Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Update actions/cache action to v6
• Update actions/checkout action to v7
• Update actions/setup-go action to v7
• Update actions/setup-node action to v7
• Update codecov/codecov-action action to v7
• 🔐 Create all pending approval PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update astral-sh/setup-uv action to v9

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update codecov/codecov-action digest to fb8b358
• Update docker/metadata-action digest to dc80280
• Update docker/setup-buildx-action digest to bb05f3f
• Update postgres:18-alpine Docker digest to 9a8afca
• Update redis:alpine Docker digest to 8096655
• Update all non-major dependencies (actions/attest, actions/cache, actions/checkout, actions/setup-go, actions/setup-node, astral-sh/setup-uv, codecov/codecov-action, docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action, pnpm/action-setup, rharkor/caching-for-turbo, zizmorcore/zizmor-action, zizmorcore/zizmor-pre-commit)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (18)

.github/workflows/build-docker-image.yml (14)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.2.0, v4]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• docker/metadata-action v6@030e881283bb7a6894de51c315a6bfe6a94e05cf → [Updates: v6.2.0, v6]
• docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7.3.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/attest v4.1.0@59d89421af93a897026c735860bf21b6eb4f7b26 → [Updates: v4.2.0]
• actions/attest v4.1.0@59d89421af93a897026c735860bf21b6eb4f7b26 → [Updates: v4.2.0]
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.2.0, v4]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• docker/metadata-action v6@030e881283bb7a6894de51c315a6bfe6a94e05cf → [Updates: v6.2.0, v6]
• actions/attest v4.1.0@59d89421af93a897026c735860bf21b6eb4f7b26 → [Updates: v4.2.0]
• actions/attest v4.1.0@59d89421af93a897026c735860bf21b6eb4f7b26 → [Updates: v4.2.0]

.github/workflows/ci.yml

.github/workflows/combine-coverage.yml (6)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• dorny/test-reporter v3@a43b3a5f7366b97d083190328d2c652e1a8b6aa2
• geekyeggo/delete-artifact v6@176a747ab7e287e3ff4787bf8a148716375ca118

.github/workflows/functional-tests.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]

.github/workflows/issues-diagram.yml

.github/workflows/label-sync-local.yml

.github/workflows/labels-sync.yml (1)

• EndBug/label-sync v2.3.3@52074158190acb45f3077f9099fea818aa43f97a

.github/workflows/lint.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• rharkor/caching-for-turbo v2.3.14@56219402aacc0d06b650d898c222996dbc1191ec → [Updates: v2.5.0]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]

.github/workflows/validate-plugins.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]

.github/workflows/zizmor-audit.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• zizmorcore/zizmor-action v0.5.3@b1d7e1fb5de872772f31590499237e7cce841e8e → [Updates: v0.6.0]

actions/codecov/action.yml (2)

• codecov/codecov-action v6@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 → [Updates: v6.0.2, v7.0.0, v6]
• codecov/codecov-action v6@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 → [Updates: v6.0.2, v7.0.0, v6]

actions/install-daemon/action.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]

actions/login-to-registries/action.yml (2)

• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4.4.0]
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4.4.0]

actions/run-in-background/action.yml

actions/setup-go/action.yml (1)

• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]

actions/setup-node/action.yml (4)

• pnpm/action-setup v6.0.6@91ab88e2619ed1f46221f0ba42d1492c02baf788 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• node 24

actions/setup-python/action.yml (1)

• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.3.2, v9.0.0]

actions/upload-test-results/action.yml (3)

• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

pre-commit (1)

.pre-commit-config.yaml (1)

• zizmorcore/zizmor-pre-commit v1.24.1 → [Updates: v1.27.0]

regex (1)

.github/workflows/functional-tests.yml (2)

• redis alpine@sha256:d146f83b1e0f02fc27c26a50cee39338c736674c5959db84363e6ae3cd9e02d2 → [Updates: alpine]
• postgres 18-alpine@sha256:96d56f7f57c6aacd1fcb908bc83b345ec5f83231ee486dd66a1baadce274db88 → [Updates: 18-alpine]

renovate-config (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository