Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• fix(deps): update rust crate tokio-stream to v0.1.17
• fix(deps): update rust crate trust-dns-resolver to v0.23.2
• chore(deps): update github/codeql-action action to v3.28.5
• chore(deps): update ossf/scorecard-action action to v2.4.0
• fix(deps): update rust crate tokio to v1.43.0
• fix(deps): update rust crate thiserror to v2
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• fix(deps): update rust crate anyhow to v1.0.95
• fix(deps): update rust crate futures to v0.3.31
• fix(deps): update rust crate reqwest to v0.12.12
• fix(deps): update rust crate serde to v1.0.217
• fix(deps): update rust crate thiserror to v1.0.69
• chore(deps): update actions/checkout action to v4.2.2
• chore(deps): update actions/dependency-review-action action to v4.5.0
• chore(deps): update actions/upload-artifact action to v4.6.0
• chore(deps): update dependency netaddr to v1.3.0
• chore(deps): update step-security/harden-runner action to v2.10.4
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

cargo

code/port-scanner/rust/Cargo.toml

• tokio 1
• thiserror 1.0
• anyhow 1.0
• reqwest 0.12
• serde 1
• trust-dns-resolver 0.23
• futures 0.3
• tokio-stream 0.1

github-actions

.github/workflows/dependency-review.yml

• step-security/harden-runner v2.7.0@63c24ba6bd7ba022e95695ff85de572c04a18142
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/dependency-review-action v4.2.5@5bbc3ba658137598168acb2ab73b21c432dd411b

.github/workflows/scorecards.yml

• step-security/harden-runner v2.7.0@63c24ba6bd7ba022e95695ff85de572c04a18142
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• ossf/scorecard-action v2.3.1@0864cf19026789058feabb7e87baa5f140aac736
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• github/codeql-action v3.26.6@4dd16135b69a43b6c8efb853346f8437d92d3c93

.github/workflows/semgrep.yml

• step-security/harden-runner v2.7.0@63c24ba6bd7ba022e95695ff85de572c04a18142
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• returntocorp/semgrep-action 713efdd345f3035192eaa63f56867b88e63e4e5d
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• github/codeql-action v3.26.6@4dd16135b69a43b6c8efb853346f8437d92d3c93

pip_requirements

code/port-scanner/python/requirements.txt

• netaddr ==1.2.1

---

• Check this box to trigger a request for Renovate to run again on this repository

[shsingh]

remove dependabot, use renovate