Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/GoogleCloudPlatform/cloud-sql-proxy).

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] deps: Update gcr.io/distroless/static:nonroot Docker digest to 2293b36
- [ ] deps: Update Non-major dependency updates (`github.com/go-sql-driver/mysql`, `github.com/jackc/pgx/v5`, `golang.org/x/oauth2`, `golang.org/x/sys`, `google.golang.org/api`)
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [deps: Update google.golang.org/genproto/googleapis/rpc digest to f61a6ca](../pull/2679)
- [ ] [deps: Update dependencies for github](../pull/2545) (`actions/checkout`, `github/codeql-action`, `go`, `golang/govulncheck-action`, `ossf/scorecard-action`)
- [ ] [deps: Update dependencies for github (major)](../pull/2412) (`actions/checkout`, `actions/setup-go`, `actions/upload-artifact`, `github/codeql-action`, `google-github-actions/auth`, `google-github-actions/get-secretmanager-secrets`, `google-github-actions/setup-gcloud`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

cloudbuild (1)

.ci/cloudbuild.yaml

dockerfile (2)

Dockerfile (2)

- `golang 1`
- `gcr.io/distroless/static nonroot@sha256:23795be0fe67b7d47d1ee62b19c7db750152db627d5bbfa31307e892a7575bec` → [Updates: `nonroot`]

Dockerfile.alpine (2)

- `golang 1-alpine`
- `alpine 3@sha256:79ff19e9084a00eece421b2523fb93e22d730e2c0e525905de047e848e56d95f`

github-actions (9)

.github/workflows/codeql.yml (6)

- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v7.0.0`]
- `github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2` → [Updates: `v3.38.0`, `v4.38.0`]
- `github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2` → [Updates: `v3.38.0`, `v4.38.0`]
- `github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2` → [Updates: `v3.38.0`, `v4.38.0`]
- `go 1.25` → [Updates: `1.27`]

.github/workflows/coverage.yaml (4)

- `actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v7.0.0`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `go 1.25` → [Updates: `1.27`]

.github/workflows/docs.yaml (3)

- `actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v7.0.0`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `go 1.25` → [Updates: `1.27`]

.github/workflows/govulncheck.yaml (4)

- `actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v7.0.0`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `golang/govulncheck-action v1@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee` → [Updates: `v1`]
- `go 1.25` → [Updates: `1.27`]

.github/workflows/labels.yaml (2)

- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `micnncim/action-label-syncer v1.3.0@3abd5ab72fda571e69fffd97bd4e0033dd5f495c`

.github/workflows/lint.yaml (3)

- `actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v7.0.0`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `go 1.25` → [Updates: `1.27`]

.github/workflows/scorecard.yml (4)

- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a` → [Updates: `v2.4.4`]
- `actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02` → [Updates: `v7.0.1`]
- `github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2` → [Updates: `v3.38.0`, `v4.38.0`]

.github/workflows/tests.yaml (12)

- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v7.0.0`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v7.0.0`]
- `google-github-actions/auth v2.1.13@c200f3691d83b41bf9bbd8638997a462592937ed` → [Updates: `v3.0.0`]
- `google-github-actions/setup-gcloud v2.2.1@e427ad8a34f8676edf47cf7d7925499adf3eb74f` → [Updates: `v3.0.1`]
- `google-github-actions/get-secretmanager-secrets v2.2.5@2b5f97c5a4b9c105e64646762ad4fc3f5128e6f5` → [Updates: `v3.0.0`]
- `actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v7.0.0`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `go 1.25` → [Updates: `1.27`]
- `go 1.25` → [Updates: `1.27`]
- `go 1.25` → [Updates: `1.27`]

.github/workflows/v1-periodic.yaml (5)

- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v7.0.0`]
- `google-github-actions/auth v2.1.13@c200f3691d83b41bf9bbd8638997a462592937ed` → [Updates: `v3.0.0`]
- `google-github-actions/get-secretmanager-secrets v2.2.5@2b5f97c5a4b9c105e64646762ad4fc3f5128e6f5` → [Updates: `v3.0.0`]
- `go 1.25` → [Updates: `1.27`]

gomod (1)

go.mod (20)

- `go 1.25.8`
- `cloud.google.com/go/cloudsqlconn v1.25.2`
- `contrib.go.opencensus.io/exporter/prometheus v0.4.2`
- `contrib.go.opencensus.io/exporter/stackdriver v0.13.14`
- `github.com/coreos/go-systemd/v22 v22.7.0`
- `github.com/go-sql-driver/mysql v1.10.0` → [Updates: `v1.10.1`]
- `github.com/google/go-cmp v0.7.0`
- `github.com/hanwen/go-fuse/v2 v2.11.0`
- `github.com/jackc/pgx/v5 v5.10.0` → [Updates: `v5.11.0`]
- `github.com/microsoft/go-mssqldb v1.11.0`
- `github.com/spf13/cobra v1.10.2`
- `github.com/spf13/pflag v1.0.10`
- `github.com/spf13/viper v1.21.0`
- `go.opencensus.io v0.24.0`
- `golang.org/x/oauth2 v0.36.0` → [Updates: `v0.37.0`]
- `golang.org/x/sys v0.47.0` → [Updates: `v0.48.0`]
- `google.golang.org/api v0.294.0` → [Updates: `v0.298.0`]
- `google.golang.org/genproto/googleapis/rpc v0.0.0-20260819154853-08b0e4226688@08b0e4226688` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/grpc v1.83.2`
- `gopkg.in/natefinch/lumberjack.v2 v2.2.1`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository