Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Repology lookup failed with unexpected error
• ⚠️ WARN: Package lookup failures

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (2)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	slsa-framework/slsa-github-generator	2025-02-24
regex	plexsystems/konstraint	2025-06-10

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update ossf/scorecard-action action to v2.4.4
• Update registry.access.redhat.com/ubi9/python-39 Docker tag to v9.8-1788412580
• Update actions/setup-node action to v6.5.0
• Update aquasecurity/trivy-action action to v0.36.0
• Update dependency argcomplete to v3.7.2
• Update dependency helm/helm to v4.2.4
• Update dependency open-policy-agent/opa to v1.20.2
• Update hadolint/hadolint-action action to v3.5.0
• Update registry.access.redhat.com/ubi9/ubi Docker tag to v9.8-1788245065
• Update actions/checkout action to v7
• Update actions/setup-node action to v7
• Update dependency yq to v4
• Update redhat-actions/buildah-build action to v3
• Update redhat-actions/push-to-registry action to v3
• Update sigstore/cosign-installer action to v4
• 🔐 Create all awaiting schedule PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up repology package homebrew/openshift-cli: no-result.

Files affected: confbatstest/Dockerfile_build

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update actions/checkout digest to d23441a
• Update redhat-actions/buildah-build digest to 9dc2ade
• Update redhat-actions/push-to-registry digest to 5860fc9
• Update registry.access.redhat.com/ubi9/go-toolset Docker digest to 5e68f09
• Update dependency xmltodict to v1.0.4
• Update github/codeql-action action to v4.37.9
• Update dependency tomlkit to v0.15.1
• Update quay.io/skopeo/stable Docker tag to v1.22.2
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update ghcr.io/redhat-cop/github-actions/confbatstest:v4.5 Docker digest to caae680

Detected Dependencies

dockerfile (3)

confbatstest/Dockerfile (1)

• ghcr.io/redhat-cop/github-actions/confbatstest v4.5@sha256:14ed9e3c82b7c5ef672fd0075ca94ae3cdaf7b026a404d4d62b713c7cdb9c93c → [Updates: v4.5]

confbatstest/Dockerfile_build (3)

• registry.access.redhat.com/ubi9/go-toolset sha256:36077bc7ad852d91162bf017460de6fef84bf3c2c887be05cd1c761885ef2ac3 → [Updates: undefined]
• registry.access.redhat.com/ubi9/ubi 9.7-1775624009@sha256:039095faabf1edde946ff528b3b6906efa046ee129f3e33fd933280bb6936221 → [Updates: 9.8-1788245065]
• registry.access.redhat.com/ubi9/python-39 9.8-1786927960@sha256:cc8305300a92d0f77e7c80715406014cfe8c0af38465f51ed9cea48894a82889 → [Updates: 9.8-1788412580]

disconnected-csv/Dockerfile (1)

• quay.io/skopeo/stable v1.21.0 → [Updates: v1.22.2]

github-actions (14)

.github/workflows/confbatstest-build.yaml (9)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• redhat-cop/github-actions v4.6@cc45c69b6655161f278271cd0c68ddcc1444a3f8
• hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 → [Updates: v3.5.0]
• redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056 → [Updates: v3, v2]
• redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c → [Updates: v3, v2]
• sigstore/cosign-installer v3@398d4b0eeef1380460a10c8013a76f728fb906ac → [Updates: v4.1.2]
• aquasecurity/trivy-action v0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 → [Updates: v0.36.0]
• aquasecurity/trivy-action v0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 → [Updates: v0.36.0]
• slsa-framework/slsa-github-generator v2.1.0

.github/workflows/confbatstest.yaml (2)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 → [Updates: v3.5.0]

.github/workflows/disconnected-csv.yaml (2)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 → [Updates: v3.5.0]

.github/workflows/get-image-version.yaml (1)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]

.github/workflows/github-dispatches-build.yaml (5)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• redhat-cop/github-actions v4.6@cc45c69b6655161f278271cd0c68ddcc1444a3f8
• hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 → [Updates: v3.5.0]
• redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056 → [Updates: v3, v2]
• redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c → [Updates: v3, v2]

.github/workflows/github-dispatches.yaml (2)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 → [Updates: v3.5.0]

.github/workflows/kyverno-cli-build.yaml (5)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• redhat-cop/github-actions v4.6@cc45c69b6655161f278271cd0c68ddcc1444a3f8
• hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 → [Updates: v3.5.0]
• redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056 → [Updates: v3, v2]
• redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c → [Updates: v3, v2]

.github/workflows/kyverno-cli.yaml (2)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 → [Updates: v3.5.0]

.github/workflows/redhat-csp-download-build.yaml (5)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• redhat-cop/github-actions v4.6@cc45c69b6655161f278271cd0c68ddcc1444a3f8
• hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 → [Updates: v3.5.0]
• redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056 → [Updates: v3, v2]
• redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c → [Updates: v3, v2]

.github/workflows/redhat-csp-download.yaml (2)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 → [Updates: v3.5.0]

.github/workflows/scorecard.yml (4)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a → [Updates: v2.4.4]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.37.7@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd → [Updates: v4.37.9]

.github/workflows/set-helm-version.yaml (2)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 → [Updates: v3.5.0]

.github/workflows/ssh-agent-build.yaml (3)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6.5.0, v7.0.0]
• node 24

.github/workflows/ssh-agent.yaml (1)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]

pip_requirements (1)

confbatstest/requirements.txt (5)

• argcomplete ==3.6.3 → [Updates: ==3.7.2]
• PyYAML ==6.0.3
• tomlkit ==0.13.3 → [Updates: ==0.15.1]
• xmltodict ==1.0.2 → [Updates: ==1.0.4]
• yq ==3.4.3 → [Updates: ==4.1.2]

regex (1)

confbatstest/Dockerfile_build (6)

• plexsystems/konstraint v0.43.0
• helm/helm v4.1.4 → [Updates: v4.2.4]
• stedolan/jq 1.6
• homebrew/openshift-cli 4.21.8
• open-policy-agent/opa v1.15.2 → [Updates: v1.20.2]
• open-policy-agent/conftest v0.69.0

---

• Check this box to trigger a request for Renovate to run again on this repository