Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/canonical/identity-credentials-workflows).

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update github actions to v0.71.1](../pull/95)
- [ ] [chore(deps): update github actions (major)](../pull/81) (`actions/checkout`, `actions/download-artifact`, `actions/setup-go`, `actions/upload-artifact`, `amannn/action-semantic-pull-request`, `docker/login-action`, `googleapis/release-please-action`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

github-actions (20)

.github/workflows/charm-build.yaml (3)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6`]
- `canonical/setup-lxd main`
- `actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02` → [Updates: `v7`]

.github/workflows/charm-integration-test.yaml (5)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6`]
- `charmed-kubernetes/actions-operator main`
- `actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093` → [Updates: `v8`]
- `canonical/charming-actions main`
- `ubuntu 24.04`

.github/workflows/charm-publish.yaml (4)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6`]
- `actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093` → [Updates: `v8`]
- `canonical/charming-actions 2.7.0@1753e0803f70445132e92acd45c905aba6473225`
- `actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02` → [Updates: `v7`]

.github/workflows/grafana-dashboard-lint-report.yaml (4)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6`]
- `actions/setup-go v5@40f1582b2485089dde7abd97c1529aa768e1baff` → [Updates: `v6`]
- `ubuntu 24.04`
- `go 1.26`

.github/workflows/identify-kevs.yaml (2)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6`]
- `ubuntu 24.04`

.github/workflows/jira-sync.yaml (1)

- `ubuntu 24.04`

.github/workflows/lint-pr-title.yaml (2)

- `amannn/action-semantic-pull-request v5@e32d7e603df1aa1ba07e981f2a23455dee596825` → [Updates: `v6`]
- `ubuntu 24.04`

.github/workflows/lint-report.yaml (2)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6`]
- `ubuntu 24.04`

.github/workflows/release-please.yaml (2)

- `googleapis/release-please-action v4@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071` → [Updates: `v5`]
- `ubuntu 24.04`

.github/workflows/rock-build.yaml (4)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6`]
- `canonical/craft-actions main`
- `actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02` → [Updates: `v7`]
- `actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02` → [Updates: `v7`]

.github/workflows/rock-publish.yaml (4)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6`]
- `docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9` → [Updates: `v4`]
- `actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093` → [Updates: `v8`]
- `ubuntu 24.04`

.github/workflows/rock-scan.yaml (5)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6`]
- `actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093` → [Updates: `v8`]
- `aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25`
- `github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e`
- `ubuntu 24.04`

.github/workflows/secscan.yaml (2)

- `actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093` → [Updates: `v8`]
- `ubuntu 24.04`

.github/workflows/snap-build.yaml (3)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6`]
- `canonical/setup-lxd main`
- `actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02` → [Updates: `v7`]

.github/workflows/snap-publish.yaml (2)

- `actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093` → [Updates: `v8`]
- `ubuntu 24.04`

.github/workflows/snap-test.yaml (2)

- `actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093` → [Updates: `v8`]
- `ubuntu 24.04`

.github/workflows/static-analysis.yaml (2)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6`]
- `ubuntu 24.04`

.github/workflows/tics-tox.yaml (2)

- `actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10`
- `tiobe/tics-github-action v3@016a4d79f3027fe7b4a2901619a58c745ab7cadf`

.github/workflows/unit-test.yaml (2)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6`]
- `ubuntu 24.04`

.github/workflows/uv-scan.yaml (7)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6`]
- `aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25`
- `aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25`
- `github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e`
- `ubuntu 24.04`
- `aquasecurity/trivy v0.58.0` → [Updates: `v0.71.1`]
- `aquasecurity/trivy v0.58.0` → [Updates: `v0.71.1`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start by reviewing the listed .github/workflows/*.yaml files and the linked update pull requests #95 and #81. Check the proposed GitHub Actions and Trivy version changes, then use the repository's workflow checks to verify the updates; done means the relevant dependency updates are applied and the workflows pass.

Written by the indexing model from the issue text.