Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/google/osv-scalibr).

## Repository Problems

These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/google/osv-scalibr).

- ⚠️ WARN: Package lookup failures

---

> [!WARNING]
> Renovate failed to look up the following dependencies: `Could not determine new digest for update (github-tags package fernandrone/linelint)`.
>
> Files affected: `.github/workflows/go.yml`

---

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update golangci/golangci-lint-action action to v9.3.0](../pull/2135)
- [ ] [Update workflows (major)](../pull/1177) (`actions/checkout`, `actions/setup-go`, `github/codeql-action`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

github-actions (4)

.github/workflows/codeql-analysis.yml (5)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-go v5` → [Updates: `v7`]
- `github/codeql-action v3` → [Updates: `v4`]
- `github/codeql-action v3` → [Updates: `v4`]
- `github/codeql-action v3` → [Updates: `v4`]

.github/workflows/go.yml (14)

- `actions/checkout v4` → [Updates: `v7`]
- `fernandrone/linelint v0.0.6@7907a5dca0c28ea7dd05c6d8d8cacded713aca11`
- `actions/checkout v4` → [Updates: `v7`]
- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-go v5` → [Updates: `v7`]
- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-go v5` → [Updates: `v7`]
- `golangci/golangci-lint-action v9.2.0@1e7e51e771db61008b38414a730f564565cf7c20` → [Updates: `v9.3.0`]
- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-go v5` → [Updates: `v7`]
- `arduino/setup-protoc v3`
- `go 1.26.x`
- `go 1.26.x`
- `go 1.26.x`

.github/workflows/lint-plugger.yml (3)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-go v5` → [Updates: `v7`]
- `go 1.26.x`

.github/workflows/prp-issue-workflow.yml

gomod (1)

go.mod

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Review the dependency entries in .github/workflows/codeql-analysis.yml, .github/workflows/go.yml, .github/workflows/lint-plugger.yml, and go.mod, then inspect pull requests 2135 and 1177. The issue is a Renovate dashboard rather than a single defined task; completion would require resolving the selected updates and addressing the linelint package lookup warning.

Written by the indexing model from the issue text.