This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/digicatapult/shared-workflows). ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] <!-- rebase-branch=renovate/github-actions-updates -->[Update github/codeql-action action to v4.37.3](../pull/117) - [ ] <!-- rebase-branch=renovate/major-github-actions-trusted-updates -->[Update Github-Actions - trusted updates to v7](../pull/114) (`actions/setup-node`, `actions/setup-python`) - [ ] <!-- rebase-all-open-prs -->**Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies <details><summary>github-actions (21)</summary> <blockquote> <details><summary>.github/workflows/build-docker.yml (21)</summary> - `actions/checkout v7` - `digicatapult/check-version v1` - `actions/checkout v7` - `docker/setup-qemu-action v4` - `docker/setup-buildx-action v4` - `docker/login-action v4` - `docker/login-action v4` - `docker/login-action v4` - `docker/build-push-action v7` - `actions/upload-artifact v7` - `docker/build-push-action v7` - `actions/upload-artifact v7` - `actions/download-artifact v8` - `docker/login-action v4` - `docker/login-action v4` - `docker/setup-buildx-action v4` - `docker/scout-action v1` - `docker/scout-action v1` - `github/codeql-action v4` - `actions/download-artifact v8` - `actions/upload-artifact v7` </details> <details><summary>.github/workflows/check-version.yml (2)</summary> - `actions/checkout v7` - `digicatapult/check-version v1` </details> <details><summary>.github/workflows/generate-sbom.yml (7)</summary> - `actions/checkout v7` - `digicatapult/check-version v1` - `actions/setup-node v6` → [Updates: `v7`] - `actions/setup-python v6` → [Updates: `v7`] - `actions/cache v6` - `actions/upload-artifact v7` - `DependencyTrack/gh-upload-sbom v4` </details> <details><summary>.github/workflows/generate-security-scorecard.yml (4)</summary> - `actions/checkout v7` - `ossf/scorecard-action v2.4.3` - `actions/upload-artifact v7` - `github/codeql-action v4.35.3` → [Updates: `v4.37.3`] </details> <details><summary>.github/workflows/migration-checks-npm.yml (6)</summary> - `actions/checkout v7` - `actions/checkout v7` - `actions/setup-node v6` → [Updates: `v7`] - `actions/checkout v7` - `actions/setup-node v6` → [Updates: `v7`] - `actions/checkout v7` </details> <details><summary>.github/workflows/migration-checks-poetry.yml (7)</summary> - `actions/checkout v7` - `actions/setup-python v6` → [Updates: `v7`] - `actions/checkout v7` - `actions/setup-python v6` → [Updates: `v7`] - `actions/checkout v7` - `actions/setup-python v6` → [Updates: `v7`] - `actions/checkout v7` </details> <details><summary>.github/workflows/release-github.yml (5)</summary> - `actions/checkout v7` - `digicatapult/check-version v1` - `actions/download-artifact v8` - `softprops/action-gh-release v3` - `softprops/action-gh-release v3` </details> <details><summary>.github/workflows/release-module-npm.yml (3)</summary> - `actions/checkout v7` - `digicatapult/check-version v1` - `actions/setup-node v6` → [Updates: `v7`] </details> <details><summary>.github/workflows/scan-secrets.yml (2)</summary> - `actions/checkout v7` - `trufflesecurity/trufflehog v3.95.9` </details> <details><summary>.github/workflows/scan-vulns.yml (5)</summary> - `actions/checkout v7` - `actions/setup-python v6` → [Updates: `v7`] - `github/codeql-action v4` - `actions/upload-artifact v7` - `python 3.14` </details> <details><summary>.github/workflows/scan-zap.yml (7)</summary> - `actions/checkout v7` - `docker/login-action v4` - `zaproxy/action-baseline v0.15.0` - `zaproxy/action-full-scan v0.13.0` - `zaproxy/action-api-scan v0.10.0` - `zaproxy/action-af v0.3.0` - `actions/upload-artifact v7` </details> <details><summary>.github/workflows/static-checks-npm.yml (10)</summary> - `actions/checkout v7` - `actions/setup-node v6` → [Updates: `v7`] - `actions/cache v6` - `actions/checkout v7` - `trufflesecurity/trufflehog v3.95.9` - `actions/checkout v7` - `actions/setup-python v6` → [Updates: `v7`] - `github/codeql-action v4` - `actions/upload-artifact v7` - `python 3.14` </details> <details><summary>.github/workflows/static-checks-poetry.yml (8)</summary> - `actions/checkout v7` - `actions/setup-python v6` → [Updates: `v7`] - `actions/checkout v7` - `trufflesecurity/trufflehog v3.95.9` - `actions/checkout v7` - `actions/setup-python v6` → [Updates: `v7`] - `github/codeql-action v4` - `actions/upload-artifact v7` </details> <details><summary>.github/workflows/synchronise-pr-version-npm.yml (4)</summary> - `actions/checkout v7` - `actions/checkout v7` - `actions/create-github-app-token v3` - `planetscale/ghcommit-action v0.2.22` </details> <details><summary>.github/workflows/synchronise-pr-version-poetry.yml (6)</summary> - `actions/checkout v7` - `actions/checkout v7` - `actions/setup-python v6` → [Updates: `v7`] - `actions/create-github-app-token v3` - `planetscale/ghcommit-action v0.2.22` - `python 3.14` </details> <details><summary>.github/workflows/synchronise-trunk-version-npm.yml (1)</summary> - `actions/checkout v7` </details> <details><summary>.github/workflows/synchronise-trunk-version-poetry.yml (1)</summary> - `actions/checkout v7` </details> <details><summary>.github/workflows/tests-e2e-npm.yml (6)</summary> - `actions/checkout v7` - `actions/setup-node v6` → [Updates: `v7`] - `docker/login-action v4` - `docker/setup-buildx-action v4` - `docker/bake-action v7` - `actions/upload-artifact v7` </details> <details><summary>.github/workflows/tests-e2e-poetry.yml (6)</summary> - `actions/checkout v7` - `docker/login-action v4` - `docker/setup-buildx-action v4` - `docker/bake-action v7` - `actions/setup-node v6` → [Updates: `v7`] - `actions/setup-python v6` → [Updates: `v7`] </details> <details><summary>.github/workflows/tests-npm.yml (12)</summary> - `actions/checkout v7` - `actions/setup-node v6` → [Updates: `v7`] - `actions/cache v6` - `docker/login-action v4` - `kibertoad/wait-action 1.0.1` - `actions/upload-artifact v7` - `actions/checkout v7` - `actions/setup-node v6` → [Updates: `v7`] - `actions/download-artifact v8` - `actions/download-artifact v8` - `davelosert/vitest-coverage-report-action v2` - `actions/upload-artifact v7` </details> <details><summary>.github/workflows/tests-poetry.yml (9)</summary> - `actions/checkout v7` - `actions/setup-python v6` → [Updates: `v7`] - `docker/login-action v4` - `kibertoad/wait-action 1.0.1` - `actions/upload-artifact v7` - `actions/checkout v7` - `actions/setup-python v6` → [Updates: `v7`] - `actions/download-artifact v8` - `actions/download-artifact v8` </details> </blockquote> </details> --- - [ ] <!-- manual job -->Check this box to trigger a request for Renovate to run again on this repository
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
actions/setup-node,actions/setup-python)Detected Dependencies
github-actions (21)