SonarSource / SonarSource/sonar-dummy-python-oss
Dependency Dashboard
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 1
- Forks
- 3
- Avg merge
- 18h 10m
- Merged PRs (30d)
- 2
Description
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Pending Status Checks
The following updates await pending status checks. To force their creation now, click on a checkbox below.
- Update actions/checkout action to v7
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
- Update Mise tool dependencies (
poetry,python) - Update GitHub Actions dependencies (
SonarSource/vault-action-wrapper,actions/checkout,step-security/harden-runner) - Click on this checkbox to rebase all open PRs at once
PR Closed (Blocked)
The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.
Detected Dependencies
github-actions (10)
.github/workflows/build.yml (7)
step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40→ [Updates:v2.21.1]actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8→ [Updates:v5.1.0,v7.0.1]SonarSource/ci-github-actions masterSonarSource/ci-github-actions masterSonarSource/ci-github-actions masterstep-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40→ [Updates:v2.21.1]SonarSource/ci-github-actions master.github/workflows/pr-cleanup.yml (2)
step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40→ [Updates:v2.21.1]SonarSource/ci-github-actions master.github/workflows/pre-commit.yml (2)
actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1SonarSource/gh-action_pre-commit master.github/workflows/PullRequestClosed.yml (3)
step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40→ [Updates:v2.21.1]SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e→ [Updates:3.7.0]sonarsource/gh-action-lt-backlog v2.github/workflows/PullRequestCreated.yml (3)
step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40→ [Updates:v2.21.1]SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e→ [Updates:3.7.0]sonarsource/gh-action-lt-backlog v2.github/workflows/release.yml (1)
SonarSource/gh-action_release master.github/workflows/RequestReview.yml (3)
step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40→ [Updates:v2.21.1]SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e→ [Updates:3.7.0]sonarsource/gh-action-lt-backlog v2.github/workflows/slack_notify.yml (3)
step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40→ [Updates:v2.21.1]SonarSource/ci-github-actions masterSonarSource/gh-action_slack-notify master.github/workflows/SubmitReview.yml (3)
step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40→ [Updates:v2.21.1]SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e→ [Updates:3.7.0]sonarsource/gh-action-lt-backlog v2.github/workflows/unified-dogfooding.yml (4)
step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40→ [Updates:v2.21.1]actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8→ [Updates:v5.1.0,v7.0.1]SonarSource/ci-github-actions masterSonarSource/unified-dogfooding-actions v1
mise (1)
mise.toml (2)
poetry 1.8.4→ [Updates:1.8.5,2.4.3]python 3.13.7→ [Updates:3.14.7]
poetry (1)
pyproject.toml (1)
python >=3.8
renovate-config (1)
.github/renovate.json
- Check this box to trigger a request for Renovate to run again on this repository
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the Dependency Dashboard documentation, then inspect the listed .github/workflows/*.yml files, mise.toml, pyproject.toml, and .github/renovate.json. The dashboard already lists open and blocked update pull requests; done would require determining which dependency update, if any, is intended and verifying the affected checks.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, python
- Domain
- ci-cd, devops, tooling
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100