chore(deps): update actions/setup-node action to v7 in .github/workflows/website.yml (main)
• chore(deps): update davidanson/markdownlint-cli2-action action to v24 in .github/workflows/website.yml (main)
• chore(deps): update dependency @vueuse/core to v13 in package.json (main)
• chore(deps): update dependency @vueuse/core to v14 in package.json (main)
• chore(deps): update dependency markdown-it to v15 in package.json (main)
• chore(deps): update dependency vite to v7 in package.json (main)
• chore(deps): update dependency vite to v8 in package.json (main)
• chore(deps): update dorny/paths-filter action to v4 in .github/workflows/website.yml (main)
• chore(deps): update hashicorp/setup-terraform action to v4 in .github/workflows/test.yml (main)
• chore(deps): update slackapi/slack-github-action action to v3 in .github/workflows/test.yml (main)
• chore(deps): update slackapi/slack-github-action action to v4 in .github/workflows/test.yml (main)
• fix(deps): update module github.com/cactus/go-statsd-client/v5 to v6 in go.mod (main)
• fix(deps): update module github.com/google/go-github/v88 to v89 in go.mod (main)
• fix(deps): update module github.com/google/go-github/v88 to v90 in go.mod (main)
• fix(deps): update module github.com/google/go-github/v88 to v91 in go.mod (main)
• fix(deps): update module gitlab.com/gitlab-org/api/client-go to v1 in go.mod (main)
• fix(deps): update module gitlab.com/gitlab-org/api/client-go to v2 in go.mod (main)
• chore(deps): lock file maintenance in server/events/testdata/test-repos/workspace-unsafe-name/main.tf (main)
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update gcr.io/oss-fuzz-base/base-builder-go docker digest to e5e5ecf in .clusterfuzzlite/dockerfile (main)
• chore(deps): update ghcr.io/runatlantis/atlantis:latest docker digest to 5112319 in dockerfile.dev (main)
• chore(deps): update ghcr.io/runatlantis/testing-env:latest docker digest to 9334468 in .github/workflows/test.yml (main)
• fix(deps): update github.com/hashicorp/terraform-config-inspect digest to 75d64de in go.mod (main)
• chore(deps): update dependency debian_13/openssl to v3.5.7-1~deb13u2 in dockerfile (main)
• fix(deps): update module github.com/go-playground/validator/v10 to v10.30.4 in go.mod (main)
• fix(deps): update module gitlab.com/gitlab-org/api/client-go to v3 in go.mod (main)

---

Warning

Renovate failed to look up the following dependencies: Failed to look up repology package alpine_3_24/bash: no-result, Failed to look up repology package debian_13/unzip: no-result, Failed to look up repology package debian_13/openssh-server: no-result, Failed to look up repology package debian_13/dumb-init: no-result, Failed to look up repology package debian_13/gnupg: no-result, Failed to look up repology package alpine_3_24/ca-certificates: no-result, Failed to look up repology package alpine_3_24/curl: no-result, Failed to look up repology package alpine_3_24/git: no-result, Failed to look up repology package alpine_3_24/openssh: no-result, Failed to look up repology package alpine_3_24/dumb-init: no-result, Failed to look up repology package alpine_3_24/gcompat: no-result, Failed to look up repology package alpine_3_24/coreutils: no-result, Failed to look up repology package alpine_3_24/libcap: no-result, Failed to look up repology package debian_13/libcap2-bin: no-result.

Files affected: Dockerfile

---

Detected Dependencies

Branch main

asdf (1)

.tool-versions

docker-compose (1)

docker-compose.yml (2)

• ngrok/ngrok latest@sha256:14d80d083e5b53145f416bbbd36238336c9de4016c43fd950eb2eb845670583b
• redis 8.6-alpine@sha256:75934ddb37bfaebe3b4082ba673cac39f66495244134f33dd0a502ce03cdcd36 → [Updates: 8.10-alpine]

dockerfile (4)

.clusterfuzzlite/Dockerfile (1)

• gcr.io/oss-fuzz-base/base-builder-go sha256:bb153df7a0308f72195d3f8b3d48c98a06ae0db7a7e350a1bfea68a15ec1b785 → [Updates: undefined]

Dockerfile (4)

• docker/dockerfile 1@sha256:ecfaec9ed6d810b56388c508f4121597bfbba70d41a6dfeee4d8cad5f295fc32
• golang 1.26.6-alpine3.24@sha256:3889b425f035be855a72fb4755265311293b6d414521f0a519d819df32222d83 → [Updates: 1.27.1-alpine3.24]
• debian 13.6-slim@sha256:d7e12182ce18b85b93007c1dedf31f2d29e01ccf3182cc4017c709b6259bc132
• alpine 3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b

Dockerfile.dev (1)

• ghcr.io/runatlantis/atlantis latest@sha256:1b4cd45a1ba3b32ffe81b8ada0de9be21ffa0f78425966643cc713ef446e37a8 → [Updates: latest]

testing/Dockerfile (1)

• golang 1.26.6@sha256:0d1d3a794be25f809dd2cb3160d8c73276c4056a9f8242a138e908ddeee7b6b6 → [Updates: 1.27.1]

github-actions (18)

.github/workflows/atlantis-image.yml (24)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dorny/paths-filter v3@0e4a8c6effa4802afeda77dc8d303f8176d7dfad → [Updates: v4]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 → [Updates: v3.5.0]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• docker/setup-qemu-action v4@1f40c72289eff860ee54a304f1438e3cff362e0a
• docker/setup-buildx-action v4@37fe631027851001ddb9b187196cc803df7f5f0e
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad → [Updates: v4.1.2]
• docker/metadata-action v6@dc802804100637a589fabce1cb79ff13a1411302
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/attest-build-provenance v2.4.0@e8998f949152b193b063cb0ec769d69d929409be → [Updates: v3.2.0, v4.2.2]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-buildx-action v4@37fe631027851001ddb9b187196cc803df7f5f0e
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• e1himself/goss-installation-action v1.3.0@3b8340a7c772f8064444f48b0df4c2a80d2e50fc
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/clusterfuzzlite.yml (8)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dorny/paths-filter v3@0e4a8c6effa4802afeda77dc8d303f8176d7dfad → [Updates: v4]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• google/clusterfuzzlite v1@884713a6c30a92e5e8544c39945cd7cb630abcd1
• google/clusterfuzzlite v1@884713a6c30a92e5e8544c39945cd7cb630abcd1
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.37.9]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]

.github/workflows/code-coverage.yml (9)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-code-coverage v1@1c15be36fc3733ba839b1dd643bd9556e4426dc1
• ghcr.io/runatlantis/testing-env latest@sha256:dc683c36e7fb8f26fcc8628fdcf328f42d3b1903e130aebb8484223fbdedfd98 → [Updates: latest]
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/codeql.yml (12)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dorny/paths-filter v3@0e4a8c6effa4802afeda77dc8d303f8176d7dfad → [Updates: v4]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• github/codeql-action v4@cdf488f595d80d6e07e03d4674febd5ab45fa938
• github/codeql-action v4@cdf488f595d80d6e07e03d4674febd5ab45fa938
• github/codeql-action v4@cdf488f595d80d6e07e03d4674febd5ab45fa938
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/dependency-review-action v4.9.0@2031cfc080254a8a887f58cffee85186f0e49e48 → [Updates: v5.0.0]

.github/workflows/go-lint.yml (15)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dorny/paths-filter v3@0e4a8c6effa4802afeda77dc8d303f8176d7dfad → [Updates: v4]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• golangci/golangci-lint-action v9@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• golangci/golangci-lint-action v9@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• ubuntu 24.04
• ubuntu 24.04
• golangci/golangci-lint v2.13.2
• golangci/golangci-lint v2.13.2
• ubuntu 24.04

.github/workflows/labeler.yml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/labeler v7@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13
• ubuntu 24.04

.github/workflows/markdown-lint.yml (11)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• dorny/paths-filter v3.0.4@0e4a8c6effa4802afeda77dc8d303f8176d7dfad → [Updates: v4.0.3]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• ubuntu 24.04
• ubuntu 24.04
• node 24
• ubuntu 24.04

.github/workflows/pr-lint.yml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• amannn/action-semantic-pull-request v6@48f256284bd46cdaab1048c3721360e808335d50
• ubuntu 24.04

.github/workflows/pr-size-labeler.yml (2)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• codelytv/pr-size-labeler v1@095a41fca88b8764fd9e008ad269bcdb82bb38b9

.github/workflows/release.yml (5)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• goreleaser/goreleaser-action v7@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• ubuntu 24.04

.github/workflows/renovate-config.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v6@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7]
• ubuntu 24.04

.github/workflows/scorecard.yml (5)

• step-security/harden-runner v2@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.37.9]

.github/workflows/stale.yml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/stale v11@4391f3da665fdf50b6810c1a66712fb9ba21aa93
• ubuntu 24.04

.github/workflows/test.yml (22)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dorny/paths-filter v3@0e4a8c6effa4802afeda77dc8d303f8176d7dfad → [Updates: v4]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• slackapi/slack-github-action v2.1.1@91efab103c0de0a537f72a35f6b8cda0ee76bf0a → [Updates: v3.0.5, v4.0.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• hashicorp/setup-terraform v3@b9cd54a3c349d3f38e8881555d616ced269862dd → [Updates: v4]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• hashicorp/setup-terraform v3@b9cd54a3c349d3f38e8881555d616ced269862dd → [Updates: v4]
• ubuntu 24.04
• ghcr.io/runatlantis/testing-env latest@sha256:dc683c36e7fb8f26fcc8628fdcf328f42d3b1903e130aebb8484223fbdedfd98 → [Updates: latest]
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/testing-env-image.yml (13)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dorny/paths-filter v3@0e4a8c6effa4802afeda77dc8d303f8176d7dfad → [Updates: v4]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-qemu-action v4@1f40c72289eff860ee54a304f1438e3cff362e0a
• docker/setup-buildx-action v4@37fe631027851001ddb9b187196cc803df7f5f0e
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/update-top-issues-ranking.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• ubuntu 24.04

.github/workflows/website.yml (13)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dorny/paths-filter v3@0e4a8c6effa4802afeda77dc8d303f8176d7dfad → [Updates: v4]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• crate-ci/typos v1.50.0@4d9c206a77c041268485162b8e2579ad7a5cb9a3 → [Updates: v1.50.1]
• DavidAnson/markdownlint-cli2-action v23@ded1f9488f68a970bc66ea5619e13e9b52e601cd → [Updates: v24]
• lycheeverse/lychee-action v2.8.0@8646ba30535128ac92d33dfc9133794bfdd9b411 → [Updates: v2.9.0]
• actions/setup-node v6@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.21.1]
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

gomod (3)

.github/scripts/update_top_issues_ranking/go.mod (2)

• go 1.26.6 → [Updates: 1.27.1]
• github.com/google/go-github/v88 v88.0.0 → [Updates: v89.0.0, v90.0.0, v91.0.0]

e2e/go.mod (5)

• go 1.26.6 → [Updates: 1.27.1]
• github.com/bradleyfalzon/ghinstallation/v2 v2.18.0 → [Updates: v2.19.0]
• github.com/google/go-github/v88 v88.0.0 → [Updates: v89.0.0, v90.0.0, v91.0.0]
• github.com/hashicorp/go-multierror v1.1.1
• gitlab.com/gitlab-org/api/client-go v0.161.1 → [Updates: v1.46.0, v2.62.0, v3.0.0]

go.mod (60)

• go 1.26.6 → [Updates: 1.27.1]
• code.gitea.io/sdk/gitea v0.23.2 → [Updates: v0.25.1]
• github.com/Masterminds/sprig/v3 v3.3.0
• github.com/alicebob/miniredis/v2 v2.36.1 → [Updates: v2.39.0]
• github.com/aws/aws-sdk-go-v2 v1.42.0 → [Updates: v1.45.1]
• github.com/aws/aws-sdk-go-v2/config v1.32.11 → [Updates: v1.33.2]
• github.com/aws/aws-sdk-go-v2/service/s3 v1.103.3 → [Updates: v1.110.0]
• github.com/bmatcuk/doublestar/v4 v4.10.0
• github.com/bradleyfalzon/ghinstallation/v2 v2.17.0 → [Updates: v2.19.0]
• github.com/briandowns/spinner v1.23.2
• github.com/cactus/go-statsd-client/v5 v5.0.0 → [Updates: v5.1.0, v6.0.0]
• github.com/cactus/go-statsd-client/v6 v6.0.0
• github.com/cyphar/filepath-securejoin v0.6.1 → [Updates: v0.7.0]
• github.com/drmaxgit/go-azuredevops v0.13.2
• github.com/go-ozzo/ozzo-validation v3.6.0+incompatible
• github.com/go-playground/validator/v10 v10.30.3 → [Updates: v10.30.4]
• github.com/go-test/deep v1.1.1
• github.com/gofri/go-github-ratelimit/v2 v2.0.2
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/google/go-github/v88 v88.0.0 → [Updates: v89.0.0, v90.0.0, v91.0.0]
• github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510@e7afc7fbc510
• github.com/google/uuid v1.6.0
• github.com/gorilla/mux v1.8.1
• github.com/gorilla/websocket v1.5.3
• github.com/hashicorp/go-getter/v2 v2.2.3
• github.com/hashicorp/go-version v1.9.0
• github.com/hashicorp/golang-lru/v2 v2.0.7
• github.com/hashicorp/hc-install v0.9.5
• github.com/hashicorp/terraform-config-inspect v0.0.0-20260709150029-2fb54c236733@2fb54c236733 → [Updates: v0.0.0-20260904064934-75d64de68c31]
• github.com/jpillora/backoff v1.0.0
• github.com/kr/pretty v0.3.1
• github.com/microcosm-cc/bluemonday v1.0.27
• github.com/mitchellh/colorstring v0.0.0-20190213212951-d06e56a500db@d06e56a500db
• github.com/mitchellh/go-homedir v1.1.0
• github.com/moby/patternmatcher v0.6.1
• github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826@c48cc78d4826
• github.com/opentofu/tofudl v0.0.1
• github.com/petergtz/pegomock/v4 v4.4.0
• github.com/pkg/errors v0.9.1
• github.com/redis/go-redis/v9 v9.17.3 → [Updates: v9.22.0]
• github.com/remeh/sizedwaitgroup v1.0.0
• github.com/rivo/uniseg v0.4.7
• github.com/shurcooL/githubv4 v0.0.0-20260209031235-2402fdf4a9ed@2402fdf4a9ed
• github.com/slack-go/slack v0.23.1 → [Updates: v0.29.0]
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/spf13/viper v1.21.0
• github.com/stretchr/testify v1.11.1 → [Updates: v1.12.1]
• github.com/uber-go/tally/v4 v4.1.17
• github.com/urfave/negroni/v3 v3.1.1
• github.com/zclconf/go-cty v1.16.3 → [Updates: v1.19.0]
• gitlab.com/gitlab-org/api/client-go v0.161.1 → [Updates: v1.46.0, v2.62.0, v3.0.0]
• go.etcd.io/bbolt v1.4.3 → [Updates: v1.5.0]
• go.uber.org/mock v0.6.0
• go.uber.org/zap v1.27.1 → [Updates: v1.28.0]
• go.yaml.in/yaml/v4 v4.0.0-rc.6
• golang.org/x/term v0.45.0
• golang.org/x/text v0.41.0
• github.com/agext/levenshtein v1.2.3
• github.com/hashicorp/hcl/v2 v2.24.0

nodenv (1)

.node-version (1)

• node 24.16.0 → [Updates: 24.20.0]

npm (1)

package.json (12)

• @playwright/test 1.62.1 → [Updates: 1.63.0]
• @types/node 24.12.4 → [Updates: 24.13.3]
• @vueuse/core 12.8.2 → [Updates: 13.9.0, 14.4.0]
• markdown-it-footnote 4.0.0
• mermaid 11.17.2
• sitemap-ts 1.10.1
• vite 6.4.3 → [Updates: 7.3.6, 8.2.2]
• vitepress 1.6.4
• vitepress-plugin-mermaid 2.0.17
• vue 3.5.42
• minimatch ^10.2.1
• markdown-it ^14.2.0 → [Updates: ^15.0.0]

regex (5)

.github/workflows/renovate-config.yml (1)

• renovate 43.150.0

Dockerfile (20)

• alpine_3_24/bash 5.3.9-r1
• debian_13/ca-certificates 20250419
• debian_13/curl 8.14.1-2+deb13u4
• debian_13/git 1:2.47.3-0+deb13u1
• debian_13/unzip 6.0-29
• debian_13/openssh-server 1:10.0p1-7+deb13u4
• debian_13/dumb-init 1.2.5-3
• debian_13/gnupg 2.4.7-21+deb13u1
• debian_13/openssl 3.5.6-1~deb13u2 → [Updates: 3.5.7-1~deb13u2]
• alpine_3_24/ca-certificates 20260611-r0
• alpine_3_24/curl 8.22.0-r0
• alpine_3_24/git 2.54.0-r0
• alpine_3_24/unzip 6.0-r16
• alpine_3_24/bash 5.3.9-r1
• alpine_3_24/openssh 10.3_p1-r1
• alpine_3_24/dumb-init 1.2.5-r4
• alpine_3_24/gcompat 1.1.0-r4
• alpine_3_24/coreutils 9.11-r0
• alpine_3_24/libcap 2.78-r0
• debian_13/libcap2-bin 1:2.75-10+deb13u1+b1

Dockerfile (4)

• hashicorp/terraform 1.15.9 → [Updates: 1.16.1]
• opentofu/opentofu 1.12.6
• open-policy-agent/conftest 0.66.0 → [Updates: 0.69.0]
• git-lfs/git-lfs 3.8.0

testdrive/utils.go (1)

• hashicorp/terraform 1.15.9 → [Updates: 1.16.1]

testing/Dockerfile (2)

• hashicorp/terraform 1.15.9 → [Updates: 1.16.1]
• open-policy-agent/conftest 0.66.0 → [Updates: 0.69.0]

terraform (58)

runatlantis.io/blog/2018/hosting-our-static-site/code/main.tf

runatlantis.io/terraform/main.tf

runatlantis.io/terraform/versions.tf (1)

• hashicorp/terraform >= 0.12

server/controllers/events/testdata/test-repos/automerge/dir1/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/automerge/dir2/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/import-multiple-project/dir1/versions.tf (1)

• random 3.8.1 → [Updates: 3.9.0]

server/controllers/events/testdata/test-repos/import-multiple-project/dir2/versions.tf (1)

• random 3.8.1 → [Updates: 3.9.0]

server/controllers/events/testdata/test-repos/import-single-project-var/versions.tf (1)

• random 3.8.1 → [Updates: 3.9.0]

server/controllers/events/testdata/test-repos/import-single-project/versions.tf (1)

• random 3.8.1 → [Updates: 3.9.0]

server/controllers/events/testdata/test-repos/import-workspace/dir1/versions.tf (1)

• random 3.8.1 → [Updates: 3.9.0]

server/controllers/events/testdata/test-repos/modules-yaml/modules/null/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/modules-yaml/production/main.tf

server/controllers/events/testdata/test-repos/modules-yaml/staging/main.tf

server/controllers/events/testdata/test-repos/modules/modules/null/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/modules/production/main.tf

server/controllers/events/testdata/test-repos/modules/staging/main.tf

server/controllers/events/testdata/test-repos/policy-checks-apply-reqs/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/policy-checks-clear-approval/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/policy-checks-custom-policy-check/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/policy-checks-custom-run-steps/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/policy-checks-diff-owner/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/policy-checks-disabled-previous-match/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/policy-checks-disabled-repo-server-side/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/policy-checks-disabled-repo/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/policy-checks-enabled-repo-server-side/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/policy-checks-enabled-repo/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/policy-checks-extra-args/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/policy-checks-multi-projects/dir1/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/policy-checks-multi-projects/dir2/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/policy-checks-sticky-approvals/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/policy-checks/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/repo-config-file/infrastructure/production/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/repo-config-file/infrastructure/staging/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/server-side-cfg/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/simple-with-lockfile/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/simple-yaml/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/simple/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/state-rm-multiple-project/dir1/versions.tf (1)

• random 3.8.1 → [Updates: 3.9.0]

server/controllers/events/testdata/test-repos/state-rm-multiple-project/dir2/versions.tf (1)

• random 3.8.1 → [Updates: 3.9.0]

server/controllers/events/testdata/test-repos/state-rm-single-project/versions.tf (1)

• random 3.8.1 → [Updates: 3.9.0]

server/controllers/events/testdata/test-repos/state-rm-workspace/dir1/versions.tf (1)

• random ~> 3

server/controllers/events/testdata/test-repos/tfvars-yaml-no-autoplan/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/tfvars-yaml/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/workspace-parallel-yaml/production/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/controllers/events/testdata/test-repos/workspace-parallel-yaml/staging/versions.tf (1)

• null 3.2.4 → [Updates: 3.3.1]

server/events/testdata/fs/repoA/baz/mods.tf

server/events/testdata/fs/repoA/modules/foo/mods.tf

server/events/testdata/fs/repoA/qux/quxx/mods.tf

server/events/testdata/fs/repoB/dev/quxx/mods.tf

server/events/testdata/fs/repoB/modules/foo/mods.tf

server/events/testdata/fs/repoB/prod/quxx/mods.tf

server/events/testdata/fs/repoC/self/init.tf

server/events/testdata/fs/repoD/a/init.tf

server/events/testdata/fs/repoD/b/init.tf

server/events/testdata/test-repos/cloud-block-without-workspace-name/main.tf (1)

• hashicorp/terraform >=1.2

server/events/testdata/test-repos/no-cloud-block/main.tf (1)

• hashicorp/terraform >=1.2

server/events/testdata/test-repos/workspace-configured/main.tf (1)

• hashicorp/terraform >=1.2

server/events/testdata/test-repos/workspace-unsafe-name/main.tf (1)

• hashicorp/terraform >=1.2

Branch release-0.47

asdf (1)

.tool-versions

docker-compose (1)

docker-compose.yml

dockerfile (4)

.clusterfuzzlite/Dockerfile

Dockerfile

Dockerfile.dev

testing/Dockerfile

github-actions (18)

.github/workflows/atlantis-image.yml

.github/workflows/clusterfuzzlite.yml

.github/workflows/code-coverage.yml

.github/workflows/codeql.yml

.github/workflows/dependency-review.yml

.github/workflows/go-lint.yml

.github/workflows/labeler.yml

.github/workflows/markdown-lint.yml

.github/workflows/pr-lint.yml

.github/workflows/pr-size-labeler.yml

.github/workflows/release.yml

.github/workflows/renovate-config.yml

.github/workflows/scorecard.yml

.github/workflows/stale.yml

.github/workflows/test.yml

.github/workflows/testing-env-image.yml

.github/workflows/update-top-issues-ranking.yml

.github/workflows/website.yml

gomod (3)

.github/scripts/update_top_issues_ranking/go.mod

e2e/go.mod

go.mod

nodenv (1)

.node-version

npm (1)

package.json

regex (5)

.github/workflows/renovate-config.yml

Dockerfile

Dockerfile

testdrive/utils.go

testing/Dockerfile

terraform (58)

runatlantis.io/blog/2018/hosting-our-static-site/code/main.tf

runatlantis.io/terraform/main.tf

runatlantis.io/terraform/versions.tf

server/controllers/events/testdata/test-repos/automerge/dir1/versions.tf

server/controllers/events/testdata/test-repos/automerge/dir2/versions.tf

server/controllers/events/testdata/test-repos/import-multiple-project/dir1/versions.tf

server/controllers/events/testdata/test-repos/import-multiple-project/dir2/versions.tf

server/controllers/events/testdata/test-repos/import-single-project-var/versions.tf

server/controllers/events/testdata/test-repos/import-single-project/versions.tf

server/controllers/events/testdata/test-repos/import-workspace/dir1/versions.tf

server/controllers/events/testdata/test-repos/modules-yaml/modules/null/versions.tf

server/controllers/events/testdata/test-repos/modules-yaml/production/main.tf

server/controllers/events/testdata/test-repos/modules-yaml/staging/main.tf

server/controllers/events/testdata/test-repos/modules/modules/null/versions.tf

server/controllers/events/testdata/test-repos/modules/production/main.tf

server/controllers/events/testdata/test-repos/modules/staging/main.tf

server/controllers/events/testdata/test-repos/policy-checks-apply-reqs/versions.tf

server/controllers/events/testdata/test-repos/policy-checks-clear-approval/versions.tf

server/controllers/events/testdata/test-repos/policy-checks-custom-policy-check/versions.tf

server/controllers/events/testdata/test-repos/policy-checks-custom-run-steps/versions.tf

server/controllers/events/testdata/test-repos/policy-checks-diff-owner/versions.tf

server/controllers/events/testdata/test-repos/policy-checks-disabled-previous-match/versions.tf

server/controllers/events/testdata/test-repos/policy-checks-disabled-repo-server-side/versions.tf

server/controllers/events/testdata/test-repos/policy-checks-disabled-repo/versions.tf

server/controllers/events/testdata/test-repos/policy-checks-enabled-repo-server-side/versions.tf

server/controllers/events/testdata/test-repos/policy-checks-enabled-repo/versions.tf

server/controllers/events/testdata/test-repos/policy-checks-extra-args/versions.tf

server/controllers/events/testdata/test-repos/policy-checks-multi-projects/dir1/versions.tf

server/controllers/events/testdata/test-repos/policy-checks-multi-projects/dir2/versions.tf

server/controllers/events/testdata/test-repos/policy-checks-sticky-approvals/versions.tf

server/controllers/events/testdata/test-repos/policy-checks/versions.tf

server/controllers/events/testdata/test-repos/repo-config-file/infrastructure/production/versions.tf

server/controllers/events/testdata/test-repos/repo-config-file/infrastructure/staging/versions.tf

server/controllers/events/testdata/test-repos/server-side-cfg/versions.tf

server/controllers/events/testdata/test-repos/simple-with-lockfile/versions.tf

server/controllers/events/testdata/test-repos/simple-yaml/versions.tf

server/controllers/events/testdata/test-repos/simple/versions.tf

server/controllers/events/testdata/test-repos/state-rm-multiple-project/dir1/versions.tf

server/controllers/events/testdata/test-repos/state-rm-multiple-project/dir2/versions.tf

server/controllers/events/testdata/test-repos/state-rm-single-project/versions.tf

server/controllers/events/testdata/test-repos/state-rm-workspace/dir1/versions.tf

server/controllers/events/testdata/test-repos/tfvars-yaml-no-autoplan/versions.tf

server/controllers/events/testdata/test-repos/tfvars-yaml/versions.tf

server/controllers/events/testdata/test-repos/workspace-parallel-yaml/production/versions.tf

server/controllers/events/testdata/test-repos/workspace-parallel-yaml/staging/versions.tf

server/events/testdata/fs/repoA/baz/mods.tf

server/events/testdata/fs/repoA/modules/foo/mods.tf

server/events/testdata/fs/repoA/qux/quxx/mods.tf

server/events/testdata/fs/repoB/dev/quxx/mods.tf

server/events/testdata/fs/repoB/modules/foo/mods.tf

server/events/testdata/fs/repoB/prod/quxx/mods.tf

server/events/testdata/fs/repoC/self/init.tf

server/events/testdata/fs/repoD/a/init.tf

server/events/testdata/fs/repoD/b/init.tf

server/events/testdata/test-repos/cloud-block-without-workspace-name/main.tf

server/events/testdata/test-repos/no-cloud-block/main.tf

server/events/testdata/test-repos/workspace-configured/main.tf

server/events/testdata/test-repos/workspace-unsafe-name/main.tf

---

• Check this box to trigger a request for Renovate to run again on this repository

[nitrocode]

Quick links

• Logs https://app.renovatebot.com/dashboard#github/runatlantis/atlantis