Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update github-actions pinned digests (major) (actions/attest-build-provenance, actions/checkout, actions/download-artifact, actions/setup-node, actions/setup-python, actions/upload-artifact)
• chore(deps): update postgres docker tag to v18
• chore(deps): update valkey/valkey docker tag to v9
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• fix(deps): pin dependencies (node, postgres, valkey/valkey, yaml)
• chore(deps): update github-actions pinned digests (actions/attest-build-provenance, actions/checkout, actions/create-github-app-token, actions/download-artifact, actions/setup-java, actions/setup-node, actions/setup-python, actions/upload-artifact, cachix/install-nix-action, docker/build-push-action, docker/login-action, docker/setup-buildx-action, docker/setup-qemu-action, googleapis/release-please-action, gradle/actions, pnpm/action-setup, re-actors/alls-green)
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Detected Dependencies

docker-compose (1)

actions/compose-system-test-stack/fixtures/compose.stack.example.yml (4)

• system-test-app local
• system-test-worker local
• postgres 17-alpine → [Updates: 18-alpine, 17-alpine]
• valkey/valkey 7-alpine → [Updates: 9-alpine, 7-alpine]

github-actions (34)

.github/workflows/actions-budget-watchdog.yml

.github/workflows/add-to-project.yml

.github/workflows/ci.yml (9)

• actions/checkout v7 → [Updates: v7.0.1]
• actions/checkout v7 → [Updates: v7.0.1]
• actions/checkout v7 → [Updates: v7.0.1]
• actions/setup-python v6 → [Updates: v6.3.0, v7]
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.4.0, v7.0.1]
• actions/setup-node v4 → [Updates: v4.4.0, v7]
• re-actors/alls-green release/v1 → [Updates: release/v1]
• python 3.13
• node 20

.github/workflows/container-publish.yml (5)

• actions/checkout v7 → [Updates: v7.0.1]
• docker/setup-qemu-action v4 → [Updates: v4.2.0]
• docker/setup-buildx-action v4 → [Updates: v4.3.0]
• docker/login-action v4 → [Updates: v4.6.0]
• docker/build-push-action v7 → [Updates: v7.3.0]

.github/workflows/crac-train.yml (4)

• actions/checkout v7 → [Updates: v7.0.1]
• docker/setup-buildx-action v4 → [Updates: v4.3.0]
• docker/build-push-action v7 → [Updates: v7.3.0]
• actions/upload-artifact v7 → [Updates: v7.0.1]

.github/workflows/deploy-artifact.yml (5)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.4.0, v7.0.1]
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.4.0, v7.0.1]
• actions/download-artifact v4.2.1@95815c38cf2ff2164869cbab79da8d1f422bc89e → [Updates: v4.3.0, v8.0.1]
• actions/attest-build-provenance v2.2.3@c074443f1aee8d4aeeae555aebba3282517141b2 → [Updates: v2.4.0, v4.2.2]
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 → [Updates: v4.6.2, v7.0.1]

.github/workflows/deploy-bundle.yml

.github/workflows/deploy-config-render-drift.yml (2)

• actions/checkout v7 → [Updates: v7.0.1]
• actions/checkout v7 → [Updates: v7.0.1]

.github/workflows/deploy-sources-render.yml

.github/workflows/deploy-validate.yml (4)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.4.0, v7.0.1]
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.4.0, v7.0.1]
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 → [Updates: v4.6.2, v7.0.1]
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 → [Updates: v4.6.2, v7.0.1]

.github/workflows/docker-image-ci.yml (3)

• actions/checkout v7 → [Updates: v7.0.1]
• docker/setup-buildx-action v4 → [Updates: v4.3.0]
• docker/build-push-action v7 → [Updates: v7.3.0]

.github/workflows/flux-render-validate.yml (2)

• actions/checkout v7 → [Updates: v7.0.1]
• actions/checkout v7 → [Updates: v7.0.1]

.github/workflows/gitops-ci.yml (2)

• actions/checkout v7 → [Updates: v7.0.1]
• actions/checkout v7 → [Updates: v7.0.1]

.github/workflows/jvm-ci.yml (4)

• actions/checkout v7 → [Updates: v7.0.1]
• actions/checkout v7 → [Updates: v7.0.1]
• actions/checkout v7 → [Updates: v7.0.1]
• actions/checkout v7 → [Updates: v7.0.1]

.github/workflows/leak-scan.yml (3)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.4.0, v7.0.1]
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.4.0, v7.0.1]
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 → [Updates: v4.6.2, v7.0.1]

.github/workflows/migration-guard.yml (2)

• actions/checkout v7 → [Updates: v7.0.1]
• actions/checkout v7 → [Updates: v7.0.1]

.github/workflows/nix-ci.yml (2)

• actions/checkout v7 → [Updates: v7.0.1]
• cachix/install-nix-action v31 → [Updates: v31.11.1]

.github/workflows/node-ci.yml (2)

• actions/checkout v7 → [Updates: v7.0.1]
• actions/checkout v7 → [Updates: v7.0.1]

.github/workflows/platform-config-validate.yml (2)

• actions/checkout v7 → [Updates: v7.0.1]
• actions/checkout v7 → [Updates: v7.0.1]

.github/workflows/production-canary.yml (1)

• actions/checkout v7 → [Updates: v7.0.1]

.github/workflows/publish-api-clients.yml (4)

• actions/checkout v6 → [Updates: v6.1.0, v7]
• actions/checkout v6 → [Updates: v6.1.0, v7]
• actions/setup-node v6 → [Updates: v6.5.0, v7]
• node ${{ inputs.node-version }}

.github/workflows/python-ci.yml (3)

• actions/checkout v7 → [Updates: v7.0.1]
• actions/setup-python v6 → [Updates: v6.3.0, v7]
• python ${{ inputs.python-version }}

.github/workflows/release.yml (5)

• actions/create-github-app-token v3 → [Updates: v3.2.0]
• googleapis/release-please-action v5 → [Updates: v5.0.0]
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.4.0, v7.0.1]
• actions/setup-node v4 → [Updates: v4.4.0, v7]
• node 20

.github/workflows/repository-hygiene-guard.yml

.github/workflows/repository-hygiene-sweep.yml

.github/workflows/tofu-ci.yml (1)

• actions/checkout v7 → [Updates: v7.0.1]

actions/deploy-bundle/action.yml (2)

• actions/setup-node v6 → [Updates: v6.5.0, v7]
• node 24

actions/deploy-config-render-drift/action.yml (2)

• actions/setup-node v6 → [Updates: v6.5.0, v7]
• node 24

actions/deploy-sources-render/action.yml (2)

• actions/setup-node v6 → [Updates: v6.5.0, v7]
• node 24

actions/flux-render-validate/action.yml (1)

• actions/checkout v6 → [Updates: v6.1.0, v7]

actions/platform-config-validate/action.yml (2)

• actions/setup-node v6 → [Updates: v6.5.0, v7]
• node 24

actions/prepare-ci-host/action.yml (1)

• actions/download-artifact v8 → [Updates: v8.0.1]

actions/setup-java-gradle/action.yml (2)

• actions/setup-java v5 → [Updates: v5.7.0, v6]
• gradle/actions v6 → [Updates: v6.3.0]

actions/setup-node/action.yml (3)

• pnpm/action-setup v6 → [Updates: v6.0.10]
• actions/setup-node v6 → [Updates: v6.5.0, v7]
• node ${{ inputs.node-version }}

npm (1)

tools/deploy-check/package.json (2)

• yaml ^2.5.0 → [Updates: 2.9.0]
• node >=20 → [Updates: v26.8.1]

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository