Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• build: update actions/download-artifact digest to fa0a91b
• build: update actions/setup-node digest to 39370e3
• build: update actions/upload-artifact digest to b4b15b8
• build: update anchore/sbom-action digest to 55dc4ee
• build: update azure/setup-helm digest to fe7b79c
• build: update docker/metadata-action digest to 369eb59
• build: update sigstore/cosign-installer digest to dc72c7d
• build: update dependency adm-zip to v0.5.16
• build: update dependency async to v3.2.6
• build: update dependency config to v3.3.12
• build: update aquasecurity/trivy-action action to v0.29.0
• build: update dependency helm/helm to v3.16.3
• build: update dependency k3d-io/k3d to v5.7.5
• build: update dependency liatrio/gh-trusted-builds-attestations to v1.2.0
• build: update dependency prettier to v3.4.2
• build: update dependency sigstore/cosign to v2.4.1
• build: update helm release policy-controller to v0.7.2
• build: update octokit monorepo (@octokit/auth-app, @octokit/rest)
• build: update dependency slsa-framework/slsa-github-generator to v2
• build: update docker/build-push-action action to v6
• build: update node.js to v22
• build: update octokit monorepo (major) (@octokit/auth-app, @octokit/rest)
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• build: update actions/checkout digest to 11bd719
• build: update docker/build-push-action digest to ca052bb
• build: update docker/login-action digest to 9780b0c
• build: update docker/setup-buildx-action digest to c47758b
• build: update sigstore/rekor-monitor digest to b918271
• build: update slsa-framework/slsa-github-generator digest to 2747648
• build: update dependency anchore/syft to v1.18.0
• build: update dependency google/go-containerregistry to v0.20.2
• build: update dependency liatrio/gh-trusted-builds-policy to v1.5.0
• build: update dependency slsa-framework/slsa-github-generator to v1.10.0
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

github-actions

.github/actions/cosign/action.yaml

• sigstore/cosign-installer v3@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4

.github/workflows/build-and-push.yaml

• slsa-framework/slsa-github-generator 52372c6734897f13514167d8921538225027b009
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/setup-buildx-action v3@0d103c3126aa41d772a8362f6aa67afac040f80c
• docker/metadata-action v5@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
• docker/build-push-action v5@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
• actions/upload-artifact v4@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4@c850b930e6ba138125429b7e5c93fc707a7f8427
• docker/login-action v3@343f7c4344506bcbf9b4de18042ae17996df046d
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4@c850b930e6ba138125429b7e5c93fc707a7f8427
• docker/login-action v3@343f7c4344506bcbf9b4de18042ae17996df046d
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/login-action v3@343f7c4344506bcbf9b4de18042ae17996df046d
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/login-action v3@343f7c4344506bcbf9b4de18042ae17996df046d
• anchore/sbom-action v0@9fece9e20048ca9590af301449208b2b8861333b
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/login-action v3@343f7c4344506bcbf9b4de18042ae17996df046d
• actions/upload-artifact v4@5d5d22a31266ced268874388b861e4b58bb5c2f3

.github/workflows/demo-deploy.yaml

• slsa-framework/slsa-github-generator 52372c6734897f13514167d8921538225027b009
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• azure/setup-helm v4@b7246b12e77f7134dc2d460a3d5bad15bbe29390
• docker/login-action v3@343f7c4344506bcbf9b4de18042ae17996df046d

.github/workflows/integration-tests.yaml

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-node v4@60edb5dd545a775178f52524783378180af0d1f8

.github/workflows/policy-verification.yaml

• slsa-framework/slsa-github-generator 52372c6734897f13514167d8921538225027b009
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/login-action v3@343f7c4344506bcbf9b4de18042ae17996df046d

.github/workflows/rekor-monitor.yaml

• sigstore/rekor-monitor be31d0d7ff5766e27baac1f6029edc07cbf04a54

.github/workflows/release.yaml

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-node v4@60edb5dd545a775178f52524783378180af0d1f8

.github/workflows/scan-image.yaml

• slsa-framework/slsa-github-generator 52372c6734897f13514167d8921538225027b009
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• aquasecurity/trivy-action 0.18.0@062f2592684a31eb3aa050cc61e7ca1451cecd3d
• docker/login-action v3@343f7c4344506bcbf9b4de18042ae17996df046d

npm

package.json

• @octokit/auth-app 6.0.4
• @octokit/rest 20.0.2
• adm-zip 0.5.10
• async 3.2.5
• config 3.3.11
• prettier 3.2.5

nvm

.nvmrc

• node 20

regex

.github/actions/config/action.yaml

• liatrio/gh-trusted-builds-attestations 1.1.7
• sigstore/cosign v2.2.3
• google/go-containerregistry v0.19.0
• helm/helm v3.14.3
• k3d-io/k3d v5.6.0
• liatrio/gh-trusted-builds-policy v1.4.2
• policy-controller 0.6.8
• slsa-framework/slsa-github-generator 1.9.0
• anchore/syft v1.0.1

---

• Check this box to trigger a request for Renovate to run again on this repository