Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update netresearch/.github digest to a23708d
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package aquasecurity/trivy-action).

Files affected: .github/workflows/build.yml, .github/workflows/security.yml

---

Detected Dependencies

composer (2)

app/composer.json (2)

• php >=8.5
• phpbu/phpbu ^6.0

app/full/composer.json (11)

• php >=8.5
• phpbu/phpbu ^6.0
• aws/aws-sdk-php ^3.10
• google/cloud-storage ^1.42
• microsoft/azure-storage-blob ^1.4
• phpseclib/phpseclib ^3.0
• sebastianfeldmann/ftp ^0.9.2
• kunalvarma05/dropbox-php-sdk ^0.5
• guzzlehttp/guzzle ^7.5
• phpmailer/phpmailer ^7.0
• vlucas/phpdotenv ^5.0

docker-compose (1)

compose.yml

dockerfile (1)

Dockerfile (4)

• docker/dockerfile 1.23
• php 8.5-alpine@sha256:dccc3abcf3d37a6bb081477a66ed4344716784a6ef5107625ae6ba9ec52df778
• composer 2@sha256:dc292c5c0f95f526b051d4c341bf08e7e2b18504c74625e3203d7f123050e318
• composer 2@sha256:dc292c5c0f95f526b051d4c341bf08e7e2b18504c74625e3203d7f123050e318

github-actions (7)

.github/workflows/auto-merge.yml (1)

• netresearch/.github main@bbb6bb514c65de778bdfc31735b006e2c6245180 → [Updates: main]

.github/workflows/build.yml (14)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121
• docker/bake-action v7.1.0@a66e1c87e2eca0503c343edf1d208c716d54b8a8
• aquasecurity/trivy-action 0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• aquasecurity/trivy-action 0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225
• docker/bake-action v7.1.0@a66e1c87e2eca0503c343edf1d208c716d54b8a8
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003

.github/workflows/cleanup-packages.yml (1)

• actions/delete-package-versions v5@e5bc658cc4c965c472efe991f8beea3981499c55

.github/workflows/release.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121
• docker/bake-action v7.1.0@a66e1c87e2eca0503c343edf1d208c716d54b8a8
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003
• softprops/action-gh-release v3.0.0@b4309332981a82ec1c5618f44dd2e27cc8bfbfda

.github/workflows/scorecard.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225

.github/workflows/security.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
• docker/bake-action v7.1.0@a66e1c87e2eca0503c343edf1d208c716d54b8a8
• aquasecurity/trivy-action 0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• gitleaks/gitleaks-action v2@ff98106e4c7b2bc287b24eaf42907196329070c7

.github/workflows/test.yml (6)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
• docker/bake-action v7.1.0@a66e1c87e2eca0503c343edf1d208c716d54b8a8
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
• docker/bake-action v7.1.0@a66e1c87e2eca0503c343edf1d208c716d54b8a8

regex (1)

Dockerfile (2)

• composer 2@sha256:dc292c5c0f95f526b051d4c341bf08e7e2b18504c74625e3203d7f123050e318
• composer 2@sha256:dc292c5c0f95f526b051d4c341bf08e7e2b18504c74625e3203d7f123050e318

renovate-config-presets (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository