Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update all non-major dependencies (actions/checkout, actions/github-script, actions/setup-go, alpine, codecov/codecov-action, docker.io/library/alpine, docker.io/target/vela-git-slim, docker/login-action, docker/metadata-action, github.com/alecthomas/chroma/v2, github.com/go-git/go-git/v5, github.com/go-vela/server, github.com/golang-jwt/jwt/v5, github.com/sirupsen/logrus, github.com/spf13/afero, github.com/urfave/cli-docs/v3, github.com/urfave/cli/v3, github/codeql-action, golang.org/x/term)
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/github-script action to v8
• chore(deps): update actions/setup-go action to v6
• chore(deps): update github/codeql-action action to v4
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• alpine 3.22.1@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1 → [Updates: 3.23.3]

github-actions (8)

.github/workflows/build.yml (2)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.2.0]

.github/workflows/codeql-analysis.yml (5)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.2.0]
• github/codeql-action v3.29.5@51f77329afa6477de8c49fc9c7046c15b9a4e79d → [Updates: v3.32.1, v4.32.1]
• github/codeql-action v3.29.5@51f77329afa6477de8c49fc9c7046c15b9a4e79d → [Updates: v3.32.1, v4.32.1]
• github/codeql-action v3.29.5@51f77329afa6477de8c49fc9c7046c15b9a4e79d → [Updates: v3.32.1, v4.32.1]

.github/workflows/prerelease.yml (6)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.2.0]
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea → [Updates: v7.1.0, v8.0.0]
• docker/login-action v3.4.0@74a5d142397b4f367a81961eba4e8cd7edddf772 → [Updates: v3.7.0]
• docker/metadata-action v5.7.0@902fa8ec7d6ecbf8d84d538b9b233a880e428804 → [Updates: v5.10.0]
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83

.github/workflows/publish.yml (5)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.2.0]
• docker/login-action v3.4.0@74a5d142397b4f367a81961eba4e8cd7edddf772 → [Updates: v3.7.0]
• docker/metadata-action v5.7.0@902fa8ec7d6ecbf8d84d538b9b233a880e428804 → [Updates: v5.10.0]
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83

.github/workflows/reviewdog.yml (6)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.2.0]
• reviewdog/action-golangci-lint v2.8.0@f9bba13753278f6a73b27a56a3ffb1bfda90ed71
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.2.0]
• reviewdog/action-golangci-lint v2.8.0@f9bba13753278f6a73b27a56a3ffb1bfda90ed71

.github/workflows/test.yml (3)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.2.0]
• codecov/codecov-action v5.4.3@18283e04ce6e62d37312384ff67231eb8fd56d24 → [Updates: v5.5.2]

.github/workflows/validate-pr-title.yml

.github/workflows/validate.yml (2)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 → [Updates: v5.6.0, v6.2.0]

gomod (1)

go.mod (22)

• go 1.24.4
• github.com/Masterminds/semver/v3 v3.4.0
• github.com/alecthomas/chroma/v2 v2.19.0 → [Updates: v2.23.1]
• github.com/chainguard-dev/git-urls v1.0.2
• github.com/cli/browser v1.3.0
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/dustin/go-humanize v1.0.1
• github.com/gin-gonic/gin v1.11.0
• github.com/go-git/go-git/v5 v5.16.2 → [Updates: v5.16.4]
• github.com/go-vela/sdk-go v0.27.2-0.20251230154052-e1dae5f07d93@e1dae5f07d93
• github.com/go-vela/server v0.27.3-0.20260107161845-56fd3db7dbff@56fd3db7dbff → [Updates: v0.27.4]
• github.com/go-vela/worker v0.27.4-0.20260121151236-120915fe35a9@120915fe35a9
• github.com/golang-jwt/jwt/v5 v5.3.0 → [Updates: v5.3.1]
• github.com/gosuri/uitable v0.0.4
• github.com/joho/godotenv v1.5.1
• github.com/manifoldco/promptui v0.9.0
• github.com/sirupsen/logrus v1.9.3 → [Updates: v1.9.4]
• github.com/spf13/afero v1.14.0 → [Updates: v1.15.0]
• github.com/urfave/cli-docs/v3 v3.0.0-alpha6 → [Updates: v3.1.0]
• github.com/urfave/cli/v3 v3.5.0 → [Updates: v3.6.2]
• go.yaml.in/yaml/v3 v3.0.4
• golang.org/x/term v0.34.0 → [Updates: v0.39.0]

regex (2)

command/pipeline/exec.go (2)

• docker.io/target/vela-git-slim v0.12.1@sha256:93cdb399e0a3150addac494198473c464c978ca055121593607097b75480192b → [Updates: v0.13.0]
• docker.io/library/alpine 3.22.1@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1 → [Updates: 3.23.3]

command/pipeline/validate.go (1)

• docker.io/target/vela-git-slim v0.12.1@sha256:93cdb399e0a3150addac494198473c464c978ca055121593607097b75480192b → [Updates: v0.13.0]

renovate-config-presets (1)

.github/renovate.json

velaci (1)

command/pipeline/testdata/.vela.yml (1)

• alpine sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1 → [Updates: undefined]

---

• Check this box to trigger a request for Renovate to run again on this repository