Dependency Dashboard #1

New issue

Closed

opened 2026-06-08 09:03:18 +00:00 by ryangr0 · 0 comments

ryangr0 commented

2026-06-08 09:03:18 +00:00

Owner

Originally created by @webgrip-renovate[bot] on GitHub.

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

chore(deps): update github actions (major) (actions/attest-build-provenance, actions/checkout, actions/create-github-app-token, actions/setup-node, docker/login-action, github/codeql-action, node, sigstore/cosign-installer)

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

chore(deps): pin dependencies (node, rust)
chore(deps): pin dependencies (actions/attest-build-provenance, actions/checkout, actions/create-github-app-token, actions/setup-node, anchore/sbom-action, docker/login-action, github/codeql-action, sigstore/cosign-installer, webgrip/workflows)
🔐 Create all awaiting schedule PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

chore(deps): update application container images (major) (eclipse-temurin, node)

Warning

Renovate failed to look up the following dependencies: Failed to look up github-digest package aquasecurity/trivy-action: no-result.

Files affected: .github/actions/cosign-sign-attest/action.yml

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (10)

ops/docker/act-runner/Dockerfile (1)

alpine 3.23.4@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11

ops/docker/github-runner/Dockerfile (1)

ghcr.io/actions/actions-runner 2.334.0@sha256:b6614fce332517f74d0a76e7c762fb08e4f2ff13dcf333183397c8a5725b6e8e

ops/docker/helm-deploy/Dockerfile (1)

alpine 3.23.4@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11

ops/docker/mkdocs-runner/Dockerfile (1)

ghcr.io/webgrip/techdocs-builder latest@sha256:ac891abd9e03fe3384b4d9d48f448f268aa7d8250ceb2a0c4a26029569df5632

ops/docker/php-ci-runner/Dockerfile (2)

composer 2@sha256:1b73755de4f19775ba6087fd5313664493e06fab72b6fc27dc2044e87bb7c4c3

php 8.5-cli@sha256:f7476cffd8d6c48daa07fd80a58b85f97da095ad5a03fcf3361fd872122e3d91

ops/docker/playwright-runner/Dockerfile

ops/docker/rust-ci-runner/Dockerfile (2)

rust 1.87.0-slim-bookworm → [Updates: 1.96.0-slim-bookworm, 1.87.0-slim-bookworm]

debian bookworm-slim@sha256:0104b334637a5f19aa9c983a91b54c89887c0984081f2068983107a6f6c21eeb

ops/docker/rust-releaser/Dockerfile (1)

node 22-bookworm-slim → [Updates: 24-bookworm-slim, 22-bookworm-slim]

ops/docker/techdocs-builder/Dockerfile (4)

node 24-alpine3.20@sha256:8fe019e0d57dbdce5f5c27c0b63d2775cf34b00e3755a7dea969802d7e0c2b25

python 3.13.3-alpine3.20@sha256:40a4559d3d6b2117b1fbe426f17d55b9100fa40609733a1d0c3f39e2151d4b33

eclipse-temurin 11.0.31_11-jre-jammy@sha256:40f4f041471e1288071281c7723b4706f1bb8f60a04acbf34b6bb84ac064de50 → [Updates: 25.0.3_9-jre-jammy]

alpine 3.23.4@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11

ops/docker/techdocs-runner/Dockerfile (4)

ghcr.io/webgrip/techdocs-builder latest@sha256:ac891abd9e03fe3384b4d9d48f448f268aa7d8250ceb2a0c4a26029569df5632

ghcr.io/webgrip/techdocs-builder latest@sha256:ac891abd9e03fe3384b4d9d48f448f268aa7d8250ceb2a0c4a26029569df5632

ghcr.io/webgrip/techdocs-builder latest@sha256:ac891abd9e03fe3384b4d9d48f448f268aa7d8250ceb2a0c4a26029569df5632

ghcr.io/webgrip/techdocs-builder latest@sha256:ac891abd9e03fe3384b4d9d48f448f268aa7d8250ceb2a0c4a26029569df5632

github-actions (7)

.github/actions/cosign-sign-attest/action.yml (9)

sigstore/cosign-installer v3 → [Updates: v4.1.2, v3]

anchore/sbom-action v0 → [Updates: v0]

docker/login-action v3 → [Updates: v4, v3]

actions/attest-build-provenance v2 → [Updates: v4, v2]

aquasecurity/trivy-action master

github/codeql-action v3 → [Updates: v4, v3]

aquasecurity/trivy-action master

actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/actions/semantic-release-monorepo/action.yml (3)

actions/checkout v4 → [Updates: v6, v4]

actions/setup-node v4 → [Updates: v6, v4]

node 22 → [Updates: 24]

.github/composite-actions/docker-build-push-ghcr/action.yml (1)

webgrip/workflows main → [Updates: main]

.github/workflows/act_supply_chain_smoke.yml (1)

actions/checkout v4 → [Updates: v6, v4]

.github/workflows/on_docs_change.yml (2)

webgrip/workflows main → [Updates: main]

webgrip/workflows main → [Updates: main]

.github/workflows/on_release_published.yml (4)

webgrip/workflows main → [Updates: main]

webgrip/workflows main → [Updates: main]

actions/checkout v4 → [Updates: v6, v4]

actions/checkout v4 → [Updates: v6, v4]

.github/workflows/on_source_change.yml (3)

webgrip/workflows ubuntu-latest → [Updates: ubuntu-latest]

actions/create-github-app-token v2 → [Updates: v3, v2]

actions/checkout v4 → [Updates: v6, v4]

Originally created by @webgrip-renovate[bot] on GitHub. This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Pending Approval The following branches are pending approval. To create them, click on a checkbox below. - [ ] chore(deps): update github actions (major) (`actions/attest-build-provenance`, `actions/checkout`, `actions/create-github-app-token`, `actions/setup-node`, `docker/login-action`, `github/codeql-action`, `node`, `sigstore/cosign-installer`) ## Awaiting Schedule The following updates are awaiting their schedule. To get an update now, click on a checkbox below. - [ ] chore(deps): pin dependencies (`node`, `rust`) - [ ] chore(deps): pin dependencies (`actions/attest-build-provenance`, `actions/checkout`, `actions/create-github-app-token`, `actions/setup-node`, `anchore/sbom-action`, `docker/login-action`, `github/codeql-action`, `sigstore/cosign-installer`, `webgrip/workflows`) - [ ] 🔐 **Create all awaiting schedule PRs at once** 🔐 ## PR Edited (Blocked) The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below. - [ ] [chore(deps): update application container images (major)](../pull/19) (`eclipse-temurin`, `node`) --- > [!WARNING] > Renovate failed to look up the following dependencies: `Failed to look up github-digest package aquasecurity/trivy-action: no-result`. > > Files affected: `.github/actions/cosign-sign-attest/action.yml` --- ## Vulnerabilities Renovate has not found any CVEs on [osv.dev](https://osv.dev). ## Detected Dependencies <details><summary>docker-compose (1)</summary> <blockquote> <details><summary>docker-compose.yml</summary> </details> </blockquote> </details> <details><summary>dockerfile (10)</summary> <blockquote> <details><summary>ops/docker/act-runner/Dockerfile (1)</summary> - `alpine 3.23.4@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11` </details> <details><summary>ops/docker/github-runner/Dockerfile (1)</summary> - `ghcr.io/actions/actions-runner 2.334.0@sha256:b6614fce332517f74d0a76e7c762fb08e4f2ff13dcf333183397c8a5725b6e8e` </details> <details><summary>ops/docker/helm-deploy/Dockerfile (1)</summary> - `alpine 3.23.4@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11` </details> <details><summary>ops/docker/mkdocs-runner/Dockerfile (1)</summary> - `ghcr.io/webgrip/techdocs-builder latest@sha256:ac891abd9e03fe3384b4d9d48f448f268aa7d8250ceb2a0c4a26029569df5632` </details> <details><summary>ops/docker/php-ci-runner/Dockerfile (2)</summary> - `composer 2@sha256:1b73755de4f19775ba6087fd5313664493e06fab72b6fc27dc2044e87bb7c4c3` - `php 8.5-cli@sha256:f7476cffd8d6c48daa07fd80a58b85f97da095ad5a03fcf3361fd872122e3d91` </details> <details><summary>ops/docker/playwright-runner/Dockerfile</summary> </details> <details><summary>ops/docker/rust-ci-runner/Dockerfile (2)</summary> - `rust 1.87.0-slim-bookworm` → [Updates: `1.96.0-slim-bookworm`, `1.87.0-slim-bookworm`] - `debian bookworm-slim@sha256:0104b334637a5f19aa9c983a91b54c89887c0984081f2068983107a6f6c21eeb` </details> <details><summary>ops/docker/rust-releaser/Dockerfile (1)</summary> - `node 22-bookworm-slim` → [Updates: `24-bookworm-slim`, `22-bookworm-slim`] </details> <details><summary>ops/docker/techdocs-builder/Dockerfile (4)</summary> - `node 24-alpine3.20@sha256:8fe019e0d57dbdce5f5c27c0b63d2775cf34b00e3755a7dea969802d7e0c2b25` - `python 3.13.3-alpine3.20@sha256:40a4559d3d6b2117b1fbe426f17d55b9100fa40609733a1d0c3f39e2151d4b33` - `eclipse-temurin 11.0.31_11-jre-jammy@sha256:40f4f041471e1288071281c7723b4706f1bb8f60a04acbf34b6bb84ac064de50` → [Updates: `25.0.3_9-jre-jammy`] - `alpine 3.23.4@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11` </details> <details><summary>ops/docker/techdocs-runner/Dockerfile (4)</summary> - `ghcr.io/webgrip/techdocs-builder latest@sha256:ac891abd9e03fe3384b4d9d48f448f268aa7d8250ceb2a0c4a26029569df5632` - `ghcr.io/webgrip/techdocs-builder latest@sha256:ac891abd9e03fe3384b4d9d48f448f268aa7d8250ceb2a0c4a26029569df5632` - `ghcr.io/webgrip/techdocs-builder latest@sha256:ac891abd9e03fe3384b4d9d48f448f268aa7d8250ceb2a0c4a26029569df5632` - `ghcr.io/webgrip/techdocs-builder latest@sha256:ac891abd9e03fe3384b4d9d48f448f268aa7d8250ceb2a0c4a26029569df5632` </details> </blockquote> </details> <details><summary>github-actions (7)</summary> <blockquote> <details><summary>.github/actions/cosign-sign-attest/action.yml (9)</summary> - `sigstore/cosign-installer v3` → [Updates: `v4.1.2`, `v3`] - `anchore/sbom-action v0` → [Updates: `v0`] - `docker/login-action v3` → [Updates: `v4`, `v3`] - `actions/attest-build-provenance v2` → [Updates: `v4`, `v2`] - `aquasecurity/trivy-action master` - `github/codeql-action v3` → [Updates: `v4`, `v3`] - `aquasecurity/trivy-action master` - `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` </details> <details><summary>.github/actions/semantic-release-monorepo/action.yml (3)</summary> - `actions/checkout v4` → [Updates: `v6`, `v4`] - `actions/setup-node v4` → [Updates: `v6`, `v4`] - `node 22` → [Updates: `24`] </details> <details><summary>.github/composite-actions/docker-build-push-ghcr/action.yml (1)</summary> - `webgrip/workflows main` → [Updates: `main`] </details> <details><summary>.github/workflows/act_supply_chain_smoke.yml (1)</summary> - `actions/checkout v4` → [Updates: `v6`, `v4`] </details> <details><summary>.github/workflows/on_docs_change.yml (2)</summary> - `webgrip/workflows main` → [Updates: `main`] - `webgrip/workflows main` → [Updates: `main`] </details> <details><summary>.github/workflows/on_release_published.yml (4)</summary> - `webgrip/workflows main` → [Updates: `main`] - `webgrip/workflows main` → [Updates: `main`] - `actions/checkout v4` → [Updates: `v6`, `v4`] - `actions/checkout v4` → [Updates: `v6`, `v4`] </details> <details><summary>.github/workflows/on_source_change.yml (3)</summary> - `webgrip/workflows ubuntu-latest` → [Updates: `ubuntu-latest`] - `actions/create-github-app-token v2` → [Updates: `v3`, `v2`] - `actions/checkout v4` → [Updates: `v6`, `v4`] </details> </blockquote> </details>

ryangr0 closed this issue

2026-06-08 09:03:18 +00:00

ryangr0 referenced this issue

2026-06-08 09:03:31 +00:00

[PR #2] [CLOSED] Add Architecture & System Intent Documentation #36