Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update google.golang.org/genproto/googleapis/api digest to 18b4a75
• fix(deps): update module github.com/cockroachdb/cockroach-go/v2 to v2.4.3
• fix(deps): update module github.com/spf13/cobra to v1.10.2
• fix(deps): update module google.golang.org/protobuf to v1.36.12
• chore(deps): update dependency golangci/golangci-lint to v2.13.2
• chore(deps): update jaegertracing/all-in-one docker tag to v1.76.0
• chore(deps): update module golang.org/x/tools to v0.49.0
• fix(deps): update module github.com/labstack/echo-jwt/v4 to v4.4.0
• fix(deps): update module github.com/lib/pq to v1.12.3
• fix(deps): update module github.com/micahparks/keyfunc/v3 to v3.8.1
• fix(deps): update module github.com/oapi-codegen/echo-middleware to v1.1.0
• fix(deps): update module github.com/oapi-codegen/runtime to v1.7.0
• fix(deps): update module github.com/pressly/goose/v3 to v3.28.0
• fix(deps): update module github.com/stretchr/testify to v1.12.1
• fix(deps): update module go.opentelemetry.io/otel/trace to v1.46.0
• fix(deps): update module go.uber.org/zap to v1.28.0
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-go action to v7
• chore(deps): update azure/setup-helm action to v5
• chore(deps): update cockroachdb/cockroach docker tag to v26
• chore(deps): update codecov/codecov-action action to v7
• chore(deps): update docker/setup-qemu-action action to v4
• chore(deps): update googleapis/release-please-action action to v5
• chore(deps): update goreleaser/goreleaser-action action to v7
• fix(deps): update module github.com/labstack/echo-jwt/v4 to v5
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up docker package mcr.microsoft.com/vscode/devcontainers/go: no-result.

Files affected: .devcontainer/Dockerfile

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update module github.com/go-jose/go-jose/v3 to v3.0.5 [security]
• chore(deps): update module github.com/oapi-codegen/oapi-codegen/v2 to v2.7.1 [security]
• fix(deps): update module github.com/getkin/kin-openapi to v0.144.0 [security]
• fix(deps): update module github.com/google/cel-go to v0.29.0 [security]
• fix(deps): update module github.com/labstack/echo/v4 to v4.15.3 [security]
• fix(deps): update module go.opentelemetry.io/otel to v1.41.0 [security]
• chore(deps): pin stefanprodan/helm-gh-pages action to 89c6698
• chore(deps): update actions/checkout digest to fbc6f39
• chore(deps): update actions/setup-go digest to 924ae3a
• chore(deps): update codecov/codecov-action digest to 0fb7174
• chore(deps): update github/codeql-action digest to cdf488f
• chore(deps): update googleapis/release-please-action digest to 5c625bf
• chore(deps): update cockroachdb/cockroach docker tag to v25.4.16
• chore(deps): update github/codeql-action action to v4.37.9
• chore(deps): update golangci/golangci-lint-action action to v9.3.0
• chore(deps): update helm release common to v2.41.0
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (1)

• ghcr.io/devcontainers/features/sshd 1

docker-compose (1)

.devcontainer/docker-compose.yml (2)

• cockroachdb/cockroach v25.2.0 → [Updates: v25.4.16, v26.3.1]
• jaegertracing/all-in-one 1.74.0 → [Updates: 1.76.0]

dockerfile (2)

.devcontainer/Dockerfile (1)

• mcr.microsoft.com/vscode/devcontainers/go 1-1.23-bullseye

Dockerfile

github-actions (6)

.github/workflows/codacy.yml (3)

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v7, v5]
• codacy/codacy-analysis-cli-action v4.4.7@562ee3e92b8e92df8b67e0a5ff8aa8e261919c08
• github/codeql-action v4.31.3@014f16e7ab1402f30e7c3329d33797e7948572db → [Updates: v4.37.9]

.github/workflows/codeql.yml (4)

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v7, v5]
• github/codeql-action v4@014f16e7ab1402f30e7c3329d33797e7948572db → [Updates: v4]
• github/codeql-action v4@014f16e7ab1402f30e7c3329d33797e7948572db → [Updates: v4]
• github/codeql-action v4@014f16e7ab1402f30e7c3329d33797e7948572db → [Updates: v4]

.github/workflows/image-main-test.yml (4)

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v7, v5]
• actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v7, v6]
• docker/setup-qemu-action v3@c7c53464625b32c7a7e944ae62b3e17d2b600130 → [Updates: v4]
• goreleaser/goreleaser-action v6@e435ccd777264be153ace6237001ef4d979d3a7a → [Updates: v7]

.github/workflows/release-please.yaml (1)

• googleapis/release-please-action v4@16a9c90856f42705d54a6fda1823352bdc62cf38 → [Updates: v5, v4]

.github/workflows/release.yml (6)

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v7, v5]
• docker/setup-qemu-action v3@c7c53464625b32c7a7e944ae62b3e17d2b600130 → [Updates: v4]
• actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v7, v6]
• goreleaser/goreleaser-action v6@e435ccd777264be153ace6237001ef4d979d3a7a → [Updates: v7]
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v7, v5]
• stefanprodan/helm-gh-pages master → [Updates: master]

.github/workflows/test.yml (9)

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v7, v5]
• actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v7, v6]
• golangci/golangci-lint-action v9.0.0@0a35821d5c230e903fcfe077583637dea1b27b47 → [Updates: v9.3.0]
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v7, v5]
• azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78 → [Updates: v5.0.1]
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v7, v5]
• actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v7, v6]
• codecov/codecov-action v5@5a1091511ad55cbe89839c7260b706298ca349f7 → [Updates: v7, v5]
• golangci/golangci-lint v2.5.0 → [Updates: v2.13.2]

gomod (1)

go.mod (29)

• go 1.25.4
• github.com/MicahParks/keyfunc/v3 v3.7.0 → [Updates: v3.8.1]
• github.com/cockroachdb/cockroach-go/v2 v2.4.2 → [Updates: v2.4.3]
• github.com/getkin/kin-openapi v0.133.0 → [Updates: v0.144.0]
• github.com/go-jose/go-jose/v3 v3.0.4 → [Updates: v3.0.5]
• github.com/google/cel-go v0.26.1 → [Updates: v0.29.0]
• github.com/labstack/echo-jwt/v4 v4.3.1 → [Updates: v4.4.0, v5.0.2]
• github.com/labstack/echo/v4 v4.13.4 → [Updates: v4.15.3]
• github.com/lib/pq v1.10.9 → [Updates: v1.12.3]
• github.com/metal-toolbox/auditevent v0.9.0
• github.com/oapi-codegen/echo-middleware v1.0.2 → [Updates: v1.1.0]
• github.com/oapi-codegen/runtime v1.1.2 → [Updates: v1.7.0]
• github.com/ory/fosite v0.49.0
• github.com/ory/x v0.0.729
• github.com/pressly/goose/v3 v3.26.0 → [Updates: v3.28.0]
• github.com/spf13/cobra v1.10.1 → [Updates: v1.10.2]
• github.com/spf13/pflag v1.0.10
• github.com/spf13/viper v1.21.0
• github.com/stretchr/testify v1.11.1 → [Updates: v1.12.1]
• go.infratographer.com/permissions-api v0.7.2
• go.infratographer.com/x v0.13.2
• go.opentelemetry.io/otel v1.38.0 → [Updates: v1.41.0]
• go.opentelemetry.io/otel/trace v1.38.0 → [Updates: v1.46.0]
• go.uber.org/zap v1.27.0 → [Updates: v1.28.0]
• google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba@95abcf5c77ba → [Updates: v0.0.0-20260831171406-18b4a7587f8a]
• google.golang.org/protobuf v1.36.10 → [Updates: v1.36.12]
• gopkg.in/yaml.v3 v3.0.1
• github.com/oapi-codegen/oapi-codegen/v2 v2.5.1 → [Updates: v2.7.1]
• golang.org/x/tools v0.39.0 → [Updates: v0.49.0]

helm-values (1)

chart/identity-api/values.yaml (1)

• ghcr.io/metal-toolbox/audittail v0.9.0

helmv3 (1)

chart/identity-api/Chart.yaml (1)

• common 2.31.1 → [Updates: 2.41.0]

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository