Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package arduino/setup-task).

Files affected: .github/workflows/test.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update module github.com/moby/buildkit to v0.29.0

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update actions/setup-go action to v6
• fix(deps): update module github.com/puzpuzpuz/xsync to v4

Detected Dependencies

github-actions (4)

.github/workflows/codeql.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v5@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6]
• github/codeql-action v4@c10b8064de6f491fea524254123dbe5e09572f13
• github/codeql-action v4@c10b8064de6f491fea524254123dbe5e09572f13
• github/codeql-action v4@c10b8064de6f491fea524254123dbe5e09572f13

.github/workflows/releaser.yml (8)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v5@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6]
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003
• goreleaser/goreleaser-action v7@ec59f474b9834571250b370d4735c50f8e2d1e29
• slsa-framework/slsa-github-generator v2.1.0
• slsa-framework/slsa-verifier v2.7.1@ea584f4502babc6f60d9bc799dbbb13c1caa9ee6

.github/workflows/security-scan.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• anchore/scan-action v7.4.0@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2
• github/codeql-action v4@c10b8064de6f491fea524254123dbe5e09572f13

.github/workflows/test.yml (16)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v5@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6]
• arduino/setup-task v1@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v5@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6]
• arduino/setup-task v1@b91d5d2c96a56797b48ac1e0e89220bf64044611
• coverallsapp/github-action v2.3.6@648a8eb78e6d50909eff900e4ec85cab4524a45b
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v5@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6]
• golangci/golangci-lint-action v9@1e7e51e771db61008b38414a730f564565cf7c20
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v5@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6]
• arduino/setup-task v1@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

gomod (1)

go.mod (13)

• go 1.25.7
• github.com/deckarep/golang-set/v2 v2.8.0
• github.com/go-git/go-billy/v5 v5.8.0
• github.com/google/go-containerregistry v0.21.3
• github.com/google/go-github/v84 v84.0.0
• github.com/moby/buildkit v0.28.1 → [Updates: v0.29.0]
• github.com/olekukonko/tablewriter v1.1.4
• github.com/puzpuzpuz/xsync v1.5.2 → [Updates: v4.4.0]
• github.com/spf13/cobra v1.10.2
• github.com/stretchr/testify v1.11.1
• golang.org/x/sync v0.20.0
• gopkg.in/h2non/gock.v1 v1.1.2
• gopkg.in/yaml.v3 v3.0.1

---

• Check this box to trigger a request for Renovate to run again on this repository