Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update gcr.io/distroless/static:latest docker digest to 5c7e2b4

Detected dependencies

dockerfile

Dockerfile

• gcr.io/distroless/static latest@sha256:f4a57e8ffd7ba407bdd0eb315bb54ef1f21a2100a7f032e9102e4da34fe7c196

github-actions

.github/workflows/main.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.2.0@3041bf56c941b39c61721a86cd11f3bb1338122a
• shogo82148/actions-goveralls v1.9.0@785c9d68212c91196d3994652647f8721918ba11

.github/workflows/pr-actions.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• zgosalvez/github-actions-ensure-sha-pinned-actions v3.0.19@6ae615f6475d2ede5ad88bea6baa7a1d5e93ffaa

.github/workflows/pr-build.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.2.0@3041bf56c941b39c61721a86cd11f3bb1338122a

.github/workflows/pr-goreleaser.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• goreleaser/goreleaser-action v6.1.0@9ed2f89a662bf1735a48bc8557fd212fa902bebf

.github/workflows/pr-label.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• pascalgn/size-label-action 6ec5bd0f81af1bd8d691180fbf04453b2c4b1642

.github/workflows/pr-stale.yaml

• actions/stale v9.0.0@28ca1036281a5e5922ead5184a1bbf96e5fc984e

.github/workflows/rebase.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• cirrus-actions/rebase 1.8@b87d48154a87a85666003575337e27b8cd65f691

.github/workflows/release.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.2.0@3041bf56c941b39c61721a86cd11f3bb1338122a
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• sigstore/cosign-installer v3.7.0@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
• anchore/sbom-action v0.17.9@df80a981bc6edbc4e220a492d3cbe9f5547a6e75
• goreleaser/goreleaser-action v6.1.0@9ed2f89a662bf1735a48bc8557fd212fa902bebf

.github/workflows/report-on-vulnerabilities.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• aquasecurity/trivy-action 0.29.0@18f2510ee396bbf400402947b394f2dd8c87dbb0
• actions/upload-artifact v4.5.0@6f51ac03b9356f520e9adb1b1b7802705f340c2b
• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5

.github/workflows/scan.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818

.github/workflows/scorecard.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.5.0@6f51ac03b9356f520e9adb1b1b7802705f340c2b
• github/codeql-action v3.28.0@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169

gomod

go.mod

• go 1.23.3
• tailscale.com v1.78.3

---

• Check this box to trigger a request for Renovate to run again on this repository