Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/open-feature/go-sdk).

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>

View abandoned dependencies (4)

| Datasource | Package | Last Updated |
|------------|------|-------------|
| github-actions | [CycloneDX/gh-gomod-generate-sbom](https://redirect.github.com/CycloneDX/gh-gomod-generate-sbom) | `2023-06-05` |
| github-actions | [amannn/action-semantic-pull-request](https://redirect.github.com/amannn/action-semantic-pull-request) | `2025-08-22` |
| gomod | [go.uber.org/goleak](https://redirect.github.com/uber-go/goleak) | `2023-10-24` |
| gomod | [go.uber.org/mock](https://redirect.github.com/uber/mock) | `2025-08-18` |

## Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

- [ ] chore(deps): update amannn/action-semantic-pull-request action to v6.1.1
- [ ] chore(deps): update codecov/codecov-action action to v7.1.0
- [ ] chore(deps): update module golang.org/x/sync to v0.23.0
- [ ] chore(deps): update module golang.org/x/text to v0.42.0
- [ ] 🔐 **Create all pending approval PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update actions/cache action to v6.1.0](../pull/588)

## Detected Dependencies

git-submodules (1)

.gitmodules (1)

- `test-harness b308c1bbb12fc4511af6220f1b072a20a1a8831f`

github-actions (3)

.github/workflows/pr-checks.yml (9)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `golang/govulncheck-action v1.1.0@032d45514ae346b1db93c04b0c90b841c370344f`
- `actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` → [Updates: `v6.1.0`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` → [Updates: `v6.1.0`]
- `codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f` → [Updates: `v7.1.0`]
- `codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f` → [Updates: `v7.1.0`]

.github/workflows/pr-lint.yml (3)

- `amannn/action-semantic-pull-request v6@48f256284bd46cdaab1048c3721360e808335d50` → [Updates: `v6.1.1`]
- `marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88`
- `marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88`

.github/workflows/release-please.yml (5)

- `googleapis/release-please-action v5@45996ed1f6d02564a971a2fa1b5860e934307cf7`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `CycloneDX/gh-gomod-generate-sbom v2@efc74245d6802c8cefd925620515442756c70d8f`
- `goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94`

gomod (1)

go.mod (7)

- `go 1.26.0`
- `github.com/cucumber/godog v0.16.0`
- `github.com/stretchr/testify v1.12.1`
- `go.uber.org/goleak v1.3.0`
- `go.uber.org/mock v0.6.0`
- `golang.org/x/sync v0.22.0` → [Updates: `v0.23.0`]
- `golang.org/x/text v0.41.0` → [Updates: `v0.42.0`]

renovate-config (1)

renovate.json

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start by reviewing the pending and open Renovate entries, then inspect .github/workflows/pr-checks.yml, .github/workflows/pr-lint.yml, .github/workflows/release-please.yml, go.mod, and renovate.json. Confirm which dependency updates are still needed and whether the listed abandoned dependencies require a decision; done is not defined by the issue.

Written by the indexing model from the issue text.