Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Pin dependencies (rel-2150-dev) (actions/checkout, ghcr.io/gardenlinux/builder, oras-project/setup-oras, sigstore/cosign-installer)
• Update sigstore/cosign-installer action to v3.10.1 (rel-2150-dev)
• Update actions/checkout action to v6 (rel-2150-dev)
• Update oras-project/setup-oras action to v2 (rel-2150-dev)
• Update sigstore/cosign-installer action to v4 (rel-2150-dev)
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-digest package actions/checkout), Could not determine new digest for update (github-digest package actions/download-artifact), Could not determine new digest for update (github-digest package actions/cache).

Files affected: .github/workflows/upload_oci.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update actions/checkout action to v6 (main)
• Update oras-project/setup-oras action to v2 (main)
• Update sigstore/cosign-installer action to v4 (main)
• Pin dependencies (rel-1877-dev) (actions/checkout, ghcr.io/gardenlinux/builder, oras-project/setup-oras, sigstore/cosign-installer)
• Update sigstore/cosign-installer action to v3.10.1 (rel-1877-dev)
• Update actions/checkout action to v6 (rel-1877-dev)
• Update oras-project/setup-oras action to v2 (rel-1877-dev)
• Update sigstore/cosign-installer action to v4 (rel-1877-dev)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

Branch main

github-actions (4)

.github/workflows/dev.yml (2)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]

.github/workflows/nightly.yaml (2)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]

.github/workflows/test.yml (2)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• oras-project/setup-oras v1@22ce207df3b08e061f537244349aac6ae1d214f6 → [Updates: v2]

.github/workflows/upload_oci.yml (7)

• actions/checkout pin@v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• oras-project/setup-oras v1@22ce207df3b08e061f537244349aac6ae1d214f6 → [Updates: v2]
• sigstore/cosign-installer v3.10.1@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 → [Updates: v4.1.2]
• actions/download-artifact pin@v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• actions/cache pin@v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684
• actions/checkout pin@v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/cache pin@v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684

Branch rel-1877-dev

dockerfile (1)

Containerfile (1)

• ghcr.io/gardenlinux/builder d6d24ba1aec66889a2acab83aedcb00e869abfcd → [Updates: d6d24ba1aec66889a2acab83aedcb00e869abfcd]

github-actions (4)

.github/workflows/dev.yml (2)

• actions/checkout v4 → [Updates: v6, v4]
• actions/checkout v4 → [Updates: v6, v4]

.github/workflows/nightly.yaml (2)

• actions/checkout v4 → [Updates: v6, v4]
• actions/checkout v4 → [Updates: v6, v4]

.github/workflows/test.yml (2)

• actions/checkout v4 → [Updates: v6, v4]
• oras-project/setup-oras v1 → [Updates: v2, v1]

.github/workflows/upload_oci.yml (7)

• actions/checkout pin@v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• oras-project/setup-oras v1 → [Updates: v2, v1]
• sigstore/cosign-installer v3.9.1 → [Updates: v3.10.1, v4.1.2, v3.9.1]
• actions/download-artifact pin@v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• actions/cache pin@v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684
• actions/checkout pin@v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/cache pin@v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684

Branch rel-2150-dev

dockerfile (1)

Containerfile (1)

• ghcr.io/gardenlinux/builder 98ee0d480844b2d041524841bfdbbb4007d32248 → [Updates: 98ee0d480844b2d041524841bfdbbb4007d32248]

github-actions (4)

.github/workflows/dev.yml (2)

• actions/checkout v4 → [Updates: v6, v4]
• actions/checkout v4 → [Updates: v6, v4]

.github/workflows/nightly.yaml (2)

• actions/checkout v4 → [Updates: v6, v4]
• actions/checkout v4 → [Updates: v6, v4]

.github/workflows/test.yml (2)

• actions/checkout v4 → [Updates: v6, v4]
• oras-project/setup-oras v1 → [Updates: v2, v1]

.github/workflows/upload_oci.yml (7)

• actions/checkout pin@v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• oras-project/setup-oras v1 → [Updates: v2, v1]
• sigstore/cosign-installer v3.9.1 → [Updates: v3.10.1, v4.1.2, v3.9.1]
• actions/download-artifact pin@v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• actions/cache pin@v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684
• actions/checkout pin@v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/cache pin@v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684

---

• Check this box to trigger a request for Renovate to run again on this repository