Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/checkout action to v5.0.1
• chore(deps): update codecov/codecov-action action to v5.5.4
• fix(deps): update module github.com/spf13/cobra to v1.10.2
• chore(deps): update actions/setup-go action to v6.4.0
• chore(deps): update docker/setup-buildx-action action to v3.12.0
• chore(deps): update docker/setup-qemu-action action to v3.7.0
• chore(deps): update ghcr.io/charmbracelet/vhs docker tag to v0.11.0
• fix(deps): update module github.com/protonmail/gopenpgp/v3 to v3.4.0
• chore(deps): update actions/checkout action to v6
• chore(deps): update codecov/codecov-action action to v6
• chore(deps): update crazy-max/ghaction-upx action to v4
• chore(deps): update dependency node to v24
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update docker/setup-qemu-action action to v4
• chore(deps): update golangci/golangci-lint-action action to v9
• chore(deps): update goreleaser/goreleaser-action action to v7
• fix(deps): update module github.com/ccoveille/go-safecast to v2
• fix(deps): update module github.com/charmbracelet/lipgloss to v2
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package arduino/setup-task).

Files affected: .github/workflows/build.yml, .github/workflows/release.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update sigstore/cosign-installer action to v3.10.1
• chore(deps): update actions/dependency-review-action action to v4.9.0
• chore(deps): update anchore/sbom-action action to v0.24.0
• chore(deps): update docker/login-action action to v3.7.0
• fix(deps): update module github.com/caarlos0/log to v0.6.0
• fix(deps): update module github.com/ccoveille/go-safecast to v1.8.2
• fix(deps): update module golang.org/x/term to v0.42.0
• chore(deps): update actions/setup-node action to v6
• chore(deps): update github/codeql-action action to v4
• chore(deps): update sigstore/cosign-installer action to v4
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update module github.com/tmuniversal/papercrypt to v1.4.0
• fix(deps): update module github.com/tmuniversal/papercrypt to v2

Detected Dependencies

dockerfile (1)

vhs.Dockerfile (1)

• ghcr.io/charmbracelet/vhs v0.10.0 → [Updates: v0.11.0]

github-actions (5)

.github/workflows/build.yml (12)

• caarlos0/meta main
• caarlos0/meta main
• caarlos0/meta main
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.2]
• arduino/setup-task 2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392 → [Updates: v3.7.0, v4.0.0]
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435 → [Updates: v3.12.0, v4.0.0]
• crazy-max/ghaction-upx v3.2.0@db8cc9515a4a7ea1b312cb82fbeae6d716daf777 → [Updates: v4.0.0]
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6.4.0]
• sigstore/cosign-installer v3.10.0@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 → [Updates: v3.10.1, v4.1.1]
• anchore/sbom-action v0.20.6@f8bdd1d8ac5e901a77a92f111440fdb1b593736b → [Updates: v0.24.0]
• codecov/codecov-action v5.5.1@5a1091511ad55cbe89839c7260b706298ca349f7 → [Updates: v5.5.4, v6.0.0]

.github/workflows/codeql.yml (5)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.2]
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6.4.0]
• github/codeql-action v3 → [Updates: v4]
• github/codeql-action v3 → [Updates: v4]
• github/codeql-action v3 → [Updates: v4]

.github/workflows/depsreview.yaml (2)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.2]
• actions/dependency-review-action v4.8.0@56339e523c0409420f6c2c9a2f4292bbb3c07dd3 → [Updates: v4.9.0]

.github/workflows/lint.yml (3)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.2]
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6.4.0]
• golangci/golangci-lint-action v8.0.0@4afd733a84b1f43292c63897423277bb7f4313a9 → [Updates: v9.2.0]

.github/workflows/release.yml (23)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.2]
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6.4.0]
• arduino/setup-task 2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• goreleaser/goreleaser-action v6.4.0@e435ccd777264be153ace6237001ef4d979d3a7a → [Updates: v7.0.0]
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.2]
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6.4.0]
• arduino/setup-task 2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.2]
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6.4.0]
• golangci/golangci-lint-action v8.0.0@4afd733a84b1f43292c63897423277bb7f4313a9 → [Updates: v9.2.0]
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.2]
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6.4.0]
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444 → [Updates: v6.3.0]
• sigstore/cosign-installer v3.10.0@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 → [Updates: v3.10.1, v4.1.1]
• crazy-max/ghaction-upx v3.2.0@db8cc9515a4a7ea1b312cb82fbeae6d716daf777 → [Updates: v4.0.0]
• arduino/setup-task 2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• goreleaser/goreleaser-action v6.4.0@e435ccd777264be153ace6237001ef4d979d3a7a → [Updates: v7.0.0]
• anchore/sbom-action v0.20.6@f8bdd1d8ac5e901a77a92f111440fdb1b593736b → [Updates: v0.24.0]
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392 → [Updates: v3.7.0, v4.0.0]
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435 → [Updates: v3.12.0, v4.0.0]
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1 → [Updates: v3.7.0, v4.1.0]
• ubuntu 24.04
• node 22 → [Updates: 24]

gomod (1)

go.mod (17)

• go 1.24.6
• github.com/ProtonMail/gopenpgp/v3 v3.3.0 → [Updates: v3.4.0]
• github.com/boombuler/barcode v1.1.0
• github.com/caarlos0/go-version v0.2.2
• github.com/caarlos0/log v0.5.1 → [Updates: v0.6.0]
• github.com/ccoveille/go-safecast v1.6.1 → [Updates: v1.8.2, v2.0.0]
• github.com/charmbracelet/lipgloss v1.1.0 → [Updates: v2.0.2]
• github.com/jung-kurt/gofpdf/v2 v2.17.3
• github.com/makiuchi-d/gozxing v0.1.1
• github.com/manifoldco/promptui v0.9.0
• github.com/muesli/mango-cobra v1.3.0
• github.com/muesli/roff v0.1.0
• github.com/muesli/termenv v0.16.0
• github.com/spf13/cobra v1.10.1 → [Updates: v1.10.2]
• github.com/stretchr/testify v1.11.1
• github.com/tmuniversal/papercrypt v1.3.0 → [Updates: v1.4.0, v2.0.3]
• golang.org/x/term v0.35.0 → [Updates: v0.42.0]

---

• Check this box to trigger a request for Renovate to run again on this repository