Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/celo-org/reusable-workflows).

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] Update changesets/action action to v2
- [ ] Update github/codeql-action action to v4
- [ ] Update hashicorp/setup-terraform action to v4
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [Update google-github-actions/auth action to v3](../pull/146)

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update actions/checkout action to v4.4.0](../pull/161)
- [ ] [Update ossf/scorecard-action action to v2.4.4](../pull/162)
- [ ] [Update actions/checkout action to v7](../pull/186)
- [ ] [Update actions/github-script action to v9](../pull/174)
- [ ] [Update actions/setup-go action to v7](../pull/187)
- [ ] [Update actions/setup-node action to v7](../pull/188)
- [ ] [Update actions/upload-artifact action to v7](../pull/173)
- [ ] [Update dependency node to v24](../pull/175)
- [ ] [Update docker/login-action action to v4](../pull/176)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

github-actions (9)

.github/workflows/docker-build.yaml (10)

- `step-security/harden-runner v2`
- `actions/checkout v4` → [Updates: `v7`]
- `actions/github-script v7` → [Updates: `v9`]
- `celo-org/trivy-composite-action v1.0.1`
- `github/codeql-action v3` → [Updates: `v4`]
- `google-github-actions/auth v2` → [Updates: `v3`]
- `docker/login-action v3` → [Updates: `v4`]
- `celo-org/docker-build-composite-action v1.0.3`
- `celo-org/trivy-composite-action v1.0.1`
- `github/codeql-action v3` → [Updates: `v4`]

.github/workflows/go-tests.yaml (3)

- `step-security/harden-runner v2`
- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-go v5` → [Updates: `v7`]

.github/workflows/npm-publish-oidc-changesets.yaml (8)

- `step-security/harden-runner v2`
- `actions/checkout v4` → [Updates: `v7`]
- `actions/github-script v7` → [Updates: `v9`]
- `celo-org/trivy-composite-action v1.0.1`
- `github/codeql-action v3` → [Updates: `v4`]
- `actions/setup-node v4` → [Updates: `v7`]
- `actions/setup-node v4` → [Updates: `v7`]
- `changesets/action v1` → [Updates: `v2.1.2`]

.github/workflows/npm-publish-token-akeyless-changesets.yaml (9)

- `step-security/harden-runner v2`
- `actions/checkout v4` → [Updates: `v7`]
- `actions/github-script v7` → [Updates: `v9`]
- `celo-org/trivy-composite-action v1.0.1`
- `github/codeql-action v3` → [Updates: `v4`]
- `kota65535/github-openvpn-connect-action v3.1.0`
- `actions/setup-node v4` → [Updates: `v7`]
- `actions/setup-node v4` → [Updates: `v7`]
- `changesets/action v1` → [Updates: `v2.1.2`]

.github/workflows/release.yaml (4)

- `actions/checkout v5` → [Updates: `v7`]
- `actions/setup-node v5` → [Updates: `v7`]
- `ubuntu 24.04`
- `node 20` → [Updates: `24`]

.github/workflows/scorecard.yaml (5)

- `actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11` → [Updates: `v4.4.0`, `v7.0.1`]
- `ossf/scorecard-action v2.3.1@0864cf19026789058feabb7e87baa5f140aac736` → [Updates: `v2.4.4`]
- `actions/upload-artifact v4` → [Updates: `v7`]
- `actions/github-script v7` → [Updates: `v9`]
- `github/codeql-action v3` → [Updates: `v4`]

.github/workflows/terraform-gcp-akeyless.yaml (9)

- `mxschmitt/action-tmate v3`
- `step-security/harden-runner v2`
- `google-github-actions/auth v2` → [Updates: `v3`]
- `actions/github-script v7` → [Updates: `v9`]
- `celo-org/trivy-composite-action v1.0.1`
- `github/codeql-action v3` → [Updates: `v4`]
- `hashicorp/setup-terraform v3` → [Updates: `v4`]
- `actions/upload-artifact v4` → [Updates: `v7`]
- `actions/upload-artifact v4` → [Updates: `v7`]

.github/workflows/terraform-gcp-openbao.yaml (9)

- `mxschmitt/action-tmate v3`
- `step-security/harden-runner v2`
- `google-github-actions/auth v2` → [Updates: `v3`]
- `actions/github-script v7` → [Updates: `v9`]
- `celo-org/trivy-composite-action v1.0.1`
- `github/codeql-action v3` → [Updates: `v4`]
- `hashicorp/setup-terraform v3` → [Updates: `v4`]
- `actions/upload-artifact v4` → [Updates: `v7`]
- `actions/upload-artifact v4` → [Updates: `v7`]

.github/workflows/terraform-gcp.yaml (9)

- `mxschmitt/action-tmate v3`
- `step-security/harden-runner v2`
- `google-github-actions/auth v2` → [Updates: `v3`]
- `actions/github-script v7` → [Updates: `v9`]
- `celo-org/trivy-composite-action v1.0.1`
- `github/codeql-action v3` → [Updates: `v4`]
- `hashicorp/setup-terraform v3` → [Updates: `v4`]
- `actions/upload-artifact v4` → [Updates: `v7`]
- `actions/upload-artifact v4` → [Updates: `v7`]

renovate-config (1)

.github/renovate.json

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository