Skip to content

chore(deps): pin dependencies - autoclosed#208

Closed
renovate[bot] wants to merge 1 commit intomainfrom
renovate/pin-dependencies
Closed

chore(deps): pin dependencies - autoclosed#208
renovate[bot] wants to merge 1 commit intomainfrom
renovate/pin-dependencies

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Apr 19, 2026

This PR contains the following updates:

Package Type Update Change OpenSSF
1password/load-secrets-action action pin v3v3.2.1 OpenSSF Scorecard
JS-DevTools/npm-publish action pin v4v4.1.5 OpenSSF Scorecard
actions/checkout action pin v5v5.0.1 OpenSSF Scorecard
actions/setup-node action pin v6v6.3.0 OpenSSF Scorecard
crate-ci/typos action pin v1v1.45.1 OpenSSF Scorecard
docker/build-push-action action pin v6v6.19.2 OpenSSF Scorecard
docker/login-action action pin v3v3.7.0 OpenSSF Scorecard
docker/metadata-action action pin v5v5.10.0 OpenSSF Scorecard
docker/setup-buildx-action action pin v3v3.12.0 OpenSSF Scorecard
docker/setup-qemu-action action pin v3v3.7.0 OpenSSF Scorecard
foundry-rs/foundry-toolchain action pin v1v1.7.0 OpenSSF Scorecard
fuxingloh/multi-labeler action pin v4v4.0.0 OpenSSF Scorecard
github/codeql-action action pin v4v4.35.2 OpenSSF Scorecard
namespacelabs/nscloud-cache-action action pin v1v1.4.2 OpenSSF Scorecard
namespacelabs/nscloud-checkout-action action pin v7v7.1.0 OpenSSF Scorecard
rlespinasse/github-slug-action action pin v5v5.6.0 OpenSSF Scorecard
sigstore/cosign-installer action pin v3v3.10.1 OpenSSF Scorecard
stefanzweifel/git-auto-commit-action action pin v7v7.1.0 OpenSSF Scorecard
taoliujun/action-unique-comment action pin v1v1.0.1 OpenSSF Scorecard

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot enabled auto-merge (squash) April 19, 2026 11:43
runs-on: namespace-profile-btp-scs
steps:
- uses: fuxingloh/multi-labeler@v4
- uses: fuxingloh/multi-labeler@v4.0.0
steps:
- name: Setup 1Password
uses: 1password/load-secrets-action/configure@v3
uses: 1password/load-secrets-action/configure@v3.2.1

- name: Load secrets
uses: 1password/load-secrets-action@v3
uses: 1password/load-secrets-action@v3.2.1

- name: Checkout
uses: namespacelabs/nscloud-checkout-action@v7
uses: namespacelabs/nscloud-checkout-action@v7.1.0

- name: Setup caches
uses: namespacelabs/nscloud-cache-action@v1
uses: namespacelabs/nscloud-cache-action@v1.4.2

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
uses: docker/setup-buildx-action@v3.12.0

- name: Install Cosign
uses: sigstore/cosign-installer@v3
uses: sigstore/cosign-installer@v3.10.1

- name: Login to GitHub Container Registry
uses: docker/login-action@v3
uses: docker/login-action@v3.7.0
- name: Docker meta
id: docker_meta
uses: docker/metadata-action@v5
uses: docker/metadata-action@v5.10.0

- name: Build and push
uses: docker/build-push-action@v6
uses: docker/build-push-action@v6.19.2
@renovate renovate bot changed the title chore(deps): pin dependencies chore(deps): pin dependencies - autoclosed Apr 19, 2026
@renovate renovate bot closed this Apr 19, 2026
auto-merge was automatically disabled April 19, 2026 14:57

Pull request was closed

@renovate renovate bot deleted the renovate/pin-dependencies branch April 19, 2026 14:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant