Skip to content

chore(deps): update github actions#253

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/github-actions
Open

chore(deps): update github actions#253
renovate[bot] wants to merge 1 commit intomainfrom
renovate/github-actions

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Apr 4, 2026

This PR contains the following updates:

Package Type Update Change
docker/login-action (changelog) action digest b45d80f4907a6d
super-linter/super-linter action minor v8.5.0v8.6.0

Release Notes

super-linter/super-linter (super-linter/super-linter)

v8.6.0

Compare Source

🚀 Features
🐛 Bugfixes
⬆️ Dependency updates
  • bundler: bump rubocop in /dependencies in the rubocop group (#​7514) (f2264d2)
  • bundler: bump rubocop in /dependencies in the rubocop group (#​7604) (c929dc3)
  • bundler: bump rubocop in /dependencies in the rubocop group (#​7662) (bfb2fd9)
  • bundler: bump rubocop-github in /dependencies in the rubocop group (#​7640) (a88d75e)
  • bundler: bump the rubocop group across 1 directory with 2 updates (#​7565) (56ae6b3)
  • docker: bump python in the docker-base-images group (#​7319) (717c087)
  • docker: bump the docker group across 1 directory with 4 updates (#​7698) (11c750e)
  • docker: bump the docker group across 1 directory with 5 updates (#​7615) (d7e1bd8)
  • docker: bump the docker group across 1 directory with 6 updates (#​7566) (0f9cf19)
  • docker: bump the docker group across 1 directory with 6 updates (#​7631) (ad7f508)
  • docker: bump the docker group across 1 directory with 9 updates (#​7513) (89e3725)
  • docker: bump the docker group with 2 updates (#​7577) (8b2f0c0)
  • docker: bump the docker group with 2 updates (#​7641) (7293e37)
  • docker: bump the docker group with 2 updates (#​7663) (eabfa25)
  • java: bump com.puppycrawl.tools:checkstyle (#​7689) (4c66d9d)
  • java: bump the java-gradle group across 2 directories with 2 updates (#​7581) (51af5a0)
  • npm: bump ajv from 6.12.6 to 6.14.0 in /dependencies (#​7550) (7f00eb7)
  • npm: bump axios from 1.12.2 to 1.13.5 in /dependencies (#​7510) (a891169)
  • npm: bump brace-expansion from 1.1.12 to 1.1.13 in /dependencies (#​7685) (92c4cea)
  • npm: bump express-rate-limit from 8.2.1 to 8.3.0 in /dependencies (#​7613) (c184a25)
  • npm: bump flatted from 3.3.3 to 3.4.1 in /dependencies (#​7636) (013d8a7)
  • npm: bump hono from 4.11.7 to 4.12.2 in /dependencies (#​7559) (5c3679f)
  • npm: bump hono from 4.12.5 to 4.12.7 in /dependencies (#​7624) (c31d9ad)
  • npm: bump markdown-it and renovate in /dependencies (#​7529) (9b794c2)
  • npm: bump path-to-regexp from 8.3.0 to 8.4.0 in /dependencies (#​7687) (309fb55)
  • npm: bump picomatch in /dependencies (#​7675) (df4f15e)
  • npm: bump qs from 6.14.1 to 6.14.2 in /dependencies (#​7520) (a9e6534)
  • npm: bump renovate (#​7699) (b91627f)
  • npm: bump renovate from 43.4.0 to 43.4.4 in /dependencies (#​7524) (2ab5b9c)
  • npm: bump smol-toml from 1.6.0 to 1.6.1 in /dependencies (#​7676) (d015498)
  • npm: bump the npm group across 1 directory with 15 updates (#​7595) (58ee821)
  • npm: bump the npm group across 1 directory with 2 updates (#​7623) (ddb4fbb)
  • npm: bump the npm group across 1 directory with 2 updates (#​7664) (7e22df4)
  • npm: bump the npm group across 1 directory with 3 updates (#​7612) (355a779)
  • npm: bump the npm group across 1 directory with 4 updates (#​7633) (6e8bf45)
  • npm: bump the npm group across 1 directory with 7 updates (#​7651) (946725f)
  • npm: bump the npm group across 1 directory with 9 updates (#​7690) (db85efc)
  • npm: bump underscore from 1.13.7 to 1.13.8 in /dependencies (#​7584) (9a661fa)
  • python: bump ruff (#​7659) (576d1c4)
  • python: bump snakefmt (#​7668) (1723a83)
  • python: bump the pip group across 1 directory with 3 updates (#​7509) (d580241)
  • python: bump the pip group across 1 directory with 3 updates (#​7582) (56b7621)
  • python: bump the pip group across 1 directory with 3 updates (#​7634) (e3d8eca)
  • python: bump the pip group across 1 directory with 3 updates (#​7648) (2e8137a)
  • python: bump the pip group across 1 directory with 5 updates (#​7684) (cb17f60)
  • python: bump the pip group across 1 directory with 6 updates (#​7567) (b823682)
  • python: bump the pip group across 1 directory with 6 updates (#​7617) (3d2fc0d)
🧰 Maintenance

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies label Apr 4, 2026
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 4, 2026

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 8616473.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/docker/login-action 4907a6ddec9925e35a0a9e82d7399ccc52663121 🟢 8.4
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 9security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
SAST🟢 9SAST tool detected but not run on all commits

Scanned Files

  • .github/workflows/scan-image.yml

@codecov
Copy link
Copy Markdown

codecov bot commented Apr 4, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 71.82%. Comparing base (a93a84f) to head (8616473).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #253   +/-   ##
=======================================
  Coverage   71.82%   71.82%           
=======================================
  Files          11       11           
  Lines         802      802           
  Branches      124      124           
=======================================
  Hits          576      576           
  Misses        163      163           
  Partials       63       63           
Flag Coverage Δ
backend 71.82% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate bot requested a review from DevSecNinja April 4, 2026 01:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant