Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• Update dependency mise to 2026.4.14

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update GitHub actions (major) (actions/attest-build-provenance, actions/cache, actions/checkout, actions/upload-artifact, gradle/actions, jdx/mise-action)

Detected Dependencies

github-actions (24)

.github/workflows/pr-cleanup.yml (1)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]

.github/workflows/pre-commit.yml (2)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• SonarSource/gh-action_pre-commit 1.2.0@2ddc0c7fdabce0adfaaa4075a17690972ed9961a

.github/workflows/PullRequestClosed.yml (2)

• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820
• sonarsource/gh-action-lt-backlog v2

.github/workflows/PullRequestCreated.yml (2)

• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820
• sonarsource/gh-action-lt-backlog v2

.github/workflows/RequestReview.yml (2)

• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820
• sonarsource/gh-action-lt-backlog v2

.github/workflows/slack_notify.yml (1)

• SonarSource/gh-action_slack-notify 1.0.2@9532fdcfa4143ed5da2da7b0e77172abbe24ae33

.github/workflows/SubmitReview.yml (2)

• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820
• sonarsource/gh-action-lt-backlog v2

.github/workflows/test-build-number.yml (5)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• re-actors/alls-green v1.2.2@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe

.github/workflows/test-pr-cleanup.yml (4)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v5.0.5]
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]

.github/workflows/test-shell-scripts.yml (3)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• jdx/mise-action v3.6.3@5228313ee0372e111a38da051671ca30fc5a96db → [Updates: v4.0.1]
• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820

.github/workflows/unified-dogfooding.yml (1)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]

build-gradle/action.yml (3)

• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• actions/attest-build-provenance v3.2.0@96278af6caaf10aea03fd8d33a09a777ca52d62f → [Updates: v4.1.0]

build-maven/action.yml (2)

• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820
• actions/attest-build-provenance v3.2.0@96278af6caaf10aea03fd8d33a09a777ca52d62f → [Updates: v4.1.0]

build-npm/action.yml (4)

• jdx/mise-action v3.6.3@5228313ee0372e111a38da051671ca30fc5a96db → [Updates: v4.0.1]
• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• actions/attest-build-provenance v3.2.0@96278af6caaf10aea03fd8d33a09a777ca52d62f → [Updates: v4.1.0]

build-poetry/action.yml (4)

• SonarSource/gh-action_cache v1.4.4@55df12d329333911afa3e89a9b558fbf47dcd61c
• jdx/mise-action v3.6.3@5228313ee0372e111a38da051671ca30fc5a96db → [Updates: v4.0.1]
• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820
• actions/attest-build-provenance v3.2.0@96278af6caaf10aea03fd8d33a09a777ca52d62f → [Updates: v4.1.0]

build-yarn/action.yml (4)

• jdx/mise-action v3.6.3@5228313ee0372e111a38da051671ca30fc5a96db → [Updates: v4.0.1]
• SonarSource/gh-action_cache v1.4.4@55df12d329333911afa3e89a9b558fbf47dcd61c
• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820
• actions/attest-build-provenance v3.2.0@96278af6caaf10aea03fd8d33a09a777ca52d62f → [Updates: v4.1.0]

cache/action.yml (1)

• SonarSource/gh-action_cache v1.4.4@55df12d329333911afa3e89a9b558fbf47dcd61c

code-signing/action.yml (3)

• SonarSource/gh-action_cache v1.4.4@55df12d329333911afa3e89a9b558fbf47dcd61c
• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820
• digicert/ssm-code-signing v1.2.1@1d820463733701cf1484c7eb5d7d24a15ca2c454

config-gradle/action.yml (3)

• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820
• gradle/actions v4.4.4@748248ddd2a24f49513d8f472f81c3a07d4d50e1 → [Updates: v6.1.0]
• SonarSource/gh-action_cache v1.4.4@55df12d329333911afa3e89a9b558fbf47dcd61c

config-maven/action.yml (2)

• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820
• SonarSource/gh-action_cache v1.4.4@55df12d329333911afa3e89a9b558fbf47dcd61c

config-npm/action.yml (3)

• jdx/mise-action v3.6.3@5228313ee0372e111a38da051671ca30fc5a96db → [Updates: v4.0.1]
• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820
• SonarSource/gh-action_cache v1.4.4@55df12d329333911afa3e89a9b558fbf47dcd61c

config-pip/action.yml (2)

• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820
• SonarSource/gh-action_cache v1.4.4@55df12d329333911afa3e89a9b558fbf47dcd61c

get-build-number/action.yml (3)

• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v5.0.5]
• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v5.0.5]

promote/action.yml (2)

• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820
• jdx/mise-action v3.6.3@5228313ee0372e111a38da051671ca30fc5a96db → [Updates: v4.0.1]

regex (5)

.github/workflows/test-shell-scripts.yml (1)

• mise 2026.3.17 → [Updates: 2026.4.14]

build-npm/action.yml (1)

• mise 2026.3.17 → [Updates: 2026.4.14]

build-poetry/action.yml (1)

• mise 2026.3.17 → [Updates: 2026.4.14]

build-yarn/action.yml (1)

• mise 2026.3.17 → [Updates: 2026.4.14]

promote/action.yml (1)

• mise 2026.3.17 → [Updates: 2026.4.14]

---

• Check this box to trigger a request for Renovate to run again on this repository