Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update actions/setup-go action to v5.6.0
• Update aquasecurity/trivy-action action to v0.34.1
• Update dependency golang to v1.26.0
• Update module github.com/google/go-containerregistry to v0.21.1
• Update module golang.org/x/net to v0.51.0
• Update actions/cache action to v5
• Update actions/checkout action to v6
• Update actions/setup-go action to v6
• Update golangci/golangci-lint-action action to v9
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package aquasecurity/trivy-action).

Files affected: .github/workflows/security.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update module github.com/mark3labs/mcp-go to v0.44.1
• Update module github.com/modelcontextprotocol/registry to v1.4.1
• Update actions/cache action to v4.3.0
• Update actions/checkout action to v4.3.1
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (5)

.github/workflows/license-headers.yml (2)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.3.0]

.github/workflows/lint.yml (4)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.3.0]
• actions/cache v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684 → [Updates: v4.3.0, v5.0.3]
• golangci/golangci-lint-action v8.0.0@4afd733a84b1f43292c63897423277bb7f4313a9 → [Updates: v9.2.0]

.github/workflows/release.yml (1)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]

.github/workflows/security.yml (4)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• golang/govulncheck-action v1.0.4@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• aquasecurity/trivy-action v0.30.0@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 → [Updates: 0.34.1]

.github/workflows/test.yml (3)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.3.0]
• actions/cache v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684 → [Updates: v4.3.0, v5.0.3]

gomod (1)

go.mod (16)

• go 1.25.7
• github.com/adrg/xdg v0.5.3
• github.com/google/cel-go v0.27.0
• github.com/google/go-containerregistry v0.20.7 → [Updates: v0.21.1]
• github.com/mark3labs/mcp-go v0.44.0 → [Updates: v0.44.1]
• github.com/modelcontextprotocol/registry v1.4.0 → [Updates: v1.4.1]
• github.com/opencontainers/go-digest v1.0.0
• github.com/opencontainers/image-spec v1.1.1
• github.com/sigstore/protobuf-specs v0.5.0
• github.com/sigstore/sigstore-go v1.1.4
• github.com/stretchr/testify v1.11.1
• github.com/xeipuuv/gojsonschema v1.2.0
• go.uber.org/mock v0.6.0
• golang.org/x/net v0.49.0 → [Updates: v0.51.0]
• gopkg.in/yaml.v3 v3.0.1
• oras.land/oras-go/v2 v2.6.0

regex (1)

go.mod (1)

• golang 1.25.7 → [Updates: 1.26.0]

---

• Check this box to trigger a request for Renovate to run again on this repository