Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (2)

Datasource	Package	Last Updated
github-actions	amannn/action-semantic-pull-request	2025-08-22
npm	gherkin-lint	2023-12-20

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-node action to v7
• chore(deps): update amannn/action-semantic-pull-request action to v6
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update docker/setup-qemu-action action to v4
• chore(deps): update googleapis/release-please-action action to v5
• chore(deps): update marocchino/sticky-pull-request-comment action to v3
• 🔐 Create all pending approval PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update module github.com/fsnotify/fsnotify to v1.10.1
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update golang docker tag to v1.27

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): pin dependencies (alpine/openssl, gherkin-lint)
• chore(deps): update googleapis/release-please-action action to v4.4.1
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

docker-compose.yaml (1)

• envoyproxy/envoy v1.39-latest@sha256:57e14a549d7bd43c8d3f6d03e8cfa653e037d4b38e133acd9b54f38c524401b4

dockerfile (1)

flagd/Dockerfile (4)

• ghcr.io/open-feature/flagd v0.16.3@sha256:a11ae82ec6e40e89edae4327392a1e4ffc03e211f1b724879bb35b2e4f271bb3
• golang 1.25@sha256:699337d620559a59b4a2bb298ad59611e535d2ee755a34cf2d2a98f37578dc80 → [Updates: 1.27]
• alpine/openssl unknown version → [Updates: undefined]
• busybox 1.38@sha256:dc2d74b28e4cf8984fa52af1f39bc7c3d9c73760b41a74d629f5d11b1ab28616

github-actions (3)

.github/workflows/ci.yml (3)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v7.0.0]
• docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7.4.0]

.github/workflows/lint-pr.yml (3)

• amannn/action-semantic-pull-request v5.5.3@0723387faaf9b38adef4775cd42cfd5155ed6017 → [Updates: v6.1.1]
• marocchino/sticky-pull-request-comment v2.9.4@773744901bac0e8cbb5a0dc842800d45e9b2b405 → [Updates: v3.0.5]
• marocchino/sticky-pull-request-comment v2.9.4@773744901bac0e8cbb5a0dc842800d45e9b2b405 → [Updates: v3.0.5]

.github/workflows/release-please.yml (6)

• googleapis/release-please-action v4@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 → [Updates: v4.4.1, v5.0.0]
• actions/checkout v5.1.0@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 → [Updates: v7.0.1]
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.6.0]
• docker/setup-qemu-action v3.7.0@c7c53464625b32c7a7e944ae62b3e17d2b600130 → [Updates: v4.4.0]
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.4.1]
• docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7.4.0]

gomod (1)

launchpad/go.mod (2)

• go 1.22.4
• github.com/fsnotify/fsnotify v1.9.0 → [Updates: v1.10.1]

npm (1)

package.json (1)

• gherkin-lint ^4.2.2 → [Updates: 4.2.4]

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository

Read the Dependency Dashboard documentation first, then inspect .github/workflows/ci.yml, .github/workflows/lint-pr.yml, .github/workflows/release-please.yml, flagd/Dockerfile, launchpad/go.mod, package.json, and renovate.json. Review the existing Renovate PRs (#399 and #417) and CI results before changing dependencies. Done means the selected updates are resolved and the dashboard no longer has the corresponding pending work.