Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

---

Warning

Renovate failed to look up the following dependencies: Failed to look up docker package circleci/command-convenience: no-result.

Files affected: .circleci/config.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update cimg/go docker tag to v1.26.2
• chore(deps): update dependency slack to v6.1.3
• chore(deps): update module github.com/sigstore/cosign/v3 to v3.0.6
• fix(deps): update module github.com/circleci/ex to v1.0.20702-97f0de8
• chore(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.4
• chore(deps): update module github.com/goreleaser/goreleaser/v2 to v2.15.2
• fix(deps): update module github.com/alecthomas/kong to v1.15.0
• fix(deps): update module github.com/gin-gonic/gin to v1.12.0
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

1/10 CVEs have Renovate fixes.

gomod

go.mod

github.com/buger/jsonparser

• GO-2026-4514

github.com/docker/docker

• GHSA-6hwg-w5jg-9c6x
• GHSA-j249-ghv5-7mxv
• GHSA-pxq6-2prw-chj9
• GHSA-qrqr-3x5j-2xw9
• GHSA-x744-4wpc-v9h2
• GO-2026-4883
• GO-2026-4887

github.com/go-git/go-git/v5

• GHSA-3xc5-wrhm-f963 (fixed in >= 5.18.0)

github.com/sigstore/cosign/v2

• GO-2026-4529

Detected Dependencies

circleci (1)

.circleci/config.yml (5)

• slack 6.1.2 → [Updates: 6.1.3]
• vuln-scanner 0.11.6
• cimg/go 1.26.1 → [Updates: 1.26.2]
• cimg/go 1.26.1 → [Updates: 1.26.2]
• circleci/command-convenience 0.1

dockerfile (2)

docker/Dockerfile

docker/windows.Dockerfile

gomod (1)

go.mod (15)

• go 1.26.1
• github.com/alecthomas/kong v1.14.0 → [Updates: v1.15.0]
• github.com/fsnotify/fsnotify v1.9.0
• github.com/gin-gonic/gin v1.11.0 → [Updates: v1.12.0]
• github.com/goccy/go-json v0.10.6
• github.com/google/go-cmp v0.7.0
• github.com/hashicorp/go-reap v0.0.0-20260220095743-4e27870b4f51@4e27870b4f51
• gotest.tools/v3 v3.5.2
• github.com/golangci/golangci-lint/v2 v2.8.0 → [Updates: v2.11.4]
• github.com/google/go-licenses/v2 v2.0.1
• github.com/goreleaser/goreleaser/v2 v2.14.3 → [Updates: v2.15.2]
• github.com/sigstore/cosign/v3 v3.0.5 → [Updates: v3.0.6]
• gotest.tools/gotestsum v1.13.0
• github.com/circleci/ex v1.0.20419-d637655 → [Updates: v1.0.20702-97f0de8]
• golang.org/x/sys v0.43.0

---

• Check this box to trigger a request for Renovate to run again on this repository