Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update aws-sdk-go-v2 monorepo (github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/service/configservice, github.com/aws/aws-sdk-go-v2/service/iam, github.com/aws/aws-sdk-go-v2/service/s3, github.com/aws/aws-sdk-go-v2/service/securityhub, github.com/aws/aws-sdk-go-v2/service/sts)
• fix(deps): update module cloud.google.com/go/securitycenter to v1.46.0
• fix(deps): update module github.com/prometheus/client_golang to v1.24.1
• fix(deps): update module github.com/resend/resend-go/v3 to v3.11.0
• fix(deps): update module github.com/theopenlane/core to v1.31.2
• fix(deps): update module github.com/theopenlane/go-client to v0.13.0
• fix(deps): update module github.com/zitadel/oidc/v3 to v3.48.0
• fix(deps): update module google.golang.org/api to v0.290.0
• chore(deps): update actions/labeler action to v7
• chore(deps): update actions/setup-go action to v7
• fix(deps): update module github.com/cenkalti/backoff/v5 to v7
• fix(deps): update module github.com/google/go-github/v88 to v89
• fix(deps): update module github.com/knadh/koanf/providers/env to v2
• fix(deps): update module github.com/labstack/echo/v4 to v5
• fix(deps): update module github.com/nerzal/gocloak/v13 to v14
• fix(deps): update module github.com/nyaruka/phonenumbers to v2
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• fix(deps): update github.com/elimity-com/scim digest to 2641426
• fix(deps): update module github.com/getkin/kin-openapi to v0.145.0
• fix(deps): update module github.com/google/cel-go to v0.30.0
• fix(deps): update module github.com/lestrrat-go/jwx/v3 to v3.2.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update all patch dependencies (github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/credentials, github.com/aws/aws-sdk-go-v2/feature/s3/manager, github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager, github.com/gabriel-vasile/mimetype, github.com/oklog/ulid/v2, github.com/pressly/goose/v3, github.com/theopenlane/core/common, github.com/vektra/mockery/v3)
• fix(deps): update module github.com/cloudflare/cloudflare-go/v7 to v7.7.0
• fix(deps): update module github.com/theopenlane/riverboat to v0.11.0
• fix(deps): update module goauthentik.io/api/v3 to v3.2026050.6
• fix(deps): update river monorepo to v0.40.0 (github.com/riverqueue/river, github.com/riverqueue/river/riverdriver/riverpgxv5, github.com/riverqueue/river/rivertype)
• chore(deps): update actions/checkout action to v7
• chore(deps): update postgres docker tag to v18
• chore(deps): update redis docker tag to v8
• fix(deps): update module github.com/lestrrat-go/jwx/v3 to v4
• fix(deps): update module github.com/stripe/stripe-go/v84 to v86
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update buildkite plugin equinixmetal-buildkite/trivy to v1.22.0

Detected Dependencies

buildkite (1)

.buildkite/pipeline.yaml (60)

• docker v5.14.0
• docker v5.14.0
• docker v5.14.0
• sparse-checkout v1.8.0
• docker v5.14.0
• sparse-checkout v1.8.0
• docker v5.14.0
• sparse-checkout v1.8.0
• docker v5.14.0
• docker v5.14.0
• docker v5.14.0
• docker v5.14.0
• docker v5.14.0
• docker v5.14.0
• docker v5.14.0
• docker v5.14.0
• docker v5.14.0
• sparse-checkout v1.8.0
• docker v5.14.0
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• docker v5.14.0
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• docker v5.14.0
• docker v5.14.0
• docker v5.14.0
• docker v5.14.0
• docker v5.14.0
• sparse-checkout v1.8.0
• theopenlane/atlas v1.2.1
• sparse-checkout v1.8.0
• docker v5.14.0
• artifacts v1.9.4
• docker-login v3.0.0
• theopenlane/docker-metadata v1.0.1
• theopenlane/container-build v1.1.1
• equinixmetal-buildkite/trivy v1.19.0 → [Updates: v1.22.0]
• artifacts v1.9.4
• docker-login v3.0.0
• theopenlane/docker-metadata v1.0.1
• theopenlane/container-build v1.1.1
• sparse-checkout v1.8.0
• docker v5.14.0
• sparse-checkout v1.8.0
• cluster-secrets v1.0.0
• docker v5.14.0
• sparse-checkout v1.8.0
• theopenlane/atlas v1.2.1

docker-compose (14)

docker/docker-compose-authentik.yml (1)

• redis 7.4.9-alpine → [Updates: 7.4.10-alpine, 8.8.0-alpine]

docker/docker-compose-fga.yml (2)

• openfga/openfga v1.18.1
• openfga/openfga v1.18.1

docker/docker-compose-integrations-oidc.yml (1)

• ghcr.io/dexidp/dex v2.45.1

docker/docker-compose-keycloak.yml

docker/docker-compose-mailhog.yml

docker/docker-compose-oauth-test.yml

docker/docker-compose-oidc.yml (1)

• ghcr.io/dexidp/dex v2.45.1

docker/docker-compose-pg.yml (1)

• postgres 17 → [Updates: 18]

docker/docker-compose-prometheus.yml

docker/docker-compose-published.yml

docker/docker-compose-redis.yml (1)

• redis 7.4.9-alpine → [Updates: 7.4.10-alpine, 8.8.0-alpine]

docker/docker-compose-riverboat.yml

docker/docker-compose-storage.yml

docker/docker-compose.yml (1)

• ghcr.io/dexidp/dex v2.45.1

dockerfile (2)

docker/all-in-one/Dockerfile.all-in-one (4)

• golang 1.26.5
• redis 7.4.9 → [Updates: 7.4.10, 8.8.0]
• openfga/openfga v1.18.1
• ghcr.io/grpc-ecosystem/grpc-health-probe v0.4.50 → [Updates: v0.4.53]

docker/Dockerfile

github-actions (2)

.github/workflows/labeler.yaml (1)

• actions/labeler v6 → [Updates: v7]

.github/workflows/releaser.yml (8)

• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• actions/setup-go v6 → [Updates: v7]
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• sigstore/cosign-installer v4.1.2
• goreleaser/goreleaser-action v7
• slsa-framework/slsa-github-generator v2.1.0
• slsa-framework/slsa-verifier v2.7.1

gomod (3)

cli/go.mod (23)

• go 1.26.5
• github.com/99designs/gqlgen v0.17.94
• github.com/TylerBrock/colorjson v0.0.0-20200706003622-8a50f05110d2@8a50f05110d2
• github.com/go-viper/mapstructure/v2 v2.5.0
• github.com/goccy/go-yaml v1.19.2
• github.com/knadh/koanf/parsers/yaml v1.1.0
• github.com/knadh/koanf/providers/env/v2 v2.0.0
• github.com/knadh/koanf/providers/file v1.2.1
• github.com/knadh/koanf/providers/posflag v1.0.1
• github.com/knadh/koanf/v2 v2.3.5
• github.com/mitchellh/go-homedir v1.1.0
• github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c@5ac0b6a4141c
• github.com/rs/zerolog v1.35.1
• github.com/samber/lo v1.53.0
• github.com/spf13/cobra v1.10.2
• github.com/theopenlane/core v1.27.12 → [Updates: v1.31.2]
• github.com/theopenlane/core/common v1.0.24 → [Updates: v1.0.25]
• github.com/theopenlane/go-client v0.12.5 → [Updates: v0.13.0]
• github.com/theopenlane/httpsling v0.3.0
• github.com/theopenlane/iam v0.35.1 → [Updates: v0.35.5]
• github.com/theopenlane/utils v0.7.1
• golang.org/x/oauth2 v0.36.0
• golang.org/x/term v0.45.0

common/go.mod (16)

• go 1.26.5
• entgo.io/ent v0.14.6
• github.com/go-webauthn/webauthn v0.17.4
• github.com/google/uuid v1.6.0
• github.com/riverqueue/river v0.39.0 → [Updates: v0.40.0]
• github.com/robfig/cron/v3 v3.0.1
• github.com/rs/zerolog v1.35.1
• github.com/stoewer/go-strcase v1.3.1
• github.com/stretchr/testify v1.11.1
• github.com/theopenlane/core v1.27.12 → [Updates: v1.31.2]
• github.com/theopenlane/echox v0.3.0
• github.com/theopenlane/entx v0.30.3
• github.com/theopenlane/utils v0.7.1
• github.com/zitadel/oidc/v3 v3.47.9 → [Updates: v3.48.0]
• golang.org/x/oauth2 v0.36.0
• gotest.tools/v3 v3.5.2

go.mod (137)

• go 1.26.5
• ariga.io/entcache v0.1.0
• cloud.google.com/go/securitycenter v1.45.0 → [Updates: v1.46.0]
• entgo.io/contrib v0.7.0
• entgo.io/ent v0.14.6
• github.com/99designs/gqlgen v0.17.94
• github.com/AfterShip/email-verifier v1.4.1
• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.22.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.14.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/security/armsecurity v0.15.0
• github.com/Nerzal/gocloak/v13 v13.9.0 → [Updates: v14.0.3]
• github.com/PuerkitoBio/goquery v1.12.0
• github.com/alicebob/miniredis/v2 v2.38.0
• github.com/alitto/pond/v2 v2.7.1
• github.com/aws/aws-sdk-go-v2 v1.42.1 → [Updates: v1.43.0]
• github.com/aws/aws-sdk-go-v2/config v1.32.30 → [Updates: v1.32.31]
• github.com/aws/aws-sdk-go-v2/credentials v1.19.29 → [Updates: v1.19.30]
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.34 → [Updates: v1.22.35]
• github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.3.3 → [Updates: v0.3.5]
• github.com/aws/aws-sdk-go-v2/service/configservice v1.67.1 → [Updates: v1.68.0]
• github.com/aws/aws-sdk-go-v2/service/iam v1.55.1 → [Updates: v1.56.0]
• github.com/aws/aws-sdk-go-v2/service/s3 v1.105.2 → [Updates: v1.106.0]
• github.com/brianvoe/gofakeit/v7 v7.15.0
• github.com/cenkalti/backoff/v5 v5.0.3 → [Updates: v7.0.0]
• github.com/cloudflare/cloudflare-go/v7 v7.6.0 → [Updates: v7.7.0]
• github.com/coder/websocket v1.8.15
• github.com/didasy/tldr v0.7.0
• github.com/elimity-com/scim v0.0.0-20260506142751-830e1caafcc3@830e1caafcc3 → [Updates: v0.0.0-20260728105928-2641426a1539]
• github.com/fatih/camelcase v1.0.0
• github.com/fatih/color v1.19.0
• github.com/fsnotify/fsnotify v1.10.1
• github.com/fumiama/go-docx v0.0.0-20250506085032-0c30fd09304b@0c30fd09304b
• github.com/gabriel-vasile/mimetype v1.4.14 → [Updates: v1.4.15]
• github.com/gertd/go-pluralize v0.2.1
• github.com/getkin/kin-openapi v0.144.0 → [Updates: v0.145.0]
• github.com/go-jose/go-jose/v4 v4.1.4
• github.com/go-viper/mapstructure/v2 v2.5.0
• github.com/go-webauthn/webauthn v0.17.4
• github.com/gocarina/gocsv v0.0.0-20260628180327-50907998929c@50907998929c
• github.com/goccy/go-yaml v1.19.2
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/google/go-github/v88 v88.0.0 → [Updates: v89.0.0]
• github.com/google/uuid v1.6.0
• github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674@e064f32e3674
• github.com/gqlgo/gqlgenc v0.38.0
• github.com/hashicorp/go-multierror v1.1.1
• github.com/invopop/jsonschema v0.14.0
• github.com/invopop/yaml v0.3.1
• github.com/jackc/pgx/v5 v5.10.0
• github.com/knadh/koanf/parsers/yaml v1.1.0
• github.com/knadh/koanf/providers/env/v2 v2.0.0
• github.com/knadh/koanf/providers/file v1.2.1
• github.com/knadh/koanf/providers/posflag v1.0.1
• github.com/knadh/koanf/v2 v2.3.5
• github.com/labstack/echo-contrib v0.50.1
• github.com/labstack/echo/v4 v4.15.4 → [Updates: v5.3.1]
• github.com/labstack/gommon v0.5.0
• github.com/lestrrat-go/httprc/v3 v3.0.6
• github.com/lestrrat-go/jwx/v3 v3.1.1 → [Updates: v3.2.0, v4.1.0]
• github.com/lib/pq v1.12.3
• github.com/manifoldco/promptui v0.9.0
• github.com/mcuadros/go-defaults v1.2.0
• github.com/microcosm-cc/bluemonday v1.0.27
• github.com/microsoft/kiota-authentication-azure-go v1.3.1
• github.com/microsoftgraph/msgraph-sdk-go v1.100.0
• github.com/nyaruka/phonenumbers v1.8.1 → [Updates: v2.0.5]
• github.com/oklog/ulid/v2 v2.1.1 → [Updates: v2.1.2]
• github.com/okta/okta-sdk-golang/v6 v6.1.6
• github.com/openfga/go-sdk v0.8.2
• github.com/pdfcpu/pdfcpu v0.13.0
• github.com/pkg/errors v0.9.1
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/pquerna/otp v1.5.0
• github.com/pressly/goose/v3 v3.27.2 → [Updates: v3.27.3]
• github.com/prometheus/client_golang v1.23.2 → [Updates: v1.24.1]
• github.com/redis/go-redis/v9 v9.21.0
• github.com/riverqueue/river v0.39.0 → [Updates: v0.40.0]
• github.com/riverqueue/river/riverdriver/riverpgxv5 v0.39.0 → [Updates: v0.40.0]
• github.com/riverqueue/river/rivertype v0.39.0 → [Updates: v0.40.0]
• github.com/rs/zerolog v1.35.1
• github.com/samber/do/v2 v2.1.0
• github.com/samber/lo v1.53.0
• github.com/shurcooL/githubv4 v0.0.0-20260209031235-2402fdf4a9ed@2402fdf4a9ed
• github.com/slack-go/slack v0.27.0
• github.com/spf13/cobra v1.10.2
• github.com/stoewer/go-strcase v1.3.1
• github.com/stretchr/testify v1.11.1
• github.com/stripe/stripe-go/v84 v84.4.1 → [Updates: v86.1.1]
• github.com/tailscale/tailscale-client-go/v2 v2.0.0-20250129222324-74c8fc3cb4d7@74c8fc3cb4d7
• github.com/theopenlane/core/common v1.0.24 → [Updates: v1.0.25]
• github.com/theopenlane/echo-prometheus v0.1.0
• github.com/theopenlane/echox v0.3.0
• github.com/theopenlane/entx v0.30.3
• github.com/theopenlane/go-client v0.12.5 → [Updates: v0.13.0]
• github.com/theopenlane/gqlgen-plugins v0.14.7
• github.com/theopenlane/httpsling v0.3.0
• github.com/theopenlane/iam v0.35.4 → [Updates: v0.35.5]
• github.com/theopenlane/newman v0.4.2
• github.com/theopenlane/riverboat v0.9.18 → [Updates: v0.11.0]
• github.com/theopenlane/utils v0.7.1
• github.com/tmc/langchaingo v0.1.14
• github.com/urfave/cli/v3 v3.10.1
• github.com/vektah/gqlparser/v2 v2.5.36
• github.com/xeipuuv/gojsonschema v1.2.0
• github.com/yuin/goldmark v1.8.4 → [Updates: v1.8.5]
• github.com/zitadel/oidc/v3 v3.47.9 → [Updates: v3.48.0]
• goauthentik.io/api/v3 v3.2026020.16 → [Updates: v3.2026050.6]
• gocloud.dev v0.46.0
• golang.org/x/crypto v0.54.0
• golang.org/x/mod v0.38.0
• golang.org/x/oauth2 v0.36.0
• golang.org/x/sync v0.22.0
• golang.org/x/text v0.40.0
• golang.org/x/tools v0.48.0
• google.golang.org/api v0.289.0 → [Updates: v0.290.0]
• gopkg.in/yaml.v3 v3.0.1
• gotest.tools/v3 v3.5.2
• github.com/shurcooL/graphql v0.0.0-20240915155400-7ee5256398cf@7ee5256398cf
• github.com/wundergraph/astjson v1.1.0
• ariga.io/atlas v1.2.3
• github.com/aws/aws-sdk-go-v2/service/sts v1.44.1 → [Updates: v1.45.0]
• github.com/dave/jennifer v1.7.1
• github.com/testcontainers/testcontainers-go v0.43.0
• github.com/vektra/mockery/v3 v3.7.1 → [Updates: v3.7.2]
• gotest.tools/gotestsum v1.13.0
• github.com/aws/aws-sdk-go-v2/service/securityhub v1.74.0 → [Updates: v1.75.0]
• github.com/google/cel-go v0.29.2 → [Updates: v0.30.0]
• github.com/knadh/koanf/providers/env v1.1.0 → [Updates: v2.0.0]
• github.com/olekukonko/tablewriter v1.1.4
• github.com/openfga/language/pkg/go v0.3.1
• github.com/resend/resend-go/v3 v3.10.1 → [Updates: v3.11.0]
• github.com/samber/mo v1.17.0
• github.com/spf13/pflag v1.0.10
• github.com/theopenlane/eddy v0.1.0
• github.com/vmihailenco/msgpack/v5 v5.4.1
• golang.org/x/net v0.57.0
• google.golang.org/protobuf v1.36.11

---

• Check this box to trigger a request for Renovate to run again on this repository