Dependency Dashboard

[haksungjang]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): Update dependency sigstore/cosign to v2.6.3
• chore(deps): Update dependency unblob to v26.6.4
• chore(deps): Update ghcr.io/cyclonedx/cdxgen Docker tag to v12.6.0
• chore(deps): Update dependency docker/cli to v29
• chore(deps): Update dependency sigstore/cosign to v3
• chore(deps): Update dependency weasyprint to v69
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): Update dependency @cyclonedx/cdxgen to v12.7.1
• chore(deps): Update dependency scanoss to v1.54.1
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

regex (4)

docker/Dockerfile (12)

• anchore/syft v1.46.0
• aquasecurity/trivy v0.72.0
• sigstore/cosign v2.4.1 → [Updates: v2.6.3, v3.1.1]
• scancode-toolkit 32.5.0
• scanoss 1.25.2 → [Updates: 1.54.1]
• docker/cli 27.5.1 → [Updates: 29.6.1]
• unblob 26.3.30 → [Updates: 26.6.4]
• cve-bin-tool 3.4
• ubi_reader 0.8.14
• GenAI-Security-Project/aibom-generator c5a3f2f647b801ab4ab7569aade4a6cdaf1f9591
• @cyclonedx/cdxgen 12.7.0 → [Updates: 12.7.1]
• weasyprint 63.1 → [Updates: 69.0]

docker/Dockerfile (12)

• anchore/syft v1.46.0
• aquasecurity/trivy v0.72.0
• sigstore/cosign v2.4.1 → [Updates: v2.6.3, v3.1.1]
• scancode-toolkit 32.5.0
• scanoss 1.25.2 → [Updates: 1.54.1]
• docker/cli 27.5.1 → [Updates: 29.6.1]
• unblob 26.3.30 → [Updates: 26.6.4]
• cve-bin-tool 3.4
• ubi_reader 0.8.14
• GenAI-Security-Project/aibom-generator c5a3f2f647b801ab4ab7569aade4a6cdaf1f9591
• @cyclonedx/cdxgen 12.7.0 → [Updates: 12.7.1]
• weasyprint 63.1 → [Updates: 69.0]

docker/lib/source-detect.sh (2)

• ghcr.io/cyclonedx/cdxgen v12
• ghcr.io/cyclonedx/cdxgen v12.5.0 → [Updates: v12.6.0]

docker/lib/source-detect.sh (2)

• ghcr.io/cyclonedx/cdxgen v12
• ghcr.io/cyclonedx/cdxgen v12.5.0 → [Updates: v12.6.0]