Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update quay.io/fedora-ostree-desktops/kinoite:44 docker digest to 86fe5f3 (stable-f44)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/checkout digest to df4cb1c (main)
• chore(deps): update ghcr.io/get-aurora-dev/common:latest docker digest to 18e3fa7 (main)
• chore(deps): update ghcr.io/ublue-os/brew:latest docker digest to 0b10032 (main)
• chore(deps): update github/codeql-action digest to 8aad20d (main)
• chore(deps): update quay.io/fedora-ostree-desktops/kinoite:44 docker digest to 86fe5f3 (main)
• chore(deps): update actions/checkout action to v6.0.3 (main)
• chore(deps): update dataaxiom/ghcr-cleanup-action action to v1.2.2 (main)
• chore(deps): update actions/checkout digest to df4cb1c (stable-f44)
• chore(deps): update actions/checkout action to v6.0.3 (stable-f44)
• chore(deps): update dataaxiom/ghcr-cleanup-action action to v1.2.2 (stable-f44)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

Branch main

devcontainer (1)

.devcontainer.json

dockerfile (1)

Containerfile.in

github-actions (9)

.github/workflows/cherry-pick-to-stable.yml (3)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• korthout/backport-action v4.5.2@66065406958f46e82238fd59546f5a99e69e22aa

.github/workflows/clean.yml (1)

• dataaxiom/ghcr-cleanup-action v1.2.1@f092b48ba3b604b2a83690dc4b2bbb3392e1045f → [Updates: v1.2.2]

.github/workflows/generate-release.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• oras-project/setup-oras v2.0.0@38de303aac69abb66f3e6255b7198bff35f323e3
• softprops/action-gh-release v3@b4309332981a82ec1c5618f44dd2e27cc8bfbfda

.github/workflows/moderator.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• github/ai-moderator v1@81159c370785e295c97461ade67d7c33576e9319

.github/workflows/reusable-build.yml (9)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• oras-project/setup-oras v2.0.0@38de303aac69abb66f3e6255b7198bff35f323e3
• actions/attest v4.1.0@59d89421af93a897026c735860bf21b6eb4f7b26
• ubuntu 24.04

.github/workflows/scorecard.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4]

.github/workflows/trigger-schedule-stable-image.yml (1)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]

.github/workflows/validate-just.yml (1)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]

.github/workflows/validate-renovate.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e

regex (1)

image-versions.yml (3)

• quay.io/fedora-ostree-desktops/kinoite 44@sha256:7fe73541b7af0067797e4a2c021563f1e4954c55c4face8e93850b6dc222d7ea → [Updates: 45, 44]
• ghcr.io/get-aurora-dev/common latest@sha256:977c79741f6a2fff2fb8104f69ec272215c2bf0cdeb13b95e220d3a98e85169a → [Updates: latest]
• ghcr.io/ublue-os/brew latest@sha256:3d3283326834b90d81dd95b96461747c7ec45cec5c6cd6061550ce2023f3e123 → [Updates: latest]

Branch stable-f44

devcontainer (1)

.devcontainer.json

dockerfile (1)

Containerfile.in

github-actions (9)

.github/workflows/cherry-pick-to-stable.yml (3)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• korthout/backport-action v4.5.2@66065406958f46e82238fd59546f5a99e69e22aa

.github/workflows/clean.yml (1)

• dataaxiom/ghcr-cleanup-action v1.2.1@f092b48ba3b604b2a83690dc4b2bbb3392e1045f → [Updates: v1.2.2]

.github/workflows/generate-release.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• oras-project/setup-oras v2.0.0@38de303aac69abb66f3e6255b7198bff35f323e3
• softprops/action-gh-release v3@b4309332981a82ec1c5618f44dd2e27cc8bfbfda

.github/workflows/moderator.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• github/ai-moderator v1@81159c370785e295c97461ade67d7c33576e9319

.github/workflows/reusable-build.yml (9)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• oras-project/setup-oras v2.0.0@38de303aac69abb66f3e6255b7198bff35f323e3
• actions/attest v4.1.0@59d89421af93a897026c735860bf21b6eb4f7b26
• ubuntu 24.04

.github/workflows/scorecard.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4@8aad20d150bbac5944a9f9d289da16a4b0d87c1e

.github/workflows/trigger-schedule-stable-image.yml (1)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]

.github/workflows/validate-just.yml (1)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]

.github/workflows/validate-renovate.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e

regex (1)

image-versions.yml (1)

• quay.io/fedora-ostree-desktops/kinoite 44@sha256:032e1931ec3b3222c5002c6ff8e176c2c5a58fece1f712b8e707c819c90957ca → [Updates: 45, 44]

---

• Check this box to trigger a request for Renovate to run again on this repository