[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker.io/library/python (source)	final	digest	2da6760 → f5b92f2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Trivy image scan report

ghcr.io/chgl/github-reusable-workflow-without-test-image:pr-285 (debian 13.7)

No Vulnerabilities found

Python

8 known vulnerabilities found (CRITICAL: 1, HIGH: 4, MEDIUM: 2, LOW: 1, UNKNOWN: 0)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
certifi	GHSA-6q48-6c7w-9gw2	CRITICAL	2026.6.17	2026.10.19
msgpack	GHSA-6v7p-g79w-8964	HIGH	1.1.2	1.2.1
setuptools	CVE-2025-47273	HIGH	70.3.0	78.1.1
setuptools	CVE-2026-59890	MEDIUM	70.3.0	83.0.0
setuptools	GHSA-xmj3-9gf7-h52w	LOW	70.3.0	84.1.0
urllib3	CVE-2026-97687	HIGH	2.7.0	2.8.0
urllib3	CVE-2026-97689	HIGH	2.7.0	2.8.0
urllib3	CVE-2026-97688	MEDIUM	2.7.0	2.8.0

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Max errors	Warnings	Elapsed time
✅ ACTION	actionlint	4		0		0	0.22s
✅ ACTION	zizmor	4		0		0	4.37s
✅ COPYPASTE	jscpd	yes		no		no	0.64s
✅ DOCKERFILE	hadolint	1		0		0	0.15s
✅ JSON	jsonlint	3		0		0	0.08s
✅ JSON	prettier	3		0		0	0.43s
✅ JSON	v8r	3		0		0	2.57s
✅ MARKDOWN	markdownlint	1		0		0	0.5s
✅ MARKDOWN	markdown-table-formatter	1		0		0	0.17s
✅ PYTHON	bandit	1		0		0	2.41s
✅ PYTHON	black	1		0		0	1.35s
✅ PYTHON	flake8	1		0		0	1.16s
✅ PYTHON	isort	1		0		0	0.31s
✅ PYTHON	mypy	1		0		0	3.99s
✅ PYTHON	pylint	1		0		0	3.0s
✅ PYTHON	pyright	1		0		0	1.86s
✅ PYTHON	ruff	1		0		0	0.03s
✅ REPOSITORY	betterleaks	yes		no		no	0.99s
✅ REPOSITORY	checkov	yes		no		no	22.75s
✅ REPOSITORY	dustilock	yes		no		no	0.02s
✅ REPOSITORY	git_diff	yes		no		no	0.01s
✅ REPOSITORY	grype	yes		no		no	126.4s
✅ REPOSITORY	kingfisher	yes		no		no	6.1s
✅ REPOSITORY	osv-scanner	yes		no		no	0.27s
✅ REPOSITORY	secretlint	yes		no		no	0.69s
✅ REPOSITORY	syft	yes		no		no	2.15s
✅ REPOSITORY	trivy	yes		no		no	13.99s
✅ REPOSITORY	trivy-sbom	yes		no		no	0.24s
✅ REPOSITORY	trufflehog	yes		no		no	4.76s
✅ YAML	prettier	7		0		0	0.7s
✅ YAML	v8r	7		0		0	8.4s
✅ YAML	yamllint	7		0		0	0.71s

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: REPOSITORY_KICS. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

• Documentation: Custom Flavors
• Command: npx mega-linter-runner@10.1.0 --custom-flavor-setup --custom-flavor-linters PYTHON_PYLINT,PYTHON_BLACK,PYTHON_FLAKE8,PYTHON_ISORT,PYTHON_BANDIT,PYTHON_MYPY,PYTHON_PYRIGHT,PYTHON_RUFF,ACTION_ACTIONLINT,ACTION_ZIZMOR,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_DUSTILOCK,REPOSITORY_GIT_DIFF,REPOSITORY_BETTERLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,REPOSITORY_KINGFISHER,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository

[github-actions]

Trivy image scan report

ghcr.io/chgl/github-reusable-workflow-with-fixed-image-tags:v1.2.3-beta.123 (debian 13.7)

No Vulnerabilities found

Python

9 known vulnerabilities found (CRITICAL: 1, HIGH: 5, MEDIUM: 2, LOW: 1, UNKNOWN: 0)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
certifi	GHSA-6q48-6c7w-9gw2	CRITICAL	2026.6.17	2026.10.18
msgpack	CVE-2026-114613	HIGH	1.1.2	1.2.3
msgpack	GHSA-6v7p-g79w-8964	HIGH	1.1.2	1.2.1
setuptools	CVE-2025-47273	HIGH	70.3.0	78.1.1
setuptools	CVE-2026-59890	MEDIUM	70.3.0	83.0.0
setuptools	GHSA-xmj3-9gf7-h52w	LOW	70.3.0	84.1.0
urllib3	CVE-2026-97687	HIGH	2.7.0	2.8.0
urllib3	CVE-2026-97689	HIGH	2.7.0	2.8.0
urllib3	CVE-2026-97688	MEDIUM	2.7.0	2.8.0

[github-actions]

Trivy image scan report

ghcr.io/chgl/github-reusable-workflow:pr-285 (debian 13.7)

No Vulnerabilities found

Python

9 known vulnerabilities found (CRITICAL: 1, HIGH: 5, MEDIUM: 2, LOW: 1, UNKNOWN: 0)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
certifi	GHSA-6q48-6c7w-9gw2	CRITICAL	2026.6.17	2026.10.18
msgpack	CVE-2026-114613	HIGH	1.1.2	1.2.3
msgpack	GHSA-6v7p-g79w-8964	HIGH	1.1.2	1.2.1
setuptools	CVE-2025-47273	HIGH	70.3.0	78.1.1
setuptools	CVE-2026-59890	MEDIUM	70.3.0	83.0.0
setuptools	GHSA-xmj3-9gf7-h52w	LOW	70.3.0	84.1.0
urllib3	CVE-2026-97687	HIGH	2.7.0	2.8.0
urllib3	CVE-2026-97689	HIGH	2.7.0	2.8.0
urllib3	CVE-2026-97688	MEDIUM	2.7.0	2.8.0