Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): lock file maintenance

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update github actions (docker/bake-action, docker/login-action, docker/setup-buildx-action, github/codeql-action)

---

Warning

Renovate failed to look up the following dependencies: Failed to look up github-tags package aquasecurity/trivy-action: no-result.

Files affected: .github/workflows/build.yml, .github/workflows/security.yml

---

Detected Dependencies

composer (2)

app/composer.json (2)

• php >=8.5
• phpbu/phpbu ^6.0

app/full/composer.json (11)

• php >=8.5
• phpbu/phpbu ^6.0
• aws/aws-sdk-php ^3.10
• google/cloud-storage ^2.0
• microsoft/azure-storage-blob ^1.4
• phpseclib/phpseclib ^3.0
• sebastianfeldmann/ftp ^0.9.2
• kunalvarma05/dropbox-php-sdk ^0.5
• guzzlehttp/guzzle ^7.5
• phpmailer/phpmailer ^7.0
• vlucas/phpdotenv ^5.0

docker-compose (1)

compose.yml

dockerfile (1)

Dockerfile (4)

• docker/dockerfile 1.24
• php 8.5-alpine@sha256:6ca76906d789edfac74e5f109c800b71e571bd313277133eaddc079733ee0b65
• composer 2@sha256:b09bccd91a78fe8a9ab4b33d707b862e8fe54fec17782e32683ad2a69c46867d
• composer 2@sha256:b09bccd91a78fe8a9ab4b33d707b862e8fe54fec17782e32683ad2a69c46867d

github-actions (9)

.github/workflows/auto-merge.yml (1)

• netresearch/.github main

.github/workflows/build.yml (11)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.1.0]
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4.2.0]
• docker/bake-action v7.1.0@a66e1c87e2eca0503c343edf1d208c716d54b8a8 → [Updates: v7.2.0]
• aquasecurity/trivy-action 0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• aquasecurity/trivy-action 0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.35.5@9e0d7b8d25671d64c341c19c0152d693099fb5ba → [Updates: v4.36.0]
• github/codeql-action v4.35.5@9e0d7b8d25671d64c341c19c0152d693099fb5ba → [Updates: v4.36.0]
• docker/bake-action v7.1.0@a66e1c87e2eca0503c343edf1d208c716d54b8a8 → [Updates: v7.2.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6

.github/workflows/cleanup-packages.yml (1)

• actions/delete-package-versions v5@e5bc658cc4c965c472efe991f8beea3981499c55

.github/workflows/lint.yml (3)

• netresearch/.github main
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.1.0]

.github/workflows/pr-quality.yml (1)

• netresearch/.github main

.github/workflows/release.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.1.0]
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4.2.0]
• docker/bake-action v7.1.0@a66e1c87e2eca0503c343edf1d208c716d54b8a8 → [Updates: v7.2.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• softprops/action-gh-release v3.0.0@b4309332981a82ec1c5618f44dd2e27cc8bfbfda

.github/workflows/scorecard.yml (1)

• netresearch/.github main

.github/workflows/security.yml (6)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.1.0]
• docker/bake-action v7.1.0@a66e1c87e2eca0503c343edf1d208c716d54b8a8 → [Updates: v7.2.0]
• aquasecurity/trivy-action 0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.35.5@9e0d7b8d25671d64c341c19c0152d693099fb5ba → [Updates: v4.36.0]
• netresearch/.github main

.github/workflows/test.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.1.0]
• docker/bake-action v7.1.0@a66e1c87e2eca0503c343edf1d208c716d54b8a8 → [Updates: v7.2.0]
• netresearch/.github main

regex (1)

Dockerfile (2)

• composer 2@sha256:b09bccd91a78fe8a9ab4b33d707b862e8fe54fec17782e32683ad2a69c46867d
• composer 2@sha256:b09bccd91a78fe8a9ab4b33d707b862e8fe54fec17782e32683ad2a69c46867d

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository