[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-python	action	minor	v7.0.0 → v7.1.0
docker/login-action	action	minor	v4.6.0 → v4.7.0
github/codeql-action	action	patch	v4.39.0 → v4.39.1
zizmorcore/zizmor-action	action	minor	v0.7.1 → v0.8.0

---

Release Notes

actions/setup-python

v7.1.0

Compare Source

What's Changed

Enhancements

• Add mirror and mirror-token inputs for custom Python distribution sources by @​luhenry in #​1302
• Improve error message clarity by @​v-lmvysakh in #​1351

Dependency Upgrade

• Upgrade browserslist from 4.28.2 to 4.28.9 by @​dependabot in #​1353
• Upgrade @​typescript-eslint/parser from 8.62.0 to 8.70.0 by @​dependabot in #​1343
• Upgrade eslint-plugin-jest from 29.15.2 to 29.16.6 by @​dependabot in #​1342
• Upgrade @​vercel/ncc from 0.44.0 to 0.45.0 by @​dependabot in #​1357
• Upgrade @​types/semver from 7.7.1 to 7.8.0 by @​dependabot in #​1359
• Upgrade undici from 6.28.0 to 6.29.0 by @​dependabot in #​1364
• Upgrade ts-jest from 29.4.11 to 29.4.14 by @​dependabot in #​1361
• Upgrade brace-expansion from 5.0.9 to 5.0.12 by @​dependabot in #​1365
• Upgrade prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 by @​dependabot in #​1363
• Upgrade @​typescript-eslint/eslint-plugin from 8.62.0 to 8.71.1 by @​dependabot in #​1369
• Upgrade actions/checkout from 7.0.0 to 7.0.1 by @​dependabot in #​1345
• Upgrade cache to 6.3.0 by @​v-HarithaVattikuti in #​1370
• Resolve Basic Validation audit failures by @​v-HarithaVattikuti in #​1347
• Resolve npm audit failures by @​v-HarithaVattikuti in #​1350

New Contributors

• @​luhenry made their first contribution in #​1302

Full Changelog: actions/setup-python@v7.0.0...v7.1.0

docker/login-action

v4.7.0

Compare Source

• Preserve explicit ECR settings in registry-auth by @​crazy-max in #​1089
• Use registry hosts for scoped credentials by @​crazy-max in #​1088
• Raise Docker Hub OIDC max expiry to 6 hours by @​crazy-max in #​1068
• Log Docker Hub OIDC token exchange progress by @​crazy-max in #​1061
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1154.0 in #​1093
• Bump @​docker/actions-toolkit from 0.94.0 to 0.107.0 in #​1100
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in #​1077
• Bump csv-parse from 7.0.1 to 7.0.3 in #​1078
• Bump handlebars from 4.7.9 to 4.7.10 in #​1091
• Bump js-yaml from 5.2.2 to 5.5.0 in #​1066
• Bump postcss from 8.5.22 to 8.5.26 in #​1071
• Bump postcss-selector-parser from 7.1.1 to 7.1.6 in #​1092
• Bump source-map-js from 1.2.1 to 1.2.2 in #​1090
• Bump undici from 6.27.0 to 6.29.1 in #​1085
• Bump uuid from 14.0.1 to 14.0.3 in #​1096

Full Changelog: docker/login-action@v4.6.0...v4.7.0

github/codeql-action

v4.39.1

Compare Source

• Update default CodeQL bundle version to 2.27.3. #​4256

zizmorcore/zizmor-action

v0.8.0

Compare Source

The action now supports prereleases.

The default has not changed, but you can pass a prerelease version
of zizmor or version: prerelease to get whatever latest
prerelease the action knows about.

What's Changed

• Support prereleases by @​woodruffw in #​182
• Sync zizmor versions by @​github-actions[bot] in #​184

Full Changelog: zizmorcore/zizmor-action@v0.7.1...v0.8.0

---

Configuration

📅 Schedule: (in timezone Europe/Zurich)

• Branch creation
  • Only on Monday (* * * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: flowcool/ghostfolio-ibkr-sync
• Branch: main
• File: .coderabbit.yaml
• Commit: db72447
• Layers: Repository YAML (base), Organization UI (inherited)
• Review profile: CHILL
• Plan: Advanced
• Run ID: 32c55b56-fd38-429b-bc25-6789b144618d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[flowcool]

@pullfrog review