Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (1)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/jzelinskie/must	2022-04-17

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update homebrew formula grafana/pyroscope to v2.0.3

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update module github.com/cloudflare/circl to v1.6.3 [security]
• fix(deps): update module golang.org/x/crypto to v0.52.0 [security]
• fix(deps): update module golang.org/x/sys to v0.44.0 [security]
• chore(deps): pin dependencies (actions/cache, actions/upload-artifact, grafana/pyroscope)
• chore(deps): update homebrew/actions digest to d0dd492
• chore(deps): update actions/cache action to v5
• fix(deps): update module github.com/google/go-github/v55 to v88
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

31/31 CVEs have Renovate fixes.

gomod

scripts/generate-formulas/go.mod

github.com/cloudflare/circl

• GHSA-2x5j-vhc8-9cwm (fixed in >= 1.6.1)
• GHSA-9763-4f94-gfch (fixed in >= 1.3.7)
• GHSA-q9hv-hpm4-hj6x (fixed in >= 1.6.3)
• GO-2024-2453 (fixed in >= 1.3.7)
• GO-2025-3754 (fixed in >= 1.6.1)
• GO-2026-4550 (fixed in >= 1.6.3)

golang.org/x/crypto

• GHSA-45x7-px36-x8w8 (fixed in >= 0.17.0)
• GHSA-f6x5-jh6r-wrfv (fixed in >= 0.45.0)
• GHSA-hcg3-q754-cr77 (fixed in >= 0.35.0)
• GHSA-j5w8-q4qc-rx2x (fixed in >= 0.45.0)
• GHSA-v778-237x-gjrc (fixed in >= 0.31.0)
• GO-2023-2402 (fixed in >= 0.17.0)
• GO-2024-3321 (fixed in >= 0.31.0)
• GO-2025-3487 (fixed in >= 0.35.0)
• GO-2025-4116 (fixed in >= 0.43.0)
• GO-2025-4134 (fixed in >= 0.45.0)
• GO-2025-4135 (fixed in >= 0.45.0)
• GO-2026-5005 (fixed in >= 0.52.0)
• GO-2026-5006 (fixed in >= 0.52.0)
• GO-2026-5013 (fixed in >= 0.52.0)
• GO-2026-5014 (fixed in >= 0.52.0)
• GO-2026-5015 (fixed in >= 0.52.0)
• GO-2026-5016 (fixed in >= 0.52.0)
• GO-2026-5017 (fixed in >= 0.52.0)
• GO-2026-5018 (fixed in >= 0.52.0)
• GO-2026-5019 (fixed in >= 0.52.0)
• GO-2026-5020 (fixed in >= 0.52.0)
• GO-2026-5021 (fixed in >= 0.52.0)
• GO-2026-5023 (fixed in >= 0.52.0)
• GO-2026-5033 (fixed in >= 0.52.0)

golang.org/x/sys

• GO-2026-5024 (fixed in >= 0.44.0)

Detected Dependencies

github-actions (1)

.github/workflows/tests.yml (3)

• Homebrew/actions master@6eaeff80e7e5c43087c0e5eb5aa82120399e9c91 → [Updates: master]
• actions/cache v4 → [Updates: v5, v4]
• actions/upload-artifact main → [Updates: main]

gomod (1)

scripts/generate-formulas/go.mod (6)

• go 1.19
• github.com/google/go-github/v55 v55.0.0 → [Updates: v88.0.0]
• github.com/jzelinskie/must v0.0.1
• github.com/cloudflare/circl v1.3.3 → [Updates: v1.6.3]
• golang.org/x/crypto v0.12.0 → [Updates: v0.52.0]
• golang.org/x/sys v0.11.0 → [Updates: v0.44.0]

homebrew (2)

Formula/profilecli.rb (1)

• grafana/pyroscope v2.0.2 → [Updates: v2.0.3, v2.0.2]

Formula/pyroscope.rb (1)

• grafana/pyroscope v2.0.2 → [Updates: v2.0.3, v2.0.2]

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.