Update GO tools dependencies (main) (minor) (!648) · Merge requests · Sylva-projects / sylva-elements / workload-cluster-operator

This MR contains the following updates:

Package	Change	Age	Confidence
github.com/CycloneDX/cyclonedx-gomod	`v1.10.0` → `v1.12.0`
github.com/boumenot/gocover-cobertura	`v1.3.0` → `v1.5.0`
golang.org/x/vuln	`v1.1.4` → `v1.8.0`

Release Notes

CycloneDX/cyclonedx-gomod (github.com/CycloneDX/cyclonedx-gomod)

`v1.12.0`

Compare Source

Changelog

Building and Packaging

a99a5fc: build(deps): bump actions/checkout from 6.0.2 to 7.0.1 (@dependabot[bot])
b317ad7: build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (@dependabot[bot])
aaeb6ff: build(deps): bump go-license-detector to v4.3.1 to fix BSD-3-Clause misdetection (#775) (@dkr91)
a946f18: build(deps): bump golang from 1.26.2-alpine3.23 to 1.26.5-alpine3.23 (@dependabot[bot])
8656a5e: build(deps): bump golang from 1.26.5-alpine3.23 to 1.26.6-alpine3.23 (@dependabot[bot])
1f50d4e: build(deps): bump golang.org/x/mod from 0.39.0 to 0.40.0 (@dependabot[bot])
ade6480: build(deps): bump the codeql group with 3 updates (@dependabot[bot])

`v1.11.0`

Compare Source

Changelog

Features

bed74cb: feat: add -license-confidence-threshold CLI flag (#755) (@dkr91)
d7039a8: feat: harden gha workflows with zizmor (@nscuro)
1ac4e2d: feat: support cyclonedx 1.7 output (@nscuro)

Fixes

8820fcb: fix: disable cosign new bundle format (@nscuro)
c6a4c56: fix: incorrect actions tag annotation (@nscuro)
9cb8ae4: fix: linter issues (@nscuro)
8c1b71f: fix: preserve resolved local replacement directory (#748) (@Eljees)
7fe274f: fix: skip hashes for modules without a directory (#747) (@Eljees)
489c363: fix: switch to stdlib slices package (@nscuro)
85929bf: fix: update test snapshots (@nscuro)

Building and Packaging

59ca4b6: build(deps): bump actions/checkout from 5.0.0 to 6.0.2 (@dependabot[bot])
b506e33: build(deps): bump actions/setup-go from 6.0.0 to 6.2.0 (@dependabot[bot])
06ebcd2: build(deps): bump actions/setup-go from 6.2.0 to 7.0.0 (@dependabot[bot])
796b471: build(deps): bump apache/skywalking-eyes from 0.7.0 to 0.8.0 (@dependabot[bot])
ef8c854: build(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 (@dependabot[bot])
3e16074: build(deps): bump docker/login-action from 3.5.0 to 3.7.0 (@dependabot[bot])
0c199c6: build(deps): bump docker/login-action from 3.7.0 to 4.0.0 (@dependabot[bot])
0913ba2: build(deps): bump docker/login-action from 4.0.0 to 4.6.0 (@dependabot[bot])
54d7d46: build(deps): bump docker/setup-qemu-action from 3.6.0 to 4.0.0 (@dependabot[bot])
7e79bca: build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.2.0 (@dependabot[bot])
84fa414: build(deps): bump github.com/CycloneDX/cyclonedx-go (@dependabot[bot])
0989a68: build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.3 to 0.10.0 (@dependabot[bot])
7ed78cb: build(deps): bump github.com/go-git/go-git/v5 from 5.16.2 to 5.16.4 (@dependabot[bot])
c2e4e1d: build(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.19.2 (@dependabot[bot])
f7639a5: build(deps): bump github.com/package-url/packageurl-go (@dependabot[bot])
de1c664: build(deps): bump github.com/rs/zerolog from 1.34.0 to 1.35.1 (@dependabot[bot])
355b682: build(deps): bump github/codeql-action from 3.30.0 to 4.32.0 (@dependabot[bot])
7329a34: build(deps): bump github/codeql-action from 4.32.0 to 4.34.1 (@dependabot[bot])
72968ec: build(deps): bump golang from 1.25.6-alpine3.23 to 1.26.2-alpine3.23 (@dependabot[bot])
644a766: build(deps): bump golang.org/x/crypto from 0.47.0 to 0.52.0 (@dependabot[bot])
5dac7d1: build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (@dependabot[bot])
c1f0dd6: build(deps): bump golang.org/x/mod from 0.31.0 to 0.32.0 (@dependabot[bot])
1f8aea5: build(deps): bump golang.org/x/mod from 0.37.0 to 0.39.0 (@dependabot[bot])
c68ea7b: build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.3.0 (@dependabot[bot])
3a149fb: build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.3 (@dependabot[bot])
76b1764: build(deps): bump sigstore/cosign-installer from 3.10.1 to 4.1.2 (@dependabot[bot])
3f318d7: build(deps): bump sigstore/cosign-installer from 3.9.2 to 4.1.0 (@dependabot[bot])
0c2b745: build(deps): bump the codeql group with 3 updates (@dependabot[bot])
fa59ccf: build(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 (@dependabot[bot])

Others

4baa8b0: chore: bump go to 1.26 (@nscuro)
d8d7a39: chore: bump trivy-action to v0.35.0 (@nscuro)
b0f7bb1: chore: modernize goreleaser setup (@nscuro)

boumenot/gocover-cobertura (github.com/boumenot/gocover-cobertura)

`v1.5.0`

Compare Source

What's Changed

This release focuses on more accurate Cobertura output, better diagnostics for CI failures, and a much stronger regression safety net.

Added

Added -path DIR to resolve packages from an explicit project directory, which helps monorepos and CI jobs that run gocover-cobertura outside the module root.
Added -strict to fail the conversion when profiles are skipped because package or module information cannot be resolved.
Added support for package-level variable functions in coverage output.
Added optional -ignore-non-code-lines behavior and regression goldens so comment-only and other non-code lines can be excluded from coverage calculations.

Fixed

Deduplicate overlapping coverage blocks correctly, including -coverpkg cases where multiple blocks map to the same line.
Improve missing package/module diagnostics by including the affected filename.
Improve inconsistent NumStmt errors by including the relevant file and line range.
Avoid a panic when package loading returns packages with nil module information.
Improve hit aggregation for count coverage mode and multi-file coverage profiles.

Documentation

Documented -path, -strict, build tag handling, Windows stdin redirection, troubleshooting for skipped profiles, and why branch coverage is reported as zero.

Maintenance

Added a Linux-only regression suite with real coverage profiles from gorilla/mux, spf13/cobra, approvals/go-approval-tests, junegunn/fzf, stretchr/testify, prometheus, and kubernetes.
Updated CI to GitHub Actions checkout@v4 and setup-go@v5, with Go 1.25.
Refreshed module dependencies and vendored dependencies for Go 1.25.
Removed the unused Travis configuration and dead Boundary/Boundaries code.

Contributors

Thanks to @ajuckel, @tony2001, @adombeck, @secDre4mer, and @thatcode for contributions included in this release.

Full Changelog: https://github.com/boumenot/gocover-cobertura/compare/v1.4.0...v1.5.0

`v1.4.0`

Compare Source

Support for Go 1.25.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻️ Rebasing: Whenever MR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this MR, check this box

Renovate upgrades detailed information

[
  {
    "gitAuthor": "Sylva Renovate bot <service_account_group_59800588_0f6fd8e977a6c86f7522a46f254943dc@noreply.gitlab.com>",
    "versioning": "semver",
    "separateMajorMinor": true,
    "separateMinorPatch": true,
    "branchPrefix": "renovate/main-",
    "semanticCommitType": "fix",
    "semanticCommitScope": "deps",
    "branchName": "renovate/main-go-tools-dependencies",
    "additionalBranchPrefix": "",
    "branchTopic": "{{{groupSlug}}}",
    "commitMessage": "{{{commitMessagePrefix}}} {{{commitMessageAction}}} {{{commitMessageTopic}}} {{{commitMessageExtra}}} {{{commitMessageSuffix}}}",
    "commitBody": null,
    "commitMessagePrefix": null,
    "commitMessageAction": "Update",
    "commitMessageTopic": "{{{groupName}}}",
    "commitMessageSuffix": null,
    "prTitle": null,
    "groupName": "GO tools dependencies",
    "groupSlug": "go-tools-dependencies",
    "labels": [
      "release-type::none"
    ],
    "addLabels": [
      "renovate",
      "renovate",
      "dependencies::minor",
      "area:CI",
      "area:CI",
      "AutoMerge",
      "dependencies::minor",
      "area:CI",
      "area:CI",
      "AutoMerge"
    ],
    "prBodyDefinitions": {
      "Package": "{{#if (containsString depName 'golang.org/x/')}}[{{{depName}}}](https://pkg.go.dev/{{{depName}}}){{else}}{{{depNameLinked}}}{{/if}}",
      "Type": "{{{depType}}}",
      "Update": "{{{updateType}}}",
      "Current value": "{{{currentValue}}}",
      "New value": "{{{newValue}}}",
      "Change": "{{#if (containsString depName 'golang.org/x/')}}[`{{{displayFrom}}}` → `{{{displayTo}}}`](https://cs.opensource.google/{{{replace '^golang\\.org' 'go' depName}}}/+/refs/tags/{{{currentValue}}}...refs/tags/{{{newValue}}}){{else}}`{{{displayFrom}}}` → `{{{displayTo}}}`{{/if}}",
      "Pending": "{{{displayPending}}}",
      "References": "{{{references}}}",
      "Package file": "{{{packageFile}}}",
      "Age": "{{#if newVersion}}![age](https://developer.mend.io/api/mc/badges/age/{{datasource}}/{{replace '/' '%2f' packageName}}/{{{newVersion}}}?slim=true){{/if}}",
      "Adoption": "{{#if newVersion}}![adoption](https://developer.mend.io/api/mc/badges/adoption/{{datasource}}/{{replace '/' '%2f' packageName}}/{{{newVersion}}}?slim=true){{/if}}",
      "Passing": "{{#if newVersion}}![passing](https://developer.mend.io/api/mc/badges/compatibility/{{datasource}}/{{replace '/' '%2f' packageName}}/{{{currentVersion}}}/{{{newVersion}}}?slim=true){{/if}}",
      "Confidence": "{{#if newVersion}}![confidence](https://developer.mend.io/api/mc/badges/confidence/{{datasource}}/{{replace '/' '%2f' packageName}}/{{{currentVersion}}}/{{{newVersion}}}?slim=true){{/if}}"
    },
    "prBodyColumns": [
      "Package",
      "Change",
      "Age",
      "Confidence"
    ],
    "prBodyNotes": [],
    "repository": "sylva-projects/sylva-elements/workload-cluster-operator",
    "parentOrg": "sylva-projects/sylva-elements",
    "topLevelOrg": "sylva-projects",
    "baseBranch": "main",
    "manager": "gomod",
    "categories": [
      "golang"
    ],
    "packageFile": "tools/go.mod",
    "parentDir": "tools",
    "packageFileDir": "tools",
    "datasource": "go",
    "depType": "require",
    "depName": "github.com/CycloneDX/cyclonedx-gomod",
    "currentValue": "v1.10.0",
    "packageName": "github.com/CycloneDX/cyclonedx-gomod",
    "sourceUrl": "https://github.com/CycloneDX/cyclonedx-gomod",
    "currentVersion": "v1.10.0",
    "currentVersionTimestamp": "2026-01-31T20:39:33.000Z",
    "currentVersionAgeInDays": 247,
    "isSingleVersion": true,
    "newVersion": "v1.12.0",
    "newValue": "v1.12.0",
    "releaseTimestamp": "2026-08-22T11:27:38.000Z",
    "newVersionAgeInDays": 44,
    "newMajor": 1,
    "newMinor": 12,
    "newPatch": 0,
    "updateType": "minor",
    "isMinor": true,
    "depNameSanitized": "github.com-cyclonedx-cyclonedx-gomod",
    "sourceRepoSlug": "CycloneDX-cyclonedx-gomod",
    "sourceRepo": "CycloneDX/cyclonedx-gomod",
    "sourceRepoOrg": "CycloneDX",
    "sourceRepoName": "cyclonedx-gomod",
    "recreateClosed": true,
    "displayFrom": "v1.10.0",
    "displayTo": "v1.12.0",
    "prettyNewVersion": "v1.12.0",
    "prettyNewMajor": "v1",
    "depTypes": [
      "require"
    ],
    "displayPending": "",
    "prettyDepType": "require",
    "isGroup": true,
    "logJSON": {
      "project": {
        "repository": "CycloneDX/cyclonedx-gomod",
        "sourceUrl": "https://github.com/CycloneDX/cyclonedx-gomod",
        "packageName": "github.com/CycloneDX/cyclonedx-gomod",
        "depName": "github.com/CycloneDX/cyclonedx-gomod"
      },
      "versions": [
        {
          "version": "v1.12.0",
          "releaseNotes": {
            "url": "https://github.com/CycloneDX/cyclonedx-gomod/releases/tag/v1.12.0",
            "body": "#### Changelog\n\n##### Building and Packaging\n\n- [`a99a5fc`](https://github.com/CycloneDX/cyclonedx-gomod/commit/a99a5fc8e7f9916a66961a89bc991e24082bfedc): build(deps): bump actions/checkout from 6.0.2 to 7.0.1 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`b317ad7`](https://github.com/CycloneDX/cyclonedx-gomod/commit/b317ad7e35b6fbabe7c40619f68f448195502837): build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`aaeb6ff`](https://github.com/CycloneDX/cyclonedx-gomod/commit/aaeb6ff08806fd68f4b6f42cd35201d7d227823d): build(deps): bump go-license-detector to v4.3.1 to fix BSD-3-Clause misdetection ([#775](https://github.com/CycloneDX/cyclonedx-gomod/issues/775)) ([@dkr91](https://github.com/dkr91))\n- [`a946f18`](https://github.com/CycloneDX/cyclonedx-gomod/commit/a946f1807a89d33ee2195e9791057124531b82bd): build(deps): bump golang from 1.26.2-alpine3.23 to 1.26.5-alpine3.23 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`8656a5e`](https://github.com/CycloneDX/cyclonedx-gomod/commit/8656a5e449d71241c17a4855e83279e6165ec66b): build(deps): bump golang from 1.26.5-alpine3.23 to 1.26.6-alpine3.23 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`1f50d4e`](https://github.com/CycloneDX/cyclonedx-gomod/commit/1f50d4e20456f2aa273a621601a1ce67d755e2e8): build(deps): bump golang.org/x/mod from 0.39.0 to 0.40.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`ade6480`](https://github.com/CycloneDX/cyclonedx-gomod/commit/ade64807870efd6e43d5cb3cb0dfba2f891f4409): build(deps): bump the codeql group with 3 updates ([@dependabot](https://github.com/dependabot)\\[bot])\n"
          }
        },
        {
          "version": "v1.11.0",
          "releaseNotes": {
            "url": "https://github.com/CycloneDX/cyclonedx-gomod/releases/tag/v1.11.0",
            "body": "#### Changelog\n\n##### Features\n\n- [`bed74cb`](https://github.com/CycloneDX/cyclonedx-gomod/commit/bed74cb0aef65413949f12c8586f4a5fbdca2bd8): feat: add -license-confidence-threshold CLI flag ([#755](https://github.com/CycloneDX/cyclonedx-gomod/issues/755)) ([@dkr91](https://github.com/dkr91))\n- [`d7039a8`](https://github.com/CycloneDX/cyclonedx-gomod/commit/d7039a8566f2442ba755a461b6beaa9e4085ab7f): feat: harden gha workflows with zizmor ([@nscuro](https://github.com/nscuro))\n- [`1ac4e2d`](https://github.com/CycloneDX/cyclonedx-gomod/commit/1ac4e2d29ed229e85514e5d84d7e4ee525a26b56): feat: support cyclonedx 1.7 output ([@nscuro](https://github.com/nscuro))\n\n##### Fixes\n\n- [`8820fcb`](https://github.com/CycloneDX/cyclonedx-gomod/commit/8820fcb6e9b0796c3357ff484c74b531b6e7ef5e): fix: disable cosign new bundle format ([@nscuro](https://github.com/nscuro))\n- [`c6a4c56`](https://github.com/CycloneDX/cyclonedx-gomod/commit/c6a4c56215976aa3f9b4700af301b9ff78bac1b8): fix: incorrect actions tag annotation ([@nscuro](https://github.com/nscuro))\n- [`9cb8ae4`](https://github.com/CycloneDX/cyclonedx-gomod/commit/9cb8ae4ee93bdc90b8d4425d8f8199328729c00d): fix: linter issues ([@nscuro](https://github.com/nscuro))\n- [`8c1b71f`](https://github.com/CycloneDX/cyclonedx-gomod/commit/8c1b71f2b35e348f5c989c50daca96a94da7be4b): fix: preserve resolved local replacement directory ([#748](https://github.com/CycloneDX/cyclonedx-gomod/issues/748)) ([@Eljees](https://github.com/Eljees))\n- [`7fe274f`](https://github.com/CycloneDX/cyclonedx-gomod/commit/7fe274fefcc66b818d8760dc15f5746f74625802): fix: skip hashes for modules without a directory ([#747](https://github.com/CycloneDX/cyclonedx-gomod/issues/747)) ([@Eljees](https://github.com/Eljees))\n- [`489c363`](https://github.com/CycloneDX/cyclonedx-gomod/commit/489c36376dd545c9c7dcb095962a19a9d0ed6200): fix: switch to stdlib slices package ([@nscuro](https://github.com/nscuro))\n- [`85929bf`](https://github.com/CycloneDX/cyclonedx-gomod/commit/85929bf1eb55e448d55e3b128536fe3ee13ac477): fix: update test snapshots ([@nscuro](https://github.com/nscuro))\n\n##### Building and Packaging\n\n- [`59ca4b6`](https://github.com/CycloneDX/cyclonedx-gomod/commit/59ca4b66cee8dddc2d1e143377bb6da4537d2aa0): build(deps): bump actions/checkout from 5.0.0 to 6.0.2 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`b506e33`](https://github.com/CycloneDX/cyclonedx-gomod/commit/b506e330b015025dbeb03156762b8447882ea565): build(deps): bump actions/setup-go from 6.0.0 to 6.2.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`06ebcd2`](https://github.com/CycloneDX/cyclonedx-gomod/commit/06ebcd26a22066327ba3cac06fee10cdf523161e): build(deps): bump actions/setup-go from 6.2.0 to 7.0.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`796b471`](https://github.com/CycloneDX/cyclonedx-gomod/commit/796b47166890b9729f6e397b0b804d435f9bf4a8): build(deps): bump apache/skywalking-eyes from 0.7.0 to 0.8.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`ef8c854`](https://github.com/CycloneDX/cyclonedx-gomod/commit/ef8c8541ba0f6e10aaa62048fa967ce4b3857717): build(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`3e16074`](https://github.com/CycloneDX/cyclonedx-gomod/commit/3e16074a8f14c8e14689d91a0841cba19e0df3cc): build(deps): bump docker/login-action from 3.5.0 to 3.7.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`0c199c6`](https://github.com/CycloneDX/cyclonedx-gomod/commit/0c199c68f5fbeeadf8c7f25e5aeadbe8d8ec3d9f): build(deps): bump docker/login-action from 3.7.0 to 4.0.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`0913ba2`](https://github.com/CycloneDX/cyclonedx-gomod/commit/0913ba2ea1dfb4f223f8e5fa7d5a5a2c554f9931): build(deps): bump docker/login-action from 4.0.0 to 4.6.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`54d7d46`](https://github.com/CycloneDX/cyclonedx-gomod/commit/54d7d46187f616b1ff37ab2c9716c3cf487a57c6): build(deps): bump docker/setup-qemu-action from 3.6.0 to 4.0.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`7e79bca`](https://github.com/CycloneDX/cyclonedx-gomod/commit/7e79bca0bd75bd8840d79d72efedfead67ef24a7): build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.2.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`84fa414`](https://github.com/CycloneDX/cyclonedx-gomod/commit/84fa4147be4bdaf0a238238b92499608d96dd034): build(deps): bump github.com/CycloneDX/cyclonedx-go ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`0989a68`](https://github.com/CycloneDX/cyclonedx-gomod/commit/0989a686df6b1736c63915a4e63caf3767dbe574): build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.3 to 0.10.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`7ed78cb`](https://github.com/CycloneDX/cyclonedx-gomod/commit/7ed78cb1d2da56f9a5eaea078d87e2c58d3bc76e): build(deps): bump github.com/go-git/go-git/v5 from 5.16.2 to 5.16.4 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`c2e4e1d`](https://github.com/CycloneDX/cyclonedx-gomod/commit/c2e4e1ddc8bb9b6ab7b7292ae9c4dec5879185e0): build(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.19.2 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`f7639a5`](https://github.com/CycloneDX/cyclonedx-gomod/commit/f7639a557e30d7603d1bf06a13337afe43fbf047): build(deps): bump github.com/package-url/packageurl-go ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`de1c664`](https://github.com/CycloneDX/cyclonedx-gomod/commit/de1c664dc8fe2e3a7fd33435889238342bbb8208): build(deps): bump github.com/rs/zerolog from 1.34.0 to 1.35.1 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`355b682`](https://github.com/CycloneDX/cyclonedx-gomod/commit/355b682c43ee1a7f0883994daf27b416fce05db4): build(deps): bump github/codeql-action from 3.30.0 to 4.32.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`7329a34`](https://github.com/CycloneDX/cyclonedx-gomod/commit/7329a34e916af57273da7492cbc7356587f229e6): build(deps): bump github/codeql-action from 4.32.0 to 4.34.1 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`72968ec`](https://github.com/CycloneDX/cyclonedx-gomod/commit/72968ecf8015d4c8b92983cf9fa8e9a6c69fceb6): build(deps): bump golang from 1.25.6-alpine3.23 to 1.26.2-alpine3.23 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`644a766`](https://github.com/CycloneDX/cyclonedx-gomod/commit/644a766f1982ff557c158c98ec170cd565764555): build(deps): bump golang.org/x/crypto from 0.47.0 to 0.52.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`5dac7d1`](https://github.com/CycloneDX/cyclonedx-gomod/commit/5dac7d1501df664a000c7068a67e79e3abef2b9e): build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`c1f0dd6`](https://github.com/CycloneDX/cyclonedx-gomod/commit/c1f0dd6c82387a5caf3a6484c419bf0ba88c9db2): build(deps): bump golang.org/x/mod from 0.31.0 to 0.32.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`1f8aea5`](https://github.com/CycloneDX/cyclonedx-gomod/commit/1f8aea5fa14b1a5c9af366f68bc8c134af1efdbe): build(deps): bump golang.org/x/mod from 0.37.0 to 0.39.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`c68ea7b`](https://github.com/CycloneDX/cyclonedx-gomod/commit/c68ea7b1365e3492b2abf4c64d25b78d6da92143): build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.3.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`3a149fb`](https://github.com/CycloneDX/cyclonedx-gomod/commit/3a149fb6371230e7bedac1cb361120c4fccbb8c0): build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.3 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`76b1764`](https://github.com/CycloneDX/cyclonedx-gomod/commit/76b17645046c8782257c428bc1908fea4b7addef): build(deps): bump sigstore/cosign-installer from 3.10.1 to 4.1.2 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`3f318d7`](https://github.com/CycloneDX/cyclonedx-gomod/commit/3f318d73e3ae1cf77e7b921535bb9d2f43fbbd1d): build(deps): bump sigstore/cosign-installer from 3.9.2 to 4.1.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`0c2b745`](https://github.com/CycloneDX/cyclonedx-gomod/commit/0c2b74577ac5004bbf1b406f76b5b52e84bc9dd0): build(deps): bump the codeql group with 3 updates ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`fa59ccf`](https://github.com/CycloneDX/cyclonedx-gomod/commit/fa59ccfcbd552071645181870e49ac3e88d74514): build(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 ([@dependabot](https://github.com/dependabot)\\[bot])\n\n##### Others\n\n- [`4baa8b0`](https://github.com/CycloneDX/cyclonedx-gomod/commit/4baa8b0599125ea5e6dd2f79b924b364c9d70488): chore: bump go to 1.26 ([@nscuro](https://github.com/nscuro))\n- [`d8d7a39`](https://github.com/CycloneDX/cyclonedx-gomod/commit/d8d7a3970652200b5452646ed513ed0feeb34228): chore: bump trivy-action to v0.35.0 ([@nscuro](https://github.com/nscuro))\n- [`b0f7bb1`](https://github.com/CycloneDX/cyclonedx-gomod/commit/b0f7bb1c653b1a410e20c7db6f5d45da196d8b1f): chore: modernize goreleaser setup ([@nscuro](https://github.com/nscuro))\n"
          }
        }
      ],
      "hasReleaseNotes": true
    },
    "hasReleaseNotes": true,
    "releases": [
      {
        "version": "v1.12.0",
        "releaseNotes": {
          "url": "https://github.com/CycloneDX/cyclonedx-gomod/releases/tag/v1.12.0",
          "body": "#### Changelog\n\n##### Building and Packaging\n\n- [`a99a5fc`](https://github.com/CycloneDX/cyclonedx-gomod/commit/a99a5fc8e7f9916a66961a89bc991e24082bfedc): build(deps): bump actions/checkout from 6.0.2 to 7.0.1 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`b317ad7`](https://github.com/CycloneDX/cyclonedx-gomod/commit/b317ad7e35b6fbabe7c40619f68f448195502837): build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`aaeb6ff`](https://github.com/CycloneDX/cyclonedx-gomod/commit/aaeb6ff08806fd68f4b6f42cd35201d7d227823d): build(deps): bump go-license-detector to v4.3.1 to fix BSD-3-Clause misdetection ([#775](https://github.com/CycloneDX/cyclonedx-gomod/issues/775)) ([@dkr91](https://github.com/dkr91))\n- [`a946f18`](https://github.com/CycloneDX/cyclonedx-gomod/commit/a946f1807a89d33ee2195e9791057124531b82bd): build(deps): bump golang from 1.26.2-alpine3.23 to 1.26.5-alpine3.23 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`8656a5e`](https://github.com/CycloneDX/cyclonedx-gomod/commit/8656a5e449d71241c17a4855e83279e6165ec66b): build(deps): bump golang from 1.26.5-alpine3.23 to 1.26.6-alpine3.23 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`1f50d4e`](https://github.com/CycloneDX/cyclonedx-gomod/commit/1f50d4e20456f2aa273a621601a1ce67d755e2e8): build(deps): bump golang.org/x/mod from 0.39.0 to 0.40.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`ade6480`](https://github.com/CycloneDX/cyclonedx-gomod/commit/ade64807870efd6e43d5cb3cb0dfba2f891f4409): build(deps): bump the codeql group with 3 updates ([@dependabot](https://github.com/dependabot)\\[bot])\n"
        }
      },
      {
        "version": "v1.11.0",
        "releaseNotes": {
          "url": "https://github.com/CycloneDX/cyclonedx-gomod/releases/tag/v1.11.0",
          "body": "#### Changelog\n\n##### Features\n\n- [`bed74cb`](https://github.com/CycloneDX/cyclonedx-gomod/commit/bed74cb0aef65413949f12c8586f4a5fbdca2bd8): feat: add -license-confidence-threshold CLI flag ([#755](https://github.com/CycloneDX/cyclonedx-gomod/issues/755)) ([@dkr91](https://github.com/dkr91))\n- [`d7039a8`](https://github.com/CycloneDX/cyclonedx-gomod/commit/d7039a8566f2442ba755a461b6beaa9e4085ab7f): feat: harden gha workflows with zizmor ([@nscuro](https://github.com/nscuro))\n- [`1ac4e2d`](https://github.com/CycloneDX/cyclonedx-gomod/commit/1ac4e2d29ed229e85514e5d84d7e4ee525a26b56): feat: support cyclonedx 1.7 output ([@nscuro](https://github.com/nscuro))\n\n##### Fixes\n\n- [`8820fcb`](https://github.com/CycloneDX/cyclonedx-gomod/commit/8820fcb6e9b0796c3357ff484c74b531b6e7ef5e): fix: disable cosign new bundle format ([@nscuro](https://github.com/nscuro))\n- [`c6a4c56`](https://github.com/CycloneDX/cyclonedx-gomod/commit/c6a4c56215976aa3f9b4700af301b9ff78bac1b8): fix: incorrect actions tag annotation ([@nscuro](https://github.com/nscuro))\n- [`9cb8ae4`](https://github.com/CycloneDX/cyclonedx-gomod/commit/9cb8ae4ee93bdc90b8d4425d8f8199328729c00d): fix: linter issues ([@nscuro](https://github.com/nscuro))\n- [`8c1b71f`](https://github.com/CycloneDX/cyclonedx-gomod/commit/8c1b71f2b35e348f5c989c50daca96a94da7be4b): fix: preserve resolved local replacement directory ([#748](https://github.com/CycloneDX/cyclonedx-gomod/issues/748)) ([@Eljees](https://github.com/Eljees))\n- [`7fe274f`](https://github.com/CycloneDX/cyclonedx-gomod/commit/7fe274fefcc66b818d8760dc15f5746f74625802): fix: skip hashes for modules without a directory ([#747](https://github.com/CycloneDX/cyclonedx-gomod/issues/747)) ([@Eljees](https://github.com/Eljees))\n- [`489c363`](https://github.com/CycloneDX/cyclonedx-gomod/commit/489c36376dd545c9c7dcb095962a19a9d0ed6200): fix: switch to stdlib slices package ([@nscuro](https://github.com/nscuro))\n- [`85929bf`](https://github.com/CycloneDX/cyclonedx-gomod/commit/85929bf1eb55e448d55e3b128536fe3ee13ac477): fix: update test snapshots ([@nscuro](https://github.com/nscuro))\n\n##### Building and Packaging\n\n- [`59ca4b6`](https://github.com/CycloneDX/cyclonedx-gomod/commit/59ca4b66cee8dddc2d1e143377bb6da4537d2aa0): build(deps): bump actions/checkout from 5.0.0 to 6.0.2 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`b506e33`](https://github.com/CycloneDX/cyclonedx-gomod/commit/b506e330b015025dbeb03156762b8447882ea565): build(deps): bump actions/setup-go from 6.0.0 to 6.2.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`06ebcd2`](https://github.com/CycloneDX/cyclonedx-gomod/commit/06ebcd26a22066327ba3cac06fee10cdf523161e): build(deps): bump actions/setup-go from 6.2.0 to 7.0.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`796b471`](https://github.com/CycloneDX/cyclonedx-gomod/commit/796b47166890b9729f6e397b0b804d435f9bf4a8): build(deps): bump apache/skywalking-eyes from 0.7.0 to 0.8.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`ef8c854`](https://github.com/CycloneDX/cyclonedx-gomod/commit/ef8c8541ba0f6e10aaa62048fa967ce4b3857717): build(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`3e16074`](https://github.com/CycloneDX/cyclonedx-gomod/commit/3e16074a8f14c8e14689d91a0841cba19e0df3cc): build(deps): bump docker/login-action from 3.5.0 to 3.7.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`0c199c6`](https://github.com/CycloneDX/cyclonedx-gomod/commit/0c199c68f5fbeeadf8c7f25e5aeadbe8d8ec3d9f): build(deps): bump docker/login-action from 3.7.0 to 4.0.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`0913ba2`](https://github.com/CycloneDX/cyclonedx-gomod/commit/0913ba2ea1dfb4f223f8e5fa7d5a5a2c554f9931): build(deps): bump docker/login-action from 4.0.0 to 4.6.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`54d7d46`](https://github.com/CycloneDX/cyclonedx-gomod/commit/54d7d46187f616b1ff37ab2c9716c3cf487a57c6): build(deps): bump docker/setup-qemu-action from 3.6.0 to 4.0.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`7e79bca`](https://github.com/CycloneDX/cyclonedx-gomod/commit/7e79bca0bd75bd8840d79d72efedfead67ef24a7): build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.2.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`84fa414`](https://github.com/CycloneDX/cyclonedx-gomod/commit/84fa4147be4bdaf0a238238b92499608d96dd034): build(deps): bump github.com/CycloneDX/cyclonedx-go ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`0989a68`](https://github.com/CycloneDX/cyclonedx-gomod/commit/0989a686df6b1736c63915a4e63caf3767dbe574): build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.3 to 0.10.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`7ed78cb`](https://github.com/CycloneDX/cyclonedx-gomod/commit/7ed78cb1d2da56f9a5eaea078d87e2c58d3bc76e): build(deps): bump github.com/go-git/go-git/v5 from 5.16.2 to 5.16.4 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`c2e4e1d`](https://github.com/CycloneDX/cyclonedx-gomod/commit/c2e4e1ddc8bb9b6ab7b7292ae9c4dec5879185e0): build(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.19.2 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`f7639a5`](https://github.com/CycloneDX/cyclonedx-gomod/commit/f7639a557e30d7603d1bf06a13337afe43fbf047): build(deps): bump github.com/package-url/packageurl-go ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`de1c664`](https://github.com/CycloneDX/cyclonedx-gomod/commit/de1c664dc8fe2e3a7fd33435889238342bbb8208): build(deps): bump github.com/rs/zerolog from 1.34.0 to 1.35.1 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`355b682`](https://github.com/CycloneDX/cyclonedx-gomod/commit/355b682c43ee1a7f0883994daf27b416fce05db4): build(deps): bump github/codeql-action from 3.30.0 to 4.32.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`7329a34`](https://github.com/CycloneDX/cyclonedx-gomod/commit/7329a34e916af57273da7492cbc7356587f229e6): build(deps): bump github/codeql-action from 4.32.0 to 4.34.1 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`72968ec`](https://github.com/CycloneDX/cyclonedx-gomod/commit/72968ecf8015d4c8b92983cf9fa8e9a6c69fceb6): build(deps): bump golang from 1.25.6-alpine3.23 to 1.26.2-alpine3.23 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`644a766`](https://github.com/CycloneDX/cyclonedx-gomod/commit/644a766f1982ff557c158c98ec170cd565764555): build(deps): bump golang.org/x/crypto from 0.47.0 to 0.52.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`5dac7d1`](https://github.com/CycloneDX/cyclonedx-gomod/commit/5dac7d1501df664a000c7068a67e79e3abef2b9e): build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`c1f0dd6`](https://github.com/CycloneDX/cyclonedx-gomod/commit/c1f0dd6c82387a5caf3a6484c419bf0ba88c9db2): build(deps): bump golang.org/x/mod from 0.31.0 to 0.32.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`1f8aea5`](https://github.com/CycloneDX/cyclonedx-gomod/commit/1f8aea5fa14b1a5c9af366f68bc8c134af1efdbe): build(deps): bump golang.org/x/mod from 0.37.0 to 0.39.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`c68ea7b`](https://github.com/CycloneDX/cyclonedx-gomod/commit/c68ea7b1365e3492b2abf4c64d25b78d6da92143): build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.3.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`3a149fb`](https://github.com/CycloneDX/cyclonedx-gomod/commit/3a149fb6371230e7bedac1cb361120c4fccbb8c0): build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.3 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`76b1764`](https://github.com/CycloneDX/cyclonedx-gomod/commit/76b17645046c8782257c428bc1908fea4b7addef): build(deps): bump sigstore/cosign-installer from 3.10.1 to 4.1.2 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`3f318d7`](https://github.com/CycloneDX/cyclonedx-gomod/commit/3f318d73e3ae1cf77e7b921535bb9d2f43fbbd1d): build(deps): bump sigstore/cosign-installer from 3.9.2 to 4.1.0 ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`0c2b745`](https://github.com/CycloneDX/cyclonedx-gomod/commit/0c2b74577ac5004bbf1b406f76b5b52e84bc9dd0): build(deps): bump the codeql group with 3 updates ([@dependabot](https://github.com/dependabot)\\[bot])\n- [`fa59ccf`](https://github.com/CycloneDX/cyclonedx-gomod/commit/fa59ccfcbd552071645181870e49ac3e88d74514): build(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 ([@dependabot](https://github.com/dependabot)\\[bot])\n\n##### Others\n\n- [`4baa8b0`](https://github.com/CycloneDX/cyclonedx-gomod/commit/4baa8b0599125ea5e6dd2f79b924b364c9d70488): chore: bump go to 1.26 ([@nscuro](https://github.com/nscuro))\n- [`d8d7a39`](https://github.com/CycloneDX/cyclonedx-gomod/commit/d8d7a3970652200b5452646ed513ed0feeb34228): chore: bump trivy-action to v0.35.0 ([@nscuro](https://github.com/nscuro))\n- [`b0f7bb1`](https://github.com/CycloneDX/cyclonedx-gomod/commit/b0f7bb1c653b1a410e20c7db6f5d45da196d8b1f): chore: modernize goreleaser setup ([@nscuro](https://github.com/nscuro))\n"
        }
      }
    ],
    "depNameLinked": "[github.com/CycloneDX/cyclonedx-gomod](https://github.com/CycloneDX/cyclonedx-gomod)",
    "newNameLinked": "[undefined](https://github.com/CycloneDX/cyclonedx-gomod)",
    "references": "[source](https://github.com/CycloneDX/cyclonedx-gomod)"
  },
  {
    "gitAuthor": "Sylva Renovate bot <service_account_group_59800588_0f6fd8e977a6c86f7522a46f254943dc@noreply.gitlab.com>",
    "versioning": "semver",
    "separateMajorMinor": true,
    "separateMinorPatch": true,
    "branchPrefix": "renovate/main-",
    "semanticCommitType": "fix",
    "semanticCommitScope": "deps",
    "branchName": "renovate/main-go-tools-dependencies",
    "additionalBranchPrefix": "",
    "branchTopic": "{{{groupSlug}}}",
    "commitMessage": "{{{commitMessagePrefix}}} {{{commitMessageAction}}} {{{commitMessageTopic}}} {{{commitMessageExtra}}} {{{commitMessageSuffix}}}",
    "commitBody": null,
    "commitMessagePrefix": null,
    "commitMessageAction": "Update",
    "commitMessageTopic": "{{{groupName}}}",
    "commitMessageSuffix": null,
    "prTitle": null,
    "groupName": "GO tools dependencies",
    "groupSlug": "go-tools-dependencies",
    "labels": [
      "release-type::none"
    ],
    "addLabels": [
      "renovate",
      "renovate",
      "dependencies::minor",
      "area:CI",
      "area:CI",
      "AutoMerge",
      "dependencies::minor",
      "area:CI",
      "area:CI",
      "AutoMerge"
    ],
    "prBodyDefinitions": {
      "Package": "{{#if (containsString depName 'golang.org/x/')}}[{{{depName}}}](https://pkg.go.dev/{{{depName}}}){{else}}{{{depNameLinked}}}{{/if}}",
      "Type": "{{{depType}}}",
      "Update": "{{{updateType}}}",
      "Current value": "{{{currentValue}}}",
      "New value": "{{{newValue}}}",
      "Change": "{{#if (containsString depName 'golang.org/x/')}}[`{{{displayFrom}}}` → `{{{displayTo}}}`](https://cs.opensource.google/{{{replace '^golang\\.org' 'go' depName}}}/+/refs/tags/{{{currentValue}}}...refs/tags/{{{newValue}}}){{else}}`{{{displayFrom}}}` → `{{{displayTo}}}`{{/if}}",
      "Pending": "{{{displayPending}}}",
      "References": "{{{references}}}",
      "Package file": "{{{packageFile}}}",
      "Age": "{{#if newVersion}}![age](https://developer.mend.io/api/mc/badges/age/{{datasource}}/{{replace '/' '%2f' packageName}}/{{{newVersion}}}?slim=true){{/if}}",
      "Adoption": "{{#if newVersion}}![adoption](https://developer.mend.io/api/mc/badges/adoption/{{datasource}}/{{replace '/' '%2f' packageName}}/{{{newVersion}}}?slim=true){{/if}}",
      "Passing": "{{#if newVersion}}![passing](https://developer.mend.io/api/mc/badges/compatibility/{{datasource}}/{{replace '/' '%2f' packageName}}/{{{currentVersion}}}/{{{newVersion}}}?slim=true){{/if}}",
      "Confidence": "{{#if newVersion}}![confidence](https://developer.mend.io/api/mc/badges/confidence/{{datasource}}/{{replace '/' '%2f' packageName}}/{{{currentVersion}}}/{{{newVersion}}}?slim=true){{/if}}"
    },
    "prBodyColumns": [
      "Package",
      "Change",
      "Age",
      "Confidence"
    ],
    "prBodyNotes": [],
    "repository": "sylva-projects/sylva-elements/workload-cluster-operator",
    "parentOrg": "sylva-projects/sylva-elements",
    "topLevelOrg": "sylva-projects",
    "baseBranch": "main",
    "manager": "gomod",
    "categories": [
      "golang"
    ],
    "packageFile": "tools/go.mod",
    "parentDir": "tools",
    "packageFileDir": "tools",
    "datasource": "go",
    "depType": "require",
    "depName": "github.com/boumenot/gocover-cobertura",
    "currentValue": "v1.3.0",
    "packageName": "github.com/boumenot/gocover-cobertura",
    "sourceUrl": "https://github.com/boumenot/gocover-cobertura",
    "currentVersion": "v1.3.0",
    "currentVersionTimestamp": "2024-10-21T00:54:50.000Z",
    "currentVersionAgeInDays": 715,
    "isSingleVersion": true,
    "newVersion": "v1.5.0",
    "newValue": "v1.5.0",
    "releaseTimestamp": "2026-05-18T15:37:59.000Z",
    "newVersionAgeInDays": 140,
    "newMajor": 1,
    "newMinor": 5,
    "newPatch": 0,
    "updateType": "minor",
    "isMinor": true,
    "depNameSanitized": "github.com-boumenot-gocover-cobertura",
    "sourceRepoSlug": "boumenot-gocover-cobertura",
    "sourceRepo": "boumenot/gocover-cobertura",
    "sourceRepoOrg": "boumenot",
    "sourceRepoName": "gocover-cobertura",
    "recreateClosed": true,
    "displayFrom": "v1.3.0",
    "displayTo": "v1.5.0",
    "prettyNewVersion": "v1.5.0",
    "prettyNewMajor": "v1",
    "depTypes": [
      "require"
    ],
    "displayPending": "",
    "prettyDepType": "require",
    "isGroup": true,
    "logJSON": {
      "project": {
        "repository": "boumenot/gocover-cobertura",
        "sourceUrl": "https://github.com/boumenot/gocover-cobertura",
        "packageName": "github.com/boumenot/gocover-cobertura",
        "depName": "github.com/boumenot/gocover-cobertura"
      },
      "versions": [
        {
          "version": "v1.5.0",
          "releaseNotes": {
            "url": "https://github.com/boumenot/gocover-cobertura/releases/tag/v1.5.0",
            "body": "#### What's Changed\n\nThis release focuses on more accurate Cobertura output, better diagnostics for CI failures, and a much stronger regression safety net.\n\n##### Added\n\n- Added `-path DIR` to resolve packages from an explicit project directory, which helps monorepos and CI jobs that run `gocover-cobertura` outside the module root.\n- Added `-strict` to fail the conversion when profiles are skipped because package or module information cannot be resolved.\n- Added support for package-level variable functions in coverage output.\n- Added optional `-ignore-non-code-lines` behavior and regression goldens so comment-only and other non-code lines can be excluded from coverage calculations.\n\n##### Fixed\n\n- Deduplicate overlapping coverage blocks correctly, including `-coverpkg` cases where multiple blocks map to the same line.\n- Improve missing package/module diagnostics by including the affected filename.\n- Improve inconsistent `NumStmt` errors by including the relevant file and line range.\n- Avoid a panic when package loading returns packages with nil module information.\n- Improve hit aggregation for `count` coverage mode and multi-file coverage profiles.\n\n##### Documentation\n\n- Documented `-path`, `-strict`, build tag handling, Windows stdin redirection, troubleshooting for skipped profiles, and why branch coverage is reported as zero.\n\n##### Maintenance\n\n- Added a Linux-only regression suite with real coverage profiles from gorilla/mux, spf13/cobra, approvals/go-approval-tests, junegunn/fzf, stretchr/testify, prometheus, and kubernetes.\n- Updated CI to GitHub Actions `checkout@v4` and `setup-go@v5`, with Go 1.25.\n- Refreshed module dependencies and vendored dependencies for Go 1.25.\n- Removed the unused Travis configuration and dead `Boundary`/`Boundaries` code.\n\n##### Contributors\n\nThanks to [@ajuckel](https://github.com/ajuckel), [@tony2001](https://github.com/tony2001), [@adombeck](https://github.com/adombeck), [@secDre4mer](https://github.com/secDre4mer), and [@thatcode](https://github.com/thatcode) for contributions included in this release.\n\n**Full Changelog**: <https://github.com/boumenot/gocover-cobertura/compare/v1.4.0...v1.5.0>\n"
          }
        },
        {
          "version": "v1.4.0",
          "releaseNotes": {
            "url": "https://github.com/boumenot/gocover-cobertura/releases/tag/v1.4.0",
            "body": "Support for Go 1.25.\n"
          }
        }
      ],
      "hasReleaseNotes": true
    },
    "hasReleaseNotes": true,
    "releases": [
      {
        "version": "v1.5.0",
        "releaseNotes": {
          "url": "https://github.com/boumenot/gocover-cobertura/releases/tag/v1.5.0",
          "body": "#### What's Changed\n\nThis release focuses on more accurate Cobertura output, better diagnostics for CI failures, and a much stronger regression safety net.\n\n##### Added\n\n- Added `-path DIR` to resolve packages from an explicit project directory, which helps monorepos and CI jobs that run `gocover-cobertura` outside the module root.\n- Added `-strict` to fail the conversion when profiles are skipped because package or module information cannot be resolved.\n- Added support for package-level variable functions in coverage output.\n- Added optional `-ignore-non-code-lines` behavior and regression goldens so comment-only and other non-code lines can be excluded from coverage calculations.\n\n##### Fixed\n\n- Deduplicate overlapping coverage blocks correctly, including `-coverpkg` cases where multiple blocks map to the same line.\n- Improve missing package/module diagnostics by including the affected filename.\n- Improve inconsistent `NumStmt` errors by including the relevant file and line range.\n- Avoid a panic when package loading returns packages with nil module information.\n- Improve hit aggregation for `count` coverage mode and multi-file coverage profiles.\n\n##### Documentation\n\n- Documented `-path`, `-strict`, build tag handling, Windows stdin redirection, troubleshooting for skipped profiles, and why branch coverage is reported as zero.\n\n##### Maintenance\n\n- Added a Linux-only regression suite with real coverage profiles from gorilla/mux, spf13/cobra, approvals/go-approval-tests, junegunn/fzf, stretchr/testify, prometheus, and kubernetes.\n- Updated CI to GitHub Actions `checkout@v4` and `setup-go@v5`, with Go 1.25.\n- Refreshed module dependencies and vendored dependencies for Go 1.25.\n- Removed the unused Travis configuration and dead `Boundary`/`Boundaries` code.\n\n##### Contributors\n\nThanks to [@ajuckel](https://github.com/ajuckel), [@tony2001](https://github.com/tony2001), [@adombeck](https://github.com/adombeck), [@secDre4mer](https://github.com/secDre4mer), and [@thatcode](https://github.com/thatcode) for contributions included in this release.\n\n**Full Changelog**: <https://github.com/boumenot/gocover-cobertura/compare/v1.4.0...v1.5.0>\n"
        }
      },
      {
        "version": "v1.4.0",
        "releaseNotes": {
          "url": "https://github.com/boumenot/gocover-cobertura/releases/tag/v1.4.0",
          "body": "Support for Go 1.25.\n"
        }
      }
    ],
    "depNameLinked": "[github.com/boumenot/gocover-cobertura](https://github.com/boumenot/gocover-cobertura)",
    "newNameLinked": "[undefined](https://github.com/boumenot/gocover-cobertura)",
    "references": "[source](https://github.com/boumenot/gocover-cobertura)"
  },
  {
    "gitAuthor": "Sylva Renovate bot <service_account_group_59800588_0f6fd8e977a6c86f7522a46f254943dc@noreply.gitlab.com>",
    "versioning": "semver",
    "separateMajorMinor": true,
    "separateMinorPatch": true,
    "branchPrefix": "renovate/main-",
    "semanticCommitType": "fix",
    "semanticCommitScope": "deps",
    "branchName": "renovate/main-go-tools-dependencies",
    "additionalBranchPrefix": "",
    "branchTopic": "{{{groupSlug}}}",
    "commitMessage": "{{{commitMessagePrefix}}} {{{commitMessageAction}}} {{{commitMessageTopic}}} {{{commitMessageExtra}}} {{{commitMessageSuffix}}}",
    "commitBody": null,
    "commitMessagePrefix": null,
    "commitMessageAction": "Update",
    "commitMessageTopic": "{{{groupName}}}",
    "commitMessageSuffix": null,
    "prTitle": null,
    "groupName": "GO tools dependencies",
    "groupSlug": "go-tools-dependencies",
    "labels": [
      "release-type::none"
    ],
    "addLabels": [
      "renovate",
      "renovate",
      "dependencies::minor",
      "area:CI",
      "area:CI",
      "AutoMerge",
      "dependencies::minor",
      "area:CI",
      "area:CI",
      "AutoMerge"
    ],
    "prBodyDefinitions": {
      "Package": "{{#if (containsString depName 'golang.org/x/')}}[{{{depName}}}](https://pkg.go.dev/{{{depName}}}){{else}}{{{depNameLinked}}}{{/if}}",
      "Type": "{{{depType}}}",
      "Update": "{{{updateType}}}",
      "Current value": "{{{currentValue}}}",
      "New value": "{{{newValue}}}",
      "Change": "{{#if (containsString depName 'golang.org/x/')}}[`{{{displayFrom}}}` → `{{{displayTo}}}`](https://cs.opensource.google/{{{replace '^golang\\.org' 'go' depName}}}/+/refs/tags/{{{currentValue}}}...refs/tags/{{{newValue}}}){{else}}`{{{displayFrom}}}` → `{{{displayTo}}}`{{/if}}",
      "Pending": "{{{displayPending}}}",
      "References": "{{{references}}}",
      "Package file": "{{{packageFile}}}",
      "Age": "{{#if newVersion}}![age](https://developer.mend.io/api/mc/badges/age/{{datasource}}/{{replace '/' '%2f' packageName}}/{{{newVersion}}}?slim=true){{/if}}",
      "Adoption": "{{#if newVersion}}![adoption](https://developer.mend.io/api/mc/badges/adoption/{{datasource}}/{{replace '/' '%2f' packageName}}/{{{newVersion}}}?slim=true){{/if}}",
      "Passing": "{{#if newVersion}}![passing](https://developer.mend.io/api/mc/badges/compatibility/{{datasource}}/{{replace '/' '%2f' packageName}}/{{{currentVersion}}}/{{{newVersion}}}?slim=true){{/if}}",
      "Confidence": "{{#if newVersion}}![confidence](https://developer.mend.io/api/mc/badges/confidence/{{datasource}}/{{replace '/' '%2f' packageName}}/{{{currentVersion}}}/{{{newVersion}}}?slim=true){{/if}}"
    },
    "prBodyColumns": [
      "Package",
      "Change",
      "Age",
      "Confidence"
    ],
    "prBodyNotes": [],
    "repository": "sylva-projects/sylva-elements/workload-cluster-operator",
    "parentOrg": "sylva-projects/sylva-elements",
    "topLevelOrg": "sylva-projects",
    "baseBranch": "main",
    "manager": "gomod",
    "categories": [
      "golang"
    ],
    "packageFile": "tools/go.mod",
    "parentDir": "tools",
    "packageFileDir": "tools",
    "datasource": "go",
    "depType": "require",
    "depName": "golang.org/x/vuln",
    "currentValue": "v1.1.4",
    "packageName": "golang.org/x/vuln",
    "sourceUrl": "https://go.googlesource.com/vuln",
    "currentVersion": "v1.1.4",
    "currentVersionTimestamp": "2025-01-06T19:26:26.000Z",
    "currentVersionAgeInDays": 637,
    "isSingleVersion": true,
    "newVersion": "v1.8.0",
    "newValue": "v1.8.0",
    "releaseTimestamp": "2026-09-08T20:52:42.000Z",
    "newVersionAgeInDays": 27,
    "newMajor": 1,
    "newMinor": 8,
    "newPatch": 0,
    "updateType": "minor",
    "isMinor": true,
    "depNameSanitized": "golang.org-x-vuln",
    "sourceRepoSlug": "vuln",
    "sourceRepo": "vuln",
    "sourceRepoOrg": "vuln",
    "sourceRepoName": "vuln",
    "recreateClosed": true,
    "displayFrom": "v1.1.4",
    "displayTo": "v1.8.0",
    "prettyNewVersion": "v1.8.0",
    "prettyNewMajor": "v1",
    "depTypes": [
      "require"
    ],
    "displayPending": "",
    "prettyDepType": "require",
    "isGroup": true,
    "logJSON": null,
    "depNameLinked": "[golang.org/x/vuln](https://go.googlesource.com/vuln)",
    "newNameLinked": "[undefined](https://go.googlesource.com/vuln)",
    "references": "[source](https://go.googlesource.com/vuln)"
  }
]

Admin message

Update GO tools dependencies (main) (minor)

Release Notes

v1.12.0

Changelog

Building and Packaging

v1.11.0

Changelog

Features

Fixes

Building and Packaging

Others

v1.5.0

What's Changed

Added

Fixed

Documentation

Maintenance

Contributors

v1.4.0

Configuration

Renovate upgrades detailed information

Merge request reports

`v1.12.0`

`v1.11.0`

`v1.5.0`

`v1.4.0`