Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

Update zizmorcore/zizmor-action action to v0.7.1

Detected Dependencies

dockerfile (3)

1.10/Dockerfile (1)

php 8-alpine

2.2/Dockerfile (1)

php 8-alpine

latest/Dockerfile (1)

php 8-alpine

github-actions (5)

.github/workflows/1.10.yaml (17)

actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302

docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302

actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

docker/setup-qemu-action v4.4.0@99012661954931238ded8c8b007157a8430204e1

docker/setup-buildx-action v4.4.1@f87e5991a6d7451dcb8d9637bfbc97413f497069

docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

docker/build-push-action v7.4.0@c3c9e263c25d99ce0380d002d59b67737d91b0dc

docker/build-push-action v7.4.0@c3c9e263c25d99ce0380d002d59b67737d91b0dc

actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9

actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333

docker/setup-buildx-action v4.4.1@f87e5991a6d7451dcb8d9637bfbc97413f497069

docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

.github/workflows/2.2.yaml (17)

actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302

docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302

actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

docker/setup-qemu-action v4.4.0@99012661954931238ded8c8b007157a8430204e1

docker/setup-buildx-action v4.4.1@f87e5991a6d7451dcb8d9637bfbc97413f497069

docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

docker/build-push-action v7.4.0@c3c9e263c25d99ce0380d002d59b67737d91b0dc

docker/build-push-action v7.4.0@c3c9e263c25d99ce0380d002d59b67737d91b0dc

actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9

actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333

docker/setup-buildx-action v4.4.1@f87e5991a6d7451dcb8d9637bfbc97413f497069

docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

.github/workflows/latest.yaml (17)

actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302

docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302

actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

docker/setup-qemu-action v4.4.0@99012661954931238ded8c8b007157a8430204e1

docker/setup-buildx-action v4.4.1@f87e5991a6d7451dcb8d9637bfbc97413f497069

docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

docker/build-push-action v7.4.0@c3c9e263c25d99ce0380d002d59b67737d91b0dc

docker/build-push-action v7.4.0@c3c9e263c25d99ce0380d002d59b67737d91b0dc

actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9

actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333

docker/setup-buildx-action v4.4.1@f87e5991a6d7451dcb8d9637bfbc97413f497069

docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

.github/workflows/shellcheck.yaml (1)

actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/zizmor.yaml (2)

actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

zizmorcore/zizmor-action v0.6.4@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 → [Updates: v0.7.1]

regex (2)

2.2/Dockerfile (1)

composer/composer 2.2.30

latest/Dockerfile (1)

composer/composer 2.10.3

Check this box to trigger a request for Renovate to run again on this repository

@alcohol

@alcohol I think there's a way to trigger the PR's automatically by changing the config but right now it's manual from this issue.

You can also see what assets it's currently configured on.

Not sure I understand the error here. The 2.2 branch does not relate to the version mentioned (2.8.9)?

Ahh I think I know what's missing... let me PR a fix

Thanks for fixing that, totally didn't think that another rule would need to be added to explicitly disable those for that file.

Found out you can create a branch called renovate/<something> which would run the configuration to show if its valid or not.

Could prob simply those rules to:

    "packageRules": [
        {
            "description": "Disables major and minor updates for composer/composer in 2.2",
            "matchFileNames": [
                "2.2/Dockerfile"
            ],
            "matchPackageNames": [
                "composer/composer"
            ],
            "matchUpdateTypes": [
                "major",
                "minor"
            ],
            "enabled": false
        },
        {
            "description": "Configures updates for composer/composer in 2.2",
            "matchFileNames": [
                "2.2/Dockerfile"
            ],
            "matchPackageNames": [
                "composer/composer"
            ],
            "matchUpdateTypes": [
                "patch"
            ],
            "commitMessageSuffix": " (2.2)",
            "additionalBranchPrefix": "2.2-"
        },
        {
            "description": "Configures updates for composer/composer in latest",
            "matchFileNames": [
                "latest/Dockerfile"
            ],
            "matchPackageNames": [
                "composer/composer"
            ],
            "commitMessageSuffix": " (Latest)",
            "additionalBranchPrefix": "latest-"
        }
    ],

Which removes the explicit enable and unrequired

        {
            "matchPackageNames": [
                "composer/composer"
            ],
            "enabled": true
        },

Yeah that sounds good to me. Feel free to submit a PR. Otherwise I will try to pick it up sometime next week.

Navigation Menu

Repository navigation

Dependency Dashboard #372

Pending Status Checks

Detected Dependencies

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Dependency Dashboard #372

Description

Pending Status Checks

Detected Dependencies

Activity

inverse commented on May 20, 2025

alcohol commented on May 20, 2025

inverse commented on May 20, 2025

inverse commented on May 22, 2025

alcohol commented on May 23, 2025

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions