Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update GitHub Actions - updates (major) (actions/create-github-app-token, docker/bake-action, docker/build-push-action, docker/login-action, docker/setup-buildx-action, docker/setup-qemu-action)
• Update GitHub Artifact Actions (major) (actions/download-artifact, actions/upload-artifact)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (12)

.github/workflows/build-docker.yml (15)

• actions/checkout v6
• actions/checkout v6
• digicatapult/check-version v1
• docker/setup-qemu-action v3 → [Updates: v4]
• docker/setup-buildx-action v3 → [Updates: v4]
• docker/login-action v3 → [Updates: v4]
• docker/login-action v3 → [Updates: v4]
• docker/login-action v3 → [Updates: v4]
• docker/build-push-action v6 → [Updates: v7]
• docker/build-push-action v6 → [Updates: v7]
• docker/build-push-action v6 → [Updates: v7]
• docker/build-push-action v6 → [Updates: v7]
• docker/scout-action v1
• docker/scout-action v1
• github/codeql-action v4

.github/workflows/check-version.yml (2)

• actions/checkout v6
• digicatapult/check-version v1

.github/workflows/generate-sbom-npm.yml (6)

• actions/checkout v6
• digicatapult/check-version v1
• actions/setup-node v6
• actions/cache v5
• actions/upload-artifact v6 → [Updates: v7]
• DependencyTrack/gh-upload-sbom v3

.github/workflows/release-github.yml (5)

• actions/checkout v6
• digicatapult/check-version v1
• actions/download-artifact v7 → [Updates: v8]
• softprops/action-gh-release v2
• softprops/action-gh-release v2

.github/workflows/release-module-npm.yml (3)

• actions/checkout v6
• digicatapult/check-version v1
• actions/setup-node v6

.github/workflows/scan-secrets.yml (2)

• actions/checkout v6
• trufflesecurity/trufflehog v3.93.8

.github/workflows/scan-vulns.yml (5)

• actions/checkout v6
• actions/setup-python v6
• github/codeql-action v4
• actions/upload-artifact v6 → [Updates: v7]
• python 3.14

.github/workflows/static-checks-npm.yml (10)

• actions/checkout v6
• actions/setup-node v6
• actions/cache v5
• actions/checkout v6
• trufflesecurity/trufflehog v3.93.8
• actions/checkout v6
• actions/setup-python v6
• github/codeql-action v4
• actions/upload-artifact v6 → [Updates: v7]
• python 3.14

.github/workflows/synchronise-pr-version-npm.yml (4)

• actions/checkout v6
• actions/checkout v6
• actions/create-github-app-token v2 → [Updates: v3]
• planetscale/ghcommit-action v0.2.20

.github/workflows/synchronise-trunk-version-npm.yml (1)

• actions/checkout v6

.github/workflows/tests-e2e-npm.yml (6)

• actions/checkout v6
• actions/setup-node v6
• docker/login-action v3 → [Updates: v4]
• docker/setup-buildx-action v3 → [Updates: v4]
• docker/bake-action v6 → [Updates: v7]
• actions/upload-artifact v6 → [Updates: v7]

.github/workflows/tests-npm.yml (12)

• actions/checkout v6
• actions/setup-node v6
• actions/cache v5
• docker/login-action v3 → [Updates: v4]
• kibertoad/wait-action 1.0.1
• actions/upload-artifact v6 → [Updates: v7]
• actions/checkout v6
• actions/setup-node v6
• actions/download-artifact v7 → [Updates: v8]
• actions/download-artifact v7 → [Updates: v8]
• davelosert/vitest-coverage-report-action v2
• actions/upload-artifact v6 → [Updates: v7]

---

• Check this box to trigger a request for Renovate to run again on this repository