Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update actions/checkout action to v6 (rel-2150-dev)
• Update oras-project/setup-oras action to v2 (rel-2150-dev)
• Update sigstore/cosign-installer action to v4 (rel-2150-dev)
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-digest package actions/checkout), Could not determine new digest for update (github-digest package actions/download-artifact), Could not determine new digest for update (github-digest package actions/cache).

Files affected: .github/workflows/upload_oci.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update actions/checkout action to v6 (main)
• Update oras-project/setup-oras action to v2 (main)
• Update sigstore/cosign-installer action to v4 (main)
• Pin dependencies (rel-1877-dev) (actions/checkout, ghcr.io/gardenlinux/builder, oras-project/setup-oras, sigstore/cosign-installer)
• Update sigstore/cosign-installer action to v3.10.1 (rel-1877-dev)
• Update actions/checkout action to v6 (rel-1877-dev)
• Update oras-project/setup-oras action to v2 (rel-1877-dev)
• Update sigstore/cosign-installer action to v4 (rel-1877-dev)
• Pin dependencies (rel-2150-dev) (actions/checkout, ghcr.io/gardenlinux/builder, oras-project/setup-oras, sigstore/cosign-installer)
• Update sigstore/cosign-installer action to v3.10.1 (rel-2150-dev)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

Branch main

github-actions (4)

.github/workflows/dev.yml (2)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]

.github/workflows/nightly.yaml (2)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]

.github/workflows/test.yml (2)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• oras-project/setup-oras v1@22ce207df3b08e061f537244349aac6ae1d214f6 → [Updates: v2]

.github/workflows/upload_oci.yml (7)

• actions/checkout pin@v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• oras-project/setup-oras v1@22ce207df3b08e061f537244349aac6ae1d214f6 → [Updates: v2]
• sigstore/cosign-installer v3.10.1@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 → [Updates: v4.1.2]
• actions/download-artifact pin@v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• actions/cache pin@v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684
• actions/checkout pin@v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/cache pin@v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684

Branch rel-1877-dev

dockerfile (1)

Containerfile (1)

• ghcr.io/gardenlinux/builder d6d24ba1aec66889a2acab83aedcb00e869abfcd → [Updates: d6d24ba1aec66889a2acab83aedcb00e869abfcd]

github-actions (4)

.github/workflows/dev.yml (2)

• actions/checkout v4 → [Updates: v6, v4]
• actions/checkout v4 → [Updates: v6, v4]

.github/workflows/nightly.yaml (2)

• actions/checkout v4 → [Updates: v6, v4]
• actions/checkout v4 → [Updates: v6, v4]

.github/workflows/test.yml (2)

• actions/checkout v4 → [Updates: v6, v4]
• oras-project/setup-oras v1 → [Updates: v2, v1]

.github/workflows/upload_oci.yml (7)

• actions/checkout pin@v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• oras-project/setup-oras v1 → [Updates: v2, v1]
• sigstore/cosign-installer v3.9.1 → [Updates: v3.10.1, v4.1.2, v3.9.1]
• actions/download-artifact pin@v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• actions/cache pin@v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684
• actions/checkout pin@v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/cache pin@v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684

Branch rel-2150-dev

dockerfile (1)

Containerfile (1)

• ghcr.io/gardenlinux/builder 98ee0d480844b2d041524841bfdbbb4007d32248 → [Updates: 98ee0d480844b2d041524841bfdbbb4007d32248]

github-actions (4)

.github/workflows/dev.yml (2)

• actions/checkout v4 → [Updates: v6, v4]
• actions/checkout v4 → [Updates: v6, v4]

.github/workflows/nightly.yaml (2)

• actions/checkout v4 → [Updates: v6, v4]
• actions/checkout v4 → [Updates: v6, v4]

.github/workflows/test.yml (2)

• actions/checkout v4 → [Updates: v6, v4]
• oras-project/setup-oras v1 → [Updates: v2, v1]

.github/workflows/upload_oci.yml (7)

• actions/checkout pin@v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• oras-project/setup-oras v1 → [Updates: v2, v1]
• sigstore/cosign-installer v3.9.1 → [Updates: v3.10.1, v4.1.2, v3.9.1]
• actions/download-artifact pin@v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• actions/cache pin@v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684
• actions/checkout pin@v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/cache pin@v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684

---

• Check this box to trigger a request for Renovate to run again on this repository