Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: No docker auth found - returning
• ⚠️ WARN: Package lookup failures

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (1)

Datasource	Package	Last Updated
github-actions	amannn/action-semantic-pull-request	2025-08-22

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/checkout digest to d23441a
• chore(deps): update redhat-actions/buildah-build digest to 9dc2ade
• chore(deps): update redhat-actions/push-to-registry digest to 5860fc9
• chore(deps): update actions/checkout action to v6.1.0
• chore(deps): update trufflesecurity/trufflehog action to v3.97.9
• chore(deps): update actions/dependency-review-action action to v5
• chore(deps): update actions/setup-go action to v7
• chore(deps): update actions/setup-node action to v7
• chore(deps): update googleapis/release-please-action action to v5
• chore(deps): update redhat-actions/buildah-build action to v3
• chore(deps): update redhat-actions/push-to-registry action to v3
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package actions/dependency-review-action).

Files affected: .github/workflows/security.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): pin quay.io/centos-bootc/centos-bootc docker tag to a7ae6e2
• chore(deps): update github/codeql-action digest to 1190a97
• chore(deps): update googleapis/release-please-action digest to 5c625bf
• chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.49.0
• chore(deps): update actions/checkout action to v7
• chore(deps): update aws-actions/configure-aws-credentials action to v6
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update github/codeql-action action to v4
• chore(deps): update hashicorp/setup-terraform action to v4
• chore(deps): update terraform-linters/setup-tflint action to v6
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (2)

images/aws/bootc-base/Containerfile (1)

• quay.io/centos-bootc/centos-bootc stream9 → [Updates: stream9]

images/aws/networking/vpc/nat-instance/Containerfile (1)

• ghcr.io/rsturla/terraform-modules/bootc-base latest

github-actions (11)

.github/actions/build-ami/action.yml (1)

• aws-actions/configure-aws-credentials v4@7474bc4690e29a8392af63c5b98e7449536d5c3a → [Updates: v6]

.github/actions/build-image/action.yml (2)

• redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056 → [Updates: v3, v2]
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7]

.github/actions/push-image/action.yml (1)

• redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c → [Updates: v3, v2]

.github/workflows/_build-ami.yml (1)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]

.github/workflows/_build-image.yml (1)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]

.github/workflows/ci.yml (6)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• hashicorp/setup-terraform v3@b9cd54a3c349d3f38e8881555d616ced269862dd → [Updates: v4]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• hashicorp/setup-terraform v3@b9cd54a3c349d3f38e8881555d616ced269862dd → [Updates: v4]
• terraform-linters/setup-tflint v4@90f302c255ef959cbfb4bd10581afecdb7ece3e6 → [Updates: v6]

.github/workflows/conventional-commits.yml (1)

• amannn/action-semantic-pull-request v6@48f256284bd46cdaab1048c3721360e808335d50

.github/workflows/images.yml (1)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]

.github/workflows/release.yml (1)

• googleapis/release-please-action v4@16a9c90856f42705d54a6fda1823352bdc62cf38 → [Updates: v5, v4]

.github/workflows/renovate.yml (2)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v7]

.github/workflows/security.yml (10)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/dependency-review-action v4@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 → [Updates: v5.0.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• trufflesecurity/trufflehog v3.95.9@27b0417c16317ca9a472a9a8092acce143b49c55 → [Updates: v3.97.9]
• advanced-security/set-codeql-language-matrix v1@9f9ba17a61d34c97baaf17e96276389a0cd73392
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v5@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v7]
• github/codeql-action v3@ebcb5b36ded6beda4ceefea6a8bc4cc885255bb3 → [Updates: v4, v3]
• github/codeql-action v3@ebcb5b36ded6beda4ceefea6a8bc4cc885255bb3 → [Updates: v4, v3]
• github/codeql-action v3@ebcb5b36ded6beda4ceefea6a8bc4cc885255bb3 → [Updates: v4, v3]

gomod (1)

tools/generate-aws-multi-region/go.mod (1)

• go 1.23.0

terraform (39)

modules/aws/communication/ses-domain/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/containers/ecr-repos/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/cost-control/budgets/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/data-storage/backup-plan/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/data-storage/backup-vaults/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/data-storage/rds-postgres/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.0

modules/aws/data-storage/rds/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.0

modules/aws/data-storage/s3-private-bucket/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/data-storage/s3-public-bucket/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/identity/github-actions-oidc-provider/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/identity/github-actions-role/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/identity/iam-role/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/identity/identity-center/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/misc/cloudformation-stack/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.0

modules/aws/networking/acm-certificates/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/networking/cloudfront-redirect/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/networking/cloudfront-rewrite/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/networking/route53-hosted-zone/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.0

modules/aws/networking/route53-records/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >= 1.0

modules/aws/networking/route53-resolver-firewall/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.0

modules/aws/networking/route53-resolver-query-logs/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/networking/vpc-flow-logs/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/networking/vpc-network-acls/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/networking/vpc/flow_logs.tf

modules/aws/networking/vpc/nacl.tf

modules/aws/networking/vpc/nat_instance.tf

modules/aws/networking/vpc/nat-instance/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/networking/vpc/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/security/cloudformation-stackset/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/security/cloudtrail/bucket/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/security/cloudtrail/main.tf

modules/aws/security/cloudtrail/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/security/inspector/inspector.tf

modules/aws/security/inspector/single-region/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/security/inspector/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/security/organizations/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/security/securityhub/main.tf

modules/aws/security/securityhub/single-region/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

modules/aws/security/securityhub/versions.tf (2)

• aws >=4.0
• hashicorp/terraform >=1.3

tflint-plugin (1)

.tflint.hcl (1)

• terraform-linters/tflint-ruleset-aws 0.46.0 → [Updates: 0.49.0]

---

• Check this box to trigger a request for Renovate to run again on this repository