Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (2)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	slsa-framework/slsa-github-generator	2025-02-24
pre-commit	pre-commit/pre-commit-hooks	2025-08-09

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update github/codeql-action action to v4.37.8
• Update mikefarah/yq action to v4.53.6
• Update quarkus.platform.version to v3.38.3 (io.quarkus.platform:quarkus-maven-plugin, io.quarkus.platform:quarkus-bom)
• Update pre-commit hook renovatebot/pre-commit-hooks to v44.39.1
• 🔐 Create all awaiting schedule PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up gitlab-tags package infosec-public/developer-workbench/tools: no-result.

Files affected: .pre-commit-config.yaml

---

Detected Dependencies

github-actions (3)

.github/workflows/build.yaml (21)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-java v5.7.0@b6effb05e454b25005698d916606bdc6ffcbf961
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-java v5.7.0@b6effb05e454b25005698d916606bdc6ffcbf961
• github/codeql-action v4.37.7@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd → [Updates: v4.37.8]
• github/codeql-action v4.37.7@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd → [Updates: v4.37.8]
• github/codeql-action v4.37.7@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd → [Updates: v4.37.8]
• advanced-security/maven-dependency-submission-action v5@b275d12641ac2d2108b2cbb7598b154ad2f2cee8
• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• slsa-framework/slsa-github-generator v2.1.0
• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• softprops/action-gh-release v3.0.2@3d0d9888cb7fd7b750713d6e236d1fcb99157228

.github/workflows/precommit-validate.yml (6)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• mikefarah/yq v4.53.3@1b9b4ac5187171d2e5e3129be0cfa827c7f9d53d → [Updates: v4.53.6]
• garethahealy/pre-commit-action v4.6.1@b9b3eedc18230d01ce1d0d44683dacd87beedfd2
• python 3.x

.github/workflows/scorecard.yml (5)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.37.7@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd → [Updates: v4.37.8]

maven (1)

pom.xml (16)

• io.quarkus.platform:quarkus-bom 3.38.2 → [Updates: 3.38.3]
• io.quarkiverse.githubapi:quarkus-github-api 1.330.0
• org.apache.commons:commons-csv 1.14.1
• org.apache.commons:commons-collections4 4.6.0
• io.quarkiverse.mapstruct:quarkus-mapstruct 1.1.0
• org.mapstruct:mapstruct 1.6.3
• io.quarkus.platform:quarkus-maven-plugin 3.38.2 → [Updates: 3.38.3]
• org.apache.maven.plugins:maven-compiler-plugin 3.15.0
• org.mapstruct:mapstruct-processor 1.6.3
• org.apache.maven.plugins:maven-surefire-plugin 3.5.6
• org.apache.maven.plugins:maven-failsafe-plugin 3.5.6
• org.codehaus.mojo:exec-maven-plugin 3.6.3
• info.picocli:picocli-codegen 4.7.7
• org.apache.maven.plugins:maven-enforcer-plugin 3.6.3
• io.github.kobylynskyi:graphql-codegen-maven-plugin 5.10.0
• org.codehaus.mojo:build-helper-maven-plugin 3.6.1

maven-wrapper (3)

.mvn/wrapper/maven-wrapper.properties (1)

• maven 3.9.16

mvnw (1)

• maven-wrapper 3.3.4

mvnw.cmd (1)

• maven-wrapper 3.3.4

pre-commit (1)

.pre-commit-config.yaml (6)

• pre-commit/pre-commit-hooks v6.0.0
• editorconfig-checker/editorconfig-checker v3.11.1
• shellcheck-py/shellcheck-py v0.11.0.1
• renovatebot/pre-commit-hooks 44.32.6 → [Updates: 44.39.1]
• infosec-public/developer-workbench/tools rh-pre-commit-2.3.2
• gitleaks/gitleaks v8.30.1

---

• Check this box to trigger a request for Renovate to run again on this repository