Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update konstruktoid/alpine:latest Docker digest to 6fc26a0
• Update dependency ruff to v0.13.3
• Update github/codeql-action action to v3.30.6
• Update softprops/action-gh-release action to v2.3.4
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

Dockerfile

• konstruktoid/alpine latest@sha256:c7d2766fc0cda904306d05ad120c52c73e92d724dd01aeb0ab94e2060c8def5a

github-actions

.github/workflows/containerbuild.yml

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83

.github/workflows/dependency-review.yml

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/dependency-review-action v4.8.0@56339e523c0409420f6c2c9a2f4292bbb3c07dd3

.github/workflows/scorecards.yml

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• github/codeql-action v3.30.5@3599b3baa15b485a2e49ef411a7a4bb2452e7f93

.github/workflows/slsa.yml

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• slsa-framework/slsa-github-generator v2.1.0
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0
• softprops/action-gh-release v2.3.3@6cbd405e2c4e67a21c47fa9e383d020e4e28b836

pip_requirements

requirements.txt

• black ==25.9.0
• ruff ==0.13.2
• ty ==0.0.1a21

---

• Check this box to trigger a request for Renovate to run again on this repository