Visitar URL original
Dependency Dashboard · Issue #714 · google/osv.dev · GitHub
Skip to content

Dependency Dashboard #714

New issue
New issue
Open
Open
Dependency Dashboard#714
Labels
dependenciesPull requests that update a dependency fileinfrainfrastructure bugs/FRs

Description

@forking-renovate
forking-renovate
bot
opened on Sep 15, 2022

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

  • ⚠️ WARN: Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

  • chore(deps): update docker (gcr.io/distroless/static-debian12, ruby)
  • chore(deps): update docs to v0.3.5 (jekyll-optional-front-matter, jekyll-readme-index, jekyll-relative-links, jekyll-titles-from-headings)
  • chore(deps): update terraform (gcr.io/endpoints-release/endpoints-runtime-serverless, google, google-beta)
  • chore(deps): update workflows (amannn/action-semantic-pull-request, github/codeql-action)
  • fix(deps): update gcp-indexer-go (cloud.google.com/go/pubsub/v2, google.golang.org/api)
  • fix(deps): update tools-go (github.com/tidwall/sjson, google.golang.org/api)
  • chore(deps): update osv-lib (grpcio-tools, pygit2)
  • fix(deps): update gcp-services-python (google-cloud-secret-manager, pygit2)
  • fix(deps): update vulnfeeds-go (cloud.google.com/go/secretmanager, github.com/knqyf263/go-cpe, google.golang.org/api)
  • chore(deps): lock file maintenance (bundler)
  • chore(deps): lock file maintenance (npm)
  • chore(deps): lock file maintenance (python)
  • chore(deps): lock file maintenance (terraform)
  • 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

  • chore(deps): update dependency google-cloud-pubsub to v2.44.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

Detected Dependencies

bundler (1)
docs/Gemfile (16)
  • ruby ~> 4
  • jekyll "~> 4.4.0"
  • csv lock file @ 3.3.7
  • base64 lock file @ 0.3.0
  • jekyll-feed "~> 0.15"
  • jekyll-relative-links lock file @ 0.9.1 → [Updates: 0.9.2]
  • jekyll-optional-front-matter lock file @ 0.3.4 → [Updates: 0.3.5]
  • jekyll-readme-index lock file @ 0.5.1 → [Updates: 0.6.0]
  • jekyll-default-layout lock file @ 0.2.1
  • jekyll-titles-from-headings lock file @ 0.5.7 → [Updates: 0.6.0]
  • just-the-docs lock file @ 0.12.0
  • jekyll-github-metadata lock file @ 2.16.1
  • tzinfo ">= 1", "< 3"
  • wdm "~> 0.2.0"
  • http_parser.rb "~> 0.8.0"
  • webrick "~> 1.7"
dockerfile (18)
docker/deployment/Dockerfile (1)
  • ubuntu 26.04@sha256:6a06111c3b0a8600feadb270aec771dc239bf407b25625f93f44ab00e11f4d3c → [Updates: 26.04]
docker/esp/Dockerfile (1)
  • gcr.io/endpoints-release/endpoints-runtime 2
docker/goose/Dockerfile (2)
  • golang 1.27.1-alpine@sha256:8a5910f31396cd4d89662f56c68b3ae31d374308270a1c3bd96672ee5ed43414 → [Updates: 1.27.3-alpine]
  • gcr.io/google.com/cloudsdktool/google-cloud-cli alpine@sha256:269c3ae5175a900ea6be98322dcc65d4cb1499ec9f8f262d19bbd128c6a898c8
docker/terraform/Dockerfile (2)
  • golang 1.27.1-alpine@sha256:8a5910f31396cd4d89662f56c68b3ae31d374308270a1c3bd96672ee5ed43414 → [Updates: 1.27.3-alpine]
  • gcr.io/google.com/cloudsdktool/google-cloud-cli alpine@sha256:269c3ae5175a900ea6be98322dcc65d4cb1499ec9f8f262d19bbd128c6a898c8
docker/worker-base/Dockerfile (1)
  • ubuntu 26.04@sha256:6a06111c3b0a8600feadb270aec771dc239bf407b25625f93f44ab00e11f4d3c → [Updates: 26.04]
docs/docs.Dockerfile (1)
  • ruby 4@sha256:d907e08a8558207d221f257afe1bfc3e274a12bac035d8bbc9049b01b5364140 → [Updates: 4]
gcp/indexer/Dockerfile (2)
  • golang 1.27.1-alpine@sha256:8a5910f31396cd4d89662f56c68b3ae31d374308270a1c3bd96672ee5ed43414 → [Updates: 1.27.3-alpine]
  • gcr.io/distroless/base-debian12 sha256:fabbf1c0c357a3d42550111351daed089b20a2c954df13ee2fcff60602515e84
go/cmd/osv-linter-worker/Dockerfile (1)
  • golang 1.27.1-alpine@sha256:8a5910f31396cd4d89662f56c68b3ae31d374308270a1c3bd96672ee5ed43414 → [Updates: 1.27.3-alpine]
go/Dockerfile (16)
  • golang 1.27.1-alpine@sha256:8a5910f31396cd4d89662f56c68b3ae31d374308270a1c3bd96672ee5ed43414 → [Updates: 1.27.3-alpine]
  • alpine 3.24@sha256:f59abe656b692d901e184be3445e084786602108599d2a51d229c0f5a48c71bf
  • gcr.io/distroless/static-debian12 sha256:d75cdd72874d4790092fcb1b058493ecf6bb5bf2b2b897045b00ff01d91843f2
  • gcr.io/distroless/static-debian12 sha256:d75cdd72874d4790092fcb1b058493ecf6bb5bf2b2b897045b00ff01d91843f2
  • gcr.io/distroless/static-debian12 sha256:a9fcaedd4c9b59e12dd65d954f0b5044f19b0647a8a3712e77205df9e7b102cd → [Updates: undefined]
  • gcr.io/distroless/static-debian12 sha256:d75cdd72874d4790092fcb1b058493ecf6bb5bf2b2b897045b00ff01d91843f2
  • gcr.io/distroless/static-debian12 sha256:d75cdd72874d4790092fcb1b058493ecf6bb5bf2b2b897045b00ff01d91843f2
  • gcr.io/distroless/static-debian12 sha256:d75cdd72874d4790092fcb1b058493ecf6bb5bf2b2b897045b00ff01d91843f2
  • gcr.io/distroless/static-debian12 sha256:d75cdd72874d4790092fcb1b058493ecf6bb5bf2b2b897045b00ff01d91843f2
  • alpine 3.24@sha256:f59abe656b692d901e184be3445e084786602108599d2a51d229c0f5a48c71bf
  • alpine 3.24@sha256:f59abe656b692d901e184be3445e084786602108599d2a51d229c0f5a48c71bf
  • gcr.io/distroless/static-debian12 sha256:d75cdd72874d4790092fcb1b058493ecf6bb5bf2b2b897045b00ff01d91843f2
  • gcr.io/distroless/static-debian12 sha256:d75cdd72874d4790092fcb1b058493ecf6bb5bf2b2b897045b00ff01d91843f2
  • gcr.io/distroless/static-debian12 sha256:d75cdd72874d4790092fcb1b058493ecf6bb5bf2b2b897045b00ff01d91843f2
  • gcr.io/distroless/static-debian12 sha256:d75cdd72874d4790092fcb1b058493ecf6bb5bf2b2b897045b00ff01d91843f2
  • gcr.io/distroless/static-debian12 sha256:d75cdd72874d4790092fcb1b058493ecf6bb5bf2b2b897045b00ff01d91843f2
vulnfeeds/cmd/combine-to-osv/Dockerfile (2)
  • golang 1.27.1-alpine@sha256:8a5910f31396cd4d89662f56c68b3ae31d374308270a1c3bd96672ee5ed43414 → [Updates: 1.27.3-alpine]
  • gcr.io/google.com/cloudsdktool/google-cloud-cli alpine@sha256:269c3ae5175a900ea6be98322dcc65d4cb1499ec9f8f262d19bbd128c6a898c8
vulnfeeds/cmd/converters/alpine/Dockerfile (2)
  • golang 1.27.1-alpine@sha256:8a5910f31396cd4d89662f56c68b3ae31d374308270a1c3bd96672ee5ed43414 → [Updates: 1.27.3-alpine]
  • gcr.io/google.com/cloudsdktool/google-cloud-cli alpine@sha256:269c3ae5175a900ea6be98322dcc65d4cb1499ec9f8f262d19bbd128c6a898c8
vulnfeeds/cmd/converters/cve/cve5/bulk-converter/Dockerfile (2)
  • golang 1.27.1-alpine@sha256:8a5910f31396cd4d89662f56c68b3ae31d374308270a1c3bd96672ee5ed43414 → [Updates: 1.27.3-alpine]
  • gcr.io/google.com/cloudsdktool/google-cloud-cli alpine@sha256:269c3ae5175a900ea6be98322dcc65d4cb1499ec9f8f262d19bbd128c6a898c8
vulnfeeds/cmd/converters/cve/nvd-cve-osv/Dockerfile (2)
  • golang 1.27.1-alpine@sha256:8a5910f31396cd4d89662f56c68b3ae31d374308270a1c3bd96672ee5ed43414 → [Updates: 1.27.3-alpine]
  • gcr.io/google.com/cloudsdktool/google-cloud-cli alpine@sha256:269c3ae5175a900ea6be98322dcc65d4cb1499ec9f8f262d19bbd128c6a898c8
vulnfeeds/cmd/converters/debian/Dockerfile (2)
  • golang 1.27.1-alpine@sha256:8a5910f31396cd4d89662f56c68b3ae31d374308270a1c3bd96672ee5ed43414 → [Updates: 1.27.3-alpine]
  • gcr.io/google.com/cloudsdktool/google-cloud-cli alpine@sha256:269c3ae5175a900ea6be98322dcc65d4cb1499ec9f8f262d19bbd128c6a898c8
vulnfeeds/cmd/converters/dsa-dla-dtsa/Dockerfile (2)
  • golang 1.27.1-alpine@sha256:8a5910f31396cd4d89662f56c68b3ae31d374308270a1c3bd96672ee5ed43414 → [Updates: 1.27.3-alpine]
  • alpine 3.24@sha256:f59abe656b692d901e184be3445e084786602108599d2a51d229c0f5a48c71bf
vulnfeeds/cmd/mirrors/cpe-repo-gen/Dockerfile (2)
  • golang 1.27.1-alpine@sha256:8a5910f31396cd4d89662f56c68b3ae31d374308270a1c3bd96672ee5ed43414 → [Updates: 1.27.3-alpine]
  • gcr.io/google.com/cloudsdktool/google-cloud-cli alpine@sha256:269c3ae5175a900ea6be98322dcc65d4cb1499ec9f8f262d19bbd128c6a898c8
vulnfeeds/cmd/mirrors/debian-copyright-mirror/Dockerfile (2)
  • golang 1.27.1-alpine@sha256:8a5910f31396cd4d89662f56c68b3ae31d374308270a1c3bd96672ee5ed43414 → [Updates: 1.27.3-alpine]
  • alpine 3.24@sha256:f59abe656b692d901e184be3445e084786602108599d2a51d229c0f5a48c71bf
vulnfeeds/cmd/mirrors/download-cves/Dockerfile (2)
  • golang 1.27.1-alpine@sha256:8a5910f31396cd4d89662f56c68b3ae31d374308270a1c3bd96672ee5ed43414 → [Updates: 1.27.3-alpine]
  • gcr.io/google.com/cloudsdktool/google-cloud-cli alpine@sha256:269c3ae5175a900ea6be98322dcc65d4cb1499ec9f8f262d19bbd128c6a898c8
git-submodules (1)
.gitmodules (1)
  • osv/osv-schema 6410c13304f9bde44b522350b244f1f51e1c18a6 → [Updates: undefined]
github-actions (14)
.github/workflows/codeql-analysis.yml (4)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • github/codeql-action v4.39.2@1fc58d04a4d4374f921bdac573c3811c240f9c26 → [Updates: v4.39.3]
  • github/codeql-action v4.39.2@1fc58d04a4d4374f921bdac573c3811c240f9c26 → [Updates: v4.39.3]
  • github/codeql-action v4.39.2@1fc58d04a4d4374f921bdac573c3811c240f9c26 → [Updates: v4.39.3]
.github/workflows/docs-deploy.yml (5)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • ruby/setup-ruby v1.336.0@de492cf36cbab201753d720ce4f4e336cd688c94 → [Updates: v1.338.0]
  • actions/configure-pages v6.0.0@45bfe0192ca1faeb007ade9deae92b16b8254a0d
  • actions/upload-pages-artifact v5@fc324d3547104276b827a68afc52ff2a11cc49c9
  • actions/deploy-pages v5.0.1@368f82528645a54fb793d4d04e342629a3f51346
.github/workflows/generate-protos.yml (4)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-python v7.1.0@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1 → [Updates: v8.1.3]
.github/workflows/go-generate.yml (3)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1 → [Updates: v8.1.3]
.github/workflows/links.yml (2)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • tcort/github-action-markdown-link-check v1.1.3@e047c5b37f24ab722bbef1a27b6fab7f96bc4068
.github/workflows/lint.yaml (5)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-python v7.1.0@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • hashicorp/setup-terraform v4.0.1@dfe3c3f87815947d99a8997f908cb6525fc44e9e
.github/workflows/osv-scanner-unified.yml (2)
  • google/osv-scanner-action nightly
  • google/osv-scanner-action nightly
.github/workflows/renovate-validator.yml (2)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-node v7.1.0@949feb2413d6458794dcd2491c4babbbce0c15c1
.github/workflows/scorecards.yml (4)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • ossf/scorecard-action v2.5.0@fa7117db83c52d787ae5a89f350999701505d78e
  • actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9
  • github/codeql-action v4.39.2@1fc58d04a4d4374f921bdac573c3811c240f9c26 → [Updates: v4.39.3]
.github/workflows/snapshots.yml (3)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1 → [Updates: v8.1.3]
.github/workflows/staleness.yml (1)
  • actions/stale v11.0.0@4391f3da665fdf50b6810c1a66712fb9ba21aa93
.github/workflows/tests.yml (16)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • dorny/paths-filter v4.0.3@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • codecov/codecov-action v7.1.1@303a32d7a59b442fa8d48b6a1cc6825c09c847a5
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • codecov/codecov-action v7.1.1@303a32d7a59b442fa8d48b6a1cc6825c09c847a5
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • codecov/codecov-action v7.1.1@303a32d7a59b442fa8d48b6a1cc6825c09c847a5
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-python v7.1.0@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-python v7.1.0@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0
.github/workflows/title.yml (1)
  • amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50 → [Updates: v6.1.2]
.github/workflows/zizmor.yml (2)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • zizmorcore/zizmor-action v0.8.1@45d7276c9ca790aabd705e31ca99c6185c3e76dd
gomod (9)
bindings/go/go.mod (7)
  • go 1.27.1 → [Updates: 1.27.3]
  • github.com/google/go-cmp v0.7.0
  • github.com/ossf/osv-schema/bindings/go v0.0.0-20261026052736-6410c13304f9@6410c13304f9 → [Updates: v0.0.0-20261112022147-972b058557d9]
  • golang.org/x/sync v0.24.0 → [Updates: v0.25.0]
  • google.golang.org/genproto/googleapis/api v0.0.0-20260706201446-f0a921348800@f0a921348800 → [Updates: v0.0.0-20261110000943-09e21b237f2c]
  • google.golang.org/grpc v1.84.0 → [Updates: v1.85.0]
  • google.golang.org/protobuf v1.36.12
docs/go.mod (4)
  • go 1.27.2 → [Updates: 1.27.3]
  • github.com/grpc-ecosystem/grpc-gateway/v2 v2.33.0
  • google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.6.2
  • google.golang.org/protobuf v1.36.12
external/go.mod (7)
  • go 1.27.2 → [Updates: 1.27.3]
  • github.com/aquasecurity/go-pep440-version v0.0.1
  • github.com/goccy/go-yaml v1.19.2
  • github.com/google/osv.dev/vulnfeeds v0.0.0-20260812014536-918f43604b8d@918f43604b8d → [Updates: v0.0.0-20261113060233-e15de6dfb89d]
  • github.com/ossf/osv-schema/bindings/go v0.0.0-20261026052736-6410c13304f9@6410c13304f9 → [Updates: v0.0.0-20261112022147-972b058557d9]
  • google.golang.org/protobuf v1.36.12
  • golang.org/x/crypto v0.58.0 → [Updates: v0.59.0]
gcp/indexer/go.mod (11)
  • go 1.27.1 → [Updates: 1.27.3]
  • cloud.google.com/go/datastore v1.28.1
  • cloud.google.com/go/pubsub/v2 v2.8.0 → [Updates: v2.8.1]
  • cloud.google.com/go/storage v1.70.0
  • github.com/go-git/go-git/v5 v5.19.3
  • github.com/golang/glog v1.2.5
  • github.com/google/go-cmp v0.7.0
  • golang.org/x/sync v0.25.0
  • google.golang.org/api v0.310.0 → [Updates: v0.311.0]
  • gopkg.in/yaml.v3 v3.0.1
  • golang.org/x/crypto v0.58.0 → [Updates: v0.59.0]
go/go.mod (48)
  • go 1.27.1 → [Updates: 1.27.3]
  • charm.land/bubbles/v2 v2.2.1
  • charm.land/bubbletea/v2 v2.1.0 → [Updates: v2.1.1]
  • charm.land/lipgloss/v2 v2.0.6 → [Updates: v2.1.0]
  • cloud.google.com/go/compute/metadata v0.10.0
  • cloud.google.com/go/datastore v1.27.1 → [Updates: v1.28.1]
  • cloud.google.com/go/monitoring v1.31.0 → [Updates: v1.32.1]
  • cloud.google.com/go/pubsub/v2 v2.7.0 → [Updates: v2.8.1]
  • cloud.google.com/go/storage v1.69.0 → [Updates: v1.70.0]
  • github.com/alicebob/miniredis/v2 v2.40.0
  • github.com/dgraph-io/ristretto/v2 v2.4.2
  • github.com/dustin/go-humanize v1.1.0
  • github.com/google/go-cmp v0.7.0
  • github.com/google/osv-scalibr v0.5.3
  • github.com/hashicorp/go-retryablehttp v0.7.8
  • github.com/jackc/pgx/v5 v5.11.0 → [Updates: v5.12.0]
  • github.com/klauspost/compress v1.20.3 → [Updates: v1.20.4]
  • github.com/microcosm-cc/bluemonday v1.0.27
  • github.com/nikolalohinski/gonja/v2 v2.9.1
  • github.com/ossf/osv-schema/bindings/go v0.0.0-20261026052736-6410c13304f9@6410c13304f9 → [Updates: v0.0.0-20261112022147-972b058557d9]
  • github.com/package-url/packageurl-go v0.1.7
  • github.com/pandatix/go-cvss v0.6.4
  • github.com/prometheus/client_golang v1.25.0
  • github.com/redis/go-redis/v9 v9.23.0
  • github.com/tidwall/gjson v1.20.0 → [Updates: v1.20.2]
  • github.com/xeipuuv/gojsonschema v1.2.0
  • github.com/yuin/goldmark/v2 v2.1.6 → [Updates: v2.1.15]
  • go.opentelemetry.io/contrib/detectors/gcp v1.47.0
  • go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.72.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.72.0
  • go.opentelemetry.io/otel v1.47.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.47.0
  • go.opentelemetry.io/otel/sdk v1.47.0
  • go.opentelemetry.io/otel/trace v1.47.0
  • go.yaml.in/yaml/v4 v4.0.0-rc.6 → [Updates: v4.0.0]
  • golang.org/x/oauth2 v0.37.0 → [Updates: v0.38.0]
  • golang.org/x/sync v0.24.0 → [Updates: v0.25.0]
  • golang.org/x/text v0.43.0 → [Updates: v0.44.0]
  • google.golang.org/api v0.306.0 → [Updates: v0.311.0]
  • google.golang.org/genproto/googleapis/api v0.0.0-20260928230214-8a89bd6388cc@8a89bd6388cc → [Updates: v0.0.0-20261110000943-09e21b237f2c]
  • google.golang.org/grpc v1.84.0 → [Updates: v1.85.0]
  • google.golang.org/protobuf v1.36.12
  • gopkg.in/dnaeon/go-vcr.v4 v4.0.7
  • k8s.io/apimachinery v0.37.1 → [Updates: v0.37.2]
  • mvdan.cc/sh/v3 v3.14.1
  • osv.dev/bindings/go v0.0.0-20260527044221-c1c72c1b0158@c1c72c1b0158 → [Updates: v0.0.0-20261113060233-e15de6dfb89d]
  • sigs.k8s.io/yaml v1.6.0
  • golang.org/x/crypto v0.58.0 → [Updates: v0.59.0]
tools/apitester/go.mod (7)
  • go 1.27.2 → [Updates: 1.27.3]
  • github.com/gkampitakis/go-snaps v0.5.25
  • github.com/google/go-cmp v0.7.0
  • github.com/tidwall/gjson v1.20.0 → [Updates: v1.20.2]
  • github.com/tidwall/pretty v1.2.2 → [Updates: v1.3.0]
  • github.com/tidwall/sjson v1.2.5 → [Updates: v1.2.6]
  • gopkg.in/dnaeon/go-vcr.v4 v4.0.7
tools/datastore-remover/go.mod (4)
  • go 1.27.2 → [Updates: 1.27.3]
  • cloud.google.com/go/datastore v1.28.1
  • google.golang.org/api v0.310.0 → [Updates: v0.311.0]
  • golang.org/x/crypto v0.58.0 → [Updates: v0.59.0]
tools/indexer-api-caller/go.mod (1)
  • go 1.27.2 → [Updates: 1.27.3]
vulnfeeds/go.mod (30)
  • go 1.27.1 → [Updates: 1.27.3]
  • charm.land/lipgloss/v2 v2.0.6 → [Updates: v2.1.0]
  • cloud.google.com/go/secretmanager v1.23.1 → [Updates: v1.24.0]
  • cloud.google.com/go/storage v1.70.0
  • github.com/JohannesKaufmann/html-to-markdown/v2 v2.5.2
  • github.com/aquasecurity/go-pep440-version v0.0.1
  • github.com/atombender/go-jsonschema v0.24.1
  • github.com/fsouza/fake-gcs-server v1.56.1
  • github.com/gkampitakis/go-snaps v0.5.25
  • github.com/go-git/go-git/v5 v5.19.3
  • github.com/goccy/go-yaml v1.19.2
  • github.com/google/go-cmp v0.7.0
  • github.com/google/osv-scalibr v0.5.3
  • github.com/knqyf263/go-cpe v0.0.0-20261015082322-2cb8736448ff@2cb8736448ff → [Updates: v0.0.0-20261105105232-0e8dfa8dd44c]
  • github.com/ossf/osv-schema/bindings/go v0.0.0-20261026052736-6410c13304f9@6410c13304f9 → [Updates: v0.0.0-20261112022147-972b058557d9]
  • github.com/redis/go-redis/v9 v9.23.0
  • github.com/sethvargo/go-retry v0.5.0
  • go.opentelemetry.io/contrib/detectors/gcp v1.47.0
  • go.opentelemetry.io/otel v1.47.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.47.0
  • go.opentelemetry.io/otel/sdk v1.47.0
  • go.opentelemetry.io/otel/trace v1.47.0
  • golang.org/x/sync v0.25.0
  • golang.org/x/text v0.43.0 → [Updates: v0.44.0]
  • google.golang.org/api v0.310.0 → [Updates: v0.311.0]
  • google.golang.org/grpc v1.85.0
  • google.golang.org/protobuf v1.36.12
  • gopkg.in/dnaeon/go-vcr.v4 v4.0.7
  • gopkg.in/yaml.v2 v2.4.0 → [Updates: v3.0.1]
  • golang.org/x/crypto v0.58.0 → [Updates: v0.59.0]
npm (1)
website/frontend3/package.json (21)
  • @github/clipboard-copy-element 1.3.2
  • @hotwired/turbo 8.0.23
  • @material/data-table 14.0.0
  • @material/layout-grid 14.0.0
  • @material/theme 14.0.0
  • @material/web ^2.0.0
  • json-formatter-js ^2.5.23
  • lit 3.3.3
  • copy-webpack-plugin ^14.0.0
  • css-loader ^7.1.3
  • html-webpack-plugin ^5.6.6
  • mini-css-extract-plugin ^2.10.0
  • raw-loader ^4.0.2
  • sass ^1.97.3 → [Updates: ^1.97.3]
  • sass-loader ^17.0.0
  • style-loader ^4.0.0
  • webpack ^5.105.4
  • webpack-bundle-analyzer ^5.0.0
  • webpack-cli ^7.0.0
  • webpack-dev-server ^6.0.0
  • pnpm 12.14.0 → [Updates: 12.18.0]
poetry (7)
gcp/functions/pypi/pyproject.toml (5)
  • poetry-core >=2.0.0
  • cryptography ==50.0.2
  • google-cloud-secret-manager ==2.31.0 → [Updates: ==2.32.0]
  • osv ==0.1.3
  • requests ==2.34.2
gcp/workers/oss_fuzz_worker/pyproject.toml (15)
  • poetry-core >=2.0.0
  • yapf *
  • pylint *
  • google-auth-httplib2 ==0.4.4
  • google-api-python-client ==2.201.0 → [Updates: ==2.202.0]
  • google-cloud-pubsub ==2.43.0 → [Updates: ==2.44.0]
  • google-cloud-ndb ==2.7.1
  • google-cloud-storage ==3.17.1
  • pyyaml ==6.0.3
  • redis ==6.4.0
  • packageurl-python ==0.17.6
  • pygit2 ==1.20.1 → [Updates: ==1.21.0]
  • requests ==2.34.2
  • jsonschema ==4.26.0
  • vanir ==1.1.0
gcp/workers/worker/pyproject.toml (15)
  • poetry-core >=2.0.0
  • yapf *
  • pylint *
  • google-auth-httplib2 ==0.4.4
  • google-api-python-client ==2.201.0 → [Updates: ==2.202.0]
  • google-cloud-pubsub ==2.43.0 → [Updates: ==2.44.0]
  • google-cloud-ndb ==2.7.1
  • google-cloud-storage ==3.17.1
  • pyyaml ==6.0.3
  • redis ==6.4.0
  • packageurl-python ==0.17.6
  • pygit2 ==1.20.1 → [Updates: ==1.21.0]
  • requests ==2.34.2
  • jsonschema ==4.26.0
  • vanir ==1.1.0
go/cmd/vanir_signatures/osv/pyproject.toml (2)
  • poetry-core >=2.0.0,<3.0.0
  • protobuf >=6.33.6,<7.0.0
go/cmd/vanir_signatures/pyproject.toml (2)
  • poetry-core >=2.0.0,<3.0.0
  • vanir ==1.1.0
pyproject.toml (21)
  • poetry-core >=2.0.0
  • yapf *
  • pylint *
  • protobuf >=6.33.6,<7.0.0
  • grpcio-tools * → [Updates: *]
  • mypy-protobuf ^5.0.0
  • vcrpy *
  • hypothesis *
  • google-cloud-ndb >=2.3
  • google-cloud-logging >=3.10
  • google-cloud-pubsub >=2.31.1 → [Updates: >=2.31.1]
  • google-cloud-storage >=2.17
  • semver >=3.0 → [Updates: >=3.0]
  • packageurl-python >=0.17.0
  • pyyaml >=6.0
  • pygit2 >=1.14.0 → [Updates: >=1.14.0]
  • attrs >=23.2
  • jsonschema >=4.0
  • grpcio >=1.0
  • packaging-legacy >=23.0.post0
  • requests >=2.33
tools/datafix/pyproject.toml (7)
  • poetry-core >=2.0.0
  • yapf *
  • pylint *
  • google-cloud-ndb ==2.7.1
  • google-cloud-storage ==3.17.1
  • pyyaml ==6.0.3
  • google-cloud-pubsub >=2.25.2 → [Updates: >=2.25.2]
regex (4)
deployment/terraform/environments/oss-vdb-test/main.tf (1)
  • gcr.io/endpoints-release/endpoints-runtime-serverless 2.57.1 → [Updates: 2.57.2]
deployment/terraform/environments/oss-vdb/main.tf (1)
  • gcr.io/endpoints-release/endpoints-runtime-serverless 2.57.1 → [Updates: 2.57.2]
go/cmd/osv-linter-worker/Dockerfile (1)
  • osv-schema main@6410c13304f9bde44b522350b244f1f51e1c18a6 → [Updates: main]
osv/models.py (1)
  • ossf/osv-schema 1.9.2
terraform (4)
deployment/terraform/environments/oss-vdb-test/main.tf (4)
  • external ~> 2.4.0
  • google ~> 8.9.0 → [Updates: ~> 8.10.0]
  • google-beta ~> 8.9.0 → [Updates: ~> 8.10.0]
  • null ~> 3.3.0
deployment/terraform/environments/oss-vdb/main.tf (4)
  • external ~> 2.4.0
  • google ~> 8.9.0 → [Updates: ~> 8.10.0]
  • google-beta ~> 8.9.0 → [Updates: ~> 8.10.0]
  • null ~> 3.3.0
deployment/terraform/environments/private-osv/main.tf (2)
  • google ~> 8.9.0 → [Updates: ~> 8.10.0]
  • google-beta ~> 8.9.0 → [Updates: ~> 8.10.0]
deployment/terraform/modules/osv/website.tf (1)
  • github.com/terraform-google-modules/terraform-google-lb-http v14.3.0
  • Check this box to trigger a request for Renovate to run again on this repository

Activity

  1. andrewpollock
    added
    infrainfrastructure bugs/FRs
    on Oct 18, 2022
  2. andrewpollock
    added
    dependenciesPull requests that update a dependency file
    on Aug 8, 2024
  3. another-rex
    pinned this issue on Oct 22, 2024
  4. cuixq
    added 6 commits that reference this issue on Mar 10, 2026

    fix(deps): update gcp-services-python (#4999)

    9bfca45

    fix(deps): update gcp-indexer-go (#5000)

    920ec18

    fix(deps): update vulnfeeds-go (#5001)

    6c59a6e

    fix(deps): update module google.golang.org/api to v0.271.0 (#5002)

    664b949

    fix(deps): update website (#5003)

    afcf7dc

    chore(deps): update actions/upload-artifact action to v7 (#5004)

    ba97a5a
  5. Ly-Joey
    added a commit that references this issue on Apr 1, 2026

    fix(deps): update module github.com/go-git/go-git/v5 to v5.17.1 [secu…

    39bb184
  6. tymzd
    added 5 commits that reference this issue on Apr 13, 2026

    fix(deps): update gcp-services-python (google#4999)

    5cd9436

    fix(deps): update gcp-indexer-go (google#5000)

    8766daa

    fix(deps): update vulnfeeds-go (google#5001)

    15aef78

    fix(deps): update module google.golang.org/api to v0.271.0 (google#5002)

    d4fd632

    fix(deps): update website (google#5003)

    239b0a8

  7. 47 remaining items

  8. Ly-Joey
    added 12 commits that reference this issue on Sep 1, 2026

    chore(deps): lock file maintenance (#5950)

    b5f65d2

    chore(deps): lock file maintenance (#5949)

    f6dbba8

    chore(deps): lock file maintenance (#5948)

    1033213

    fix(deps): update website (#5946)

    86cf6df

    chore(deps): update docker (#5909)

    5dc503a

    chore(deps): update go module directive to v1.27.0 (#5904)

    937a10d

    chore(deps): update terraform (#5910)

    20c99b1

    fix(deps): update gcp-indexer-go (#5906)

    d7a8e7b

    chore(deps): update github/codeql-action action to v4.37.8 (#5945)

    11f990d

    fix(deps): update tools (#5907)

    40a649d

    fix(deps): update vulnfeeds-go (#5908)

    e1ea539

    fix(deps): update go-libraries (#5779)

    71d254a
  9. another-rex
    added a commit that references this issue on Sep 10, 2026

    chore(deps): lock file maintenance (#6001)

    d8f75f6
  10. jess-lowe
    added 2 commits that reference this issue on Oct 14, 2026

    chore(deps): lock file maintenance (#6161)

    6a69c00

    chore(deps): update module golang.org/x/net to v0.60.0 [security] (#6152

    07463e9
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    dependenciesPull requests that update a dependency fileinfrainfrastructure bugs/FRs

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions