Skip to content

Dependency Dashboard #6

Open
Open

Description

@renovate

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

  • ⚠️ WARN: Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (2)
Datasource Package Last Updated
github-actions peter-evans/create-issue-from-file 2025-10-01
regex semantic-release-replace-plugin 2023-07-20

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

  • chore(deps): update all digest updates (docker.io/library/python, gcr.io/distroless/python3-debian13)
  • chore(deps): update all non-major dependencies (aquasecurity/trivy, gradle, helm/chart-testing, nginxinc/nginx-unprivileged)
  • chore(deps): update github-actions (actions/create-github-app-token, actions/download-artifact, actions/setup-node, actions/upload-artifact, astral-sh/setup-uv, docker/build-push-action, docker/setup-buildx-action, docker/setup-qemu-action, github/codeql-action, gradle/actions, helm/chart-testing-action, helm/kind-action, micalevisk/last-issue-action, ossf/scorecard-action, step-security/harden-runner)
  • chore(deps): update cycjimmy/semantic-release-action action to v8
  • 🔐 Create all awaiting schedule PRs at once 🔐

Detected Dependencies

dockerfile (1)
Dockerfile (2)
  • docker.io/library/python 3.14.7-slim@sha256:cad9a2c871761c413caa6fdd6441c783451e740a48aaeba60ae62a8b53525ef6 → [Updates: 3.15.2-slim, 3.14.7-slim]
  • gcr.io/distroless/python3-debian13 nonroot@sha256:8ee214843129f43e2ebf5e0ca9f2e4e6d8292143d1b8a6787f169b5898578884 → [Updates: nonroot]
github-actions (7)
.github/workflows/ci.yaml (6)
  • docker/setup-buildx-action v4.3.0@37fe631027851001ddb9b187196cc803df7f5f0e → [Updates: v4.4.1]
  • docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f → [Updates: v4.7.0]
  • actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c → [Updates: v8.0.2]
  • actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c → [Updates: v8.0.2]
  • ubuntu 26.04
  • ubuntu 26.04
.github/workflows/scorecard.yaml (4)
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc → [Updates: v2.5.0]
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a → [Updates: v7.0.2]
  • github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63 → [Updates: v4.38.3]
.github/workflows/standard-build.yaml (37)
  • step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.1]
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • docker/setup-buildx-action v4.3.0@37fe631027851001ddb9b187196cc803df7f5f0e → [Updates: v4.4.1]
  • docker/setup-qemu-action v4.3.0@1f40c72289eff860ee54a304f1438e3cff362e0a → [Updates: v4.4.0]
  • endersonmenezes/free-disk-space v4.0.0@2a22f8c59cae9cddae7194b33e6b92d023b2b4b8 → [Updates: v4.0.1]
  • docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f → [Updates: v4.7.0]
  • docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
  • docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
  • actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
  • reproducible-containers/buildkit-cache-dance v3.4.0@5422eac04292c961a382e0f584ea0f03ad9da723
  • docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a → [Updates: v7.4.0]
  • rlespinasse/slugify-value v1.4.1@f13019fcc1d95a391d12b618028b003adf29ebca
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a → [Updates: v7.0.2]
  • docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a → [Updates: v7.4.0]
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a → [Updates: v7.0.2]
  • aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
  • aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a → [Updates: v7.0.2]
  • aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a → [Updates: v7.0.2]
  • aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a → [Updates: v7.0.2]
  • marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88
  • step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.1]
  • docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f → [Updates: v4.7.0]
  • actions/attest-build-provenance v4.2.2@4d101475d8b20a2381f78447822ac1eab6504dd8
  • sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
  • actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c → [Updates: v8.0.2]
  • step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.1]
  • softprops/action-gh-release v3.0.3@efb35369e0ad2afab669f228072c1b0d510eae64
  • step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.1]
  • actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c → [Updates: v8.0.2]
  • softprops/action-gh-release v3.0.3@efb35369e0ad2afab669f228072c1b0d510eae64
  • ubuntu 26.04
  • ubuntu 26.04
  • ubuntu 26.04
  • ubuntu 26.04
.github/workflows/standard-chart-publish.yaml (18)
  • step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.1]
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f → [Updates: v2.9.0]
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.1]
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f → [Updates: v2.9.0]
  • helm/kind-action v1.15.0@06c1ae10762d3b9c1644e7fe69596ae519e015a2 → [Updates: v1.15.1]
  • step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.1]
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f → [Updates: v4.7.0]
  • sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
  • actions/attest-build-provenance v4.2.2@4d101475d8b20a2381f78447822ac1eab6504dd8
  • ubuntu 26.04
  • ghcr.io/chgl/kube-powertools v2.6.13@sha256:5e6cab6409850248d60d3686f02bf903f5f25aa8aa72058031aa5427d7f1c5cf
  • ubuntu 26.04
  • ubuntu 26.04
  • ubuntu 26.04
.github/workflows/standard-lint.yaml (29)
  • step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.1]
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • oxsecurity/megalinter v10.1.0@9949bad031045f366be2467e00e8371a7328a2e2
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a → [Updates: v7.0.2]
  • step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.1]
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • kjanat/actionlint v1.17.0@08bb2c4f0d039744455b87aef1c647fb8b66d37b
  • step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.1]
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294
  • step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.1]
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • gradle/actions v6.3.0@9c971963bec38e04b3d30dcc455b5382be2fdbfb → [Updates: v6.4.0]
  • step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.1]
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-java v6.0.1@de7274f081f381c8f8158605e0321c36c376e2e6 → [Updates: v6.1.0]
  • actions/setup-dotnet v6.0.0@a98b56852c35b8e3190ac28c8c2271da59106c68
  • github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63 → [Updates: v4.38.3]
  • github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63 → [Updates: v4.38.3]
  • step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.1]
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • astral-sh/setup-uv v10.1.0@bec219d24cd3e171d82865faccec33120bb574f4 → [Updates: v10.3.0]
  • github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63 → [Updates: v4.38.3]
  • ubuntu 26.04
  • ubuntu 26.04
  • ubuntu 26.04
  • ubuntu 26.04
  • ubuntu 26.04
  • ubuntu 26.04
.github/workflows/standard-release.yaml (7)
  • step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.1]
  • actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1 → [Updates: v3.3.0]
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020 → [Updates: v7.1.0]
  • cycjimmy/semantic-release-action v6.0.0@b12c8f6015dc215fe37bc154d4ad456dd3833c90 → [Updates: v8.0.1]
  • ubuntu 26.04
  • node 24
.github/workflows/standard-schedule.yaml (11)
  • step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.1]
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
  • lycheeverse/lychee-action v2.9.0@e7477775783ea5526144ba13e8db5eec57747ce8
  • micalevisk/last-issue-action v2.3.0@0d40124cc99ac8601c2516007f0c98ef3d27537b → [Updates: v2.4.0]
  • peter-evans/create-issue-from-file v6.0.0@fca9117c27cdc29c6c4db3b86c48e4115a786710
  • step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.1]
  • aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
  • github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63 → [Updates: v4.38.3]
  • ubuntu 26.04
  • ubuntu 26.04
gradle-wrapper (1)
gradle/wrapper/gradle-wrapper.properties (1)
  • gradle 9.7.1 → [Updates: 9.8.1]
helm-values (1)
charts/test-chart/values.yaml (1)
  • nginxinc/nginx-unprivileged 1.31.5@sha256:9d689e987337916e713a2d5fa84966550d9532e4cb512e7d6ad99df87ffe1ec8 → [Updates: 1.31.6]
regex (5)
.github/workflows/standard-build.yaml (1)
  • aquasecurity/trivy 0.74.0 → [Updates: 0.75.0]
.github/workflows/standard-chart-publish.yaml (1)
  • helm/chart-testing 3.14.0 → [Updates: 3.15.0]
.github/workflows/standard-lint.yaml (1)
  • zizmor 1.30.1 → [Updates: 1.31.1]
.github/workflows/standard-release.yaml (3)
  • conventional-changelog-conventionalcommits 9.3.1
  • semantic-release-replace-plugin 1.2.7
  • @semantic-release/git 11.0.1
.github/workflows/standard-schedule.yaml (1)
  • aquasecurity/trivy 0.74.0 → [Updates: 0.75.0]
renovate-config (1)
.renovaterc.json

  • Check this box to trigger a request for Renovate to run again on this repository

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions