Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/d0ugal/git-exporter).

## Repository Problems

These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/d0ugal/git-exporter).

- ⚠️ WARN: Error updating branch: update failure

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (20)

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>
| Datasource | Package | Last Updated |
|------------|------|-------------|
| gomod | [dario.cat/mergo](https://redirect.github.com/imdario/mergo) | `2025-05-07` |
| gomod | [github.com/beorn7/perks](https://redirect.github.com/beorn7/perks) | `2019-07-31` |
| gomod | [github.com/cespare/xxhash/v2](https://redirect.github.com/cespare/xxhash) | `2024-04-04` |
| gomod | [github.com/emirpasic/gods](https://redirect.github.com/emirpasic/gods) | `2024-01-07` |
| gomod | [github.com/go-git/gcfg](https://redirect.github.com/go-git/gcfg) | `2025-06-27` |
| gomod | [github.com/go-logr/stdr](https://redirect.github.com/go-logr/stdr) | `2021-12-15` |
| gomod | [github.com/go-playground/locales](https://redirect.github.com/go-playground/locales) | `2023-01-05` |
| gomod | [github.com/go-playground/universal-translator](https://redirect.github.com/go-playground/universal-translator) | `2023-01-30` |
| gomod | [github.com/golang/groupcache](https://redirect.github.com/golang/groupcache) | `2024-11-29` |
| gomod | [github.com/google/uuid](https://redirect.github.com/google/uuid) | `2024-01-23` |
| gomod | [github.com/jbenet/go-context](https://redirect.github.com/jbenet/go-context) | `2015-07-11` |
| gomod | [github.com/json-iterator/go](https://redirect.github.com/json-iterator/go) | `2021-09-11` |
| gomod | [github.com/modern-go/concurrent](https://redirect.github.com/modern-go/concurrent) | `2018-03-06` |
| gomod | [github.com/modern-go/reflect2](https://redirect.github.com/modern-go/reflect2) | `2021-09-11` |
| gomod | [github.com/munnerz/goautoneg](https://redirect.github.com/munnerz/goautoneg) | `2019-10-10` |
| gomod | [github.com/sergi/go-diff](https://redirect.github.com/sergi/go-diff) | `2025-06-05` |
| gomod | [github.com/twitchyliquid64/golang-asm](https://redirect.github.com/twitchyliquid64/golang-asm) | `2021-01-12` |
| gomod | [github.com/xanzy/ssh-agent](https://redirect.github.com/xanzy/ssh-agent) | `2022-09-20` |
| gomod | [gopkg.in/warnings.v0](https://redirect.github.com/go-warnings/warnings) | `2017-11-15` |
| gomod | [gopkg.in/yaml.v3](https://redirect.github.com/go-yaml/yaml) | `2022-05-27` |

## Errored

The following updates encountered an error and will be retried. To force a retry now, click on a checkbox below.

- [ ] chore(deps): pin dependencies (`aquasecurity/trivy-action`, `golangci/golangci-lint`, `stefanzweifel/git-auto-commit-action`)

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update codecov/codecov-action digest to 0b35c9e](../pull/545)
- [ ] [fix: update module github.com/cenkalti/backoff/v5 to v7](../pull/493)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [fix: update module github.com/d0ugal/promexporter to v2](../pull/208)
- [ ] [fix: update module github.com/go-git/gcfg to v2](../pull/117)

## Detected Dependencies

dockerfile (1)

Dockerfile (2)

- `golang 1.27.1-alpine@sha256:cf6fca6641884b8433441b2b0652976f975e1d0fdd26d177eaaf8596087f3125`
- `alpine 3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b`

github-actions (5)

.github/workflows/auto-format.yml (3)

- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `stefanzweifel/git-auto-commit-action v7` → [Updates: `v7`]

.github/workflows/ci.yml (11)

- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `codecov/codecov-action v7@fb8b3582c8e4def4969c97caa2f19720cb33a72f` → [Updates: `v7`]
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `aquasecurity/trivy-action master` → [Updates: `master`]
- `go 1.27.1`
- `go 1.27.1`

.github/workflows/commits.yml (2)

- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `aevea/commitsar v1.0.3@909c3ab676c9af63cb84f2e38f395c7e89829b04`

.github/workflows/dev-build.yml (6)

- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `docker/setup-buildx-action v4@37fe631027851001ddb9b187196cc803df7f5f0e`
- `docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f`
- `docker/metadata-action v6@dc802804100637a589fabce1cb79ff13a1411302`
- `docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a`

.github/workflows/release-please.yml (6)

- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `googleapis/release-please-action v5@45996ed1f6d02564a971a2fa1b5860e934307cf7`
- `docker/setup-buildx-action v4@37fe631027851001ddb9b187196cc803df7f5f0e`
- `docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f`
- `docker/metadata-action v6@dc802804100637a589fabce1cb79ff13a1411302`
- `docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a`

gomod (1)

go.mod (80)

- `go 1.26.0`
- `go 1.27.1`
- `github.com/d0ugal/promexporter v1.14.69` → [Updates: `v2.0.2`]
- `github.com/go-git/go-git/v5 v5.19.2`
- `github.com/prometheus/client_golang v1.24.1`
- `go.opentelemetry.io/otel v1.46.0`
- `gopkg.in/yaml.v3 v3.0.1`
- `dario.cat/mergo v1.0.2`
- `github.com/Microsoft/go-winio v0.6.2`
- `github.com/ProtonMail/go-crypto v1.4.1`
- `github.com/beorn7/perks v1.0.1`
- `github.com/bytedance/gopkg v0.1.4`
- `github.com/bytedance/sonic v1.15.4`
- `github.com/bytedance/sonic/loader v0.5.2`
- `github.com/cenkalti/backoff/v5 v5.0.3` → [Updates: `v7.0.0`]
- `github.com/cespare/xxhash/v2 v2.3.0`
- `github.com/cloudflare/circl v1.6.5`
- `github.com/cloudwego/base64x v0.1.7`
- `github.com/cyphar/filepath-securejoin v0.7.0`
- `github.com/emirpasic/gods v1.18.1`
- `github.com/gabriel-vasile/mimetype v1.4.15`
- `github.com/gin-contrib/sse v1.1.2`
- `github.com/gin-gonic/gin v1.12.0`
- `github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376@3a3c6141e376` → [Updates: `v2.0.2`]
- `github.com/go-git/go-billy/v5 v5.9.1`
- `github.com/go-logr/logr v1.4.4`
- `github.com/go-logr/stdr v1.2.2`
- `github.com/go-playground/locales v0.14.1`
- `github.com/go-playground/universal-translator v0.18.1`
- `github.com/go-playground/validator/v10 v10.30.4`
- `github.com/goccy/go-json v0.10.6`
- `github.com/goccy/go-yaml v1.19.2`
- `github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8@2c02b8208cf8`
- `github.com/google/uuid v1.6.0`
- `github.com/grafana/pyroscope-go v1.4.2`
- `github.com/grafana/pyroscope-go/godeltaprof v0.1.12`
- `github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0`
- `github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99@d14ea06fba99`
- `github.com/json-iterator/go v1.1.12`
- `github.com/kevinburke/ssh_config v1.6.0`
- `github.com/klauspost/compress v1.20.0`
- `github.com/klauspost/cpuid/v2 v2.4.0`
- `github.com/leodido/go-urn v1.5.0`
- `github.com/mattn/go-isatty v0.0.24`
- `github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd`
- `github.com/modern-go/reflect2 v1.0.2`
- `github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822`
- `github.com/pelletier/go-toml/v2 v2.4.3`
- `github.com/pjbgf/sha1cd v0.6.0`
- `github.com/prometheus/client_model v0.6.3`
- `github.com/prometheus/common v0.71.0`
- `github.com/prometheus/procfs v0.22.0`
- `github.com/quic-go/qpack v0.6.0`
- `github.com/quic-go/quic-go v0.62.0`
- `github.com/sergi/go-diff v1.4.0`
- `github.com/skeema/knownhosts v1.3.3`
- `github.com/twitchyliquid64/golang-asm v0.15.1`
- `github.com/ugorji/go/codec v1.3.2`
- `github.com/xanzy/ssh-agent v0.3.3`
- `go.mongodb.org/mongo-driver/v2 v2.9.1`
- `go.opentelemetry.io/auto/sdk v1.2.1`
- `go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin v0.71.0`
- `go.opentelemetry.io/contrib/instrumentation/runtime v0.71.0`
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.46.0`
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.46.0`
- `go.opentelemetry.io/otel/metric v1.46.0`
- `go.opentelemetry.io/otel/sdk v1.46.0`
- `go.opentelemetry.io/otel/sdk/metric v1.46.0`
- `go.opentelemetry.io/otel/trace v1.46.0`
- `go.opentelemetry.io/proto/otlp v1.11.0`
- `golang.org/x/arch v0.31.0`
- `golang.org/x/crypto v0.57.0`
- `golang.org/x/net v0.59.0`
- `golang.org/x/sys v0.48.0`
- `golang.org/x/text v0.42.0`
- `google.golang.org/genproto/googleapis/api v0.0.0-20260911204522-f61a6ca850bd@f61a6ca850bd`
- `google.golang.org/genproto/googleapis/rpc v0.0.0-20260911204522-f61a6ca850bd@f61a6ca850bd`
- `google.golang.org/grpc v1.83.2`
- `google.golang.org/protobuf v1.36.12`
- `gopkg.in/warnings.v0 v0.1.2`

regex (1)

Makefile (1)

- `golangci/golangci-lint v2.13.2` → [Updates: `v2.13.2`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository