Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/cloudposse/github-commenter).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [Update dependency go to 1.27](../pull/109)

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update module golang.org/x/net to v0.55.0 [SECURITY]](../pull/102)
- [ ] [Update alpine Docker tag to v3.24](../pull/58)
- [ ] [Update golang Docker tag to v1.20](../pull/67)
- [ ] [Update actions/checkout action to v7](../pull/135)
- [ ] [Update actions/setup-go action to v7](../pull/136)
- [ ] [Update docker/login-action action to v4](../pull/130)
- [ ] [Update docker/setup-buildx-action action to v4](../pull/132)
- [ ] [Update docker/setup-qemu-action action to v4](../pull/134)
- [ ] [Update goreleaser/goreleaser-action action to v7](../pull/128)
- [ ] [Update module github.com/google/go-github/v50 to v92](../pull/140)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [Update mszostok/codeowners-validator action to v0.7.4](../pull/79)

## Detected Dependencies

dockerfile (1)

Dockerfile (2)

- `golang 1.19-alpine3.16` → [Updates: `1.20-alpine3.16`]
- `alpine 3.16` → [Updates: `3.24`]

github-actions (4)

.github/workflows/auto-release.yml (1)

- `cloudposse/.github main`

.github/workflows/build.yml (5)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-go v5` → [Updates: `v7`]
- `goreleaser/goreleaser-action v5` → [Updates: `v7`]
- `goreleaser/goreleaser-action v5` → [Updates: `v7`]
- `go 1.19` → [Updates: `1.27`]

.github/workflows/docker.yml (5)

- `actions/checkout v4` → [Updates: `v7`]
- `docker/setup-qemu-action v3` → [Updates: `v4`]
- `docker/setup-buildx-action v3` → [Updates: `v4`]
- `docker/login-action v3` → [Updates: `v4`]
- `docker/build-push-action v7`

.github/workflows/validate-codeowners.yml (3)

- `actions/checkout v4` → [Updates: `v7`]
- `mszostok/codeowners-validator v0.7.1` → [Updates: `v0.7.4`]
- `mszostok/codeowners-validator v0.7.1` → [Updates: `v0.7.4`]

gomod (1)

go.mod (5)

- `go 1.19`
- `github.com/Masterminds/sprig v2.22.0+incompatible`
- `github.com/google/go-github/v50 v50.2.0` → [Updates: `v92.0.0`]
- `github.com/pkg/errors v0.9.1`
- `golang.org/x/net v0.17.0` → [Updates: `v0.55.0`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

先从 Renovate Dependency Dashboard 文档开始，然后查看 Dockerfile、.github/workflows/auto-release.yml、.github/workflows/build.yml、.github/workflows/docker.yml、.github/workflows/validate-codeowners.yml 和 go.mod。该 dashboard 列出了多个带有关联 pull request 的开放和阻塞依赖项更新，因此未指定单一的完成条件。

由索引模型根据 Issue 内容生成。