Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (2)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/cyberphone/json-canonicalization	2024-12-13
gomod	github.com/transparency-dev/merkle	2023-05-05

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): lock file maintenance

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update github/codeql-action to v4.37.9

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update pkcs7 to 05f7944
• chore(deps): update go to 1.27.0
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (8)

.github/workflows/audit.yml (1)

• monumental-archive/.github v1.61.1@77ca1a23f6c2a27a6398c3fdcafb1fc4e18cbeba

.github/workflows/ci.yml (1)

• monumental-archive/.github v1.61.1@77ca1a23f6c2a27a6398c3fdcafb1fc4e18cbeba

.github/workflows/dependency-review.yml (1)

• monumental-archive/.github v1.61.1@77ca1a23f6c2a27a6398c3fdcafb1fc4e18cbeba

.github/workflows/level.yml (1)

• monumental-archive/.github v1.61.1@77ca1a23f6c2a27a6398c3fdcafb1fc4e18cbeba

.github/workflows/publish.yml (1)

• monumental-archive/.github v1.61.1@77ca1a23f6c2a27a6398c3fdcafb1fc4e18cbeba

.github/workflows/release.yml (1)

• monumental-archive/.github v1.61.1@77ca1a23f6c2a27a6398c3fdcafb1fc4e18cbeba

.github/workflows/scorecard.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• github/codeql-action v4.37.8@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 → [Updates: v4.37.9]
• ubuntu 24.04

.github/workflows/source-attest.yml (4)

• monumental-archive/.github v1.61.1@77ca1a23f6c2a27a6398c3fdcafb1fc4e18cbeba
• monumental-archive/.github v1.61.1@77ca1a23f6c2a27a6398c3fdcafb1fc4e18cbeba
• ubuntu 24.04
• ubuntu 24.04

gomod (1)

go.mod (17)

• go 1.26.6
• github.com/Masterminds/semver/v3 v3.5.0
• github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467@19d51d7fe467
• github.com/digitorus/pkcs7 v0.0.0-20250730155240-ffadbf3f398c@ffadbf3f398c → [Updates: v0.0.0-20260821105541-05f79448fa77]
• github.com/github/go-spdx/v2 v2.7.0
• github.com/google/certificate-transparency-go v1.3.3
• github.com/google/go-containerregistry v0.22.0
• github.com/pelletier/go-toml/v2 v2.4.3
• github.com/secure-systems-lab/go-securesystemslib v0.11.1
• github.com/sigstore/protobuf-specs v0.5.2
• github.com/sigstore/rekor v1.5.4
• github.com/sigstore/sigstore v1.10.9
• github.com/sigstore/sigstore-go v1.3.0
• github.com/transparency-dev/merkle v0.0.2
• go.yaml.in/yaml/v3 v3.0.5
• golang.org/x/mod v0.40.0
• google.golang.org/protobuf v1.36.12

mise (1)

mise.toml (2)

• go 1.26.6 → [Updates: 1.27.0]
• go:golang.org/x/vuln/cmd/govulncheck 1.7.0

regex (2)

lefthook.yml (1)

• monumental-archive/.github v1.61.1

renovate.json (1)

• monumental-archive/.github v1.61.1

renovate-config (1)

renovate.json (1)

• monumental-archive/.github v1.61.1

---

• Check this box to trigger a request for Renovate to run again on this repository