Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (5)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	pre-commit/action	2024-02-07
github-actions	redhat-actions/podman-login	2024-03-16
github-actions	slsa-framework/slsa-github-generator	2025-02-24

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update actions/cache digest to caa2961
• Update actions/setup-go digest to 924ae3a
• Update actions/setup-python digest to ece7cb0
• Update dependency operator-framework/operator-sdk to v1.42.3
• Update softprops/action-gh-release action to v3.0.1
• Update actions/cache action to v6
• Update actions/checkout action to v7
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update docker/build-push-action digest to 53b7df9
• Update docker/login-action digest to af1e73f
• Update docker/setup-buildx-action digest to bb05f3f
• Update docker/setup-qemu-action digest to 96fe6ef
• Update actions/checkout action to v6.0.3
• Update aquasecurity/trivy-action action to v0.36.0
• Update github/codeql-action action to v4.36.3
• Update mikefarah/yq action to v4.53.3
• Update rubenesp87/semver-validation-action action to v1
• Update sigstore/cosign-installer action to v4
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (4)

.github/workflows/pr-operator.yml (51)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• rubenesp87/semver-validation-action 0.1.0@8f4b9f2835a4826fbbdfe8f5dbb6ad8996cf5831 → [Updates: v1]
• rubenesp87/semver-validation-action 0.1.0@8f4b9f2835a4826fbbdfe8f5dbb6ad8996cf5831 → [Updates: v1]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• docker/setup-qemu-action v4@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4]
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4]
• docker/build-push-action v7@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7]
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 → [Updates: v0.36.0]
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 → [Updates: v0.36.0]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• docker/setup-qemu-action v4@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4]
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4]
• docker/build-push-action v7@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7]
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 → [Updates: v0.36.0]
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 → [Updates: v0.36.0]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/precommit-validate.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6]
• mikefarah/yq v4.52.5@0f4fb8d35ec1a939d78dd6862f494d19ec589f19 → [Updates: v4.53.3]
• pre-commit/action v3.0.1@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd
• python 3.x

.github/workflows/release-operator.yml (68)

• rubenesp87/semver-validation-action 0.1.0@8f4b9f2835a4826fbbdfe8f5dbb6ad8996cf5831 → [Updates: v1]
• rubenesp87/semver-validation-action 0.1.0@8f4b9f2835a4826fbbdfe8f5dbb6ad8996cf5831 → [Updates: v1]
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• docker/setup-qemu-action v4@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4]
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4]
• sigstore/cosign-installer v3@398d4b0eeef1380460a10c8013a76f728fb906ac → [Updates: v4.1.2]
• docker/login-action v4@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4]
• docker/build-push-action v7@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7]
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 → [Updates: v0.36.0]
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 → [Updates: v0.36.0]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• slsa-framework/slsa-github-generator v2.1.0
• redhat-actions/podman-login v1@4934294ad0449894bcd1e9f191899d7292469603
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• redhat-cop/github-actions v4.6@cc45c69b6655161f278271cd0c68ddcc1444a3f8
• docker/setup-qemu-action v4@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4]
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4]
• sigstore/cosign-installer v3@398d4b0eeef1380460a10c8013a76f728fb906ac → [Updates: v4.1.2]
• docker/login-action v4@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4]
• docker/build-push-action v7@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7]
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 → [Updates: v0.36.0]
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 → [Updates: v0.36.0]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• slsa-framework/slsa-github-generator v2.1.0
• redhat-actions/podman-login v1@4934294ad0449894bcd1e9f191899d7292469603
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• softprops/action-gh-release v3.0.0@b4309332981a82ec1c5618f44dd2e27cc8bfbfda → [Updates: v3.0.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

.github/workflows/scorecard.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4.36.3]

regex (2)

.github/workflows/pr-operator.yml (1)

• operator-framework/operator-sdk v1.42.2 → [Updates: v1.42.3]

.github/workflows/release-operator.yml (1)

• operator-framework/operator-sdk v1.42.2 → [Updates: v1.42.3]

---

• Check this box to trigger a request for Renovate to run again on this repository