Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): update rust (`cfg-if`, `rustix`)
- [ ] chore(deps): update github actions (`actions/setup-python`, `python`)
- [ ] 🔐 **Create all awaiting schedule PRs at once** 🔐

## Detected Dependencies

cargo (14)

Cargo.toml (42)

- `anstream 1.0`
- `anyhow 1.0.82`
- `camino 1.1.6`
- `canon-json 0.2.1`
- `cap-std-ext 5.1.2`
- `cfg-if 1.0` → [Updates: `1.0`]
- `chrono 0.4.38`
- `clap 4.5.4`
- `clap_mangen 0.3.0`
- `composefs-ctl v0.9.2`
- `fn-error-context 0.2.1`
- `futures-util 0.3`
- `hex 0.4.3`
- `http-body-util 0.1`
- `hyper 1`
- `hyper-util 0.1`
- `indicatif 0.18.0`
- `indoc 2.0.5`
- `libc 0.2.154`
- `log 0.4.21`
- `openssl 0.10.72`
- `owo-colors 4`
- `percent-encoding 2`
- `regex 1.10.4`
- `rustix 1` → [Updates: `1`]
- `serde 1.0.199`
- `serde_json 1.0.116`
- `selinux =0.6.3`
- `shlex 2.0`
- `similar-asserts 2.0.0`
- `static_assertions 1.1.0`
- `tempfile 3.10.1`
- `thiserror 2.0.11`
- `tokio >= 1.37.0`
- `tokio-util 0.7.10`
- `toml 1.0.0`
- `tracing 0.1.40`
- `tracing-subscriber 0.3.18`
- `tracing-journald 0.3.1`
- `uzers 0.12`
- `linux-kernel-cmdline 0.1.1`
- `xshell 0.2.6`

crates/blockdev/Cargo.toml

crates/cli/Cargo.toml

crates/etc-merge/Cargo.toml

crates/initramfs/Cargo.toml

crates/lib/Cargo.toml (17)

- `clap_complete 4`
- `anstyle 1.0.6`
- `comfy-table 8.0.0`
- `liboverdrop 0.1.0`
- `unicode-width 0.2`
- `libsystemd 0.7`
- `linkme 0.3`
- `nom 8.0.0`
- `ocidir 0.8.0`
- `schemars 1.0.4`
- `serde_ignored 0.1.10`
- `serde_yaml 0.9.34`
- `tar 0.4.43`
- `tini 1.3.0`
- `uuid 1.8.0`
- `uapi-version 0.4.0`
- `cargo_metadata 0.23`

crates/mount/Cargo.toml

crates/ostree-ext/Cargo.toml (15)

- `comfy-table 8.0.0`
- `containers-image-proxy 0.11.0`
- `flate2 1.0.20`
- `futures-util 0.3.13`
- `gvariant 0.5.0`
- `indexmap 2.2.2`
- `io-lifetimes 3`
- `libsystemd 0.7.0`
- `ocidir 0.8.0`
- `ostree 0.20.5`
- `pin-project 1.0`
- `tar 0.4.43`
- `tokio-stream 0.1.8`
- `zstd 0.14.0`
- `quickcheck 1`

crates/system-reinstall-bootc/Cargo.toml (5)

- `crossterm 0.29.0`
- `dialoguer 0.12.0`
- `openssh-keys 0.6.4`
- `serde_yaml 0.9.22`
- `which 8.0.0`

crates/sysusers/Cargo.toml

crates/tests-integration/Cargo.toml (8)

- `bcvk-qemu v0.20.0`
- `data-encoding 2.9`
- `libtest-mimic 0.8.0`
- `oci-spec 0.10.0`
- `rand 0.10`
- `rexpect 0.7`
- `scopeguard 1.2.0`
- `tar 0.4`

crates/tmpfiles/Cargo.toml

crates/utils/Cargo.toml

crates/xtask/Cargo.toml (6)

- `cargo_metadata 0.23`
- `mandown 1.1.0`
- `rand 0.10`
- `serde_yaml 0.9`
- `tar 0.4`
- `itertools 0.15.0`

dockerfile (7)

ci/Containerfile.install-fsverity

ci/Dockerfile.ci

Dockerfile

docs/Dockerfile.mdbook

hack/Containerfile.drop-lbis

hack/Containerfile.packit

hack/lldb/Containerfile

github-actions (11)

.github/actions/install-tmt/action.yml (2)

- `actions/setup-python v6` → [Updates: `v7`]
- `python 3.12.14` → [Updates: `3.14.7`]

.github/workflows/auto-review.yml (4)

- `actions/checkout v7`
- `actions/setup-python v7`
- `actions/create-github-app-token v3`
- `python 3.14`

.github/workflows/autovendor.yml (3)

- `actions/checkout v7`
- `dtolnay/rust-toolchain stable`
- `actions/upload-artifact v7`

.github/workflows/build-and-publish.yml (4)

- `actions/checkout v7`
- `bootc-dev/actions main`
- `redhat-actions/podman-login v2`
- `ubuntu 24.04`

.github/workflows/ci.yml (42)

- `actions/checkout v7`
- `actions/checkout v7`
- `bootc-dev/actions main`
- `actions/checkout v7`
- `EmbarkStudios/cargo-deny-action v2`
- `actions/checkout v7`
- `bootc-dev/actions main`
- `actions/checkout v7`
- `bootc-dev/actions main`
- `actions/checkout v7`
- `bootc-dev/actions main`
- `actions/upload-artifact v7`
- `actions/checkout v7`
- `bootc-dev/actions main`
- `actions/download-artifact v8`
- `actions/upload-artifact v7`
- `actions/checkout v7`
- `bootc-dev/actions main`
- `actions/download-artifact v8`
- `actions/upload-artifact v7`
- `actions/checkout v7`
- `bootc-dev/actions main`
- `actions/download-artifact v8`
- `actions/upload-artifact v7`
- `actions/checkout v7`
- `bootc-dev/actions main`
- `actions/download-artifact v8`
- `actions/upload-artifact v7`
- `actions/checkout v7`
- `bootc-dev/actions main`
- `actions/download-artifact v8`
- `actions/upload-artifact v7`
- `ubuntu 26.04`
- `ubuntu 26.04`
- `ubuntu 26.04`
- `ubuntu 26.04`
- `ubuntu 26.04`
- `ubuntu 26.04`
- `ubuntu 26.04`
- `ubuntu 26.04`
- `ubuntu 26.04`
- `ubuntu 26.04`

.github/workflows/crates-release.yml (3)

- `actions/checkout v7`
- `rust-lang/crates-io-auth-action v1`
- `ubuntu 24.04`

.github/workflows/docs.yml (6)

- `actions/checkout v7`
- `bootc-dev/actions main`
- `actions/configure-pages v6`
- `actions/upload-pages-artifact v5`
- `actions/deploy-pages v5`
- `ubuntu 24.04`

.github/workflows/labeler.yml (2)

- `actions/checkout v7`
- `actions/labeler v7`

.github/workflows/release.yml (7)

- `actions/create-github-app-token v3`
- `actions/checkout v7`
- `crazy-max/ghaction-import-gpg v7`
- `Swatinem/rust-cache v2`
- `actions/create-release v1`
- `actions/upload-release-asset v1`
- `actions/upload-release-asset v1`

.github/workflows/scheduled-release.yml (4)

- `actions/create-github-app-token v3`
- `actions/checkout v7`
- `crazy-max/ghaction-import-gpg v7`
- `peter-evans/create-pull-request v8`

crates/ostree-ext/.github/workflows/rust.yml (20)

- `actions/checkout v7`
- `Swatinem/rust-cache v2`
- `actions/checkout v7`
- `Swatinem/rust-cache v2`
- `actions/upload-artifact v7`
- `actions/checkout v7`
- `dtolnay/rust-toolchain master`
- `Swatinem/rust-cache v2`
- `actions/checkout v7`
- `EmbarkStudios/cargo-deny-action v2`
- `actions/checkout v7`
- `actions/download-artifact v8.0.1`
- `actions/checkout v7`
- `actions/download-artifact v8.0.1`
- `actions/checkout v7`
- `actions/download-artifact v8.0.1`
- `actions/checkout v7`
- `actions/checkout v7`
- `actions/download-artifact v8.0.1`
- `quay.io/fedora/fedora-bootc 41` → [Updates: `46`]

quadlet (4)

hack/lbi/curl-base.image

hack/lbi/curl.container

hack/lbi/jboss-webserver-5.image

hack/lbi/podman.image

regex (1)

.github/actions/install-tmt/action.yml (1)

- `tmt 1.78.0`