chore(deps): pin dependencies

Merge pull request 'chore(deps): update dependency sigstore/cosign to v3.1.2' (#175 ) from renovate/sigstore-cosign-3.x into master
chore(deps): update dependency sigstore/cosign to v3.1.2
2026-07-17 21:05:08 +00:00 · 2026-07-17 18:11:08 +00:00 · 2026-07-17 18:05:03 +00:00 · 2026-07-15 00:09:18 +00:00 · 2026-07-15 00:08:15 +00:00 · 2026-07-13 12:07:05 +00:00
7 changed files with 73 additions and 50 deletions
@@ -10,7 +10,7 @@ jobs:
    name: "Upload artifacthub-repo.yml to OCI registry"
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@v6.0.3
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
    - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
      with:
        registry: ${{ github.server_url }}
@@ -22,7 +22,7 @@ jobs:
      run: |
        apk update
        apk add git npm
-    - uses: actions/checkout@v6.0.3
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
    - name: Generate parameter section in README
      run: |
        npm install
@@ -14,7 +14,7 @@ jobs:
  helm-lint:
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@v6.0.3
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
    - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
      with:
        version: v4.2.3 # renovate: datasource=github-releases depName=helm/helm
@@ -25,7 +25,7 @@ jobs:
  helm-unittest:
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@v6.0.3
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
    - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
      with:
        version: v4.2.3 # renovate: datasource=github-releases depName=helm/helm
@@ -22,7 +22,7 @@ jobs:
      run: |
        apk update
        apk add git npm
-    - uses: actions/checkout@v6.0.3
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
    - name: Verify links in markdown files
      run: |
        npm install
@@ -37,7 +37,7 @@ jobs:
      run: |
        apk update
        apk add git
-    - uses: actions/checkout@v6.0.3
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
    - name: Lint markdown files
      run: |
        npm install
@@ -14,9 +14,9 @@ jobs:
  publish-chart:
    runs-on: ubuntu-latest
    steps:
-      - uses: volker-raschek/cosign-installer@v4.1.3-rc3
+      - uses: volker-raschek/cosign-installer@7643eed6736a199595ed2a31e9979ec353a88adb # v4.1.3-rc3
        with:
-          cosign-release: "v3.1.1" # renovate: datasource=github-tags depName=sigstore/cosign
+          cosign-release: "v3.1.2" # renovate: datasource=github-tags depName=sigstore/cosign

      - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
        with:
@@ -65,7 +65,7 @@ jobs:
          gpg --batch --yes --export "${GPG_PRIVATE_KEY_FINGERPRINT}" 1> "${HOME}/.gnupg/pubring.gpg"
          gpg --batch --yes --passphrase-fd 0 --export-secret-keys "${GPG_PRIVATE_KEY_FINGERPRINT}" 1> "${HOME}/.gnupg/secring.gpg" <<< "${GPG_PRIVATE_KEY_PASSPHRASE}"

-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          fetch-depth: 0

@@ -37,7 +37,7 @@ version of the chart must be in sync with the `values.yaml`. Newer *minor* versi
 versions can break something!

 ```bash
-CHART_VERSION=2.0.1
+CHART_VERSION=v2.0.3
 helm show values volker.raschek/athens-proxy --version "${CHART_VERSION}" > values.yaml
 ```

@@ -51,7 +51,7 @@ The helm chart also contains a persistent volume claim definition. It persistent
 Use the `--set` argument to persist your data.

 ```bash
-CHART_VERSION=2.0.1
+CHART_VERSION=v2.0.3
 helm install --version "${CHART_VERSION}" athens-proxy volker.raschek/athens-proxy \
  persistence.enabled=true
 ```
@@ -81,7 +81,7 @@ Further information about this topic can be found in one of Kanishk's blog
 > Please take care the a CPU limit < `1000m` can also lead to CPU throttling. Please read the linked documentation carefully.

 ```bash
-CHART_VERSION=2.0.1
+CHART_VERSION=v2.0.3
 helm install --version "${CHART_VERSION}" athens-proxy volker.raschek/athens-proxy \
  --set 'deployment.athensProxy.env.name=GOMAXPROCS' \
  --set 'deployment.athensProxy.env.valueFrom.resourceFieldRef.resource=limits.cpu' \
@@ -105,7 +105,7 @@ describes configuring [Ingress NGINX](#ingress-nginx) as well as [NGINX Gateway
 > `athens-proxy-ca` is present in the same namespace of the helm deployment.

