This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/3lvia/core-github-actions-templates). ## Pending Status Checks The following updates await pending status checks. To force their creation now, click on a checkbox below. - [ ] <!-- approvePr-branch=renovate/sigstore-cosign-2.x -->Update dependency sigstore/cosign to v2.6.5 - [ ] <!-- approvePr-branch=renovate/major-dotnet-monorepo -->Update mcr.microsoft.com/dotnet/runtime-deps Docker tag to v10 ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] <!-- rebase-branch=renovate/danielpalme-reportgenerator-github-action-5.x -->[Update danielpalme/ReportGenerator-GitHub-Action action to v5.5.11](../pull/357) - [ ] <!-- rebase-branch=renovate/github-codeql-action-4.x -->[Update github/codeql-action action to v4.37.5](../pull/359) - [ ] <!-- rebase-branch=renovate/zizmorcore-zizmor-action-0.x -->[Update zizmorcore/zizmor-action action to v0.6.2](../pull/361) - [ ] <!-- rebase-branch=renovate/actions-setup-java-5.x -->[Update actions/setup-java action to v5.7.0](../pull/360) - [ ] <!-- rebase-branch=renovate/docker-login-action-4.x -->[Update docker/login-action action to v4.6.0](../pull/358) - [ ] <!-- rebase-all-open-prs -->**Click on this checkbox to rebase all open PRs at once** ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] <!-- recreate-branch=renovate/3lvia-gh-actions-docs-1.x -->[Update 3lvia/gh-actions-docs action to v1.2.5](../pull/307) - [ ] <!-- recreate-branch=renovate/python-3.x -->[Update dependency python to 3.14](../pull/308) - [ ] <!-- recreate-branch=renovate/sigstore-cosign-3.x -->[Update dependency sigstore/cosign to v3](../pull/356) - [ ] <!-- recreate-branch=renovate/sigstore-cosign-installer-4.x -->[Update sigstore/cosign-installer action to v4](../pull/309) ## Detected Dependencies <details><summary>dockerfile (1)</summary> <blockquote> <details><summary>arc/Dockerfile (2)</summary> - `mcr.microsoft.com/dotnet/runtime-deps 8.0-noble` → [Updates: `10.0-noble`] - `mcr.microsoft.com/dotnet/runtime-deps 8.0-noble` → [Updates: `10.0-noble`] </details> </blockquote> </details> <details><summary>github-actions (30)</summary> <blockquote> <details><summary>.github/workflows/build-arc-image.yaml (4)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `docker/login-action v4.5.1@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7` → [Updates: `v4.6.0`] - `docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c` - `docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a` </details> <details><summary>.github/workflows/check-format.yaml (3)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `node 24` </details> <details><summary>.github/workflows/example-build-deploy-dockerfile-google.yaml (8)</summary> - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` </details> <details><summary>.github/workflows/example-build-deploy-dockerfile.yaml (8)</summary> - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` </details> <details><summary>.github/workflows/example-build-deploy-dotnet-google.yaml (14)</summary> - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` </details> <details><summary>.github/workflows/example-build-deploy-dotnet-iss.yaml</summary> </details> <details><summary>.github/workflows/example-build-deploy-dotnet.yaml (14)</summary> - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` </details> <details><summary>.github/workflows/example-build-deploy-go-google.yaml (10)</summary> - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` </details> <details><summary>.github/workflows/example-build-deploy-go.yaml (10)</summary> - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` </details> <details><summary>.github/workflows/example-build-deploy-python-google.yaml (10)</summary> - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` </details> <details><summary>.github/workflows/example-build-deploy-python.yaml (10)</summary> - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` </details> <details><summary>.github/workflows/generate-docs.yaml (2)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `3lvia/gh-actions-docs v1@2db29362f0d6d92052f6fa49b71743af5f0c11f8` → [Updates: `v1.2.5`] </details> <details><summary>.github/workflows/test-actions.yaml (21)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` </details> <details><summary>.github/workflows/update-starter-workflows.yaml (4)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3` </details> <details><summary>.github/workflows/verify-action-pinning.yml (2)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` </details> <details><summary>.github/workflows/zizmor.yaml (2)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `zizmorcore/zizmor-action v0.6.1@6fc4b006235f201fdab3722e17240ab420d580e5` → [Updates: `v0.6.2`] </details> <details><summary>analyze/action.yml (4)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e` - `github/codeql-action v4.37.3@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81` → [Updates: `v4.37.5`] - `github/codeql-action v4.37.3@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81` → [Updates: `v4.37.5`] </details> <details><summary>build/action.yml (6)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `docker/login-action v4.5.1@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7` → [Updates: `v4.6.0`] - `sigstore/cosign-installer v3.10.1@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5` → [Updates: `v4.1.2`] - `github/codeql-action v4.37.3@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81` → [Updates: `v4.37.5`] - `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3` - `sigstore/cosign v2.6.4` → [Updates: `v2.6.5`, `v3.1.2`] </details> <details><summary>deploy/action.yml (4)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `azure/use-kubelogin v1.3@0ce7c36141aa27d4934872cf00b0120804c98a29` - `google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093` - `google-github-actions/setup-gcloud v3.0.1@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db` </details> <details><summary>integrationtest/action.yml (2)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `EnricoMi/publish-unit-test-result-action v2.24.0@d0a4676d0e0b938bc201470d88276b7c74c712b3` </details> <details><summary>iss-tag-push-image/action.yml (1)</summary> - `docker/login-action v4.5.1@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7` → [Updates: `v4.6.0`] </details> <details><summary>playwright/action.yml (2)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `EnricoMi/publish-unit-test-result-action v2.24.0@d0a4676d0e0b938bc201470d88276b7c74c712b3` </details> <details><summary>slack-message/action.yml</summary> </details> <details><summary>sonarcloud/action.yml (4)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-java v5.6.0@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95` → [Updates: `v5.7.0`] - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` </details> <details><summary>terraform-format/action.yml (2)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `hashicorp/setup-terraform v4.0.1@dfe3c3f87815947d99a8997f908cb6525fc44e9e` </details> <details><summary>trivy-iac-scan/action.yml (2)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `github/codeql-action v4.37.3@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81` → [Updates: `v4.37.5`] </details> <details><summary>unittest/action.yml (5)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `EnricoMi/publish-unit-test-result-action v2.24.0@d0a4676d0e0b938bc201470d88276b7c74c712b3` - `danielpalme/ReportGenerator-GitHub-Action v5.5.7@a003c8fb9ac008fd0fffd5faa4f7d3ecb52e0675` → [Updates: `v5.5.11`] - `irongut/CodeCoverageSummary v1.3.0@51cc3a756ddcd398d447c044c02cb6aa83fdae95` - `marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88` </details> <details><summary>validate-metrics/action.yml (3)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97` - `python 3.12` → [Updates: `3.14`] </details> <details><summary>vault/action.yml (1)</summary> - `hashicorp/vault-action v4.0.0@892a26828f195e65540a40b4768ae4571f51ebfc` </details> <details><summary>verify-edna-deploy/action.yml (3)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97` - `python 3.12` → [Updates: `3.14`] </details> </blockquote> </details> <details><summary>pip_requirements (2)</summary> <blockquote> <details><summary>validate-metrics/requirements.txt (2)</summary> - `requests ==2.34.2` - `elvia-vault ==0.5.2` </details> <details><summary>verify-edna-deploy/requirements.txt (2)</summary> - `requests ==2.34.2` - `elvia-vault ==0.5.2` </details> </blockquote> </details> --- - [ ] <!-- manual job -->Check this box to trigger a request for Renovate to run again on this repository
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Pending Status Checks
The following updates await pending status checks. To force their creation now, click on a checkbox below.
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
PR Closed (Blocked)
The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.
Detected Dependencies
dockerfile (1)
github-actions (30)
pip_requirements (2)