Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/checkout action to v5.0.1
• chore(deps): update codecov/codecov-action action to v5.5.2
• fix(deps): update module github.com/spf13/cobra to v1.10.2
• chore(deps): update actions/setup-go action to v6.1.0
• chore(deps): update docker/setup-buildx-action action to v3.12.0
• chore(deps): update docker/setup-qemu-action action to v3.7.0
• chore(deps): update actions/checkout action to v6
• chore(deps): update dependency node to v24
• chore(deps): update golangci/golangci-lint-action action to v9
• fix(deps): update module github.com/ccoveille/go-safecast to v2
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package arduino/setup-task).

Files affected: .github/workflows/build.yml, .github/workflows/release.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/dependency-review-action action to v4.8.2
• chore(deps): update sigstore/cosign-installer action to v3.10.1
• fix(deps): update module github.com/caarlos0/log to v0.5.4
• chore(deps): update anchore/sbom-action action to v0.21.0
• chore(deps): update docker/login-action action to v3.6.0
• fix(deps): update module github.com/ccoveille/go-safecast to v1.8.2
• fix(deps): update module golang.org/x/term to v0.38.0
• chore(deps): update actions/setup-node action to v6
• chore(deps): update github/codeql-action action to v4
• chore(deps): update sigstore/cosign-installer action to v4
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update module github.com/tmuniversal/papercrypt to v1.4.0
• fix(deps): update module github.com/tmuniversal/papercrypt to v2

Detected Dependencies

dockerfile (1)

vhs.Dockerfile (1)

• ghcr.io/charmbracelet/vhs v0.10.0

github-actions (5)

.github/workflows/build.yml (9)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• arduino/setup-task 2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• crazy-max/ghaction-upx v3.2.0@db8cc9515a4a7ea1b312cb82fbeae6d716daf777
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00
• sigstore/cosign-installer v3.10.0@d7543c93d881b35a8faa02e8e3605f69b7a1ce62
• anchore/sbom-action v0.20.6@f8bdd1d8ac5e901a77a92f111440fdb1b593736b
• codecov/codecov-action v5.5.1@5a1091511ad55cbe89839c7260b706298ca349f7

.github/workflows/codeql.yml (5)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00
• github/codeql-action v3
• github/codeql-action v3
• github/codeql-action v3

.github/workflows/depsreview.yaml (2)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/dependency-review-action v4.8.0@56339e523c0409420f6c2c9a2f4292bbb3c07dd3

.github/workflows/lint.yml (3)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00
• golangci/golangci-lint-action v8.0.0@4afd733a84b1f43292c63897423277bb7f4313a9

.github/workflows/release.yml (23)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00
• arduino/setup-task 2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• goreleaser/goreleaser-action v6.4.0@e435ccd777264be153ace6237001ef4d979d3a7a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00
• arduino/setup-task 2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00
• golangci/golangci-lint-action v8.0.0@4afd733a84b1f43292c63897423277bb7f4313a9
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• sigstore/cosign-installer v3.10.0@d7543c93d881b35a8faa02e8e3605f69b7a1ce62
• crazy-max/ghaction-upx v3.2.0@db8cc9515a4a7ea1b312cb82fbeae6d716daf777
• arduino/setup-task 2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• goreleaser/goreleaser-action v6.4.0@e435ccd777264be153ace6237001ef4d979d3a7a
• anchore/sbom-action v0.20.6@f8bdd1d8ac5e901a77a92f111440fdb1b593736b
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1
• ubuntu 24.04
• node 22

gomod (1)

go.mod (17)

• go 1.24.6
• github.com/ProtonMail/gopenpgp/v3 v3.3.0
• github.com/boombuler/barcode v1.1.0
• github.com/caarlos0/go-version v0.2.2
• github.com/caarlos0/log v0.5.1
• github.com/ccoveille/go-safecast v1.6.1
• github.com/charmbracelet/lipgloss v1.1.0
• github.com/jung-kurt/gofpdf/v2 v2.17.3
• github.com/makiuchi-d/gozxing v0.1.1
• github.com/manifoldco/promptui v0.9.0
• github.com/muesli/mango-cobra v1.3.0
• github.com/muesli/roff v0.1.0
• github.com/muesli/termenv v0.16.0
• github.com/spf13/cobra v1.10.1
• github.com/stretchr/testify v1.11.1
• github.com/tmuniversal/papercrypt v1.3.0
• golang.org/x/term v0.35.0

---

• Check this box to trigger a request for Renovate to run again on this repository