Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update module github.com/aws/aws-sdk-go-v2/service/securityhub to v1.71.0
• Update module github.com/resend/resend-go/v3 to v3.7.0
• Update module github.com/theopenlane/iam to v0.31.0
• Update module goauthentik.io/api/v3 to v3.2026050.0
• Update module golang.org/x/crypto to v0.52.0
• Update module google.golang.org/api to v0.280.0
• Update openfga/openfga Docker tag to v1.16.0
• Update module github.com/cloudflare/cloudflare-go/v6 to v7
• Update module github.com/google/go-github/v84 to v88
• Update module github.com/labstack/echo/v4 to v5
• Update module github.com/stripe/stripe-go/v84 to v85
• Update postgres Docker tag to v18
• Update redis Docker tag to v8
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update all patch dependencies (ghcr.io/grpc-ecosystem/grpc-health-probe, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/credentials, github.com/aws/aws-sdk-go-v2/feature/s3/manager, github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager, github.com/go-webauthn/webauthn, github.com/google/cel-go, github.com/openfga/go-sdk, github.com/theopenlane/core/common, github.com/theopenlane/go-client, github.com/theopenlane/utils)
• Update module github.com/alicebob/miniredis/v2 to v2.38.0
• Update module github.com/microsoftgraph/msgraph-sdk-go to v1.99.0
• Update module github.com/pdfcpu/pdfcpu to v0.12.1
• Update module github.com/theopenlane/entx to v0.28.0
• Update module github.com/theopenlane/riverboat to v0.9.15
• Update module github.com/urfave/cli/v3 to v3.9.0
• Update river monorepo to v0.38.0 (github.com/riverqueue/river, github.com/riverqueue/river/riverdriver/riverpgxv5, github.com/riverqueue/river/rivertype)
• Update module github.com/knadh/koanf/providers/env to v2
• Update module github.com/lestrrat-go/jwx/v3 to v4
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update buildkite plugin equinixmetal-buildkite/trivy to v1.22.0

Detected Dependencies

buildkite (1)

.buildkite/pipeline.yaml (60)

• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• sparse-checkout v1.8.0
• docker v5.13.0
• sparse-checkout v1.8.0
• docker v5.13.0
• sparse-checkout v1.8.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• sparse-checkout v1.8.0
• docker v5.13.0
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• docker v5.13.0
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• artifacts v1.9.4
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• docker v5.13.0
• sparse-checkout v1.8.0
• theopenlane/atlas v1.2.1
• sparse-checkout v1.8.0
• docker v5.13.0
• artifacts v1.9.4
• docker-login v3.0.0
• theopenlane/docker-metadata v1.0.1
• theopenlane/container-build v1.1.1
• equinixmetal-buildkite/trivy v1.19.0 → [Updates: v1.22.0]
• artifacts v1.9.4
• docker-login v3.0.0
• theopenlane/docker-metadata v1.0.1
• theopenlane/container-build v1.1.1
• sparse-checkout v1.8.0
• docker v5.13.0
• sparse-checkout v1.8.0
• cluster-secrets v1.0.0
• docker v5.13.0
• sparse-checkout v1.8.0
• theopenlane/atlas v1.2.1

docker-compose (13)

docker/docker-compose-authentik.yml (1)

• redis 7.4.9-alpine → [Updates: 8.6.3-alpine]

docker/docker-compose-fga.yml (2)

• openfga/openfga v1.15.1 → [Updates: v1.16.0]
• openfga/openfga v1.15.1 → [Updates: v1.16.0]

docker/docker-compose-integrations-oidc.yml (1)

• ghcr.io/dexidp/dex v2.45.1

docker/docker-compose-mailhog.yml

docker/docker-compose-oauth-test.yml

docker/docker-compose-oidc.yml (1)

• ghcr.io/dexidp/dex v2.45.1

docker/docker-compose-pg.yml (1)

• postgres 17 → [Updates: 18]

docker/docker-compose-prometheus.yml

docker/docker-compose-published.yml

docker/docker-compose-redis.yml (1)

• redis 7.4.9-alpine → [Updates: 8.6.3-alpine]

docker/docker-compose-riverboat.yml

docker/docker-compose-storage.yml

docker/docker-compose.yml (1)

• ghcr.io/dexidp/dex v2.45.1

dockerfile (2)

docker/all-in-one/Dockerfile.all-in-one (4)

• golang 1.26.3
• redis 7.4.9 → [Updates: 8.6.3]
• openfga/openfga v1.15.1 → [Updates: v1.16.0]
• ghcr.io/grpc-ecosystem/grpc-health-probe v0.4.49 → [Updates: v0.4.50]

docker/Dockerfile

github-actions (2)

.github/workflows/labeler.yaml (1)

• actions/labeler v6

.github/workflows/releaser.yml (8)

• actions/checkout v6
• actions/checkout v6
• actions/setup-go v6
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• sigstore/cosign-installer v4.1.2
• goreleaser/goreleaser-action v7
• slsa-framework/slsa-github-generator v2.1.0
• slsa-framework/slsa-verifier v2.7.1

gomod (3)

cli/go.mod (23)

• go 1.26.3
• github.com/99designs/gqlgen v0.17.90
• github.com/TylerBrock/colorjson v0.0.0-20200706003622-8a50f05110d2@8a50f05110d2
• github.com/go-viper/mapstructure/v2 v2.5.0
• github.com/goccy/go-yaml v1.19.2
• github.com/knadh/koanf/parsers/yaml v1.1.0
• github.com/knadh/koanf/providers/env/v2 v2.0.0
• github.com/knadh/koanf/providers/file v1.2.1
• github.com/knadh/koanf/providers/posflag v1.0.1
• github.com/knadh/koanf/v2 v2.3.4
• github.com/mitchellh/go-homedir v1.1.0
• github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c@5ac0b6a4141c
• github.com/rs/zerolog v1.35.1
• github.com/samber/lo v1.53.0
• github.com/spf13/cobra v1.10.2
• github.com/theopenlane/core v1.21.22
• github.com/theopenlane/core/common v1.0.21 → [Updates: v1.0.22]
• github.com/theopenlane/go-client v0.10.0 → [Updates: v0.10.1]
• github.com/theopenlane/httpsling v0.3.0
• github.com/theopenlane/iam v0.29.0 → [Updates: v0.31.0]
• github.com/theopenlane/utils v0.7.0 → [Updates: v0.7.1]
• golang.org/x/oauth2 v0.36.0
• golang.org/x/term v0.43.0

common/go.mod (16)

• go 1.26.3
• entgo.io/ent v0.14.6
• github.com/go-webauthn/webauthn v0.17.3 → [Updates: v0.17.4]
• github.com/google/uuid v1.6.0
• github.com/riverqueue/river v0.32.0 → [Updates: v0.38.0]
• github.com/robfig/cron/v3 v3.0.1
• github.com/rs/zerolog v1.35.1
• github.com/stoewer/go-strcase v1.3.1
• github.com/stretchr/testify v1.11.1
• github.com/theopenlane/core v1.21.22
• github.com/theopenlane/echox v0.3.0
• github.com/theopenlane/entx v0.27.1 → [Updates: v0.28.0]
• github.com/theopenlane/utils v0.7.0 → [Updates: v0.7.1]
• github.com/zitadel/oidc/v3 v3.47.5
• golang.org/x/oauth2 v0.36.0
• gotest.tools/v3 v3.5.2

go.mod (130)

• go 1.26.3
• ariga.io/entcache v0.1.0
• cloud.google.com/go/securitycenter v1.44.0
• entgo.io/contrib v0.7.0
• entgo.io/ent v0.14.6
• github.com/99designs/gqlgen v0.17.90
• github.com/AfterShip/email-verifier v1.4.1
• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/security/armsecurity v0.14.0
• github.com/alicebob/miniredis/v2 v2.37.0 → [Updates: v2.38.0]
• github.com/alitto/pond/v2 v2.7.1
• github.com/aws/aws-sdk-go-v2 v1.41.7
• github.com/aws/aws-sdk-go-v2/config v1.32.17 → [Updates: v1.32.18]
• github.com/aws/aws-sdk-go-v2/credentials v1.19.16 → [Updates: v1.19.17]
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.18 → [Updates: v1.22.19]
• github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.1.21 → [Updates: v0.1.22]
• github.com/aws/aws-sdk-go-v2/service/configservice v1.62.3
• github.com/aws/aws-sdk-go-v2/service/iam v1.53.10
• github.com/aws/aws-sdk-go-v2/service/s3 v1.101.0
• github.com/brianvoe/gofakeit/v7 v7.15.0
• github.com/cenkalti/backoff/v5 v5.0.3
• github.com/cloudflare/cloudflare-go/v6 v6.10.0 → [Updates: v7.3.0]
• github.com/didasy/tldr v0.7.0
• github.com/elimity-com/scim v0.0.0-20260506142751-830e1caafcc3@830e1caafcc3
• github.com/fatih/camelcase v1.0.0
• github.com/fatih/color v1.19.0
• github.com/fsnotify/fsnotify v1.10.1
• github.com/fumiama/go-docx v0.0.0-20250506085032-0c30fd09304b@0c30fd09304b
• github.com/gabriel-vasile/mimetype v1.4.13
• github.com/gertd/go-pluralize v0.2.1
• github.com/getkin/kin-openapi v0.138.0
• github.com/go-jose/go-jose/v4 v4.1.4
• github.com/go-viper/mapstructure/v2 v2.5.0
• github.com/go-webauthn/webauthn v0.17.3 → [Updates: v0.17.4]
• github.com/gocarina/gocsv v0.0.0-20240520201108-78e41c74b4b1@78e41c74b4b1
• github.com/goccy/go-yaml v1.19.2
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/google/go-github/v84 v84.0.0 → [Updates: v88.0.0]
• github.com/google/uuid v1.6.0
• github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674@e064f32e3674
• github.com/gqlgo/gqlgenc v0.37.0
• github.com/hashicorp/go-multierror v1.1.1
• github.com/invopop/jsonschema v0.14.0
• github.com/invopop/yaml v0.3.1
• github.com/jackc/pgx/v5 v5.9.2
• github.com/knadh/koanf/parsers/yaml v1.1.0
• github.com/knadh/koanf/providers/env/v2 v2.0.0
• github.com/knadh/koanf/providers/file v1.2.1
• github.com/knadh/koanf/providers/posflag v1.0.1
• github.com/knadh/koanf/v2 v2.3.4
• github.com/labstack/echo-contrib v0.50.1
• github.com/labstack/echo/v4 v4.15.2 → [Updates: v5.1.1]
• github.com/labstack/gommon v0.5.0
• github.com/lestrrat-go/httprc/v3 v3.0.5
• github.com/lestrrat-go/jwx/v3 v3.1.1 → [Updates: v4.0.2]
• github.com/lib/pq v1.12.3
• github.com/manifoldco/promptui v0.9.0
• github.com/mcuadros/go-defaults v1.2.0
• github.com/microcosm-cc/bluemonday v1.0.27
• github.com/microsoft/kiota-authentication-azure-go v1.3.1
• github.com/microsoftgraph/msgraph-sdk-go v1.98.0 → [Updates: v1.99.0]
• github.com/nyaruka/phonenumbers v1.7.4
• github.com/oklog/ulid/v2 v2.1.1
• github.com/okta/okta-sdk-golang/v6 v6.1.6
• github.com/openfga/go-sdk v0.8.0 → [Updates: v0.8.1]
• github.com/pdfcpu/pdfcpu v0.11.1 → [Updates: v0.12.1]
• github.com/pkg/errors v0.9.1
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/pquerna/otp v1.5.0
• github.com/pressly/goose/v3 v3.27.1
• github.com/prometheus/client_golang v1.23.2
• github.com/redis/go-redis/v9 v9.19.0
• github.com/riverqueue/river v0.32.0 → [Updates: v0.38.0]
• github.com/riverqueue/river/riverdriver/riverpgxv5 v0.32.0 → [Updates: v0.38.0]
• github.com/riverqueue/river/rivertype v0.32.0 → [Updates: v0.38.0]
• github.com/rs/zerolog v1.35.1
• github.com/samber/do/v2 v2.0.0
• github.com/samber/lo v1.53.0
• github.com/shurcooL/githubv4 v0.0.0-20260209031235-2402fdf4a9ed@2402fdf4a9ed
• github.com/slack-go/slack v0.23.1
• github.com/spf13/cobra v1.10.2
• github.com/stoewer/go-strcase v1.3.1
• github.com/stretchr/testify v1.11.1
• github.com/stripe/stripe-go/v84 v84.4.1 → [Updates: v85.1.0]
• github.com/theopenlane/core/common v1.0.21 → [Updates: v1.0.22]
• github.com/theopenlane/echo-prometheus v0.1.0
• github.com/theopenlane/echox v0.3.0
• github.com/theopenlane/entx v0.27.1 → [Updates: v0.28.0]
• github.com/theopenlane/go-client v0.10.0 → [Updates: v0.10.1]
• github.com/theopenlane/gqlgen-plugins v0.14.7
• github.com/theopenlane/httpsling v0.3.0
• github.com/theopenlane/iam v0.29.0 → [Updates: v0.31.0]
• github.com/theopenlane/newman v0.4.0
• github.com/theopenlane/riverboat v0.8.8 → [Updates: v0.9.15]
• github.com/theopenlane/utils v0.7.0 → [Updates: v0.7.1]
• github.com/tmc/langchaingo v0.1.14
• github.com/urfave/cli/v3 v3.8.0 → [Updates: v3.9.0]
• github.com/vektah/gqlparser/v2 v2.5.33
• github.com/xeipuuv/gojsonschema v1.2.0
• github.com/yuin/goldmark v1.8.2
• github.com/zitadel/oidc/v3 v3.47.5
• goauthentik.io/api/v3 v3.2026020.16 → [Updates: v3.2026050.0]
• gocloud.dev v0.45.0
• golang.org/x/crypto v0.51.0 → [Updates: v0.52.0]
• golang.org/x/mod v0.36.0
• golang.org/x/oauth2 v0.36.0
• golang.org/x/sync v0.20.0
• golang.org/x/text v0.37.0
• golang.org/x/tools v0.45.0
• google.golang.org/api v0.278.0 → [Updates: v0.280.0]
• gopkg.in/yaml.v3 v3.0.1
• gotest.tools/v3 v3.5.2
• github.com/shurcooL/graphql v0.0.0-20240915155400-7ee5256398cf@7ee5256398cf
• github.com/wundergraph/astjson v1.1.0
• ariga.io/atlas v1.2.0
• github.com/aws/aws-sdk-go-v2/service/sts v1.42.1
• github.com/dave/jennifer v1.7.1
• github.com/testcontainers/testcontainers-go v0.42.0
• github.com/vektra/mockery/v3 v3.7.0
• gotest.tools/gotestsum v1.13.0
• github.com/aws/aws-sdk-go-v2/service/securityhub v1.70.0 → [Updates: v1.71.0]
• github.com/google/cel-go v0.28.0 → [Updates: v0.28.1]
• github.com/knadh/koanf/providers/env v1.1.0 → [Updates: v2.0.0]
• github.com/resend/resend-go/v3 v3.6.0 → [Updates: v3.7.0]
• github.com/samber/mo v1.16.0
• github.com/spf13/pflag v1.0.10
• github.com/theopenlane/eddy v0.1.0
• github.com/vmihailenco/msgpack/v5 v5.4.1
• google.golang.org/protobuf v1.36.11

---

• Check this box to trigger a request for Renovate to run again on this repository