Dependency Dashboard

[SatisfactoryModdingBot]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository problems

Renovate tried to run on this repository, but found these problems.

• WARN: Found renovate config warnings

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• chore(deps): update dependency go to v1.23.4
• chore(deps): update golang docker tag to v1.23.4
• fix(deps): update module github.com/99designs/gqlgen to v0.17.62
• fix(deps): update module github.com/alitto/pond to v1.9.2
• fix(deps): update module github.com/felixge/fgprof to v0.9.5
• fix(deps): update module github.com/labstack/echo-contrib to v0.17.2
• fix(deps): update module github.com/lmittmann/tint to v1.0.6
• fix(deps): update module github.com/swaggo/swag to v1.16.4
• fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.21
• chore(deps): update temporalio/auto-setup docker tag to v1.26.2
• fix(deps): update module github.com/dgraph-io/ristretto to v0.2.0
• fix(deps): update module github.com/exaring/otelpgx to v0.7.0
• fix(deps): update module github.com/golang-migrate/migrate/v4 to v4.18.1
• fix(deps): update module github.com/grafana/pyroscope-go to v1.2.0
• fix(deps): update module github.com/jackc/pgx/v5 to v5.7.2
• fix(deps): update module github.com/labstack/echo/v4 to v4.13.3
• fix(deps): update module github.com/masterminds/semver/v3 to v3.3.1
• fix(deps): update module github.com/ravilushqa/otelgqlgen to v0.17.0
• fix(deps): update module go.temporal.io/api to v1.43.0
• fix(deps): update module go.temporal.io/sdk to v1.31.0
• fix(deps): update module golang.org/x/oauth2 to v0.24.0
• fix(deps): update module golang.org/x/sync to v0.10.0
• fix(deps): update module google.golang.org/grpc to v1.69.2
• fix(deps): update module google.golang.org/protobuf to v1.36.1
• fix(deps): update opentelemetry-go monorepo to v1.33.0 (go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/otlp/otlptrace, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/trace)
• fix(deps): update opentelemetry-go-contrib monorepo to v0.58.0 (go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho, go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc)
• chore(deps): update codecov/codecov-action action to v5
• chore(deps): update mcr.microsoft.com/vscode/devcontainers/go docker tag to v1
• chore(deps): update renovatebot/github-action action to v41
• fix(deps): update module github.com/alitto/pond to v2
• fix(deps): update module github.com/dgraph-io/ristretto to v2
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• fix(deps): update module golang.org/x/crypto to v0.31.0 [security]
• fix(deps): update module golang.org/x/net to v0.33.0 [security]
• fix(deps): update module entgo.io/ent to v0.14.1
• chore(deps): update redis docker tag to v7.4.1
• chore(deps): update renovatebot/github-action action to v40.3.6
• chore(deps): update temporalio/ui docker tag to v2.33.0
• fix(deps): update module github.com/samber/slog-multi to v1.3.3
• fix(deps): update module github.com/avast/retry-go/v3 to v4
• fix(deps): update module github.com/cespare/xxhash to v2
• fix(deps): update module github.com/o1egl/paseto to v2
• fix(deps): update module github.com/russross/blackfriday to v2
• fix(deps): update module gopkg.in/go-playground/validator.v9 to v10
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

4/7 CVEs have Renovate fixes.

gomod

go.mod

github.com/aws/aws-sdk-go

• GO-2022-0646
• GO-2022-0635

github.com/chai2010/webp

• GHSA-j7hp-h8jx-5ppr

golang.org/x/crypto

• GO-2024-3321 (fixed in >= 0.31.0)
• GHSA-v778-237x-gjrc (fixed in >= 0.31.0)

golang.org/x/net

• GHSA-w32m-9786-jp63 (fixed in >= 0.33.0)
• GO-2024-3333 (fixed in >= 0.33.0)

Detected dependencies

docker-compose

.devcontainer/docker-compose.yml

docker-compose.yml

• redis 7.0.14-alpine
• ghcr.io/vilsol/ficsit-pak-parser v0.0.6
• temporalio/auto-setup 1.24.2
• temporalio/admin-tools 1.24.2-tctl-1.18.1-cli-0.13.0
• temporalio/ui 2.26.2

dockerfile

.devcontainer/Dockerfile

• mcr.microsoft.com/vscode/devcontainers/go 0-1-bullseye

Dockerfile

• golang 1.23.0-alpine
• golang 1.23.0-alpine

github-actions

.github/workflows/build.yml

• actions/checkout v4
• jetify-com/devbox-install-action v0.11.0
• actions/checkout v4
• jetify-com/devbox-install-action v0.11.0
• actions/checkout v4
• jetify-com/devbox-install-action v0.11.0
• actions/checkout v4
• jetify-com/devbox-install-action v0.11.0
• codecov/test-results-action v1
• codecov/codecov-action v4
• actions/checkout v4
• jetify-com/devbox-install-action v0.11.0

.github/workflows/generated.yml

• actions/checkout v4
• jetify-com/devbox-install-action v0.11.0
• actions/checkout v4
• jetify-com/devbox-install-action v0.11.0

.github/workflows/release.yml

• actions/checkout v4
• actions/setup-go v5
• goreleaser/goreleaser-action v6
• actions/checkout v4
• docker/login-action v3
• docker/metadata-action v5
• docker/setup-buildx-action v3
• docker/build-push-action v6

.github/workflows/renovate.yml

• actions/checkout v4
• renovatebot/github-action v40.1.12

.github/workflows/staging.yml

• actions/checkout v4
• docker/login-action v3
• docker/metadata-action v5
• docker/setup-buildx-action v3
• docker/build-push-action v6
• snok/container-retention-policy v3.0.0

gomod

go.mod

• go 1.22.5
• go 1.23.0
• ariga.io/entcache v0.1.0
• entgo.io/ent v0.14.0
• github.com/99designs/gqlgen v0.17.49
• github.com/MarvinJWendt/testza v0.5.2
• github.com/Masterminds/semver/v3 v3.2.1
• github.com/Vilsol/slox v0.0.1
• github.com/VirusTotal/vt-go v1.0.1
• github.com/alitto/pond v1.9.1
• github.com/avast/retry-go v3.0.0+incompatible
• github.com/avast/retry-go/v3 v3.1.1
• github.com/aws/aws-sdk-go v1.55.5
• github.com/btcsuite/btcd/btcutil v1.1.6
• github.com/cespare/xxhash v1.1.0
• github.com/chai2010/webp v1.1.1
• github.com/dgraph-io/ristretto v0.1.1
• github.com/exaring/otelpgx v0.6.2
• github.com/felixge/fgprof v0.9.4
• github.com/finnbear/moderation v0.11.4
• github.com/galdor/go-thumbhash v1.0.0
• github.com/go-redis/redis v6.15.9+incompatible
• github.com/golang-migrate/migrate/v4 v4.17.1
• github.com/google/uuid v1.6.0
• github.com/grafana/otel-profiling-go v0.5.1
• github.com/grafana/pyroscope-go v1.1.2
• github.com/graph-gophers/dataloader/v7 v7.1.0
• github.com/jackc/pgx/v5 v5.6.0
• github.com/lab259/go-migration v1.3.1
• github.com/labstack/echo-contrib v0.17.1
• github.com/labstack/echo/v4 v4.12.0
• github.com/lmittmann/tint v1.0.5
• github.com/machinebox/graphql v0.2.2
• github.com/microcosm-cc/bluemonday v1.0.27
• github.com/mitchellh/hashstructure/v2 v2.0.2
• github.com/mitchellh/mapstructure v1.5.0
• github.com/o1egl/paseto v1.0.0
• github.com/pkg/errors v0.9.1
• github.com/ravilushqa/otelgqlgen v0.16.0
• github.com/russross/blackfriday v1.6.0
• github.com/samber/slog-multi v1.2.0
• github.com/sizeofint/gif-to-webp v0.0.0-20210224202734-e9d7ed071591@e9d7ed071591
• github.com/spf13/viper v1.19.0
• github.com/swaggo/echo-swagger v1.4.1
• github.com/swaggo/swag v1.16.3
• github.com/tidbyt/go-libwebp v0.0.0-20230922075150-fb11063b2a6a@fb11063b2a6a
• github.com/vektah/gqlparser/v2 v2.5.16
• github.com/xeipuuv/gojsonschema v1.2.0
• go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho v0.53.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.53.0
• go.opentelemetry.io/otel v1.28.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.28.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.28.0
• go.opentelemetry.io/otel/sdk v1.28.0
• go.opentelemetry.io/otel/trace v1.28.0
• go.temporal.io/api v1.37.0
• go.temporal.io/sdk v1.28.1
• go.temporal.io/sdk/contrib/opentelemetry v0.6.0
• golang.org/x/crypto v0.26.0
• golang.org/x/net v0.28.0
• golang.org/x/oauth2 v0.22.0
• golang.org/x/sync v0.8.0
• google.golang.org/grpc v1.65.0
• google.golang.org/protobuf v1.34.2
• gopkg.in/go-playground/validator.v9 v9.31.0