This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/OpenListTeam/OpenList). ## Config Migration Needed - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR. ## Rate-Limited The following updates are currently rate-limited. To force their creation now, click on a checkbox below. - [ ] <!-- unlimit-branch=renovate/github.com-blevesearch-bleve-v2-2.x -->fix(deps): update module github.com/blevesearch/bleve/v2 to v2.6.0 - [ ] <!-- unlimit-branch=renovate/github.com-bmatcuk-doublestar-v4-4.x -->fix(deps): update module github.com/bmatcuk/doublestar/v4 to v4.10.0 - [ ] <!-- unlimit-branch=renovate/github.com-go-webauthn-webauthn-0.x -->fix(deps): update module github.com/go-webauthn/webauthn to v0.17.4 - [ ] <!-- unlimit-branch=renovate/github.com-ipfs-go-cid-0.x -->fix(deps): update module github.com/ipfs/go-cid to v0.6.2 - [ ] <!-- unlimit-branch=renovate/github.com-maruel-natural-1.x -->fix(deps): update module github.com/maruel/natural to v1.3.0 - [ ] <!-- unlimit-branch=renovate/github.com-meilisearch-meilisearch-go-0.x -->fix(deps): update module github.com/meilisearch/meilisearch-go to v0.36.3 - [ ] <!-- unlimit-branch=renovate/github.com-protonmail-go-crypto-1.x -->fix(deps): update module github.com/protonmail/go-crypto to v1.4.1 - [ ] <!-- unlimit-branch=renovate/github.com-protonmail-gopenpgp-v2-2.x -->fix(deps): update module github.com/protonmail/gopenpgp/v2 to v2.10.0 - [ ] <!-- unlimit-branch=renovate/github.com-quic-go-quic-go-0.x -->fix(deps): update module github.com/quic-go/quic-go to v0.60.0 - [ ] <!-- unlimit-branch=renovate/github.com-rclone-rclone-1.x -->fix(deps): update module github.com/rclone/rclone to v1.74.3 - [ ] <!-- unlimit-branch=renovate/github.com-shirou-gopsutil-v4-4.x -->fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.6 - [ ] <!-- unlimit-branch=renovate/golang.org-x-crypto-0.x -->fix(deps): update module golang.org/x/crypto to v0.53.0 - [ ] <!-- unlimit-branch=renovate/golang.org-x-image-0.x -->fix(deps): update module golang.org/x/image to v0.43.0 - [ ] <!-- unlimit-branch=renovate/golang.org-x-net-0.x -->fix(deps): update module golang.org/x/net to v0.56.0 - [ ] <!-- unlimit-branch=renovate/golang.org-x-oauth2-0.x -->fix(deps): update module golang.org/x/oauth2 to v0.36.0 - [ ] <!-- unlimit-branch=renovate/golang.org-x-sync-0.x -->fix(deps): update module golang.org/x/sync to v0.21.0 - [ ] <!-- unlimit-branch=renovate/golang.org-x-sys-0.x -->fix(deps): update module golang.org/x/sys to v0.46.0 - [ ] <!-- unlimit-branch=renovate/golang.org-x-text-0.x -->fix(deps): update module golang.org/x/text to v0.39.0 - [ ] <!-- unlimit-branch=renovate/golang.org-x-time-0.x -->fix(deps): update module golang.org/x/time to v0.15.0 - [ ] <!-- unlimit-branch=renovate/google.golang.org-grpc-1.x -->fix(deps): update module google.golang.org/grpc to v1.82.0 - [ ] <!-- unlimit-branch=renovate/gopkg.in-ldap.v3-3.x -->fix(deps): update module gopkg.in/ldap.v3 to v3.4.13 - [ ] <!-- unlimit-branch=renovate/gorm.io-driver-postgres-1.x -->fix(deps): update module gorm.io/driver/postgres to v1.6.0 - [ ] <!-- unlimit-branch=renovate/gorm.io-driver-sqlite-1.x -->fix(deps): update module gorm.io/driver/sqlite to v1.6.0 - [ ] <!-- unlimit-branch=renovate/gorm.io-gorm-1.x -->fix(deps): update module gorm.io/gorm to v1.31.2 - [ ] <!-- unlimit-branch=renovate/actions-cache-6.x -->chore(deps): update actions/cache action to v6 - [ ] <!-- unlimit-branch=renovate/benjlevesque-short-sha-4.x -->chore(deps): update benjlevesque/short-sha action to v4 - [ ] <!-- unlimit-branch=renovate/docker-build-push-action-7.x -->chore(deps): update docker/build-push-action action to v7 - [ ] <!-- unlimit-branch=renovate/docker-login-action-4.x -->chore(deps): update docker/login-action action to v4 - [ ] <!-- unlimit-branch=renovate/docker-metadata-action-6.x -->chore(deps): update docker/metadata-action action to v6 - [ ] <!-- unlimit-branch=renovate/docker-setup-buildx-action-4.x -->chore(deps): update docker/setup-buildx-action action to v4 - [ ] <!-- unlimit-branch=renovate/docker-setup-qemu-action-4.x -->chore(deps): update docker/setup-qemu-action action to v4 - [ ] <!-- unlimit-branch=renovate/github.com-caarlos0-env-v9-11.x -->fix(deps): update module github.com/caarlos0/env/v9 to v11 - [ ] <!-- unlimit-branch=renovate/github.com-charmbracelet-bubbles-2.x -->fix(deps): update module github.com/charmbracelet/bubbles to v2 - [ ] <!-- unlimit-branch=renovate/github.com-charmbracelet-bubbletea-2.x -->fix(deps): update module github.com/charmbracelet/bubbletea to v2 - [ ] <!-- unlimit-branch=renovate/github.com-charmbracelet-lipgloss-2.x -->fix(deps): update module github.com/charmbracelet/lipgloss to v2 - [ ] <!-- unlimit-branch=renovate/github.com-dlclark-regexp2-2.x -->fix(deps): update module github.com/dlclark/regexp2 to v2 - [ ] <!-- unlimit-branch=renovate/github.com-golang-jwt-jwt-v4-5.x -->fix(deps): update module github.com/golang-jwt/jwt/v4 to v5 - [ ] <!-- unlimit-branch=renovate/github.com-protonmail-gopenpgp-v2-3.x -->fix(deps): update module github.com/protonmail/gopenpgp/v2 to v3 - [ ] <!-- create-all-rate-limited-prs -->🔐 **Create all rate-limited PRs at once** 🔐 ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] <!-- rebase-branch=renovate/go-1.x -->[chore(deps): update go toolchain directive to v1.26.5](../pull/2733) - [ ] <!-- rebase-branch=renovate/github.com-nwaples-rardecode-v2-2.x -->[fix(deps): update module github.com/nwaples/rardecode/v2 to v2.2.5](../pull/2699) - [ ] <!-- rebase-branch=renovate/azure-sdk-for-go-monorepo -->[fix(deps): update azure-sdk-for-go monorepo](../pull/2700) (`github.com/Azure/azure-sdk-for-go/sdk/azcore`, `github.com/Azure/azure-sdk-for-go/sdk/storage/azblob`) - [ ] <!-- rebase-branch=renovate/github.com-coreos-go-oidc-2.x -->[fix(deps): update module github.com/coreos/go-oidc to v2.5.0+incompatible](../pull/2711) - [ ] <!-- rebase-branch=renovate/github.com-deckarep-golang-set-v2-2.x -->[fix(deps): update module github.com/deckarep/golang-set/v2 to v2.9.0](../pull/2712) - [ ] <!-- rebase-branch=renovate/github.com-dlclark-regexp2-1.x -->[fix(deps): update module github.com/dlclark/regexp2 to v1.12.0](../pull/2713) - [ ] <!-- rebase-branch=renovate/github.com-fclairamb-ftpserverlib-0.x -->[fix(deps): update module github.com/fclairamb/ftpserverlib to v0.32.1](../pull/2715) - [ ] <!-- rebase-branch=renovate/github.com-go-resty-resty-v2-2.x -->[fix(deps): update module github.com/go-resty/resty/v2 to v2.17.2](../pull/2718) - [ ] <!-- rebase-branch=renovate/gorm.io-driver-mysql-1.x -->[fix(deps): update module gorm.io/driver/mysql to v1.6.0](../pull/819) - [ ] <!-- rebase-branch=renovate/google.golang.org-appengine-2.x -->[fix(deps): update module google.golang.org/appengine to v2](../pull/931) - [ ] <!-- rebase-all-open-prs -->**Click on this checkbox to rebase all open PRs at once** ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] <!-- recreate-branch=renovate/github.com-city404-v6-public-rpc-proto-go-digest -->[fix(deps): update github.com/city404/v6-public-rpc-proto/go digest to 20fb0a0](../pull/1525) - [ ] <!-- recreate-branch=renovate/github.com-halalcloud-golang-sdk-lite-digest -->[fix(deps): update github.com/halalcloud/golang-sdk-lite digest to c98fb44](../pull/2075) - [ ] <!-- recreate-branch=renovate/github.com-da3zki7-saferith-0.x -->[chore(deps): update module github.com/da3zki7/saferith to v0.33.0](../pull/2096) - [ ] <!-- recreate-branch=renovate/github.com-jlaffaye-ftp-0.x -->[fix(deps): update module github.com/jlaffaye/ftp to v0.2.1](../pull/2689) - [ ] <!-- recreate-branch=renovate/github.com-natefinch-lumberjack-2.x -->[fix(deps): update module github.com/natefinch/lumberjack to v2.2.1](../pull/687) - [ ] <!-- recreate-branch=renovate/github.com-openlistteam-wopan-sdk-go-0.x -->[fix(deps): update module github.com/openlistteam/wopan-sdk-go to v0.2.2](../pull/796) - [ ] <!-- recreate-branch=renovate/github.com-foxxorcat-mopan-sdk-go-1.x -->[fix(deps): update module github.com/foxxorcat/mopan-sdk-go to v1](../pull/927) - [ ] <!-- recreate-branch=renovate/github.com-foxxorcat-weiyun-sdk-go-1.x -->[fix(deps): update module github.com/foxxorcat/weiyun-sdk-go to v1](../pull/929) ## Detected Dependencies <details><summary>docker-compose (1)</summary> <blockquote> <details><summary>docker-compose.yml</summary> </details> </blockquote> </details> <details><summary>dockerfile (2)</summary> <blockquote> <details><summary>Dockerfile</summary> </details> <details><summary>Dockerfile.ci</summary> </details> </blockquote> </details> <details><summary>github-actions (9)</summary> <blockquote> <details><summary>.github/workflows/beta_release.yml (8)</summary> - `actions/checkout v7` - `ovsds/create-or-update-ref-action v1` - `actions/upload-artifact v7` - `actions/checkout v7` - `actions/setup-go v6` - `OpenListTeam/cgo-actions v1.2.5` - `actions/upload-artifact v7` - `go 1.26.4` → [Updates: `1.26.5`] </details> <details><summary>.github/workflows/build.yml (6)</summary> - `actions/checkout v7` - `benjlevesque/short-sha v3.0` → [Updates: `v4.0`] - `actions/setup-go v6` - `OpenListTeam/cgo-actions v1.2.5` - `actions/upload-artifact v7` - `go 1.26.4` → [Updates: `1.26.5`] </details> <details><summary>.github/workflows/changelog.yml (1)</summary> - `actions/checkout v7` </details> <details><summary>.github/workflows/issue_pr_comment.yml (2)</summary> - `actions/github-script v9` - `actions/github-script v9` </details> <details><summary>.github/workflows/release_docker.yml (26)</summary> - `actions/checkout v7` - `actions/setup-go v6` - `actions/cache v6` - `actions/upload-artifact v7` - `actions/checkout v7` - `actions/setup-go v6` - `actions/cache v6` - `actions/upload-artifact v7` - `actions/checkout v7` - `actions/download-artifact v8` - `docker/setup-qemu-action v3` → [Updates: `v4`] - `docker/setup-buildx-action v3` → [Updates: `v4`] - `docker/login-action v3` → [Updates: `v4`] - `docker/login-action v3` → [Updates: `v4`] - `docker/metadata-action v5` → [Updates: `v6`] - `docker/build-push-action v6` → [Updates: `v7`] - `actions/checkout v7` - `actions/download-artifact v8` - `docker/setup-qemu-action v3` → [Updates: `v4`] - `docker/setup-buildx-action v3` → [Updates: `v4`] - `docker/login-action v3` → [Updates: `v4`] - `docker/login-action v3` → [Updates: `v4`] - `docker/metadata-action v5` → [Updates: `v6`] - `docker/build-push-action v6` → [Updates: `v7`] - `go 1.26` - `go 1.26.4` → [Updates: `1.26.5`] </details> <details><summary>.github/workflows/release.yml (5)</summary> - `irongut/EditRelease v1.2.0` - `jlumbroso/free-disk-space main` - `actions/setup-go v6` - `actions/checkout v7` - `go 1.26.4` → [Updates: `1.26.5`] </details> <details><summary>.github/workflows/sync_repo.yml (1)</summary> - `actions/checkout v7` </details> <details><summary>.github/workflows/test_docker.yml (13)</summary> - `actions/checkout v7` - `actions/setup-go v6` - `actions/cache v4` → [Updates: `v6`] - `actions/upload-artifact v7` - `actions/checkout v7` - `actions/download-artifact v8` - `docker/setup-qemu-action v3` → [Updates: `v4`] - `docker/setup-buildx-action v3` → [Updates: `v4`] - `docker/login-action v3` → [Updates: `v4`] - `docker/login-action v3` → [Updates: `v4`] - `docker/metadata-action v5` → [Updates: `v6`] - `docker/build-push-action v6` → [Updates: `v7`] - `go 1.26.4` → [Updates: `1.26.5`] </details> <details><summary>.github/workflows/trigger-makefile-update.yml (1)</summary> - `actions/github-script v9` </details> </blockquote> </details> <details><summary>gomod (1)</summary> <blockquote> <details><summary>go.mod (100)</summary> - `go 1.25.0` - `go 1.26.4` → [Updates: `1.26.5`] - `github.com/Azure/azure-sdk-for-go/sdk/azcore v1.18.1` → [Updates: `v1.22.0`] - `github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.6.2` → [Updates: `v1.8.0`] - `github.com/KarpelesLab/reflink v1.0.2` - `github.com/KirCute/zip v1.0.1` - `github.com/OpenListTeam/go-cache v0.1.0` - `github.com/OpenListTeam/sftpd-openlist v1.0.1` - `github.com/OpenListTeam/tache v0.2.2` - `github.com/OpenListTeam/times v0.1.0` - `github.com/OpenListTeam/wopan-sdk-go v0.1.5` → [Updates: `v0.2.2`] - `github.com/ProtonMail/go-crypto v1.3.0` → [Updates: `v1.4.1`] - `github.com/ProtonMail/gopenpgp/v2 v2.9.0` → [Updates: `v2.10.0`, `v3.4.1`] - `github.com/SheltonZhu/115driver v1.3.3` - `github.com/aliyun/aliyun-oss-go-sdk v3.0.2+incompatible` - `github.com/antchfx/htmlquery v1.3.6` - `github.com/antchfx/xpath v1.3.6` - `github.com/avast/retry-go v3.0.0+incompatible` - `github.com/aws/aws-sdk-go v1.55.8` - `github.com/blevesearch/bleve/v2 v2.5.2` → [Updates: `v2.6.0`] - `github.com/bmatcuk/doublestar/v4 v4.9.1` → [Updates: `v4.10.0`] - `github.com/caarlos0/env/v9 v9.0.0` → [Updates: `v11.4.1`] - `github.com/charmbracelet/bubbles v0.21.1` → [Updates: `v2.1.1`] - `github.com/charmbracelet/bubbletea v1.3.10` → [Updates: `v2.0.8`] - `github.com/charmbracelet/lipgloss v1.1.0` → [Updates: `v2.0.5`] - `github.com/city404/v6-public-rpc-proto/go v0.0.0-20240817070657-90f8e24b653e@90f8e24b653e` → [Updates: `v0.0.0-20260207090811-20fb0a0ffc9c`] - `github.com/cloudsoda/go-smb2 v0.0.0-20260701064823-d8c5600d73b8@d8c5600d73b8` - `github.com/coreos/go-oidc v2.3.0+incompatible` → [Updates: `v2.5.0+incompatible`] - `github.com/deckarep/golang-set/v2 v2.8.0` → [Updates: `v2.9.0`] - `github.com/dhowden/tag v0.0.0-20240417053706-3d75831295e8@3d75831295e8` - `github.com/disintegration/imaging v1.6.2` - `github.com/dlclark/regexp2 v1.11.5` → [Updates: `v1.12.0`, `v2.2.2`] - `github.com/dustinxie/ecc v0.0.0-20210511000915-959544187564@959544187564` - `github.com/fclairamb/ftpserverlib v0.26.1-0.20250709223522-4a925d79caf6@4a925d79caf6` → [Updates: `v0.32.1`] - `github.com/foxxorcat/mopan-sdk-go v0.1.6` → [Updates: `v1.0.0`] - `github.com/foxxorcat/weiyun-sdk-go v0.1.4` → [Updates: `v1.1.0`] - `github.com/gin-contrib/cors v1.7.7` - `github.com/gin-gonic/gin v1.12.0` - `github.com/glebarez/sqlite v1.11.0` - `github.com/go-resty/resty/v2 v2.16.5` → [Updates: `v2.17.2`] - `github.com/go-webauthn/webauthn v0.13.4` → [Updates: `v0.17.4`] - `github.com/golang-jwt/jwt/v4 v4.5.2` → [Updates: `v5.3.1`] - `github.com/google/uuid v1.6.0` - `github.com/gorilla/websocket v1.5.3` - `github.com/halalcloud/golang-sdk-lite v0.0.0-20251105081800-78cbb6786c38@78cbb6786c38` → [Updates: `v0.0.0-20260114141156-c98fb447a544`] - `github.com/hekmon/transmissionrpc/v3 v3.0.0` - `github.com/henrybear327/go-proton-api v1.0.0` - `github.com/ipfs/go-ipfs-api v0.7.0` - `github.com/itsHenry35/gofakes3 v0.0.8` - `github.com/jlaffaye/ftp v0.2.1-0.20240918233326-1b970516f5d3@1b970516f5d3` → [Updates: `v0.2.1`] - `github.com/json-iterator/go v1.1.12` - `github.com/kdomanski/iso9660 v0.4.0` - `github.com/maruel/natural v1.1.1` → [Updates: `v1.3.0`] - `github.com/meilisearch/meilisearch-go v0.32.0` → [Updates: `v0.36.3`] - `github.com/mholt/archives v0.1.5` - `github.com/natefinch/lumberjack v2.0.0+incompatible` → [Updates: `v2.2.1`] - `github.com/ncw/swift/v2 v2.0.5` - `github.com/pkg/errors v0.9.1` - `github.com/pkg/sftp v1.13.10` - `github.com/pquerna/otp v1.5.0` - `github.com/quic-go/quic-go v0.59.0` → [Updates: `v0.60.0`] - `github.com/rclone/rclone v1.70.3` → [Updates: `v1.74.3`] - `github.com/shirou/gopsutil/v4 v4.25.5` → [Updates: `v4.26.6`] - `github.com/sirupsen/logrus v1.9.4` - `github.com/spf13/afero v1.15.0` - `github.com/spf13/cobra v1.10.2` - `github.com/stretchr/testify v1.11.1` - `github.com/t3rm1n4l/go-mega v0.0.0-20260630094356-4de2f127f34a@4de2f127f34a` - `github.com/tchap/go-patricia/v2 v2.3.3` - `github.com/u2takey/ffmpeg-go v0.5.0` - `github.com/upyun/go-sdk/v3 v3.0.4` - `github.com/winfsp/cgofuse v1.6.0` - `github.com/zzzhr1990/go-common-entity v0.0.0-20250202070650-1a200048f0d3@1a200048f0d3` - `golang.org/x/crypto v0.50.0` → [Updates: `v0.53.0`] - `golang.org/x/image v0.29.0` → [Updates: `v0.43.0`] - `golang.org/x/net v0.53.0` → [Updates: `v0.56.0`] - `golang.org/x/oauth2 v0.34.0` → [Updates: `v0.36.0`] - `golang.org/x/time v0.14.0` → [Updates: `v0.15.0`] - `google.golang.org/appengine v1.6.8` → [Updates: `v2.0.6`] - `gopkg.in/ldap.v3 v3.1.0` → [Updates: `v3.4.13`] - `gorm.io/driver/mysql v1.5.7` → [Updates: `v1.6.0`] - `gorm.io/driver/postgres v1.5.9` → [Updates: `v1.6.0`] - `gorm.io/driver/sqlite v1.5.6` → [Updates: `v1.6.0`] - `gorm.io/gorm v1.25.11` → [Updates: `v1.31.2`] - `github.com/OpenListTeam/115-sdk-go v0.2.4` - `github.com/bodgit/sevenzip v1.6.4` - `github.com/microcosm-cc/bluemonday v1.0.27` - `github.com/nwaples/rardecode/v2 v2.2.0` → [Updates: `v2.2.5`] - `go4.org v0.0.0-20260112195520-a5071408f32f@a5071408f32f` - `github.com/axgle/mahonia v0.0.0-20180208002826-3358181d7394@3358181d7394` - `github.com/henrybear327/Proton-API-Bridge v1.0.0` - `github.com/ipfs/go-cid v0.5.0` → [Updates: `v0.6.2`] - `github.com/skip2/go-qrcode v0.0.0-20200617195104-da1b6568686e@da1b6568686e` - `golang.org/x/sync v0.20.0` → [Updates: `v0.21.0`] - `golang.org/x/sys v0.43.0` → [Updates: `v0.46.0`] - `golang.org/x/text v0.37.0` → [Updates: `v0.39.0`] - `google.golang.org/grpc v1.78.0` → [Updates: `v1.82.0`] - `github.com/henrybear327/go-proton-api v1.0.0` - `github.com/Da3zKi7/saferith v0.33.0-fixed` → [Updates: `v0.33.0`] - `github.com/OpenListTeam/reflink v0.0.0-20260701021214-78760eaeafef@78760eaeafef` </details> </blockquote> </details> --- - [ ] <!-- manual job -->Check this box to trigger a request for Renovate to run again on this repository
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Config Migration Needed
Rate-Limited
The following updates are currently rate-limited. To force their creation now, click on a checkbox below.
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
github.com/Azure/azure-sdk-for-go/sdk/azcore,github.com/Azure/azure-sdk-for-go/sdk/storage/azblob)PR Closed (Blocked)
The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.
Detected Dependencies
docker-compose (1)
dockerfile (2)
github-actions (9)
gomod (1)