[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
JorisJonkers-dev/github-workflows	workflow	minor	v0.14.1 → v0.17.0	v0.18.0
JorisJonkers-dev/github-workflows	workflow	minor	v0.16.1 → v0.17.0	v0.18.0

---

Release Notes

JorisJonkers-dev/github-workflows (JorisJonkers-dev/github-workflows)

v0.17.0

Compare Source

Features

• add-to-project: add a manual recovery hatch (#​111) (744261c)
• add-to-project: add an org-wide backfill scope (#​124) (592d6df), closes #​122
• hygiene: add an advisory org-wide repository hygiene sweep (#​125) (345d473), closes #​123

Bug Fixes

• leak-scan: exclude the action's own checkout from the deny-list scan (#​109) (5dfb39d)
• leak-scan: repair four rules that could never fire (#​127) (300e8af)
• renovate: drop the deprecated match keys that break config validation (#​112) (d9027a8)

v0.16.1

Compare Source

Bug Fixes

• deploy-check: write an explicit boolean for provenance in the contract (#​104) (10b9b90)

v0.16.0

Compare Source

Features

• deploy-check: let a workload with no HTTP surface opt out of health (#​100) (2733754)

v0.15.2

Compare Source

Bug Fixes

• reusable: pin the self-checkout to a literal instead of an empty context (#​98) (7d19693)

v0.15.1

Compare Source

Bug Fixes

• deploy-check: resolve the context to a file instead of a package root (#​95) (c15011b)

v0.15.0

Compare Source

Features

• deploy-check: replace the duplicated render script with one tested package (#​94) (7fbbe54)

Bug Fixes

• deploy-artifact: report an unsupported raw-manifests guard honestly (#​92) (e59679c)

v0.14.2

Compare Source

Bug Fixes

• deploy-preview: render each fragment to a file so previews stop failing (#​90) (1a8c957)

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • "after 02:00 and before 06:00 every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Deploy Preview — agents-api

Environments: production
Context ref: ghcr.io/jorisjonkers-dev/cluster-deploy-context-public@sha256:95dc39fc695694c8fb4b0c538d7fe13038d407c7302c3725c98f0496c6a83499
Workloads: 1 | Routes: 1 | Gatus endpoints: 1

Image refs

• agents-api: ghcr.io/jorisjonkers-dev/agents-api/agents-api@sha256:0000000000000000000000000000000000000000000000000000000000000000

SC-11 Readiness Scorecard

	Check	Status	Detail
✅	schema_pinned	pass
✅	context_pinned	pass
✅	no_latest_images	pass
✅	health_declared	pass
✅	route_owner_authmode_declared	pass
✅	rollback_retention_acknowledged	pass
✅	no_raw_secrets	pass
➖	stateful_policy_declared	not_applicable	deployment declares no stateful workloads
➖	raw_manifests_guarded	not_applicable	no workload enables rawManifests
➖	npm_signatures_verified	not_applicable	provenance is only evaluated when publishing an artifact

pass = ready · fail = blocks deployment · not_applicable = check does not apply

➖ 3 check(s) not applicable: stateful_policy_declared, raw_manifests_guarded, npm_signatures_verified

---

Updated by deploy-check on push to this PR.