Dependency Dashboard

[pgmac]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Error updating mise.lock
• ⚠️ WARN: Detected empty commit - aborting git push

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• Update dependency gh to v2.93.0
• Update dependency grype to v0.112.0
• Update dependency syft to v1.44.0
• Update dependency zizmor to v1.25.2

Detected Dependencies

github-actions (8)

.github/workflows/claude.yml (2)

• actions/checkout v6
• anthropics/claude-code-action v1

.github/workflows/dependabot-alert.yml (1)

• pgmac-net/pg-actions main

.github/workflows/dependabot-management.yml (2)

• actions/checkout v6
• anthropics/claude-code-base-action v1

.github/workflows/sbom.yml (9)

• actions/checkout v6
• anchore/sbom-action v0
• actions/attest-build-provenance v4
• DependencyTrack/gh-upload-sbom v3
• actions/checkout v6
• jdx/mise-action v4
• actions/download-artifact v8.0.1
• anchore/scan-action v7
• github/codeql-action v4

.github/workflows/scorecard-private.yml (3)

• actions/checkout v6
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7

.github/workflows/scorecard-public.yml (4)

• actions/checkout v6
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7
• github/codeql-action v4

.github/workflows/slack-notify-end.yml (2)

• slackapi/slack-github-action v3.0.3
• ubuntu 26.04

.github/workflows/slack-notify-start.yml (2)

• slackapi/slack-github-action v3.0.3
• ubuntu 26.04

mise (1)

mise.toml (4)

• gh 2.93.0 → [Updates: 2.93.0]
• grype 0.112.0 → [Updates: 0.112.0]
• syft 1.44.0 → [Updates: 1.44.0]
• zizmor 1.25.2 → [Updates: 1.25.2]