Dependency Dashboard

Open
#29 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
5/5
Estimated time
Over a week
Newbie friendliness
15/100
Issue type
Refactor
Clarity
Needs clarification
Activity status
Stale
Tech stack
docker, github-actions, go, python
Domain
ci-cd, devops

Research direction

The issue is a Renovate dashboard covering .github/workflows/pr-operator.yml, precommit-validate.yml, and release-operator.yml. Start with the linked Dependency Dashboard documentation and review the listed rate-limited and open updates. Done is not defined by the issue; the updates are already represented by separate Renovate pull requests.

Written by the indexing model from the issue text.

Description

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (3)
Datasource Package Last Updated
github-actions pre-commit/action 2024-02-07
github-actions slsa-framework/slsa-github-generator 2025-02-24

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

  • Update actions/setup-go digest to 924ae3a
  • Update actions/setup-python digest to ece7cb0
  • Update dependency operator-framework/operator-sdk to v1.42.3
  • Update ossf/scorecard-action action to v2.4.4
  • Update softprops/action-gh-release action to v3.0.3
  • Update aquasecurity/trivy-action action to v0.36.0
  • Update actions/cache action to v6
  • Update actions/checkout action to v7
  • Update actions/setup-go action to v7
  • Update actions/setup-python action to v7
  • Update redhat-actions/podman-login action to v2
  • πŸ” Create all rate-limited PRs at once πŸ”

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

Detected Dependencies

github-actions (4)
.github/workflows/pr-operator.yml (51)
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • rubenesp87/semver-validation-action 0.1.0@8f4b9f2835a4826fbbdfe8f5dbb6ad8996cf5831 β†’ [Updates: v1]
  • rubenesp87/semver-validation-action 0.1.0@8f4b9f2835a4826fbbdfe8f5dbb6ad8996cf5831 β†’ [Updates: v1]
  • actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c β†’ [Updates: v7, v6]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c β†’ [Updates: v7, v6]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • docker/setup-qemu-action v4@ce360397dd3f832beb865e1373c09c0e9f86d70a β†’ [Updates: v4]
  • docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd β†’ [Updates: v4]
  • docker/build-push-action v7@bcafcacb16a39f128d818304e6c9c0c18556b85f β†’ [Updates: v7]
  • aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 β†’ [Updates: v0.36.0]
  • aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 β†’ [Updates: v0.36.0]
  • actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c β†’ [Updates: v7, v6]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • docker/setup-qemu-action v4@ce360397dd3f832beb865e1373c09c0e9f86d70a β†’ [Updates: v4]
  • docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd β†’ [Updates: v4]
  • docker/build-push-action v7@bcafcacb16a39f128d818304e6c9c0c18556b85f β†’ [Updates: v7]
  • aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 β†’ [Updates: v0.36.0]
  • aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 β†’ [Updates: v0.36.0]
  • actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c β†’ [Updates: v7, v6]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c β†’ [Updates: v7, v6]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c β†’ [Updates: v7, v6]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
.github/workflows/precommit-validate.yml (5)
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405 β†’ [Updates: v7, v6]
  • mikefarah/yq v4.52.5@0f4fb8d35ec1a939d78dd6862f494d19ec589f19 β†’ [Updates: v4.53.6]
  • pre-commit/action v3.0.1@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd
  • python 3.x
.github/workflows/release-operator.yml (68)
  • rubenesp87/semver-validation-action 0.1.0@8f4b9f2835a4826fbbdfe8f5dbb6ad8996cf5831 β†’ [Updates: v1]
  • rubenesp87/semver-validation-action 0.1.0@8f4b9f2835a4826fbbdfe8f5dbb6ad8996cf5831 β†’ [Updates: v1]
  • actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c β†’ [Updates: v7, v6]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c β†’ [Updates: v7, v6]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • docker/setup-qemu-action v4@ce360397dd3f832beb865e1373c09c0e9f86d70a β†’ [Updates: v4]
  • docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd β†’ [Updates: v4]
  • sigstore/cosign-installer v3@398d4b0eeef1380460a10c8013a76f728fb906ac β†’ [Updates: v4.1.2]
  • docker/login-action v4@4907a6ddec9925e35a0a9e82d7399ccc52663121 β†’ [Updates: v4]
  • docker/build-push-action v7@bcafcacb16a39f128d818304e6c9c0c18556b85f β†’ [Updates: v7]
  • aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 β†’ [Updates: v0.36.0]
  • aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 β†’ [Updates: v0.36.0]
  • actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • slsa-framework/slsa-github-generator v2.1.0
  • redhat-actions/podman-login v1@4934294ad0449894bcd1e9f191899d7292469603 β†’ [Updates: v2]
  • actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c β†’ [Updates: v7, v6]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • redhat-cop/github-actions v4.6@cc45c69b6655161f278271cd0c68ddcc1444a3f8
  • docker/setup-qemu-action v4@ce360397dd3f832beb865e1373c09c0e9f86d70a β†’ [Updates: v4]
  • docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd β†’ [Updates: v4]
  • sigstore/cosign-installer v3@398d4b0eeef1380460a10c8013a76f728fb906ac β†’ [Updates: v4.1.2]
  • docker/login-action v4@4907a6ddec9925e35a0a9e82d7399ccc52663121 β†’ [Updates: v4]
  • docker/build-push-action v7@bcafcacb16a39f128d818304e6c9c0c18556b85f β†’ [Updates: v7]
  • aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 β†’ [Updates: v0.36.0]
  • aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 β†’ [Updates: v0.36.0]
  • actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • slsa-framework/slsa-github-generator v2.1.0
  • redhat-actions/podman-login v1@4934294ad0449894bcd1e9f191899d7292469603 β†’ [Updates: v2]
  • actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c β†’ [Updates: v7, v6]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • softprops/action-gh-release v3.0.0@b4309332981a82ec1c5618f44dd2e27cc8bfbfda β†’ [Updates: v3.0.3]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1
  • peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1
  • actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c β†’ [Updates: v7, v6]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c β†’ [Updates: v7, v6]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae β†’ [Updates: v6, v5]
  • actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
.github/workflows/scorecard.yml (4)
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a β†’ [Updates: v2.4.4]
  • actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 β†’ [Updates: v4.38.1]
regex (2)
.github/workflows/pr-operator.yml (1)
  • operator-framework/operator-sdk v1.42.2 β†’ [Updates: v1.42.3]
.github/workflows/release-operator.yml (1)
  • operator-framework/operator-sdk v1.42.2 β†’ [Updates: v1.42.3]
  • Check this box to trigger a request for Renovate to run again on this repository
Dominant language
No language data
Stars
1
Forks
7
No merged PRs in 30d

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up β€” it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from redhat-cop/github-workflows-operators

All issues in redhat-cop/github-workflows-operators

Similar issues

More DevOps issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.