Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update trufflesecurity/trufflehog action to v3.96.0
• Update actions/cache action to v6
• Update actions/checkout action to v7
• Update actions/github-script action to v9
• Update actions/setup-dotnet action to v6
• Update actions/setup-go action to v7
• Update actions/setup-java action to v5
• Update actions/setup-node action to v7
• Update actions/setup-python action to v7
• Update anchore/scan-action action to v7
• Update aws-actions/configure-aws-credentials action to v6
• Update azure/setup-helm action to v5
• Update cypress-io/github-action action to v7
• Update dependency helm to v4
• Update dependency node to v24
• Update DependencyTrack/gh-upload-sbom action to v4
• Update devops-infra/action-pull-request action to v1
• Update docker/build-push-action action to v7
• Update docker/login-action action to v4
• Update docker/metadata-action action to v6
• Update docker/setup-buildx-action action to v4
• Update docker/setup-qemu-action action to v4
• Update dorny/test-reporter action to v3
• Update EndBug/add-and-commit action to v10
• Update GitHub Artifact Actions (major) (actions/download-artifact, actions/upload-artifact)
• Update google-github-actions/auth action to v3
• Update google-github-actions/deploy-cloudrun action to v3
• Update gruntwork-io/terragrunt-action action to v3
• Update hashicorp/vault-action action to v4
• Update mdgreenwald/mozilla-sops-action action to v2
• Update oras-project/setup-oras action to v2
• Update peter-evans/create-or-update-comment action to v5
• Update sigstore/cosign-installer action to v4
• Update slackapi/slack-github-action action to v4
• Update SonicGarden/rspec-report-action action to v8
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up github-digest package signalwire/build-deb-${{matrix.os_name}}-packages-action: no-result.

Files affected: _bkp/.github/workflows/ci-deb-packages.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update fitbeard/action-trigger-awx action to v24.6.3
• Update google-github-actions/auth action to v2.1.13
• Update gruntwork-io/terragrunt-action action to v2.1.8
• Update actions/setup-dotnet action to v4.3.1
• Update aws-actions/configure-aws-credentials action to v4.3.1
• Update d-lebed/rubocop-run-action action to v0.14.0
• Update dependency helm to v3.21.3
• Update DependencyTrack/gh-upload-sbom action to v3.1.0
• Update devops-infra/action-pull-request action to v0.6.1
• Update 1password/install-cli-action action to v4
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (69)

_bkp/.github/actions/anchore/action.yml (2)

• anchore/scan-action v5 → [Updates: v7]
• sett-and-hive/sarif-to-issue-action v1

_bkp/.github/actions/deptrack/action.yml (2)

• CycloneDX/gh-node-module-generatebom master
• DependencyTrack/gh-upload-sbom v3.0.0 → [Updates: v3.1.0, v4.1.0]

_bkp/.github/actions/gcloud-cloudrun/action.yml (1)

• google-github-actions/deploy-cloudrun v2 → [Updates: v3]

_bkp/.github/actions/helm-remote/action.yml (2)

• WyriHaximus/github-action-helm3 v4
• WyriHaximus/github-action-helm3 v4

_bkp/.github/actions/kubectl-statics/action.yml (1)

• steebchen/kubectl v2.1.1

_bkp/.github/actions/notify-ci-result/action.yml (6)

• actions/upload-artifact v4 → [Updates: v7]
• thollander/actions-comment-pull-request v3
• signalwire/actions-template main
• actions/upload-artifact v4 → [Updates: v7]
• thollander/actions-comment-pull-request v3
• signalwire/actions-template main

_bkp/.github/actions/support-files/action.yml (1)

• actions/checkout master

_bkp/.github/actions/unit-test-dotnet/action.yml (2)

• actions/setup-dotnet v4 → [Updates: v6]
• dorny/test-reporter v1 → [Updates: v3]

_bkp/.github/workflows/ci-deb-packages.yml (4)

• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• signalwire/build-deb-${{matrix.os_name}}-packages-action main
• actions/upload-artifact v4 → [Updates: v7]

.github/actions/ansible/action.yml (1)

• fitbeard/action-trigger-awx v24.6.1 → [Updates: v24.6.3]

.github/actions/approval/action.yml (2)

• tibdex/github-app-token v2
• trstringer/manual-approval v1

.github/actions/docker-build-artifacts/action.yml (2)

• docker/setup-qemu-action v3 → [Updates: v4]
• actions/upload-artifact v6 → [Updates: v7]

.github/actions/docker-compose/action.yml (1)

• docker/login-action v3 → [Updates: v4]

.github/actions/docker-tag-clone/action.yml (1)

• julb/action-copy-docker-tag v1

.github/actions/docker/action.yml (7)

• docker/setup-buildx-action v3 → [Updates: v4]
• docker/metadata-action v5 → [Updates: v6]
• docker/login-action v3 → [Updates: v4]
• docker/build-push-action v6 → [Updates: v7]
• docker/build-push-action v6 → [Updates: v7]
• docker/build-push-action v6 → [Updates: v7]
• docker/build-push-action v6 → [Updates: v7]

.github/actions/gcloud-auth/action.yml (1)

• google-github-actions/auth v2.1.6 → [Updates: v2.1.13, v3.0.0]

.github/actions/git_add_pr/action.yml (2)

• EndBug/add-and-commit v9 → [Updates: v10]
• devops-infra/action-pull-request v0.5.5 → [Updates: v0.6.1, v1.4.0]

.github/actions/grype-scan/action.yml (1)

• anchore/scan-action v7.4.0

.github/actions/helm-local/action.yml (3)

• azure/setup-helm v4 → [Updates: v5]
• actions/cache v4 → [Updates: v6]
• helm 3.9.0 → [Updates: 3.21.3, 4.2.3]

.github/actions/helm-test/action.yml (3)

• azure/setup-helm v4 → [Updates: v5]
• actions/cache v4 → [Updates: v6]
• helm 3.9.0 → [Updates: 3.21.3, 4.2.3]

.github/actions/meta-repo/action.yml (1)

• actions/checkout v4 → [Updates: v7]

.github/actions/slack/action.yml (1)

• slackapi/slack-github-action v1.27.1 → [Updates: v4.0.0]

.github/actions/sonarqube/action.yml (4)

• actions/setup-java v4 → [Updates: v5]
• actions/cache v4 → [Updates: v6]
• sonarsource/sonarqube-scan-action master
• sonarsource/sonarqube-quality-gate-action master

.github/actions/teleport-local-copy/action.yml (4)

• teleport-actions/setup v1
• teleport-actions/auth v2
• teleport-actions/auth-k8s v2
• teleport-actions/auth-application main

.github/actions/teleport/action.yml (4)

• teleport-actions/setup v1
• teleport-actions/auth v2
• teleport-actions/auth-k8s v2
• teleport-actions/auth-application main

.github/actions/test-configs/action.yml (1)

• actions/cache v4 → [Updates: v6]

.github/actions/test-dotnet/action.yml (3)

• actions/setup-dotnet v4.1.0 → [Updates: v4.3.1, v6.0.0]
• xom9ikk/dotenv v2
• dorny/test-reporter v1 → [Updates: v3]

.github/actions/test-go/action.yml (4)

• actions/setup-go v5 → [Updates: v7]
• actions/setup-go v5 → [Updates: v7]
• dorny/test-reporter v2 → [Updates: v3]
• golangci/golangci-lint-action v9

.github/actions/test-javascript/action.yml (2)

• actions/setup-node v4 → [Updates: v7]
• dorny/test-reporter v1 → [Updates: v3]

.github/actions/test-python/action.yml (1)

• actions/setup-python v5 → [Updates: v7]

.github/actions/test-ruby/action.yml (7)

• actions/setup-node v4 → [Updates: v7]
• ruby/setup-ruby v1
• actions/cache v4 → [Updates: v6]
• reviewdog/action-setup v1
• d-lebed/rubocop-run-action v0.12.0 → [Updates: v0.14.0]
• SonicGarden/rspec-report-action v5 → [Updates: v8]
• node 16 → [Updates: 24]

.github/actions/trivy-fs-scan/action.yml (1)

• aquasecurity/trivy-action v0.36.0

.github/actions/trivy/action.yml (7)

• aquasecurity/trivy-action master
• juliangruber/read-file-action v1
• dacbd/create-issue-action v2
• aquasecurity/trivy-action master
• juliangruber/read-file-action v1
• peter-evans/create-or-update-comment v4 → [Updates: v5]
• dacbd/create-issue-action v2

.github/actions/trufflehog-scan/action.yml (1)

• trufflesecurity/trufflehog v3.95.8@00155c9dc586f34d189adc83d3ac2698c2ec551f → [Updates: v3.96.0]

.github/actions/update-gitops/action.yml (1)

• actions/checkout v4 → [Updates: v7]

.github/actions/vault-secrets/action.yml (3)

• frostebite/File-To-Base64 master
• frostebite/File-To-Base64 master
• hashicorp/vault-action v3 → [Updates: v4]

.github/workflows/cd-ansible.yml (2)

• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]

.github/workflows/cd-centos-packages.yml (2)

• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]

.github/workflows/cd-cloud-run.yml (2)

• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]

.github/workflows/cd-deb-syncchangelog.yml (3)

• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/download-artifact v4.3.0 → [Updates: v8.0.1]

.github/workflows/cd-gitops.yml (2)

• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]

.github/workflows/cd-kubernetes-deploy.yml (2)

• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]

.github/workflows/cd-libs-metadata.yml (3)

• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/download-artifact v4 → [Updates: v8]

.github/workflows/cd-retag.yml (2)

• actions/checkout v4 → [Updates: v7]
• cloudposse/github-action-matrix-outputs-read main

.github/workflows/cd-rpm-packages.yml (7)

• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/download-artifact v4 → [Updates: v8]
• ttd2089/secret-file-action main
• ttd2089/secret-file-action main
• filipstefansson/uuid-action v1
• signalwire/sign-rpm-packages-action main

.github/workflows/cd-scp.yml (2)

• actions/checkout v4 → [Updates: v7]
• actions/download-artifact v4 → [Updates: v8]

.github/workflows/cd-swarm-deploy.yml (2)

• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]

.github/workflows/ci-build.yml (6)

• actions/checkout v4 → [Updates: v7]
• actions/download-artifact v4 → [Updates: v8]
• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• cloudposse/github-action-matrix-outputs-write main

.github/workflows/ci-check.yml (14)

• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/setup-go v5 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]

.github/workflows/ci-deb-packages-v2.yml (4)

• actions/checkout v4 → [Updates: v7]
• docker/setup-qemu-action v3 → [Updates: v4]
• actions/upload-artifact v4 → [Updates: v7]
• actions/upload-artifact v4 → [Updates: v7]

.github/workflows/ci-libs-metadata-v2.yml (2)

• actions/download-artifact v4 → [Updates: v8]
• actions/upload-artifact v4 → [Updates: v7]

.github/workflows/ci-rpm-packages.yml (3)

• actions/checkout v4 → [Updates: v7]
• signalwire/build-rpm-packages-action main
• actions/upload-artifact v4 → [Updates: v7]

.github/workflows/ci-tests.yml (6)

• actions/checkout v4 → [Updates: v7]
• actions/setup-node v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/cache v4 → [Updates: v6]
• cypress-io/github-action v6 → [Updates: v7.4.1]

.github/workflows/ci.yml (2)

• signalwire/actions-template main
• signalwire/actions-template main

.github/workflows/cicd-docker-build-and-distribute.yml (4)

• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• actions/upload-artifact v6 → [Updates: v7]

.github/workflows/container-build-sign.yml (11)

• actions/checkout v7
• docker/setup-buildx-action v4
• google-github-actions/auth v3
• google-github-actions/setup-gcloud v3.0.1
• actions/checkout v7
• google-github-actions/auth v3
• google-github-actions/setup-gcloud v3.0.1
• aquasecurity/setup-trivy v0.3.1
• sigstore/cosign-installer v3 → [Updates: v4.1.2]
• anchore/sbom-action v0
• actions/upload-artifact v7

.github/workflows/docker-bp.yml (5)

• docker/metadata-action v5 → [Updates: v6]
• docker/login-action v3 → [Updates: v4]
• docker/build-push-action v6 → [Updates: v7]
• actions/github-script v7 → [Updates: v9]
• docker/build-push-action v6 → [Updates: v7]

.github/workflows/gitops-values-bump.yml (3)

• actions/checkout v7
• actions/create-github-app-token v3
• actions/checkout v7

.github/workflows/go-test-with-services.yml (2)

• actions/checkout v7
• actions/checkout v7

.github/workflows/helm-local.yml (3)

• azure/setup-helm v4 → [Updates: v5]
• actions/checkout v4 → [Updates: v7]
• WyriHaximus/github-action-helm3 v4

.github/workflows/helm-oci-push.yml (5)

• actions/checkout v7
• google-github-actions/auth v3
• google-github-actions/setup-gcloud v3.0.1
• azure/setup-helm v5
• sigstore/cosign-installer v3 → [Updates: v4.1.2]

.github/workflows/helm-remote.yml (5)

• actions/checkout v4 → [Updates: v7]
• azure/setup-helm v4 → [Updates: v5]
• WyriHaximus/github-action-helm3 v4
• WyriHaximus/github-action-helm3 v4
• helm v3.8.1 → [Updates: v3.21.3, v4.2.3]

.github/workflows/iac-secrets.yml (6)

• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• google-github-actions/auth v2.1.7 → [Updates: v2.1.13, v3.0.0]
• mdgreenwald/mozilla-sops-action v1.6.0 → [Updates: v2.1.1]
• opentofu/setup-opentofu main
• actions/github-script v7 → [Updates: v9]

.github/workflows/iac.yml (12)

• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• aws-actions/configure-aws-credentials v4.0.2 → [Updates: v4.3.1, v6.2.3]
• google-github-actions/auth v2.1.7 → [Updates: v2.1.13, v3.0.0]
• 1password/install-cli-action v1 → [Updates: v4]
• mdgreenwald/mozilla-sops-action v1.6.0 → [Updates: v2.1.1]
• gruntwork-io/terragrunt-action v2.1.4 → [Updates: v2.1.8, v3.4.1]
• gruntwork-io/terragrunt-action v2.1.4 → [Updates: v2.1.8, v3.4.1]
• gruntwork-io/terragrunt-action v2.1.4 → [Updates: v2.1.8, v3.4.1]
• tibdex/github-app-token v2
• trstringer/manual-approval v1
• gruntwork-io/terragrunt-action v2.1.4 → [Updates: v2.1.8, v3.4.1]

.github/workflows/meta-repo-content.yml (1)

• actions/checkout v4 → [Updates: v7]

.github/workflows/release-please.yml (2)

• actions/create-github-app-token v3
• googleapis/release-please-action v5

.github/workflows/reusable-cypress-stack.yml (9)

• actions/checkout v7
• actions/setup-go v6 → [Updates: v7]
• actions/cache v6.1.0
• actions/setup-node v6 → [Updates: v7]
• actions/cache v6.1.0
• actions/cache v6
• actions/upload-artifact v4 → [Updates: v7]
• actions/upload-artifact v4 → [Updates: v7]
• node 24

.github/workflows/test-vault.yml (2)

• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]

.github/workflows/trivy-cache-update.yml (2)

• oras-project/setup-oras v1 → [Updates: v2]
• actions/cache v4 → [Updates: v6]

---

• Check this box to trigger a request for Renovate to run again on this repository