Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency golangci/golangci-lint to v2.12.2
• Update golang Docker tag to v1.26.3
• Update module github.com/fxamacker/cbor/v2 to v2.9.2
• Update module github.com/golang-jwt/jwt/v5 to v5.3.1
• Update module github.com/stretchr/testify to v1.11.1
• Update module github.com/ugorji/go/codec to v1.3.1
• Update module golang.org/x/sync to v0.20.0
• Update actions/checkout action to v6
• Update actions/setup-go action to v6
• Update Chizkiyahu/delete-untagged-ghcr-action action to v6
• Update codecov/codecov-action action to v6
• Update dependency ubuntu to v24
• Update docker/build-push-action action to v7
• Update docker/login-action action to v4
• Update docker/metadata-action action to v6
• Update docker/setup-buildx-action action to v4
• Update docker/setup-qemu-action action to v4
• Update GitHub Artifact Actions (major) (actions/download-artifact, actions/upload-artifact)
• Update golangci/golangci-lint-action action to v9
• Update snok/container-retention-policy action to v3
• 🔐 Create all rate-limited PRs at once 🔐

PR Creation Approval Required

The following branches exist but PR creation requires approval. To approve PR creation, click on a checkbox below.

• Update module github.com/fredbi/uri to v1.1.1
• Update module github.com/pion/logging to v0.2.4
• Update alpine Docker tag to v3.23
• Update module github.com/plgd-dev/go-coap/v3 to v3.5.1

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update github.com/go-json-experiment/json digest to 572e7c3
• Update golang.org/x/exp digest to c761662
• Update module github.com/grpc-ecosystem/go-grpc-middleware/v2 to v2.3.3

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update module github.com/pion/dtls/v3 to v3.0.11 [SECURITY]
• Update module google.golang.org/grpc to v1.79.3 [SECURITY]
• Update SonarSource/sonarqube-scan-action action to v6 [SECURITY]
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

cmd/bridge-device/Dockerfile (3)

• docker/dockerfile 1
• golang 1.23.9-alpine → [Updates: 1.26.3-alpine]
• alpine 3.22 → [Updates: 3.23]

github-actions (7)

.github/actions/cleanup-stale/action.yaml (4)

• snok/container-retention-policy v2 → [Updates: v3.1.0]
• docker/setup-buildx-action v3 → [Updates: v4]
• docker/login-action v3 → [Updates: v4]
• Chizkiyahu/delete-untagged-ghcr-action v4 → [Updates: v6]

.github/workflows/build-publish-cfg.yaml (8)

• actions/checkout v4 → [Updates: v6]
• docker/setup-qemu-action v3 → [Updates: v4]
• docker/setup-buildx-action v3 → [Updates: v4]
• docker/login-action v3 → [Updates: v4]
• docker/metadata-action v5 → [Updates: v6]
• docker/build-push-action v6 → [Updates: v7]
• docker/build-push-action v6 → [Updates: v7]
• ubuntu 24.04

.github/workflows/build-with-cfg.yml (4)

• actions/checkout v4 → [Updates: v6]
• actions/setup-go v5 → [Updates: v6]
• anchore/sbom-action v0
• ubuntu 24.04

.github/workflows/ghcr-cleanup.yaml (6)

• snok/container-retention-policy v2 → [Updates: v3.1.0]
• snok/container-retention-policy v2 → [Updates: v3.1.0]
• snok/container-retention-policy v2 → [Updates: v3.1.0]
• actions/checkout v4 → [Updates: v6]
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/golangci-lint.yml (6)

• actions/checkout v4 → [Updates: v6]
• actions/setup-go v5 → [Updates: v6]
• golangci/golangci-lint-action v8 → [Updates: v9]
• ubuntu 24.04
• go ^1.23
• golangci/golangci-lint v2.1.6 → [Updates: v2.12.2]

.github/workflows/test-with-cfg.yml (5)

• actions/checkout v4 → [Updates: v6]
• actions/setup-go v5 → [Updates: v6]
• actions/upload-artifact v4 → [Updates: v7]
• ubuntu 24.04
• go ^1.23

.github/workflows/tests.yml (5)

• actions/checkout v4 → [Updates: v6]
• actions/download-artifact v4 → [Updates: v8]
• SonarSource/sonarqube-scan-action v5 → [Updates: v6]
• codecov/codecov-action v5 → [Updates: v6]
• ubuntu 22.04 → [Updates: 24.04]

gomod (1)

go.mod (23)

• go 1.23.0
• github.com/fredbi/uri v1.1.0 → [Updates: v1.1.1]
• github.com/fxamacker/cbor/v2 v2.8.0 → [Updates: v2.9.2]
• github.com/go-json-experiment/json v0.0.0-20240815174924-0599f16bf0e2@0599f16bf0e2 → [Updates: v0.0.0-20260520185125-572e7c383686]
• github.com/golang-jwt/jwt/v5 v5.2.2 → [Updates: v5.3.1]
• github.com/google/uuid v1.6.0
• github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.2 → [Updates: v2.3.3]
• github.com/hashicorp/go-multierror v1.1.1
• github.com/jessevdk/go-flags v1.6.1
• github.com/karrick/tparse/v2 v2.8.2
• github.com/pion/dtls/v3 v3.0.6 → [Updates: v3.0.11]
• github.com/pion/logging v0.2.3 → [Updates: v0.2.4]
• github.com/plgd-dev/go-coap/v3 v3.3.7-0.20250702164925-f431046ea1ce@f431046ea1ce → [Updates: v3.5.1]
• github.com/plgd-dev/kit/v2 v2.0.0-20211006190727-057b33161b90@057b33161b90
• github.com/stretchr/testify v1.10.0 → [Updates: v1.11.1]
• github.com/ugorji/go/codec v1.2.14 → [Updates: v1.3.1]
• github.com/web-of-things-open-source/thingdescription-go v0.0.0-20250521114616-3895cda67f5d@3895cda67f5d
• go.uber.org/atomic v1.11.0
• golang.org/x/exp v0.0.0-20250531010427-b6e5de432a8b@b6e5de432a8b → [Updates: v0.0.0-20260529124908-c761662dc8c9]
• golang.org/x/sync v0.14.0 → [Updates: v0.20.0]
• google.golang.org/grpc v1.72.2 → [Updates: v1.79.3]
• gopkg.in/yaml.v3 v3.0.1
• github.com/go-json-experiment/json v0.0.0-20240815175050-ebd3a8989ca1@ebd3a8989ca1 → [Updates: v0.0.0-20260520185125-572e7c383686]

---

• Check this box to trigger a request for Renovate to run again on this repository