Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update Mise tool dependencies (poetry, python)
• Update dependency mise to 2026.8.4
• Update GitHub Actions dependencies (SonarSource/gh-action_pre-commit, SonarSource/unified-dogfooding-actions, actions/checkout, jdx/mise-action, step-security/harden-runner)
• Update dependency poetry to v2
• Update GitHub Actions dependencies (major) (actions/checkout, jdx/mise, jdx/mise-action)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (10)

.github/workflows/build.yml (6)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.20.1]
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.1.0, v7.0.1]
• SonarSource/ci-github-actions master
• SonarSource/ci-github-actions master
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.20.1]
• SonarSource/ci-github-actions master

.github/workflows/pr-cleanup.yml (2)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.20.1]
• SonarSource/ci-github-actions master

.github/workflows/pre-commit.yml (4)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.20.1]
• jdx/mise-action v3.2.0@5ac50f778e26fac95da98d50503682459e86d566 → [Updates: v3.6.3, v4.2.4]
• SonarSource/gh-action_pre-commit 1.1.0@0ecedc4e4070444a95f6b6714ddc3ebcdde697c4 → [Updates: 1.2.1]
• jdx/mise 2025.12.13 → [Updates: 2026.8.4]

.github/workflows/PullRequestClosed.yml (3)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.20.1]
• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• sonarsource/gh-action-lt-backlog v2

.github/workflows/PullRequestCreated.yml (3)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.20.1]
• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• sonarsource/gh-action-lt-backlog v2

.github/workflows/release.yml (1)

• SonarSource/gh-action_release master

.github/workflows/RequestReview.yml (3)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.20.1]
• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• sonarsource/gh-action-lt-backlog v2

.github/workflows/slack_notify.yml (2)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.20.1]
• SonarSource/gh-action_slack-notify master

.github/workflows/SubmitReview.yml (3)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.20.1]
• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• sonarsource/gh-action-lt-backlog v2

.github/workflows/unified-dogfooding.yml (4)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.20.1]
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.1.0, v7.0.1]
• SonarSource/ci-github-actions master
• SonarSource/unified-dogfooding-actions v1 → [Updates: 1.1.0]

mise (1)

mise.toml (2)

• poetry 1.8.4 → [Updates: 1.8.5, 2.4.1]
• python 3.13.7 → [Updates: 3.14.7]

poetry (1)

pyproject.toml (1)

• python >=3.8

regex (1)

.github/workflows/pre-commit.yml (1)

• mise 2025.12.13 → [Updates: 2026.8.4]

renovate-config (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository