SonarSource / SonarSource/ci-github-actions

Dependency Dashboard

Open
#3 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Shell
Stars
1
Forks
1
Avg merge
19h 45m
Merged PRs (30d)
6

Description

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

  • Update dependency mise to 2026.9.9

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

  • Update GitHub actions (SonarSource/gh-action_cache, SonarSource/vault-action-wrapper, actions/attest-build-provenance, actions/checkout, gradle/actions, jdx/mise, jdx/mise-action, re-actors/alls-green)

Detected Dependencies

github-actions (29)
.github/workflows/check-sca.yml (1)
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
.github/workflows/pr-cleanup.yml (1)
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
.github/workflows/pre-commit.yml (3)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • SonarSource/mise-action-wrapper v1
  • SonarSource/gh-action_pre-commit v2
.github/workflows/PullRequestClosed.yml (2)
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • sonarsource/gh-action-lt-backlog v2
.github/workflows/PullRequestCreated.yml (2)
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • sonarsource/gh-action-lt-backlog v2
.github/workflows/RequestReview.yml (2)
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • sonarsource/gh-action-lt-backlog v2
.github/workflows/SubmitReview.yml (2)
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • sonarsource/gh-action-lt-backlog v2
.github/workflows/test-build-number.yml (8)
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
  • jdx/mise-action v4.2.0@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d → [Updates: v4.3.0]
  • re-actors/alls-green v1.2.2@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe → [Updates: v1.3.0]
  • jdx/mise 2026.6.14 → [Updates: 2026.9.9]
.github/workflows/test-pr-cleanup.yml (4)
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
  • actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
.github/workflows/test-shell-scripts.yml (4)
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
  • jdx/mise-action v4.2.0@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d → [Updates: v4.3.0]
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • jdx/mise 2026.6.14 → [Updates: 2026.9.9]
.github/workflows/test-update-release-channel.yml (6)
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
  • jdx/mise-action v4.2.0@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d → [Updates: v4.3.0]
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
  • jdx/mise 2026.6.14 → [Updates: 2026.9.9]
.github/workflows/unified-dogfooding.yml (2)
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
  • SonarSource/unified-dogfooding-actions 1.1.0@03e023516511b1c9da325ad104c2290e3b91688c
build-gradle/action.yml (4)
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/attest-build-provenance v4.1.1@0f67c3f4856b2e3261c31976d6725780e5e4c373 → [Updates: v4.2.2]
build-maven/action.yml (3)
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • actions/attest-build-provenance v4.1.1@0f67c3f4856b2e3261c31976d6725780e5e4c373 → [Updates: v4.2.2]
build-npm/action.yml (6)
  • jdx/mise-action v4.2.0@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d → [Updates: v4.3.0]
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/attest-build-provenance v4.1.1@0f67c3f4856b2e3261c31976d6725780e5e4c373 → [Updates: v4.2.2]
  • jdx/mise 2026.6.14 → [Updates: 2026.9.9]
build-poetry/action.yml (5)
  • jdx/mise-action v4.2.0@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d → [Updates: v4.3.0]
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • actions/attest-build-provenance v4.1.1@0f67c3f4856b2e3261c31976d6725780e5e4c373 → [Updates: v4.2.2]
  • jdx/mise 2026.6.14 → [Updates: 2026.9.9]
build-yarn/action.yml (6)
  • jdx/mise-action v4.2.0@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d → [Updates: v4.3.0]
  • SonarSource/gh-action_cache v1.7.2@4e40632e780e11a8bbe9b721985ab22b42847cc4 → [Updates: v1.7.3]
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • actions/attest-build-provenance v4.1.1@0f67c3f4856b2e3261c31976d6725780e5e4c373 → [Updates: v4.2.2]
  • jdx/mise 2026.6.14 → [Updates: 2026.9.9]
cache/action.yml (1)
  • SonarSource/gh-action_cache v1.7.2@4e40632e780e11a8bbe9b721985ab22b42847cc4 → [Updates: v1.7.3]
check-sca/action.yml (1)
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
code-signing/action.yml (3)
  • SonarSource/gh-action_cache v1.7.2@4e40632e780e11a8bbe9b721985ab22b42847cc4 → [Updates: v1.7.3]
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • digicert/ssm-code-signing v1.2.1@1d820463733701cf1484c7eb5d7d24a15ca2c454
config-gradle/action.yml (4)
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • gradle/actions v6.2.0@3f131e8634966bd73d06cc69884922b02e6faf92 → [Updates: v6.3.0]
  • SonarSource/gh-action_cache v1.7.2@4e40632e780e11a8bbe9b721985ab22b42847cc4 → [Updates: v1.7.3]
config-maven/action.yml (3)
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • SonarSource/gh-action_cache v1.7.2@4e40632e780e11a8bbe9b721985ab22b42847cc4 → [Updates: v1.7.3]
config-npm/action.yml (4)
  • jdx/mise-action v4.2.0@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d → [Updates: v4.3.0]
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • SonarSource/gh-action_cache v1.7.2@4e40632e780e11a8bbe9b721985ab22b42847cc4 → [Updates: v1.7.3]
  • jdx/mise 2026.3.7 → [Updates: 2026.9.9]
config-pip/action.yml (2)
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • SonarSource/gh-action_cache v1.7.2@4e40632e780e11a8bbe9b721985ab22b42847cc4 → [Updates: v1.7.3]
config-poetry/action.yml (4)
  • SonarSource/gh-action_cache v1.7.2@4e40632e780e11a8bbe9b721985ab22b42847cc4 → [Updates: v1.7.3]
  • jdx/mise-action v4.2.0@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d → [Updates: v4.3.0]
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • jdx/mise 2026.5.9 → [Updates: 2026.9.9]
config-uv/action.yml (4)
  • SonarSource/gh-action_cache v1.7.2@4e40632e780e11a8bbe9b721985ab22b42847cc4 → [Updates: v1.7.3]
  • jdx/mise-action v4.2.0@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d → [Updates: v4.3.0]
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • jdx/mise 2026.5.9 → [Updates: 2026.9.9]
get-build-number/action.yml (1)
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
promote/action.yml (4)
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • jdx/mise-action v4.2.0@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d → [Updates: v4.3.0]
  • jdx/mise 2026.6.14 → [Updates: 2026.9.9]
update-release-channel/action.yml (3)
  • jdx/mise-action v4.2.0@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d → [Updates: v4.3.0]
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e → [Updates: 3.7.0]
  • jdx/mise 2026.6.14 → [Updates: 2026.9.9]
regex (8)
.github/workflows/test-build-number.yml (1)
  • mise 2026.6.14 → [Updates: 2026.9.9]
.github/workflows/test-shell-scripts.yml (1)
  • mise 2026.6.14 → [Updates: 2026.9.9]
.github/workflows/test-update-release-channel.yml (1)
  • mise 2026.6.14 → [Updates: 2026.9.9]
build-npm/action.yml (1)
  • mise 2026.6.14 → [Updates: 2026.9.9]
build-poetry/action.yml (1)
  • mise 2026.6.14 → [Updates: 2026.9.9]
build-yarn/action.yml (1)
  • mise 2026.6.14 → [Updates: 2026.9.9]
promote/action.yml (1)
  • mise 2026.6.14 → [Updates: 2026.9.9]
update-release-channel/action.yml (1)
  • mise 2026.6.14 → [Updates: 2026.9.9]
  • Check this box to trigger a request for Renovate to run again on this repository

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the linked Renovate Dependency Dashboard documentation, then review the listed workflow and action.yml files, including .github/workflows/test-build-number.yml and .github/workflows/test-shell-scripts.yml. Done would require resolving the intended dependency updates and confirming the dashboard no longer lists them as pending.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions
Domain
ci-cd, devops, tooling
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
10/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.