Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (18)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	hkusu/review-assign-action	2024-02-14
npm	@seald-io/nedb	2025-07-07
npm	@semantic-release/exec	2025-05-09
npm	bats-support	2019-01-30
npm	clipanion	2024-09-06
npm	deepmerge	2023-03-16
npm	husky	2024-11-18
npm	node-ipc	2024-08-12
npm	reflect-metadata	2024-03-29
npm	shelljs	2025-05-09
regex	hashin	2025-06-12
regex	jb	2024-08-23

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update dependency conventional-changelog-conventionalcommits to v10 (main)
• chore(deps): update dependency typescript to v7 (main)
• fix(deps): update dependency execa to v10 (main)
• 🔐 Create all pending approval PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency markdownlint-cli2 to v0.23.2 (main)
• chore(deps): update github/codeql-action action to v4.37.4 (main)
• test(deps): update dependency apko to v1.2.30 (main)
• test(deps): update dependency mise to v2026.7.18 (main)
• test(deps): update dependency node to v22.23.2 (main)
• test(deps): update dependency node to v24.18.1 (main)
• test(deps): update dependency php to v8.5.9 (main)
• chore(deps): update dependency globals to v17.8.0 (main)
• test(deps): update dependency buildx to v0.36.0 (main)
• test(deps): update dependency renovate to v43.288.0 (main)
• test(deps): update dependency renovate to v44 (main)
• build(deps): lock file maintenance (main)
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• build(deps): update dependency rolldown to v1.2.1 (main)
• chore(deps): update dependency nock to v14.0.17 (main)
• chore(deps): update dependency npm-run-all2 to v9.0.3 (main)
• build(deps): update dependency @yao-pkg/pkg to v6.22.0 (main)
• build(deps): update dependency vite to v8.2.0 (main)
• chore(deps): update dependency lint-staged to v17.3.0 (main)
• chore(deps): update pnpm to v11.19.0 (main)
• test(deps): update dependency yarn to v4.18.0 (main)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update node.js to v24.18.1 (main)
• test(deps): update dependency java to v25.0.4+7.0.lts (main)
• test(deps): update dotnet monorepo (main)
• test(deps): update dependency cabal to v3.18.1.0 (main)
• test(deps): update dependency pip-tools to v7.6.0 (main)
• test(deps): update dependency dotnet to v10 (main)
• test(deps): update dependency erlang to v29 (main)
• test(deps): update dependency pnpm to v11 (main)
• test(deps): update dependency sbt to v2 (main)
• test(deps): update java to v25 (main) (java, java-jre)
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• test(deps): update dependency scala to v2.13.18 (main)
• chore(deps): update ghcr.io/containerbase/ubuntu docker tag to v26 (main)
• fix(deps): update dependency global-agent to v4 (main)
• test(deps): update dart docker tag to v3 (main)
• test(deps): update dependency node to v22 (main)
• test(deps): update dependency node to v24 (main)
• test(deps): update gradle to v9 (main)

Detected Dependencies

Branch main

dockerfile (42)

.devcontainer/Dockerfile (1)

• ghcr.io/containerbase/devcontainer 14.13.12

Dockerfile (1)

• ghcr.io/containerbase/ubuntu 24.04@sha256:4fbb8e6a8395de5a7550b33509421a2bafbc0aab6c06ba2cef9ebffbc7092d90 → [Updates: 26.04]

test/dart/Dockerfile

test/dart/Dockerfile.arm64

test/Dockerfile.base

test/Dockerfile.distro

test/dotnet/Dockerfile

test/dotnet/Dockerfile.arm64

test/erlang/Dockerfile

test/erlang/Dockerfile.arm64

test/flutter/Dockerfile

test/flutter/Dockerfile.arm64

test/flux/Dockerfile

test/flux/Dockerfile.arm64

test/golang/Dockerfile

test/golang/Dockerfile.arm64

test/haskell/Dockerfile

test/haskell/Dockerfile.arm64

test/helm/Dockerfile

test/helm/Dockerfile.arm64

test/java/Dockerfile

test/java/Dockerfile.arm64

test/jb/Dockerfile

test/jb/Dockerfile.arm64

test/latest/Dockerfile

test/latest/Dockerfile.arm64

test/nix/Dockerfile

test/nix/Dockerfile.arm64

test/node/Dockerfile

test/node/Dockerfile.arm64

test/php/Dockerfile

test/php/Dockerfile.arm64

test/powershell/Dockerfile

test/powershell/Dockerfile.arm64

test/python/Dockerfile

test/python/Dockerfile.arm64

test/ruby/Dockerfile

test/ruby/Dockerfile.arm64

test/rust/Dockerfile

test/rust/Dockerfile.arm64

test/swift/Dockerfile

test/swift/Dockerfile.arm64

github-actions (7)

.github/actions/bake/action.yml (2)

• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• nick-fields/retry v4.0.0@ad984534de44a9489a53aefd81eb77f87c70dc60

.github/workflows/auto-pr.yml (5)

• hkusu/review-assign-action v1.4.0@5bee595fdb9765d4a0bd35724b6302fa15569158
• kiegroup/git-backporting v4.10.0@17bab14ff4b362d044e12c18e491b4ef8e69a4b1
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/build-push.yml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-qemu-action v4.2.0@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• containerbase/internal-tools v4.6.81@4577a4226e81662520a9457dd271851c7ed6f8f8
• ubuntu 24.04

.github/workflows/build.yml (21)

• containerbase/internal-tools v4.6.81@4577a4226e81662520a9457dd271851c7ed6f8f8
• containerbase/internal-tools v4.6.81@4577a4226e81662520a9457dd271851c7ed6f8f8
• reviewdog/action-shellcheck v1.32.0@4c07458293ac342d477251099501a718ae5ef86e
• containerbase/internal-tools v4.6.81@4577a4226e81662520a9457dd271851c7ed6f8f8
• containerbase/internal-tools v4.6.81@4577a4226e81662520a9457dd271851c7ed6f8f8
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• containerbase/internal-tools v4.6.81@4577a4226e81662520a9457dd271851c7ed6f8f8
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• containerbase/internal-tools v4.6.81@4577a4226e81662520a9457dd271851c7ed6f8f8
• containerbase/internal-tools v4.6.81@4577a4226e81662520a9457dd271851c7ed6f8f8
• containerbase/internal-tools v4.6.81@4577a4226e81662520a9457dd271851c7ed6f8f8
• containerbase/internal-tools v4.6.81@4577a4226e81662520a9457dd271851c7ed6f8f8
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04-arm
• ubuntu 24.04

.github/workflows/cancel-stale-merge-queue-workflows.yml

.github/workflows/devcontainer.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• devcontainers/ci v0.3.1900000450@513af61f4de4f75d37e4438f184ba4358f0fc1ca
• ubuntu 24.04

.github/workflows/trivy.yml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.37.3@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 → [Updates: v4.37.4]
• ubuntu 24.04
• aquasecurity/trivy v0.72.0

nodenv (1)

.node-version (1)

• node 24.18.0 → [Updates: 24.18.1]

npm (2)

package.json (72)

• @nodable/compact-builder 2.0.0
• @nodable/flexible-xml-parser 1.11.2
• @renovatebot/pep440 5.0.0
• @seald-io/nedb 4.1.2
• @sindresorhus/is 8.1.0
• clipanion 3.2.1
• common-tags 1.8.2
• deepmerge 4.3.1
• del 8.0.1
• execa 9.6.1 → [Updates: 10.0.0]
• global-agent 3.0.0 → [Updates: 4.1.3]
• got 15.1.0
• ini 7.0.0
• inversify 8.2.3
• node-ipc 12.0.0
• pino 10.3.1
• pino-pretty 13.1.3
• pretty-ms 9.3.0
• reflect-metadata 0.2.2
• semver 7.8.5
• zod 4.4.3
• @containerbase/eslint-plugin 2.1.1
• @containerbase/istanbul-reports-html 2.0.13
• @eslint/js 10.0.1
• @semantic-release/exec 7.1.0
• @tsconfig/node24 24.0.4
• @tsconfig/strictest 2.0.8
• @types/common-tags 1.8.4
• @types/eslint-config-prettier 6.11.3
• @types/global-agent 3.0.0
• @types/ini 4.1.1
• @types/node 24.13.3
• @types/node-ipc 9.2.3
• @types/semver 7.7.1
• @types/shelljs 0.10.0
• @vitest/coverage-v8 4.1.10
• @vitest/eslint-plugin 1.6.24
• @vitest/ui 4.1.10
• @yao-pkg/pkg 6.21.0 → [Updates: 6.22.0]
• bats 1.13.0
• bats-assert 2.2.4
• bats-support 0.3.0
• clipanion 3.2.1
• conventional-changelog-conventionalcommits 9.3.1 → [Updates: 10.2.1]
• eslint 10.8.0
• eslint-config-prettier 10.1.8
• eslint-formatter-gha 2.0.1
• eslint-import-resolver-typescript 4.4.5
• eslint-plugin-import-x 4.17.1
• eslint-plugin-promise 7.3.0
• globals 17.7.0 → [Updates: 17.8.0]
• husky 9.1.7
• lint-staged 17.2.0 → [Updates: 17.3.0]
• markdownlint-cli2 0.23.1 → [Updates: 0.23.2]
• nock 14.0.16 → [Updates: 14.0.17]
• npm-run-all2 9.0.2 → [Updates: 9.0.3]
• prettier 3.9.6
• prettier-plugin-packagejson 3.0.2
• rolldown 1.2.0 → [Updates: 1.2.1]
• semantic-release 25.0.8
• shelljs 0.10.0
• tsx 4.23.1
• type-fest 5.8.0
• typescript 6.0.3 → [Updates: 7.0.2]
• typescript-eslint 8.65.0
• vite 8.1.5 → [Updates: 8.2.0]
• vitest 4.1.10
• markdownlint *
• thread-stream *
• node >=24.10.0
• pnpm ^11.0.0
• pnpm 11.17.0 → [Updates: 11.19.0]

pnpm-workspace.yaml

regex (49)

.github/workflows/build.yml (5)

• ubuntu 24.04
• ubuntu 24.04-arm
• ubuntu 24.04
• ubuntu 24.04-arm
• ubuntu 24.04

Dockerfile (1)

• git v2.55.0

test/dart/Dockerfile (3)

• dart 3.12.2
• dart 3.12.2
• dart 2.19.6 → [Updates: 3.12.2]

test/dart/Dockerfile.arm64 (1)

• dart 3.12.2

test/Dockerfile.distro (1)

• swift 6.3.3

test/Dockerfile.distro (58)

• git v2.55.0
• bazelisk v1.29.0
• buf v1.72.0
• bun 1.3.14
• dart 3.12.2
• deno 2.9.4
• devbox 0.17.5
• dotnet 10.0.301 → [Updates: 10.0.302]
• flutter 3.44.8
• flux v2.9.3
• git-lfs v3.7.1
• gleam 1.18.0
• golang 1.26.5
• helm v4.2.3
• helmfile v1.7.1
• kubectl v1.36.3
• kustomize 5.8.1
• mise 2026.7.16 → [Updates: 2026.7.18]
• pixi v0.75.0
• powershell v7.6.4
• rust 1.97.1
• skopeo 1.23.0
• sops v3.13.3
• terraform 1.15.8
• tofu 1.12.5
• jb v0.6.0
• vendir v0.46.0
• wally 0.3.2
• protoc 35.1
• docker v28.5.2
• buildx v0.35.0 → [Updates: v0.36.0]
• docker-compose v5.3.1
• erlang 28.5.0.4 → [Updates: 29.0.4.0]
• elixir 1.20.2
• cabal 3.16.1.0 → [Updates: 3.18.1.0]
• ghc 9.14.1
• java 25.0.3+9.0.LTS → [Updates: 25.0.4+7.0.LTS]
• gradle 9.6.1
• maven 3.9.16
• mono 6.14.1
• nuget 7.6.0
• node 24.18.0 → [Updates: 24.18.1]
• pnpm 10.34.5 → [Updates: 11.17.0]
• yarn 4.17.1 → [Updates: 4.18.0]
• php 8.5.8 → [Updates: 8.5.9]
• composer 2.10.2
• python 3.14.6
• checkov 3.3.8
• conan 2.31.1
• copier 9.17.0
• hashin 1.0.5
• pipenv 2026.6.2
• pdm 2.28.0
• poetry 2.4.1
• uv 0.12.0
• ruby 4.0.6
• bundler 4.0.17
• cocoapods 1.17.0

test/dotnet/Dockerfile (6)

• dotnet 10.0.301 → [Updates: 10.0.302]
• dotnet 8.0.422 → [Updates: 8.0.423, 10.0.302]
• dotnet 8.0.422 → [Updates: 8.0.423, 10.0.302]
• dotnet 10.0.301 → [Updates: 10.0.302]
• dotnet 10.0.301 → [Updates: 10.0.302]
• paket 10.3.1

test/dotnet/Dockerfile.arm64 (2)

• dotnet 10.0.301 → [Updates: 10.0.302]
• paket 10.3.1

test/erlang/Dockerfile (2)

• erlang 28.5.0.4 → [Updates: 29.0.4.0]
• elixir 1.20.2

test/erlang/Dockerfile.arm64 (2)

• erlang 28.5.0.4 → [Updates: 29.0.4.0]
• elixir 1.20.2

test/flutter/Dockerfile (3)

• git v2.55.0
• flutter 3.44.8
• flutter 3.44.8

test/flutter/Dockerfile.arm64 (2)

• git v2.55.0
• flutter 3.44.8

test/flux/Dockerfile (1)

• flux v2.9.3

test/flux/Dockerfile.arm64 (1)

• flux v2.9.3

test/golang/Dockerfile (3)

• git v2.55.0
• golang 1.26.5
• golang 1.26.5

test/golang/Dockerfile.arm64 (2)

• git v2.55.0
• golang 1.26.5

test/haskell/Dockerfile (4)

• ghc 9.14.1
• cabal 3.16.1.0 → [Updates: 3.18.1.0]
• ghc 9.14.1
• cabal 3.16.1.0 → [Updates: 3.18.1.0]

test/haskell/Dockerfile.arm64 (2)

• ghc 9.14.1
• cabal 3.16.1.0 → [Updates: 3.18.1.0]

test/helm/Dockerfile (1)

• helm 4.2.3

test/helm/Dockerfile.arm64 (1)

• helm v4.2.3

test/java/Dockerfile (1)

• java 17.0.20+8 → [Updates: 25.0.4+7.0.LTS]

test/java/Dockerfile (9)

• git v2.55.0
• java 25.0.3+9.0.LTS → [Updates: 25.0.4+7.0.LTS]
• java-jre 21.0.12+8.0.LTS → [Updates: 25.0.4+7.0.LTS]
• gradle 9.6.1
• java-jre 21.0.12+8.0.LTS → [Updates: 25.0.4+7.0.LTS]
• gradle 8.14.5 → [Updates: 9.6.1]
• maven 3.9.16
• scala v2.13.16 → [Updates: v2.13.18]
• sbt v1.12.14 → [Updates: v2.0.4]

test/java/Dockerfile.arm64 (3)

• java 25.0.4+7.0.LTS
• gradle 9.6.1
• maven 3.9.16

test/jb/Dockerfile (1)

• jb 0.6.0

test/jb/Dockerfile (1)

• jb v0.6.0

test/jb/Dockerfile.arm64 (1)

• jb v0.6.0

test/latest/Dockerfile (5)

• python 3.14.6
• vendir v0.46.0
• helmfile v1.7.1
• kustomize 5.8.1
• protoc 35.1

test/latest/Dockerfile (29)

• node 24.18.0 → [Updates: 24.18.1]
• php 8.5.8 → [Updates: 8.5.9]
• powershell v7.6.4
• terraform 1.15.8
• git v2.55.0
• flux v2.9.3
• git-lfs v3.7.1
• powershell v7.6.4
• node 24.18.0 → [Updates: 24.18.1]
• docker v28.5.2
• bazelisk v1.29.0
• buf v1.72.0
• bun 1.3.14
• deno 2.9.4
• apko 1.2.29 → [Updates: 1.2.30]
• apm 0.26.0
• devbox 0.17.5
• gleam 1.18.0
• kubectl v1.36.3
• mise 2026.7.16 → [Updates: 2026.7.18]
• skopeo 1.23.0
• sops v3.13.3
• tofu 1.12.5
• protoc 35.1
• docker v28.5.2
• buildx v0.35.0 → [Updates: v0.36.0]
• docker-compose v5.3.1
• mono 6.14.1
• nuget 7.6.0

test/latest/Dockerfile.arm64 (26)

• bazelisk v1.29.0
• bun 1.3.14
• deno 2.9.4
• apko 1.2.29 → [Updates: 1.2.30]
• apm 0.26.0
• devbox 0.17.5
• gleam 1.18.0
• docker v28.5.2
• buildx v0.35.0 → [Updates: v0.36.0]
• docker-compose v5.3.1
• git v2.55.0
• git-lfs v3.7.1
• helmfile v1.7.1
• kustomize 5.8.1
• mono 6.14.1
• terraform 1.15.8
• tofu 1.12.5
• vendir v0.46.0
• buf v1.72.0
• kubectl v1.36.3
• mise 2026.7.16 → [Updates: 2026.7.18]
• skopeo 1.23.0
• sops v3.13.3
• wally 0.3.2
• protoc 35.1
• pixi v0.75.0

test/nix/Dockerfile (1)

• nix 2.35.1

test/nix/Dockerfile.arm64 (1)

• nix 2.35.1

test/node/Dockerfile (4)

• yarn 1.22.22
• yarn 3.3.0
• pnpm 10.34.5 → [Updates: 11.17.0]
• renovate 43.281.1 → [Updates: 43.288.0, 44.4.6]

test/node/Dockerfile (21)

• node 24.18.0 → [Updates: 24.18.1]
• yarn 1.22.22
• yarn 4.17.1 → [Updates: 4.18.0]
• pnpm 10.34.5 → [Updates: 11.17.0]
• node 20.20.2 → [Updates: 22.23.2, 24.18.1]
• yarn 1.22.22
• del-cli 7.0.0
• node 22.23.1 → [Updates: 22.23.2, 24.18.1]
• yarn 1.22.22
• del-cli 7.0.0
• yarn-slim 1.22.22
• yarn 1.22.22
• corepack 0.35.0
• corepack 0.35.0
• corepack 0.35.0
• yarn 1.22.22
• corepack 0.35.0
• corepack 0.35.0
• pnpm 10.34.5 → [Updates: 11.17.0]
• corepack 0.35.0
• corepack 0.35.0

test/node/Dockerfile.arm64 (4)

• node 24.18.0 → [Updates: 24.18.1]
• pnpm 10.34.5 → [Updates: 11.17.0]
• yarn 1.22.22
• renovate 43.281.1 → [Updates: 43.288.0, 44.4.6]

test/php/Dockerfile (3)

• php 8.5.8 → [Updates: 8.5.9]
• composer 2.10.2
• composer 2.10.2

test/php/Dockerfile.arm64 (2)

• php 8.5.8 → [Updates: 8.5.9]
• composer 2.10.2

test/powershell/Dockerfile (1)

• powershell v7.6.4

test/powershell/Dockerfile.arm64 (1)

• powershell v7.6.4

test/python/Dockerfile (15)

• python 3.14.6
• python 3.14.6
• pipenv 2026.6.2
• pipenv 2026.6.2
• poetry 2.4.1
• poetry 2.4.1
• pip-tools 7.5.3 → [Updates: 7.6.0]
• python 3.14.6
• poetry 2.4.1
• poetry 2.4.1
• poetry 2.4.1
• hashin 1.0.5
• python 3.14.6
• pipenv 2026.6.2
• conan 2.31.1

test/python/Dockerfile.arm64 (8)

• python 3.14.6
• checkov 3.3.8
• hashin 1.0.5
• pipenv 2026.6.2
• poetry 2.4.1
• conan 2.31.1
• copier 9.17.0
• uv 0.12.0

test/ruby/Dockerfile (2)

• bundler 4.0.17
• bundler 4.0.17

test/ruby/Dockerfile (3)

• git v2.55.0
• ruby 4.0.6
• cocoapods 1.17.0

test/ruby/Dockerfile.arm64 (4)

• ruby 4.0.6
• bundler 4.0.17
• git v2.55.0
• cocoapods 1.17.0

test/rust/Dockerfile (3)

• rust 1.97.1
• rust 1.97.1
• rust 1.97.1

test/rust/Dockerfile.arm64 (1)

• rust 1.97.1

test/swift/Dockerfile (2)

• git v2.55.0
• swift 6.3.3

test/swift/Dockerfile.arm64 (1)

• swift 6.3.3

tsconfig.json (1)

• @tsconfig/node24 24

tsconfig.json (1)

• @tsconfig/node24 24

Branch zzz/don-not-delete

None detected

---

• Check this box to trigger a request for Renovate to run again on this repository

[viceice]

placeholder, do not hide