Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update module github.com/theopenlane/core to v1.11.7
• fix(deps): update module github.com/stripe/stripe-go/v84 to v84.4.0
• fix(deps): update module github.com/theopenlane/riverboat to v0.9.6
• fix(deps): update module github.com/google/go-github/v83 to v84
• fix(deps): update module github.com/labstack/echo/v4 to v5
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update buildkite plugin equinixmetal-buildkite/trivy to v1.20.0
• chore(deps): update golang docker tag to v1.26.0
• chore(deps): update postgres docker tag to v18
• chore(deps): update redis docker tag to v8

Detected Dependencies

buildkite (1)

.buildkite/pipeline.yaml (51)

• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• docker v5.13.0
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• theopenlane/atlas v1.2.1
• docker v5.13.0
• artifacts v1.9.4
• docker-login v3.0.0
• theopenlane/docker-metadata v1.0.1
• theopenlane/container-build v1.1.1
• equinixmetal-buildkite/trivy v1.19.0 → [Updates: v1.20.0]
• artifacts v1.9.4
• docker-login v3.0.0
• theopenlane/docker-metadata v1.0.1
• theopenlane/container-build v1.1.1
• docker v5.13.0
• cluster-secrets v1.0.0
• docker v5.13.0
• theopenlane/atlas v1.2.1

docker-compose (11)

docker/docker-compose-fga.yml (2)

• openfga/openfga v1.11.6
• openfga/openfga v1.11.6

docker/docker-compose-mailhog.yml

docker/docker-compose-oauth-test.yml

docker/docker-compose-oidc.yml (1)

• ghcr.io/dexidp/dex v2.45.0

docker/docker-compose-pg.yml (1)

• postgres 17 → [Updates: 18]

docker/docker-compose-prometheus.yml

docker/docker-compose-published.yml

docker/docker-compose-redis.yml (1)

• redis 7.4.8-alpine → [Updates: 8.6.1-alpine]

docker/docker-compose-riverboat.yml

docker/docker-compose-storage.yml

docker/docker-compose.yml (1)

• ghcr.io/dexidp/dex v2.45.0

dockerfile (2)

docker/all-in-one/Dockerfile.all-in-one (4)

• golang 1.25.6 → [Updates: 1.26.0]
• redis 7.4.8 → [Updates: 8.6.1]
• openfga/openfga v1.11.6
• ghcr.io/grpc-ecosystem/grpc-health-probe v0.4.45

docker/Dockerfile

github-actions (2)

.github/workflows/labeler.yaml (1)

• actions/labeler v6

.github/workflows/releaser.yml (8)

• actions/checkout v6
• actions/checkout v6
• actions/setup-go v6
• anchore/sbom-action v0.23.0@17ae1740179002c89186b61233e0f892c3118b11
• sigstore/cosign-installer v4.0.0
• goreleaser/goreleaser-action v7
• slsa-framework/slsa-github-generator v2.1.0
• slsa-framework/slsa-verifier v2.7.1

gomod (3)

cli/go.mod (23)

• go 1.25.7
• github.com/99designs/gqlgen v0.17.87
• github.com/TylerBrock/colorjson v0.0.0-20200706003622-8a50f05110d2@8a50f05110d2
• github.com/go-viper/mapstructure/v2 v2.5.0
• github.com/goccy/go-yaml v1.19.2
• github.com/knadh/koanf/parsers/yaml v1.1.0
• github.com/knadh/koanf/providers/env/v2 v2.0.0
• github.com/knadh/koanf/providers/file v1.2.1
• github.com/knadh/koanf/providers/posflag v1.0.1
• github.com/knadh/koanf/v2 v2.3.2
• github.com/mitchellh/go-homedir v1.1.0
• github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c@5ac0b6a4141c
• github.com/rs/zerolog v1.34.0
• github.com/samber/lo v1.52.0
• github.com/spf13/cobra v1.10.2
• github.com/theopenlane/core v1.11.6 → [Updates: v1.11.7]
• github.com/theopenlane/core/common v1.0.11
• github.com/theopenlane/go-client v0.8.5
• github.com/theopenlane/httpsling v0.3.0
• github.com/theopenlane/iam v0.25.0
• github.com/theopenlane/utils v0.7.0
• golang.org/x/oauth2 v0.35.0
• golang.org/x/term v0.40.0

common/go.mod (27)

• go 1.25.7
• entgo.io/ent v0.14.6-0.20260218064135-ab0540611e15@ab0540611e15
• github.com/aws/aws-sdk-go-v2 v1.41.2
• github.com/aws/aws-sdk-go-v2/config v1.32.10
• github.com/aws/aws-sdk-go-v2/credentials v1.19.10
• github.com/aws/aws-sdk-go-v2/service/sts v1.41.7
• github.com/go-viper/mapstructure/v2 v2.5.0
• github.com/go-webauthn/webauthn v0.15.0
• github.com/google/uuid v1.6.0
• github.com/invopop/jsonschema v0.13.0
• github.com/knadh/koanf/parsers/yaml v1.1.0
• github.com/knadh/koanf/v2 v2.3.2
• github.com/riverqueue/river v0.31.0
• github.com/robfig/cron/v3 v3.0.1
• github.com/rs/zerolog v1.34.0
• github.com/samber/lo v1.52.0
• github.com/samber/mo v1.16.0
• github.com/stoewer/go-strcase v1.3.1
• github.com/stretchr/testify v1.11.1
• github.com/theopenlane/core v1.11.6 → [Updates: v1.11.7]
• github.com/theopenlane/echox v0.3.0
• github.com/theopenlane/entx v0.22.6
• github.com/theopenlane/httpsling v0.3.0
• github.com/theopenlane/utils v0.7.0
• github.com/zitadel/oidc/v3 v3.45.4
• golang.org/x/oauth2 v0.35.0
• gotest.tools/v3 v3.5.2

go.mod (117)

