Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository problems

Renovate tried to run on this repository, but found these problems.

• WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update module github.com/testcontainers/testcontainers-go to v0.40.0
• fix(deps): update module go.k6.io/k6 to v1.4.2
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-go action to v6
• chore(deps): update golangci/golangci-lint-action action to v9
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update python docker tag to v3.14

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package goreleaser/goreleaser-action).

Files affected: .github/workflows/release.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): pin dependencies (actions/checkout, actions/setup-go, alpine, alpine/git, ghcr.io/astral-sh/uv, golang, python)
• fix(deps): update github.com/grafana/sobek digest to 9a028a3
• chore(deps): update securego/gosec action to v2.22.10
• fix(deps): update module github.com/tmc/langchaingo to v0.1.14
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

0/3 CVEs have Renovate fixes.

gomod

go.mod

github.com/docker/docker

• GHSA-j249-ghv5-7mxv
• GHSA-qrqr-3x5j-2xw9
• GHSA-6hwg-w5jg-9c6x

Detected dependencies

dockerfile

Dockerfile

• golang 1.25-alpine
• alpine latest

images/travel-agent/Dockerfile

• alpine/git latest
• python 3.13-slim
• ghcr.io/astral-sh/uv latest

github-actions

.github/actions/run-quality-checks/action.yml

• golangci/golangci-lint-action v8.0.0@4afd733a84b1f43292c63897423277bb7f4313a9
• securego/gosec v2.22.9@15d5c61e866bc2e2e8389376a31f1e5e09bde7d8

.github/actions/setup-go-environment/action.yml

• actions/setup-go v4
• go ${{ inputs.go-version }}

.github/workflows/ci.yml

• actions/checkout v5
• codecov/codecov-action v5.5.1@5a1091511ad55cbe89839c7260b706298ca349f7
• actions/checkout v5
• actions/checkout v5
• actions/checkout v5

.github/workflows/release.yml

• actions/checkout v5
• goreleaser/goreleaser-action v8.0.0@e435ccd777264be153ace6237001ef4d979d3a7a

gomod

go.mod

• go 1.24.7
• github.com/stretchr/testify v1.11.1
• github.com/testcontainers/testcontainers-go v0.39.0
• go.k6.io/k6 v1.3.0
• github.com/grafana/sobek v0.0.0-20250723111835-dd8a13f0d439@dd8a13f0d439
• github.com/tmc/langchaingo v0.1.13

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.