Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency google/osv-scanner to v2.5.0

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-release-attachments package hadolint/hadolint).

Files affected: ci/setup-tools.sh

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency python to v3.14.6
• chore(deps): update dependency opengrep/opengrep to v1.26.0
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

regex (4)

.github/workflows/container-scan.yml (1)

• python 3.14.4 → [Updates: 3.14.6]

.github/workflows/sast.yml (1)

• python 3.14.4 → [Updates: 3.14.6]

.github/workflows/sca.yml (1)

• python 3.14.4 → [Updates: 3.14.6]

ci/setup-tools.sh (4)

• google/osv-scanner v2.4.0@15314940c10d26af9c6649f150b8a47c1262e8fc7e17b1d1029b0e479e8ed8a0 → [Updates: v2.5.0]
• opengrep/opengrep v1.25.0@9ac4aebb47ba3f7b0d8fc641ac8749cb6c2f253f616131a67d9631e00d4bea33 → [Updates: v1.26.0]
• hadolint/hadolint v2.14.0@6bf226944684f56c84dd014e8b979d27425c0148f61b3bd99bcc6f39e9dc5a47
• @cyclonedx/cyclonedx-npm 6.0.0

---

• Check this box to trigger a request for Renovate to run again on this repository