Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update all non-major dependencies (actions/checkout, actions/setup-dotnet, actions/setup-java, actions/setup-node, aquasecurity/trivy, astral-sh/setup-uv, docker.io/library/python, docker/build-push-action, docker/login-action, github/codeql-action, gradle/actions, oxsecurity/megalinter, step-security/harden-runner, zizmor)

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• docker.io/library/python 3.14.2-slim@sha256:1a3c6dbfd2173971abba880c3cc2ec4643690901f6ad6742d0827bae6cefc925 → [Updates: 3.14.3-slim]

github-actions (4)

.github/workflows/ci.yaml (4)

• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131
• ubuntu 24.04

.github/workflows/standard-build.yaml (34)

• step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76 → [Updates: v2.14.2]
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/setup-qemu-action v3.7.0@c7c53464625b32c7a7e944ae62b3e17d2b600130
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef → [Updates: v3.7.0]
• docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051
• docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v6.19.2]
• rlespinasse/slugify-value v1.4.0@a4879db1eb3db9bbee01dca36f98a8236c2b8239
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v6.19.2]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f
• marocchino/sticky-pull-request-comment v2.9.4@773744901bac0e8cbb5a0dc842800d45e9b2b405
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f
• slsa-framework/slsa-github-generator v2.1.0
• step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76 → [Updates: v2.14.2]
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef → [Updates: v3.7.0]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad
• step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76 → [Updates: v2.14.2]
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef → [Updates: v3.7.0]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad
• step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76 → [Updates: v2.14.2]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b
• step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76 → [Updates: v2.14.2]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/standard-lint.yaml (26)

• step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76 → [Updates: v2.14.2]
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• oxsecurity/megalinter v9.2.0@55a59b24a441e0e1943080d4a512d827710d4a9d → [Updates: v9.3.0]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f
• github/codeql-action v4.31.9@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 → [Updates: v4.32.3]
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• actions/dependency-review-action v4.8.2@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• gradle/actions v5.0.0@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 → [Updates: v5.0.1]
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• actions/setup-java v5.1.0@f2beeb24e141e01a676f977032f5a29d81c9e27e → [Updates: v5.2.0]
• actions/setup-dotnet v5.0.1@2016bd2012dba4e32de620c46fe006a3ac9f0602 → [Updates: v5.1.0]
• github/codeql-action v4.31.9@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 → [Updates: v4.32.3]
• github/codeql-action v4.31.9@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 → [Updates: v4.32.3]
• github/codeql-action v4.31.9@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 → [Updates: v4.32.3]
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• astral-sh/setup-uv v7.1.6@681c641aba71e4a1c380be3ab5e12ad51f415867 → [Updates: v7.3.0]
• github/codeql-action v4.31.9@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 → [Updates: v4.32.3]
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/standard-release.yaml (7)

• step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76 → [Updates: v2.14.2]
• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• actions/setup-node v6.1.0@395ad3262231945c25e8478fd5baf05154b1d79f → [Updates: v6.2.0]
• cycjimmy/semantic-release-action v6.0.0@b12c8f6015dc215fe37bc154d4ad456dd3833c90
• ubuntu 24.04
• node 24

regex (2)

.github/workflows/standard-build.yaml (1)

• aquasecurity/trivy 0.68.2 → [Updates: 0.69.1]

.github/workflows/standard-lint.yaml (1)

• zizmor 1.19.0 → [Updates: 1.22.0]

---

• Check this box to trigger a request for Renovate to run again on this repository