Dependency Dashboard
Nobody has claimed this yet.
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 25/100
- Issue type
- Refactor
- Clarity
- Mostly clear
- Activity status
- Stale
- Tech stack
- github-actions, javascript
- Domain
- build-system, devops
Research direction
Review the Renovate PRs linked from .github/workflows/publish.yml, especially updates for actions/checkout and the peaceiris actions. Check the dependency entries in themes/devsec/layouts/baselines/profile.html and tools/contributors/package.json, then verify that the site workflow and contributor tooling still work after the updates are merged.
Written by the indexing model from the issue text.
Description
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Config Migration Needed
- Select this checkbox to let Renovate create an automated Config Migration PR.
Deprecations / Replacements
[!WARNING]
The following dependencies are either deprecated or have replacements available.
| Datasource | Package | Replacement PR? |
|---|---|---|
| npm | request |  |
| npm | request-promise-native | |
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
- Update actions/checkout action to v7
- Update peaceiris/actions-gh-pages action to v4
- Update peaceiris/actions-hugo action to v3
- Click on this checkbox to rebase all open PRs at once
Detected Dependencies
github-actions (1)
.github/workflows/publish.yml (4)
actions/checkout v4→ [Updates:v7]peaceiris/actions-hugo v2→ [Updates:v3]peaceiris/actions-gh-pages v3→ [Updates:v4]hugo 0.166.0
html (1)
themes/devsec/layouts/baselines/profile.html (1)
require.js 2.3.8
npm (1)
tools/contributors/package.json (2)
request ^2.83.0request-promise-native ^1.0.5
- Check this box to trigger a request for Renovate to run again on this repository
- Dominant language
- SCSS
- Stars
- 22
- Forks
- 15
- Avg merge
- 4h 41m
- Merged PRs (30d)
- 1
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from dev-sec/dev-sec.github.io
-
enhancement help wanted
dev-sec/dev-sec.github.io#30 · 2 assignees ·
-
dev-sec/dev-sec.github.io#29 · 2 assignees ·
-
enhancement
Difficulty 4/5 3-5 days Newbie friendliness 25/100
dev-sec/dev-sec.github.io#24 · 10 comments ·
-
Difficulty 3/5 1-2 days Newbie friendliness 45/100
dev-sec/dev-sec.github.io#20 ·
-
Optimize assets Open
Difficulty 5/5 Over a week Newbie friendliness 25/100
dev-sec/dev-sec.github.io#10 · 1 comment ·
All issues in dev-sec/dev-sec.github.io
Similar issues
-
type/automation type/tech-debt
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
priority: p3
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
googleapis/librarian#7636 ·
-
package-update
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
oSoWoSo/vOid_Community_repOsitory#147 · 1 comment ·
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
-
agentic-workflows cascade-suspected
Difficulty 1/5 Under an hour Newbie friendliness 88/100