Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (2)

Datasource	Package	Last Updated
gomod	github.com/joho/godotenv	2024-12-16
regex	golang/vuln	2025-01-13

Pending Branch Automerge

The following updates await pending status checks before automerging. To abort the branch automerge and create a PR instead, click on a checkbox below.

• chore(all): update GitHub Actions (goreleaser/goreleaser-action, zaproxy/action-api-scan)

Detected Dependencies

dockerfile (1)

Dockerfile (3)

• docker/dockerfile 1@sha256:4a43a54dd1fedceb30ba47e76cfcf2b47304f4161c0caeac2db1c61804ea3c91
• golang 1.26-alpine@sha256:2389ebfa5b7f43eeafbd6be0c3700cc46690ef842ad962f6c5bd6be49ed82039
• alpine 3.23.3@sha256:25109184c71bdad752c8312a8623239686a9a2071e8825f20acb8f2198c3f659

github-actions (3)

.github/workflows/ci.yml (24)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• aquasecurity/trivy-action v0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1
• aquasecurity/trivy-action v0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• actions/upload-artifact v7@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• actions/upload-artifact v7@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• actions/setup-node v6@53b83947a5a98c8d113130e565377fae1a50d02f
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• zaproxy/action-api-scan v0.10.0@bd24b11e76da11ab60302c8ae87f091cbb11f034 → [Updates: v0.10.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
• aquasecurity/trivy-action v0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1
• actions/upload-artifact v7@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

.github/workflows/cleanup-runs.yml

.github/workflows/release.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• docker/login-action v4@4907a6ddec9925e35a0a9e82d7399ccc52663121
• goreleaser/goreleaser-action v7@9a127d869fb706213d29cdf8eef3a4ea2b869415 → [Updates: v7]

gomod (1)

go.mod (5)

• go 1.26.1
• github.com/joho/godotenv v1.5.1
• github.com/labstack/echo/v5 v5.1.0
• github.com/swaggo/echo-swagger/v2 v2.0.1
• github.com/swaggo/swag/v2 v2.0.0-rc5

regex (1)

Makefile (11)

• swaggo/swag 2.0.0-rc5
• securego/gosec 2.25.0
• golang.org/x/perf/cmd/benchstat 0.0.0-20260312031701-16a31bc5fbd0
• golangci/golangci-lint 2.11.4
• golang/vuln 1.1.4
• zricethezav/gitleaks 8.30.1
• rhysd/actionlint 1.7.12
• nvm-sh/nvm 0.40.4
• hadolint/hadolint 2.14.0
• aquasecurity/trivy 0.69.3
• nektos/act 0.2.87

---

• Check this box to trigger a request for Renovate to run again on this repository

[AndriyKalashnykov]

ok