Pin dependencies (main)

[renovate-rancher]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/create-github-app-token	action	pinDigest	→ fee1f7d
docker/build-push-action	action	minor	v7.0.0 → v7.1.0
docker/login-action	action	minor	v4.0.0 → v4.1.0
fossas/fossa-action	action	minor	v1.8.0 → v1.9.0
rancher/ecm-distro-tools	action	minor	v0.66.2 → v0.67.2	v0.69.3 (+7)
rancher/renovate-config	action	patch	v1.0.0 → v1.0.3
rancherlabs/dep-fetch	action	pinDigest	→ 56731ed

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

docker/build-push-action (docker/build-push-action)

v7.1.0

Compare Source

• Git context query format support by @​crazy-max in #​1505
• Bump @​docker/actions-toolkit from 0.79.0 to 0.87.0 by @​crazy-max in #​1505
• Bump brace-expansion from 1.1.12 to 1.1.13 in #​1500
• Bump fast-xml-parser from 5.4.2 to 5.5.7 in #​1489
• Bump flatted from 3.3.3 to 3.4.2 in #​1491
• Bump glob from 10.3.12 to 10.5.0 in #​1490
• Bump handlebars from 4.7.8 to 4.7.9 in #​1497
• Bump lodash from 4.17.23 to 4.18.1 in #​1510
• Bump picomatch from 4.0.3 to 4.0.4 in #​1496
• Bump undici from 6.23.0 to 6.24.1 in #​1486
• Bump vite from 7.3.1 to 7.3.2 in #​1509

Full Changelog: docker/build-push-action@v7.0.0...v7.1.0

docker/login-action (docker/login-action)

v4.1.0

Compare Source

• Fix scoped Docker Hub cleanup path when registry is omitted by @​crazy-max in #​945
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1020.0 in #​930
• Bump @​docker/actions-toolkit from 0.77.0 to 0.86.0 in #​932 #​936
• Bump brace-expansion from 1.1.12 to 1.1.13 in #​952
• Bump fast-xml-parser from 5.3.4 to 5.3.6 in #​942
• Bump flatted from 3.3.3 to 3.4.2 in #​944
• Bump glob from 10.3.12 to 10.5.0 in #​940
• Bump handlebars from 4.7.8 to 4.7.9 in #​949
• Bump http-proxy-agent and https-proxy-agent to 8.0.0 in #​937
• Bump lodash from 4.17.23 to 4.18.1 in #​958
• Bump minimatch from 3.1.2 to 3.1.5 in #​941
• Bump picomatch from 4.0.3 to 4.0.4 in #​948
• Bump undici from 6.23.0 to 6.24.1 in #​938

Full Changelog: docker/login-action@v4.0.0...v4.1.0

fossas/fossa-action (fossas/fossa-action)

v1.9.0

Compare Source

What's Changed

• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​245
• Bump @​actions/tool-cache from 3.0.1 to 4.0.0 by @​dependabot[bot] in #​267
• Bump undici from 6.23.0 to 6.24.1 by @​spatten in #​275
• Add CI workflow to auto-rebuild dist by @​spatten in #​276
• Bump actions/upload-artifact from 4 to 7 by @​dependabot[bot] in #​272
• Add CodeRabbit configuration by @​chad-fossa in #​271
• Bump @​types/node from 25.2.0 to 25.2.1 by @​dependabot[bot] in #​269

New Contributors

• @​chad-fossa made their first contribution in #​271

Full Changelog: fossas/fossa-action@v1.8.0...v1.9.0

rancher/ecm-distro-tools (rancher/ecm-distro-tools)

v0.67.2

Compare Source

What's Changed

• Update module github.com/aws/aws-sdk-go-v2/config to v1.32.14 by @​renovate-rancher[bot] in #​874
• Update dependency etcd-io/etcd to v3.6.10 by @​renovate-rancher[bot] in #​875
• Small improvements in kdm generation and update nginx env name by @​rafaelbreno in #​873

Full Changelog: rancher/ecm-distro-tools@v0.67.1...v0.67.2

v0.67.1

Compare Source

What's Changed

• add clean images step by @​tashima42 in #​871
• verify checksums and use target arch to build by @​tashima42 in #​872

Full Changelog: rancher/ecm-distro-tools@v0.67.0...v0.67.1

v0.67.0

Compare Source

What's Changed

• Update module github.com/aws/aws-sdk-go-v2 to v1.41.5 by @​renovate-rancher[bot] in #​860
• Update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.3 by @​renovate-rancher[bot] in #​862
• Update module github.com/aws/aws-sdk-go-v2/config to v1.32.13 by @​renovate-rancher[bot] in #​861
• Update rancher/ecm-distro-tools action to v0.64.0 by @​renovate-rancher[bot] in #​864
• Update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.98.0 by @​renovate-rancher[bot] in #​868
• Update module github.com/go-git/go-git/v5 to v5.17.2 by @​renovate-rancher[bot] in #​867
• Update module go.opentelemetry.io/otel/sdk to v1.43.0 [SECURITY] by @​renovate-rancher[bot] in #​869
• add images list from flag by @​tashima42 in #​870

Full Changelog: rancher/ecm-distro-tools@v0.66.3...v0.67.0

v0.66.3

Compare Source

What's Changed

• Change permissions from read to write for contents by @​tashima42 in #​855
• Update example to pin GHAs to by @​macedogm in #​856
• Update actions/setup-go digest to 4a36011 by @​renovate-rancher[bot] in #​857
• Update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.2 by @​renovate-rancher[bot] in #​858
• Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] by @​renovate-rancher[bot] in #​859
• Add imageEnvVersion function that will extract a Env value from a file by @​rafaelbreno in #​863

Full Changelog: rancher/ecm-distro-tools@v0.66.2...v0.66.3

rancher/renovate-config (rancher/renovate-config)

v1.0.3

Compare Source

v1.0.2

Compare Source

v1.0.1

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.