chore(deps): update all non-major dependencies #622

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

renovate wants to merge 1 commit into main from renovate/all-minor-patch

Contributor

renovate bot commented Aug 31, 2025 •

edited

Loading

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout (changelog)	action	digest	`08c6903` -> `93cb6ef`
nearprotocol/nearcore	stage	minor	`2.7.0` -> `2.10.3`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot enabled auto-merge (squash)

August 31, 2025 10:50

Contributor

github-actions bot commented Aug 31, 2025

🔍 Trivy Dockerfile Scan Results for `clients/exec/neard/Dockerfile`

Click to view findings


Report Summary

┌────────────┬────────────┬───────────────────┐
│   Target   │    Type    │ Misconfigurations │
├────────────┼────────────┼───────────────────┤
│ Dockerfile │ dockerfile │         2         │
└────────────┴────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


Dockerfile (dockerfile)
=======================
Tests: 20 (SUCCESSES: 18, FAILURES: 2)
Failures: 2 (HIGH: 2, CRITICAL: 0)

AVD-DS-0002 (HIGH): Specify at least 1 USER command in Dockerfile with non-root user as argument
════════════════════════════════════════
Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.

See https://avd.aquasec.com/misconfig/ds002
────────────────────────────────────────


AVD-DS-0029 (HIGH): '--no-install-recommends' flag is missed: 'apt-get update &&     apt-get install sysstat -y &&     apt-get clean &&     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /var/cache/ldconfig/aux-cache /usr/lib/python3.9/__pycache__/ /usr/lib/python3.9/*/__pycache__/ /var/log/*'
════════════════════════════════════════
'apt-get' install should use '--no-install-recommends' to minimize image size.

See https://avd.aquasec.com/misconfig/ds029
────────────────────────────────────────
 Dockerfile:9-12
────────────────────────────────────────
   9 ┌ RUN apt-get update && \
  10 │     apt-get install sysstat -y && \
  11 │     apt-get clean && \
  12 └     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /var/cache/ldconfig/aux-cache /usr/lib/python3.9/__pycache__/ /usr/lib/python3.9/*/__pycache__/ /var/log/*
────────────────────────────────────────

Please review these findings and make necessary fixes to improve the security of your Dockerfile.

renovate bot changed the title ~~chore(deps): update nearprotocol/nearcore docker tag to v2.7.1~~ chore(deps): update nearprotocol/nearcore docker tag to v2.8.0

renovate bot force-pushed the renovate/all-minor-patch branch from 860da30 to c4c4dfd Compare

September 6, 2025 18:30

Contributor

github-actions bot commented Sep 6, 2025

🔍 Trivy Dockerfile Scan Results for `clients/exec/neard/Dockerfile`

Click to view findings


Report Summary

┌────────────┬────────────┬───────────────────┐
│   Target   │    Type    │ Misconfigurations │
├────────────┼────────────┼───────────────────┤
│ Dockerfile │ dockerfile │         2         │
└────────────┴────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


Dockerfile (dockerfile)
=======================
Tests: 20 (SUCCESSES: 18, FAILURES: 2)
Failures: 2 (HIGH: 2, CRITICAL: 0)

AVD-DS-0002 (HIGH): Specify at least 1 USER command in Dockerfile with non-root user as argument
════════════════════════════════════════
Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.

See https://avd.aquasec.com/misconfig/ds002
────────────────────────────────────────


AVD-DS-0029 (HIGH): '--no-install-recommends' flag is missed: 'apt-get update &&     apt-get install sysstat -y &&     apt-get clean &&     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /var/cache/ldconfig/aux-cache /usr/lib/python3.9/__pycache__/ /usr/lib/python3.9/*/__pycache__/ /var/log/*'
════════════════════════════════════════
'apt-get' install should use '--no-install-recommends' to minimize image size.

See https://avd.aquasec.com/misconfig/ds029
────────────────────────────────────────
 Dockerfile:9-12
────────────────────────────────────────
   9 ┌ RUN apt-get update && \
  10 │     apt-get install sysstat -y && \
  11 │     apt-get clean && \
  12 └     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /var/cache/ldconfig/aux-cache /usr/lib/python3.9/__pycache__/ /usr/lib/python3.9/*/__pycache__/ /var/log/*
────────────────────────────────────────

Please review these findings and make necessary fixes to improve the security of your Dockerfile.

renovate bot force-pushed the renovate/all-minor-patch branch from c4c4dfd to 5782bea Compare

September 22, 2025 20:47

Contributor

github-actions bot commented Sep 22, 2025

🔍 Trivy Dockerfile Scan Results for `clients/exec/neard/Dockerfile`

Click to view findings


Report Summary

┌────────────┬────────────┬───────────────────┐
│   Target   │    Type    │ Misconfigurations │
├────────────┼────────────┼───────────────────┤
│ Dockerfile │ dockerfile │         2         │
└────────────┴────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


Dockerfile (dockerfile)
=======================
Tests: 20 (SUCCESSES: 18, FAILURES: 2)
Failures: 2 (HIGH: 2, CRITICAL: 0)

AVD-DS-0002 (HIGH): Specify at least 1 USER command in Dockerfile with non-root user as argument
════════════════════════════════════════
Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.

See https://avd.aquasec.com/misconfig/ds002
────────────────────────────────────────


AVD-DS-0029 (HIGH): '--no-install-recommends' flag is missed: 'apt-get update &&     apt-get install sysstat -y &&     apt-get clean &&     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /var/cache/ldconfig/aux-cache /usr/lib/python3.9/__pycache__/ /usr/lib/python3.9/*/__pycache__/ /var/log/*'
════════════════════════════════════════
'apt-get' install should use '--no-install-recommends' to minimize image size.

See https://avd.aquasec.com/misconfig/ds029
────────────────────────────────────────
 Dockerfile:9-12
────────────────────────────────────────
   9 ┌ RUN apt-get update && \
  10 │     apt-get install sysstat -y && \
  11 │     apt-get clean && \
  12 └     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /var/cache/ldconfig/aux-cache /usr/lib/python3.9/__pycache__/ /usr/lib/python3.9/*/__pycache__/ /var/log/*
────────────────────────────────────────

Please review these findings and make necessary fixes to improve the security of your Dockerfile.

renovate bot force-pushed the renovate/all-minor-patch branch from 5782bea to f38fd7b Compare

September 24, 2025 18:08

renovate bot changed the title ~~chore(deps): update nearprotocol/nearcore docker tag to v2.8.0~~ chore(deps): update nearprotocol/nearcore docker tag to v2.9.0

Contributor

github-actions bot commented Sep 24, 2025

🔍 Trivy Dockerfile Scan Results for `clients/exec/neard/Dockerfile`

Click to view findings


Report Summary

┌────────────┬────────────┬───────────────────┐
│   Target   │    Type    │ Misconfigurations │
├────────────┼────────────┼───────────────────┤
│ Dockerfile │ dockerfile │         2         │
└────────────┴────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


Dockerfile (dockerfile)
=======================
Tests: 20 (SUCCESSES: 18, FAILURES: 2)
Failures: 2 (HIGH: 2, CRITICAL: 0)

AVD-DS-0002 (HIGH): Specify at least 1 USER command in Dockerfile with non-root user as argument
════════════════════════════════════════
Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.

See https://avd.aquasec.com/misconfig/ds002
────────────────────────────────────────


AVD-DS-0029 (HIGH): '--no-install-recommends' flag is missed: 'apt-get update &&     apt-get install sysstat -y &&     apt-get clean &&     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /var/cache/ldconfig/aux-cache /usr/lib/python3.9/__pycache__/ /usr/lib/python3.9/*/__pycache__/ /var/log/*'
════════════════════════════════════════
'apt-get' install should use '--no-install-recommends' to minimize image size.

See https://avd.aquasec.com/misconfig/ds029
────────────────────────────────────────
 Dockerfile:9-12
────────────────────────────────────────
   9 ┌ RUN apt-get update && \
  10 │     apt-get install sysstat -y && \
  11 │     apt-get clean && \
  12 └     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /var/cache/ldconfig/aux-cache /usr/lib/python3.9/__pycache__/ /usr/lib/python3.9/*/__pycache__/ /var/log/*
────────────────────────────────────────

Please review these findings and make necessary fixes to improve the security of your Dockerfile.

renovate bot changed the title ~~chore(deps): update nearprotocol/nearcore docker tag to v2.9.0~~ chore(deps): update nearprotocol/nearcore docker tag to v2.10.0

renovate bot force-pushed the renovate/all-minor-patch branch from f38fd7b to fe15e95 Compare

October 28, 2025 20:48

Contributor

github-actions bot commented Oct 28, 2025

🔍 Trivy Dockerfile Scan Results for `clients/exec/neard/Dockerfile`

Click to view findings


Report Summary

┌────────────┬────────────┬───────────────────┐
│   Target   │    Type    │ Misconfigurations │
├────────────┼────────────┼───────────────────┤
│ Dockerfile │ dockerfile │         2         │
└────────────┴────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


Dockerfile (dockerfile)
=======================
Tests: 20 (SUCCESSES: 18, FAILURES: 2)
Failures: 2 (HIGH: 2, CRITICAL: 0)

AVD-DS-0002 (HIGH): Specify at least 1 USER command in Dockerfile with non-root user as argument
════════════════════════════════════════
Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.

See https://avd.aquasec.com/misconfig/ds002
────────────────────────────────────────


AVD-DS-0029 (HIGH): '--no-install-recommends' flag is missed: 'apt-get update &&     apt-get install sysstat -y &&     apt-get clean &&     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /var/cache/ldconfig/aux-cache /usr/lib/python3.9/__pycache__/ /usr/lib/python3.9/*/__pycache__/ /var/log/*'
════════════════════════════════════════
'apt-get' install should use '--no-install-recommends' to minimize image size.

See https://avd.aquasec.com/misconfig/ds029
────────────────────────────────────────
 Dockerfile:9-12
────────────────────────────────────────
   9 ┌ RUN apt-get update && \
  10 │     apt-get install sysstat -y && \
  11 │     apt-get clean && \
  12 └     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /var/cache/ldconfig/aux-cache /usr/lib/python3.9/__pycache__/ /usr/lib/python3.9/*/__pycache__/ /var/log/*
────────────────────────────────────────

Please review these findings and make necessary fixes to improve the security of your Dockerfile.

renovate bot changed the title ~~chore(deps): update nearprotocol/nearcore docker tag to v2.10.0~~ chore(deps): update all non-major dependencies

renovate bot force-pushed the renovate/all-minor-patch branch from fe15e95 to b2074ea Compare

November 18, 2025 04:02

Contributor

github-actions bot commented Nov 18, 2025

🔍 Trivy Dockerfile Scan Results for `clients/exec/neard/Dockerfile`

Click to view findings


Report Summary

┌────────────┬────────────┬───────────────────┐
│   Target   │    Type    │ Misconfigurations │
├────────────┼────────────┼───────────────────┤
│ Dockerfile │ dockerfile │         2         │
└────────────┴────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


Dockerfile (dockerfile)
=======================
Tests: 20 (SUCCESSES: 18, FAILURES: 2)
Failures: 2 (HIGH: 2, CRITICAL: 0)

AVD-DS-0002 (HIGH): Specify at least 1 USER command in Dockerfile with non-root user as argument
════════════════════════════════════════
Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.

See https://avd.aquasec.com/misconfig/ds002
────────────────────────────────────────


AVD-DS-0029 (HIGH): '--no-install-recommends' flag is missed: 'apt-get update &&     apt-get install sysstat -y &&     apt-get clean &&     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /var/cache/ldconfig/aux-cache /usr/lib/python3.9/__pycache__/ /usr/lib/python3.9/*/__pycache__/ /var/log/*'
════════════════════════════════════════
'apt-get' install should use '--no-install-recommends' to minimize image size.

See https://avd.aquasec.com/misconfig/ds029
────────────────────────────────────────
 Dockerfile:9-12
────────────────────────────────────────
   9 ┌ RUN apt-get update && \
  10 │     apt-get install sysstat -y && \
  11 │     apt-get clean && \
  12 └     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /var/cache/ldconfig/aux-cache /usr/lib/python3.9/__pycache__/ /usr/lib/python3.9/*/__pycache__/ /var/log/*
────────────────────────────────────────

Please review these findings and make necessary fixes to improve the security of your Dockerfile.

renovate bot force-pushed the renovate/all-minor-patch branch from b2074ea to ea5432d Compare

December 3, 2025 19:36

Contributor

github-actions bot commented Dec 3, 2025

🔍 Trivy Dockerfile Scan Results for `clients/exec/neard/Dockerfile`

Click to view findings


Report Summary

┌────────────┬────────────┬───────────────────┐
│   Target   │    Type    │ Misconfigurations │
├────────────┼────────────┼───────────────────┤
│ Dockerfile │ dockerfile │         2         │
└────────────┴────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


Dockerfile (dockerfile)
=======================
Tests: 20 (SUCCESSES: 18, FAILURES: 2)
Failures: 2 (HIGH: 2, CRITICAL: 0)

AVD-DS-0002 (HIGH): Specify at least 1 USER command in Dockerfile with non-root user as argument
════════════════════════════════════════
Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.

See https://avd.aquasec.com/misconfig/ds002
────────────────────────────────────────


AVD-DS-0029 (HIGH): '--no-install-recommends' flag is missed: 'apt-get update &&     apt-get install sysstat -y &&     apt-get clean &&     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /var/cache/ldconfig/aux-cache /usr/lib/python3.9/__pycache__/ /usr/lib/python3.9/*/__pycache__/ /var/log/*'
════════════════════════════════════════
'apt-get' install should use '--no-install-recommends' to minimize image size.

See https://avd.aquasec.com/misconfig/ds029
────────────────────────────────────────
 Dockerfile:9-12
────────────────────────────────────────
   9 ┌ RUN apt-get update && \
  10 │     apt-get install sysstat -y && \
  11 │     apt-get clean && \
  12 └     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /var/cache/ldconfig/aux-cache /usr/lib/python3.9/__pycache__/ /usr/lib/python3.9/*/__pycache__/ /var/log/*
────────────────────────────────────────

Please review these findings and make necessary fixes to improve the security of your Dockerfile.

renovate bot force-pushed the renovate/all-minor-patch branch from ea5432d to fa48dc3 Compare

December 11, 2025 19:04

Contributor

github-actions bot commented Dec 11, 2025

🔍 Trivy Dockerfile Scan Results for `clients/exec/neard/Dockerfile`

Click to view findings


Report Summary

┌────────────┬────────────┬───────────────────┐
│   Target   │    Type    │ Misconfigurations │
├────────────┼────────────┼───────────────────┤
│ Dockerfile │ dockerfile │         2         │
└────────────┴────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


Dockerfile (dockerfile)
=======================
Tests: 20 (SUCCESSES: 18, FAILURES: 2)
Failures: 2 (HIGH: 2, CRITICAL: 0)

AVD-DS-0002 (HIGH): Specify at least 1 USER command in Dockerfile with non-root user as argument
════════════════════════════════════════
Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.

See https://avd.aquasec.com/misconfig/ds002
────────────────────────────────────────


AVD-DS-0029 (HIGH): '--no-install-recommends' flag is missed: 'apt-get update &&     apt-get install sysstat -y &&     apt-get clean &&     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /var/cache/ldconfig/aux-cache /usr/lib/python3.9/__pycache__/ /usr/lib/python3.9/*/__pycache__/ /var/log/*'
════════════════════════════════════════
'apt-get' install should use '--no-install-recommends' to minimize image size.

See https://avd.aquasec.com/misconfig/ds029
────────────────────────────────────────
 Dockerfile:9-12
────────────────────────────────────────
   9 ┌ RUN apt-get update && \
  10 │     apt-get install sysstat -y && \
  11 │     apt-get clean && \
  12 └     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /var/cache/ldconfig/aux-cache /usr/lib/python3.9/__pycache__/ /usr/lib/python3.9/*/__pycache__/ /var/log/*
────────────────────────────────────────

Please review these findings and make necessary fixes to improve the security of your Dockerfile.


          chore(deps): update all non-major dependencies

81a9912

renovate bot force-pushed the renovate/all-minor-patch branch from fa48dc3 to 81a9912 Compare

December 16, 2025 23:43

Contributor

github-actions bot commented Dec 16, 2025

🔍 Trivy Dockerfile Scan Results for `clients/exec/neard/Dockerfile`

Click to view findings


Report Summary

┌────────────┬────────────┬───────────────────┐
│   Target   │    Type    │ Misconfigurations │
├────────────┼────────────┼───────────────────┤
│ Dockerfile │ dockerfile │         2         │
└────────────┴────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


Dockerfile (dockerfile)
=======================
Tests: 20 (SUCCESSES: 18, FAILURES: 2)
Failures: 2 (HIGH: 2, CRITICAL: 0)

AVD-DS-0002 (HIGH): Specify at least 1 USER command in Dockerfile with non-root user as argument
════════════════════════════════════════
Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.

See https://avd.aquasec.com/misconfig/ds002
────────────────────────────────────────


AVD-DS-0029 (HIGH): '--no-install-recommends' flag is missed: 'apt-get update &&     apt-get install sysstat -y &&     apt-get clean &&     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /var/cache/ldconfig/aux-cache /usr/lib/python3.9/__pycache__/ /usr/lib/python3.9/*/__pycache__/ /var/log/*'
════════════════════════════════════════
'apt-get' install should use '--no-install-recommends' to minimize image size.

See https://avd.aquasec.com/misconfig/ds029
────────────────────────────────────────
 Dockerfile:9-12
────────────────────────────────────────
   9 ┌ RUN apt-get update && \
  10 │     apt-get install sysstat -y && \
  11 │     apt-get clean && \
  12 └     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /var/cache/ldconfig/aux-cache /usr/lib/python3.9/__pycache__/ /usr/lib/python3.9/*/__pycache__/ /var/log/*
────────────────────────────────────────

Please review these findings and make necessary fixes to improve the security of your Dockerfile.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet