Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (1)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/oklog/run	2025-06-27

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• build(deps): update module github.com/cenkalti/backoff/v4 to v7
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-go action to v7
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): update goreleaser/goreleaser-action action to v7
• chore(deps): update quay.io/containers/podman docker tag to v5
• chore(deps): update sigstore/cosign-installer action to v4
• 🔐 Create all pending approval PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• build(deps): update module github.com/prometheus/client_golang to v1.24.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/checkout action to v6.1.0

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• docker.io/busybox 1.38.0@sha256:b6762ddf4a50aabb5f4d21aa6f447d05d5633fb09f09c08b33f22356a2f98be0 → [Updates: 1.38.0]
• docker.io/alpine 3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b

github-actions (2)

.github/workflows/container.yml (10)

• fkirc/skip-duplicate-actions v5.3.2@b974a9395958c231af965b70070979a577efa578
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• goreleaser/goreleaser-action v6.4.0@e435ccd777264be153ace6237001ef4d979d3a7a → [Updates: v7.2.3]
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/download-artifact v4.3.0@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8.0.1]
• sigstore/cosign-installer v3.10.1@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 → [Updates: v4.1.2]
• imjasonh/setup-crane v0.4@31b88efe9de28ae0ffa220711af4b60be9435f6e
• quay.io/containers/podman v4.9.4 → [Updates: v5.8.2]

.github/workflows/go-lint.yml (4)

• fkirc/skip-duplicate-actions v5.3.2@b974a9395958c231af965b70070979a577efa578
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• golangci/golangci-lint-action v9.3.0@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a

gomod (1)

go.mod (12)

• go 1.25.0
• go 1.26.5
• buf.build/gen/go/parca-dev/parca/connectrpc/go v1.20.0-20260523035409-ca8a9e862107.1@ca8a9e862107
• buf.build/gen/go/parca-dev/parca/protocolbuffers/go v1.36.11-20260523035409-ca8a9e862107.1@ca8a9e862107
• connectrpc.com/connect v1.20.0
• github.com/cenkalti/backoff/v4 v4.3.0 → [Updates: v7.0.0]
• github.com/hashicorp/vault/api v1.23.0
• github.com/hashicorp/vault/api/auth/kubernetes v0.12.0
• github.com/oklog/run v1.2.0
• github.com/prometheus/client_golang v1.23.2 → [Updates: v1.24.0]
• golang.org/x/sync v0.22.0
• google.golang.org/protobuf v1.36.11

regex (1)

.github/workflows/go-lint.yml (1)

• github.com/golangci/golangci-lint v2.12.2

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository