Renovate Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (1)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	ludeeus/action-shellcheck	2023-01-29

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): pin ghcr.io/nx1x/self-hosted-ghost-blog/tinybird docker tag to 4aadf0a
• chore(deps): update non-major dependencies (ghost/traffic-analytics, nginx, python)
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update actions/setup-python action to v7

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

docker-compose (2)

compose.build.yml

compose.yml (9)

• nginx 1.29-alpine@sha256:5616878291a2eed594aee8db4dade5878cf7edcb475e59193904b198d9b830de → [Updates: 1.31-alpine]
• ghost 6-alpine@sha256:29886ddcf4ae5c005099c8ade34707d7c8d5d71b9dc5e31473c632b27b2ea18a → [Updates: 6-alpine]
• mysql 8.4@sha256:b3b90af2a6552ae30c266fdb7d5dd55f3afb72404bb78d37fe8a23eb857fd3fb
• ghost/traffic-analytics 1.0.284@sha256:9746c9d7a72abdf996dbdc3c0d6d78952dc058f8a655ba1ef984a0f3c9a179cb → [Updates: 1.0.294]
• ghcr.io/tryghost/activitypub sha-51a7d53@sha256:508466b5aca426f48b133d183763f7c864ac8770848a5e98a914278e06681e16
• ghcr.io/nx1x/self-hosted-ghost-blog/tinybird edge → [Updates: edge]
• ghost 6-alpine@sha256:29886ddcf4ae5c005099c8ade34707d7c8d5d71b9dc5e31473c632b27b2ea18a → [Updates: 6-alpine]
• ghcr.io/nx1x/self-hosted-ghost-blog/tinybird edge → [Updates: edge]
• ghcr.io/tryghost/activitypub-migrations sha-3093945@sha256:f7d94612017226cf6eabafd5b11bdaf95ba2024ec7b033fbb213193bdc0ddd33

dockerfile (1)

tinybird/Dockerfile (1)

• python 3.13-slim@sha256:6771159cd4fa5d9bba1258caf0b82e6b73458c694d178ad97c5e925c2d0e1a91 → [Updates: 3.14-slim]

github-actions (10)

.github/workflows/backup.yml (3)

• NX1X/cloudflare-tunnel-ssh-action v1.0.0@5b09bfc4ba3dc20b3d77d96271fff5a20fe64107
• NX1X/Cloudflare-R2-backup-action v1.0.0@170cc1daf854595c704a781f4d1dbe506a2b9f15
• NX1X/Cloudflare-R2-backup-action v1.0.0@170cc1daf854595c704a781f4d1dbe506a2b9f15

.github/workflows/codeql.yml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• github/codeql-action v4@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 → [Updates: v4]
• github/codeql-action v4@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 → [Updates: v4]

.github/workflows/dependency-review.yml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294

.github/workflows/deploy.yml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• NX1X/cloudflare-tunnel-ssh-action v1.0.0@5b09bfc4ba3dc20b3d77d96271fff5a20fe64107

.github/workflows/gitleaks.yml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• gitleaks/gitleaks-action v3@e0c47f4f8be36e29cdc102c57e68cb5cbf0e8d1e

.github/workflows/lint.yml (7)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• ludeeus/action-shellcheck 2.0.0@00cae500b08a931fb5698e11e79bfbd38e612a38
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 → [Updates: v3.4.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• raven-actions/actionlint v2@3d39aea434753780c3b3d4a1a31c854b4dbf49d7
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/publish-tinybird.yml (11)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• docker/setup-qemu-action v4.2.0@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a → [Updates: v4]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• docker/login-action v4.5.2@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c → [Updates: v4.6.0]
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/attest-build-provenance v4.1.1@0f67c3f4856b2e3261c31976d6725780e5e4c373

.github/workflows/release.yml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4.5.2@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c → [Updates: v4.6.0]

.github/workflows/trivy.yml (6)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 → [Updates: v4]
• github/codeql-action v4@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 → [Updates: v4]

.github/workflows/zizmor.yml (4)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-python v6@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7]
• github/codeql-action v4@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 → [Updates: v4]
• python 3.14.6

---

• Check this box to trigger a request for Renovate to run again on this repository