Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/github-script action to v9
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/metadata-action action to v6
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update marocchino/sticky-pull-request-comment action to v3
• chore(deps): update module github.com/golangci/golangci-lint to v2
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package arduino/setup-task), Could not determine new digest for update (github-tags package marocchino/sticky-pull-request-comment).

Files affected: .github/workflows/code-quality.yml, .github/workflows/pr-labels-check.yml, .github/workflows/test.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update github actions (actions/setup-go, actions/setup-node, go, mikepenz/release-changelog-builder-action, ncipollo/release-action)
• chore(deps): update dependency go to v1.26.2
• fix(deps): update go dependencies (github.com/air-verse/air, github.com/goccy/go-json, github.com/gofiber/fiber/v2, github.com/gofiber/template/html/v3, github.com/securego/gosec/v2, github.com/valyala/fasthttp)
• chore(deps): update actions/upload-artifact action to v7
• fix(deps): update module github.com/gofiber/fiber/v2 to v3
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (7)

• mcr.microsoft.com/devcontainers/go 2-bookworm
• ghcr.io/devcontainers/features/docker-in-docker 2
• ghcr.io/devcontainers/features/git 1
• ghcr.io/devcontainers/features/github-cli 1
• ghcr.io/devcontainers/features/node 1
• ghcr.io/devcontainers/features/python 1
• python 3.14

docker-compose (1)

docker-compose.yml

dockerfile (1)

Dockerfile (2)

• golang 1.26-alpine3.23
• alpine 3.23

github-actions (13)

.github/workflows/clean-ghcr.yml (1)

• dataaxiom/ghcr-cleanup-action v1@cd0cdb900b5dbf3a6f2cc869f0dbb0b8211f50c4

.github/workflows/code-quality.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 → [Updates: v6]
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405
• actions/cache v5
• python 3.14

.github/workflows/codeowners-validator.yml (2)

• actions/checkout v6
• ryan-flan/codeowners-validation v0.4.10

.github/workflows/first-interaction.yml (1)

• actions/first-interaction v3

.github/workflows/label-sync.yml (2)

• actions/checkout v6
• micnncim/action-label-syncer v1

.github/workflows/labeler.yml (1)

• actions/labeler v6

.github/workflows/pr-labels-check.yml (2)

• actions/github-script v8 → [Updates: v9]
• marocchino/sticky-pull-request-comment v2@773744901bac0e8cbb5a0dc842800d45e9b2b405 → [Updates: v3.0.4]

.github/workflows/pre-commit.yml (8)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 → [Updates: v6]
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6]
• actions/cache v5
• go 1.26.0 → [Updates: 1.26.2]
• python 3.14
• node 24

.github/workflows/push.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4]
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4]
• docker/metadata-action v5@c299e40c65443455700f0fdfc63efafe5b349051 → [Updates: v6]
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7]

.github/workflows/release.yml (10)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 → [Updates: v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4]
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4]
• docker/metadata-action v5@c299e40c65443455700f0fdfc63efafe5b349051 → [Updates: v6]
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• mikepenz/release-changelog-builder-action v6@6faf020194b7c8853f9e55c4fd92e40b02122a04 → [Updates: v6]
• ncipollo/release-action v1@b7eabc95ff50cbeeedec83973935c8f306dfcd0b → [Updates: v1]

.github/workflows/size-label.yml (1)

• codelytv/pr-size-labeler v1

.github/workflows/stale.yml (1)

• actions/stale v10

.github/workflows/test.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 → [Updates: v6]
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/upload-artifact v6 → [Updates: v7]
• marocchino/sticky-pull-request-comment v2@773744901bac0e8cbb5a0dc842800d45e9b2b405 → [Updates: v3.0.4]

gomod (1)

go.mod (10)

• go 1.26.0 → [Updates: 1.26.2]
• github.com/goccy/go-json v0.10.5 → [Updates: v0.10.6]
• github.com/gofiber/fiber/v2 v2.52.11 → [Updates: v2.52.12, v3.1.0]
• github.com/gofiber/template/html/v3 v3.0.2 → [Updates: v3.0.3]
• github.com/prometheus/client_golang v1.23.2
• github.com/prometheus/client_model v0.6.2
• github.com/valyala/fasthttp v1.69.0 → [Updates: v1.70.0]
• github.com/air-verse/air v1.64.5 → [Updates: v1.65.1]
• github.com/golangci/golangci-lint v1.64.8 → [Updates: v2.11.4]
• github.com/securego/gosec/v2 v2.23.0 → [Updates: v2.25.0]

---

• Check this box to trigger a request for Renovate to run again on this repository