Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (2)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/samply/golang-fhir-models/fhir-models	2022-12-03

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update actions/attest-build-provenance digest to 4d10147
• Update step-security/harden-runner action to v2.20.1
• Update module golang.org/x/mod to v0.39.0
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package github.com/vbauerster/mpb/v8: no-result.

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update github/codeql-action digest to 5595cca
• Update samply/blaze:pr-3900 Docker digest to ce65baf
• Update ossf/scorecard-action action to v2.4.4
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

.github/integration-test/docker-compose.yml (1)

• samply/blaze pr-3900@sha256:280e724a3b9ca8c5b5ddabf624335b2863d8d2b9f333e04c2a7771753a037335 → [Updates: pr-3900]

github-actions (3)

.github/actions/speicherwolke-download/action.yml (1)

• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

.github/workflows/build.yml (21)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• github/codeql-action v4@7188fc363630916deb702c7fdcf4e481b751f97a → [Updates: v4]
• golangci/golangci-lint-action v9@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• github/codeql-action v4@7188fc363630916deb702c7fdcf4e481b751f97a → [Updates: v4]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• anchore/sbom-action v0@e22c389904149dbc22b58101806040fa8d37a610
• actions/attest-build-provenance v4@0f67c3f4856b2e3261c31976d6725780e5e4c373 → [Updates: v4]
• actions/attest-sbom v4@c604332985a26aa8cf1bdc465b92731239ec6b9e
• softprops/action-gh-release v3@3d0d9888cb7fd7b750713d6e236d1fcb99157228
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• grafana/setup-k6-action v1.2.1@db07bd9765aac508ef18982e52ab937fe633a065
• ubuntu 24.04
• golangci/golangci-lint v2.12.2
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/scorecard.yml (4)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a → [Updates: v2.4.4]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4@7188fc363630916deb702c7fdcf4e481b751f97a → [Updates: v4]

gomod (1)

go.mod (10)

• go 1.26.5
• github.com/goccy/go-yaml v1.19.2
• github.com/google/uuid v1.6.0
• github.com/samply/golang-fhir-models/fhir-models v0.3.2
• github.com/spf13/cobra v1.10.2
• github.com/stretchr/testify v1.11.1
• github.com/vbauerster/mpb/v8 v8.13.0
• golang.org/x/mod v0.38.0 → [Updates: v0.39.0]
• gonum.org/v1/gonum v0.17.0
• golang.org/x/vuln v1.6.0

---

• Check this box to trigger a request for Renovate to run again on this repository