Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/GoogleCloudPlatform/cloud-foundation-toolkit).

## Repository Problems

These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/GoogleCloudPlatform/cloud-foundation-toolkit).

- ⚠️ WARN: Invalid constraint used with strict constraintsFiltering
- ⚠️ WARN: No releases satisfy vulnerabilityFixVersion

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update dorny/paths-filter action to v4.0.3
- [ ] chore(deps): update github/codeql-action action to v4.38.0
- [ ] chore(deps): update golangci/golangci-lint docker tag to v2.13.2
- [ ] chore(deps): update golangci/golangci-lint docker tag to v2.13.2
- [ ] chore(deps): update module github.com/googlecloudplatform/cloud-foundation-toolkit/infra/blueprint-test to v0.18.0
- [ ] chore(deps): update module github.com/gruntwork-io/terratest to v0.54.0
- [ ] chore(deps): update terraform google provider to v8 (`google`, `google-beta`)
- [ ] chore(deps): update terraform google provider to v8 (`google`, `google-beta`)
- [ ] chore(deps): update terraform google provider to v8 (`google`, `google-beta`)
- [ ] chore(deps): update terraform google provider to v8 (`google`, `google-beta`)
- [ ] chore(deps): update terraform google provider to v8 (`google`, `google-beta`)
- [ ] chore(deps): update terraform google provider to v8 (`google`, `google-beta`)
- [ ] chore(deps): update terraform google provider to v8 (`google`, `google-beta`)
- [ ] chore(deps): update terraform google to v8
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update github.com/gomarkdown/markdown digest to ad2c8ed
- [ ] chore(deps): update cft/developer-tools docker tag to v1.28
- [ ] chore(deps): update cft/developer-tools docker tag to v1.28

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update github.com/hashicorp/terraform-config-inspect digest to 75d64de](../pull/3425)
- [ ] [chore(deps): update github.com/hashicorp/terraform-config-inspect digest to 75d64de](../pull/3446)
- [ ] [chore(deps): update go toolchain directive to v1.24.13](../pull/3377)
- [ ] [chore(deps): update module sigs.k8s.io/kustomize/kyaml to v0.21.1](../pull/3416)
- [ ] [chore(deps): update golangci/golangci-lint docker tag to v2.13.2](../pull/3385)
- [ ] [chore(deps): update module github.com/gammazero/workerpool to v1.2.1](../pull/3420)
- [ ] [chore(deps): update module github.com/invopop/jsonschema to v0.14.0](../pull/3423)
- [ ] [chore(deps): update module github.com/open-policy-agent/opa to v1.13.2](../pull/3455)
- [ ] [chore(deps): update actions/checkout action to v7](../pull/3457)
- [ ] [chore(deps): update actions/setup-go action to v7](../pull/3458)
- [ ] [chore(deps): update module github.com/google/go-github/v81 to v83](../pull/3424)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [chore(deps): update dependency ruby to v4](../pull/3328)

## Detected Dependencies

bundler (1)

infra/build/developer-tools/build/data/Gemfile (6)

- `kitchen-terraform "~> 7.0"`
- `kubeclient "~> 4.11"`
- `rest-client "~> 2.1"`
- `nokogiri '~> 1.18'`
- `csv lock file @ 3.3.5`
- `ruby ~> 3.4` → [Updates: `~> 4.0`]

cloudbuild (3)

infra/terraform/test-org/ci-foundation/cloudbuild.yaml

infra/terraform/test-org/image-cleanup/cloudbuild.yaml

infra/terraform/test-org/org-iam-policy/cloudbuild.yaml

dockerfile (4)

infra/build/developer-tools-jenkins/Dockerfile

infra/build/developer-tools-krm/Dockerfile

infra/build/developer-tools-light/Dockerfile

infra/build/developer-tools/Dockerfile

github-actions (14)

.github/workflows/build-push-cft-devtools.yml (5)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7.0.1`]
- `google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093`
- `google-github-actions/setup-gcloud v3.0.1@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db`
- `dorny/paths-filter v4.0.2@7b450fff21473bca461d4b92ce414b9d0420d706` → [Updates: `v4.0.3`]
- `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3`

.github/workflows/go-fbf-test.yml (2)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7.0.1`]
- `actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16` → [Updates: `v7.0.0`]

.github/workflows/go-lint.yaml (4)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7.0.1`]
- `dorny/paths-filter v4.0.2@7b450fff21473bca461d4b92ce414b9d0420d706` → [Updates: `v4.0.3`]
- `actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16` → [Updates: `v7.0.0`]
- `golangci/golangci-lint-action v9.3.0@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a`

.github/workflows/go-module-swapper.yml (2)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7.0.1`]
- `actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16` → [Updates: `v7.0.0`]

.github/workflows/go-tflint-plugin.yml (5)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7.0.1`]
- `actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16` → [Updates: `v7.0.0`]
- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7.0.1`]
- `actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16` → [Updates: `v7.0.0`]
- `goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94`

.github/workflows/lint.yaml (2)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7.0.1`]
- `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9`

.github/workflows/pre-commit.yml (3)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7.0.1`]
- `actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97`
- `pre-commit/action v3.0.1@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd`

.github/workflows/release-cli.yml (9)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7.0.1`]
- `actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16` → [Updates: `v7.0.0`]
- `google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093`
- `google-github-actions/setup-gcloud v3.0.1@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/create-release v1@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e`
- `actions/upload-release-asset v1@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5`
- `actions/upload-release-asset v1@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5`
- `actions/upload-release-asset v1@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5`

.github/workflows/release-tflint-plugin.yml (3)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7.0.1`]
- `actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16` → [Updates: `v7.0.0`]
- `goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94`

.github/workflows/scorecard.yml (4)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7.0.1`]
- `ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `github/codeql-action v4.37.4@f205ea1c3313d32999d8d6a48b4f6530d4437b38` → [Updates: `v4.38.0`]

.github/workflows/stale.yml (1)

- `actions/stale v11.0.0@4391f3da665fdf50b6810c1a66712fb9ba21aa93`

.github/workflows/test-cft-devtools.yml (1)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7.0.1`]

.github/workflows/test-cli.yml (2)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7.0.1`]
- `actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16` → [Updates: `v7.0.0`]

.github/workflows/update-tooling.yml (2)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7.0.1`]
- `peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1`

gomod (5)

cli/go.mod (41)

- `go 1.24.6`
- `go 1.24.13`
- `cloud.google.com/go/asset v1.22.1`
- `cloud.google.com/go/storage v1.60.0`
- `github.com/GoogleCloudPlatform/cloud-foundation-toolkit/infra/blueprint-test v0.17.3` → [Updates: `v0.18.0`]
- `github.com/GoogleCloudPlatform/config-validator v0.0.0-20230824155412-0da46e6a67ad@0da46e6a67ad`
- `github.com/briandowns/spinner v1.23.2`
- `github.com/fatih/color v1.18.0`
- `github.com/gammazero/workerpool v1.1.3` → [Updates: `v1.2.1`]
- `github.com/go-git/go-git/v5 v5.16.5`
- `github.com/gomarkdown/markdown v0.0.0-20260417124207-7d523f7318df@7d523f7318df` → [Updates: `v0.0.0-20260916113448-ad2c8ed2781a`]
- `github.com/google/go-cmp v0.7.0`
- `github.com/google/go-github/v81 v81.0.0` → [Updates: `v83.0.0`]
- `github.com/gruntwork-io/terratest v0.50.0` → [Updates: `v0.54.0`]
- `github.com/hashicorp/go-version v1.9.0`
- `github.com/hashicorp/hcl/v2 v2.24.0`
- `github.com/hashicorp/terraform-config-inspect v0.0.0-20250828155816-225c06ed5fd9@225c06ed5fd9` → [Updates: `v0.0.0-20260904064934-75d64de68c31`]
- `github.com/hashicorp/terraform-json v0.27.2`
- `github.com/iancoleman/strcase v0.3.0`
- `github.com/inconshreveable/log15 v2.16.0+incompatible`
- `github.com/invopop/jsonschema v0.13.0` → [Updates: `v0.14.0`]
- `github.com/itchyny/json2yaml v0.1.5`
- `github.com/jedib0t/go-pretty v4.3.0+incompatible`
- `github.com/jedib0t/go-pretty/v6 v6.7.8`
- `github.com/manifoldco/promptui v0.9.0`
- `github.com/migueleliasweb/go-github-mock v1.5.0`
- `github.com/mitchellh/go-testing-interface v1.14.2-0.20210821155943-2d9075ca8770@2d9075ca8770`
- `github.com/open-policy-agent/opa v1.12.2` → [Updates: `v1.13.2`]
- `github.com/otiai10/copy v1.14.1`
- `github.com/pkg/errors v0.9.1`
- `github.com/spf13/cobra v1.10.2`
- `github.com/spf13/viper v1.21.0`
- `github.com/stretchr/testify v1.11.1`
- `github.com/xeipuuv/gojsonschema v1.2.0`
- `github.com/zclconf/go-cty v1.17.0`
- `golang.org/x/oauth2 v0.35.0`
- `golang.org/x/text v0.34.0`
- `google.golang.org/api v0.267.0`
- `google.golang.org/protobuf v1.36.11`
- `gopkg.in/yaml.v3 v3.0.1`
- `sigs.k8s.io/yaml v1.6.0`

infra/blueprint-test/go.mod (16)

- `go 1.24.0`
- `go 1.24.11` → [Updates: `1.24.13`]
- `github.com/GoogleContainerTools/kpt-functions-sdk/go/api v0.0.0-20250702115044-9bfead305c54@9bfead305c54`
- `github.com/alexflint/go-filemutex v1.3.0`
- `github.com/google/go-cmp v0.7.0`
- `github.com/gruntwork-io/terratest v0.54.0`
- `github.com/hashicorp/terraform-config-inspect v0.0.0-20260224005459-813a97530220@813a97530220` → [Updates: `v0.0.0-20260904064934-75d64de68c31`]
- `github.com/hashicorp/terraform-json v0.27.2`
- `github.com/mattn/go-shellwords v1.0.12`
- `github.com/mitchellh/go-testing-interface v1.14.2-0.20210821155943-2d9075ca8770@2d9075ca8770`
- `github.com/otiai10/copy v1.14.1`
- `github.com/stretchr/testify v1.11.1`
- `github.com/tidwall/gjson v1.18.0`
- `github.com/tidwall/sjson v1.2.5`
- `golang.org/x/mod v0.33.0`
- `sigs.k8s.io/kustomize/kyaml v0.21.0` → [Updates: `v0.21.1`]

infra/module-swapper/go.mod (8)

- `go 1.24.0`
- `go 1.24.13`
- `github.com/chainguard-dev/git-urls v1.0.2`
- `github.com/go-git/go-git/v5 v5.16.5`
- `github.com/google/go-cmp v0.7.0`
- `github.com/hashicorp/hcl/v2 v2.24.0`
- `github.com/pmezard/go-difflib v1.0.0`
- `github.com/zclconf/go-cty v1.17.0`

infra/utils/fbf/go.mod (6)

- `go 1.24.0`
- `go 1.24.13`
- `github.com/briandowns/spinner v1.23.2`
- `github.com/jedib0t/go-pretty/v6 v6.7.8`
- `github.com/stretchr/testify v1.11.1`
- `google.golang.org/api v0.267.0`

tflint-ruleset-blueprint/go.mod (5)

- `go 1.24.0`
- `go 1.24.13`
- `github.com/hashicorp/go-version v1.9.0`
- `github.com/hashicorp/hcl/v2 v2.24.0`
- `github.com/terraform-linters/tflint-plugin-sdk v0.23.1`

regex (7)

cli/Makefile (1)

- `cft/developer-tools 1.26` → [Updates: `1.28`]

cli/Makefile (1)

- `golangci/golangci-lint 2.12.2` → [Updates: `2.13.2`]

infra/blueprint-test/build/int.cloudbuild.yaml (1)

- `cft/developer-tools 1.25` → [Updates: `1.28`]

infra/blueprint-test/Makefile (1)

- `golangci/golangci-lint 2.8.0` → [Updates: `2.13.2`]

infra/build/Makefile (1)

- `alpine 3.24`

infra/build/Makefile (1)

- `cft/developer-tools 1.28.1`

infra/build/Makefile (1)

- `golangci/golangci-lint 2.12.2` → [Updates: `2.13.2`]

renovate-config (1)

.github/renovate.json

terraform (58)

cli/testdata/bpmetadata/tf/main.tf

cli/testdata/bpmetadata/tf/provider-versions-bad.tf (2)

- `google >= 4.4.0, < 8` → [Updates: `>= 4.4.0, < 9`]
- `hashicorp/terraform >= 0.13.0`

cli/testdata/bpmetadata/tf/provider-versions-empty.tf (1)

- `hashicorp/terraform >= 0.13.0`

cli/testdata/bpmetadata/tf/versions-bad-module.tf (1)

- `hashicorp/terraform >= 0.13.0`

cli/testdata/bpmetadata/tf/versions-beta.tf (3)

- `google >= 4.4.0, < 8` → [Updates: `>= 4.4.0, < 9`]
- `google-beta >= 4.4.0, < 8` → [Updates: `>= 4.4.0, < 9`]
- `hashicorp/terraform >= 0.13.0`

cli/testdata/bpmetadata/tf/versions-core.tf (1)

- `hashicorp/terraform >= 0.13.0`

cli/testdata/bpmetadata/tf/versions.tf (1)

- `hashicorp/terraform >= 0.13.0`

infra/blueprint-test/examples/simple_tf_module_with_test/examples/simple-auto/main.tf

infra/blueprint-test/examples/simple_tf_module_with_test/examples/simple-auto2/main.tf

infra/blueprint-test/examples/simple_tf_module_with_test/examples/simple/main.tf

infra/blueprint-test/examples/simple_tf_module_with_test/main.tf (2)

- `google >= 3.45.0`
- `null >= 2.1`

infra/blueprint-test/examples/simple_tf_module_with_test/test/fixtures/simple-auto/main.tf

infra/blueprint-test/examples/simple_tf_module_with_test/test/setup/main.tf

infra/blueprint-test/examples/simple_tf_module/main.tf

infra/blueprint-test/examples/simple_tf_module/versions.tf (1)

- `hashicorp/terraform >= 0.13.0`

infra/blueprint-test/test/setup/main.tf

infra/blueprint-test/test/setup/simple_tf_bench/main.tf

infra/module-swapper/cmd/testdata/example-module-simple/examples/example-one/main.tf (1)

- `google >= 3.0`

infra/module-swapper/cmd/testdata/example-module-with-submodules/examples/example-one/main.tf

infra/module-swapper/cmd/testdata/example-module-with-submodules/examples/example-two/main.tf

infra/modules/real_time_enforcer_roles/versions.tf (1)

- `hashicorp/terraform >= 0.13.7`

infra/modules/seed_project/main.tf

infra/modules/seed_project/versions.tf (1)

- `hashicorp/terraform >= 0.13.7`

infra/terraform/dev-org/dev-project-cleanup/cleanup.tf

infra/terraform/dev-org/dev-project-cleanup/project.tf

infra/terraform/dev-org/dev-project-cleanup/versions.tf (6)

- `archive >= 1.3, < 3`
- `google >= 3.35, < 8` → [Updates: `>= 3.35, < 9`]
- `google-beta >= 3.35, < 8` → [Updates: `>= 3.35, < 9`]
- `null >= 2.1, < 4`
- `random >= 2.2, < 4`
- `hashicorp/terraform >= 1.4.4`

infra/terraform/modules/branch_protection/versions.tf (1)

- `github ~> 6.0`

infra/terraform/modules/codeowners_file/versions.tf (1)

- `github ~> 6.0`

infra/terraform/modules/repo_file/versions.tf (1)

- `github ~> 6.0`

infra/terraform/modules/repo_labels/main.tf

infra/terraform/modules/repo_labels/versions.tf (1)

- `github ~> 6.0`

infra/terraform/modules/repositories/versions.tf (1)

- `github ~> 6.0`

infra/terraform/modules/workflow_files/versions.tf (1)

- `github ~> 6.0`

infra/terraform/test-org/ci-project/gar.tf

infra/terraform/test-org/ci-project/main.tf

infra/terraform/test-org/ci-project/sa.tf

infra/terraform/test-org/ci-project/versions.tf (4)

- `github ~> 6.0`
- `google >= 5.26, < 8` → [Updates: `>= 5.26, < 9`]
- `google-beta >= 5.26, < 8` → [Updates: `>= 5.26, < 9`]
- `hashicorp/terraform >= 1.4.4`

infra/terraform/test-org/ci-triggers/logs.tf

infra/terraform/test-org/ci-triggers/versions.tf (3)

- `google >= 2.18, < 8` → [Updates: `>= 2.18, < 9`]
- `google-beta >= 2.18, < 8` → [Updates: `>= 2.18, < 9`]
- `hashicorp/terraform >= 1.4.4`

infra/terraform/test-org/github/labels.tf

infra/terraform/test-org/github/main.tf

infra/terraform/test-org/github/protection.tf

infra/terraform/test-org/github/versions.tf (2)

- `github ~> 6.0`
- `hashicorp/terraform >= 1.7.0`

infra/terraform/test-org/org-iam-policy/versions.tf (2)

- `google >= 3.39, < 8` → [Updates: `>= 3.39, < 9`]
- `hashicorp/terraform >= 1.4.4`

infra/terraform/test-org/org/bigquery_external_data.tf

infra/terraform/test-org/org/folders.tf

infra/terraform/test-org/org/github.tf

infra/terraform/test-org/org/gsuite.tf

infra/terraform/test-org/org/iam.tf

infra/terraform/test-org/org/policy.tf

infra/terraform/test-org/org/projects.tf

infra/terraform/test-org/org/prow.tf

infra/terraform/test-org/org/versions.tf (8)

- `external >= 1.2, < 3`
- `github ~> 6.0`
- `google >= 3.19, < 8` → [Updates: `>= 3.19, < 9`]
- `google-beta >= 3.19, < 8` → [Updates: `>= 3.19, < 9`]
- `kubernetes >= 2.13, < 4`
- `null >= 2.1, < 4`
- `random >= 2.3.1, < 4`
- `hashicorp/terraform >= 1.4.4`

infra/terraform/test-org/test-cleanup/cleanup.tf

infra/terraform/test-org/test-cleanup/project.tf

infra/terraform/test-org/test-cleanup/versions.tf (6)

- `archive >= 1.3, < 3`
- `google >= 3.38, < 8` → [Updates: `>= 3.38, < 9`]
- `google-beta >= 3.38, < 8` → [Updates: `>= 3.38, < 9`]
- `null >= 2.1, < 4`
- `random >= 2.2, < 4`
- `hashicorp/terraform >= 1.4.4`

infra/terraform/test-org/tf-validator/project.tf

infra/terraform/test-org/tf-validator/versions.tf (3)

- `google < 8` → [Updates: `< 9`]
- `google-beta < 8` → [Updates: `< 9`]
- `hashicorp/terraform >= 1.4.4`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository