[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-python	action	minor	v7.0.0 → v7.1.0
docker/login-action	action	minor	v4.6.0 → v4.7.0

---

Release Notes

actions/setup-python

v7.1.0

Compare Source

What's Changed

Enhancements

• Add mirror and mirror-token inputs for custom Python distribution sources by @​luhenry in #​1302
• Improve error message clarity by @​v-lmvysakh in #​1351

Dependency Upgrade

• Upgrade browserslist from 4.28.2 to 4.28.9 by @​dependabot in #​1353
• Upgrade @​typescript-eslint/parser from 8.62.0 to 8.70.0 by @​dependabot in #​1343
• Upgrade eslint-plugin-jest from 29.15.2 to 29.16.6 by @​dependabot in #​1342
• Upgrade @​vercel/ncc from 0.44.0 to 0.45.0 by @​dependabot in #​1357
• Upgrade @​types/semver from 7.7.1 to 7.8.0 by @​dependabot in #​1359
• Upgrade undici from 6.28.0 to 6.29.0 by @​dependabot in #​1364
• Upgrade ts-jest from 29.4.11 to 29.4.14 by @​dependabot in #​1361
• Upgrade brace-expansion from 5.0.9 to 5.0.12 by @​dependabot in #​1365
• Upgrade prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 by @​dependabot in #​1363
• Upgrade @​typescript-eslint/eslint-plugin from 8.62.0 to 8.71.1 by @​dependabot in #​1369
• Upgrade actions/checkout from 7.0.0 to 7.0.1 by @​dependabot in #​1345
• Upgrade cache to 6.3.0 by @​v-HarithaVattikuti in #​1370
• Resolve Basic Validation audit failures by @​v-HarithaVattikuti in #​1347
• Resolve npm audit failures by @​v-HarithaVattikuti in #​1350

New Contributors

• @​luhenry made their first contribution in #​1302

Full Changelog: actions/setup-python@v7.0.0...v7.1.0

docker/login-action

v4.7.0

Compare Source

• Preserve explicit ECR settings in registry-auth by @​crazy-max in #​1089
• Use registry hosts for scoped credentials by @​crazy-max in #​1088
• Raise Docker Hub OIDC max expiry to 6 hours by @​crazy-max in #​1068
• Log Docker Hub OIDC token exchange progress by @​crazy-max in #​1061
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1154.0 in #​1093
• Bump @​docker/actions-toolkit from 0.94.0 to 0.107.0 in #​1100
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in #​1077
• Bump csv-parse from 7.0.1 to 7.0.3 in #​1078
• Bump handlebars from 4.7.9 to 4.7.10 in #​1091
• Bump js-yaml from 5.2.2 to 5.5.0 in #​1066
• Bump postcss from 8.5.22 to 8.5.26 in #​1071
• Bump postcss-selector-parser from 7.1.1 to 7.1.6 in #​1092
• Bump source-map-js from 1.2.1 to 1.2.2 in #​1090
• Bump undici from 6.27.0 to 6.29.1 in #​1085
• Bump uuid from 14.0.1 to 14.0.3 in #​1096

Full Changelog: docker/login-action@v4.6.0...v4.7.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on saturday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: jdwlabs/platform
• Branch: main
• File: .coderabbit.yaml
• Commit: 37fb925
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: cc1015d2-d1c9-427f-a1fc-73c2ee5766f9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[jdwlabs-review-bot]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 2 🔵🔵⚪⚪⚪

🧪 No relevant tests

🔒 No security concerns identified

⚡ Recommended focus areas for review Version Pinning Inconsistency The Helm version in the validate.yml workflow was updated from v3.21.3 to v3.22.1. While this is a minor update, it introduces inconsistency with the pinned version used in other parts of the system. This could lead to unexpected behavior during validation if the Helm version used in the workflow differs from the one expected by the tools or policies. version: v3.22.1

[jdwlabs-review-bot]

PR Code Suggestions ✨

Explore these optional code suggestions:

Category	Suggestion	Impact
General	Upgrade Docker login action Upgrade the Docker login action to the newer version to benefit from the latest features and security patches. .github/workflows/release-truenas-exporter.yml [32] - - uses: docker/login-action@v4.6.0 + - uses: docker/login-action@v4.7.0 Suggestion importance[1-10]: 8 __ Why: The suggestion accurately updates docker/login-action from v4.6.0 to v4.7.0, which is a patch version bump. This improves security and ensures access to the latest features and bug fixes in the Docker login action.	Medium
	Update Helm version Bump the Helm version to the latest stable release to ensure compatibility with current Kubernetes and Helm features. .github/workflows/validate.yml [187] - uses: azure/setup-helm@v5.0.1 with: - version: v3.21.3 + version: v3.22.1 Suggestion importance[1-10]: 7 __ Why: This suggestion correctly updates the Helm version from v3.21.3 to v3.22.1. While this is a minor version bump, it ensures compatibility with newer Kubernetes and Helm features, though the impact is moderate compared to critical security or bug fixes.	Medium

[jdwillmsen]

merge-captain: Risk tier R3 is above the R2 this repository lets the captain merge, so it is left for a person.

Deciding rules:

• promotion-workflow (.github/workflows/release-truenas-exporter.yml)

[jdwillmsen]

merge-captain: Risk tier R3 is above the R2 this repository lets the captain merge, so it is left for a person.

Deciding rules:

• promotion-workflow (.github/workflows/release-truenas-exporter.yml)

[jdwillmsen]

merge-captain: Risk tier R3 is above the R2 this repository lets the captain merge, so it is left for a person.

Deciding rules:

• promotion-workflow (.github/workflows/release-truenas-exporter.yml)