This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/theopenlane/core). ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] <!-- rebase-branch=renovate/all-patch -->[fix(deps): update all patch dependencies](../pull/2391) (`github.com/nyaruka/phonenumbers`, `github.com/theopenlane/core`) - [ ] <!-- rebase-branch=renovate/github.com-theopenlane-entx-0.x -->[fix(deps): update module github.com/theopenlane/entx to v0.28.0](../pull/2383) - [ ] <!-- rebase-branch=renovate/github.com-theopenlane-riverboat-0.x -->[fix(deps): update module github.com/theopenlane/riverboat to v0.9.13](../pull/1965) - [ ] <!-- rebase-branch=renovate/river-monorepo -->[fix(deps): update river monorepo to v0.36.0](../pull/2264) (`github.com/riverqueue/river`, `github.com/riverqueue/river/riverdriver/riverpgxv5`, `github.com/riverqueue/river/rivertype`) - [ ] <!-- rebase-branch=renovate/github.com-google-go-github-v84-86.x -->[fix(deps): update module github.com/google/go-github/v84 to v86](../pull/2388) - [ ] <!-- rebase-branch=renovate/github.com-knadh-koanf-providers-env-2.x -->[fix(deps): update module github.com/knadh/koanf/providers/env to v2](../pull/2374) - [ ] <!-- rebase-branch=renovate/github.com-labstack-echo-v4-5.x -->[fix(deps): update module github.com/labstack/echo/v4 to v5](../pull/2376) - [ ] <!-- rebase-branch=renovate/github.com-lestrrat-go-jwx-v3-4.x -->[fix(deps): update module github.com/lestrrat-go/jwx/v3 to v4](../pull/2389) - [ ] <!-- rebase-branch=renovate/github.com-stripe-stripe-go-v84-85.x -->[fix(deps): update module github.com/stripe/stripe-go/v84 to v85](../pull/2216) - [ ] <!-- rebase-all-open-prs -->**Click on this checkbox to rebase all open PRs at once** ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] <!-- recreate-branch=renovate/equinixmetal-buildkite-trivy-1.x -->[chore(deps): update buildkite plugin equinixmetal-buildkite/trivy to v1.22.0](../pull/2201) - [ ] <!-- recreate-branch=renovate/postgres-18.x -->[chore(deps): update postgres docker tag to v18](../pull/1286) - [ ] <!-- recreate-branch=renovate/redis-8.x -->[chore(deps): update redis docker tag to v8](../pull/752) ## Detected Dependencies <details><summary>buildkite (1)</summary> <blockquote> <details><summary>.buildkite/pipeline.yaml (60)</summary> - `docker v5.13.0` - `docker v5.13.0` - `docker v5.13.0` - `sparse-checkout v1.8.0` - `docker v5.13.0` - `sparse-checkout v1.8.0` - `docker v5.13.0` - `sparse-checkout v1.8.0` - `docker v5.13.0` - `docker v5.13.0` - `docker v5.13.0` - `docker v5.13.0` - `docker v5.13.0` - `docker v5.13.0` - `docker v5.13.0` - `docker v5.13.0` - `docker v5.13.0` - `sparse-checkout v1.8.0` - `docker v5.13.0` - `artifacts v1.9.4` - `artifacts v1.9.4` - `artifacts v1.9.4` - `artifacts v1.9.4` - `artifacts v1.9.4` - `artifacts v1.9.4` - `artifacts v1.9.4` - `artifacts v1.9.4` - `artifacts v1.9.4` - `docker v5.13.0` - `artifacts v1.9.4` - `artifacts v1.9.4` - `artifacts v1.9.4` - `artifacts v1.9.4` - `artifacts v1.9.4` - `artifacts v1.9.4` - `docker v5.13.0` - `docker v5.13.0` - `docker v5.13.0` - `docker v5.13.0` - `docker v5.13.0` - `sparse-checkout v1.8.0` - `theopenlane/atlas v1.2.1` - `sparse-checkout v1.8.0` - `docker v5.13.0` - `artifacts v1.9.4` - `docker-login v3.0.0` - `theopenlane/docker-metadata v1.0.1` - `theopenlane/container-build v1.1.1` - `equinixmetal-buildkite/trivy v1.19.0` → [Updates: `v1.22.0`] - `artifacts v1.9.4` - `docker-login v3.0.0` - `theopenlane/docker-metadata v1.0.1` - `theopenlane/container-build v1.1.1` - `sparse-checkout v1.8.0` - `docker