Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/GoogleCloudPlatform/cloud-sql-proxy).

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] deps: Update gcr.io/distroless/static:nonroot Docker digest to 2293b36
- [ ] deps: Update Non-major dependency updates (`github.com/go-sql-driver/mysql`, `github.com/jackc/pgx/v5`, `golang.org/x/oauth2`, `golang.org/x/sys`, `google.golang.org/api`)
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [deps: Update google.golang.org/genproto/googleapis/rpc digest to f61a6ca](../pull/2679)
- [ ] [deps: Update dependencies for github](../pull/2545) (`actions/checkout`, `github/codeql-action`, `go`, `golang/govulncheck-action`, `ossf/scorecard-action`)
- [ ] [deps: Update dependencies for github (major)](../pull/2412) (`actions/checkout`, `actions/setup-go`, `actions/upload-artifact`, `github/codeql-action`, `google-github-actions/auth`, `google-github-actions/get-secretmanager-secrets`, `google-github-actions/setup-gcloud`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

cloudbuild (1)

.ci/cloudbuild.yaml

dockerfile (2)

Dockerfile (2)

- `golang 1`
- `gcr.io/distroless/static nonroot@sha256:23795be0fe67b7d47d1ee62b19c7db750152db627d5bbfa31307e892a7575bec` → [Updates: `nonroot`]

Dockerfile.alpine (2)

- `golang 1-alpine`
- `alpine 3@sha256:79ff19e9084a00eece421b2523fb93e22d730e2c0e525905de047e848e56d95f`

github-actions (9)

.github/workflows/codeql.yml (6)

- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v7.0.0`]
- `github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2` → [Updates: `v3.38.0`, `v4.38.0`]
- `github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2` → [Updates: `v3.38.0`, `v4.38.0`]
- `github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2` → [Updates: `v3.38.0`, `v4.38.0`]
- `go 1.25` → [Updates: `1.27`]

.github/workflows/coverage.yaml (4)

- `actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v7.0.0`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `go 1.25` → [Updates: `1.27`]

.github/workflows/docs.yaml (3)

- `actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v7.0.0`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `go 1.25` → [Updates: `1.27`]

.github/workflows/govulncheck.yaml (4)

- `actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v7.0.0`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `golang/govulncheck-action v1@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee` → [Updates: `v1`]
- `go 1.25` → [Updates: `1.27`]

.github/workflows/labels.yaml (2)

- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `micnncim/action-label-syncer v1.3.0@3abd5ab72fda571e69fffd97bd4e0033dd5f495c`

.github/workflows/lint.yaml (3)

- `actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v7.0.0`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `go 1.25` → [Updates: `1.27`]

.github/workflows/scorecard.yml (4)

- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a` → [Updates: `v2.4.4`]
- `actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02` → [Updates: `v7.0.1`]
- `github/codeql-action v3.31.10@4bdb89f48054571735e3792627da6195c57459e2` → [Updates: `v3.38.0`, `v4.38.0`]

.github/workflows/tests.yaml (12)

- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v7.0.0`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v7.0.0`]
- `google-github-actions/auth v2.1.13@c200f3691d83b41bf9bbd8638997a462592937ed` → [Updates: `v3.0.0`]
- `google-github-actions/setup-gcloud v2.2.1@e427ad8a34f8676edf47cf7d7925499adf3eb74f` → [Updates: `v3.0.1`]
- `google-github-actions/get-secretmanager-secrets v2.2.5@2b5f97c5a4b9c105e64646762ad4fc3f5128e6f5` → [Updates: `v3.0.0`]
- `actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v7.0.0`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `go 1.25` → [Updates: `1.27`]
- `go 1.25` → [Updates: `1.27`]
- `go 1.25` → [Updates: `1.27`]

.github/workflows/v1-periodic.yaml (5)

- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v7.0.0`]
- `google-github-actions/auth v2.1.13@c200f3691d83b41bf9bbd8638997a462592937ed` → [Updates: `v3.0.0`]
- `google-github-actions/get-secretmanager-secrets v2.2.5@2b5f97c5a4b9c105e64646762ad4fc3f5128e6f5` → [Updates: `v3.0.0`]
- `go 1.25` → [Updates: `1.27`]

gomod (1)

go.mod (20)

- `go 1.25.8`
- `cloud.google.com/go/cloudsqlconn v1.25.2`
- `contrib.go.opencensus.io/exporter/prometheus v0.4.2`
- `contrib.go.opencensus.io/exporter/stackdriver v0.13.14`
- `github.com/coreos/go-systemd/v22 v22.7.0`
- `github.com/go-sql-driver/mysql v1.10.0` → [Updates: `v1.10.1`]
- `github.com/google/go-cmp v0.7.0`
- `github.com/hanwen/go-fuse/v2 v2.11.0`
- `github.com/jackc/pgx/v5 v5.10.0` → [Updates: `v5.11.0`]
- `github.com/microsoft/go-mssqldb v1.11.0`
- `github.com/spf13/cobra v1.10.2`
- `github.com/spf13/pflag v1.0.10`
- `github.com/spf13/viper v1.21.0`
- `go.opencensus.io v0.24.0`
- `golang.org/x/oauth2 v0.36.0` → [Updates: `v0.37.0`]
- `golang.org/x/sys v0.47.0` → [Updates: `v0.48.0`]
- `google.golang.org/api v0.294.0` → [Updates: `v0.298.0`]
- `google.golang.org/genproto/googleapis/rpc v0.0.0-20260819154853-08b0e4226688@08b0e4226688` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/grpc v1.83.2`
- `gopkg.in/natefinch/lumberjack.v2 v2.2.1`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Bắt đầu với tài liệu về Dependency Dashboard, sau đó kiểm tra các tệp được liệt kê: Dockerfile, Dockerfile.alpine, .ci/cloudbuild.yaml, các tệp trong .github/workflows và go.mod. Xem xét các pull request đang mở của Renovate trước khi chọn bất kỳ bản cập nhật nào; công việc chỉ được xem là hoàn tất khi các dependency liên quan đã được cập nhật và tất cả các check bị ảnh hưởng đều đạt.

Do mô hình lập chỉ mục viết ra từ nội dung của issue.