Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (15)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	hkusu/review-assign-action	2024-02-14
npm	bats-support	2019-01-30
npm	clipanion	2024-09-06
npm	deepmerge	2023-03-16
npm	husky	2024-11-18
npm	node-ipc	2024-08-12
npm	reflect-metadata	2024-03-29
regex	cocoapods	2024-10-31
regex	jb	2024-08-23

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update eslint monorepo to v10 (main) (major) (@eslint/js, eslint)
• chore(deps): update pnpm to v11 (main)
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• test(deps): update dependency checkov to v3.2.526 (main)
• test(deps): update dependency renovate to v43.150.0 (main)
• build(deps): lock file maintenance (main)
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency typescript-eslint to v8.59.2 (main)
• chore(deps): update pnpm to v10.33.4 (main)
• fix(deps): update dependency got to v15.0.5 (main)
• fix(deps): update dependency zod to v4.4.3 (main)
• test(deps): update dependency pnpm to v10.33.4 (main)
• chore(deps): update dependency lint-staged to v17 (main)

---

Warning

Renovate failed to look up the following dependencies: Failed to look up github-releases package aquasecurity/trivy: no-result.

Files affected: .github/workflows/trivy.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• test(deps): update dependency poetry to v2.4.0 (main)
• test(deps): update dependency pnpm to v11 (main)
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• test(deps): update dependency scala to v2.13.18 (main)
• chore(deps): update ghcr.io/containerbase/ubuntu docker tag to v26 (main)
• fix(deps): update dependency global-agent to v4 (main)
• test(deps): update dart docker tag to v3 (main)
• test(deps): update dependency dotnet to v10 (main)
• test(deps): update dependency node to v22 (main)
• test(deps): update dependency node to v24 (main)
• test(deps): update gradle to v9 (main)
• test(deps): update java to v25 (main) (major) (java, java-jre)

Detected Dependencies

Branch main

dockerfile (42)

.devcontainer/Dockerfile (1)

• ghcr.io/containerbase/devcontainer 14.10.0

Dockerfile (1)

• ghcr.io/containerbase/ubuntu 24.04@sha256:c4a8d5503dfb2a3eb8ab5f807da5bc69a85730fb49b5cfca2330194ebcc41c7b → [Updates: 26.04]

test/dart/Dockerfile

test/dart/Dockerfile.arm64

test/Dockerfile.base

test/Dockerfile.distro

test/dotnet/Dockerfile

test/dotnet/Dockerfile.arm64

test/erlang/Dockerfile

test/erlang/Dockerfile.arm64

test/flutter/Dockerfile

test/flutter/Dockerfile.arm64

test/flux/Dockerfile

test/flux/Dockerfile.arm64

test/golang/Dockerfile

test/golang/Dockerfile.arm64

test/haskell/Dockerfile

test/haskell/Dockerfile.arm64

test/helm/Dockerfile

test/helm/Dockerfile.arm64

test/java/Dockerfile

test/java/Dockerfile.arm64

test/jb/Dockerfile

test/jb/Dockerfile.arm64

test/latest/Dockerfile

test/latest/Dockerfile.arm64

test/nix/Dockerfile

test/nix/Dockerfile.arm64

test/node/Dockerfile

test/node/Dockerfile.arm64

test/php/Dockerfile

test/php/Dockerfile.arm64

test/powershell/Dockerfile

test/powershell/Dockerfile.arm64

test/python/Dockerfile

test/python/Dockerfile.arm64

test/ruby/Dockerfile

test/ruby/Dockerfile.arm64

test/rust/Dockerfile

test/rust/Dockerfile.arm64

test/swift/Dockerfile

test/swift/Dockerfile.arm64

github-actions (7)

.github/actions/bake/action.yml (2)

• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• nick-fields/retry v4.0.0@ad984534de44a9489a53aefd81eb77f87c70dc60

.github/workflows/auto-pr.yml (5)

• hkusu/review-assign-action v1.4.0@5bee595fdb9765d4a0bd35724b6302fa15569158
• kiegroup/git-backporting v4.9.1@08da0b07ef2330d189f6074ec8db736b3aa9f465
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/build-push.yml (5)

• containerbase/internal-tools v4.6.15@23f34c79d4850ff1ffb4634462479831fb522c80
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003
• containerbase/internal-tools v4.6.15@23f34c79d4850ff1ffb4634462479831fb522c80
• ubuntu 24.04

.github/workflows/build.yml (21)

• containerbase/internal-tools v4.6.15@23f34c79d4850ff1ffb4634462479831fb522c80
• containerbase/internal-tools v4.6.15@23f34c79d4850ff1ffb4634462479831fb522c80
• reviewdog/action-shellcheck v1.32.0@4c07458293ac342d477251099501a718ae5ef86e
• containerbase/internal-tools v4.6.15@23f34c79d4850ff1ffb4634462479831fb522c80
• containerbase/internal-tools v4.6.15@23f34c79d4850ff1ffb4634462479831fb522c80
• codecov/codecov-action v6.0.0@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2
• codecov/codecov-action v6.0.0@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2
• containerbase/internal-tools v4.6.15@23f34c79d4850ff1ffb4634462479831fb522c80
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• containerbase/internal-tools v4.6.15@23f34c79d4850ff1ffb4634462479831fb522c80
• containerbase/internal-tools v4.6.15@23f34c79d4850ff1ffb4634462479831fb522c80
• containerbase/internal-tools v4.6.15@23f34c79d4850ff1ffb4634462479831fb522c80
• containerbase/internal-tools v4.6.15@23f34c79d4850ff1ffb4634462479831fb522c80
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04-arm
• ubuntu 24.04

.github/workflows/cancel-stale-merge-queue-workflows.yml

.github/workflows/devcontainer.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• devcontainers/ci v0.3.1900000449@b63b30de439b47a52267f241112c5b453b673db5
• ubuntu 24.04

.github/workflows/trivy.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.35.3@e46ed2cbd01164d986452f91f178727624ae40d7
• ubuntu 24.04
• aquasecurity/trivy v0.70.0

nodenv (1)

.node-version (1)

• node 24.15.0

npm (2)

package.json (70)

• @renovatebot/pep440 4.2.3
• @seald-io/nedb 4.1.2
• @sindresorhus/is 8.0.0
• clipanion 3.2.1
• common-tags 1.8.2
• deepmerge 4.3.1
• del 8.0.1
• execa 9.6.1
• global-agent 3.0.0 → [Updates: 4.1.3]
• got 15.0.3 → [Updates: 15.0.5]
• ini 6.0.0
• inversify 8.1.0
• node-ipc 12.0.0
• pino 10.3.1
• pino-pretty 13.1.3
• pretty-ms 9.3.0
• reflect-metadata 0.2.2
• semver 7.7.4
• zod 4.4.2 → [Updates: 4.4.3]
• @containerbase/eslint-plugin 2.1.0
• @containerbase/istanbul-reports-html 2.0.1
• @eslint/js 9.39.4 → [Updates: 10.0.1]
• @semantic-release/exec 7.1.0
• @tsconfig/node24 24.0.4
• @tsconfig/strictest 2.0.8
• @types/common-tags 1.8.4
• @types/eslint-config-prettier 6.11.3
• @types/global-agent 3.0.0
• @types/ini 4.1.1
• @types/node 24.12.2
• @types/node-ipc 9.2.3
• @types/semver 7.7.1
• @types/shelljs 0.10.0
• @vitest/coverage-v8 4.1.5
• @vitest/eslint-plugin 1.6.16
• @vitest/ui 4.1.5
• @yao-pkg/pkg 6.19.0
• bats 1.13.0
• bats-assert 2.2.4
• bats-support 0.3.0
• clipanion 3.2.1
• conventional-changelog-conventionalcommits 9.3.1
• eslint 9.39.4 → [Updates: 10.3.0]
• eslint-config-prettier 10.1.8
• eslint-formatter-gha 2.0.1
• eslint-import-resolver-typescript 4.4.4
• eslint-plugin-import-x 4.16.2
• eslint-plugin-promise 7.3.0
• globals 17.6.0
• husky 9.1.7
• lint-staged 16.4.0 → [Updates: 17.0.2]
• markdownlint-cli2 0.22.1
• nock 14.0.14
• npm-run-all2 8.0.4
• prettier 3.8.3
• prettier-plugin-packagejson 3.0.2
• rolldown 1.0.0-rc.18
• semantic-release 25.0.3
• shelljs 0.10.0
• tsx 4.21.0
• type-fest 5.6.0
• typescript 6.0.3
• typescript-eslint 8.59.1 → [Updates: 8.59.2]
• vite 8.0.10
• vitest 4.1.5
• markdownlint *
• thread-stream *
• node >=24.10.0
• pnpm ^10.0.0 → [Updates: ^11.0.0]
• pnpm 10.33.2 → [Updates: 10.33.4, 11.0.4]

pnpm-workspace.yaml

regex (49)

.github/workflows/build.yml (5)

• ubuntu 24.04
• ubuntu 24.04-arm
• ubuntu 24.04
• ubuntu 24.04-arm
• ubuntu 24.04

Dockerfile (1)

• git v2.54.0

test/dart/Dockerfile (3)

• dart 3.11.5
• dart 3.11.5
• dart 2.19.6 → [Updates: 3.11.5]

test/dart/Dockerfile.arm64 (1)

• dart 3.11.5

test/Dockerfile.distro (1)

• swift 6.3.1

test/Dockerfile.distro (58)

• git v2.54.0
• bazelisk v1.29.0
• buf v1.69.0
• bun 1.3.13
• dart 3.11.5
• deno 2.7.14
• devbox 0.17.2
• dotnet 10.0.203
• flutter 3.41.9
• flux v2.8.6
• git-lfs v3.7.1
• gleam 1.16.0
• golang 1.26.2
• helm v4.1.4
• helmfile v1.5.0
• kubectl v1.36.0
• kustomize 5.8.1
• mise 2026.5.1
• pixi v0.67.2
• powershell v7.6.1
• rust 1.95.0
• skopeo 1.22.2
• sops v3.12.2
• terraform 1.15.2
• tofu 1.11.6
• jb v0.6.0
• vendir v0.45.3
• wally 0.3.2
• protoc 34.1
• docker v28.5.2
• buildx v0.33.0
• docker-compose v5.1.3
• erlang 28.5.0.0
• elixir 1.19.5
• cabal 3.16.1.0
• ghc 9.14.1
• java 25.0.3+9.0.LTS
• gradle 9.5.0
• maven 3.9.15
• mono 6.14.1
• nuget 7.3.1
• node 24.15.0
• pnpm 10.33.2 → [Updates: 10.33.4, 11.0.4]
• yarn 4.14.1
• php 8.5.5
• composer 2.9.7
• python 3.14.4
• checkov 3.2.525 → [Updates: 3.2.526]
• conan 2.28.1
• copier 9.15.0
• hashin 1.0.5
• pipenv 2026.6.1
• pdm 2.26.8
• poetry 2.3.4 → [Updates: 2.4.0]
• uv 0.11.10
• ruby 4.0.3
• bundler 4.0.11
• cocoapods 1.16.2

test/dotnet/Dockerfile (6)

• dotnet 10.0.203
• dotnet 8.0.420 → [Updates: 10.0.203]
• dotnet 8.0.420 → [Updates: 10.0.203]
• dotnet 10.0.203
• dotnet 10.0.203
• paket 10.3.1

test/dotnet/Dockerfile.arm64 (2)

• dotnet 10.0.203
• paket 10.3.1

test/erlang/Dockerfile (2)

• erlang 28.5.0.0
• elixir 1.19.5

test/erlang/Dockerfile.arm64 (2)

• erlang 28.5.0.0
• elixir 1.19.5

test/flutter/Dockerfile (3)

• git v2.54.0
• flutter 3.41.9
• flutter 3.41.9

test/flutter/Dockerfile.arm64 (2)

• git v2.54.0
• flutter 3.41.9

test/flux/Dockerfile (1)

• flux v2.8.6

test/flux/Dockerfile.arm64 (1)

• flux v2.8.6

test/golang/Dockerfile (3)

• git v2.54.0
• golang 1.26.2
• golang 1.26.2

test/golang/Dockerfile.arm64 (2)

• git v2.54.0
• golang 1.26.2

test/haskell/Dockerfile (4)

• ghc 9.14.1
• cabal 3.16.1.0
• ghc 9.14.1
• cabal 3.16.1.0

test/haskell/Dockerfile.arm64 (2)

• ghc 9.14.1
• cabal 3.16.1.0

test/helm/Dockerfile (1)

• helm 4.1.4

test/helm/Dockerfile.arm64 (1)

• helm v4.1.4

test/java/Dockerfile (1)

• java 17.0.19+10 → [Updates: 25.0.3+9.0.LTS]

test/java/Dockerfile (9)

• git v2.54.0
• java 25.0.3+9.0.LTS
• java-jre 21.0.11+10.0.LTS → [Updates: 25.0.3+9.0.LTS]
• gradle 9.5.0
• java-jre 21.0.11+10.0.LTS → [Updates: 25.0.3+9.0.LTS]
• gradle 8.14.4 → [Updates: 9.5.0]
• maven 3.9.15
• scala v2.13.16 → [Updates: v2.13.18]
• sbt v1.12.11

test/java/Dockerfile.arm64 (3)

• java 25.0.3+9.0.LTS
• gradle 9.5.0
• maven 3.9.15

test/jb/Dockerfile (1)

• jb 0.6.0

test/jb/Dockerfile (1)

• jb v0.6.0

test/jb/Dockerfile.arm64 (1)

• jb v0.6.0

test/latest/Dockerfile (5)

• python 3.14.4
• vendir v0.45.3
• helmfile v1.5.0
• kustomize 5.8.1
• protoc 34.1

test/latest/Dockerfile (28)

• node 24.15.0
• php 8.5.5
• powershell v7.6.1
• terraform 1.15.2
• git v2.54.0
• flux v2.8.6
• git-lfs v3.7.1
• powershell v7.6.1
• node 24.15.0
• docker v28.5.2
• bazelisk v1.29.0
• buf v1.69.0
• bun 1.3.13
• deno 2.7.14
• apko 1.2.11
• devbox 0.17.2
• gleam 1.16.0
• kubectl v1.36.0
• mise 2026.5.1
• skopeo 1.22.2
• sops v3.12.2
• tofu 1.11.6
• protoc 34.1
• docker v28.5.2
• buildx v0.33.0
• docker-compose v5.1.3
• mono 6.14.1
• nuget 7.3.1

test/latest/Dockerfile.arm64 (25)

• bazelisk v1.29.0
• bun 1.3.13
• deno 2.7.14
• apko 1.2.11
• devbox 0.17.2
• gleam 1.16.0
• docker v28.5.2
• buildx v0.33.0
• docker-compose v5.1.3
• git v2.54.0
• git-lfs v3.7.1
• helmfile v1.5.0
• kustomize 5.8.1
• mono 6.14.1
• terraform 1.15.2
• tofu 1.11.6
• vendir v0.45.3
• buf v1.69.0
• kubectl v1.36.0
• mise 2026.5.1
• skopeo 1.22.2
• sops v3.12.2
• wally 0.3.2
• protoc 34.1
• pixi v0.67.2

test/nix/Dockerfile (1)

• nix 2.34.7

test/nix/Dockerfile.arm64 (1)

• nix 2.34.7

test/node/Dockerfile (4)

• yarn 1.22.22
• yarn 3.3.0
• pnpm 10.33.2 → [Updates: 10.33.4, 11.0.4]
• renovate 43.140.0 → [Updates: 43.150.0]

test/node/Dockerfile (21)

• node 24.15.0
• yarn 1.22.22
• yarn 4.14.1
• pnpm 10.33.2 → [Updates: 10.33.4, 11.0.4]
• node 20.20.2 → [Updates: 22.22.2, 24.15.0]
• yarn 1.22.22
• del-cli 7.0.0
• node 22.22.2 → [Updates: 24.15.0]
• yarn 1.22.22
• del-cli 7.0.0
• yarn-slim 1.22.22
• yarn 1.22.22
• corepack 0.34.7
• corepack 0.34.7
• corepack 0.34.7
• yarn 1.22.22
• corepack 0.34.7
• corepack 0.34.7
• pnpm 10.33.2 → [Updates: 10.33.4, 11.0.4]
• corepack 0.34.7
• corepack 0.34.7

test/node/Dockerfile.arm64 (4)

• node 24.15.0
• pnpm 10.33.2 → [Updates: 10.33.4, 11.0.4]
• yarn 1.22.22
• renovate 43.140.0 → [Updates: 43.150.0]

test/php/Dockerfile (3)

• php 8.5.5
• composer 2.9.7
• composer 2.9.7

test/php/Dockerfile.arm64 (2)

• php 8.5.5
• composer 2.9.7

test/powershell/Dockerfile (1)

• powershell v7.6.1

test/powershell/Dockerfile.arm64 (1)

• powershell v7.6.1

test/python/Dockerfile (15)

• python 3.14.4
• python 3.14.4
• pipenv 2026.6.1
• pipenv 2026.6.1
• poetry 2.3.4 → [Updates: 2.4.0]
• poetry 2.3.4 → [Updates: 2.4.0]
• pip-tools 7.5.3
• python 3.14.4
• poetry 2.3.4 → [Updates: 2.4.0]
• poetry 2.3.4 → [Updates: 2.4.0]
• poetry 2.3.4 → [Updates: 2.4.0]
• hashin 1.0.5
• python 3.14.4
• pipenv 2026.6.1
• conan 2.28.1

test/python/Dockerfile.arm64 (8)

• python 3.14.4
• checkov 3.2.525 → [Updates: 3.2.526]
• hashin 1.0.5
• pipenv 2026.6.1
• poetry 2.3.4 → [Updates: 2.4.0]
• conan 2.28.1
• copier 9.15.0
• uv 0.11.10

test/ruby/Dockerfile (2)

• bundler 4.0.11
• bundler 4.0.11

test/ruby/Dockerfile (3)

• git v2.54.0
• ruby 4.0.3
• cocoapods 1.16.2

test/ruby/Dockerfile.arm64 (4)

• ruby 4.0.3
• bundler 4.0.11
• git v2.54.0
• cocoapods 1.16.2

test/rust/Dockerfile (3)

• rust 1.95.0
• rust 1.95.0
• rust 1.95.0

test/rust/Dockerfile.arm64 (1)

• rust 1.95.0

test/swift/Dockerfile (2)

• git v2.54.0
• swift 6.3.1

test/swift/Dockerfile.arm64 (1)

• swift 6.3.1

tsconfig.json (1)

• @tsconfig/node24 24

tsconfig.json (1)

• @tsconfig/node24 24

Branch zzz/don-not-delete

None detected

---

• Check this box to trigger a request for Renovate to run again on this repository

[viceice]

placeholder, do not hide