Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (2)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/GoogleCloudPlatform/functions-framework-go	2025-03-27
gomod	github.com/google/uuid	2024-01-23

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): pin dependencies in .github/workflows/gce-image-build.yml (main) (google-github-actions/auth, google-github-actions/setup-gcloud)
• chore(deps): update actions/checkout digest to df4cb1c in .github/workflows/test.yml (main)
• chore(deps): update actions/labeler digest to f27b608 in .github/workflows/labeler.yml (main)
• chore(deps): update golangci/golangci-lint-action digest to 82606bf in .github/workflows/test.yml (main)
• chore(deps): update go to v1.26.4 in go.mod (main)
• chore(deps): update hashicorp/setup-packer action to v3.3.0 in .github/workflows/gce-image-build.yml (main)
• fix(deps): update module cloud.google.com/go/compute to v1.64.0 in lambda/go.mod (main)
• fix(deps): update module cloud.google.com/go/pubsub/v2 to v2.6.0 in lambda/go.mod (main)
• fix(deps): update module cloud.google.com/go/secretmanager to v1.20.0 in lambda/go.mod (main)
• fix(deps): update module github.com/googleapis/gax-go/v2 to v2.22.0 in lambda/go.mod (main)
• fix(deps): update module google.golang.org/api to v0.284.0 in lambda/go.mod (main)
• fix(deps): update module google.golang.org/grpc to v1.81.1 in lambda/go.mod (main)
• chore(deps): update github artifact actions to v7 in .github/workflows/scorecard.yml (main)
• chore(deps): update github- to v3 in .github/workflows/gce-image-build.yml (main) (google-github-actions/auth, google-github-actions/setup-gcloud)
• chore(deps): lock file maintenance in infra/terraform/versions.tf (main)
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/github-script digest to f28e40c in .github/workflows/scorecard-pr.yml (main)
• chore(deps): update actions/setup-go digest to 4a36011 in .github/workflows/test.yml (main)
• chore(deps): update aws-actions/configure-aws-credentials digest to e7f100c in .github/workflows/ami-build.yml (main)
• chore(deps): update goreleaser/goreleaser-action digest to 5daf1e9 in .github/workflows/release.yml (main)
• chore(deps): update github/codeql-action action to v4.36.2 in .github/workflows/scorecard.yml (main)
• fix(deps): update aws-sdk-go-v2 monorepo in lambda/go.mod (main) (github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue, github.com/aws/aws-sdk-go-v2/service/dynamodb, github.com/aws/aws-sdk-go-v2/service/ec2, github.com/aws/aws-sdk-go-v2/service/secretsmanager, github.com/aws/aws-sdk-go-v2/service/sqs)
• chore(deps): update actions/github-script action to v8 in .github/workflows/scorecard-pr.yml (main)
• chore(deps): update actions/github-script action to v9 in .github/workflows/scorecard-pr.yml (main)
• chore(deps): update github artifact actions to v5 in .github/workflows/scorecard.yml (main)
• chore(deps): update github artifact actions to v6 in .github/workflows/scorecard.yml (main)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (11)

.github/workflows/ami-build.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• aws-actions/configure-aws-credentials v6@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 → [Updates: v6]
• hashicorp/setup-packer v3.2.0@c3d53c525d422944e50ee27b840746d6522b08de → [Updates: v3.3.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• aws-actions/configure-aws-credentials v6@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 → [Updates: v6]

.github/workflows/codeql.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4.36.2]
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4.36.2]

.github/workflows/gce-image-build.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• google-github-actions/auth v2 → [Updates: v3, v2]
• google-github-actions/setup-gcloud v2 → [Updates: v3, v2]
• hashicorp/setup-packer v3.2.0@c3d53c525d422944e50ee27b840746d6522b08de → [Updates: v3.3.0]

.github/workflows/label-old-prs.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/labeler v6@634933edcd8ababfe52f92936142cc22ac488b1b → [Updates: v6]

.github/workflows/labeler.yml (1)

• actions/labeler v6@634933edcd8ababfe52f92936142cc22ac488b1b → [Updates: v6]

.github/workflows/release.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• goreleaser/goreleaser-action v7@ec59f474b9834571250b370d4735c50f8e2d1e29 → [Updates: v7]

.github/workflows/scorecard-pr.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/github-script v7@60a0d83039c74a4aee543508d2ffcb1c3799cdea → [Updates: v8, v9, v7]

.github/workflows/scorecard.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v5, v6, v7]
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4.36.2]

.github/workflows/security.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]

.github/workflows/shellcheck.yml (1)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]

.github/workflows/test.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• golangci/golangci-lint-action v9@1e7e51e771db61008b38414a730f564565cf7c20 → [Updates: v9]

gomod (2)

go.mod (1)

• go 1.26.2 → [Updates: 1.26.4]

lambda/go.mod (20)

• go 1.26.4
• cloud.google.com/go/compute v1.61.0 → [Updates: v1.64.0]
• cloud.google.com/go/firestore v1.22.0
• cloud.google.com/go/pubsub/v2 v2.4.0 → [Updates: v2.6.0]
• cloud.google.com/go/secretmanager v1.16.0 → [Updates: v1.20.0]
• github.com/GoogleCloudPlatform/functions-framework-go v1.9.2
• github.com/aws/aws-lambda-go v1.54.0
• github.com/aws/aws-sdk-go-v2 v1.41.7 → [Updates: v1.42.0]
• github.com/aws/aws-sdk-go-v2/config v1.32.14 → [Updates: v1.32.24]
• github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue v1.20.37 → [Updates: v1.20.48]
• github.com/aws/aws-sdk-go-v2/service/dynamodb v1.57.1 → [Updates: v1.59.0]
• github.com/aws/aws-sdk-go-v2/service/ec2 v1.297.0 → [Updates: v1.306.0]
• github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.41.5 → [Updates: v1.42.3]
• github.com/aws/aws-sdk-go-v2/service/sqs v1.42.25 → [Updates: v1.44.0]
• github.com/cloudevents/sdk-go/v2 v2.16.2
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/google/uuid v1.6.0
• github.com/googleapis/gax-go/v2 v2.21.0 → [Updates: v2.22.0]
• google.golang.org/api v0.274.0 → [Updates: v0.284.0]
• google.golang.org/grpc v1.80.0 → [Updates: v1.81.1]

terraform (3)

infra/terraform-gcp/main.tf

infra/terraform-gcp/versions.tf (6)

• google >= 5.30.0
• http >= 3.4.0
• local >= 2.5.0
• null >= 3.2.0
• random >= 3.6.0
• hashicorp/terraform >= 1.6.0

infra/terraform/versions.tf (2)

• aws ~> 6.0
• hashicorp/terraform >= 1.6.0

---

• Check this box to trigger a request for Renovate to run again on this repository