Skip to content

Dependency Dashboard #102

Open
Open

Description

@ccf-release-bot

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

  • ⚠️ WARN: Package lookup failures

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

  • chore(deps): update actions/checkout action to v7
  • chore(deps): update dependency helm to v4
  • 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

  • chore(deps): update postgres docker tag to v18

Warning

Renovate failed to look up the following dependencies: Failed to look up github-digest package other-org/workflows: no-result.

Files affected: internal/bump/testdata/workflows.golden/.github/workflows/release.yml, internal/bump/testdata/workflows/.github/workflows/release.yml


Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

  • fix(deps): pin dependencies (actions/checkout, actions/create-github-app-token, actions/setup-node, chart-testing, github.com/google/go-containerregistry, github.com/hashicorp/go-plugin, go.yaml.in/yaml/v3, golang.org/x/crypto, golang.org/x/mod, golangci/golangci-lint, google.golang.org/grpc, google/osv-scanner-action, goreleaser/goreleaser, goreleaser/goreleaser-action, helm, helm/chart-testing-action, renovatebot/github-action)

Detected Dependencies

docker-compose (2)
docker-compose.yml
smoke/compose.yaml (1)
  • postgres 17.5 → [Updates: 17.11, 18.6]
dockerfile (2)
internal/bump/testdata/action.golden/Dockerfile (1)
  • alpine 3.20 → [Updates: 3.24]
internal/bump/testdata/action/Dockerfile (2)
  • alpine 3.20 → [Updates: 3.24]
  • alpine 3.20 → [Updates: 3.24]
github-actions (46)
.github/workflows/attention-digest.yml (3)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1 → [Updates: v3.3.0]
.github/workflows/build.yml (3)
  • actions/checkout v4 → [Updates: v7, v4]
  • actions/checkout v4 → [Updates: v7, v4]
  • actions/checkout v4 → [Updates: v7, v4]
.github/workflows/ccf-bump-merge.yml (3)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1 → [Updates: v3.3.0]
.github/workflows/ccf-bump-sync.yml (5)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1 → [Updates: v3.3.0]
.github/workflows/ci-action.yml (2)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
.github/workflows/ci-common.yml (4)
  • amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50
  • google/osv-scanner-action v2.6.0@a345acffa64b0eaede81a3d9aae6141214d9c8fc → [Updates: v2.7.0]
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
.github/workflows/ci-go-lib.yml (11)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • golangci/golangci-lint-action v9.3.0@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 → [Updates: v7.3.0]
  • golangci/golangci-lint v2.11.4 → [Updates: v2.15.0]
  • goreleaser/goreleaser v2.18.2 → [Updates: v2.18.3]
.github/workflows/ci-go-plugin.yml (11)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • golangci/golangci-lint-action v9.3.0@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 → [Updates: v7.3.0]
  • golangci/golangci-lint v2.11.4 → [Updates: v2.15.0]
  • goreleaser/goreleaser v2.18.2 → [Updates: v2.18.3]
.github/workflows/ci-go-service.yml (9)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • golangci/golangci-lint-action v9.3.0@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • golangci/golangci-lint v2.11.4 → [Updates: v2.15.0]
.github/workflows/ci-helm.yml (9)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
  • helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f → [Updates: v2.9.0]
  • helm v3.22.0 → [Updates: v3.22.1, v4.3.1]
  • helm v3.22.0 → [Updates: v3.22.1, v4.3.1]
  • chart-testing 3.14.0 → [Updates: 3.15.0]
.github/workflows/ci-policies.yml (5)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • open-policy-agent/setup-opa v2.4.0@b2b258e089860efaadaaf71bf6e3aecb4a3eeff1
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • open-policy-agent/setup-regal v2.0.0@761188c3b435761fa254beca508a44875619648f
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
.github/workflows/ci-ui.yml (2)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020 → [Updates: v7.1.0]
.github/workflows/ci.yml (6)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
.github/workflows/cut-prerelease.yml (3)
  • actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1 → [Updates: v3.3.0]
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
.github/workflows/notify-failure.yml (7)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
  • actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
  • actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
  • actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
  • actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
.github/workflows/plugin-health.yml (5)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1 → [Updates: v3.3.0]
.github/workflows/plugin-probe.yml (2)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
.github/workflows/preview.yml (11)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 → [Updates: v7.3.0]
  • docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f → [Updates: v4.7.0]
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • open-policy-agent/setup-opa v2.4.0@b2b258e089860efaadaaf71bf6e3aecb4a3eeff1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f → [Updates: v4.7.0]
  • goreleaser/goreleaser v2.18.2 → [Updates: v2.18.3]
.github/workflows/publish-image.yml (8)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • docker/setup-buildx-action v4.4.1@f87e5991a6d7451dcb8d9637bfbc97413f497069
  • docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f → [Updates: v4.7.0]
  • docker/build-push-action v7.4.0@c3c9e263c25d99ce0380d002d59b67737d91b0dc
  • actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9
  • actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333
  • docker/setup-buildx-action v4.4.1@f87e5991a6d7451dcb8d9637bfbc97413f497069
  • docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f → [Updates: v4.7.0]
.github/workflows/release-action.yml (2)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
.github/workflows/release-checks.yml (3)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
.github/workflows/release-finished.yml (1)
  • actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1 → [Updates: v3.3.0]
.github/workflows/release-go-image.yml (2)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
.github/workflows/release-go-lib.yml (3)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 → [Updates: v7.3.0]
.github/workflows/release-go-plugin.yml (6)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 → [Updates: v7.3.0]
  • docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f → [Updates: v4.7.0]
.github/workflows/release-helm.yml (4)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
.github/workflows/release-please.yml (4)
  • actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1 → [Updates: v3.3.0]
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • googleapis/release-please-action v5.0.0@45996ed1f6d02564a971a2fa1b5860e934307cf7
.github/workflows/release-policies.yml (6)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • open-policy-agent/setup-opa v2.4.0@b2b258e089860efaadaaf71bf6e3aecb4a3eeff1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f → [Updates: v4.7.0]
.github/workflows/renovate.yml (6)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1 → [Updates: v3.3.0]
  • renovatebot/github-action v46.3.7@230ce922b08968d0a4f6f70f295601daff09ef1d → [Updates: v46.3.8]
  • actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1 → [Updates: v3.3.0]
  • ghcr.io/renovatebot/renovate 44.145.1 → [Updates: 44.181.7]
.github/workflows/repo-settings.yml (3)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1 → [Updates: v3.3.0]
.github/workflows/slack-preview.yml (2)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
.github/workflows/stack-smoke.yml (1)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
.github/workflows/train.yml (4)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1 → [Updates: v3.3.0]
  • actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1 → [Updates: v3.3.0]
.github/workflows/vuln-summary.yml (3)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1 → [Updates: v3.3.0]
internal/bump/testdata/plugin.golden/.github/workflows/ci.yaml
internal/bump/testdata/plugin.golden/.github/workflows/release.yml
internal/bump/testdata/plugin/.github/workflows/ci.yaml
internal/bump/testdata/plugin/.github/workflows/release.yml
internal/bump/testdata/policies.golden/.github/workflows/preview.yml
internal/bump/testdata/policies.golden/.github/workflows/release.yml
internal/bump/testdata/policies/.github/workflows/preview.yml
internal/bump/testdata/policies/.github/workflows/release.yml
internal/bump/testdata/workflows.golden/.github/workflows/ci.yml
internal/bump/testdata/workflows.golden/.github/workflows/release.yml (1)
  • other-org/workflows main
internal/bump/testdata/workflows/.github/workflows/ci.yml
internal/bump/testdata/workflows/.github/workflows/release.yml (1)
  • other-org/workflows main
gomod (2)
go.mod (9)
  • go 1.26.1
  • go.yaml.in/yaml/v3 v3.0.4 → [Updates: v3.0.5]
  • github.com/google/go-containerregistry v0.21.2 → [Updates: v0.22.1]
  • github.com/hashicorp/go-hclog v1.6.3
  • github.com/hashicorp/go-plugin v1.7.0 → [Updates: v1.8.0]
  • golang.org/x/crypto v0.57.0 → [Updates: v0.58.0]
  • golang.org/x/mod v0.41.0 → [Updates: v0.42.0]
  • google.golang.org/grpc v1.83.2 → [Updates: v1.84.0]
  • github.com/docker/distribution v2.8.3+incompatible
internal/bump/testdata/service/go.mod (1)
  • go 1.26.1
helm-values (5)
internal/bump/testdata/helm.golden/charts/ccf-app/values.yaml (2)
  • alpine 3.21 → [Updates: 3.24]
  • ghcr.io/dexidp/dex v2.44.0 → [Updates: v2.46.1]
internal/bump/testdata/helm.golden/charts/mock-app/values.yaml
internal/bump/testdata/helm/charts/ccf-app/values.yaml (2)
  • alpine 3.21 → [Updates: 3.24]
  • ghcr.io/dexidp/dex v2.44.0 → [Updates: v2.46.1]
internal/bump/testdata/helm/charts/mock-agent/values.yaml
internal/bump/testdata/helm/charts/mock-app/values.yaml

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions