Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update zizmorcore/zizmor-action action to v0.5.7

Detected Dependencies

dockerfile (3)

1.10/Dockerfile (1)

• php 8-alpine

2.2/Dockerfile (1)

• php 8-alpine

latest/Dockerfile (1)

• php 8-alpine

github-actions (5)

.github/workflows/1.10.yaml (17)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• docker/setup-qemu-action v4.1.0@06116385d9baf250c9f4dcb4858b16962ea869c3
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee

.github/workflows/2.2.yaml (17)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• docker/setup-qemu-action v4.1.0@06116385d9baf250c9f4dcb4858b16962ea869c3
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee

.github/workflows/latest.yaml (17)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• docker/setup-qemu-action v4.1.0@06116385d9baf250c9f4dcb4858b16962ea869c3
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee

.github/workflows/shellcheck.yaml (1)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/zizmor.yml (2)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• zizmorcore/zizmor-action v0.5.6@5f14fd08f7cf1cb1609c1e344975f152c7ee938d → [Updates: v0.5.7]

regex (2)

2.2/Dockerfile (1)

• composer/composer 2.2.28 → [Updates: 2.10.1]

latest/Dockerfile (1)

• composer/composer 2.10.1

---

• Check this box to trigger a request for Renovate to run again on this repository

[inverse]

@alcohol I think there's a way to trigger the PR's automatically by changing the config but right now it's manual from this issue.

You can also see what assets it's currently configured on.

[alcohol]

Not sure I understand the error here. The 2.2 branch does not relate to the version mentioned (2.8.9)?

[inverse]

Ahh I think I know what's missing... let me PR a fix

[inverse]

Thanks for fixing that, totally didn't think that another rule would need to be added to explicitly disable those for that file.

Found out you can create a branch called renovate/<something> which would run the configuration to show if its valid or not.

Could prob simply those rules to:

    "packageRules": [
        {
            "description": "Disables major and minor updates for composer/composer in 2.2",
            "matchFileNames": [
                "2.2/Dockerfile"
            ],
            "matchPackageNames": [
                "composer/composer"
            ],
            "matchUpdateTypes": [
                "major",
                "minor"
            ],
            "enabled": false
        },
        {
            "description": "Configures updates for composer/composer in 2.2",
            "matchFileNames": [
                "2.2/Dockerfile"
            ],
            "matchPackageNames": [
                "composer/composer"
            ],
            "matchUpdateTypes": [
                "patch"
            ],
            "commitMessageSuffix": " (2.2)",
            "additionalBranchPrefix": "2.2-"
        },
        {
            "description": "Configures updates for composer/composer in latest",
            "matchFileNames": [
                "latest/Dockerfile"
            ],
            "matchPackageNames": [
                "composer/composer"
            ],
            "commitMessageSuffix": " (Latest)",
            "additionalBranchPrefix": "latest-"
        }
    ],

Which removes the explicit enable and unrequired

        {
            "matchPackageNames": [
                "composer/composer"
            ],
            "enabled": true
        },

[alcohol]

Yeah that sounds good to me. Feel free to submit a PR. Otherwise I will try to pick it up sometime next week.