Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (5)

Datasource	Package	Last Updated
gomod	github.com/google/go-cmp	2025-02-21
gomod	github.com/opencontainers/go-digest	2020-05-14
gomod	github.com/opencontainers/image-spec	2025-03-03
gomod	github.com/spf13/pflag	2025-09-02

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update dependency anthropics/claude-code to v2.1.263

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update ghcr.io/bare-devcontainer/golang:1.27-trixie docker digest to 58f0ba3
• chore(deps): update golang:1.27.1-trixie docker digest to 433790e
• chore(deps): update ghcr.io/bare-devcontainer/features/claude-code docker tag to v1.1.1
• chore(deps): update module github.com/docker/cli to v29.8.1+incompatible
• chore(deps): update docker/build-push-action action to v7.4.0
• chore(deps): update docker/setup-buildx-action action to v4.4.1
• chore(deps): update docker/setup-qemu-action action to v4.4.0
• chore(deps): update github/codeql-action action to v4.38.1
• chore(deps): update module github.com/gohugoio/hugo to v0.166.0
• chore(deps): update module golang.org/x/term to v0.46.0

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (2)

• ghcr.io/bare-devcontainer/golang 1.27-trixie@sha256:7a34090cd9cba9ed877f5447fe0bba073eabf9c160f5f32e8d27fe1d3232f2a0 → [Updates: 1.27-trixie]
• ghcr.io/bare-devcontainer/features/claude-code 1.1.0 → [Updates: 1.1.1]

dockerfile (1)

Dockerfile (2)

• docker/dockerfile 1@sha256:ecfaec9ed6d810b56388c508f4121597bfbba70d41a6dfeee4d8cad5f295fc32
• golang 1.27.1-trixie@sha256:9baa6b4187bbb98d240372a8a235ac0bb6b5ddd52bba1431dc2f7c0705862728 → [Updates: 1.27.1-trixie]

github-actions (6)

.github/workflows/attest-check.yml (1)

• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6

.github/workflows/ci.yml (14)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-qemu-action v4.3.0@1f40c72289eff860ee54a304f1438e3cff362e0a → [Updates: v4.4.0]
• docker/setup-buildx-action v4.3.0@37fe631027851001ddb9b187196cc803df7f5f0e → [Updates: v4.4.1]
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a → [Updates: v7.4.0]

.github/workflows/codeql.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.1]
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.1]

.github/workflows/pages.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/upload-pages-artifact v5.0.0@fc324d3547104276b827a68afc52ff2a11cc49c9
• actions/deploy-pages v5.0.1@368f82528645a54fb793d4d04e342629a3f51346

.github/workflows/release.yml (20)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/attest v4.2.2@1e69f48acb82d1966a394da916b4c1698aa569d6
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-qemu-action v4.3.0@1f40c72289eff860ee54a304f1438e3cff362e0a → [Updates: v4.4.0]
• docker/setup-buildx-action v4.3.0@37fe631027851001ddb9b187196cc803df7f5f0e → [Updates: v4.4.1]
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a → [Updates: v7.4.0]
• actions/attest v4.2.2@1e69f48acb82d1966a394da916b4c1698aa569d6
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

.github/workflows/sarif-upload-check.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.1]

gomod (2)

cmd/dockerflagsgen/go.mod (4)

• go 1.27.1
• github.com/docker/cli v29.8.0+incompatible → [Updates: v29.8.1+incompatible]
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10

go.mod (13)

• go 1.27.1
• github.com/compose-spec/compose-go/v2 v2.15.0
• github.com/google/go-cmp v0.7.0
• github.com/moby/buildkit v0.33.0
• github.com/olareg/olareg v0.2.2
• github.com/opencontainers/go-digest v1.0.0
• github.com/opencontainers/image-spec v1.1.1
• github.com/spf13/pflag v1.0.10
• github.com/tailscale/hujson v0.0.0-20260727124030-b80ff77dac4f@b80ff77dac4f
• golang.org/x/sys v0.48.0
• golang.org/x/term v0.45.0 → [Updates: v0.46.0]
• oras.land/oras-go/v2 v2.6.2
• github.com/gohugoio/hugo v0.165.0 → [Updates: v0.166.0]

regex (2)

.devcontainer/devcontainer.json (3)

• anthropics/claude-code 2.1.259 → [Updates: 2.1.263]
• editorconfig/editorconfig-vscode 0.18.2
• golang/vscode-go 0.56.1

Makefile (1)

• golangci/golangci-lint v2.13.2

---

• Check this box to trigger a request for Renovate to run again on this repository