Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/G-Rath/osv-detector).

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(deps): update module golang.org/x/mod to v0.40.0 [security]](../pull/369)
- [ ] [chore(deps): update workflows](../pull/363) (`actions/checkout`, `actions/setup-java`, `actions/upload-artifact`, `github/codeql-action`, `golangci/golangci-lint-action`, `goreleaser/goreleaser-action`, `ossf/scorecard-action`, `r-lib/actions`, `ruby/setup-ruby`, `shivammathur/setup-php`)
- [ ] [fix(deps): update module github.com/google/osv-scalibr to v0.5.2](../pull/333)
- [ ] [fix(deps): update osv-detector minor](../pull/344) (`github.com/BurntSushi/toml`, `github.com/fatih/color`, `github.com/gkampitakis/go-snaps`, `github.com/tidwall/jsonc`, `golang.org/x/sync`)
- [ ] [chore(deps): update actions/setup-java action to v6](../pull/370)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

github-actions (4)

.github/workflows/checks.yml (8)

- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `golangci/golangci-lint-action v9.2.0@1e7e51e771db61008b38414a730f564565cf7c20` → [Updates: `v9.3.0`]
- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020`

.github/workflows/release.yml (11)

- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `golangci/golangci-lint-action v9.2.0@1e7e51e771db61008b38414a730f564565cf7c20` → [Updates: `v9.3.0`]
- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020`
- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `goreleaser/goreleaser-action v7.0.0@ec59f474b9834571250b370d4735c50f8e2d1e29` → [Updates: `v7.2.3`]

.github/workflows/scorecard.yml (4)

- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a` → [Updates: `v2.4.4`]
- `actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f` → [Updates: `v7.0.1`]
- `github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13` → [Updates: `v4.38.0`]

.github/workflows/semantic.yml (30)

- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9`
- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97`
- `actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f` → [Updates: `v7.0.1`]
- `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9`
- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9`
- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97`
- `actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f` → [Updates: `v7.0.1`]
- `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9`
- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `shivammathur/setup-php 2.37.0@accd6127cb78bee3e8082180cb391013d204ef9f` → [Updates: `2.37.2`]
- `actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f` → [Updates: `v7.0.1`]
- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97`
- `actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f` → [Updates: `v7.0.1`]
- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `ruby/setup-ruby v1.299.0@3ff19f5e2baf30647122352b96108b1fbe250c64` → [Updates: `v1.323.0`]
- `actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f` → [Updates: `v7.0.1`]
- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-java v5.2.0@be666c2fcd27ec809703dec50e508c2fdc7f6654` → [Updates: `v5.7.0`, `v6.0.1`]
- `actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f` → [Updates: `v7.0.1`]
- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `r-lib/actions v2.11.4@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590` → [Updates: `v2.13.0`]
- `actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f` → [Updates: `v7.0.1`]
- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c`

gomod (1)

go.mod (10)

- `go 1.24.6`
- `github.com/BurntSushi/toml v1.5.0` → [Updates: `v1.6.0`]
- `github.com/fatih/color v1.18.0` → [Updates: `v1.19.0`]
- `github.com/gkampitakis/go-snaps v0.5.15` → [Updates: `v0.5.23`]
- `github.com/google/go-cmp v0.7.0`
- `github.com/google/osv-scalibr v0.4.1-0.20251202121049-5e7e15f4a036@5e7e15f4a036` → [Updates: `v0.5.2`]
- `github.com/tidwall/jsonc v0.3.2` → [Updates: `v0.3.3`]
- `golang.org/x/mod v0.30.0` → [Updates: `v0.40.0`]
- `golang.org/x/sync v0.17.0` → [Updates: `v0.23.0`]
- `gopkg.in/yaml.v3 v3.0.1`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository