Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Pending Branch Automerge

These updates await pending status checks before automerging. Click on a checkbox to abort the branch automerge, and create a PR instead.

• Update konstruktoid/alpine:latest Docker digest to 603f6eb

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update docker/setup-qemu-action action to v3.6.0

Detected dependencies

dockerfile

Dockerfile

• konstruktoid/alpine latest@sha256:87666f60449c7ea4dc12c935f6724d5c2a9d87c315f56f5721f2df19c13fa227

github-actions

.github/workflows/containerbuild.yml

• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• docker/setup-qemu-action v3.5.0@5964de0df58d5ad28b04d8fe2e6b80ad47105b91
• docker/setup-buildx-action v3.10.0@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2
• docker/build-push-action v6.15.0@471d1dc4e07e5cdedd4c2171150001c434f0b7a4

.github/workflows/dependency-review.yml

• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/dependency-review-action v4.5.0@3b139cfc5fae8b618d3eae3675e383bb1769c019

.github/workflows/scorecards.yml

• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.1@f49aabe0b5af0936a0987cfb85d86b75731b0186
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
• github/codeql-action v3.28.10@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d

.github/workflows/slsa.yml

• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
• slsa-framework/slsa-github-generator v2.1.0
• actions/download-artifact v4.1.9@cc203385981b70ca67e1cc392babf9cc229d5806
• softprops/action-gh-release v2.2.1@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda

pip_requirements

requirements.txt

• black ==25.1.0
• ruff ==0.9.9

---

• Check this box to trigger a request for Renovate to run again on this repository