Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• build: update actions/setup-node digest to 39370e3
• build: update goreleaser/goreleaser-action digest to 5742e2a
• build: update module github.com/spf13/cobra to v1.8.1
• build: update module gopkg.in/dnaeon/go-vcr.v3 to v3.2.2
• build: update dependency go to v1.23.4
• build: update module github.com/stretchr/testify to v1.10.0
• build: update module google.golang.org/protobuf to v1.35.2
• build: update sigstore/scaffolding action to v0.7.17
• build: update goreleaser/goreleaser-action action to v6
• build: update module github.com/google/go-github/v60 to v67
• build: update module gopkg.in/dnaeon/go-vcr.v3 to v4
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• build: update actions/checkout digest to 11bd719
• build: update actions/setup-go digest to 41dfa10
• build: update slsa-framework/slsa-github-generator digest to 2747648
• build: update module github.com/sigstore/rekor to v1.3.7
• build: update module github.com/sigstore/sigstore to v1.8.10
• build: update module github.com/go-git/go-git/v5 to v5.12.0
• build: update module github.com/google/go-containerregistry to v0.20.2
• build: update module github.com/in-toto/attestation to v1.1.0
• build: update module github.com/open-policy-agent/opa to v0.70.0
• build: update module github.com/sigstore/cosign/v2 to v2.4.1
• build: update module golang.org/x/oauth2 to v0.24.0
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

github-actions

.github/workflows/build.yaml

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/slsa-github-generator 52372c6734897f13514167d8921538225027b009
• sigstore/scaffolding v0.6.17@a20ae166ad6fe8f7165f4b3ee218acf72d9c45e8
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-node v4@60edb5dd545a775178f52524783378180af0d1f8
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• goreleaser/goreleaser-action v5@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8

gomod

go.mod

• go 1.22
• go 1.22.1
• github.com/go-git/go-git/v5 v5.11.0
• github.com/google/go-containerregistry v0.19.0
• github.com/google/go-github/v60 v60.0.0
• github.com/in-toto/attestation v1.0.1
• github.com/in-toto/in-toto-golang v0.9.0
• github.com/open-policy-agent/opa v0.62.1
• github.com/secure-systems-lab/go-securesystemslib v0.8.0
• github.com/sigstore/cosign/v2 v2.2.3
• github.com/sigstore/rekor v1.3.5
• github.com/sigstore/sigstore v1.8.2
• github.com/spf13/cobra v1.8.0
• github.com/stretchr/testify v1.9.0
• golang.org/x/oauth2 v0.18.0
• google.golang.org/protobuf v1.33.0
• gopkg.in/dnaeon/go-vcr.v3 v3.2.0

---

• Check this box to trigger a request for Renovate to run again on this repository