Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Pin gcr.io/distroless/base-nossl-debian12 Docker tag to e35893f
• Update actions/checkout digest to d23441a
• Update actions/download-artifact digest to 3e5f45b
• Update actions/setup-node digest to 2499707
• Update actions/setup-python digest to ece7cb0
• Update actions/upload-artifact digest to 043fb46
• Update docker (docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action)
• Update gcr.io/distroless/base-nossl-debian12:debug Docker digest to 51c3587
• Update npm non-major dependencies (knip, lint-staged, prettier)
• Update setup-cfg non-major dependencies (black, isort, mypy)
• Update actions/checkout action to v7
• Update actions/setup-node action to v7
• Update actions/setup-python action to v7
• Update dependency black to v26
• Update dependency isort to v9
• Update dependency mypy to v2
• Update dependency ubuntu to v26
• 🔐 Create all pending approval PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency flake8 to v7

Detected Dependencies

dockerfile (1)

modules/restricted-guests/synapse/Dockerfile (2)

• gcr.io/distroless/base-nossl-debian12 debug@sha256:12dbb4f46c5f712fe3da1c7a441602ee91eb87a5d46b0e725b4440b852000538 → [Updates: debug]
• gcr.io/distroless/base-nossl-debian12 unknown version → [Updates: undefined]

github-actions (5)

.github/workflows/publish-release-synapse-module.yml (6)

• docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6]
• docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6]
• docker/login-action v4@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• docker/setup-buildx-action v4@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4]
• docker/build-push-action v7@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7]

.github/workflows/sonarqube.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/download-artifact v8@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 → [Updates: v8]
• matrix-org/sonarcloud-workflow-action v4.0@820f7c2e9e94ba9e35add0f739691e5c7e23fa25
• ubuntu 24.04 → [Updates: 26.04]

.github/workflows/static-analysis.yaml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v7, v6]
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v7, v6]
• ubuntu 24.04-arm → [Updates: 26.04-arm]
• node lts/*
• python 3.11

.github/workflows/synapse-module.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• docker/login-action v4@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4]
• docker/setup-buildx-action v4@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4]
• docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6]
• docker/build-push-action v7@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7]

.github/workflows/tests.yml (7)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v7, v6]
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v7, v6]
• actions/upload-artifact v7@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7]
• ubuntu 24.04-arm → [Updates: 26.04-arm]
• node lts/*
• python 3.11

npm (2)

modules/restricted-guests/synapse/package.json

package.json (9)

• @action-validator/cli ^0.6.0
• @action-validator/core ^0.6.0
• eslint-plugin-matrix-org ^3.0.0
• husky ^9.1.7
• knip ^6.0.0 → [Updates: ^6.0.0]
• lint-staged ^17.0.0 → [Updates: ^17.0.0]
• prettier ^3.4.2 → [Updates: ^3.4.2]
• node >=20.0.0
• yarn 1.22.22

pep621 (1)

modules/restricted-guests/synapse/pyproject.toml

renovate-config (1)

.github/renovate.json

setup-cfg (1)

modules/restricted-guests/synapse/setup.cfg (4)

• mypy == 1.10.0 → [Updates: ==1.20.2, ==2.3.1]
• black == 22.3.0 → [Updates: ==22.12.0, ==26.5.1]
• flake8 == 4.0.1 → [Updates: ==7.4.1]
• isort == 5.9.3 → [Updates: ==5.13.2, ==9.0.2]

---

• Check this box to trigger a request for Renovate to run again on this repository