Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package arduino/setup-task).

Files affected: .github/workflows/build.yml, .github/workflows/lint.yml, .github/workflows/release.yml, .github/workflows/test.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/setup-go digest to 4a36011
• fix(deps): update module github.com/stacklok/go-microvm to v0.0.31
• chore(deps): update sigstore/cosign-installer action to v4.1.1
• fix(deps): update module github.com/mark3labs/mcp-go to v0.48.0
• chore(deps): update actions/upload-artifact action to v7
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update docker/setup-qemu-action action to v4
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (4)

images/base/Dockerfile (1)

• alpine 3.23

images/node/Dockerfile

images/python/Dockerfile

images/shell/Dockerfile

github-actions (6)

.github/workflows/build.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]

.github/workflows/lint.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• golangci/golangci-lint-action v9.2.0@1e7e51e771db61008b38414a730f564565cf7c20

.github/workflows/release-images.yml (12)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-qemu-action v3@c7c53464625b32c7a7e944ae62b3e17d2b600130 → [Updates: v4]
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4]
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4]
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad → [Updates: v4.1.1]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-qemu-action v3@c7c53464625b32c7a7e944ae62b3e17d2b600130 → [Updates: v4]
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4]
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4]
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad → [Updates: v4.1.1]

.github/workflows/release.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad → [Updates: v4.1.1]

.github/workflows/security.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1

.github/workflows/test.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611

gomod (1)

go.mod (5)

• go 1.26.0
• github.com/adrg/xdg v0.5.3
• github.com/google/uuid v1.6.0
• github.com/mark3labs/mcp-go v0.45.0 → [Updates: v0.48.0]
• github.com/stacklok/go-microvm v0.0.22 → [Updates: v0.0.31]

---

• Check this box to trigger a request for Renovate to run again on this repository