Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

These branches will be created by Renovate only once you click their checkbox below.

• chore(deps): update codecov/codecov-action action to v5
• chore(deps): update golangci/golangci-lint-action action to v6
• chore(deps): update goreleaser/goreleaser-action action to v6
• chore(deps): update peter-evans/create-pull-request action to v7
• chore(deps): update pre-commit hook commitizen-tools/commitizen to v4
• chore(deps): update pre-commit hook pre-commit/pre-commit-hooks to v5
• 🔐 Create all pending approval PRs at once 🔐

Pending Status Checks

These updates await pending status checks. To force their creation now, click the checkbox below.

• chore(deps): update anchore/sbom-action action to v0.17.9

Detected dependencies

dockerfile

Dockerfile

• golang 1.23@sha256:70031844b8c225351d0bb63e2c383f80db85d92ba894e3da7e13bcf80efa9a37
• cgr.dev/chainguard/static latest@sha256:211178c05cff513767ad12d2bcce7e641e2772865ddbea0e7394afa12725d50a

Dockerfile.goreleaser

• cgr.dev/chainguard/static latest@sha256:211178c05cff513767ad12d2bcce7e641e2772865ddbea0e7394afa12725d50a

github-actions

.github/workflows/ci.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• arduino/setup-task v1
• actions/setup-go v5@3041bf56c941b39c61721a86cd11f3bb1338122a
• codecov/codecov-action v3@ab904c41d6ece82784817410c45d8b8c02684457
• goreleaser/goreleaser-action v5@5742e2a039330cbb23ebf35f046f814d4c6ff811
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5@3041bf56c941b39c61721a86cd11f3bb1338122a
• golangci/golangci-lint-action v3@3a919529898de77ec3da873e3063ca4b10e7f5cc
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5@3041bf56c941b39c61721a86cd11f3bb1338122a

.github/workflows/depsreview.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/dependency-review-action v4@3b139cfc5fae8b618d3eae3675e383bb1769c019

.github/workflows/gitleaks.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gitleaks/gitleaks-action v2@83373cf2f8c4db6e24b41c1a9b086bb9619e9cd3

.github/workflows/milestone.yml

• actions/github-script v7@60a0d83039c74a4aee543508d2ffcb1c3799cdea

.github/workflows/oss-licenses.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5@3041bf56c941b39c61721a86cd11f3bb1338122a
• actions/create-github-app-token v1@5d869da34e18e7287c1daad50e0b8ea0f506ce69
• peter-evans/create-pull-request v5.0.3@4e1beaa7521e8b457b572c090b25bd3db56bf1c5

.github/workflows/release.yml

• actions/create-github-app-token v1@5d869da34e18e7287c1daad50e0b8ea0f506ce69
• google-github-actions/release-please-action v4@e4dc86ba9405554aeba3c6bb2d169500e7d3b4ee
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5@3041bf56c941b39c61721a86cd11f3bb1338122a
• docker/setup-buildx-action v3@c47758b77c9736f4b2ef4073d4d51994fabfe349
• anchore/sbom-action v0.17.8@55dc4ee22412511ee8c3142cbea40418e6cec693
• sigstore/cosign-installer v3@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
• docker/login-action v3@9780b0c442fbb1117ed29e0efdff1e18412f7567
• goreleaser/goreleaser-action v5@5742e2a039330cbb23ebf35f046f814d4c6ff811

.github/workflows/toc.yml

• actions/create-github-app-token v1@5d869da34e18e7287c1daad50e0b8ea0f506ce69
• technote-space/toc-generator v4@9e238e7974de5fcf7b17b7acc54c896160dda0a3

gomod

go.mod

• go 1.23.1
• github.com/atotto/clipboard v0.1.4
• github.com/jarcoal/httpmock v1.3.1
• github.com/muesli/mango-cobra v1.2.0
• github.com/muesli/roff v0.1.0
• github.com/sashabaranov/go-openai v1.36.0
• github.com/spf13/cobra v1.8.1
• github.com/spf13/viper v1.19.0
• github.com/stretchr/testify v1.10.0
• gopkg.in/yaml.v3 v3.0.1

pre-commit

.pre-commit-config.yaml

• pre-commit/pre-commit-hooks v4.6.0
• gitleaks/gitleaks v8.21.2
• commitizen-tools/commitizen v3.31.0
• igorshubovych/markdownlint-cli v0.43.0
• python-jsonschema/check-jsonschema 0.30.0

---

• Check this box to trigger a request for Renovate to run again on this repository