Dependency Dashboard

[renovate[bot]]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

This repository currently has no open or pending branches.

Detected dependencies

github-actions

.github/workflows/actionlint.yml

- `actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683`

.github/workflows/file-sync.yml

- `actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683` - `BetaHuhn/repo-file-sync-action v1.21.1@8b92be3375cf1d1b0cd579af488a9255572e4619`

.github/workflows/pr-feedback.yml

- `marcelklehr/get-github-handles-from-website-action v1.0.0@a739600f6b91da4957f51db0792697afbb2f143c` - `marcelklehr/pr-feedback-action 1883b38a033fb16f576875e0cf45f98b857655c4`

.github/workflows/renovate-approve-merge.yml

- `mdecoleman/pr-branch-name v3.0.0@55795d86b4566d300d237883103f052125cc7508` - `hmarr/auto-approve-action v4.0.0@f0939ea97e9205ef24d872e76833fa908a770363` - `alexwilson/enable-github-automerge-action main`

.github/workflows/reuse.yml

- `actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683` - `fsfe/reuse-action v4.0.0@3ae3c6bdf1257ab19397fab11fd3312144692083`

.github/workflows/scorecard.yml

- `actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683` - `ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46` - `github/codeql-action v3.27.3@396bb3e45325a47dd9ef434068033c6d5bb0d11a`

config/workflows/analysis.yml

- `actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683` - `actions/setup-java v4.5.0@8df1039502a15bceb9433410b1a100fbe190c53b` - `ubuntu 24.04`

config/workflows/autoApproveSync.yml

- `hmarr/auto-approve-action v4.0.0@f0939ea97e9205ef24d872e76833fa908a770363`

config/workflows/codeql.yml

- `actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683` - `pierotofy/set-swap-space v1.0@49819abfb41bd9b44fb781159c033dba90353a7c` - `github/codeql-action v3.27.3@396bb3e45325a47dd9ef434068033c6d5bb0d11a` - `actions/setup-java v4.5.0@8df1039502a15bceb9433410b1a100fbe190c53b` - `github/codeql-action v3.27.3@396bb3e45325a47dd9ef434068033c6d5bb0d11a` - `ubuntu 24.04`

config/workflows/detectNewJavaFiles.yml

- `trilom/file-changes-action v1.2.4@a6ca26c14274c33b15e6499323aac178af06ad4b`

config/workflows/gradle-wrapper-validation.yml

- `actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683` - `gradle/wrapper-validation-action v3.5.0@f9c9c575b8b21b6485636a91ffecd10e558c62f6`

config/workflows/pr-feedback.yml

- `marcelklehr/get-github-handles-from-website-action v1.0.0@a739600f6b91da4957f51db0792697afbb2f143c` - `marcelklehr/pr-feedback-action 1883b38a033fb16f576875e0cf45f98b857655c4`

config/workflows/renovate-approve-merge.yml

- `mdecoleman/pr-branch-name v3.0.0@55795d86b4566d300d237883103f052125cc7508` - `hmarr/auto-approve-action v4.0.0@f0939ea97e9205ef24d872e76833fa908a770363` - `alexwilson/enable-github-automerge-action main`

config/workflows/scorecard.yml

- `actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683` - `ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46` - `github/codeql-action v3.27.3@396bb3e45325a47dd9ef434068033c6d5bb0d11a`

config/workflows/stale.yml

- `actions/stale v9.0.0@28ca1036281a5e5922ead5184a1bbf96e5fc984e`

---

• [ ] Check this box to trigger a request for Renovate to run again on this repository

[AlvaroBrey]

To discuss:

• [ ] Remove PR ratelimit (currently 2/hour)?
• [ ] Open single PR for all actions daily? Would reduce the amount of sync PRs. We could also just do a daily sync instead of every time something is merged to main

[tobiasKaminsky]

My idea:

• no ratelimit
• one single PR per day is good, as there should not be mission critical things. And if so, we can do it manualy

[AndyScherzinger]

I agree with Tobias' assessment

[AlvaroBrey]

Ok, creating new issue to track that