Renovate(bot) : dependency dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/securego/gosec). ## Abandoned Dependencies The following dependencies have not received updates for an extended period and may be unmaintained. > [!NOTE] Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity. > View abandoned dependencies (13) | Datasource | Package | Last Updated | |------------|------|-------------| | github-actions | [CycloneDX/gh-gomod-generate-sbom](https://redirect.github.com/CycloneDX/gh-gomod-generate-sbom) | `2023-06-05` | | gomod | [github.com/bahlo/generic-list-go](https://redirect.github.com/bahlo/generic-list-go) | `2022-02-08` | | gomod | [github.com/ccojocar/zxcvbn-go](https://redirect.github.com/ccojocar/zxcvbn-go) | `2025-04-08` | | gomod | [github.com/cespare/xxhash/v2](https://redirect.github.com/cespare/xxhash) | `2024-04-04` | | gomod | [github.com/go-logr/stdr](https://redirect.github.com/go-logr/stdr) | `2021-12-15` | | gomod | [github.com/go-task/slim-sprig/v3](https://redirect.github.com/go-task/slim-sprig) | `2023-09-14` | | gomod | [github.com/google/go-cmp](https://redirect.github.com/google/go-cmp) | `2025-02-21` | | gomod | [github.com/google/uuid](https://redirect.github.com/google/uuid) | `2024-01-23` | | gomod | [github.com/gorilla/websocket](https://redirect.github.com/gorilla/websocket) | `2024-06-14` | | gomod | [github.com/tidwall/match](https://redirect.github.com/tidwall/match) | `2025-09-05` | | gomod | [github.com/tidwall/pretty](https://redirect.github.com/tidwall/pretty) | `2022-10-01` | | gomod | [github.com/tidwall/sjson](https://redirect.github.com/tidwall/sjson) | `2022-08-05` | | gomod | [go.opentelemetry.io/auto/sdk](https://redirect.github.com/open-telemetry/opentelemetry-go-instrumentation) | `2025-09-15` | ## Awaiting Schedule The following updates are awaiting their schedule. To get an update now, click on a checkbox below. - [ ] fix(deps): update all dependencies (`babel-standalone`, `cloud.google.com/go/auth`, `cloud.google.com/go/compute/metadata`, `codecov/codecov-action`, `docker/build-push-action`, `docker/setup-buildx-action`, `docker/setup-qemu-action`, `github.com/anthropics/anthropic-sdk-go`, `github.com/google/s2a-go`, `github.com/onsi/ginkgo/v2`, `github.com/onsi/gomega`, `github.com/openai/openai-go/v3`, `github/codeql-action`, `google.golang.org/api`, `google.golang.org/genproto/googleapis/rpc`, `google.golang.org/grpc`) ## Detected Dependencies dockerfile (1)

Dockerfile

github-actions (4)

.github/workflows/action-integration.yml (4) - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `github/codeql-action v4@b96794f015dfd88f77b49b1c93e0fa7110f94c63` → [Updates: `v4`] - `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3` .github/workflows/ci.yml (17) - `actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `golangci/golangci-lint-action v9@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a` - `securego/gosec master` - `actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `ccojocar/barry main` - `github/codeql-action v4@b96794f015dfd88f77b49b1c93e0fa7110f94c63` → [Updates: `v4`] - `actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `codecov/codecov-action v7@fb8b3582c8e4def4969c97caa2f19720cb33a72f` → [Updates: `v7`] - `go 1.27.1` - `go 1.27.1` .github/workflows/release.yml (12) - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e` - `sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6` - `docker/setup-qemu-action v4@1f40c72289eff860ee54a304f1438e3cff362e0a` → [Updates: `v4`] - `docker/setup-buildx-action v4@37fe631027851001ddb9b187196cc803df7f5f0e` → [Updates: `v4`] - `docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f` - `CycloneDX/gh-gomod-generate-sbom v2@efc74245d6802c8cefd925620515442756c70d8f` - `docker/metadata-action v6@dc802804100637a589fabce1cb79ff13a1411302` - `goreleaser/goreleaser-action v7@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94` - `docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a` → [Updates: `v7`] - `go 1.27.1` - `sigstore/cosign v3.1.3` .github/workflows/scan.yml (3) - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `securego/gosec v2.29.0@deb54465fea23d19a77f037e11e6589021f8501d` - `github/codeql-action v4@b96794f015dfd88f77b49b1c93e0fa7110f94c63` → [Updates: `v4`]

gomod (1)

go.mod (58) - `github.com/BurntSushi/toml v1.6.0` - `github.com/anthropics/anthropic-sdk-go v1.72.0` → [Updates: `v1.74.0`] - `github.com/ccojocar/zxcvbn-go v1.0.4` - `github.com/google/uuid v1.6.0` - `github.com/gookit/color v1.6.1` - `github.com/lib/pq v1.12.3` - `github.com/mozilla/tls-observatory v0.0.0-20250923143331-eef96233227e@eef96233227e` - `github.com/onsi/ginkgo/v2 v2.32.2` → [Updates: `v2.33.0`] - `github.com/onsi/gomega v1.43.0` → [Updates: `v1.43.1`] - `github.com/openai/openai-go/v3 v3.61.0` → [Updates: `v3.63.1`] - `github.com/santhosh-tekuri/jsonschema/v6 v6.0.3` - `github.com/stretchr/testify v1.12.1` - `go.yaml.in/yaml/v3 v3.0.5` - `golang.org/x/crypto v0.57.0` - `golang.org/x/sync v0.23.0` - `golang.org/x/text v0.42.0` - `golang.org/x/tools v0.50.0` - `google.golang.org/genai v1.71.0` - `cloud.google.com/go v0.123.0` - `cloud.google.com/go/auth v0.23.2` → [Updates: `v0.23.3`] - `cloud.google.com/go/compute/metadata v0.9.0` → [Updates: `v0.9.1`] - `github.com/Masterminds/semver/v3 v3.5.0` - `github.com/bahlo/generic-list-go v0.2.0` - `github.com/buger/jsonparser v1.6.1` - `github.com/cespare/xxhash/v2 v2.3.0` - `github.com/felixge/httpsnoop v1.1.0` - `github.com/go-logr/logr v1.4.4` - `github.com/go-logr/stdr v1.2.2` - `github.com/go-task/slim-sprig/v3 v3.0.0` - `github.com/google/go-cmp v0.7.0` - `github.com/google/pprof v0.0.0-20260906184651-6331bc6350fe@6331bc6350fe` - `github.com/google/s2a-go v0.1.9` → [Updates: `v0.1.10`] - `github.com/googleapis/enterprise-certificate-proxy v0.3.22` - `github.com/googleapis/gax-go/v2 v2.24.1` - `github.com/gorilla/websocket v1.5.3` - `github.com/invopop/jsonschema v0.14.0` - `github.com/pb33f/ordered-map/v2 v2.3.1` - `github.com/standard-webhooks/standard-webhooks/libraries v0.0.1` - `github.com/stretchr/objx v0.5.3` - `github.com/tidwall/gjson v1.19.0` - `github.com/tidwall/match v1.2.0` - `github.com/tidwall/pretty v1.2.1` - `github.com/tidwall/sjson v1.2.5` - `github.com/xo/terminfo v1.2.0` - `go.opentelemetry.io/auto/sdk v1.2.1` - `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.71.0` - `go.opentelemetry.io/otel v1.46.0` - `go.opentelemetry.io/otel/metric v1.46.0` - `go.opentelemetry.io/otel/trace v1.46.0` - `go.yaml.in/yaml/v4 v4.0.0-rc.6` - `golang.org/x/mod v0.41.0` - `golang.org/x/net v0.59.0` - `golang.org/x/sys v0.48.0` - `google.golang.org/api v0.297.0` → [Updates: `v0.298.0`] - `google.golang.org/genproto/googleapis/rpc v0.0.0-20260911204522-f61a6ca850bd@f61a6ca850bd` → [Updates: `v0.0.0-20260918162117-cecb64721679`] - `google.golang.org/grpc v1.83.2` → [Updates: `v1.84.0`] - `google.golang.org/protobuf v1.36.12` - `go 1.26.0`

html (1)

report/html/template.html (5) - `bulma 1.0.4@sha512-yh2RE0wZCVZeysGiqTwDTO/dKelCbS9bP2L94UvOFtl/FKXcNAje3Y2oBg/ZMZ3LS1sicYk4dYVGtDex75fvvA==` - `highlight.js 11.12.0@sha512-hasIneQUHlh06VNBe7f6ZcHmeRTLIaQWFd43YriJ0UND19bvYRauxthDg8E4eVNPm9bRUhr5JGeqH7FRFXQu5g==` - `highlight.js 11.12.0@sha512-gzqHAlI1hVdzJ4wiQj/MkppDr6zgEdCoBsrXKRidcaZsSPvNQ3Fy5p7PpMt/8mltxTxMHj1Ur5NWbJdqIfpxgA==` - `highlight.js 11.12.0@sha512-BA9llYIpkzm7tOoevj0uNMleYSysUOxNYfCq3JD3q8UBMzd7fTGeZdQfpAOf6JIH+sXeWTk1KfeAhyaDD4k4wQ==` - `babel-standalone 8.0.5@sha512-1re7GFmTFUaOO/5vOLgdrx9zAa+krY4NeOHALPuWOoqLasNYzDVrabPeNLgAvKYQaZWPPGsoTXB5/qGiWN94Cw==` → [Updates: `8.0.6`]

--- - [ ] Check this box to trigger a request for Renovate to run again on this repository