Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update GitHub actions (SonarSource/ci-github-actions, SonarSource/vault-action-wrapper)
• Update dependency mise to 2026.5.18
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (27)

.github/workflows/check-sca.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• SonarSource/ci-github-actions master@fdeb37e59320b102baec4c58662355e715b1c092 → [Updates: master]

.github/workflows/pr-cleanup.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]

.github/workflows/pre-commit.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• SonarSource/gh-action_pre-commit 1.2.0@2ddc0c7fdabce0adfaaa4075a17690972ed9961a

.github/workflows/PullRequestClosed.yml (2)

• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• sonarsource/gh-action-lt-backlog v2

.github/workflows/PullRequestCreated.yml (2)

• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• sonarsource/gh-action-lt-backlog v2

.github/workflows/RequestReview.yml (2)

• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• sonarsource/gh-action-lt-backlog v2

.github/workflows/SubmitReview.yml (2)

• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• sonarsource/gh-action-lt-backlog v2

.github/workflows/test-build-number.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• re-actors/alls-green v1.2.2@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe

.github/workflows/test-pr-cleanup.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]

.github/workflows/test-shell-scripts.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]

.github/workflows/test-update-release-channel.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]

.github/workflows/unified-dogfooding.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• SonarSource/unified-dogfooding-actions 1.0.0@54cee68ff08f10645c757675c59d232063e0b947

build-gradle/action.yml (4)

• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/attest-build-provenance v4.1.0@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32

build-maven/action.yml (3)

• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• actions/attest-build-provenance v4.1.0@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32

build-npm/action.yml (5)

• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/attest-build-provenance v4.1.0@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32

build-poetry/action.yml (5)

• SonarSource/gh-action_cache v1.6.0@a7d13cdd1c9f097a5f8382ccec463be2831e3dbc
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• actions/attest-build-provenance v4.1.0@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32

build-yarn/action.yml (5)

• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• SonarSource/gh-action_cache v1.6.0@a7d13cdd1c9f097a5f8382ccec463be2831e3dbc
• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• actions/attest-build-provenance v4.1.0@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32

cache/action.yml (1)

• SonarSource/gh-action_cache v1.6.0@a7d13cdd1c9f097a5f8382ccec463be2831e3dbc

check-sca/action.yml (1)

• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]

code-signing/action.yml (3)

• SonarSource/gh-action_cache v1.6.0@a7d13cdd1c9f097a5f8382ccec463be2831e3dbc
• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• digicert/ssm-code-signing v1.2.1@1d820463733701cf1484c7eb5d7d24a15ca2c454

config-gradle/action.yml (4)

• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• gradle/actions v6.1.0@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e
• SonarSource/gh-action_cache v1.6.0@a7d13cdd1c9f097a5f8382ccec463be2831e3dbc

config-maven/action.yml (3)

• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• SonarSource/gh-action_cache v1.6.0@a7d13cdd1c9f097a5f8382ccec463be2831e3dbc

config-npm/action.yml (3)

• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• SonarSource/gh-action_cache v1.6.0@a7d13cdd1c9f097a5f8382ccec463be2831e3dbc

config-pip/action.yml (2)

• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• SonarSource/gh-action_cache v1.6.0@a7d13cdd1c9f097a5f8382ccec463be2831e3dbc

get-build-number/action.yml (3)

• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae

promote/action.yml (3)

• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]

update-release-channel/action.yml (2)

• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]

regex (8)

.github/workflows/test-build-number.yml (1)

• mise 2026.5.9 → [Updates: 2026.5.18]

.github/workflows/test-shell-scripts.yml (1)

• mise 2026.5.9 → [Updates: 2026.5.18]

.github/workflows/test-update-release-channel.yml (1)

• mise 2026.5.9 → [Updates: 2026.5.18]

build-npm/action.yml (1)

• mise 2026.5.9 → [Updates: 2026.5.18]

build-poetry/action.yml (1)

• mise 2026.5.9 → [Updates: 2026.5.18]

build-yarn/action.yml (1)

• mise 2026.5.9 → [Updates: 2026.5.18]

promote/action.yml (1)

• mise 2026.5.9 → [Updates: 2026.5.18]

update-release-channel/action.yml (1)

• mise 2026.5.9 → [Updates: 2026.5.18]

---

• Check this box to trigger a request for Renovate to run again on this repository