fix(deps): update module github.com/mindersec/minder to v0.3.0

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/mindersec/minder	v0.1.1 → v0.3.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

mindersec/minder (github.com/mindersec/minder)

v0.3.0

Compare Source

New client features

Client tools (mindev test, minder apply, etc) now support writing ruletypes using .rego files with custom # METADATA fields as an additional way to encode rules. This is intended to simplify interaction with tools like opa fmt and IDE language servers.

• Feature: support ruletype definitions as rego + metadata by @​evankanderson in #​6558
• Enable test framework to test rego-format ruletypes by @​evankanderson in #​6639

Client bugfixes

• fix(mindev): exit with non-zero status on syntax errors by @​krrish175-byte in #​6637

New server features

A new remediation type which creates an issue (and optionally labels or assigns it) was added.

• Support labels and assignees for issue remediation by @​codejasleen in #​6609

Server migrations

• Complete Rego v1 migration safeguards by @​dakshhhhh16 in #​6607
• Advance the Rego V1 migration while retaining V0 compatibility by @​dakshhhhh16 in #​6622

Server bugfixes

• Improvements to ListEntities by @​evankanderson in #​6535

Documentation

• docs: document issue remediation by @​codejasleen in #​6631
• Auto-generated cli documentation update - 2026-07-27 13:44:39 by @​github-actions[bot] in #​6632

Dependency updates

• build(deps): bump github.com/thomaspoignant/go-feature-flag from 1.49.0 to 1.55.1 by @​dependabot[bot] in #​6615
• build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 in /tools by @​dependabot[bot] in #​6624
• build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @​dependabot[bot] in #​6627
• build(deps): bump fast-uri from 3.1.2 to 3.1.4 in /docs by @​dependabot[bot] in #​6628
• build(deps): bump shell-quote from 1.8.4 to 1.10.0 in /docs by @​dependabot[bot] in #​6629
• build(deps): bump svgo from 2.8.2 to 2.8.3 in /docs by @​dependabot[bot] in #​6630
• build(deps): bump body-parser from 1.20.5 to 1.20.6 in /docs by @​dependabot[bot] in #​6625
• build(deps): bump github.com/oapi-codegen/runtime from 1.4.2 to 1.6.0 by @​dependabot[bot] in #​6616
• build(deps): bump the docusaurus group across 1 directory with 5 updates by @​dependabot[bot] in #​6619
• build(deps): bump github.com/getkin/kin-openapi from 0.135.0 to 0.144.0 in /tools by @​dependabot[bot] in #​6633
• build(deps): bump postcss from 8.5.14 to 8.5.24 in /docs by @​dependabot[bot] in #​6638
• build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.8.1 to 6.8.3 by @​dependabot[bot] in #​6620
• build(deps): bump github.com/google/cel-go from 0.28.1 to 0.29.0 in /tools by @​dependabot[bot] in #​6634
• build(deps): bump github.com/google/cel-go from 0.28.1 to 0.30.0 by @​dependabot[bot] in #​6617
• build(deps): bump chainguard-dev/actions/boilerplate from 1.6.27 to 1.6.28 by @​dependabot[bot] in #​6612
• Update golang.org/x/text by @​evankanderson in #​6640
• build(deps): bump bufbuild/buf-action from 1.4.0 to 1.5.0 by @​dependabot[bot] in #​6641
• build(deps): bump github.com/open-policy-agent/opa from 1.18.0 to 1.18.2 by @​dependabot[bot] in #​6648
• build(deps): bump k8s.io/apimachinery from 0.36.2 to 0.36.3 by @​dependabot[bot] in #​6647
• build(deps): bump github.com/std-uritemplate/std-uritemplate/go/v2 from 2.0.8 to 2.0.12 by @​dependabot[bot] in #​6646
• build(deps-dev): bump prettier from 3.9.4 to 3.9.6 in /docs by @​dependabot[bot] in #​6644
• build(deps-dev): bump markdownlint-cli2 from 0.23.0 to 0.23.1 in /docs by @​dependabot[bot] in #​6643
• build(deps): bump the react group across 1 directory with 2 updates by @​dependabot[bot] in #​6642
• build(deps): bump webpack-dev-server from 5.2.5 to 5.2.6 in /docs by @​dependabot[bot] in #​6626
• build(deps): bump k8s.io/client-go from 0.36.2 to 0.36.3 by @​dependabot[bot] in #​6645
• build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @​dependabot[bot] in #​6614
• build(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.3 by @​dependabot[bot] in #​6611

Full Changelog: mindersec/minder@v0.2.2...v0.3.0

v0.2.2

Compare Source

This is a further update to v0.2.0 to fix the release process. v0.2.0 release notes follow:

New client features

The terminal client has undergone a substantial update and UI facelift; among the new features are usability improvements to several existing commands, a new minder profile edit for updating profiles live, entity get/list/register/delete commands for generic entity types, and a new mindev test command for automated testing of Minder ruletypes:

• feat: enhance table UI by @​DharunMR in #​6291
• Additional info delete ruletype by @​DharunMR in #​6273
• Feat : Added a flag to ruletype subcommand by @​DharunMR in #​6287
• feat: add interactive 'minder profile edit' command by @​DharunMR in #​6355
• feat(cli): improve evaluation reasoning output using existing fields by @​sachin9058 in #​6417
• Add generic entity commands by @​evankanderson in #​6451
• feat(ruletest): add Starlark-based test runner for rule types by @​krrish175-byte in #​6508
• feat(ruletest): implement starlark eval built-in and assert module by @​krrish175-byte in #​6521
• feat(ruletest): add eval core unit tests and clean up builtins by @​krrish175-byte in #​6524
• feat(ruletest): add read_file and txtar built-ins by @​krrish175-byte in #​6530
• chore: minor cleanups from ruletest review by @​krrish175-byte in #​6540
• feat(ruletest): implement HTTP mocking layer for rule testing framework by @​krrish175-byte in #​6550
• feat: implement mindev test cli command and rule loading by name by @​krrish175-byte in #​6551
• build: add mindev to goreleaser release workflow by @​krrish175-byte in #​6572
• feat: introduce datasources mocking in ruletest framework by @​krrish175-byte in #​6575
• feat(dev): add JUnit XML output to mindev test and ruletest cleanups by @​krrish175-byte in #​6577

Client bugfixes

The client also received a number of fixes, and a testing mechanism for changes to the output format:

• Add pre-validation for repo register command to prevent unnecessary auth flow by @​sachin9058 in #​6249
• Fix/quickstart unregistered user by @​theycallmeaabie in #​6271
• Duplicate repo name by @​DharunMR in #​6276
• Implement Isolated, Deterministic Test Suite for ruletype CLI Subcommands by @​DharunMR in #​6286
• fix(cli): avoid duplicate error output in ExitNicelyOnError by @​isha822 in #​6366
• refactor(cli): extract catalog loading logic from quickstart command by @​sachin9058 in #​6353
• CLI : added test files for repo command by @​DharunMR in #​6414
• fix(cli): address review feedback and stabilize ruletype test suite by @​DharunMR in #​6386
• Hide quickstart command from help, etc until it is better-functioning by @​evankanderson in #​6405
• added test files for profile and profile/status command by @​DharunMR in #​6420

New server features

Note that server features are generally available in the container images on a rolling basis; features such as reading structured rule outputs via the API, provider metadata, entity list improvements, GitLab enrollment improvements, and version status have all been deployed live:

• Add with_output_detail to EvalResultsService by @​krrish175-byte in #​6207
• feat(inventory): add evaluation_outputs table for persisting structur… by @​dakshhhhh16 in #​6211
• Feature/include outputs list endpoints 6254 by @​dakshhhhh16 in #​6295
• feat(inventory): wire include_outputs for GetEvaluationHistory endpoint by @​dakshhhhh16 in #​6255
• Add provider class metadata listing by @​Jaydeep869 in #​6327
• feat: support generic entity instance in selectors by @​Jaydeep869 in #​6321
• feat: add /version endpoint and global Minder-Version header by @​DharunMR in #​6358
• Populate entityInfo for all entity types in ListEvaluationResults by @​krrish175-byte in #​6361
• Fix token enroll for GitLab by @​evankanderson in #​6478
• Fix GitLab Service Account enrollment by @​evankanderson in #​6479

Server migrations

If you are running your own Minder service, the following migrations will occur when you deploy the corresponding container image:

• Add migration to convert all remaining timestamps to timestamptz by @​evankanderson with @​Copilot in #​6139
• feat: store and detect Rego language version per rule type (Phase 1) by @​dakshhhhh16 in #​6317
• Migrate test policies to Rego v1 by @​dakshhhhh16 in #​6462
• test Rego v1 dual-parse pipeline by @​dakshhhhh16 in #​6553
• feat: warn when accepting Rego V0 policies by @​dakshhhhh16 in #​6554

Server bug fixes

• fix(metrics): swap incorrectly assigned entity and profile duration m… by @​theycallmeaabie in #​6270
• fix: avoid silently aborting profile init on single entity marshalling error by @​AftAb-25 in #​6331
• Include rule name in PR branch name to avoid collisions by @​krrish175-byte in #​6320
• fix: clean up OpenFGA role assignments during project deletion by @​AftAb-25 in #​6346
• Handle GitHub rate limits with specialized error and Prometheus metrics by @​krrish175-byte in #​6306
• fix: prevent panic when Trusty API call fails mid-flight by @​alimx07 in #​6383
• fix: make ReplaceAllProperties atomic by @​kazuhidelee in #​6326
• Allow digit-prefixed repository owners by @​w3lld1 in #​6591
• fix: gracefully skip invalid repositories in webhooks instead of aborting by @​AftAb-25 in #​6360
• Clean up profile handling, avoid doubling eval status in ListEvaluationResults by @​evankanderson in #​6500
• fix(actions): treat EvalStatusError as remediation off by @​codejasleen in #​6501
• Simplify CreateProfile, fix bug filling list of profiles by @​evankanderson in #​6499
• Improve debugging of clock drift in GitHub Auth dance by @​evankanderson in #​6523
• fix: prevent cache poisoning by force-resetting worktree on failed PR remediation by @​AftAb-25 in #​6368
• fix(oci): resolve artifact created time from image config by @​somaz94 in #​6520

Documentation

• Create Security Insights file by @​minder-custcodian[bot] in #​6184
• docs: update discussion forum link in CONTRIBUTING.md by @​PrinceAsiedu in #​6188
• docs: update API documentation links formatting in README by @​PrinceAsiedu in #​6190
• fix favicon by @​intelligent-ears in #​6300
• docs: add community meeting and governance links by @​intelligent-ears in #​6307
• docs: add documentation for customizing email templates by @​Gitjay11 in #​6313
• docs: deprecate quickstart documentation and remove CLI references by @​sachin9058 in #​6341
• docs: address maintainer feedback on email template customization by @​Gitjay11 in #​6354
• docs: add testing setup instructions to CONTRIBUTING.md by @​intelligent-ears in #​6421
• docs: add GitLab OAuth setup and provider enrollment guide by @​intelligent-ears in #​6477
• docs: add rule testing framework design document by @​krrish175-byte in #​6492
• docs: GitLab provider enrollment and repository registration guides by @​intelligent-ears in #​6534

Server-side maintenance, bugfixes, and test improvements

• Fix engine handler context handling by @​evankanderson in #​6173
• Test(vulncheck): add unit tests for vulnerability reports by @​dakshhhhh16 in #​6209
• Test(util): Add unit tests for rest curl generator by @​dakshhhhh16 in #​6210
• Add VEX / ignore mitigations for CVE-2026-34040 by @​evankanderson in #​6243
• test(projects/features): add unit tests for feature flag helpers by @​dakshhhhh16 in #​6246
• refactor: reduce db type coupling in engine actions using adapter mapping by @​sachin9058 in #​6289
• fix(rest-datasource): drain and close response body on 429 retry by @​AftAb-25 in #​6290
• fix: prevent nil pointer panic and error masking in GitHub provider check runs by @​AftAb-25 in #​6312
• test(profiles): add table-driven unit tests for pkg/profiles/models by @​dakshhhhh16 in #​6309
• fix(engine): prevent new evaluations from escaping cancellation during shutdown by @​sachin9058 in #​6314
• fix(datasource): initialize context to allow fallback to default project by @​Jaydeep869 in #​6315
• Resolve flaky TestGetGrpcConnection and upgrade dependencies by @​krrish175-byte in #​6264
• Move internal/engine/errors to pkg/engine/errors to reduce coupling by @​sachin9058 in #​6252
• Remove git_pr_diffs flag by @​DharunMR in #​6258
• removed dependency_extract feature flag by @​DharunMR in #​6272
• Decouple pkg/engine/errors from internal/db using adapter layer by @​sachin9058 in #​6266
• Test(actions): add unit tests for rule actions by @​dakshhhhh16 in #​6208
• refactor: extract shared label filtering to internal/labels by @​Gitjay11 in #​6222
• chore: add pre-check script to validate lint, gen, test, and build by @​sachin9058 in #​6293
• refactor: remove unused property wrappers and update the property tests to use … by @​kazuhidelee in #​6284
• fix: make artifact signature wait context-aware to allow graceful shutdown by @​sachin9058 in #​6329
• test(ruletypes): add table-driven unit tests for release phase conver… by @​dakshhhhh16 in #​6328
• fix: avoid overwriting remediation action status in eval logs by @​AftAb-25 in #​6333
• Fix unterminated warning message that breaks gotestsum -> junit parsing by @​evankanderson in #​6334
• Test: add real database integration tests for EntityCreator by @​DharunMR in #​6378
• Decouple PR feedback actions from GitHub-specific provider by @​krrish175-byte in #​6262
• Fix SARIF uploads by granting security-events: write by @​evankanderson in #​6406
• refactor(engine): remove direct db dependency from actions logic by @​sachin9058 in #​6305
• Add security-events: write to main workflows, granular permissions by @​evankanderson in #​6412
• Generalize identity provider and implement OIDC discovery by @​krrish175-byte in #​6265
• Switch linter to only pick up new issues by @​evankanderson in #​6440
• Fix typo in first_profile.md by @​alekcunn in #​6574
• refactor: encapsulate project creation logic into the ProjectCreator interface by @​ShantKhatri in #​6557
• feat(api): set output_only flag for output-only fields in protos by @​Gitjay11 in #​6221
• Implement capabilities list via reflection by @​evankanderson in #​6482
• feat(identity): add smoke-test-client Keycloak OIDC client for automted testing by @​Jaydeep869 in #​6491
• Introduce issue provider facet and issue remediation configuration by @​codejasleen in #​6541

Dependency updates

• build(deps): bump github.com/openfga/go-sdk from 0.7.3 to 0.7.5 by @​dependabot[bot] in #​6172
• build(deps): bump sigstore/cosign-installer from 3.10.0 to 4.1.0 by @​dependabot[bot] in #​6170
• build(deps): bump chainguard-dev/actions from 1.6.7 to 1.6.8 by @​dependabot[bot] in #​6169
• build(deps): bump github.com/open-policy-agent/opa from 1.11.0 to 1.14.0 by @​dependabot[bot] in #​6165
• build(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 by @​dependabot[bot] in #​6178
• build(deps): bump the otel group with 2 updates by @​dependabot[bot] in #​6177
• build(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @​dependabot[bot] in #​6181
• build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 in /tools by @​dependabot[bot] in #​6180
• build(deps): bump github/codeql-action from 4.32.6 to 4.33.0 by @​dependabot[bot] in #​6176
• build(deps): bump bufbuild/buf-action from 1.3.0 to 1.4.0 by @​dependabot[bot] in #​6175
• build(deps): bump fast-xml-parser from 5.4.1 to 5.5.6 in /docs by @​dependabot[bot] in #​6174
• build(deps): bump fast-xml-parser from 5.5.6 to 5.5.7 in /docs by @​dependabot[bot] in #​6185
• build(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 by @​dependabot[bot] in #​6187
• build(deps-dev): bump flatted from 3.3.2 to 3.4.2 in /docs by @​dependabot[bot] in #​6186
• build(deps): bump anchore/sbom-action from 0.23.1 to 0.24.0 by @​dependabot[bot] in #​6195
• build(deps): bump chainguard-dev/actions from 1.6.8 to 1.6.10 by @​dependabot[bot] in #​6199
• build(deps): bump github.com/fergusstrange/embedded-postgres from 1.32.0 to 1.34.0 by @​dependabot[bot] in #​6198
• build(deps): bump azure/setup-helm from 4.3.1 to 5.0.0 by @​dependabot[bot] in #​6197
• build(deps): bump github.com/nats-io/nats-server/v2 from 2.12.4 to 2.12.5 by @​dependabot[bot] in #​6200
• build(deps): bump yaml in /docs by @​dependabot[bot] in #​6201
• build(deps): bump picomatch from 2.3.1 to 2.3.2 in /docs by @​dependabot[bot] in #​6202
• build(deps): bump github.com/nats-io/nats-server/v2 from 2.12.4 to 2.12.6 by @​dependabot[bot] in #​6194
• build(deps): bump github/codeql-action from 4.33.0 to 4.34.1 by @​dependabot[bot] in #​6196
• build(deps): bump github.com/openfga/openfga from 1.11.3 to 1.13.1 by @​dependabot[bot] in #​6204
• build(deps): bump brace-expansion in /docs by @​dependabot[bot] in #​6212
• build(deps): bump github.com/moby/buildkit from 0.23.2 to 0.28.1 by @​dependabot[bot] in #​6205
• build(deps): bump github.com/openfga/openfga from 1.11.5 to 1.13.1 in /tools by @​dependabot[bot] in #​6206
• build(deps): bump node-forge from 1.3.2 to 1.4.0 in /docs by @​dependabot[bot] in #​6216
• build(deps): bump path-to-regexp from 0.1.12 to 0.1.13 in /docs by @​dependabot[bot] in #​6213
• build(deps): bump github.com/go-git/go-git/v5 from 5.17.0 to 5.17.1 by @​dependabot[bot] in #​6215
• build(deps): bump github/codeql-action from 4.34.1 to 4.35.1 by @​dependabot[bot] in #​6226
• build(deps): bump minimatch and serve-handler in /docs by @​dependabot[bot] in #​6232
• build(deps): bump sigstore/cosign-installer from 4.1.0 to 4.1.1 by @​dependabot[bot] in #​6231
• build(deps-dev): bump markdownlint-cli2 from 0.21.0 to 0.22.0 in /docs by @​dependabot[bot] in #​6228
• build(deps): bump github.com/nats-io/nats.go from 1.49.0 to 1.50.0 by @​dependabot[bot] in #​6227
• build(deps): bump styled-components from 6.3.11 to 6.3.12 in /docs by @​dependabot[bot] in #​6225
• build(deps): bump actions/setup-go from 6.3.0 to 6.4.0 by @​dependabot[bot] in #​6224
• build(deps): bump chainguard-dev/actions from 1.6.10 to 1.6.11 by @​dependabot[bot] in #​6223
• build(deps): bump github.com/go-openapi/loads from 0.23.2 to 0.23.3 by @​dependabot[bot] in #​6229
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @​dependabot[bot] in #​6259
• build(deps): bump the tools group in /tools with 4 updates by @​dependabot[bot] in #​6230
• build(deps): bump lodash from 4.17.23 to 4.18.1 in /docs by @​dependabot[bot] in #​6260
• build(deps): bump the otel group with 7 updates by @​dependabot[bot] in #​6302
• build(deps): bump chainguard-dev/actions from 1.6.11 to 1.6.13 by @​dependabot[bot] in #​6301
• build(deps): bump github.com/openfga/openfga from 1.13.1 to 1.14.0 in /tools by @​dependabot[bot] in #​6298
• build(deps): bump github.com/openfga/openfga from 1.13.1 to 1.14.0 by @​dependabot[bot] in #​6299
• build(deps): bump helm.sh/helm/v3 from 3.18.5 to 3.20.2 in /tools by @​dependabot[bot] in #​6335
• build(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 in /tools by @​dependabot[bot] in #​6308
• build(deps): bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 by @​dependabot[bot] in #​6362
• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @​dependabot[bot] in #​6374
• build(deps): bump chainguard-dev/actions from 1.6.13 to 1.6.14 by @​dependabot[bot] in #​6373
• build(deps): bump the docusaurus group in /docs with 5 updates by @​dependabot[bot] in #​6377
• build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 by @​dependabot[bot] in #​6375
• build(deps): bump follow-redirects from 1.15.11 to 1.16.0 in /docs by @​dependabot[bot] in #​6379
• build(deps): bump dompurify from 3.3.2 to 3.4.0 in /docs by @​dependabot[bot] in #​6381
• build(deps-dev): bump globals from 17.4.0 to 17.5.0 in /docs by @​dependabot[bot] in #​6396
• build(deps): bump styled-components from 6.3.12 to 6.4.0 in /docs by @​dependabot[bot] in #​6395
• build(deps): bump the react group across 1 directory with 2 updates by @​dependabot[bot] in #​6393
• build(deps-dev): bump prettier from 3.8.1 to 3.8.3 in /docs by @​dependabot[bot] in #​6394
• build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 by @​dependabot[bot] in #​6390
• build(deps): bump chainguard-dev/actions from 1.6.14 to 1.6.15 by @​dependabot[bot] in #​6391
• build(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.1.0 by @​dependabot[bot] in #​6389
• build(deps): bump GoTestTools/gotestfmt-action from 2.2.0 to 2.3.0 by @​dependabot[bot] in #​6392
• build(deps): bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.2 by @​dependabot[bot] in #​6403
• build(deps): bump github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2 in /tools by @​dependabot[bot] in #​6404
• build(deps): bump github.com/openfga/openfga from 1.14.0 to 1.14.1 by @​dependabot[bot] in #​6399
• build(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 by @​dependabot[bot] in #​6384
• build(deps): bump github.com/openfga/openfga from 1.14.0 to 1.14.1 in /tools by @​dependabot[bot] in #​6401
• build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 in /docs by @​dependabot[bot] in #​6408
• build(deps): bump styled-components from 6.4.0 to 6.4.1 in /docs by @​dependabot[bot] in #​6427
• build(deps-dev): bump markdownlint-cli2 from 0.22.0 to 0.22.1 in /docs by @​dependabot[bot] in #​6425
• build(deps): bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 by @​dependabot[bot] in #​6423
• build(deps): bump chainguard-dev/actions from 1.6.15 to 1.6.19 by @​dependabot[bot] in #​6424
• build(deps): bump github.com/open-policy-agent/opa from 1.14.0 to 1.16.1 by @​dependabot[bot] in #​6441
• build(deps): bump the otel group across 1 directory with 2 updates by @​dependabot[bot] in #​6410
• build(deps): bump github.com/lib/pq from 1.11.2 to 1.12.3 by @​dependabot[bot] in #​6426
• Upgrade to golangci-lint 2.12.1 by @​evankanderson in #​6442
• build(deps): bump @​babel/plugin-transform-modules-systemjs from 7.25.9 to 7.29.4 in /docs by @​dependabot[bot] in #​6445
• build(deps): bump github.com/in-toto/in-toto-golang from 0.10.0 to 0.11.0 by @​dependabot[bot] in #​6444
• build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 in /docs by @​dependabot[bot] in #​6443
• build(deps): bump fast-uri from 3.1.0 to 3.1.2 in /docs by @​dependabot[bot] in #​6446
• build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 by @​dependabot[bot] in #​6450
• build(deps): bump github.com/openfga/go-sdk from 0.7.5 to 0.8.0 by @​dependabot[bot] in #​6455
• build(deps-dev): bump globals from 17.5.0 to 17.6.0 in /docs by @​dependabot[bot] in #​6459
• build(deps): bump the docusaurus group in /docs with 5 updates by @​dependabot[bot] in #​6457
• build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.4 to 2.3.1 by @​dependabot[bot] in #​6456
• build(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 by @​dependabot[bot] in #​6453
• build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 by @​dependabot[bot] in #​6454
• build(deps): bump mobx from 6.13.7 to 6.15.1 in /docs by @​dependabot[bot] in #​6458
• build(deps): bump github.com/containerd/containerd from 1.7.29 to 1.7.32 by @​dependabot[bot] in #​6470
• build(deps): bump webpack-dev-server from 5.2.2 to 5.2.4 in /docs by @​dependabot[bot] in #​6471
• build(deps): bump the react group in /docs with 2 updates by @​dependabot[bot] in #​6468
• build(deps): bump mobx from 6.15.1 to 6.15.3 in /docs by @​dependabot[bot] in #​6469
• build(deps): bump github.com/open-feature/go-sdk from 1.17.0 to 1.17.2 by @​dependabot[bot] in #​6466
• build(deps): bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 by @​dependabot[bot] in #​6465
• build(deps): bump github.com/ThreeDotsLabs/watermill from 1.5.1 to 1.5.2 by @​dependabot[bot] in #​6476
• build(deps): bump actions/stale from 10.2.0 to 10.3.0 by @​dependabot[bot] in #​6474
• build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @​dependabot[bot] in #​6473
• build(deps): bump styled-components from 6.4.1 to 6.4.2 in /docs by @​dependabot[bot] in #​6475
• build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 by @​dependabot[bot] in #​6464
• build(deps): bump mermaid from 11.12.3 to 11.15.0 in /docs by @​dependabot[bot] in #​6452
• build(deps): bump the buf group across 1 directory with 3 updates by @​dependabot[bot] in #​6467
• build(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 in /tools by @​dependabot[bot] in #​6483
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​6486
• build(deps): bump github.com/wneessen/go-mail from 0.7.2 to 0.7.3 by @​dependabot[bot] in #​6488
• build(deps): bump mobx from 6.15.3 to 6.15.4 in /docs by @​dependabot[bot] in #​6484
• build(deps): bump the tools group across 1 directory with 10 updates by @​dependabot[bot] in #​6480
• build(deps): bump shell-quote from 1.8.3 to 1.8.4 in /docs by @​dependabot[bot] in #​6498
• build(deps): bump the otel group across 1 directory with 11 updates by @​dependabot[bot] in #​6497
• build(deps): bump chainguard-dev/actions from 1.6.19 to 1.6.22 by @​dependabot[bot] in #​6493
• build(deps): bump k8s.io/apimachinery from 0.35.1 to 0.36.1 by @​dependabot[bot] in #​6496
• build(deps): bump golang.org/x/sync from 0.20.0 to 0.21.0 by @​dependabot[bot] in #​6495
• build(deps): bump the react group in /docs with 2 updates by @​dependabot[bot] in #​6494
• build(deps): bump github.com/sigstore/protobuf-specs from 0.5.0 to 0.5.1 by @​dependabot[bot] in #​6489
• build(deps): bump github.com/openfga/openfga from 1.14.1 to 1.16.0 by @​dependabot[bot] in #​6502
• build(deps): bump mobx from 6.15.4 to 6.16.1 in /docs by @​dependabot[bot] in #​6512
• build(deps): bump github.com/yuin/goldmark from 1.7.13 to 1.8.2 by @​dependabot[bot] in #​6514
• build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.9 to 6.8.1 by @​dependabot[bot] in #​6513
• build(deps): bump webpack-dev-server from 5.2.4 to 5.2.5 in /docs by @​dependabot[bot] in #​6519
• build(deps-dev): bump prettier from 3.8.3 to 3.8.4 in /docs by @​dependabot[bot] in #​6511
• build(deps): bump chainguard-dev/actions from 1.6.22 to 1.6.23 by @​dependabot[bot] in #​6510
• build(deps): bump dompurify from 3.4.0 to 3.4.10 in /docs by @​dependabot[bot] in [#​6509](https://redirect.github.com/minde

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 34 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25 -> 1.26.5
golang.org/x/oauth2	v0.35.0 -> v0.36.0
google.golang.org/grpc	v1.79.2 -> v1.82.1
google.golang.org/protobuf	v1.36.11 -> v1.36.12-0.20260120151049-f2248ac996af
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go	v1.36.10-20250912141014-52f32327d4b0.1 -> v1.36.11-20260709200747-435963d16310.1
github.com/ProtonMail/go-crypto	v1.1.6 -> v1.3.0
github.com/cloudflare/circl	v1.6.1 -> v1.6.3
github.com/cyphar/filepath-securejoin	v0.4.1 -> v0.6.1
github.com/gabriel-vasile/mimetype	v1.4.8 -> v1.4.13
github.com/go-git/go-billy/v5	v5.6.2 -> v5.9.0
github.com/go-git/go-git/v5	v5.16.3 -> v5.19.1
github.com/go-playground/validator/v10	v10.27.0 -> v10.30.3
github.com/google/go-querystring	v1.1.0 -> v1.2.0
github.com/grpc-ecosystem/grpc-gateway/v2	v2.27.3 -> v2.29.0
github.com/itchyny/gojq	v0.12.17 -> v0.12.19
github.com/itchyny/timefmt-go	v0.1.6 -> v0.1.8
github.com/lib/pq	v1.10.9 -> v1.12.3
github.com/mattn/go-colorable	v0.1.14 -> v0.1.15
github.com/mattn/go-isatty	v0.0.20 -> v0.0.22
github.com/open-policy-agent/opa	v1.9.0 -> v1.18.2
github.com/pjbgf/sha1cd	v0.3.2 -> v0.6.0
github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql	v1.28.0 -> v1.33.0
github.com/signalfx/splunk-otel-go/instrumentation/github.com/lib/pq/splunkpq	v1.28.0 -> v1.33.0
github.com/signalfx/splunk-otel-go/instrumentation/internal	v1.28.0 -> v1.33.0
go.opentelemetry.io/otel	v1.39.0 -> v1.44.0
go.opentelemetry.io/otel/metric	v1.39.0 -> v1.44.0
go.opentelemetry.io/otel/trace	v1.39.0 -> v1.44.0
go.yaml.in/yaml/v2	v2.4.2 -> v2.4.4
golang.org/x/crypto	v0.46.0 -> v0.54.0
golang.org/x/net	v0.48.0 -> v0.57.0
golang.org/x/sys	v0.39.0 -> v0.47.0
golang.org/x/text	v0.32.0 -> v0.40.0
google.golang.org/genproto/googleapis/api	v0.0.0-20251202230838-ff82c1b0f217 -> v0.0.0-20260615183401-62b3387ff324
google.golang.org/genproto/googleapis/rpc	v0.0.0-20251202230838-ff82c1b0f217 -> v0.0.0-20260622175928-b703f567277d
k8s.io/apimachinery	v0.34.1 -> v0.36.3

[JAORMX]

CI is green. LGTM.