Dependency Dashboard

[mergeraptor]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

See Config Migration PR: #31.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.
• ⚠️ WARN: Error updating branch: update failure
• ⚠️ WARN: Package lookup failures
• ⚠️ WARN: Error while adding labels. Skipping

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update docker/login-action action to v3.7.0
• chore(deps): update actions/cache action to v5
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-python action to v6
• chore(deps): update docker/login-action action to v4
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• 🔐 Create all rate-limited PRs at once 🔐

Errored

The following updates encountered an error and will be retried. To force a retry now, click on a checkbox below.

• chore(deps): pin dependencies (ghcr.io/flathub-infra/flatpak-github-actions, quay.io/jlebon/chunkah)
• chore(deps): update block/goose digest to 3a15b01

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-releases package ghostty-org/ghostty).

Files affected: flatpaks/ghostty/manifest.yaml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/cache action to v4.3.0
• chore(deps): update dependency python to 3.14
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (5)

.github/workflows/build.yml (21)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• flatpak/flatpak-github-actions v6@92ae9851ad316786193b1fd3f40c4b51eb5cb101
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8]
• actions/cache v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684 → [Updates: v4.3.0, v5.0.3]
• actions/cache v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684 → [Updates: v4.3.0, v5.0.3]
• sigstore/cosign-installer v4.1.0@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22
• docker/login-action v3.4.0@74a5d142397b4f367a81961eba4e8cd7edddf772 → [Updates: v3.7.0, v4.0.0]
• anchore/sbom-action v0.23.1@57aae528053a48a3f6235f2d9461b05fbcb7366d
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• sigstore/cosign-installer v4.1.0@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22
• docker/login-action v3.4.0@74a5d142397b4f367a81961eba4e8cd7edddf772 → [Updates: v3.7.0, v4.0.0]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• ubuntu 24.04
• ghcr.io/flathub-infra/flatpak-github-actions gnome-49 → [Updates: gnome-49]
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/check-chunkah.yml (2)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• ubuntu 24.04

.github/workflows/scorecard.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
• github/codeql-action v4@0d579ffd059c29b07949a3cce3983f0780820c98

.github/workflows/sync-runtime-issues.yml (4)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/setup-python v5@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v6]
• ubuntu 24.04
• python 3.12 → [Updates: 3.14]

.github/workflows/update-index.yml (10)

• actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8]
• actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8]
• ubuntu 24.04
• ghcr.io/flathub-infra/flatpak-github-actions gnome-49 → [Updates: gnome-49]
• ubuntu 24.04

regex (6)

.github/workflows/build.yml (1)

• quay.io/jlebon/chunkah v0.3.0 → [Updates: v0.3.0]

flatpaks/ghostty/manifest.yaml (1)

• ghostty-org/ghostty 1.3.0@3d05cbdb712ec19ecdc720a2757a09ebf79aaa8d90ae2ae5c0ddd5536ef31be6

flatpaks/goose/release.yaml (1)

• block/goose v1.27.2@f74d47cc61bb0e6d1fc41327fcf3b359408158c24216d96782b2854cb3599765 → [Updates: v1.27.2]

Justfile (1)

• quay.io/jlebon/chunkah v0.3.0 → [Updates: v0.3.0]

Justfile (1)

• mikefarah/yq v4.52.4

Justfile (1)

• oras-project/oras 1.3.1