Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/block/cachew).

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): update actions/checkout digest to d23441a
- [ ] chore(deps): update cashapp/activate-hermit digest to cea9af7
- [ ] chore(deps): update all non-major dependencies (`alpine`, `github.com/alecthomas/chroma/v2`, `github.com/alecthomas/kong`, `github.com/lmittmann/tint`, `github.com/minio/minio-go/v7`, `github.com/open-policy-agent/opa`, `github.com/prometheus/client_golang`, `go.etcd.io/bbolt`, `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`, `go.opentelemetry.io/contrib/instrumentation/runtime`, `go.opentelemetry.io/otel`, `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp`, `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`, `go.opentelemetry.io/otel/exporters/prometheus`, `go.opentelemetry.io/otel/metric`, `go.opentelemetry.io/otel/sdk`, `go.opentelemetry.io/otel/sdk/metric`, `go.opentelemetry.io/otel/trace`, `golang.org/x/mod`, `golang.org/x/sync`)
- [ ] chore(deps): update actions/checkout action to v7
- [ ] chore(deps): update actions/create-github-app-token action to v3
- [ ] 🔐 **Create all awaiting schedule PRs at once** 🔐

---

> [!WARNING]
> Renovate failed to look up the following dependencies: `Could not determine new digest for update (github-digest package actions/checkout)`, `Could not determine new digest for update (github-digest package docker/setup-buildx-action)`, `Could not determine new digest for update (github-digest package docker/login-action)`, `Could not determine new digest for update (github-digest package docker/metadata-action)`, `Could not determine new digest for update (github-digest package docker/build-push-action)`.
>
> Files affected: `.github/workflows/publish-docker.yml`

---

## Detected Dependencies

dockerfile (1)

docker/Dockerfile (1)

- `alpine 3.23` → [Updates: `3.24`]

github-actions (4)

.github/workflows/ci.yml (6)

- `actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7`, `v6`]
- `cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a` → [Updates: `v1`]
- `actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7`, `v6`]
- `cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a` → [Updates: `v1`]
- `actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7`, `v6`]
- `cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a` → [Updates: `v1`]

.github/workflows/lint-pr.yml (1)

- `amannn/action-semantic-pull-request v6@48f256284bd46cdaab1048c3721360e808335d50`

.github/workflows/publish-docker.yml (6)

- `actions/checkout pin@v6@0c366fd6a839edf440554fa01a7085ccba70ac98`
- `docker/setup-buildx-action pin@v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435`
- `docker/login-action pin@v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1`
- `docker/metadata-action pin@v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f`
- `cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a` → [Updates: `v1`]
- `docker/build-push-action pin@v6.18.0@8c1e8f8e5bf845ba3773a14f3967965548a2341e`

.github/workflows/release.yml (3)

- `actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7`, `v6`]
- `cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a` → [Updates: `v1`]
- `actions/create-github-app-token v2.2.2@fee1f7d63c2ff003460e3d139729b119787bc349` → [Updates: `v3.2.0`]

gomod (1)

go.mod (27)

- `go 1.25.5`
- `github.com/alecthomas/hcl/v2 v2.6.0`
- `github.com/alecthomas/kong v1.15.0` → [Updates: `v1.16.1`]
- `github.com/bmatcuk/doublestar/v4 v4.10.0`
- `github.com/golang-jwt/jwt/v5 v5.3.1`
- `github.com/google/uuid v1.6.0`
- `github.com/goproxy/goproxy v0.26.1`
- `github.com/lmittmann/tint v1.1.3` → [Updates: `v1.2.0`]
- `github.com/minio/minio-go/v7 v7.0.100` → [Updates: `v7.3.0`]
- `github.com/open-policy-agent/opa v1.15.2` → [Updates: `v1.20.2`]
- `github.com/prometheus/client_golang v1.23.2` → [Updates: `v1.24.1`]
- `go.etcd.io/bbolt v1.4.3` → [Updates: `v1.5.0`]
- `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0` → [Updates: `v0.71.0`]
- `go.opentelemetry.io/contrib/instrumentation/runtime v0.68.0` → [Updates: `v0.71.0`]
- `go.opentelemetry.io/otel v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.40.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/prometheus v0.65.0` → [Updates: `v0.68.0`]
- `go.opentelemetry.io/otel/metric v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/sdk v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/sdk/metric v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/trace v1.43.0` → [Updates: `v1.46.0`]
- `golang.org/x/mod v0.35.0` → [Updates: `v0.41.0`]
- `golang.org/x/sync v0.20.0` → [Updates: `v0.23.0`]
- `github.com/alecthomas/assert/v2 v2.11.0`
- `github.com/alecthomas/chroma/v2 v2.23.1` → [Updates: `v2.27.0`]
- `github.com/alecthomas/errors v0.9.1`

hermit (1)

bin/hermit (11)

- `actionlint 1.6.26` → [Updates: `1.7.12`]
- `bit 0.14.1` → [Updates: `0.20.2`]
- `git-lfs 3.7.1` → [Updates: `3.8.0`]
- `go 1.26.1` → [Updates: `1.27.1`]
- `goreleaser 2.16.0` → [Updates: `2.18.1`]
- `gosimports 0.3.8`
- `gotestsum 1.13.0`
- `just 1.48.1` → [Updates: `1.58.0`]
- `lefthook 2.1.4` → [Updates: `2.1.12`]
- `proctor 0.10.0`
- `svu 3.4.1`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository