cloudposse / cloudposse/github-commenter

Dependency Dashboard

Open
#33 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
112
Forks
17
PR merge metrics
No merged PRs in 30d

Description

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/cloudposse/github-commenter).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [Update dependency go to 1.27](../pull/109)

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update module golang.org/x/net to v0.55.0 [SECURITY]](../pull/102)
- [ ] [Update alpine Docker tag to v3.24](../pull/58)
- [ ] [Update golang Docker tag to v1.20](../pull/67)
- [ ] [Update actions/checkout action to v7](../pull/135)
- [ ] [Update actions/setup-go action to v7](../pull/136)
- [ ] [Update docker/login-action action to v4](../pull/130)
- [ ] [Update docker/setup-buildx-action action to v4](../pull/132)
- [ ] [Update docker/setup-qemu-action action to v4](../pull/134)
- [ ] [Update goreleaser/goreleaser-action action to v7](../pull/128)
- [ ] [Update module github.com/google/go-github/v50 to v92](../pull/140)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [Update mszostok/codeowners-validator action to v0.7.4](../pull/79)

## Detected Dependencies

dockerfile (1)

Dockerfile (2)

- `golang 1.19-alpine3.16` → [Updates: `1.20-alpine3.16`]
- `alpine 3.16` → [Updates: `3.24`]

github-actions (4)

.github/workflows/auto-release.yml (1)

- `cloudposse/.github main`

.github/workflows/build.yml (5)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-go v5` → [Updates: `v7`]
- `goreleaser/goreleaser-action v5` → [Updates: `v7`]
- `goreleaser/goreleaser-action v5` → [Updates: `v7`]
- `go 1.19` → [Updates: `1.27`]

.github/workflows/docker.yml (5)

- `actions/checkout v4` → [Updates: `v7`]
- `docker/setup-qemu-action v3` → [Updates: `v4`]
- `docker/setup-buildx-action v3` → [Updates: `v4`]
- `docker/login-action v3` → [Updates: `v4`]
- `docker/build-push-action v7`

.github/workflows/validate-codeowners.yml (3)

- `actions/checkout v4` → [Updates: `v7`]
- `mszostok/codeowners-validator v0.7.1` → [Updates: `v0.7.4`]
- `mszostok/codeowners-validator v0.7.1` → [Updates: `v0.7.4`]

gomod (1)

go.mod (5)

- `go 1.19`
- `github.com/Masterminds/sprig v2.22.0+incompatible`
- `github.com/google/go-github/v50 v50.2.0` → [Updates: `v92.0.0`]
- `github.com/pkg/errors v0.9.1`
- `golang.org/x/net v0.17.0` → [Updates: `v0.55.0`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Contributor guide

Open the contributing guide

Research direction

Start with the Renovate Dependency Dashboard documentation, then review Dockerfile, .github/workflows/auto-release.yml, .github/workflows/build.yml, .github/workflows/docker.yml, .github/workflows/validate-codeowners.yml, and go.mod. The dashboard lists multiple open and blocked dependency updates with linked pull requests, so no single completion condition is specified.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, github-actions, go
Domain
build-system, cli, devops
Issue type
Refactor
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
1/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.