Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/bangumi/server).

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] build(deps): update module github.com/bytedance/sonic to v1.15.4
- [ ] build(deps): update module github.com/go-playground/validator/v10 to v10.30.4
- [ ] build(deps): update aws-sdk-go-v2 monorepo (`github.com/aws/aws-sdk-go-v2`, `github.com/aws/aws-sdk-go-v2/credentials`, `github.com/aws/aws-sdk-go-v2/service/s3`)
- [ ] build(deps): update module github.com/stretchr/testify to v1.12.1
- [ ] build(deps): update module github.com/vektra/mockery/v3 to v3.8.0
- [ ] build(deps): update module golang.org/x/sync to v0.23.0
- [ ] build(deps): update module golang.org/x/text to v0.42.0
- [ ] ci: update dependency golangci/golangci-lint to v2.13.2
- [ ] ci: update golangci/golangci-lint-action action to v9.3.0
- [ ] build(deps): update dependency @apidevtools/json-schema-ref-parser to v16
- [ ] ci: update actions/setup-go action to v7
- [ ] ci: update actions/setup-node action to v7
- [ ] ci: update arduino/setup-task action to v3
- [ ] build(deps): update gcr.io/distroless/static docker digest to 5813399
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [build(deps): update module gorm.io/gen to v0.3.29](../pull/1107)
- [ ] [build(deps): update npm](../pull/1157) (`@apidevtools/json-schema-ref-parser`, `js-yaml`, `yaml`)
- [ ] [build(deps): npm lock file maintenance](../pull/1149)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

dockerfile (1)

etc/Dockerfile (1)

- `gcr.io/distroless/static sha256:3592aa8171c77482f62bbc4164e6a2d141c6122554ace66e5cc910cadb961ff0` → [Updates: `undefined`]

git-submodules (1)

.gitmodules (1)

- `pkg/vars/common master@2ee87b9995353f77cf02e390e8635bf97dbc1fa2`

github-actions (10)

.github/workflows/build.yaml (4)

- `actions/checkout v7.0.1`
- `trim21/actions master`
- `arduino/setup-task v2.0.0` → [Updates: `v3.0.0`]
- `ubuntu 24.04`

.github/workflows/lint-review.yaml (4)

- `actions/checkout v7.0.1`
- `actions/setup-node v6.5.0` → [Updates: `v7.0.0`]
- `actions/setup-go v6.5.0` → [Updates: `v7.0.0`]
- `autofix-ci/action v1.3.4`

.github/workflows/lint.yaml (5)

- `actions/checkout v7.0.1`
- `trim21/actions master`
- `golangci/golangci-lint-action v9.2.1` → [Updates: `v9.3.0`]
- `ubuntu 24.04`
- `golangci/golangci-lint v2.12.2` → [Updates: `v2.13.2`]

.github/workflows/release-docker.yaml (7)

- `actions/checkout v7.0.1`
- `trim21/actions master`
- `arduino/setup-task v2.0.0` → [Updates: `v3.0.0`]
- `docker/metadata-action v6.2.0`
- `docker/login-action v4.6.0`
- `docker/build-push-action v7.3.0`
- `ubuntu 24.04`

.github/workflows/release-github.yaml (3)

- `actions/checkout v7.0.1`
- `requarks/changelog-action v1.10.3`
- `ubuntu 24.04`

.github/workflows/release-openapi.yaml (5)

- `actions/checkout v7.0.1`
- `actions/setup-node v6.5.0` → [Updates: `v7.0.0`]
- `actions/checkout v7.0.1`
- `peter-evans/create-pull-request v8.1.1`
- `ubuntu 24.04`

.github/workflows/security.yaml (4)

- `actions/checkout v7.0.1`
- `trim21/actions master`
- `JasonEtco/create-an-issue v2.9.2`
- `ubuntu 24.04`

.github/workflows/test-openapi.yaml (2)

- `actions/checkout v7.0.1`
- `actions/setup-node v6.5.0` → [Updates: `v7.0.0`]

.github/workflows/test.yaml (7)

- `actions/checkout v7.0.1`
- `trim21/actions master`
- `arduino/setup-task v2.0.0` → [Updates: `v3.0.0`]
- `jaxxstorm/action-install-gh-release v3.0.0`
- `codecov/codecov-action v7.0.0`
- `ubuntu 24.04`
- `gotestyourself/gotestsum v1.13.0`

.github/workflows/update-common.yaml (4)

- `actions/checkout v7.0.1`
- `actions/setup-node v6.5.0` → [Updates: `v7.0.0`]
- `peter-evans/create-pull-request v8.1.1`
- `ubuntu 24.04`

gomod (1)

go.mod (40)

- `go 1.26.8` → [Updates: `1.27.1`]
- `github.com/avast/retry-go/v5 v5.0.0`
- `github.com/aws/aws-sdk-go-v2 v1.43.3` → [Updates: `v1.47.0`]
- `github.com/aws/aws-sdk-go-v2/credentials v1.19.33` → [Updates: `v1.20.4`]
- `github.com/aws/aws-sdk-go-v2/service/s3 v1.106.3` → [Updates: `v1.113.1`]
- `github.com/bangumi/wiki-parser-go v0.0.2`
- `github.com/bytedance/sonic v1.15.3` → [Updates: `v1.15.4`]
- `github.com/go-playground/locales v0.14.1`
- `github.com/go-playground/universal-translator v0.18.1`
- `github.com/go-playground/validator/v10 v10.30.3` → [Updates: `v10.30.4`]
- `github.com/go-resty/resty/v2 v2.17.2`
- `github.com/go-sql-driver/mysql v1.10.1`
- `github.com/google/uuid v1.6.0`
- `github.com/ilyakaznacheev/cleanenv v1.5.0`
- `github.com/jarcoal/httpmock v1.4.2`
- `github.com/jmoiron/sqlx v1.4.0`
- `github.com/labstack/echo/v5 v5.3.1`
- `github.com/mattn/go-colorable v0.1.15`
- `github.com/meilisearch/meilisearch-go v0.36.3`
- `github.com/mitchellh/mapstructure v1.5.0`
- `github.com/prometheus/client_golang v1.24.1`
- `github.com/redis/rueidis v1.0.77`
- `github.com/samber/lo v1.53.0`
- `github.com/segmentio/kafka-go v0.4.51`
- `github.com/spf13/cobra v1.10.2`
- `github.com/spf13/pflag v1.0.10`
- `github.com/stretchr/testify v1.11.1` → [Updates: `v1.12.1`]
- `github.com/trim21/errgo v0.0.6`
- `github.com/trim21/go-phpserialize v0.1.4`
- `github.com/trim21/htest v0.0.4`
- `go.uber.org/fx v1.24.0`
- `go.uber.org/zap v1.28.0`
- `golang.org/x/sync v0.22.0` → [Updates: `v0.23.0`]
- `golang.org/x/text v0.41.0` → [Updates: `v0.42.0`]
- `gorm.io/driver/mysql v1.6.0`
- `gorm.io/gen v0.3.27` → [Updates: `v0.3.29`]
- `gorm.io/gorm v1.31.2`
- `gorm.io/plugin/dbresolver v1.6.2`
- `gorm.io/plugin/soft_delete v1.2.1`
- `github.com/vektra/mockery/v3 v3.7.4` → [Updates: `v3.8.0`]

npm (1)

package.json (9)

- `@apidevtools/json-schema-ref-parser ^15.5.1` → [Updates: `^15.5.2`, `^16.0.2`]
- `js-yaml ^5.2.3` → [Updates: `^5.4.2`]
- `lodash ^4.18.1`
- `yaml ^2.9.0` → [Updates: `^2.9.1`]
- `@types/json-schema ^7.0.15`
- `colors ^1.4.0`
- `oas-validator ^5.0.8`
- `prettier ^3.9.6`
- `yarn 1.22.22`

renovate-config (1)

.github/renovate.json

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the Renovate dashboard entries for go.mod, package.json, etc/Dockerfile, and the listed .github/workflows files. Review each available update and its linked release information, then verify the relevant tests and CI workflows after any dependency changes; this dashboard does not define one bounded change or completion condition.

Written by the indexing model from the issue text.