Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: No docker auth found - returning

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Pin github/codeql-action action to 411c4c9
• Update actions/checkout digest to df4cb1c
• Update actions/setup-python digest to ece7cb0
• Update docker/setup-buildx-action digest to bb05f3f
• Update github/codeql-action digest to 4f0ceda
• Update actions/checkout action to v6.0.3
• Update azure/setup-helm action to v5.0.1
• Update dependency helm to v3.21.2
• Update github/codeql-action action to v2.28.1
• Update actions/checkout action to v7
• Update dependency helm to v4
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update arduino/setup-task action to v3

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update actions/create-github-app-token digest to bcd2ba4
• Update actions/setup-go digest to 924ae3a
• Update actions/setup-node digest to 48b55a0
• Update actions/upload-artifact digest to 043fb46
• Update docker/build-push-action digest to 53b7df9
• Update docker/login-action digest to c99871d
• Update golangci/golangci-lint-action digest to ba0d7d2
• Update sigstore/cosign-installer action to v4.1.2
• Update alpine/helm Docker tag to v4.2.2
• Update github/codeql-action action to v4.36.2
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

infra/helm-unittest/Dockerfile (1)

• alpine/helm 4.1.3@sha256:a572075a78666ad6fb1f40cb477a9e2eabbc46f3739beeb81904a6121f6ef027 → [Updates: 4.2.2]

github-actions (23)

.github/workflows/infra-helm-unittest.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4]
• docker/login-action v4@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4]
• docker/build-push-action v7@d08e5c354a6adb9ed34480a06d141179aa583294 → [Updates: v7]

.github/workflows/job-auto-labeler.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• mauroalderete/action-assign-labels v1@671a4ca2da0f900464c58b8b5540a1e07133e915

.github/workflows/job-chart-ocm.yml (2)

• actions/create-github-app-token v3@f8d387b68d61c58ab83c6c016672934102569859 → [Updates: v3]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]

.github/workflows/job-chart-version-update.yml (1)

• actions/create-github-app-token v3@f8d387b68d61c58ab83c6c016672934102569859 → [Updates: v3]

.github/workflows/job-check-helm-chart-docs.yml (2)

• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611 → [Updates: v3.0.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]

.github/workflows/job-create-version.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• ietf-tools/semver-action v1@c90370b2958652d71c06a3484129a4d423a6d8a8

.github/workflows/job-docker-build-push.yml (6)

• docker/login-action v4@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4]
• docker/build-push-action v7@d08e5c354a6adb9ed34480a06d141179aa583294 → [Updates: v7]
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]
• ncipollo/release-action v1.21.0@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd

.github/workflows/job-docker-build.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4]
• docker/build-push-action v7@d08e5c354a6adb9ed34480a06d141179aa583294 → [Updates: v7]

.github/workflows/job-golang-lint.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611 → [Updates: v3.0.0]
• golangci/golangci-lint-action v9@1e7e51e771db61008b38414a730f564565cf7c20 → [Updates: v9]

.github/workflows/job-golang-test-source.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611 → [Updates: v3.0.0]

.github/workflows/job-image-ocm.yml (1)

• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

.github/workflows/job-node-publish.yml (4)

• actions/create-github-app-token v3@f8d387b68d61c58ab83c6c016672934102569859 → [Updates: v3]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-node v6@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

.github/workflows/job-node-test.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-node v6@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6]
• actions/upload-artifact v7@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7]

.github/workflows/job-ocm-version-update.yml (1)

• actions/create-github-app-token v3@f8d387b68d61c58ab83c6c016672934102569859 → [Updates: v3]

.github/workflows/job-ocm.yml (2)

• actions/create-github-app-token v3@f8d387b68d61c58ab83c6c016672934102569859 → [Updates: v3]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]

.github/workflows/job-ossf-scorecard.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• github/codeql-action v4.34.1@38697555549f1db7851b81482ff19f1fa5c4fedc → [Updates: v4.36.2]

.github/workflows/job-release-chart.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• bsord/helm-push v4.2.0@51f937208fed71540ab5ec5215cf9b3ecae9c7b7
• bsord/helm-push v4.2.0@51f937208fed71540ab5ec5215cf9b3ecae9c7b7
• ncipollo/release-action v1.21.0@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd

.github/workflows/job-sbom.yml (4)

• docker/login-action v4@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4]
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• actions/upload-artifact v7@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7]

.github/workflows/job-scan-kubernetes-vulnerability.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• piraces/kube-score-ga v0.1.3@0eb83dcf2274cf7018257df01feb5d2f43f7cb59

.github/workflows/job-test-chart.yml (9)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• azure/setup-helm v5.0.0@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 → [Updates: v5.0.1]
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6]
• helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
• ghcr.io/platform-mesh/infra/helm-unittest latest
• helm v3.14.4 → [Updates: v3.21.2, v4.2.2]
• python 3.x
• chart-testing v3.14.0

.github/workflows/job-trivy-image.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v2.25.4@bc0b696b4103f5fe60f15749af68a046868d511a → [Updates: v2.28.1, v4.36.2, v2.25.4]

.github/workflows/job-trivy-sbom.yml (2)

• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v3 → [Updates: v4, v3]

.github/workflows/security-zulip-report.yml (1)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository