Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update module github.com/mark3labs/mcp-go to v0.57.0
• chore(deps): update arduino/setup-task action to v3
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package arduino/setup-task).

Files affected: .github/workflows/ci.yml, .github/workflows/release.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/setup-go digest to 924ae3a
• chore(deps): update actions/upload-artifact digest to 043fb46
• chore(deps): update docker/login-action digest to dbcb813
• chore(deps): update github/codeql-action digest to 5595cca
• chore(deps): update golangci/golangci-lint-action digest to ba0d7d2
• chore(deps): update sigstore/cosign-installer action to v4.1.2
• chore(deps): update actions/checkout action to v6.1.0
• chore(deps): update ko-build/setup-ko action to v0.10
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-go action to v7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (4)

.github/workflows/ci.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v7, v6]
• golangci/golangci-lint-action v9@1e7e51e771db61008b38414a730f564565cf7c20 → [Updates: v9]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v7, v6]
• arduino/setup-task v2@24c5e13bce349197642746563945fcdf9355e8f4 → [Updates: v3.0.0]
• actions/upload-artifact v7@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7]

.github/workflows/release.yml (6)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v7, v6]
• arduino/setup-task v2@24c5e13bce349197642746563945fcdf9355e8f4 → [Updates: v3.0.0]
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d → [Updates: v0.10]
• docker/login-action v4@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4]
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]

.github/workflows/security.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• anchore/scan-action v7.4.0@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2
• github/codeql-action v4@d4b3ca9fa7f69d38bfcd667bdc45bc373d16277e → [Updates: v4]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v7, v6]
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d → [Updates: v0.10]
• anchore/scan-action v7.4.0@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2
• github/codeql-action v4@d4b3ca9fa7f69d38bfcd667bdc45bc373d16277e → [Updates: v4]

.github/workflows/triage.yml (1)

• stacklok/.github v1@b43e3f174f9bbf2ca4efe6e421a1d007e7fa1b8f

gomod (1)

go.mod (3)

• go 1.25.8
• github.com/mark3labs/mcp-go v0.48.0 → [Updates: v0.57.0]
• github.com/stretchr/testify v1.11.1

---

• Check this box to trigger a request for Renovate to run again on this repository