This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Awaiting Schedule The following updates are awaiting their schedule. To get an update now, click on a checkbox below. - [ ] <!-- unschedule-branch=renovate/github-actions -->chore(deps): update github actions (`hadolint/hadolint-action`, `ossf/scorecard-action`, `renovatebot/github-action`) - [ ] <!-- unschedule-branch=renovate/major-github-actions -->chore(deps): update github actions (major) (`actions/create-github-app-token`, `amannn/action-semantic-pull-request`, `docker/setup-qemu-action`, `github/codeql-action`, `pnpm/action-setup`, `renovatebot/github-action`, `sigstore/cosign-installer`) - [ ] <!-- create-all-awaiting-schedule-prs -->🔐 **Create all awaiting schedule PRs at once** 🔐 --- > [!WARNING] > Renovate failed to look up the following dependencies: `Failed to look up github-tags package aquasecurity/trivy-action: no-result`. > > Files affected: `.github/workflows/reusable-docker-build.yml` --- ## Detected Dependencies <details><summary>github-actions (18)</summary> <blockquote> <details><summary>.github/workflows/renovate.yml (3)</summary> - `actions/create-github-app-token v2` → [Updates: `v3`] - `actions/checkout v6` - `renovatebot/github-action v40.3.1` → [Updates: `v40.3.6`, `v46.1.12`] </details> <details><summary>.github/workflows/reusable-ci-astro.yml (10)</summary> - `actions/checkout v6` - `pnpm/action-setup v5` → [Updates: `v6`] - `actions/setup-node v6` - `actions/upload-artifact v7` - `actions/checkout v6` - `pnpm/action-setup v5` → [Updates: `v6`] - `actions/setup-node v6` - `actions/checkout v6` - `actions/download-artifact v8` - `actions/setup-node v6` </details> <details><summary>.github/workflows/reusable-ci-go.yml (11)</summary> - `actions/checkout v6` - `actions/checkout v6` - `actions/setup-go v6` - `golangci/golangci-lint-action v9` - `actions/checkout v6` - `actions/setup-go v6` - `codecov/codecov-action v6` - `actions/checkout v6` - `actions/setup-go v6` - `actions/checkout v6` - `actions/setup-go v6` </details> <details><summary>.github/workflows/reusable-ci-node.yml (7)</summary> - `actions/checkout v6` - `pnpm/action-setup v5` → [Updates: `v6`] - `actions/setup-node v6` - `codecov/codecov-action v6` - `actions/checkout v6` - `pnpm/action-setup v5` → [Updates: `v6`] - `actions/setup-node v6` </details> <details><summary>.github/workflows/reusable-ci-rust.yml (14)</summary> - `actions/checkout v6` - `dtolnay/rust-toolchain master` - `Swatinem/rust-cache v2` - `actions/checkout v6` - `dtolnay/rust-toolchain master` - `Swatinem/rust-cache v2` - `taiki-e/install-action v2` - `actions/checkout v6` - `crate-ci/typos master` - `actions/checkout v6` - `dtolnay/rust-toolchain master` - `Swatinem/rust-cache v2` - `taiki-e/install-action v2` - `codecov/codecov-action v6` </details> <details><summary>.github/workflows/reusable-docker-build.yml (13)</summary> - `actions/checkout v6` - `hadolint/hadolint-action v3.1.0` → [Updates: `v3.3.0`] - `actions/checkout v6` - `docker/setup-qemu-action v3` → [Updates: `v4`] - `docker/setup-buildx-action v4` - `docker/login-action v4` - `docker/build-push-action v7` - `aquasecurity/trivy-action 0.35.0` - `github/codeql-action v3` → [Updates: `v4`] - `sigstore/cosign-installer v3` → [Updates: `v4.1.1`] - `docker/login-action v4` - `actions/attest-build-provenance v4` - `anchore/sbom-action v0` </details> <details><summary>.github/workflows/reusable-release-rust.yml (9)</summary> - `actions/checkout v6` - `dtolnay/rust-toolchain stable` - `Swatinem/rust-cache v2` - `actions/upload-artifact v7` - `actions/checkout v6` - `actions/download-artifact v8` - `actions/attest-build-provenance v4` - `actions/checkout v6` - `dtolnay/rust-toolchain stable` </details> <details><summary>.github/workflows/reusable-security-scan.yml (6)</summary> - `actions/checkout v6` - `github/codeql-action v3` → [Updates: `v4`] - `actions/checkout v6` - `github/codeql-action v3` → [Updates: `v4`] - `actions/checkout v6` - `actions/upload-artifact v7` </details> <details><summary>workflow-templates/ci-astro.yml (15)</summary> - `actions/checkout v6` - `pnpm/action-setup v5` → [Updates: `v6`] - `actions/setup-node v6` - `actions/upload-artifact v7` - `actions/checkout v6` - `pnpm/action-setup v5` → [Updates: `v6`] - `actions/setup-node v6` - `actions/checkout v6` - `actions/download-artifact v8` - `actions/setup-node v6` - `pnpm 10` - `node 24` - `pnpm 10` - `node 24` - `node 24` </details> <details><summary>workflow-templates/ci-go.yml (10)</summary> - `actions/checkout v6` - `actions/setup-go v6` - `golangci/golangci-lint-action v9` - `actions/checkout v6` - `actions/setup-go v6` - `codecov/codecov-action v6` - `actions/checkout v6` - `actions/setup-go v6` - `actions/checkout v6` - `actions/setup-go v6` </details> <details><summary>workflow-templates/ci-node.yml (11)</summary> - `actions/checkout v6` - `pnpm/action-setup v5` → [Updates: `v6`] - `actions/setup-node v6` - `codecov/codecov-action v6` - `actions/checkout v6` - `pnpm/action-setup v5` → [Updates: `v6`] - `actions/setup-node v6` - `pnpm 10` - `node 24` - `pnpm 10` - `node 24` </details> <details><summary>workflow-templates/ci-rust.yml (14)</summary> - `actions/checkout v6` - `dtolnay/rust-toolchain stable` - `Swatinem/rust-cache v2` - `actions/checkout v6` - `dtolnay/rust-toolchain stable` - `Swatinem/rust-cache v2` - `taiki-e/install-action v2` - `actions/checkout v6` - `crate-ci/typos master` - `actions/checkout v6` - `dtolnay/rust-toolchain stable` - `Swatinem/rust-cache v2` - `taiki-e/install-action v2` - `codecov/codecov-action v6` </details> <details><summary>workflow-templates/codeql.yml (4)</summary> - `actions/checkout v6` - `github/codeql-action v3` → [Updates: `v4`] - `github/codeql-action v3` → [Updates: `v4`] - `github/codeql-action v3` → [Updates: `v4`] </details> <details><summary>workflow-templates/docker-publish.yml (1)</summary> - `FerrLabs/.github main` </details> <details><summary>workflow-templates/pr-title.yml (1)</summary> - `amannn/action-semantic-pull-request v5` → [Updates: `v6`] </details> <details><summary>workflow-templates/release.yml (2)</summary> - `actions/checkout v6` - `FerrLabs/FerrFlow v4` </details> <details><summary>workflow-templates/scorecard.yml (4)</summary> - `actions/checkout v6` - `ossf/scorecard-action v2.4.0` → [Updates: `v2.4.3`] - `actions/upload-artifact v7` - `github/codeql-action v3` → [Updates: `v4`] </details> <details><summary>workflow-templates/security-scan.yml (1)</summary> - `FerrLabs/.github main` </details> </blockquote> </details> <details><summary>renovate-config (1)</summary> <blockquote> <details><summary>renovate.json</summary> </details> </blockquote> </details>
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
Awaiting Schedule
The following updates are awaiting their schedule. To get an update now, click on a checkbox below.
hadolint/hadolint-action,ossf/scorecard-action,renovatebot/github-action)actions/create-github-app-token,amannn/action-semantic-pull-request,docker/setup-qemu-action,github/codeql-action,pnpm/action-setup,renovatebot/github-action,sigstore/cosign-installer)Warning
Renovate failed to look up the following dependencies:
Failed to look up github-tags package aquasecurity/trivy-action: no-result.Files affected:
.github/workflows/reusable-docker-build.ymlDetected Dependencies
github-actions (18)
renovate-config (1)