Dependency Dashboard

[renovate[bot]]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

---

[!WARNING] Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package github/codeql-action).

Files affected: .github/workflows/scorecard.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• [ ] fix(deps): update module golang.org/x/mod to v0.30.0

Detected dependencies

dockerfile

.devcontainer/Dockerfile

• golang 1.25@sha256:698183780de28062f4ef46f82a79ec0ae69d2d22f7b160cf69f71ea8d98bf25d
• mcr.microsoft.com/vscode/devcontainers/base debian@sha256:36751f1ee2f30745a649afc2b2061f321bacdaa0617159901fe6725b34c93df4

Dockerfile

• golang alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb
• alpine 3.22.2@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412

github-actions

.github/workflows/build.yaml

• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c
• goreleaser/goreleaser-action v6.4.0@e435ccd777264be153ace6237001ef4d979d3a7a
• cloudsmith-io/action v0.6.14@7af394e0f8add4867bce109385962dafecad1b8d
• cloudsmith-io/action v0.6.14@7af394e0f8add4867bce109385962dafecad1b8d
• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2
• docker/setup-qemu-action v3.7.0@c7c53464625b32c7a7e944ae62b3e17d2b600130
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2
• mislav/bump-homebrew-formula-action v3.6@56a283fa15557e9abaa4bdb63b8212abc68e655c

.github/workflows/codeql.yml

• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
• github/codeql-action v4@fdbfb4d2750291e159f0156def62b853c2798ca2
• github/codeql-action v4@fdbfb4d2750291e159f0156def62b853c2798ca2

.github/workflows/dependency-review.yml

• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
• actions/dependency-review-action v4.8.2@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261

.github/workflows/scorecard.yml

• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v5.0.0@330a01c490aca151604b8cf639adc76d48f6c5d4
• github/codeql-action 4.31.5@fdbfb4d2750291e159f0156def62b853c2798ca2

.github/workflows/test.yml

• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c
• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c
• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c
• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c

gomod

go.mod

• go 1.24.0
• go 1.25.4
• github.com/arsham/figurine v1.3.0
• github.com/awalterschulze/gographviz v2.0.3+incompatible
• github.com/briandowns/spinner v1.23.2
• github.com/caarlos0/env/v11 v11.3.1
• github.com/fatih/color v1.18.0
• github.com/hashicorp/copywrite v0.22.0
• github.com/hashicorp/terraform-exec v0.24.0
• github.com/jwalton/go-supportscolor v1.2.0
• github.com/mattn/go-colorable v0.1.14
• github.com/spf13/cobra v1.10.1
• github.com/spf13/pflag v1.0.10
• golang.org/x/mod v0.29.0

---

• [ ] Check this box to trigger a request for Renovate to run again on this repository