Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (4)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/containerd/errdefs	2024-11-03
gomod	github.com/kballard/go-shellquote	2018-04-28
gomod	github.com/spf13/pflag	2025-09-02
gomod	gopkg.in/yaml.v3	2022-05-27

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update module golang.org/x/crypto to v0.56.0 [security]
• fix(deps): update bump-dependencies (charm.land/bubbles/v2, drupal, golangci/golangci-lint, libops/.github, traefik)
• [skip-release] Update actions/setup-go action to v7
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

5/15 CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/crypto

• GO-2026-5932

github.com/docker/docker

• GHSA-6hwg-w5jg-9c6x
• GHSA-j249-ghv5-7mxv
• GHSA-pxq6-2prw-chj9
• GHSA-qrqr-3x5j-2xw9
• GO-2026-4883
• GO-2026-4887
• GO-2026-5617
• GO-2026-5668
• GO-2026-5746

Detected Dependencies

docker-compose (8)

pkg/component/testdata/fixtures/compose-preserve-input.yml (2)

• app unknown version
• db unknown version

pkg/healthcheck/testdata/traefik/local-port/docker-compose.override.yml

pkg/healthcheck/testdata/traefik/local-port/docker-compose.yml (2)

• drupal latest@sha256:369ec2a0bb23e1d6b4a378fbe15e36b52def0bb145c1821b8b33e28c3ec1b490 → [Updates: latest]
• traefik v3@sha256:5203c3f39ca70de6790d964624e042463ffbd57715bc82be155cf224c0dd5144 → [Updates: v3]

pkg/healthcheck/testdata/traefik/pathless/docker-compose.yml (2)

• archivesspace latest
• traefik v3@sha256:5203c3f39ca70de6790d964624e042463ffbd57715bc82be155cf224c0dd5144 → [Updates: v3]

pkg/healthcheck/testdata/traefik/tls/docker-compose.yml (2)

• drupal latest@sha256:369ec2a0bb23e1d6b4a378fbe15e36b52def0bb145c1821b8b33e28c3ec1b490 → [Updates: latest]
• traefik v3@sha256:5203c3f39ca70de6790d964624e042463ffbd57715bc82be155cf224c0dd5144 → [Updates: v3]

pkg/services/memcached/docker-compose.yml (1)

• memcached 1.6-alpine@sha256:c29847751abb41f4c268c84fb3087fee05d4edcbda44409ccb5086e26148e8a7

pkg/services/traefik/testdata/bot_mitigation/docker-compose-isle.yml (1)

• drupal sha256:369ec2a0bb23e1d6b4a378fbe15e36b52def0bb145c1821b8b33e28c3ec1b490 → [Updates: undefined]

pkg/services/traefik/testdata/bot_mitigation/docker-compose-sequence.yml (2)

• traefik v3@sha256:5203c3f39ca70de6790d964624e042463ffbd57715bc82be155cf224c0dd5144 → [Updates: v3]
• ojs unknown version

github-actions (3)

.github/workflows/github-release.yaml (1)

• libops/actions main@ef667db8c16533a257d841e75df5c3388152b2d7

.github/workflows/goreleaser.yaml (1)

• libops/.github main@7277eacc89fca014481b2ca66039f4176509bcfc → [Updates: main]

.github/workflows/lint-test.yaml (6)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• golangci/golangci-lint-action v9@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• ubuntu 24.04
• go 1.27.x
• golangci/golangci-lint v2.13.0 → [Updates: v2.13.2]

gomod (1)

go.mod (21)

• go 1.26.1
• charm.land/bubbles/v2 v2.1.1 → [Updates: v2.2.1]
• charm.land/bubbletea/v2 v2.0.9
• charm.land/fang/v2 v2.0.1
• charm.land/glamour/v2 v2.0.1
• charm.land/lipgloss/v2 v2.0.6
• github.com/docker/go-connections v0.8.1
• github.com/joho/godotenv v1.5.1
• github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51@95032a82bc51
• github.com/lrstanley/bubblezone/v2 v2.0.0
• github.com/mikefarah/yq/v4 v4.53.6
• github.com/pkg/sftp v1.13.11
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• golang.org/x/crypto v0.55.0 → [Updates: v0.56.0]
• golang.org/x/sys v0.47.0
• golang.org/x/term v0.45.0
• google.golang.org/protobuf v1.36.12
• gopkg.in/yaml.v3 v3.0.1
• github.com/containerd/errdefs v1.0.0
• github.com/docker/docker v28.5.2+incompatible

renovate-config (1)

renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository