Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• [skip-release] Update actions/setup-go action to v7
• Update module github.com/lestrrat-go/jwx/v3 to v4
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• [skip-release] Pin lehigh-university-libraries/gha action to e26d86a
• [skip-release] Update bump-dependencies (actions/checkout, github.com/lestrrat-go/jwx/v3, golang)
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

0/1 CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/crypto

• GO-2026-5932

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• golang 1.26-alpine@sha256:9097beb5536220f7857bdcb65c1b4b340630dd7a70b85f03d5af29640b06693d → [Updates: 1.26-alpine]

github-actions (5)

.github/workflows/etds.yml (2)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093

.github/workflows/github-release.yml (1)

• lehigh-university-libraries/gha main → [Updates: main]

.github/workflows/goreleaser.yml (5)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• goreleaser/goreleaser-action v7@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• ubuntu 24.04
• go >=1.25.6

.github/workflows/lint-test-build-push.yml (6)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• golangci/golangci-lint-action v9@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• lehigh-university-libraries/gha main → [Updates: main]
• ubuntu 24.04
• go >=1.25.3

.github/workflows/run.yml (5)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093

gomod (1)

go.mod (4)

• go 1.26
• github.com/lehigh-university-libraries/go-islandora v0.6.1
• github.com/lestrrat-go/jwx/v3 v3.1.1 → [Updates: v3.2.0, v4.2.0]
• github.com/sfomuseum/go-edtf v1.3.0

renovate-config (1)

renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository