Renovate Dashboard 🤖

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update maru support dependencies (anchore/sbom-action, github/codeql-action, zarf-dev/zarf)
• fix(deps): update maru code dependencies (github.com/goccy/go-yaml, github.com/spf13/cobra, github.com/spf13/pflag, github.com/spf13/viper, github.com/stretchr/testify)
• chore(deps): update maru support dependencies (major) (actions/checkout, actions/download-artifact, actions/setup-go, actions/setup-node, actions/upload-artifact, github/codeql-action, golangci/golangci-lint-action)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (14)

.github/actions/golang/action.yaml (2)

• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.2.0]
• go 1.25.x

.github/actions/install-tools/action.yaml (1)

• anchore/sbom-action v0.21.1@0b82b0b1a22399a1c542d4d656f70cd903571b5c → [Updates: v0.22.0]

.github/actions/save-logs/action.yaml (1)

• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v6.0.0]

.github/actions/zarf/action.yaml

.github/workflows/ci-doc-shim.yaml

.github/workflows/commitlint.yaml (2)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v6.2.0]

.github/workflows/dependency-review.yaml (2)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/dependency-review-action v4.8.2@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261

.github/workflows/release.yaml (8)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v6.0.0]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0 → [Updates: v7.0.0]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0 → [Updates: v7.0.0]
• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf
• goreleaser/goreleaser-action v6.4.0@e435ccd777264be153ace6237001ef4d979d3a7a

.github/workflows/scan-codeql.yaml (3)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2 → [Updates: v3.31.11, v4.31.11]
• github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2 → [Updates: v3.31.11, v4.31.11]

.github/workflows/scan-lint.yaml (3)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• golangci/golangci-lint-action v8.0.0@4afd733a84b1f43292c63897423277bb7f4313a9 → [Updates: v9.2.0]
• pre-commit/action 1b06ec171f2f6faa71ed760c4042bd969e4f8b43

.github/workflows/scorecard.yaml (4)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v6.0.0]
• github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2 → [Updates: v3.31.11, v4.31.11]

.github/workflows/test-e2e-pr.yaml (1)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]

.github/workflows/test-schema.yaml (1)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]

.github/workflows/test-unit-pr.yaml (1)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]

gomod (1)

go.mod (10)

• go 1.24.0
• github.com/defenseunicorns/pkg/exec v0.0.2
• github.com/defenseunicorns/pkg/helpers/v2 v2.0.4
• github.com/goccy/go-yaml v1.18.0 → [Updates: v1.19.2]
• github.com/invopop/jsonschema v0.13.0
• github.com/spf13/cobra v1.9.1 → [Updates: v1.10.2]
• github.com/spf13/pflag v1.0.7 → [Updates: v1.0.10]
• github.com/spf13/viper v1.20.1 → [Updates: v1.21.0]
• github.com/stretchr/testify v1.10.0 → [Updates: v1.11.1]
• github.com/zalando/go-keyring v0.2.6

regex (1)

.github/actions/zarf/action.yaml (1)

• zarf-dev/zarf v0.69.0 → [Updates: v0.70.1]

---

• Check this box to trigger a request for Renovate to run again on this repository