Dependency Dashboard

Start with the Dependency Dashboard and its open pgp update at ../pull/4, then review the listed Cargo.toml, Dockerfile, .github/workflows/build_docker_image.yml, and csaf_validator/package.json entries. This is an automated update queue rather than a single scoped task, and the existing pull request shows work is already underway.

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): pin oci.stackable.tech/sdp/ubi9-rust-builder docker tag to 0404807
• chore(deps): update registry.access.redhat.com/ubi9/nodejs-20-minimal docker digest to cd057da
• chore(deps): update all dependencies (patch only) (@secvisogram/csaf-validator-lib, anyhow, chrono, color-eyre, reqwest, serde_json, sha2)
• chore(deps): update actions/checkout action to v4.3.0
• chore(deps): update docker/login-action action to v3.6.0
• chore(deps): update rust crate regex to v1.12.2
• chore(deps): update sigstore/cosign-installer action to v3.10.1
• chore(deps): update actions/checkout action to v5
• chore(deps): update docker/build-push-action action to v6
• chore(deps): update sigstore/cosign-installer action to v4
• fix(deps): update dependency @secvisogram/csaf-validator-lib to v2
• chore(deps): lock file maintenance
• 🔐 Create all pending approval PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update rust crate pgp to 0.14.0 [security]

Detected dependencies