Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/cloudposse/.github).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] Update reviewdog/action-suggester action to v1.25.0
- [ ] Update reviewdog/action-tflint action to v1.26.0
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [Update mszostok/codeowners-validator action to v0.7.4](../pull/167)
- [ ] [Update github/codeql-action action to v3.38.0](../pull/126)

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update aws-actions/configure-aws-credentials action to v6.2.4](../pull/276)
- [ ] [Update dflook/terraform-fmt action to v1.49.0](../pull/265)
- [ ] [Update ossf/scorecard-action action to v2.4.4](../pull/142)
- [ ] [Update step-security/harden-runner action to v2.21.1](../pull/280)
- [ ] [Update cloudposse-github-actions/readme action to v3](../pull/270)
- [ ] [Update dflook/terraform-fmt action to v3](../pull/272)
- [ ] [Update github/codeql-action action to v4](../pull/273)
- [ ] [Update nick-fields/assert-action action to v4](../pull/274)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [Update cloudposse/github-action-yaml-config-query action to v1](../pull/125)

## Detected Dependencies

github-actions (35)

.github/actions/verify-sha-pinning/action.yml (2)

- `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3`

.github/workflows/auto-release.yml (1)

- `cloudposse/.github main`

.github/workflows/org-banner.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cloudposse-github-actions/screenshot main@6240c8f6d9d557816eb0692a64d24386e0f3ebb6`
- `stefanzweifel/git-auto-commit-action v7.2.0@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d`

.github/workflows/repo-banner.yml (6)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `ahmadnassri/action-metadata v2.1.2@c292173f9b88cf71f2dddff1fea0a3c524f5713d`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `cloudposse-github-actions/screenshot main@6240c8f6d9d557816eb0692a64d24386e0f3ebb6`
- `stefanzweifel/git-auto-commit-action v7.2.0@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d`

.github/workflows/shared-access-controller.yml (1)

- `cloudposse/github-action-yaml-config-query v1.0.1@8178e0c0d186f53de40f6bcf8e039f1e6a9aefc5`

.github/workflows/shared-atmos-readme.yml (3)

- `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cloudposse-github-actions/readme v2.0.1@c52e0a99fff073281646416093a43fbf6859f54e` → [Updates: `v3.1.0`]

.github/workflows/shared-auto-release.yml (3)

- `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1`
- `cloudposse/github-action-yaml-config-query 0.1.4@9ac217bcc3e90df15bc14c7ce41606ba84ddf6a8` → [Updates: `v1.0.1`]
- `cloudposse/github-action-auto-release v4.0.1@8f9b7192d095af697c5900235e4aecf930663f28`

.github/workflows/shared-ci-github-action.yml (4)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `mpoc/nexus-validate-using-remote-schema-action main@581802c40f1765bb4b406ae4295ac762b3ba4080`
- `convictional/trigger-workflow-and-wait v1.6.5@f69fa9eedd3c62a599220f4d5745230e237904be`

.github/workflows/shared-ci-terraform.yml (9)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dflook/terraform-fmt v1.49.0-dockerhub@c6e82d524f3ef6f84ba00b8fec05940c4b60bbed` → [Updates: `v1.49.0`, `v3.1.0`]
- `reviewdog/action-suggester v1.24.3@2558ba17e65a9039e73764a73009fc05fef28a46` → [Updates: `v1.25.0`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `hashicorp/setup-terraform v4.0.1@dfe3c3f87815947d99a8997f908cb6525fc44e9e`
- `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9`
- `reviewdog/action-tflint v1.25.0@54a5e5aed57dcfbb4662ec548de876df33d6288d` → [Updates: `v1.26.0`]

.github/workflows/shared-ci-typescript-app-check-dist.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020`
- `stefanzweifel/git-auto-commit-action v7.2.0@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d`

.github/workflows/shared-codeowners.yml (5)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `mszostok/codeowners-validator v0.7.1@2f478ec3b2c8a321d46fca773f6285a447234f6a` → [Updates: `v0.7.4`]
- `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `mszostok/codeowners-validator v0.7.4@7f3f5e28c6d7b8dfae5731e54ce2272ca384592f`

.github/workflows/shared-github-action.yml (3)

- `cloudposse/.github main`
- `cloudposse/.github main`
- `cloudposse/.github main`

.github/workflows/shared-go-auto-release.yml (12)

- `cloudposse/.github main`
- `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1`
- `step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c` → [Updates: `v2.21.1`]
- `anchore/sbom-action v0.24.2@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `crazy-max/ghaction-import-gpg v7.0.0@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1`
- `goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94`
- `actions/attest-build-provenance v4.2.2@4d101475d8b20a2381f78447822ac1eab6504dd8`
- `cloudposse/.github main`

.github/workflows/shared-go-feature-release.yml (5)

- `cloudposse/.github main`
- `cloudposse-github-actions/get-pr v3.1.0@6db391bee79f3640fca3026877ced2f2b1f2a992`
- `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `peter-evans/create-or-update-comment v5.0.0@e8674b075228eee787fea43ef493e45ece1004c9`
- `cloudposse/.github main`

.github/workflows/shared-readme.yml (3)

- `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cloudposse-github-actions/readme v3.1.0@bdc647d2f22afb3404641c2fd4c12b6ff43cee2d`

.github/workflows/shared-release-branches.yml (5)

- `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1`
- `cloudposse/github-action-major-release-tagger 2.0.0@853c309982b8cd78c46a4cdc17cca6720d52541a`
- `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1`
- `cloudposse/github-action-release-branch-manager 2.0.0@d1eac0bfdfcf2c3e2c1a9669a6c5783a448bee65`
- `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3`

.github/workflows/shared-scheduled-context.yml (2)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cloudposse/actions 0.33.0@d4ad42a5434d60d082a2c4fd585c2f8acba4e719`

.github/workflows/shared-terraform-chatops.yml (9)

- `cloudposse/.github main`
- `cloudposse-github-actions/get-pr v3.1.0@6db391bee79f3640fca3026877ced2f2b1f2a992`
- `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `peter-evans/create-or-update-comment v5.0.0@e8674b075228eee787fea43ef493e45ece1004c9`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1`
- `aws-actions/configure-aws-credentials v6.2.3@e6de054238d6b7531b4efff3b6587d9aade6a06c` → [Updates: `v6.2.4`]
- `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `robherley/go-test-action v1.1.0@2f859e0c8769d755d3174eecb9af8f64660827f3`

.github/workflows/shared-terraform-module.yml (5)

- `cloudposse/.github main`
- `cloudposse/.github main`
- `cloudposse/.github main`
- `cloudposse/github-action-release-label-validator 1.1.0@ecf4734605595d7796cbfdd27bddf38b68b010f1`
- `cloudposse/.github main`

.github/workflows/shared-terraform-scheduled.yml (2)

- `cloudposse/.github main`
- `cloudposse/.github main`

.github/workflows/verify-sha-pinning.yml (1)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`

migrate/templates/github-action/.github/workflows/branch.yml (1)

- `cloudposse/.github main`

migrate/templates/github-action/.github/workflows/release.yml (1)

- `cloudposse/.github main`

migrate/templates/terraform-module/.github/workflows/branch.yml (1)

- `cloudposse/.github main`

migrate/templates/terraform-module/.github/workflows/chatops.yml (1)

- `cloudposse/.github main`

migrate/templates/terraform-module/.github/workflows/release.yml (1)

- `cloudposse/.github main`

migrate/templates/terraform-module/.github/workflows/scheduled.yml (1)

- `cloudposse/.github main`

workflow-templates/auto-readme.yml (2)

- `actions/checkout v7`
- `cloudposse/actions 0.33.0`

workflow-templates/dockerized-app-feature-branch.yml (1)

- `cloudposse/github-actions-workflows main`

workflow-templates/dockerized-app-main-branch.yaml (1)

- `cloudposse/github-actions-workflows main`

workflow-templates/dockerized-app-release.yaml (1)

- `cloudposse/github-actions-workflows main`

workflow-templates/github-composite-action-feature-branch.yml (1)

- `cloudposse/github-actions-workflows main`

workflow-templates/github-composite-action-main-branch.yml (1)

- `cloudposse/github-actions-workflows main`

workflow-templates/scorecard.yml (4)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46` → [Updates: `v2.4.4`]
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `github/codeql-action v3.26.6@4dd16135b69a43b6c8efb853346f8437d92d3c93` → [Updates: `v3.38.0`, `v4.38.0`]

workflow-templates/test-github-action.yml (2)

- `actions/checkout v7`
- `nick-fields/assert-action v2` → [Updates: `v4`]

html (2)

banner/index.html (1)

- `normalize 8.0.1`

profile/banner/index.html (1)

- `normalize 8.0.1`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository