Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): update docker.io/library/python:3.13.1-slim docker digest to 031ebf3
• chore(deps): update all non-major dependencies (docker.io/library/python, gradle)
• chore(deps): update github-actions (actions/create-github-app-token, actions/setup-dotnet, actions/setup-java, actions/setup-node, docker/build-push-action, docker/setup-buildx-action, docker/setup-qemu-action, github/codeql-action, gradle/actions, marocchino/sticky-pull-request-comment, oxsecurity/megalinter, sigstore/cosign-installer, step-security/harden-runner)

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update gcr.io/distroless/python3-debian12:nonroot docker digest to 66f3e24
• chore(deps): update lycheeverse/lychee-action action to v2

Detected dependencies

dockerfile

Dockerfile

• docker.io/library/python 3.13.1-slim@sha256:eeb2d1afadeea506d22aa7263e7bbd1b1c8bc8a58841367f0079703f420a94c8
• gcr.io/distroless/python3-debian12 nonroot@sha256:97c3cd02198dcda447a6c2e2ee06df3d26491e44ef5640c430dc13206d7159c7

github-actions

.github/workflows/ci.yaml

• docker/setup-buildx-action v3.8.0@6524bf65af31da8d45b59e8c27de4bd072b392f5
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• ubuntu 24.04

.github/workflows/scorecard.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• github/codeql-action v3.28.1@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c

.github/workflows/standard-build.yaml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• docker/setup-buildx-action v3.8.0@6524bf65af31da8d45b59e8c27de4bd072b392f5
• docker/setup-qemu-action v3.3.0@53851d14592bedcffcf25ea515637cff71ef929a
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• docker/metadata-action v5@369eb591f429131d6889c46b94e711f089e6ca96
• docker/metadata-action v5.6.1@369eb591f429131d6889c46b94e711f089e6ca96
• docker/build-push-action v6.11.0@b32b51a8eda65d6793cd0494a773d4f6bcef32dc
• rlespinasse/slugify-value v1.4.0@a4879db1eb3db9bbee01dca36f98a8236c2b8239
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• docker/build-push-action v6.11.0@b32b51a8eda65d6793cd0494a773d4f6bcef32dc
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• marocchino/sticky-pull-request-comment v2.9.0@331f8f5b4215f0445d3c07b4967662a32a2d3e31
• slsa-framework/slsa-github-generator v2.0.0
• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• sigstore/cosign-installer v3.7.0@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• sigstore/cosign-installer v3.7.0@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
• sigstore/cosign-installer v3.7.0@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
• softprops/action-gh-release v2.2.1@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/standard-lint.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• oxsecurity/megalinter v8.3.0@1fc052d03c7a43c78fe0fee19c9d648b749e0c01
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/dependency-review-action v4.5.0@3b139cfc5fae8b618d3eae3675e383bb1769c019
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4.2.2@0bdd871935719febd78681f197cd39af5b6e16a6
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• sigstore/cosign-installer v3.7.0@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-java v4.6.0@7a6d8a8234af8eb26422e24e3006232cccaa061b
• actions/setup-dotnet v4.2.0@87b7050bc53ea08284295505d98d2aa94301e852
• github/codeql-action v3.28.1@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c
• github/codeql-action v3.28.1@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c
• github/codeql-action v3.28.1@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/standard-release.yaml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/create-github-app-token v1.11.1@c1a285145b9d317df6ced56c09f525b5c2b6f755
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4.1.0@39370e3970a6d050c480ffad4ff0ed4d3fdee5af
• cycjimmy/semantic-release-action v4.1.1@b1b432f13acb7768e0c8efdec416d363a57546f2
• ubuntu 24.04

.github/workflows/standard-schedule.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57
• lycheeverse/lychee-action v1.10.0@2b973e86fc7b1f6b36a93795fe2c9c6ae1118621
• micalevisk/last-issue-action v2.3.0@0d40124cc99ac8601c2516007f0c98ef3d27537b
• peter-evans/create-issue-from-file v5.0.1@e8ef132d6df98ed982188e460ebb3b5d4ef3a9cd
• aquasecurity/trivy-action 0.29.0@18f2510ee396bbf400402947b394f2dd8c87dbb0
• github/codeql-action v3.28.1@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c
• ubuntu 24.04
• ubuntu 24.04

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 8.12

---

• Check this box to trigger a request for Renovate to run again on this repository