 ```bash
-CHART_VERSION=2.0.1
+CHART_VERSION=v2.0.3
 helm install --version "${CHART_VERSION}" athens-proxy volker.raschek/athens-proxy \
  --set 'config.certificate.enabled=true' \
  --set 'config.certificate.new.issuerRef.kind=Issuer' \
@@ -749,9 +749,9 @@
      }
    },
    "node_modules/ignore": {
-      "version": "7.0.5",
-      "resolved": "https://registry.npmjs.org/ignore/-/ignore-7.0.5.tgz",
-      "integrity": "sha512-Hs59xBNfUIunMFgWAbGX5cq6893IbWg4KnrjbYwX3tx0ztorVgTDA6B2sxf8ejHJ4wz8BqGUMYlnzNBer5NvGg==",
+      "version": "7.0.6",
+      "resolved": "https://registry.npmjs.org/ignore/-/ignore-7.0.6.tgz",
+      "integrity": "sha512-BAg6QkE8W+TuQLrrw0Ugr7HegXduRuuj8/ti2kSOc+jz1dmx8/WNcjr6XGnq5YpDWxFwwaavqD0+jIUOKelTsw==",
      "dev": true,
      "license": "MIT",
      "engines": {
@@ -778,13 +778,13 @@
      "license": "ISC"
    },
    "node_modules/ini": {
-      "version": "4.1.3",
-      "resolved": "https://registry.npmjs.org/ini/-/ini-4.1.3.tgz",
-      "integrity": "sha512-X7rqawQBvfdjS10YU1y1YVreA3SsLrW9dX2CewP2EbBJM4ypVNLDkO5y04gejPwKIY9lR+7r9gn3rFPt/kmWFg==",
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/ini/-/ini-7.0.0.tgz",
+      "integrity": "sha512-ifK0CgjALofS5bkrcTy4RaQ9Vx2Knf/eLeIO+NaswQEpH1UblrtTSCIvN71qQDMq0PeQ/SSPojvEJp9vvvfr+w==",
      "dev": true,
      "license": "ISC",
      "engines": {
-        "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
+        "node": "^22.22.2 || ^24.15.0 || >=26.0.0"
      }
    },
    "node_modules/ip-address": {
@@ -967,9 +967,9 @@
      }
    },
    "node_modules/linkify-it": {
-      "version": "5.0.1",
-      "resolved": "https://registry.npmjs.org/linkify-it/-/linkify-it-5.0.1.tgz",
-      "integrity": "sha512-wVoTjP4Q6R0NW5hiZkVJaFZPWgtXfoGF+6LucL3/FtiNjmcHhYjEr5f1Kqjirc1nBW07J/ZuRFumqr2oqccEWg==",
+      "version": "5.0.2",
+      "resolved": "https://registry.npmjs.org/linkify-it/-/linkify-it-5.0.2.tgz",
+      "integrity": "sha512-ONTm2jCMAVZjgQa/Fy1kScXsuOoF5NPTsoFBdE1KVIZ2vAh/r9+Bqo+0jINCBYnavTPQZz38QzFTme79ENoN3Q==",
      "dev": true,
      "funding": [
        {
@@ -1004,9 +1004,9 @@
      }
    },
    "node_modules/markdown-it": {
-      "version": "14.2.0",
-      "resolved": "https://registry.npmjs.org/markdown-it/-/markdown-it-14.2.0.tgz",
-      "integrity": "sha512-1TGiQiJVRQ3NPmZH6sx5Cfnmg6GQm9jvC1ch4TK511NjSJvjzKLzn5pPfZRNZkRPZP0HqCioSndqH8v2nRaWVQ==",
+      "version": "14.3.0",
+      "resolved": "https://registry.npmjs.org/markdown-it/-/markdown-it-14.3.0.tgz",
+      "integrity": "sha512-RCEsPjR+sr0x+AuYp601tKTkgFG4YEPLCzHST3cQ/fhlJkqAkz1L2/Qbp1j9qw5SBwQHFBoW8+hoN5xssOF0Tw==",
      "dev": true,
      "funding": [
        {
@@ -1021,8 +1021,8 @@
      "license": "MIT",
      "dependencies": {
        "argparse": "^2.0.1",
-        "entities": "^4.4.0",
-        "linkify-it": "^5.0.1",
+        "entities": "^4.5.0",
+        "linkify-it": "^5.0.2",
        "mdurl": "^2.0.0",
        "punycode.js": "^2.3.1",
        "uc.micro": "^2.1.0"
@@ -1088,9 +1088,9 @@
      }
    },
    "node_modules/markdownlint": {
-      "version": "0.41.0",
-      "resolved": "https://registry.npmjs.org/markdownlint/-/markdownlint-0.41.0.tgz",
-      "integrity": "sha512-xMUI3ChBuRuxuLF4ENvCZyS8z/+Jly1coUcZwErKLIB3sDj7ojpaTBa1e9YVPhSN4jGEIjYGQCldbTJS/hqS+A==",
+      "version": "0.41.1",
+      "resolved": "https://registry.npmjs.org/markdownlint/-/markdownlint-0.41.1.tgz",
+      "integrity": "sha512-qHKeU2E1bdyNAT077go2FVTNXvYcktN5IHtF6XyeD1l0PClxzSp2tUApAV14ORI8DGX4H9bNKZEzelZp4qn8IA==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@@ -1112,23 +1112,23 @@
      }
    },
    "node_modules/markdownlint-cli": {
-      "version": "0.49.0",
-      "resolved": "https://registry.npmjs.org/markdownlint-cli/-/markdownlint-cli-0.49.0.tgz",
-      "integrity": "sha512-vS5tWq5W91Gg33LD4pyAaXPclnz/sRvo6/RGOyDQjQ3eds2DkK6H4szUuE0M9TiRB/u/VBx1gtd9Ktrtx5WlSA==",
+      "version": "0.49.1",
+      "resolved": "https://registry.npmjs.org/markdownlint-cli/-/markdownlint-cli-0.49.1.tgz",
+      "integrity": "sha512-qpYqJbSYf3jv57bdnFmCaZ/Wlu6IYHp2b6SOKrKBJ7OnPrDHIKmx4NERWH49QH9viTI6yO6raVDDn5nrf60VQQ==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
        "commander": "~15.0.0",
        "deep-extend": "~0.6.0",
-        "ignore": "~7.0.5",
-        "js-yaml": "~4.2.0",
+        "ignore": "~7.0.6",
+        "js-yaml": "~5.2.1",
        "jsonc-parser": "~3.3.1",
        "jsonpointer": "~5.0.1",
-        "markdown-it": "~14.2.0",
-        "markdownlint": "~0.41.0",
+        "markdown-it": "~14.3.0",
+        "markdownlint": "~0.41.1",
        "minimatch": "~10.2.5",
-        "run-con": "~1.3.2",
-        "smol-toml": "~1.6.1",
+        "run-con": "~1.3.3",
+        "smol-toml": "~1.7.0",
        "tinyglobby": "~0.2.17"
      },
      "bin": {
@@ -1149,9 +1149,9 @@
      }
    },
    "node_modules/markdownlint-cli/node_modules/brace-expansion": {
-      "version": "5.0.6",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.6.tgz",
-      "integrity": "sha512-kLpxurY4Z4r9sgMsyG0Z9uzsBlgiU/EFKhj/h91/8yHu0edo7XuixOIH3VcJ8kkxs6/jPzoI6U9Vj3WqbMQ94g==",
+      "version": "5.0.7",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.7.tgz",
+      "integrity": "sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@@ -1171,6 +1171,29 @@
        "node": ">=22.12.0"
      }
    },
+    "node_modules/markdownlint-cli/node_modules/js-yaml": {
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.1.tgz",
+      "integrity": "sha512-zfLtNfQqxVqq3uaTqSkh4x4hZw3KHobGUA0fJUj4wawW8bsQLTVqpHdXSIzidh7o+4lEW36tANuAGdaFx6Zgnw==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "argparse": "^2.0.1"
+      },
+      "bin": {
+        "js-yaml": "bin/js-yaml.mjs"
+      }
+    },
    "node_modules/markdownlint-cli/node_modules/minimatch": {
      "version": "10.2.5",
      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.5.tgz",
@@ -2012,14 +2035,14 @@
      }
    },
    "node_modules/run-con": {
-      "version": "1.3.2",
-      "resolved": "https://registry.npmjs.org/run-con/-/run-con-1.3.2.tgz",
-      "integrity": "sha512-CcfE+mYiTcKEzg0IqS08+efdnH0oJ3zV0wSUFBNrMHMuxCtXvBCLzCJHatwuXDcu/RlhjTziTo/a1ruQik6/Yg==",
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/run-con/-/run-con-1.3.3.tgz",
+      "integrity": "sha512-Lb7OKM9aaykzyoNiHGhSVCjZsvbyy6qDMp2vDXL+MoCfz3GfNJtHYH7uYsU3QNMyInBk++xx+EZ8xZ8Sxs5fNQ==",
      "dev": true,
      "license": "(BSD-2-Clause OR MIT OR Apache-2.0)",
      "dependencies": {
        "deep-extend": "^0.6.0",
-        "ini": "~4.1.0",
+        "ini": "~7.0.0",
        "minimist": "^1.2.8",
        "strip-json-comments": "~3.1.1"
      },
@@ -2053,9 +2076,9 @@
      }
    },
    "node_modules/smol-toml": {
-      "version": "1.6.1",
-      "resolved": "https://registry.npmjs.org/smol-toml/-/smol-toml-1.6.1.tgz",
-      "integrity": "sha512-dWUG8F5sIIARXih1DTaQAX4SsiTXhInKf1buxdY9DIg4ZYPZK5nGM1VRIYmEbDbsHt7USo99xSLFu5Q1IqTmsg==",
+      "version": "1.7.0",
+      "resolved": "https://registry.npmjs.org/smol-toml/-/smol-toml-1.7.0.tgz",
+      "integrity": "sha512-aqVvWoyO21L23mb+drl4RmMXbf6N7FdHjAhTRA9ZBL7apWBgfWC16KjrASI+1p9GAroljyMHj6fK67i0UiTNvQ==",
      "dev": true,
      "license": "BSD-3-Clause",
      "engines": {
Author	SHA1	Message	Date
CSRBot	a428bdc47d	chore(deps): pin dependencies Helm / helm-lint (push) Successful in 6s Details Helm / helm-unittest (push) Successful in 16s Details Helm / helm-lint (pull_request) Successful in 5s Details Helm / helm-unittest (pull_request) Successful in 15s Details	2026-07-17 21:05:08 +00:00
CSRBot	a71619c727	Merge pull request 'chore(deps): update dependency sigstore/cosign to v3.1.2' (#175 ) from renovate/sigstore-cosign-3.x into master Helm / helm-lint (push) Successful in 6s Details Helm / helm-unittest (push) Successful in 25s Details	2026-07-17 18:11:08 +00:00
CSRBot	5d34f13333	chore(deps): update dependency sigstore/cosign to v3.1.2 Helm / helm-lint (push) Successful in 6s Details Helm / helm-unittest (push) Successful in 18s Details Helm / helm-lint (pull_request) Successful in 7s Details Helm / helm-unittest (pull_request) Successful in 21s Details	2026-07-17 18:05:03 +00:00
CSRBot	b369eb024d	Merge pull request 'chore(deps): update dependency markdownlint-cli to v0.49.1' (#173 ) from renovate/markdownlint-cli-0.x-lockfile into master Helm / helm-lint (push) Successful in 6s Details Helm / helm-unittest (push) Successful in 30s Details	2026-07-15 00:09:18 +00:00
CSRBot	4aa7fc12da	chore(deps): update dependency markdownlint-cli to v0.49.1 Helm / helm-lint (push) Successful in 12s Details Helm / helm-lint (pull_request) Successful in 11s Details Helm / helm-unittest (push) Successful in 22s Details Helm / helm-unittest (pull_request) Successful in 29s Details	2026-07-15 00:08:15 +00:00
CSRBot	9da2ce9bb4	Merge pull request 'chore(deps): update dependency volker.raschek/athens-proxy-charts to v2.0.3' (#172 ) from renovate/volker.raschek-athens-proxy-charts-2.x into master Helm / helm-lint (push) Successful in 13s Details Generate README / generate-parameters (push) Successful in 26s Details Helm / helm-unittest (push) Successful in 37s Details Markdown linter / markdown-link-checker (push) Successful in 36s Details Markdown linter / markdown-lint (push) Successful in 34s Details	2026-07-13 12:07:05 +00:00
CSRBot	363e81fe7f	chore(deps): update dependency volker.raschek/athens-proxy-charts to v2.0.3 Helm / helm-lint (push) Successful in 13s Details Helm / helm-unittest (push) Successful in 34s Details Generate README / generate-parameters (push) Successful in 1m1s Details Markdown linter / markdown-link-checker (push) Successful in 40s Details Markdown linter / markdown-lint (push) Successful in 25s Details Helm / helm-lint (pull_request) Successful in 5s Details Generate README / generate-parameters (pull_request) Successful in 1m27s Details Helm / helm-unittest (pull_request) Successful in 22s Details Markdown linter / markdown-link-checker (pull_request) Successful in 50s Details Markdown linter / markdown-lint (pull_request) Successful in 24s Details	2026-07-13 12:04:21 +00:00