Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (22)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	EyeCantCU/cosign-action	2024-07-11
github-actions	redhat-actions/buildah-build	2024-03-05
github-actions	redhat-actions/push-to-registry	2024-03-08
github-actions	ublue-os/remove-unwanted-software	2025-02-25

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): pin dependencies (ghcr.io/ublue-os/arch-toolbox, ghcr.io/ublue-os/fedora-toolbox, ghcr.io/ublue-os/ubuntu-toolbox, ghcr.io/ublue-os/wolfi-dx-toolbox, ghcr.io/ublue-os/wolfi-toolbox, quay.io/coreos/chunkah)

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update github/codeql-action digest to 95e58e9
• chore(deps): update actions/upload-artifact action to v7.0.1
• chore(deps): update docker.io/library/debian docker tag to trixie-20260421
• chore(deps): update docker/build-push-action action to v7.1.0
• chore(deps): update docker/login-action action to v4.1.0
• chore(deps): update aszc/change-string-case-action action to v8
• chore(deps): update docker.io/library/ubuntu docker tag to v26

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update toolbox-images (cgr.dev/chainguard/wolfi-base, docker.io/library/debian, docker.io/library/ubuntu, ghcr.io/ublue-os/arch-toolbox, ghcr.io/ublue-os/ubuntu-toolbox, quay.io/toolbx/arch-toolbox, registry.fedoraproject.org/fedora-toolbox)
• chore(deps): update sigstore/cosign-installer action to v4.1.1
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update registry.fedoraproject.org/fedora-toolbox docker tag to v45

Detected Dependencies

dockerfile (9)

apps/docker/Containerfile.docker (1)

• ghcr.io/ublue-os/ubuntu-toolbox sha256:d951979f542aa65aa20a08f9f3bc9684cdabba8ee496da9f814dc526ed99e29b → [Updates: undefined]

apps/incus/Containerfile.incus (1)

• ghcr.io/ublue-os/ubuntu-toolbox sha256:d951979f542aa65aa20a08f9f3bc9684cdabba8ee496da9f814dc526ed99e29b → [Updates: undefined]

toolboxes/arch-toolbox/Containerfile.arch (1)

• quay.io/toolbx/arch-toolbox sha256:ea0d61bf06b64b4562e2f31ef761cd91b629839b58a114e7861012919fd80540 → [Updates: undefined]

toolboxes/debian-toolbox/Containerfile.debian (3)

• docker.io/library/debian trixie@sha256:55a15a112b42be10bfc8092fcc40b6748dc236f7ef46a358d9392b339e9d60e8 → [Updates: trixie-20260421, trixie]
• quay.io/coreos/chunkah unknown version → [Updates: undefined]
• oci-archive out.ociarchive

toolboxes/fedora-toolbox/Containerfile.fedora (3)

• registry.fedoraproject.org/fedora-toolbox 43@sha256:f0f68234e3dbaed0f0af669948b6c2f487c5f776e1d0b0a70d3db6a271fd4ae5 → [Updates: 45, 43]
• quay.io/coreos/chunkah unknown version → [Updates: undefined]
• oci-archive out.ociarchive

toolboxes/ollama-toolbox/Containerfile.ollama

toolboxes/steambox/Containerfile.steambox (1)

• ghcr.io/ublue-os/arch-toolbox sha256:bb3729060e7f9762ee47d7fd72d3c31b6a85cf4efe29125f99aadfa503325c4c → [Updates: undefined]

toolboxes/ubuntu-toolbox/Containerfile.ubuntu (3)

• docker.io/library/ubuntu 24.04@sha256:186072bba1b2f436cbb91ef2567abca677337cfc786c86e107d25b7072feef0c → [Updates: 26.04, 24.04]
• quay.io/coreos/chunkah unknown version → [Updates: undefined]
• oci-archive out.ociarchive

toolboxes/wolfi-toolbox/Containerfile.wolfi (1)

• cgr.dev/chainguard/wolfi-base latest@sha256:a4f0ce6667ec67807c5ea1d76d13a9de1d431c2b1e1cf5d5616bb3a5503a35f8 → [Updates: latest]

github-actions (10)

.github/workflows/build-arch-toolbox.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf
• redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056
• ASzc/change-string-case-action v6@d0603cd0a7dd490be678164909f65c7737470a7f → [Updates: v8]
• redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c
• docker/login-action v4.0.0@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4.1.0]
• sigstore/cosign-installer v4.1.0@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 → [Updates: v4.1.1]
• ubuntu 24.04

.github/workflows/build-blincusui-app.yml (9)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• EyeCantCU/cosign-action v0.3.0@58722a084c82190b57863002d494c91eabbe9e79
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf
• redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056
• ASzc/change-string-case-action v6@d0603cd0a7dd490be678164909f65c7737470a7f → [Updates: v8]
• redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c
• docker/login-action v4.0.0@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4.1.0]
• sigstore/cosign-installer v4.1.0@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 → [Updates: v4.1.1]
• ubuntu 24.04

.github/workflows/build-debian-toolbox.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf
• redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056
• ASzc/change-string-case-action v6@d0603cd0a7dd490be678164909f65c7737470a7f → [Updates: v8]
• redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c
• docker/login-action v4.0.0@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4.1.0]
• sigstore/cosign-installer v4.1.0@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 → [Updates: v4.1.1]
• ubuntu 24.04

.github/workflows/build-docker-app.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• EyeCantCU/cosign-action v0.3.0@58722a084c82190b57863002d494c91eabbe9e79
• ASzc/change-string-case-action v6@d0603cd0a7dd490be678164909f65c7737470a7f → [Updates: v8]
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf
• docker/login-action v4.0.0@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4.1.0]
• docker/build-push-action v7.0.0@d08e5c354a6adb9ed34480a06d141179aa583294 → [Updates: v7.1.0]
• sigstore/cosign-installer v4.1.0@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 → [Updates: v4.1.1]
• ubuntu 24.04

.github/workflows/build-fedora-toolbox.yml (9)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• EyeCantCU/cosign-action v0.3.0@58722a084c82190b57863002d494c91eabbe9e79
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf
• redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056
• ASzc/change-string-case-action v6@d0603cd0a7dd490be678164909f65c7737470a7f → [Updates: v8]
• redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c
• docker/login-action v4.0.0@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4.1.0]
• sigstore/cosign-installer v4.1.0@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 → [Updates: v4.1.1]
• ubuntu 24.04

.github/workflows/build-incus-app.yml (9)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• EyeCantCU/cosign-action v0.3.0@58722a084c82190b57863002d494c91eabbe9e79
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf
• redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056
• ASzc/change-string-case-action v6@d0603cd0a7dd490be678164909f65c7737470a7f → [Updates: v8]
• redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c
• docker/login-action v4.0.0@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4.1.0]
• sigstore/cosign-installer v4.1.0@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 → [Updates: v4.1.1]
• ubuntu 24.04

.github/workflows/build-steambox.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf
• redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056
• ASzc/change-string-case-action v6@d0603cd0a7dd490be678164909f65c7737470a7f → [Updates: v8]
• redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c
• docker/login-action v4.0.0@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4.1.0]
• sigstore/cosign-installer v4.1.0@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 → [Updates: v4.1.1]
• ubuntu 24.04

.github/workflows/build-ubuntu-toolbox.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf
• redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056
• ASzc/change-string-case-action v6@d0603cd0a7dd490be678164909f65c7737470a7f → [Updates: v8]
• redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c
• docker/login-action v4.0.0@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4.1.0]
• sigstore/cosign-installer v4.1.0@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 → [Updates: v4.1.1]
• ubuntu 24.04

.github/workflows/build-wolfi-toolbox.yml (10)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• EyeCantCU/cosign-action v0.3.0@58722a084c82190b57863002d494c91eabbe9e79
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf
• ublue-os/remove-unwanted-software v9@cc0becac701cf642c8f0a6613bbdaf5dc36b259e
• redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056
• ASzc/change-string-case-action v6@d0603cd0a7dd490be678164909f65c7737470a7f → [Updates: v8]
• redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c
• docker/login-action v4.0.0@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4.1.0]
• sigstore/cosign-installer v4.1.0@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 → [Updates: v4.1.1]
• ubuntu 24.04

.github/workflows/scorecard.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7.0.1]
• github/codeql-action v4@0d579ffd059c29b07949a3cce3983f0780820c98 → [Updates: v4]

quadlet (8)

quadlets/arch-toolbox/arch-distrobox-quadlet.container (1)

• ghcr.io/ublue-os/arch-toolbox latest → [Updates: latest]

quadlets/arch-toolbox/arch-toolbox-quadlet.container (1)

• ghcr.io/ublue-os/arch-toolbox latest → [Updates: latest]

quadlets/fedora-toolbox/fedora-distrobox-quadlet.container (1)

• ghcr.io/ublue-os/fedora-toolbox latest → [Updates: latest]

quadlets/fedora-toolbox/fedora-toolbox-quadlet.container (1)

• ghcr.io/ublue-os/fedora-toolbox latest → [Updates: latest]

quadlets/ubuntu-toolbox/ubuntu-distrobox-quadlet.container (1)

• ghcr.io/ublue-os/ubuntu-toolbox latest → [Updates: latest]

quadlets/ubuntu-toolbox/ubuntu-toolbox-quadlet.container (1)

• ghcr.io/ublue-os/ubuntu-toolbox latest → [Updates: latest]

quadlets/wolfi-toolbox/wolfi-distrobox-quadlet.container (1)

• ghcr.io/ublue-os/wolfi-toolbox latest → [Updates: latest]

quadlets/wolfi-toolbox/wolfi-dx-distrobox-quadlet.container (1)

• ghcr.io/ublue-os/wolfi-dx-toolbox latest → [Updates: latest]

---

• Check this box to trigger a request for Renovate to run again on this repository