Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/cmars/onionpipe).

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update dependency sigstore/cosign to v3
- [ ] chore(deps): update goreleaser/goreleaser-action action to v7
- [ ] fix(deps): update module github.com/urfave/cli/v2 to v3
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(deps): update module golang.org/x/crypto to v0.52.0 [security]](../pull/130)
- [ ] [fix(deps): update module golang.org/x/net to v0.55.0 [security]](../pull/119)
- [ ] [chore(deps): update debian docker tag to bookworm-20260824](../pull/137)
- [ ] [fix(deps): update module github.com/urfave/cli/v2 to v2.27.7](../pull/147)
- [ ] [chore(deps): update dependency go to 1.27](../pull/126)
- [ ] [chore(deps): update dependency sigstore/cosign to v1.13.6](../pull/145)
- [ ] [chore(deps): update golang docker tag to v1.27](../pull/121)
- [ ] [fix(deps): update module github.com/google/go-cmp to v0.7.0](../pull/149)
- [ ] [chore(deps): update actions/checkout action to v7](../pull/144)
- [ ] [chore(deps): update actions/setup-go action to v7](../pull/146)
- [ ] [chore(deps): update debian docker tag to v13](../pull/142)
- [ ] [chore(deps): update dependency macos to v26](../pull/148)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

dockerfile (2)

build/Dockerfile (2)

- `golang 1.22` → [Updates: `1.27`]
- `debian bookworm-20240701` → [Updates: `12`, `13`]

Dockerfile (2)

- `debian 12` → [Updates: `13`]
- `golang 1.22-bookworm` → [Updates: `1.27-bookworm`]

github-actions (4)

.github/workflows/docker-publish.yml (3)

- `actions/checkout v4` → [Updates: `v7`]
- `sigstore/cosign-installer main`
- `sigstore/cosign v1.4.0` → [Updates: `v1.13.6`, `v3.1.3`]

.github/workflows/goreleaser.yml (4)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-go v5` → [Updates: `v7`]
- `goreleaser/goreleaser-action v6` → [Updates: `v7`]
- `go 1.22` → [Updates: `1.27`]

.github/workflows/static-darwin.yml (5)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-go v5` → [Updates: `v7`]
- `actions/upload-release-asset v1`
- `macos 14` → [Updates: `26`]
- `go 1.20` → [Updates: `1.27`]

.github/workflows/static-linux.yml (4)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-go v5` → [Updates: `v7`]
- `actions/upload-release-asset v1`
- `go 1.20` → [Updates: `1.27`]

gomod (1)

go.mod (8)

- `go 1.22`
- `github.com/cretz/bine v0.2.1-0.20221201125941-b9d31d9c7866@b9d31d9c7866`
- `github.com/frankban/quicktest v1.14.6`
- `github.com/google/go-cmp v0.6.0` → [Updates: `v0.7.0`]
- `github.com/mitchellh/go-homedir v1.1.0`
- `github.com/urfave/cli/v2 v2.27.5` → [Updates: `v2.27.7`, `v3.12.0`]
- `golang.org/x/crypto v0.31.0` → [Updates: `v0.52.0`]
- `golang.org/x/net v0.30.0` → [Updates: `v0.55.0`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start by reviewing the listed Renovate PRs and the affected build/Dockerfile, Dockerfile, .github/workflows files, and go.mod entries. Done is not defined by this issue itself: it lists rate-limited updates and already-created PRs, so a contributor would need maintainers to identify a specific update.

Written by the indexing model from the issue text.