Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: No docker auth found - returning

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update all non-major dependencies (alpine/helm, anchore/sbom-action, docker/login-action, docker/setup-buildx-action, github/codeql-action, helm, zizmorcore/zizmor-action)

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• Update actions/setup-go action to v7
• Update actions/setup-node action to v7
• Update actions/setup-python action to v7
• Update arduino/setup-task action to v3
• Update dependency helm to v4

Detected Dependencies

dockerfile (1)

infra/helm-unittest/Dockerfile (1)

• alpine/helm 4.2.3@sha256:b97ba4f9b27fe7af16ee3d37e6815783c9d4a51289b6240a9024ec471611ae9b → [Updates: 4.2.4]

github-actions (24)

.github/workflows/infra-helm-unittest.yml (4)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c → [Updates: v4]
• docker/login-action v4@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4]
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a

.github/workflows/job-auto-labeler.yml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• mauroalderete/action-assign-labels v1@671a4ca2da0f900464c58b8b5540a1e07133e915

.github/workflows/job-chart-ocm.yml (2)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/job-chart-version-update.yml (1)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1

.github/workflows/job-check-helm-chart-docs.yml (2)

• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611 → [Updates: v3.0.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/job-create-version.yml (3)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• ietf-tools/semver-action v1@c90370b2958652d71c06a3484129a4d423a6d8a8

.github/workflows/job-docker-build-push.yml (7)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• docker/login-action v4@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c → [Updates: v4]
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• ncipollo/release-action v1.21.0@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd

.github/workflows/job-docker-build.yml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c → [Updates: v4]
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a

.github/workflows/job-golang-lint.yml (4)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611 → [Updates: v3.0.0]
• golangci/golangci-lint-action v9@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a

.github/workflows/job-golang-test-source.yml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611 → [Updates: v3.0.0]

.github/workflows/job-image-ocm.yml (2)

• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

.github/workflows/job-node-publish.yml (4)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v6@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

.github/workflows/job-node-test.yml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v6@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/job-ocm-version-update.yml (1)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1

.github/workflows/job-ocm.yml (2)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/job-ossf-scorecard.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• github/codeql-action v4.37.3@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 → [Updates: v4.37.9]

.github/workflows/job-release-chart.yml (4)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• bsord/helm-push v4.2.0@51f937208fed71540ab5ec5215cf9b3ecae9c7b7
• bsord/helm-push v4.2.0@51f937208fed71540ab5ec5215cf9b3ecae9c7b7
• ncipollo/release-action v1.21.0@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd

.github/workflows/job-sbom.yml (4)

• docker/login-action v4@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4]
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610 → [Updates: v0.24.2]
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610 → [Updates: v0.24.2]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/job-scan-kubernetes-vulnerability.yml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• piraces/kube-score-ga v0.1.3@0eb83dcf2274cf7018257df01feb5d2f43f7cb59

.github/workflows/job-test-chart.yml (9)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• actions/setup-python v6@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7]
• helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
• ghcr.io/platform-mesh/infra/helm-unittest latest
• helm v3.21.3 → [Updates: v3.21.4, v4.2.4]
• python 3.x
• chart-testing v3.14.0

.github/workflows/job-trivy-image.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.37.3@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 → [Updates: v4.37.9]

.github/workflows/job-trivy-sbom.yml (2)

• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 → [Updates: v4]

.github/workflows/job-zizmor.yml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• zizmorcore/zizmor-action v0.6.1@6fc4b006235f201fdab3722e17240ab420d580e5 → [Updates: v0.6.3]

.github/workflows/security-zulip-report.yml (1)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository