Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update google.golang.org/genproto/googleapis/api digest to 2f722ef
• fix(deps): update module github.com/cockroachdb/cockroach-go/v2 to v2.4.3
• fix(deps): update module github.com/spf13/cobra to v1.10.2
• fix(deps): update module go.uber.org/zap to v1.27.1
• fix(deps): update module google.golang.org/protobuf to v1.36.11
• chore(deps): update module golang.org/x/tools to v0.42.0
• fix(deps): update go opentelemetry packages and libraries to v1.40.0 (go.opentelemetry.io/otel, go.opentelemetry.io/otel/trace)
• fix(deps): update module github.com/google/cel-go to v0.27.0
• fix(deps): update module github.com/labstack/echo-jwt/v4 to v4.4.0
• fix(deps): update module github.com/labstack/echo/v4 to v4.15.1
• fix(deps): update module github.com/lib/pq to v1.11.2
• fix(deps): update module github.com/micahparks/keyfunc/v3 to v3.8.0
• fix(deps): update module github.com/pressly/goose/v3 to v3.27.0
• chore(deps): update cockroachdb/cockroach docker tag to v26
• chore(deps): update goreleaser/goreleaser-action action to v7
• fix(deps): update module github.com/labstack/echo-jwt/v4 to v5
• fix(deps): update module github.com/labstack/echo/v4 to v5
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package github.com/oapi-codegen/echo-middleware.

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/checkout digest to 93cb6ef
• chore(deps): update actions/setup-go digest to 7a3fe6c
• chore(deps): update codecov/codecov-action digest to 671740a
• chore(deps): update github/codeql-action digest to 89a39a4
• chore(deps): update cockroachdb/cockroach docker tag to v25.4.5
• chore(deps): update github/codeql-action action to v4.32.4
• chore(deps): update golangci/golangci-lint-action action to v9.2.0
• chore(deps): update helm release common to v2.36.0
• chore(deps): update jaegertracing/all-in-one docker tag to v1.76.0
• chore(deps): update actions/checkout action to v6
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update module github.com/go-jose/go-jose/v3 to v4

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (1)

• ghcr.io/devcontainers/features/sshd 1

docker-compose (1)

.devcontainer/docker-compose.yml (2)

• cockroachdb/cockroach v25.2.0 → [Updates: v25.4.5, v26.1.0]
• jaegertracing/all-in-one 1.74.0 → [Updates: 1.76.0]

dockerfile (2)

.devcontainer/Dockerfile (1)

• mcr.microsoft.com/vscode/devcontainers/go 1-1.23-bullseye

Dockerfile

github-actions (6)

.github/workflows/codacy.yml (3)

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• codacy/codacy-analysis-cli-action v4.4.7@562ee3e92b8e92df8b67e0a5ff8aa8e261919c08
• github/codeql-action v4.31.3@014f16e7ab1402f30e7c3329d33797e7948572db → [Updates: v4.32.4]

.github/workflows/codeql.yml (4)

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• github/codeql-action v4@014f16e7ab1402f30e7c3329d33797e7948572db → [Updates: v4]
• github/codeql-action v4@014f16e7ab1402f30e7c3329d33797e7948572db → [Updates: v4]
• github/codeql-action v4@014f16e7ab1402f30e7c3329d33797e7948572db → [Updates: v4]

.github/workflows/image-main-test.yml (4)

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6]
• docker/setup-qemu-action v3@c7c53464625b32c7a7e944ae62b3e17d2b600130
• goreleaser/goreleaser-action v6@e435ccd777264be153ace6237001ef4d979d3a7a → [Updates: v7]

.github/workflows/release-please.yaml (1)

• googleapis/release-please-action v4@16a9c90856f42705d54a6fda1823352bdc62cf38

.github/workflows/release.yml (6)

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• docker/setup-qemu-action v3@c7c53464625b32c7a7e944ae62b3e17d2b600130
• actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6]
• goreleaser/goreleaser-action v6@e435ccd777264be153ace6237001ef4d979d3a7a → [Updates: v7]
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• stefanprodan/helm-gh-pages master

.github/workflows/test.yml (8)

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6]
• golangci/golangci-lint-action v9.0.0@0a35821d5c230e903fcfe077583637dea1b27b47 → [Updates: v9.2.0]
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6]
• codecov/codecov-action v5@5a1091511ad55cbe89839c7260b706298ca349f7 → [Updates: v5]

gomod (1)

go.mod (29)

• go 1.25.4
• github.com/MicahParks/keyfunc/v3 v3.7.0 → [Updates: v3.8.0]
• github.com/cockroachdb/cockroach-go/v2 v2.4.2 → [Updates: v2.4.3]
• github.com/getkin/kin-openapi v0.133.0
• github.com/go-jose/go-jose/v3 v3.0.4 → [Updates: v4.1.3]
• github.com/google/cel-go v0.26.1 → [Updates: v0.27.0]
• github.com/labstack/echo-jwt/v4 v4.3.1 → [Updates: v4.4.0, v5.0.1]
• github.com/labstack/echo/v4 v4.13.4 → [Updates: v4.15.1, v5.0.4]
• github.com/lib/pq v1.10.9 → [Updates: v1.11.2]
• github.com/metal-toolbox/auditevent v0.9.0
• github.com/oapi-codegen/echo-middleware v1.0.2
• github.com/oapi-codegen/runtime v1.1.2
• github.com/ory/fosite v0.49.0
• github.com/ory/x v0.0.729
• github.com/pressly/goose/v3 v3.26.0 → [Updates: v3.27.0]
• github.com/spf13/cobra v1.10.1 → [Updates: v1.10.2]
• github.com/spf13/pflag v1.0.10
• github.com/spf13/viper v1.21.0
• github.com/stretchr/testify v1.11.1
• go.infratographer.com/permissions-api v0.7.2
• go.infratographer.com/x v0.13.2
• go.opentelemetry.io/otel v1.38.0 → [Updates: v1.40.0]
• go.opentelemetry.io/otel/trace v1.38.0 → [Updates: v1.40.0]
• go.uber.org/zap v1.27.0 → [Updates: v1.27.1]
• google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba@95abcf5c77ba → [Updates: v0.0.0-20260223185530-2f722ef697dc]
• google.golang.org/protobuf v1.36.10 → [Updates: v1.36.11]
• gopkg.in/yaml.v3 v3.0.1
• github.com/oapi-codegen/oapi-codegen/v2 v2.5.1
• golang.org/x/tools v0.39.0 → [Updates: v0.42.0]

helm-values (1)

chart/identity-api/values.yaml (1)

• ghcr.io/metal-toolbox/audittail v0.9.0

helmv3 (1)

chart/identity-api/Chart.yaml (1)

• common 2.31.1 → [Updates: 2.36.0]

renovate-config-presets (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository