Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update sigstore/cosign-installer action to v4.1.2
• Update softprops/action-gh-release action to v2.6.2
• Update docker/login-action action to v4.2.0
• Update docker/setup-buildx-action action to v4.1.0
• Update module github.com/invopop/jsonschema to v0.14.0
• Update acifani/setup-tinygo action to v3
• Update oras-project/setup-oras action to v2
• Update softprops/action-gh-release action to v3
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (5)

.github/workflows/ci.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• acifani/setup-tinygo v2.0.1@db56321a62b9a67922bb9ac8f9d085e218807bb3 → [Updates: v3.0.0]

.github/workflows/nightly-docker.yml (14)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• acifani/setup-tinygo v2.0.1@db56321a62b9a67922bb9ac8f9d085e218807bb3 → [Updates: v3.0.0]
• actions/upload-artifact v7
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v8
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.1.0]
• sigstore/cosign-installer v4.1.0@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 → [Updates: v4.1.2]
• docker/login-action v4.0.0@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4.2.0]
• docker/build-push-action v7
• actions/download-artifact v8
• softprops/action-gh-release v2.6.1@153bb8e04406b158c6c84fc1615b65b24149a1fe → [Updates: v2.6.2, v3.0.0]
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/nightly-oras.yml (11)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• acifani/setup-tinygo v2.0.1@db56321a62b9a67922bb9ac8f9d085e218807bb3 → [Updates: v3.0.0]
• actions/upload-artifact v7
• actions/download-artifact v8
• oras-project/setup-oras v1 → [Updates: v2]
• sigstore/cosign-installer v4.1.0@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 → [Updates: v4.1.2]
• actions/download-artifact v8
• softprops/action-gh-release v2.6.1@153bb8e04406b158c6c84fc1615b65b24149a1fe → [Updates: v2.6.2, v3.0.0]
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/release-docker.yml (13)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• acifani/setup-tinygo v2.0.1@db56321a62b9a67922bb9ac8f9d085e218807bb3 → [Updates: v3.0.0]
• actions/upload-artifact v7
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v8
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.1.0]
• sigstore/cosign-installer v4.1.0@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 → [Updates: v4.1.2]
• docker/login-action v4.0.0@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4.2.0]
• docker/build-push-action v7
• actions/download-artifact v8
• softprops/action-gh-release v2.6.1@153bb8e04406b158c6c84fc1615b65b24149a1fe → [Updates: v2.6.2, v3.0.0]
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/release-oras.yml (10)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• acifani/setup-tinygo v2.0.1@db56321a62b9a67922bb9ac8f9d085e218807bb3 → [Updates: v3.0.0]
• actions/upload-artifact v7
• actions/download-artifact v8
• oras-project/setup-oras v1 → [Updates: v2]
• sigstore/cosign-installer v4.1.0@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 → [Updates: v4.1.2]
• actions/download-artifact v8
• softprops/action-gh-release v2.6.1@153bb8e04406b158c6c84fc1615b65b24149a1fe → [Updates: v2.6.2, v3.0.0]
• ubuntu 24.04
• ubuntu 24.04

gomod (1)

go.mod (3)

• go 1.25
• github.com/extism/go-pdk v1.1.3
• github.com/invopop/jsonschema v0.13.0 → [Updates: v0.14.0]

---

• Check this box to trigger a request for Renovate to run again on this repository