v5.13.0` - `sparse-checkout v1.8.0` - `cluster-secrets v1.0.0` - `docker v5.13.0` - `sparse-checkout v1.8.0` - `theopenlane/atlas v1.2.1` </details> </blockquote> </details> <details><summary>docker-compose (12)</summary> <blockquote> <details><summary>docker/docker-compose-fga.yml (2)</summary> - `openfga/openfga v1.15.1` - `openfga/openfga v1.15.1` </details> <details><summary>docker/docker-compose-integrations-oidc.yml (1)</summary> - `ghcr.io/dexidp/dex v2.45.1` </details> <details><summary>docker/docker-compose-mailhog.yml</summary> </details> <details><summary>docker/docker-compose-oauth-test.yml</summary> </details> <details><summary>docker/docker-compose-oidc.yml (1)</summary> - `ghcr.io/dexidp/dex v2.45.1` </details> <details><summary>docker/docker-compose-pg.yml (1)</summary> - `postgres 17` → [Updates: `18`] </details> <details><summary>docker/docker-compose-prometheus.yml</summary> </details> <details><summary>docker/docker-compose-published.yml</summary> </details> <details><summary>docker/docker-compose-redis.yml (1)</summary> - `redis 7.4.9-alpine` → [Updates: `8.6.3-alpine`] </details> <details><summary>docker/docker-compose-riverboat.yml</summary> </details> <details><summary>docker/docker-compose-storage.yml</summary> </details> <details><summary>docker/docker-compose.yml (1)</summary> - `ghcr.io/dexidp/dex v2.45.1` </details> </blockquote> </details> <details><summary>dockerfile (2)</summary> <blockquote> <details><summary>docker/all-in-one/Dockerfile.all-in-one (4)</summary> - `golang 1.26.3` - `redis 7.4.9` → [Updates: `8.6.3`] - `openfga/openfga v1.15.1` - `ghcr.io/grpc-ecosystem/grpc-health-probe v0.4.49` </details> <details><summary>docker/Dockerfile</summary> </details> </blockquote> </details> <details><summary>github-actions (2)</summary> <blockquote> <details><summary>.github/workflows/labeler.yaml (1)</summary> - `actions/labeler v6` </details> <details><summary>.github/workflows/releaser.yml (8)</summary> - `actions/checkout v6` - `actions/checkout v6` - `actions/setup-go v6` - `anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610` - `sigstore/cosign-installer v4.1.2` - `goreleaser/goreleaser-action v7` - `slsa-framework/slsa-github-generator v2.1.0` - `slsa-framework/slsa-verifier v2.7.1` </details> </blockquote> </details> <details><summary>gomod (3)</summary> <blockquote> <details><summary>cli/go.mod (23)</summary> - `go 1.26.2` - `github.com/99designs/gqlgen v0.17.90` - `github.com/TylerBrock/colorjson v0.0.0-20200706003622-8a50f05110d2@8a50f05110d2` - `github.com/go-viper/mapstructure/v2 v2.5.0` - `github.com/goccy/go-yaml v1.19.2` - `github.com/knadh/koanf/parsers/yaml v1.1.0` - `github.com/knadh/koanf/providers/env/v2 v2.0.0` - `github.com/knadh/koanf/providers/file v1.2.1` - `github.com/knadh/koanf/providers/posflag v1.0.1` - `github.com/knadh/koanf/v2 v2.3.4` - `github.com/mitchellh/go-homedir v1.1.0` - `github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c@5ac0b6a4141c` - `github.com/rs/zerolog v1.35.1` - `github.com/samber/lo v1.53.0` - `github.com/spf13/cobra v1.10.2` - `github.com/theopenlane/core v1.20.4` → [Updates: `v1.20.5`] - `github.com/theopenlane/core/common v1.0.21` - `github.com/theopenlane/go-client v0.10.0` - `github.com/theopenlane/httpsling v0.3.0` - `github.com/theopenlane/iam v0.29.0` - `github.com/theopenlane/utils v0.7.0` - `golang.org/x/oauth2 v0.36.0` - `golang.org/x/term v0.43.0` </details> <details><summary>common/go.mod (16)</summary> - `go 1.26.2` - `entgo.io/ent v0.14.6` - `github.com/go-webauthn/webauthn v0.17.3` - `github.com/google/uuid v1.6.0` - `github.com/riverqueue/river v0.32.0` → [Updates: `v0.36.0`] - `github.com/robfig/cron/v3 v3.0.1` - `github.com/rs/zerolog v1.35.1` - `github.com/stoewer/go-strcase v1.3.1` - `github.com/stretchr/testify v1.11.1` - `github.com/theopenlane/core v1.20.4` → [Updates: `v1.20.5`] - `github.com/theopenlane/echox v0.3.0` - `github.com/theopenlane/entx v0.27.1` → [Updates: `v0.28.0`] - `github.com/theopenlane/utils v0.7.0` - `github.com/zitadel/oidc/v3 v3.47.5` - `golang.org/x/oauth2 v0.36.0` - `gotest.tools/v3 v3.5.2` </details> <details><summary>go.mod (128)</summary> - `go 1.26.2` - `ariga.io/entcache v0.1.0` - `cloud.google.com/go/securitycenter v1.44.0` - `entgo.io/contrib v0.7.0` - `entgo.io/ent v0.14.6` - `github.com/99designs/gqlgen v0.17.90` - `github.com/AfterShip/email-verifier v1.4.1` - `github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.1` - `github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1` - `github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/security/armsecurity v0.14.0` - `github.com/alicebob/miniredis/v2 v2.37.0` - `github.com/alitto/pond/v2 v2.7.1` - `github.com/aws/aws-sdk-go-v2 v1.41.7` - `github.com/aws/aws-sdk-go-v2/config v1.32.17` - `github.com/aws/aws-sdk-go-v2/credentials v1.19.16` - `github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.18` - `github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.1.21` - `github.com/aws/aws-sdk-go-v2/service/configservice v1.62.3` - `github.com/aws/aws-sdk-go-v2/service/iam v1.53.10` - `github.com/aws/aws-sdk-go-v2/service/s3 v1.101.0` - `github.com/brianvoe/gofakeit/v7 v7.14.1` - `github.com/cenkalti/backoff/v5 v5.0.3` - `github.com/cloudflare/cloudflare-go/v6 v6.10.0` - `github.com/didasy/tldr v0.7.0` - `github.com/elimity-com/scim v0.0.0-20260506142751-830e1caafcc3@830e1caafcc3` - `github.com/fatih/camelcase v1.0.0` - `github.com/fatih/color v1.19.0` - `github.com/fsnotify/fsnotify v1.10.1` - `github.com/fumiama/go-docx v0.0.0-20250506085032-0c30fd09304b@0c30fd09304b` - `github.com/gabriel-vasile/mimetype v1.4.13` - `github.com/gertd/go-pluralize v0.2.1` - `github.com/getkin/kin-openapi v0.138.0` - `github.com/go-jose/go-jose/v4 v4.1.4` - `github.com/go-viper/mapstructure/v2 v2.5.0` - `github.com/go-webauthn/webauthn v0.17.3` - `github.com/gocarina/gocsv v0.0.0-20240520201108-78e41c74b4b1@78e41c74b4b1` - `github.com/goccy/go-yaml v1.19.2` - `github.com/golang-jwt/jwt/v5 v5.3.1` - `github.com/google/go-github/v84 v84.0.0` → [Updates: `v86.0.0`] - `github.com/google/uuid v1.6.0` - `github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674@e064f32e3674` - `github.com/gqlgo/gqlgenc v0.37.0` - `github.com/hashicorp/go-multierror v1.1.1` - `github.com/invopop/jsonschema v0.14.0` - `github.com/invopop/yaml v0.3.1` - `github.com/jackc/pgx/v5 v5.9.2` - `github.com/knadh/koanf/parsers/yaml v1.1.0` - `github.com/knadh/koanf/providers/env/v2 v2.0.0` - `github.com/knadh/koanf/providers/file v1.2.1` - `github.com/knadh/koanf/providers/posflag v1.0.1` - `github.com/knadh/koanf/v2 v2.3.4` - `github.com/labstack/echo-contrib v0.50.1` - `github.com/labstack/echo/v4 v4.15.2` → [Updates: `v5.1.1`] - `github.com/labstack/gommon v0.5.0` - `github.com/lestrrat-go/httprc/v3 v3.0.5` - `github.com/lestrrat-go/jwx/v3 v3.1.1` → [Updates: `v4.0.2`] - `github.com/lib/pq v1.12.3` - `github.com/manifoldco/promptui v0.9.0` - `github.com/mcuadros/go-defaults v1.2.0` - `github.com/microcosm-cc/bluemonday v1.0.27` - `github.com/microsoft/kiota-authentication-azure-go v1.3.1` - `github.com/microsoftgraph/msgraph-sdk-go v1.98.0` - `github.com/nyaruka/phonenumbers v1.7.2` → [Updates: `v1.7.4`] - `github.com/oklog/ulid/v2 v2.1.1` - `github.com/okta/okta-sdk-golang/v6 v6.1.6` - `github.com/openfga/go-sdk v0.8.0` - `github.com/pkg/errors v0.9.1` - `github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2` - `github.com/pquerna/otp v1.5.0` - `github.com/pressly/goose/v3 v3.27.1` - `github.com/prometheus/client_golang v1.23.2` - `github.com/redis/go-redis/v9 v9.19.0` - `github.com/riverqueue/river v0.32.0` → [Updates: `v0.36.0`] - `github.com/riverqueue/river/riverdriver/riverpgxv5 v0.32.0` → [Updates: `v0.36.0`] - `github.com/riverqueue/river/rivertype v0.32.0` → [Updates: `v0.36.0`] - `github.com/rs/zerolog v1.35.1` - `github.com/samber/do/v2 v2.0.0` - `github.com/samber/lo v1.53.0` - `github.com/shurcooL/githubv4 v0.0.0-20260209031235-2402fdf4a9ed@2402fdf4a9ed` - `github.com/slack-go/slack v0.23.1` - `github.com/spf13/cobra v1.10.2` - `github.com/stoewer/go-strcase v1.3.1` - `github.com/stretchr/testify v1.11.1` - `github.com/stripe/stripe-go/v84 v84.4.1` → [Updates: `v85.1.0`] - `github.com/theopenlane/core/common v1.0.21` - `github.com/theopenlane/echo-prometheus v0.1.0` - `github.com/theopenlane/echox v0.3.0` - `github.com/theopenlane/entx v0.27.1` → [Updates: `v0.28.0`] - `github.com/theopenlane/go-client v0.10.0` - `github.com/theopenlane/gqlgen-plugins v0.14.7` - `github.com/theopenlane/httpsling v0.3.0` - `github.com/theopenlane/iam v0.29.0` - `github.com/theopenlane/newman v0.4.0` - `github.com/theopenlane/riverboat v0.8.8` → [Updates: `v0.9.13`] - `github.com/theopenlane/utils v0.7.0` - `github.com/tmc/langchaingo v0.1.14` - `github.com/urfave/cli/v3 v3.8.0` - `github.com/vektah/gqlparser/v2 v2.5.33` - `github.com/xeipuuv/gojsonschema v1.2.0` - `github.com/yuin/goldmark v1.8.2` - `github.com/zitadel/oidc/v3 v3.47.5` - `gocloud.dev v0.45.0` - `golang.org/x/crypto v0.51.0` - `golang.org/x/mod v0.36.0` - `golang.org/x/oauth2 v0.36.0` - `golang.org/x/sync v0.20.0` - `golang.org/x/text v0.37.0` - `golang.org/x/tools v0.45.0` - `google.golang.org/api v0.278.0` - `gopkg.in/yaml.v3 v3.0.1` - `gotest.tools/v3 v3.5.2` - `github.com/shurcooL/graphql v0.0.0-20240915155400-7ee5256398cf@7ee5256398cf` - `github.com/wundergraph/astjson v1.1.0` - `ariga.io/atlas v1.2.0` - `github.com/aws/aws-sdk-go-v2/service/sts v1.42.1` - `github.com/dave/jennifer v1.7.1` - `github.com/testcontainers/testcontainers-go v0.42.0` - `github.com/vektra/mockery/v3 v3.7.0` - `gotest.tools/gotestsum v1.13.0` - `github.com/aws/aws-sdk-go-v2/service/securityhub v1.70.0` - `github.com/google/cel-go v0.28.0` - `github.com/knadh/koanf/providers/env v1.1.0` → [Updates: `v2.0.0`] - `github.com/resend/resend-go/v3 v3.6.0` - `github.com/samber/mo v1.16.0` - `github.com/spf13/pflag v1.0.10` - `github.com/theopenlane/eddy v0.1.0` - `github.com/vmihailenco/msgpack/v5 v5.4.1` - `google.golang.org/protobuf v1.36.11` </details> </blockquote> </details> --- - [ ] <!-- manual job -->Check this box to trigger a request for Renovate to run again on this repository
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
github.com/nyaruka/phonenumbers,github.com/theopenlane/core)github.com/riverqueue/river,github.com/riverqueue/river/riverdriver/riverpgxv5,github.com/riverqueue/river/rivertype)PR Closed (Blocked)
The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.
Detected Dependencies
buildkite (1)
docker-compose (12)
dockerfile (2)
github-actions (2)
gomod (3)