Dependency Dashboard

[monkescience-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (2)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/hashicorp/go-retryablehttp	2025-06-18
gomod	github.com/microsoft/azure-devops-go-api/azuredevops/v7	2023-04-17

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): lock file maintenance

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update cgr.dev/chainguard/busybox:latest docker digest to 4e7cb67
• chore(deps): update dependency goreleaser to v2.18.1
• chore(deps): update dependency goreleaser/goreleaser to v2.18.1
• chore(deps): update renovatebot/github-action action to v46.2.6
• fix(deps): update module github.com/monkescience/testastic to v0.4.7
• chore(deps): update github/codeql-action action to v4.38.0
• chore(deps): update module golang.org/x/vuln to v1.8.0
• fix(deps): update module gitlab.com/gitlab-org/api/client-go/v2 to v2.64.0
• fix(deps): update module gitlab.com/gitlab-org/api/client-go/v2 to v3

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update module charm.land/log/v2 to v2.0.1
• fix(deps): update module github.com/yuin/goldmark/v2 to v2.0.1
• fix(deps): update module github.com/google/go-github/v90 to v91
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (7)

.github/workflows/binaries.yaml (7)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• actions/attest-build-provenance v4.2.2@4d101475d8b20a2381f78447822ac1eab6504dd8

.github/workflows/ci.yaml (22)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• golangci/golangci-lint-action v9.3.0@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• ghcr.io/gitleaks/gitleaks v8.30.1@sha256:c00b6bd0aeb3071cbcb79009cb16a60dd9e0a7c60e2be9ab65d25e6bc8abbb7f
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• ghcr.io/aquasecurity/trivy 0.74.0@sha256:62b1e65e8869bc4b4c6aa4fa2b21595256c7c2f6018a9d9ad61caf87187c1969
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• ko-build/setup-ko v0.10@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445
• ghcr.io/aquasecurity/trivy 0.74.0@sha256:62b1e65e8869bc4b4c6aa4fa2b21595256c7c2f6018a9d9ad61caf87187c1969
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.0]

.github/workflows/codeql.yaml (4)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.0]
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.0]

.github/workflows/image.yaml (5)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• ko-build/setup-ko v0.10@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/attest-build-provenance v4.2.2@4d101475d8b20a2381f78447822ac1eab6504dd8

.github/workflows/release.yaml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1

.github/workflows/renovate.yaml (2)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• renovatebot/github-action v46.2.5@39b914146caeff8cd512e61c8992f1d5913af85c → [Updates: v46.2.6]

.github/workflows/scorecard.yaml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.0]

gomod (1)

go.mod (18)

• go 1.27.0
• go 1.27.1
• charm.land/glamour/v2 v2.0.1
• charm.land/lipgloss/v2 v2.0.6
• charm.land/log/v2 v2.0.0 → [Updates: v2.0.1]
• github.com/Masterminds/semver/v3 v3.5.0
• github.com/charmbracelet/colorprofile v0.4.3
• github.com/charmbracelet/x/ansi v0.11.8
• github.com/go-git/go-git/v6 v6.0.0-alpha.5
• github.com/google/go-github/v90 v90.0.0 → [Updates: v91.0.0]
• github.com/hashicorp/go-retryablehttp v0.7.8
• github.com/microsoft/azure-devops-go-api/azuredevops/v7 v7.1.0
• github.com/monkescience/testastic v0.4.5 → [Updates: v0.4.7]
• github.com/santhosh-tekuri/jsonschema/v6 v6.0.3
• github.com/spf13/cobra v1.10.2
• github.com/yuin/goldmark/v2 v2.0.0 → [Updates: v2.0.1]
• gitlab.com/gitlab-org/api/client-go/v2 v2.62.0 → [Updates: v2.64.0, v3.2.0]
• go.yaml.in/yaml/v4 v4.0.0-rc.6

mise (1)

mise.toml (4)

• go 1.27.1
• golangci-lint 2.13.2
• goreleaser 2.18.0 → [Updates: 2.18.1]
• ko 0.19.1

regex (6)

.github/workflows/binaries.yaml (2)

• goreleaser/goreleaser v2.18.0 → [Updates: v2.18.1]
• sigstore/cosign v3.1.3

.github/workflows/ci.yaml (3)

• golangci/golangci-lint v2.13.2
• golang.org/x/vuln v1.7.0 → [Updates: v1.8.0]
• ko-build/ko v0.19.1

.github/workflows/image.yaml (2)

• ko-build/ko v0.19.1
• sigstore/cosign v3.1.3

.ko.yaml (1)

• cgr.dev/chainguard/busybox latest@sha256:db1930eb13e4acdd7f448dda7b7264b55b00858a528eb7c8d32d9cbfaee77b81 → [Updates: latest]

Makefile (1)

• github.com/vladopajic/go-test-coverage/v2 v2.19.0

Makefile (1)

• github.com/vladopajic/go-test-coverage/v2 v2.19.0

renovate-config (1)

renovate.json