Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Renovate: Update github.com/sapcc to 3bf4546

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (go package go.podman.io/image/v5).

Files affected: go.mod

---

Vulnerabilities

Important

4/10 CVEs have Renovate fixes.

gomod

go.mod

github.com/docker/docker

• GHSA-6hwg-w5jg-9c6x
• GHSA-j249-ghv5-7mxv
• GHSA-pxq6-2prw-chj9
• GHSA-qrqr-3x5j-2xw9
• GHSA-rg2x-37c3-w2rh (fixed in > 28.5.2)
• GHSA-vp62-88p7-qqf5 (fixed in > 28.5.2)
• GHSA-x744-4wpc-v9h2 (fixed in >= 29.3.1)
• GHSA-x86f-5xw2-fm2r (fixed in > 28.5.2)
• GO-2026-4883
• GO-2026-4887

Detected Dependencies

github-actions (4)

.github/workflows/checks.yaml

.github/workflows/ci.yaml

.github/workflows/codeql.yaml

.github/workflows/oci-distribution-conformance.yml (5)

• actions/checkout v6
• actions/setup-go v6
• opencontainers/distribution-spec main
• actions/upload-artifact v7
• go 1.26

gomod (1)

go.mod (27)

• go 1.26
• github.com/alicebob/miniredis/v2 v2.38.0
• github.com/databus23/goslo.policy v0.0.0-20250326134918-4afc2c56a903@4afc2c56a903
• github.com/dlmiddlecote/sqlstats v1.0.2
• github.com/go-gorp/gorp/v3 v3.1.0
• github.com/go-redis/redis_rate/v10 v10.0.1
• github.com/gofrs/uuid/v5 v5.4.0
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/google/cel-go v0.28.1
• github.com/gophercloud/gophercloud/v2 v2.12.0
• github.com/gorilla/mux v1.8.1
• github.com/hashicorp/golang-lru/v2 v2.0.7
• github.com/klauspost/compress v1.18.6
• github.com/opencontainers/distribution-spec/specs-go v0.0.0-20260527210441-d40ddd746adc@d40ddd746adc
• github.com/opencontainers/go-digest v1.0.0
• github.com/opencontainers/image-spec v1.1.1
• github.com/prometheus/client_golang v1.23.2
• github.com/redis/go-redis/v9 v9.20.0
• github.com/rs/cors v1.11.1
• github.com/sapcc/go-api-declarations v1.22.0
• github.com/sapcc/go-bits v0.0.0-20260605140732-260f8544709d@260f8544709d → [Updates: v0.0.0-20260609114743-3bf4546d2a8d]
• github.com/spf13/cobra v1.10.2
• github.com/timewasted/go-accept-headers v0.0.0-20130320203746-c78f304b1b09@c78f304b1b09
• go.podman.io/image/v5 v5.40.0
• go.xyrillian.de/gg v1.9.0
• go.xyrillian.de/schwift/v2 v2.1.0
• go.podman.io/image/v5 v5.38.1-0.20251112190108-acb3639700ff@acb3639700ff

renovate-config (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository