Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update github/codeql-action action to v4.35.2

Detected Dependencies

github-actions (15)

.github/workflows/actionlint.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/file-sync.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• BetaHuhn/repo-file-sync-action v1.21.1@8b92be3375cf1d1b0cd579af488a9255572e4619

.github/workflows/pr-feedback.yml (2)

• marcelklehr/get-github-handles-from-website-action v1.0.1@06b2239db0a48fe1484ba0bfd966a3ab81a08308
• nextcloud/pr-feedback-action main@5227c55be184087d0aef6338bee210d8620b6297

.github/workflows/renovate-approve-merge.yml (3)

• mdecoleman/pr-branch-name v3.0.0@55795d86b4566d300d237883103f052125cc7508
• hmarr/auto-approve-action v4.0.0@f0939ea97e9205ef24d872e76833fa908a770363
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/reuse.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• fsfe/reuse-action v6.0.0@676e2d560c9a403aa252096d99fcab3e1132b0f5

.github/workflows/scorecard.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4.35.2]

config/workflows/analysis.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-java v5.2.0@be666c2fcd27ec809703dec50e508c2fdc7f6654

config/workflows/autoApproveSync.yml (1)

• hmarr/auto-approve-action v4.0.0@f0939ea97e9205ef24d872e76833fa908a770363

config/workflows/codeql.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• pierotofy/set-swap-space v1.0@49819abfb41bd9b44fb781159c033dba90353a7c
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4.35.2]
• actions/setup-java v5.2.0@be666c2fcd27ec809703dec50e508c2fdc7f6654
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4.35.2]

config/workflows/detectNewJavaFiles.yml (1)

• trilom/file-changes-action v1.2.4@a6ca26c14274c33b15e6499323aac178af06ad4b

config/workflows/pr-feedback.yml (2)

• marcelklehr/get-github-handles-from-website-action v1.0.1@06b2239db0a48fe1484ba0bfd966a3ab81a08308
• nextcloud/pr-feedback-action main@5227c55be184087d0aef6338bee210d8620b6297

config/workflows/qa.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-java v5.2.0@be666c2fcd27ec809703dec50e508c2fdc7f6654

config/workflows/renovate-approve-merge.yml (3)

• mdecoleman/pr-branch-name v3.0.0@55795d86b4566d300d237883103f052125cc7508
• hmarr/auto-approve-action v4.0.0@f0939ea97e9205ef24d872e76833fa908a770363
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

config/workflows/scorecard.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4.35.2]

config/workflows/stale.yml (1)

• actions/stale v10.2.0@b5d41d4e1d5dceea10e7104786b73624c18a190f

---

• Check this box to trigger a request for Renovate to run again on this repository

[AlvaroBrey]

To discuss:

• Remove PR ratelimit (currently 2/hour)?
• Open single PR for all actions daily? Would reduce the amount of sync PRs. We could also just do a daily sync instead of every time something is merged to main

[tobiasKaminsky]

My idea:

• no ratelimit
• one single PR per day is good, as there should not be mission critical things. And if so, we can do it manualy

[AndyScherzinger]

I agree with Tobias' assessment

[AlvaroBrey]

Ok, creating new issue to track that