Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Note

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (4)

Datasource	Name	Last Updated
gomod	github.com/DATA-DOG/go-sqlmock	2024-01-06
gomod	github.com/robfig/cron/v3	2020-01-04
gomod	gopkg.in/yaml.v3	2022-05-27
pip_requirements	mkdocs	2024-08-30

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release.
Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• [skip-release] Update github-actions (major) (actions/checkout, golangci/golangci-lint-action)
• Update dependency alpine_3_22/ca-certificates to v20250911
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• [skip-release] Update bump-dependencies (actions/checkout, actions/setup-go, github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/service/s3, github.com/pashagolub/pgxmock/v4, golang, google.golang.org/api, mkdocs-material, mkdocs-mermaid2-plugin)

Vulnerabilities

2/5 CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/crypto

• GHSA-f6x5-jh6r-wrfv
• GO-2025-4134
• GO-2025-4135

Detected dependencies

dockerfile

Dockerfile

• golang 1.25-alpine3.22@sha256:b6ed3fd0452c0e9bcdef5597f29cc1418f61672e9d3a2f55bf02e7222c014abd

github-actions

.github/workflows/github-release.yml

• lehigh-university-libraries/gha main

.github/workflows/goreleaser.yml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00
• goreleaser/goreleaser-action v6@e435ccd777264be153ace6237001ef4d979d3a7a
• ubuntu 24.04
• go ^1.25.0

.github/workflows/lint-test-build.yml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00
• golangci/golangci-lint-action v8@4afd733a84b1f43292c63897423277bb7f4313a9
• lehigh-university-libraries/gha main
• ubuntu 24.04
• go ^1.25.0

gomod

go.mod

• go 1.25.1
• github.com/DATA-DOG/go-sqlmock v1.5.2
• github.com/aws/aws-sdk-go-v2 v1.39.2
• github.com/aws/aws-sdk-go-v2/config v1.31.12
• github.com/aws/aws-sdk-go-v2/service/s3 v1.88.3
• github.com/go-sql-driver/mysql v1.9.3
• github.com/jackc/pgx/v5 v5.7.6
• github.com/pashagolub/pgxmock/v4 v4.8.0
• github.com/robfig/cron/v3 v3.0.1
• github.com/spf13/cobra v1.10.1
• google.golang.org/api v0.249.0
• gopkg.in/yaml.v3 v3.0.1

pip_requirements

docs/requirements.txt

• mkdocs ==1.6.1
• mkdocs-material ==9.6.20
• mkdocs-material ==9.6.20
• mkdocs-mermaid2-plugin ==1.2.2

regex

Dockerfile

• alpine_3_22/bash 5.2.37-r0
• alpine_3_22/ca-certificates 20250619-r0
• alpine_3_22/curl 8.14.1-r2
• alpine_3_22/openssl 3.5.4-r0

renovate-config-presets

renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository