Dependency Dashboard

[lucca-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update module github.com/gin-contrib/static to v1

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Pin dependencies (@rollup/plugin-commonjs, @rollup/plugin-node-resolve, @rollup/plugin-terser, debian, docker.io/library/alpine, docker.io/library/debian, docker.io/library/golang, rollup, rollup-plugin-css-only, rollup-plugin-livereload, rollup-plugin-svelte, svelte)
• Update docker.io/library/golang Docker tag to v1.24
• Update module github.com/gin-contrib/cors to v1.7.4
• Update module github.com/gin-gonic/gin to v1.10.0
• Update module github.com/google/uuid to v1.6.0
• Update module github.com/spf13/viper to v1.20.1
• Update dependency @rollup/plugin-node-resolve to v16
• Update dependency rollup to v4
• Update dependency sirv-cli to v3
• Update dependency svelte to v5
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

6/6 CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/crypto

• GO-2024-3321 (fixed in >= 0.31.0)
• GHSA-v778-237x-gjrc (fixed in >= 0.31.0)

golang.org/x/net

• GHSA-4v7x-pqxf-cx7m (fixed in >= 0.23.0)
• GO-2024-3333 (fixed in >= 0.33.0)
• GO-2024-2687 (fixed in >= 0.23.0)
• GHSA-w32m-9786-jp63 (fixed in >= 0.33.0)

Detected dependencies

dockerfile

Dockerfile

• docker.io/library/golang 1.23-bookworm
• docker.io/library/debian bookworm
• docker.io/library/alpine latest

Dockerfile.dev

• debian bookworm

gomod

go.mod

• go 1.19
• github.com/gin-contrib/cors v1.6.0
• github.com/gin-contrib/static v0.0.1
• github.com/gin-gonic/gin v1.9.1
• github.com/google/uuid v1.3.0
• github.com/spf13/viper v1.12.0

npm

front/package.json

• sirv-cli ^2.0.2
• @rollup/plugin-commonjs ^28.0.0
• @rollup/plugin-node-resolve ^15.3.0
• rollup ^3.29.5
• rollup-plugin-livereload ^2.0.5
• rollup-plugin-svelte ^7.2.2
• @rollup/plugin-terser ^0.4.4
• rollup-plugin-css-only ^4.5.2
• svelte ^4.2.19

---

• Check this box to trigger a request for Renovate to run again on this repository