• go 1.25.7
• ariga.io/entcache v0.1.0
• cloud.google.com/go/securitycenter v1.38.1
• entgo.io/contrib v0.7.0
• entgo.io/ent v0.14.6-0.20260218064135-ab0540611e15@ab0540611e15
• github.com/99designs/gqlgen v0.17.87
• github.com/AfterShip/email-verifier v1.4.1
• github.com/alicebob/miniredis/v2 v2.37.0
• github.com/alitto/pond/v2 v2.6.2
• github.com/aws/aws-sdk-go-v2 v1.41.2
• github.com/aws/aws-sdk-go-v2/config v1.32.10
• github.com/aws/aws-sdk-go-v2/credentials v1.19.10
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.4
• github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.1.6
• github.com/aws/aws-sdk-go-v2/service/s3 v1.96.2
• github.com/brianvoe/gofakeit/v7 v7.14.0
• github.com/cenkalti/backoff/v5 v5.0.3
• github.com/cloudflare/cloudflare-go/v6 v6.8.0
• github.com/didasy/tldr v0.7.0
• github.com/elimity-com/scim v0.0.0-20240320110924-172bf2aee9c8@172bf2aee9c8
• github.com/fatih/camelcase v1.0.0
• github.com/fatih/color v1.18.0
• github.com/fsnotify/fsnotify v1.9.0
• github.com/fumiama/go-docx v0.0.0-20250506085032-0c30fd09304b@0c30fd09304b
• github.com/gabriel-vasile/mimetype v1.4.13
• github.com/gertd/go-pluralize v0.2.1
• github.com/getkin/kin-openapi v0.133.0
• github.com/go-jose/go-jose/v4 v4.1.3
• github.com/go-viper/mapstructure/v2 v2.5.0
• github.com/go-webauthn/webauthn v0.15.0
• github.com/gocarina/gocsv v0.0.0-20240520201108-78e41c74b4b1@78e41c74b4b1
• github.com/goccy/go-yaml v1.19.2
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/gomarkdown/markdown v0.0.0-20260217112301-37c66b85d6ab@37c66b85d6ab
• github.com/google/go-github/v83 v83.0.0 → [Updates: v84.0.0]
• github.com/google/uuid v1.6.0
• github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674@e064f32e3674
• github.com/gqlgo/gqlgenc v0.33.1
• github.com/hashicorp/go-multierror v1.1.1
• github.com/invopop/jsonschema v0.13.0
• github.com/invopop/yaml v0.3.1
• github.com/jackc/pgx/v5 v5.8.0
• github.com/knadh/koanf/parsers/yaml v1.1.0
• github.com/knadh/koanf/providers/env/v2 v2.0.0
• github.com/knadh/koanf/providers/file v1.2.1
• github.com/knadh/koanf/providers/posflag v1.0.1
• github.com/knadh/koanf/v2 v2.3.2
• github.com/labstack/echo-contrib v0.50.1
• github.com/labstack/echo/v4 v4.15.1 → [Updates: v5.0.4]
• github.com/labstack/gommon v0.4.2
• github.com/lestrrat-go/httprc/v3 v3.0.4
• github.com/lestrrat-go/jwx/v3 v3.0.13
• github.com/lib/pq v1.11.2
• github.com/manifoldco/promptui v0.9.0
• github.com/mcuadros/go-defaults v1.2.0
• github.com/microcosm-cc/bluemonday v1.0.27
• github.com/nyaruka/phonenumbers v1.6.10
• github.com/oklog/ulid/v2 v2.1.1
• github.com/openfga/go-sdk v0.7.5
• github.com/pkg/errors v0.9.1
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/pquerna/otp v1.5.0
• github.com/pressly/goose/v3 v3.27.0
• github.com/prometheus/client_golang v1.23.2
• github.com/redis/go-redis/v9 v9.18.0
• github.com/riverqueue/river v0.31.0
• github.com/riverqueue/river/riverdriver/riverpgxv5 v0.31.0
• github.com/riverqueue/river/rivertype v0.31.0
• github.com/rs/zerolog v1.34.0
• github.com/samber/do/v2 v2.0.0
• github.com/samber/lo v1.52.0
• github.com/shurcooL/githubv4 v0.0.0-20260209031235-2402fdf4a9ed@2402fdf4a9ed
• github.com/spf13/cobra v1.10.2
• github.com/stoewer/go-strcase v1.3.1
• github.com/stretchr/testify v1.11.1
• github.com/stripe/stripe-go/v84 v84.1.0 → [Updates: v84.4.0]
• github.com/theopenlane/core/common v1.0.11
• github.com/theopenlane/echo-prometheus v0.1.0
• github.com/theopenlane/echox v0.3.0
• github.com/theopenlane/emailtemplates v0.3.6
• github.com/theopenlane/entx v0.22.6
• github.com/theopenlane/go-client v0.8.5
• github.com/theopenlane/gqlgen-plugins v0.14.4
• github.com/theopenlane/httpsling v0.3.0
• github.com/theopenlane/iam v0.25.0
• github.com/theopenlane/newman v0.2.2
• github.com/theopenlane/riverboat v0.8.8 → [Updates: v0.9.6]
• github.com/theopenlane/utils v0.7.0
• github.com/tmc/langchaingo v0.1.14
• github.com/urfave/cli/v3 v3.6.2
• github.com/vektah/gqlparser/v2 v2.5.32
• github.com/xeipuuv/gojsonschema v1.2.0
• github.com/zitadel/oidc/v3 v3.45.4
• gocloud.dev v0.44.0
• golang.org/x/crypto v0.48.0
• golang.org/x/mod v0.33.0
• golang.org/x/oauth2 v0.35.0
• golang.org/x/sync v0.19.0
• golang.org/x/text v0.34.0
• golang.org/x/tools v0.42.0
• google.golang.org/api v0.269.0
• gopkg.in/yaml.v3 v3.0.1
• gotest.tools/v3 v3.5.2
• ariga.io/atlas v1.1.0
• github.com/aws/aws-sdk-go-v2/service/sts v1.41.7
• github.com/dave/jennifer v1.7.1
• github.com/testcontainers/testcontainers-go v0.40.0
• github.com/vektra/mockery/v3 v3.6.4
• gotest.tools/gotestsum v1.13.0
• github.com/aws/aws-sdk-go-v2/service/auditmanager v1.46.9
• github.com/aws/aws-sdk-go-v2/service/securityhub v1.68.0
• github.com/google/cel-go v0.27.0
• github.com/resend/resend-go/v3 v3.1.1
• github.com/samber/mo v1.16.0
• github.com/theopenlane/eddy v0.1.0
• github.com/vmihailenco/msgpack/v5 v5.4.1
• google.golang.org/protobuf v1.36.11

---

• Check this box to trigger a request for Renovate to run again on this repository