Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/github-script action to v9
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/metadata-action action to v6
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update ghcr.io/devcontainers/features/node docker tag to v2
• chore(deps): update marocchino/sticky-pull-request-comment action to v3
• chore(deps): update module github.com/golangci/golangci-lint to v2
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package arduino/setup-task), Could not determine new digest for update (github-tags package marocchino/sticky-pull-request-comment).

Files affected: .github/workflows/code-quality.yml, .github/workflows/pr-labels-check.yml, .github/workflows/test.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update github actions (actions/setup-go, actions/setup-node, go, mikepenz/release-changelog-builder-action, ncipollo/release-action)
• chore(deps): update go module directive to v1.26.3
• fix(deps): update go dependencies (github.com/air-verse/air, github.com/goccy/go-json, github.com/gofiber/fiber/v2, github.com/gofiber/template/html/v3, github.com/securego/gosec/v2, github.com/valyala/fasthttp)
• chore(deps): update actions/upload-artifact action to v7
• fix(deps): update module github.com/gofiber/fiber/v2 to v3
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (7)

• mcr.microsoft.com/devcontainers/go 2-bookworm
• ghcr.io/devcontainers/features/docker-in-docker 2
• ghcr.io/devcontainers/features/git 1
• ghcr.io/devcontainers/features/github-cli 1
• ghcr.io/devcontainers/features/node 1 → [Updates: 2]
• ghcr.io/devcontainers/features/python 1
• python 3.14

docker-compose (1)

docker-compose.yml

dockerfile (1)

Dockerfile (2)

• golang 1.26-alpine3.23
• alpine 3.23

github-actions (13)

.github/workflows/clean-ghcr.yml (1)

• dataaxiom/ghcr-cleanup-action v1@cd0cdb900b5dbf3a6f2cc869f0dbb0b8211f50c4

.github/workflows/code-quality.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 → [Updates: v6]
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405
• actions/cache v5
• python 3.14

.github/workflows/codeowners-validator.yml (2)

• actions/checkout v6
• ryan-flan/codeowners-validation v0.4.10

.github/workflows/first-interaction.yml (1)

• actions/first-interaction v3

.github/workflows/label-sync.yml (2)

• actions/checkout v6
• micnncim/action-label-syncer v1

.github/workflows/labeler.yml (1)

• actions/labeler v6

.github/workflows/pr-labels-check.yml (2)

• actions/github-script v8 → [Updates: v9]
• marocchino/sticky-pull-request-comment v2@773744901bac0e8cbb5a0dc842800d45e9b2b405 → [Updates: v3.0.4]

.github/workflows/pre-commit.yml (8)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 → [Updates: v6]
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6]
• actions/cache v5
• go 1.26.0 → [Updates: 1.26.3]
• python 3.14
• node 24

.github/workflows/push.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4]
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4]
• docker/metadata-action v5@c299e40c65443455700f0fdfc63efafe5b349051 → [Updates: v6]
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7]

.github/workflows/release.yml (10)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 → [Updates: v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4]
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4]
• docker/metadata-action v5@c299e40c65443455700f0fdfc63efafe5b349051 → [Updates: v6]
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• mikepenz/release-changelog-builder-action v6@6faf020194b7c8853f9e55c4fd92e40b02122a04 → [Updates: v6]
• ncipollo/release-action v1@b7eabc95ff50cbeeedec83973935c8f306dfcd0b → [Updates: v1]

.github/workflows/size-label.yml (1)

• codelytv/pr-size-labeler v1

.github/workflows/stale.yml (1)

• actions/stale v10

.github/workflows/test.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 → [Updates: v6]
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/upload-artifact v6 → [Updates: v7]
• marocchino/sticky-pull-request-comment v2@773744901bac0e8cbb5a0dc842800d45e9b2b405 → [Updates: v3.0.4]

gomod (1)

go.mod (10)

• go 1.26.0 → [Updates: 1.26.3]
• github.com/goccy/go-json v0.10.5 → [Updates: v0.10.6]
• github.com/gofiber/fiber/v2 v2.52.11 → [Updates: v2.52.13, v3.2.0]
• github.com/gofiber/template/html/v3 v3.0.2 → [Updates: v3.0.3]
• github.com/prometheus/client_golang v1.23.2
• github.com/prometheus/client_model v0.6.2
• github.com/valyala/fasthttp v1.69.0 → [Updates: v1.71.0]
• github.com/air-verse/air v1.64.5 → [Updates: v1.65.1]
• github.com/golangci/golangci-lint v1.64.8 → [Updates: v2.12.2]
• github.com/securego/gosec/v2 v2.23.0 → [Updates: v2.26.1]

---

• Check this box to trigger a request for Renovate to run again on this repository