Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (3)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/google/uuid	2024-01-23
terraform	http	2025-04-23
terraform	null	2025-04-22

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): pin dependencies in .github/workflows/gce-image-build.yml (main) (google-github-actions/auth, google-github-actions/setup-gcloud)
• fix(deps): update module cloud.google.com/go/pubsub/v2 to v2.6.0 in lambda/go.mod (main)
• fix(deps): update module cloud.google.com/go/secretmanager to v1.19.0 in lambda/go.mod (main)
• fix(deps): update module github.com/googleapis/gax-go/v2 to v2.22.0 in lambda/go.mod (main)
• fix(deps): update module google.golang.org/api to v0.276.0 in lambda/go.mod (main)
• chore(deps): update actions/upload-artifact action to v7 in .github/workflows/scorecard.yml (main)
• chore(deps): update github- to v3 in .github/workflows/gce-image-build.yml (main) (major) (google-github-actions/auth, google-github-actions/setup-gcloud)
• chore(deps): lock file maintenance in infra/terraform/versions.tf (main)
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• fix(deps): update module google.golang.org/grpc to v1.81.0 in lambda/go.mod (main)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/github-script digest to f28e40c in .github/workflows/scorecard-pr.yml (main)
• chore(deps): update actions/setup-go digest to 4a36011 in .github/workflows/test.yml (main)
• chore(deps): update aws-actions/configure-aws-credentials digest to ec61189 in .github/workflows/ami-build.yml (main)
• chore(deps): update goreleaser/goreleaser-action digest to 1a80836 in .github/workflows/release.yml (main)
• chore(deps): update github/codeql-action action to v4.35.2 in .github/workflows/scorecard.yml (main)
• fix(deps): update aws-sdk-go-v2 monorepo in lambda/go.mod (main) (github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue, github.com/aws/aws-sdk-go-v2/service/dynamodb, github.com/aws/aws-sdk-go-v2/service/ec2, github.com/aws/aws-sdk-go-v2/service/secretsmanager, github.com/aws/aws-sdk-go-v2/service/sqs)
• chore(deps): update actions/github-script action to v8 in .github/workflows/scorecard-pr.yml (main)
• chore(deps): update actions/github-script action to v9 in .github/workflows/scorecard-pr.yml (main)
• chore(deps): update actions/upload-artifact action to v5 in .github/workflows/scorecard.yml (main)
• chore(deps): update actions/upload-artifact action to v6 in .github/workflows/scorecard.yml (main)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (10)

.github/workflows/ami-build.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• aws-actions/configure-aws-credentials v6@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 → [Updates: v6]
• hashicorp/setup-packer v3.2.0@c3d53c525d422944e50ee27b840746d6522b08de

.github/workflows/codeql.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4.35.2]
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4.35.2]

.github/workflows/gce-image-build.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• google-github-actions/auth v2 → [Updates: v3, v2]
• google-github-actions/setup-gcloud v2 → [Updates: v3, v2]
• hashicorp/setup-packer v3.2.0@c3d53c525d422944e50ee27b840746d6522b08de

.github/workflows/label-old-prs.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/labeler v6@634933edcd8ababfe52f92936142cc22ac488b1b

.github/workflows/labeler.yml (1)

• actions/labeler v6@634933edcd8ababfe52f92936142cc22ac488b1b

.github/workflows/release.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• goreleaser/goreleaser-action v7@ec59f474b9834571250b370d4735c50f8e2d1e29 → [Updates: v7]

.github/workflows/scorecard-pr.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/github-script v7@60a0d83039c74a4aee543508d2ffcb1c3799cdea → [Updates: v8, v9, v7]

.github/workflows/scorecard.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v5, v6, v7]
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4.35.2]

.github/workflows/security.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]

.github/workflows/test.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• golangci/golangci-lint-action v9@1e7e51e771db61008b38414a730f564565cf7c20

gomod (2)

go.mod (1)

• go 1.26.2

lambda/go.mod (17)

• go 1.26.2
• cloud.google.com/go/firestore v1.22.0
• cloud.google.com/go/pubsub/v2 v2.4.0 → [Updates: v2.6.0]
• cloud.google.com/go/secretmanager v1.16.0 → [Updates: v1.19.0]
• github.com/aws/aws-lambda-go v1.54.0
• github.com/aws/aws-sdk-go-v2 v1.41.7
• github.com/aws/aws-sdk-go-v2/config v1.32.14 → [Updates: v1.32.16]
• github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue v1.20.37 → [Updates: v1.20.38]
• github.com/aws/aws-sdk-go-v2/service/dynamodb v1.57.1 → [Updates: v1.57.2]
• github.com/aws/aws-sdk-go-v2/service/ec2 v1.297.0 → [Updates: v1.299.0]
• github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.41.5 → [Updates: v1.41.6]
• github.com/aws/aws-sdk-go-v2/service/sqs v1.42.25 → [Updates: v1.42.26]
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/google/uuid v1.6.0
• github.com/googleapis/gax-go/v2 v2.21.0 → [Updates: v2.22.0]
• google.golang.org/api v0.274.0 → [Updates: v0.276.0]
• google.golang.org/grpc v1.80.0 → [Updates: v1.81.0]

terraform (3)

infra/terraform-gcp/main.tf

infra/terraform-gcp/versions.tf (6)

• google >= 5.30.0
• http >= 3.4.0
• local >= 2.5.0
• null >= 3.2.0
• random >= 3.6.0
• hashicorp/terraform >= 1.6.0

infra/terraform/versions.tf (2)

• aws ~> 6.0
• hashicorp/terraform >= 1.6.0

---

• Check this box to trigger a request for Renovate to run again on this repository