Dependency Dashboard

[laurigates-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/github-script action to v9
• chore(deps): update actions/setup-node action to v7
• chore(deps): update actions/setup-python action to v7
• chore(deps): update dependency node to v24
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/metadata-action action to v6
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): update googleapis/release-please-action action to v5
• chore(deps): update oven-sh/setup-bun action to v2
• chore(deps): update peter-evans/create-pull-request action to v8
• 🔐 Create all pending approval PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package aquasecurity/trivy-action).

Files affected: .github/workflows/reusable-container-release.yml

---

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• chore(deps): pin dependencies (actions/checkout, actions/download-artifact, actions/github-script, actions/setup-node, actions/setup-python, actions/upload-artifact, anthropics/claude-code-action, node, oven-sh/setup-bun, python)
• chore(deps): update all non-major dependencies (actions/checkout, anomalyco/opencode, aquasecurity/trivy-action, googleapis/release-please-action, peter-evans/create-pull-request, renovatebot/github-action, sigstore/cosign-installer)

Detected Dependencies

github-actions (23)

.github/workflows/claude.yml (2)

• actions/checkout v4 → [Updates: v4.4.0, v7]
• anthropics/claude-code-action v1 → [Updates: v1.0.183]

.github/workflows/reusable-a11y-aria.yml (2)

• actions/checkout v4 → [Updates: v4.4.0, v7]
• anthropics/claude-code-action v1 → [Updates: v1.0.183]

.github/workflows/reusable-a11y-wcag.yml (2)

• actions/checkout v4 → [Updates: v4.4.0, v7]
• anthropics/claude-code-action v1 → [Updates: v1.0.183]

.github/workflows/reusable-auto-fix.yml (2)

• actions/checkout v6 → [Updates: v6.1.0, v7]
• anthropics/claude-code-action v1 → [Updates: v1.0.183]

.github/workflows/reusable-auto-merge-image-updater.yml (2)

• actions/checkout v6 → [Updates: v6.1.0, v7]
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1

.github/workflows/reusable-auto-resolve-conflicts.yml (1)

• actions/checkout v4 → [Updates: v4.4.0, v7]

.github/workflows/reusable-changelog-review.yml (5)

• actions/checkout v6 → [Updates: v6.1.0, v7]
• actions/upload-artifact v4 → [Updates: v4.6.2, v7]
• actions/checkout v6 → [Updates: v6.1.0, v7]
• actions/download-artifact v4 → [Updates: v4.3.0, v8]
• anthropics/claude-code-action v1 → [Updates: v1.0.183]

.github/workflows/reusable-claude-review.yml (2)

• actions/checkout v6 → [Updates: v6.1.0, v7]
• anthropics/claude-code-action v1 → [Updates: v1.0.183]

.github/workflows/reusable-claude.yml (3)

• actions/checkout v6 → [Updates: v6.1.0, v7]
• anthropics/claude-code-action v1 → [Updates: v1.0.183]
• actions/github-script v7 → [Updates: v7.1.0, v9]

.github/workflows/reusable-container-build.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.2.0]
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.6.0]
• docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7.3.0]

.github/workflows/reusable-container-release.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.2.0]
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.6.0]
• docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051 → [Updates: v6.2.0]
• docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7.3.0]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad → [Updates: v4.1.2]
• aquasecurity/trivy-action 0.34.0@c1824fd6edce30d7ab345a9989de00bbd46ef284 → [Updates: v0.36.0]

.github/workflows/reusable-enforce-conventional-commits.yml (1)

• actions/github-script v8 → [Updates: v8.0.0, v9]

.github/workflows/reusable-npm-publish.yml (3)

• actions/checkout v6 → [Updates: v6.1.0, v7]
• oven-sh/setup-bun v2 → [Updates: v2.2.0]
• actions/setup-node v4 → [Updates: v4.4.0, v7]

.github/workflows/reusable-opencode.yml (2)

• actions/checkout v6 → [Updates: v6.1.0, v7]
• anomalyco/opencode v1.18.7@02981844b88aed33f06f1527da6c58d137975069 → [Updates: v1.18.10]

.github/workflows/reusable-quality-async.yml (2)

• actions/checkout v4 → [Updates: v4.4.0, v7]
• anthropics/claude-code-action v1 → [Updates: v1.0.183]

.github/workflows/reusable-quality-code-smell.yml (2)

• actions/checkout v4 → [Updates: v4.4.0, v7]
• anthropics/claude-code-action v1 → [Updates: v1.0.183]

.github/workflows/reusable-quality-typescript.yml (2)

• actions/checkout v4 → [Updates: v4.4.0, v7]
• anthropics/claude-code-action v1 → [Updates: v1.0.183]

.github/workflows/reusable-release-please.yml (2)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• googleapis/release-please-action v4.4.0 → [Updates: v4.4.1, v5.0.0]

.github/workflows/reusable-renovate.yml (3)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6 → [Updates: v6.1.0, v7]
• renovatebot/github-action v46.1.16 → [Updates: v46.2.0]

.github/workflows/reusable-security-deps.yml (8)

• actions/checkout v4 → [Updates: v4.4.0, v7]
• actions/setup-node v4 → [Updates: v4.4.0, v7]
• oven-sh/setup-bun v1 → [Updates: v1.2.2, v2]
• actions/setup-python v5 → [Updates: v5.6.0, v7]
• dtolnay/rust-toolchain stable
• anthropics/claude-code-action v1 → [Updates: v1.0.183]
• node 20 → [Updates: 20.20.2, 24]
• python 3.x → [Updates: 3.14.6]

.github/workflows/reusable-security-owasp.yml (2)

• actions/checkout v4 → [Updates: v4.4.0, v7]
• anthropics/claude-code-action v1 → [Updates: v1.0.183]

.github/workflows/reusable-security-secrets.yml (2)

• actions/checkout v4 → [Updates: v4.4.0, v7]
• anthropics/claude-code-action v1 → [Updates: v1.0.183]

.github/workflows/reusable-sync-ai-rules.yml (4)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.4.0, v7.0.1]
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v7.0.0]
• peter-evans/create-pull-request v7.0.8@271a8d0340265f705b14b6d32b9829c1cb33d45e → [Updates: v7.0.11, v8.1.1]
• node 22 → [Updates: 22.23.2, 24]