Dependency Dashboard

[renovate[bot]]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: Detected empty commit - aborting git push

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• [ ] chore(deps): update github/codeql-action action to v3.26.7
• [ ] fix(deps): update rust crate tokio-stream to v0.1.16
• [ ] fix(deps): update rust crate trust-dns-resolver to v0.23.2
• [ ] chore(deps): update ossf/scorecard-action action to v2.4.0
• [ ] fix(deps): update rust crate tokio to v1.40.0
• [ ] 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• [ ] chore(deps): update actions/checkout action to v4.1.7
• [ ] fix(deps): update rust crate anyhow to v1.0.88
• [ ] fix(deps): update rust crate futures to v0.3.30
• [ ] fix(deps): update rust crate reqwest to v0.12.7
• [ ] fix(deps): update rust crate serde to v1.0.210
• [ ] fix(deps): update rust crate thiserror to v1.0.63
• [ ] chore(deps): update actions/dependency-review-action action to v4.3.4
• [ ] chore(deps): update actions/upload-artifact action to v4.4.0
• [ ] chore(deps): update dependency netaddr to v1.3.0
• [ ] chore(deps): update step-security/harden-runner action to v2.10.1
• [ ] Click on this checkbox to rebase all open PRs at once

Detected dependencies

cargo

code/port-scanner/rust/Cargo.toml

- `tokio 1` - `thiserror 1.0` - `anyhow 1.0` - `reqwest 0.12` - `serde 1` - `trust-dns-resolver 0.23` - `futures 0.3` - `tokio-stream 0.1`

github-actions

.github/workflows/dependency-review.yml

- `step-security/harden-runner v2.7.0@63c24ba6bd7ba022e95695ff85de572c04a18142` - `actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11` - `actions/dependency-review-action v4.2.5@5bbc3ba658137598168acb2ab73b21c432dd411b`

.github/workflows/scorecards.yml

- `step-security/harden-runner v2.7.0@63c24ba6bd7ba022e95695ff85de572c04a18142` - `actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11` - `ossf/scorecard-action v2.3.1@0864cf19026789058feabb7e87baa5f140aac736` - `actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3` - `github/codeql-action v3.26.6@4dd16135b69a43b6c8efb853346f8437d92d3c93`

.github/workflows/semgrep.yml

- `step-security/harden-runner v2.7.0@63c24ba6bd7ba022e95695ff85de572c04a18142` - `actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11` - `returntocorp/semgrep-action 713efdd345f3035192eaa63f56867b88e63e4e5d` - `actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3` - `github/codeql-action v3.26.6@4dd16135b69a43b6c8efb853346f8437d92d3c93`

pip_requirements

code/port-scanner/python/requirements.txt

- `netaddr ==1.2.1`

---

• [ ] Check this box to trigger a request for Renovate to run again on this repository

[shsingh]

remove dependabot, use renovate