Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update nextcloud/pr-feedback-action digest to 4709fa5

Detected Dependencies

github-actions (15)

.github/workflows/actionlint.yml (1)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/file-sync.yml (2)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• BetaHuhn/repo-file-sync-action v1.21.1@8b92be3375cf1d1b0cd579af488a9255572e4619

.github/workflows/pr-feedback.yml (2)

• marcelklehr/get-github-handles-from-website-action v1.0.1@06b2239db0a48fe1484ba0bfd966a3ab81a08308
• nextcloud/pr-feedback-action main@c8c97a6b11ff6379e629a8fbde09572730cacec9 → [Updates: main]

.github/workflows/renovate-approve-merge.yml (3)

• mdecoleman/pr-branch-name v3.0.0@55795d86b4566d300d237883103f052125cc7508
• hmarr/auto-approve-action v4.0.0@f0939ea97e9205ef24d872e76833fa908a770363
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/reuse.yml (2)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• fsfe/reuse-action v6.0.0@676e2d560c9a403aa252096d99fcab3e1132b0f5

.github/workflows/scorecard.yml (3)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• github/codeql-action v4.36.3@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a

config/workflows/analysis.yml (2)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-java v5.4.0@1bcf9fb12cf4aa7d266a90ae39939e61372fe520

config/workflows/autoApproveSync.yml (1)

• hmarr/auto-approve-action v4.0.0@f0939ea97e9205ef24d872e76833fa908a770363

config/workflows/codeql.yml (5)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• pierotofy/set-swap-space v1.0@49819abfb41bd9b44fb781159c033dba90353a7c
• github/codeql-action v4.36.3@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a
• actions/setup-java v5.4.0@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
• github/codeql-action v4.36.3@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a

config/workflows/detectNewJavaFiles.yml (1)

• trilom/file-changes-action v1.2.4@a6ca26c14274c33b15e6499323aac178af06ad4b

config/workflows/pr-feedback.yml (2)

• marcelklehr/get-github-handles-from-website-action v1.0.1@06b2239db0a48fe1484ba0bfd966a3ab81a08308
• nextcloud/pr-feedback-action main@c8c97a6b11ff6379e629a8fbde09572730cacec9 → [Updates: main]

config/workflows/qa.yml (2)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-java v5.4.0@1bcf9fb12cf4aa7d266a90ae39939e61372fe520

config/workflows/renovate-approve-merge.yml (3)

• mdecoleman/pr-branch-name v3.0.0@55795d86b4566d300d237883103f052125cc7508
• hmarr/auto-approve-action v4.0.0@f0939ea97e9205ef24d872e76833fa908a770363
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

config/workflows/scorecard.yml (3)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• github/codeql-action v4.36.3@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a

config/workflows/stale.yml (1)

• actions/stale v10.3.0@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899

---

• Check this box to trigger a request for Renovate to run again on this repository

[AlvaroBrey]

To discuss:

• Remove PR ratelimit (currently 2/hour)?
• Open single PR for all actions daily? Would reduce the amount of sync PRs. We could also just do a daily sync instead of every time something is merged to main

[tobiasKaminsky]

My idea:

• no ratelimit
• one single PR per day is good, as there should not be mission critical things. And if so, we can do it manualy

[AndyScherzinger]

I agree with Tobias' assessment

[AlvaroBrey]

Ok, creating new issue to track that