Add renovate.json

Merge pull request #1583 from crazy-max/group-codeql-dependabot-updates
chore: group codeql dependabot updates
2026-07-28 03:03:52 +00:00 · 2026-07-09 13:57:08 +02:00 · 2026-07-09 12:39:06 +02:00 · 2026-07-03 11:08:48 +02:00 · 2026-07-02 14:14:12 +00:00
3 changed files with 24 additions and 15 deletions
@@ -10,6 +10,9 @@ updates:
      crazy-max-dot-github:
        patterns:
          - "crazy-max/.github/*"
+      codeql-actions:
+        patterns:
+          - "github/codeql-action/*"
    labels:
      - "dependencies"
      - "bot"
@@ -0,0 +1,6 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended"
+  ]
+}
@@ -1648,7 +1648,7 @@ __metadata:
  languageName: node
  linkType: hard

-"@sigstore/core@npm:^3.1.0, @sigstore/core@npm:^3.2.0":
+"@sigstore/core@npm:^3.2.0, @sigstore/core@npm:^3.2.1":
  version: 3.2.1
  resolution: "@sigstore/core@npm:3.2.1"
  checksum: 10/2f6c1ced55f8ed3f7fc705a668eb95db9471511dfb1f054927822bf97a051dd62228ecf6a9f1932d240c2c4ae69a3b5066550789e5ad8f4257839a4370e5a120
@@ -1669,7 +1669,7 @@ __metadata:
  languageName: node
  linkType: hard

-"@sigstore/sign@npm:^4.1.0":
+"@sigstore/sign@npm:^4.1.1":
  version: 4.1.1
  resolution: "@sigstore/sign@npm:4.1.1"
  dependencies:
@@ -1683,7 +1683,7 @@ __metadata:
  languageName: node
  linkType: hard

-"@sigstore/tuf@npm:^4.0.1":
+"@sigstore/tuf@npm:^4.0.2":
  version: 4.0.2
  resolution: "@sigstore/tuf@npm:4.0.2"
  dependencies:
@@ -1703,14 +1703,14 @@ __metadata:
  languageName: node
  linkType: hard

-"@sigstore/verify@npm:^3.1.0":
-  version: 3.1.0
-  resolution: "@sigstore/verify@npm:3.1.0"
+"@sigstore/verify@npm:^3.1.1":
+  version: 3.1.1
+  resolution: "@sigstore/verify@npm:3.1.1"
  dependencies:
    "@sigstore/bundle": "npm:^4.0.0"
-    "@sigstore/core": "npm:^3.1.0"
+    "@sigstore/core": "npm:^3.2.1"
    "@sigstore/protobuf-specs": "npm:^0.5.0"
-  checksum: 10/c85713cc326236ef39608e4b061c1192306fd3edd7a1334237d5d53dbb132f04e3f9d3cfd4bb2d521bf0c95a9f98945a748c97ecb06e5f36cfd09488a0d3d73f
+  checksum: 10/4cb24b0e62b85ebf2b62698041e0dc212d152fd40a95c05c237357c992265a23e5789f86b138bea2eea0c5f6b994974d968f03dde9c692a514f96ae4b26f31a9
  languageName: node
  linkType: hard

@@ -5387,16 +5387,16 @@ __metadata:
  linkType: hard

 "sigstore@npm:^4.0.0":
-  version: 4.1.0
-  resolution: "sigstore@npm:4.1.0"
+  version: 4.1.1
+  resolution: "sigstore@npm:4.1.1"
  dependencies:
    "@sigstore/bundle": "npm:^4.0.0"
-    "@sigstore/core": "npm:^3.1.0"
+    "@sigstore/core": "npm:^3.2.1"
    "@sigstore/protobuf-specs": "npm:^0.5.0"
-    "@sigstore/sign": "npm:^4.1.0"
-    "@sigstore/tuf": "npm:^4.0.1"
-    "@sigstore/verify": "npm:^3.1.0"
-  checksum: 10/7312eed22f82bebcd80a897a163e220bb1df2c084c308d17fb431ff03ef28cf20e3b17312fd8024793dcefa27e794c31174d604a28fc85672a9d6d7f34bbd4a6
+    "@sigstore/sign": "npm:^4.1.1"
+    "@sigstore/tuf": "npm:^4.0.2"
+    "@sigstore/verify": "npm:^3.1.1"
+  checksum: 10/8fb38bbdc3ee1e79b3f19e0015ebf35b7d7f890673722f182960ec88f02a52f2f631fc983e7f8bafa3a37653a760ddc00277721a8f9159ee6ee311159ca3dfbe
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
Renovate	db2f52025c	Add renovate.json ci / named-context-container (pull_request) Failing after 4s Details ci / docker-config-malformed (pull_request) Successful in 8s Details ci / load-and-push (pull_request) Failing after 3s Details ci / record-upload-disable (pull_request) Failing after 2s Details ci / record-retention-days (0) (pull_request) Failing after 2s Details ci / record-retention-days (2) (pull_request) Failing after 2s Details ci / checks (latest) (pull_request) Failing after 2s Details ci / checks (v0.14.1) (pull_request) Failing after 2s Details ci / annotations-disabled (pull_request) Failing after 2s Details ci / proxy-docker-config (pull_request) Failing after 10s Details ci / proxy-buildkitd (pull_request) Failing after 3s Details ci / annotations (pull_request) Failing after 4s Details ci / multi-output (pull_request) Failing after 3s Details ci / summary-disable (pull_request) Failing after 2s Details ci / summary-not-supported (pull_request) Failing after 1s Details ci / checks (edge) (pull_request) Failing after 2s Details ci / call-check (pull_request) Failing after 2s Details pr-assign-author / run (pull_request_target) Failing after 0s Details ci / no-default-attestations (pull_request) Failing after 2s Details update-dist / update-dist (pull_request) Has been skipped Details zizmor / zizmor (pull_request) Failing after 1s Details test / test (pull_request) Failing after 10s Details validate / prepare (pull_request) Failing after 10s Details validate / validate (pull_request) Has been skipped Details ci / minimal (pull_request) Failing after 9s Details ci / git-context-secret (pull_request) Failing after 2s Details ci / path-context (pull_request) Failing after 1s Details ci / example (pull_request) Failing after 2s Details ci / error (pull_request) Failing after 5s Details ci / secret (pull_request) Failing after 2s Details ci / secret-envs (pull_request) Failing after 3s Details ci / network (pull_request) Failing after 2s Details ci / git-context-query (pull_request) Failing after 2s Details ci / git-context (pull_request) Failing after 14s Details ci / error-buildx (pull_request) Failing after 2s Details ci / export-docker (pull_request) Successful in 10s Details ci / docker-driver (pull_request) Successful in 12s Details codeql / analyze (pull_request) Failing after 35s Details ci / secret-files (pull_request) Failing after 2s Details ci / shm-size (pull_request) Failing after 2s Details ci / ulimit (pull_request) Failing after 2s Details ci / cgroup-parent (pull_request) Failing after 3s Details ci / add-hosts (pull_request) Failing after 2s Details ci / no-cache-filters (pull_request) Failing after 2s Details ci / attests-compat (moby/buildkit:buildx-stable-1, latest) (pull_request) Failing after 2s Details ci / attests-compat (moby/buildkit:buildx-stable-1, v0.9.1) (pull_request) Failing after 2s Details ci / attests-compat (moby/buildkit:latest, edge) (pull_request) Failing after 1s Details ci / provenance (, type=image,name=localhost:5000/name/app:latest,push=true, image) (pull_request) Failing after 3s Details ci / attests-compat (moby/buildkit:v0.10.6, latest) (pull_request) Failing after 2s Details ci / provenance (, /tmp/buildx-build, binary) (pull_request) Failing after 4s Details ci / provenance (mode=max, /tmp/buildx-build, binary) (pull_request) Failing after 4s Details ci / sbom (/tmp/buildx-build, binary) (pull_request) Failing after 4s Details ci / sbom (type=image,name=localhost:5000/name/app:latest,push=true, image) (pull_request) Failing after 4s Details ci / multi (multi-sudo) (pull_request) Failing after 3s Details ci / digest (docker, false, false) (pull_request) Failing after 4s Details ci / digest (docker, false, true) (pull_request) Failing after 4s Details ci / digest (docker, true, false) (pull_request) Failing after 4s Details ci / digest (docker-container, false, false) (pull_request) Failing after 3s Details ci / provenance (mode=max, type=image,name=localhost:5000/name/app:latest,push=true, image) (pull_request) Failing after 3s Details ci / multi (multi) (pull_request) Failing after 4s Details ci / digest (docker-container, true, false) (pull_request) Failing after 3s Details ci / github-cache (pull_request) Failing after 4s Details ci / local-cache (pull_request) Failing after 3s Details ci / standalone (pull_request) Failing after 2s Details ci / digest (docker-container, false, true) (pull_request) Failing after 4s Details ci / registry-cache (pull_request) Failing after 3s Details ci / named-context-pin (pull_request) Failing after 2s Details ci / named-context-docker (pull_request) Failing after 2s Details	2026-07-28 03:03:52 +00:00
CrazyMax	cb941d0b89	Merge pull request #1583 from crazy-max/group-codeql-dependabot-updates chore: group codeql dependabot updates	2026-07-09 13:57:08 +02:00
CrazyMax	a9855f30a5	chore: group codeql dependabot updates Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-07-09 12:39:06 +02:00
CrazyMax	3add1637a6	Merge pull request #1577 from docker/dependabot/npm_and_yarn/sigstore-4.1.1 chore(deps): Bump sigstore from 4.1.0 to 4.1.1	2026-07-03 11:08:48 +02:00
dependabot[bot]	6d79e06484	chore(deps): Bump sigstore from 4.1.0 to 4.1.1 Bumps [sigstore](https://github.com/sigstore/sigstore-js) from 4.1.0 to 4.1.1. - [Release notes](https://github.com/sigstore/sigstore-js/releases) - [Commits](https://github.com/sigstore/sigstore-js/compare/sigstore@4.1.0...sigstore@4.1.1) --- updated-dependencies: - dependency-name: sigstore dependency-version: 4.1.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-07-02 14:14:12 +00:00