Dependency Dashboard

[bluebuild-renovatebot-actions]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information
• ⚠️ WARN: Some upgrade(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update quay.io/podman/stable:latest docker digest to 301671d
• chore(deps): update quay.io/skopeo/stable:latest docker digest to 064d2ce
• fix(deps): update rust crate open to v5.4.4
• chore(deps): update dependency hhd-dev/rechunk to v1.2.4
• chore(deps): update dependency jasonn3/build-container-installer to v1.5.0
• chore(deps): update docker/setup-buildx-action action to v4.4.1
• chore(deps): update docker/setup-qemu-action action to v4.4.0
• chore(deps): update github/codeql-action action to v4.38.1
• chore(deps): update rust crate bon to v3.10.1
• chore(deps): update rust crate oci-client to v0.18.0
• chore(deps): update rust crate rstest to v0.27.0
• chore(deps): update rust crate uuid to v1.26.1
• fix(deps): update rust crate blake2 to v0.11.0
• fix(deps): update rust crate jsonschema to v0.56.0
• fix(deps): update rust crate sigstore to v0.14.0
• fix(deps): update rust crate yaml-rust2 to v0.13.0
• chore(deps): update actions-rust-lang/setup-rust-toolchain action to v2
• chore(deps): update astral-sh/setup-uv action to v10
• chore(deps): update determinatesystems/flakehub-push action to v7
• chore(deps): update determinatesystems/nix-installer-action action to v23
• chore(deps): update rust crate cached to v4
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update rust crate rand to v0.10.3
• fix(deps): update rust crate thiserror to v2.0.21
• chore(deps): update dependency ubuntu to v26

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update docker.io/library/alpine:latest docker digest to 294b683
• chore(deps): update dtolnay/rust-toolchain digest to 6bed076
• chore(deps): update ghcr.io/blue-build/base-images/fedora-base:latest docker digest to 2e2062a
• chore(deps): update ghcr.io/blue-build/earthly-lib/cargo-builder:latest docker digest to 84e64f6
• chore(deps): update rust crate clap to v4.6.7
• chore(deps): update rust crate indexmap to v2.14.2
• chore(deps): update rust crate reqwest to v0.13.5
• chore(deps): update rust crate which to v8.0.6
• fix(deps): update rust crate askama to v0.16.1
• fix(deps): update rust crate clap_complete to v4.6.11
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cargo (5)

Cargo.toml (45)

• clap-verbosity-flag =3.0.4
• clap_complete =4.6.9 → [Updates: =4.6.11]
• clap_complete_nushell =4.6.2
• fuzzy-matcher =0.3.7
• jsonschema =0.30.0 → [Updates: =0.56.0]
• open =5.4.1 → [Updates: =5.4.4]
• os_info =3.15.0
• requestty =0.6.3
• rust-embed =8.12.0
• thiserror =2.0.20 → [Updates: =2.0.21]
• urlencoding =2.1.3
• yaml-rust2 =0.12.0 → [Updates: =0.13.0]
• rusty-hook 0.11
• git2 =0.21.0
• bon =3.9.3 → [Updates: =3.10.1]
• cached =2.0.2 → [Updates: =4.0.0]
• chrono =0.4.45
• clap =4.6.6 → [Updates: =4.6.7]
• colored =3.1.1
• comlexr =1.5.0
• indexmap =2.14.0 → [Updates: =2.14.2]
• indicatif =0.18.6
• lazy-regex =3.6.1
• log =0.4.34
• miette =7.6.0
• nix =0.31.3
• oci-client =0.17.0 → [Updates: =0.18.0]
• pretty_assertions =1.4.1
• rand =0.10.2 → [Updates: =0.10.3]
• rayon =1.12.0
• regex =1.13.1
• reqwest =0.13.4 → [Updates: =0.13.5]
• rstest =0.26.1 → [Updates: =0.27.0]
• semver =1.0.28
• serde =1.0.229
• serde_json =1.0.151
• serde_yaml =0.10.7
• shadow-rs =2.0.0
• structstruck =0.5.1
• syntect =5.3.0
• tempfile =3.27.0
• tokio =1.53.1
• uuid =1.25.0 → [Updates: =1.26.1]
• which =8.0.5 → [Updates: =8.0.6]
• zeroize =1.9.0

process/Cargo.toml (6)

• anyhow =1.0.104
• indicatif-log-bridge =0.2.3
• log4rs =1.4.0
• nu-ansi-term =0.50.3
• signal-hook =0.4.4
• sigstore =0.13.0 → [Updates: =0.14.0]

recipe/Cargo.toml

template/Cargo.toml (1)

• askama =0.16.0 → [Updates: =0.16.1]

utils/Cargo.toml (7)

• base64 =0.23.1
• blake2 =0.10.6 → [Updates: =0.11.0]
• constcat =0.6.1
• directories =6.0.0
• docker_credential =1.4.0
• process_control =5.2.0
• shellexpand =3.1.2

dockerfile (1)

template/templates/Containerfile.j2

github-actions (7)

.github/workflows/build.yml (16)

• EarthBuild/actions-setup v2.2.0@f4d20223e70dbb43b5fc08c4d857ab9cf0dbf3ae
• extractions/setup-just v4.0.0@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• EarthBuild/actions-setup v2.2.0@f4d20223e70dbb43b5fc08c4d857ab9cf0dbf3ae
• extractions/setup-just v4.0.0@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• hastd/free-disk-space v0.1.2@68572aeaadb7f76bd408246328e95926323402b5
• EarthBuild/actions-setup v2.2.0@f4d20223e70dbb43b5fc08c4d857ab9cf0dbf3ae
• docker/setup-qemu-action v4.2.0@96fe6ef7f33517b61c61be40b68a1882f3264fb8 → [Updates: v4.4.0]
• extractions/setup-just v4.0.0@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• slsa-framework/slsa-github-generator v2.1.0
• ubuntu 24.04-arm → [Updates: 26.04-arm]

.github/workflows/flakehub-tagged.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• DeterminateSystems/nix-installer-action v22@ef8a148080ab6020fd15196c2084a2eea5ff2d25 → [Updates: v23]
• DeterminateSystems/flakehub-push v6@71f57208810a5d299fc6545350981de98fdbc860 → [Updates: v7]

.github/workflows/run-test.yml (9)

• hastd/free-disk-space v0.1.2@68572aeaadb7f76bd408246328e95926323402b5
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c → [Updates: v4.4.1]
• EarthBuild/actions-setup v2.2.0@f4d20223e70dbb43b5fc08c4d857ab9cf0dbf3ae
• docker/setup-qemu-action v4.2.0@96fe6ef7f33517b61c61be40b68a1882f3264fb8 → [Updates: v4.4.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions-rust-lang/setup-rust-toolchain v1.17.0@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 → [Updates: v2.0.0]
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• extractions/setup-just v4.0.0@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3

.github/workflows/scorecard.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.37.6@5595ccaf912efad79be6eef63a5619ff05969be3 → [Updates: v4.38.1]

.github/workflows/tag.yml (14)

• EarthBuild/actions-setup v2.2.0@f4d20223e70dbb43b5fc08c4d857ab9cf0dbf3ae
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• EarthBuild/actions-setup v2.2.0@f4d20223e70dbb43b5fc08c4d857ab9cf0dbf3ae
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• hastd/free-disk-space v0.1.2@68572aeaadb7f76bd408246328e95926323402b5
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain stable@5d458579430fc14a04a08a1e7d3694f545e91ce6 → [Updates: stable]
• EarthBuild/actions-setup v2.2.0@f4d20223e70dbb43b5fc08c4d857ab9cf0dbf3ae
• docker/setup-qemu-action v4.2.0@96fe6ef7f33517b61c61be40b68a1882f3264fb8 → [Updates: v4.4.0]
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• slsa-framework/slsa-github-generator v2.1.0
• ubuntu 24.04-arm → [Updates: 26.04-arm]

.github/workflows/test.yml (7)

• EarthBuild/actions-setup v2.2.0@f4d20223e70dbb43b5fc08c4d857ab9cf0dbf3ae
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• EarthBuild/actions-setup v2.2.0@f4d20223e70dbb43b5fc08c4d857ab9cf0dbf3ae
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• hastd/free-disk-space v0.1.2@68572aeaadb7f76bd408246328e95926323402b5
• EarthBuild/actions-setup v2.2.0@f4d20223e70dbb43b5fc08c4d857ab9cf0dbf3ae
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/zizmor.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• astral-sh/setup-uv v9.0.0@c771a70e6277c0a99b617c7a806ffedaca235ff9 → [Updates: v10.1.0]
• github/codeql-action v4.37.6@5595ccaf912efad79be6eef63a5619ff05969be3 → [Updates: v4.38.1]

regex (7)

Earthfile (1)

• sigstore/cosign 3.1.3

Earthfile (9)

• docker.io/library/alpine latest@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b → [Updates: latest]
• ghcr.io/blue-build/earthly-lib/cargo-builder latest@sha256:165bfd1ef0a0003e43f742f9677eb9e66b47428fde5cf91e0f1462982fc3f015 → [Updates: latest]
• docker.io/library/alpine latest@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b → [Updates: latest]
• docker.io/library/alpine latest@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b → [Updates: latest]
• docker.io/library/alpine latest@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b → [Updates: latest]
• docker.io/library/alpine latest@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b → [Updates: latest]
• docker.io/library/rust latest@sha256:a8a5f0a1e5fe7dfe1d352591e4a1c7dd2c08fd70475cae872cf3458ba0df0546
• docker.io/library/alpine latest@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b → [Updates: latest]
• docker.io/library/alpine latest@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b → [Updates: latest]

process/drivers/podman_driver.rs (1)

• quay.io/podman/stable latest@sha256:f345d8d4fddea244d3a1ced27bcec82d14cc9e32cb5ead7f5882b0baf59dc8b0 → [Updates: latest]

process/drivers/rpm_ostree_runner.rs (1)

• ghcr.io/blue-build/rpm-ostree-container latest@sha256:219535fd1e526c5eead25e43103348ca5b2e0677679316a1f04af60c2ea003eb

process/drivers/traits.rs (1)

• hhd-dev/rechunk 1.0.1 → [Updates: 1.2.4]

utils/src/constants.rs (2)

• sigstore/cosign 3.1.3
• JasonN3/build-container-installer 1.4.0 → [Updates: 1.5.0]

utils/src/constants.rs (2)

• ghcr.io/blue-build/base-images/fedora-base latest@sha256:716aad1947dc397bd9019e26b84f1d02472c249be5e6190588c61561d3d1f3cd → [Updates: latest]
• quay.io/skopeo/stable latest@sha256:c0ee1f4edca5c01cb8d5611124f92f3cc47196ecab68aee5d0f90834e00574d5 → [Updates: latest]

rust-toolchain (1)

rust-toolchain.toml (1)

• rust stable