Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency sigstore/cosign to v1.13.6
• Update dependency sigstore/cosign to v3
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update alpine Docker tag to v3.24
• Update docker/dockerfile Docker tag to v1.26.0
• Update sigstore/cosign-installer action to v3.10.1
• Update actions/checkout action to v7
• Update docker/build-push-action action to v7
• Update docker/login-action action to v4
• Update docker/metadata-action action to v6
• Update docker/setup-buildx-action action to v4
• Update docker/setup-qemu-action action to v4
• Update sigstore/cosign-installer action to v4
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (4)

• docker/dockerfile 1.5.2 → [Updates: 1.26.0]
• alpine 3.19 → [Updates: 3.24]
• alpine 3.19 → [Updates: 3.24]
• alpine 3.19 → [Updates: 3.24]

github-actions (1)

.github/workflows/docker-image.yml (8)

• actions/checkout v3 → [Updates: v7]
• sigstore/cosign-installer v3.0.2 → [Updates: v3.10.1, v4.1.2]
• docker/metadata-action v4 → [Updates: v6]
• docker/setup-qemu-action v2 → [Updates: v4]
• docker/setup-buildx-action v2 → [Updates: v4]
• docker/login-action v2 → [Updates: v4]
• docker/build-push-action v4 → [Updates: v7]
• sigstore/cosign v1.13.1 → [Updates: v1.13.6, v3.1.3]

---

• Check this box to trigger a request for Renovate to run again on this repository