Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update module github.com/nyaruka/phonenumbers/v2 to v2.0.8
• chore(deps): update module github.com/brianvoe/gofakeit/v7 to v7.16.0
• chore(deps): update module github.com/stretchr/testify to v1.12.1
• chore(deps): update module modernc.org/sqlite to v1.57.0
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update go-indirect (cloud.google.com/go/auth, github.com/anthropics/anthropic-sdk-go, github.com/charmbracelet/ultraviolet, github.com/charmbracelet/x/exp/charmtone, github.com/charmbracelet/x/exp/slice, github.com/dlclark/regexp2/v2, github.com/googleapis/gax-go/v2, github.com/mattn/go-runewidth, github.com/ollama/ollama, go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp, go.opentelemetry.io/otel, go.opentelemetry.io/otel/metric, go.opentelemetry.io/otel/trace, golang.org/x/exp, golang.org/x/net, google.golang.org/api, google.golang.org/genai, google.golang.org/genproto/googleapis/rpc, google.golang.org/grpc, google.golang.org/protobuf, modernc.org/memory)
• chore(deps): update charmbracelet (charm.land/bubbles/v2, charm.land/bubbletea/v2, charm.land/lipgloss/v2, github.com/charmbracelet/x/ansi)
• chore(deps): update golang-x (golang.org/x/crypto, golang.org/x/text)
• chore(deps): update module github.com/mark3labs/mcp-go to v0.58.0

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package github.com/spf13/cobra: no-result, Failed to look up go package github.com/charmbracelet/x/term: no-result, Failed to look up go package github.com/google/go-cmp: no-result, Failed to look up go package github.com/mitchellh/hashstructure/v2: no-result, Failed to look up go package golang.org/x/sync: no-result.

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update docker-images (caddy, gcr.io/distroless/static-debian12, golang, postgres)
• chore(deps): update github-actions (cachix/install-nix-action, github/codeql-action, step-security/harden-runner)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (3)

deploy/docker-compose.caddy.yml (1)

• caddy sha256:844f60b64e4724a5aa8245e019dace0d3f199f7433ce6c57676cb30a920dbad9 → [Updates: undefined]

deploy/docker-compose.test.yml

deploy/docker-compose.yml (1)

• postgres sha256:a02db8cac496f15b094798a38254f14d6e00741f709360e5e00bb6668ea31636 → [Updates: undefined]

dockerfile (1)

deploy/relay/Dockerfile (2)

• golang sha256:2005724102f45917a63e9d092fc0e4ea56ea575048ce147caad5f5f61502c365 → [Updates: undefined]
• gcr.io/distroless/static-debian12 sha256:a9fcaedd4c9b59e12dd65d954f0b5044f19b0647a8a3712e77205df9e7b102cd → [Updates: undefined]

github-actions (7)

.github/workflows/ci.yml (28)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31.11.0@630ae543ea3a38a9a4166f03376c02c50f408342 → [Updates: v31.11.1]
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31.11.0@630ae543ea3a38a9a4166f03376c02c50f408342 → [Updates: v31.11.1]
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• useblacksmith/setup-docker-builder v2.1.0@a5256a73e30f09e37e3eceb8ca36043d17621d24
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• go 1.26
• go 1.26
• go 1.26
• node lts/*

.github/workflows/lint.yml (19)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• golangci/golangci-lint-action v9.3.0@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31.11.0@630ae543ea3a38a9a4166f03376c02c50f408342 → [Updates: v31.11.1]
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• go 1.26
• go 1.26
• go 1.26

.github/workflows/pages.yml (6)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/configure-pages v6.0.0@45bfe0192ca1faeb007ade9deae92b16b8254a0d
• cachix/install-nix-action v31.11.0@630ae543ea3a38a9a4166f03376c02c50f408342 → [Updates: v31.11.1]
• actions/upload-pages-artifact v5@fc324d3547104276b827a68afc52ff2a11cc49c9
• actions/deploy-pages v5.0.0@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128

.github/workflows/release.yml (7)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• useblacksmith/setup-docker-builder v2.1.0@a5256a73e30f09e37e3eceb8ca36043d17621d24
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• go 1.26

.github/workflows/scheduled-release.yml (5)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• node lts/*

.github/workflows/security.yml (19)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31.11.0@630ae543ea3a38a9a4166f03376c02c50f408342 → [Updates: v31.11.1]
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• step-security/trufflehog-action v3.95.9@72d1f67314fcd8ca707e19692ff0cb670d7d02c7
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• github/codeql-action v4.37.6@5595ccaf912efad79be6eef63a5619ff05969be3 → [Updates: v4.37.9]
• github/codeql-action v4.37.6@5595ccaf912efad79be6eef63a5619ff05969be3 → [Updates: v4.37.9]
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• go 1.26
• go 1.26

.github/workflows/update-vendor-hash.yml (6)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31.11.0@630ae543ea3a38a9a4166f03376c02c50f408342 → [Updates: v31.11.1]

gomod (1)

go.mod (130)

• go 1.26.5
• charm.land/fang/v2 v2.0.1
• github.com/BurntSushi/toml v1.6.0
• github.com/adrg/xdg v0.5.3
• github.com/brianvoe/gofakeit/v7 v7.15.0 → [Updates: v7.16.0]
• github.com/dustin/go-humanize v1.0.1
• github.com/go-playground/validator/v10 v10.30.3
• github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510@e7afc7fbc510
• github.com/iancoleman/strcase v0.3.0
• github.com/itchyny/gojq v0.12.19
• github.com/mark3labs/mcp-go v0.57.0 → [Updates: v0.58.0]
• github.com/mozilla-ai/any-llm-go v0.9.0
• github.com/nyaruka/phonenumbers/v2 v2.0.7 → [Updates: v2.0.8]
• github.com/oklog/ulid/v2 v2.1.2
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/stretchr/testify v1.11.1 → [Updates: v1.12.1]
• github.com/tj/go-naturaldate v1.3.0
• golang.org/x/crypto v0.54.0 → [Updates: v0.55.0]
• golang.org/x/sys v0.47.0
• golang.org/x/term v0.45.0
• golang.org/x/text v0.40.0 → [Updates: v0.41.0]
• gorm.io/driver/postgres v1.6.2
• gorm.io/gorm v1.31.2
• modernc.org/sqlite v1.56.0 → [Updates: v1.57.0]
• github.com/charmbracelet/ultraviolet v0.0.0-20260808192814-d38ea0f8aa5c@d38ea0f8aa5c → [Updates: v0.0.0-20260812204455-68fa937c71be]
• github.com/charmbracelet/x/exp/charmtone v0.0.0-20260803091719-3755ebad01b1@3755ebad01b1 → [Updates: v0.0.0-20260828171018-3c30eef5e73e]
• github.com/charmbracelet/x/exp/ordered v0.1.0
• github.com/charmbracelet/x/termios v0.1.1
• github.com/charmbracelet/x/windows v0.2.2
• github.com/dlclark/regexp2/v2 v2.6.0 → [Updates: v2.7.1]
• github.com/google/jsonschema-go v0.4.3
• github.com/invopop/jsonschema v0.14.0
• github.com/jackc/pgpassfile v1.0.0
• github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761@5a60cdf6a761
• github.com/jackc/pgx/v5 v5.10.0
• github.com/jackc/puddle/v2 v2.2.2
• github.com/muesli/mango v0.2.0
• github.com/muesli/mango-cobra v1.3.0
• github.com/muesli/mango-pflag v0.2.0
• github.com/muesli/roff v0.1.0
• github.com/pb33f/ordered-map/v2 v2.3.1
• github.com/santhosh-tekuri/jsonschema/v6 v6.0.3
• github.com/spf13/cast v1.10.0
• github.com/standard-webhooks/standard-webhooks/libraries v0.0.1
• github.com/yosida95/uritemplate/v3 v3.0.2
• go.yaml.in/yaml/v4 v4.0.0-rc.6
• google.golang.org/api v0.292.0 → [Updates: v0.295.0]
• charm.land/bubbles/v2 v2.1.1 → [Updates: v2.2.1]
• charm.land/bubbletea/v2 v2.0.8 → [Updates: v2.0.9]
• charm.land/glamour/v2 v2.0.1
• charm.land/huh/v2 v2.0.3
• charm.land/lipgloss/v2 v2.0.5 → [Updates: v2.0.6]
• cloud.google.com/go v0.123.0
• cloud.google.com/go/auth v0.23.0 → [Updates: v0.23.2]
• cloud.google.com/go/compute/metadata v0.9.0
• github.com/alecthomas/chroma/v2 v2.27.0
• github.com/anthropics/anthropic-sdk-go v1.62.0 → [Updates: v1.68.0]
• github.com/atotto/clipboard v0.1.4
• github.com/aymerick/douceur v0.2.0
• github.com/bahlo/generic-list-go v0.2.0
• github.com/buger/jsonparser v1.6.1
• github.com/catppuccin/go v0.3.0
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/charmbracelet/colorprofile v0.4.3
• github.com/charmbracelet/harmonica v0.2.0
• github.com/charmbracelet/x/ansi v0.11.7 → [Updates: v0.11.8]
• github.com/charmbracelet/x/exp/slice v0.0.0-20260803091719-3755ebad01b1@3755ebad01b1 → [Updates: v0.0.0-20260828171018-3c30eef5e73e]
• github.com/charmbracelet/x/exp/strings v0.1.0
• github.com/charmbracelet/x/term v0.2.2
• github.com/clipperhouse/displaywidth v0.11.0
• github.com/clipperhouse/uax29/v2 v2.7.0
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/dlclark/regexp2 v1.12.0 → [Updates: v2.7.1]
• github.com/felixge/httpsnoop v1.1.0
• github.com/gabriel-vasile/mimetype v1.4.15
• github.com/go-logr/logr v1.4.4
• github.com/go-logr/stdr v1.2.2
• github.com/go-playground/locales v0.14.1
• github.com/go-playground/universal-translator v0.18.1
• github.com/google/go-cmp v0.7.0
• github.com/google/s2a-go v0.1.9
• github.com/google/uuid v1.6.0
• github.com/googleapis/enterprise-certificate-proxy v0.3.20
• github.com/googleapis/gax-go/v2 v2.23.0 → [Updates: v2.24.0]
• github.com/gorilla/css v1.0.1
• github.com/gorilla/websocket v1.5.3
• github.com/inconshreveable/mousetrap v1.1.0
• github.com/itchyny/timefmt-go v0.1.8
• github.com/jinzhu/inflection v1.0.0
• github.com/jinzhu/now v1.1.5
• github.com/leodido/go-urn v1.5.0
• github.com/lrstanley/bubblezone/v2 v2.0.0
• github.com/lucasb-eyer/go-colorful v1.4.1
• github.com/mailru/easyjson v0.9.2
• github.com/mattn/go-isatty v0.0.24
• github.com/mattn/go-runewidth v0.0.27 → [Updates: v0.0.28]
• github.com/microcosm-cc/bluemonday v1.0.27
• github.com/mitchellh/hashstructure/v2 v2.0.2
• github.com/muesli/cancelreader v0.2.2
• github.com/ncruces/go-strftime v1.0.0
• github.com/ollama/ollama v0.32.6 → [Updates: v0.33.2]
• github.com/openai/openai-go v1.12.0 → [Updates: v3.54.0]
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec@24d4a6f8daec
• github.com/rivo/uniseg v0.4.7
• github.com/tidwall/gjson v1.19.0
• github.com/tidwall/match v1.2.0
• github.com/tidwall/pretty v1.2.1
• github.com/tidwall/sjson v1.2.5
• github.com/wk8/go-ordered-map/v2 v2.1.8
• github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e@abceb7e1c41e → [Updates: v1.0.0]
• github.com/yuin/goldmark v1.8.5 → [Updates: v2.0.0]
• github.com/yuin/goldmark-emoji v1.0.6 → [Updates: v2.0.2]
• go.opentelemetry.io/auto/sdk v1.2.1
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.70.0 → [Updates: v0.71.0]
• go.opentelemetry.io/otel v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/metric v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/trace v1.45.0 → [Updates: v1.46.0]
• golang.org/x/exp v0.0.0-20260727155853-b88d891fe743@b88d891fe743 → [Updates: v0.0.0-20260824195058-e88cd73687aa]
• golang.org/x/net v0.57.0 → [Updates: v0.58.0]
• golang.org/x/sync v0.22.0
• google.golang.org/genai v1.67.0 → [Updates: v1.70.0]
• google.golang.org/genproto/googleapis/rpc v0.0.0-20260807164820-c8921c73eeea@c8921c73eeea → [Updates: v0.0.0-20260825221802-da73d73af1c5]
• google.golang.org/grpc v1.83.0 → [Updates: v1.83.2]
• google.golang.org/protobuf v1.36.11 → [Updates: v1.36.12]
• gopkg.in/yaml.v3 v3.0.1
• modernc.org/libc v1.75.3 → [Updates: v2.1.30]
• modernc.org/mathutil v1.7.1
• modernc.org/memory v1.12.0 → [Updates: v1.12.1]

nix (1)

flake.nix (4)

• flake-utils lock file @ 11707dc2f618dd54ca8739b309ec4fc024de578b
• git-hooks lock file @ 43b3c1ab9d40fb1dbb008f451988a91e375825e9
• gitignore lock file @ cb5e3fdca1de58ccbc3ef53de65bd372b48f567c
• nixpkgs nixos-unstable-small

---

• Check this box to trigger a request for Renovate to run again on this repository