Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/checkout digest to df4cb1c
• chore(deps): update golangci/golangci-lint-action action to v9.2.1
• chore(deps): update alpine docker tag to v3.24
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package arduino/setup-task).

Files affected: .github/workflows/build.yml, .github/workflows/lint.yml, .github/workflows/release.yml, .github/workflows/test.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/setup-go digest to 4a36011
• fix(deps): update module github.com/stacklok/go-microvm to v0.0.36
• chore(deps): update aquasecurity/trivy-action action to v0.36.0
• chore(deps): update sigstore/cosign-installer action to v4.1.2
• fix(deps): update module github.com/mark3labs/mcp-go to v0.54.1
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update docker/setup-qemu-action action to v4
• chore(deps): update github artifact actions to v7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (4)

images/base/Dockerfile (1)

• alpine 3.23 → [Updates: 3.24]

images/node/Dockerfile

images/python/Dockerfile

images/shell/Dockerfile

github-actions (7)

.github/workflows/build.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]

.github/workflows/lint.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• golangci/golangci-lint-action v9.2.0@1e7e51e771db61008b38414a730f564565cf7c20 → [Updates: v9.2.1]

.github/workflows/release-images.yml (12)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• docker/setup-qemu-action v3@c7c53464625b32c7a7e944ae62b3e17d2b600130 → [Updates: v4]
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4]
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4]
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad → [Updates: v4.1.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• docker/setup-qemu-action v3@c7c53464625b32c7a7e944ae62b3e17d2b600130 → [Updates: v4]
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4]
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4]
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad → [Updates: v4.1.2]

.github/workflows/release.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad → [Updates: v4.1.2]

.github/workflows/security.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 → [Updates: v0.36.0]
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 → [Updates: v0.36.0]

.github/workflows/test.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611

.github/workflows/triage.yml (1)

• stacklok/.github v1@b43e3f174f9bbf2ca4efe6e421a1d007e7fa1b8f

gomod (1)

go.mod (5)

• go 1.26.0
• github.com/adrg/xdg v0.5.3
• github.com/google/uuid v1.6.0
• github.com/mark3labs/mcp-go v0.45.0 → [Updates: v0.54.1]
• github.com/stacklok/go-microvm v0.0.22 → [Updates: v0.0.36]

---

• Check this box to trigger a request for Renovate to run again on this repository