Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update aws-actions/amazon-ecr-login action to v2.1.6
• chore(deps): update paulhatch/semantic-version action to v6.0.3
• chore(deps): update softprops/action-gh-release action to v3.0.2
• chore(deps): update sonarsource/sonarqube-scan-action action to v8.2.1
• chore(deps): update actions/cache action to v5.1.0
• chore(deps): update actions/setup-go action to v6.5.0
• chore(deps): update actions/setup-python action to v6.3.0
• chore(deps): update astral-sh/setup-uv action to v8.3.2
• chore(deps): update aws-actions/configure-aws-credentials action to v6.2.3
• chore(deps): update docker/build-push-action action to v7.3.0
• chore(deps): update docker/login-action action to v4.5.1
• chore(deps): update docker/metadata-action action to v6.2.0
• chore(deps): update docker/setup-buildx-action action to v4.2.0
• chore(deps): update securego/gosec action to v2.28.0
• chore(deps): update terraform-linters/setup-tflint action to v6.3.0
• chore(deps): update actions/cache action to v6
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-go action to v7
• chore(deps): update actions/setup-python action to v7
• chore(deps): update astral-sh/setup-uv action to v9
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/attest action to v4.2.0
• chore(deps): update actions/checkout action to v6.1.0
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (13)

.github/workflows/release.yaml (6)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• elastiflow/gha-reusable v0
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• elastiflow/gha-reusable v0
• softprops/action-gh-release v3.0.0@b4309332981a82ec1c5618f44dd2e27cc8bfbfda → [Updates: v3.0.2]

.github/workflows/reusable_docker_build_multiarch.yaml (27)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• aws-actions/configure-aws-credentials v6.1.0@ec61189d14ec14c8efccab744f656cffd0e33f37 → [Updates: v6.2.3]
• aws-actions/amazon-ecr-login v2.1.4@19d944daaa35f0fa1d3f7f8af1d3f2e5de25c5b7 → [Updates: v2.1.6]
• google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.5.1]
• elastiflow/gha-reusable v0
• aws-actions/configure-aws-credentials v6.1.0@ec61189d14ec14c8efccab744f656cffd0e33f37 → [Updates: v6.2.3]
• aws-actions/amazon-ecr-login v2.1.4@19d944daaa35f0fa1d3f7f8af1d3f2e5de25c5b7 → [Updates: v2.1.6]
• elastiflow/gha-reusable v0
• google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.5.1]
• elastiflow/gha-reusable v0
• elastiflow/gha-reusable v0
• elastiflow/gha-reusable v0
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• aws-actions/configure-aws-credentials v6.1.0@ec61189d14ec14c8efccab744f656cffd0e33f37 → [Updates: v6.2.3]
• aws-actions/amazon-ecr-login v2.1.4@19d944daaa35f0fa1d3f7f8af1d3f2e5de25c5b7 → [Updates: v2.1.6]
• actions/attest v4.1.0@59d89421af93a897026c735860bf21b6eb4f7b26 → [Updates: v4.2.0]
• google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.5.1]
• actions/attest v4.1.0@59d89421af93a897026c735860bf21b6eb4f7b26 → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.5.1]
• actions/attest v4.1.0@59d89421af93a897026c735860bf21b6eb4f7b26 → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.5.1]
• actions/attest v4.1.0@59d89421af93a897026c735860bf21b6eb4f7b26 → [Updates: v4.2.0]

.github/workflows/reusable_go_checks.yml (14)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• securego/gosec v2.27.1@9e6a9843d7a4a6e3e9a8539b02612c8a4aa3f889 → [Updates: v2.28.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]

.github/workflows/reusable_goreleaser.yml (7)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• google-github-actions/setup-gcloud v3.0.1@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• softprops/action-gh-release v3.0.0@b4309332981a82ec1c5618f44dd2e27cc8bfbfda → [Updates: v3.0.2]

.github/workflows/reusable_mandatory_checks.yml (1)

• elastiflow/gha-reusable v0

.github/workflows/reusable_pr_checks.yml (2)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• oven/bun 1.3.14-alpine@sha256:5acc90a93e91ff07bf72aa90a7c9f0fa189765aec90b47bdbf2152d2196383c0

.github/workflows/reusable_python_checks.yml (7)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• astral-sh/setup-uv v8.2.0@fac544c07dec837d0ccb6301d7b5580bf5edae39 → [Updates: v8.3.2, v9.0.0]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6.3.0, v7.0.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• astral-sh/setup-uv v8.2.0@fac544c07dec837d0ccb6301d7b5580bf5edae39 → [Updates: v8.3.2, v9.0.0]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6.3.0, v7.0.0]
• SonarSource/sonarqube-scan-action v8.2.0@713881670b6b3676cda39549040e2d88c70d582e → [Updates: v8.2.1]

.github/workflows/reusable_release_tag.yml (5)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• paulhatch/semantic-version v6.0.2@9f72830310d5ed81233b641ee59253644cd8a8fc → [Updates: v6.0.3]
• anothrNick/github-tag-action 1.75.0@4ed44965e0db8dab2b466a16da04aec3cc312fd8
• anothrNick/github-tag-action 1.75.0@4ed44965e0db8dab2b466a16da04aec3cc312fd8
• anothrNick/github-tag-action 1.75.0@4ed44965e0db8dab2b466a16da04aec3cc312fd8

.github/workflows/reusable_renovate_checks.yml (1)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]

.github/workflows/reusable_sec_checks.yml (1)

• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25

.github/workflows/reusable_tf_checks.yml (9)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• hashicorp/setup-terraform v4.0.1@dfe3c3f87815947d99a8997f908cb6525fc44e9e
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• terraform-linters/setup-tflint v6.2.2@b480b8fcdaa6f2c577f8e4fa799e89e756bb7c93 → [Updates: v6.3.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• terraform-docs/gh-actions v1.4.1@6de6da0cefcc6b4b7a5cbea4d79d97060733093c

actions/docker-build-push/action.yml (5)

• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.5.1]
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• actions/attest v4.1.0@59d89421af93a897026c735860bf21b6eb4f7b26 → [Updates: v4.2.0]

actions/update-gitops/action.yml (2)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]

pep621 (1)

pyproject.toml (5)

• python >=3.11
• pytest >=9.0.3
• pytest-cov >=7.1.0
• pytest-mock >=3.14.1
• ruff >=0.15.8

---

• Check this box to trigger a request for Renovate to run again on this repository