Renovate Dependency Dashboard #3

Open
opened 2026-06-08 09:03:18 +00:00 by ryangr0 · 0 comments
Owner

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (14)

ℹ️ Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource Package Last Updated
npm @lhci/cli 2025-06-25
npm @saithodev/semantic-release-gitea 2021-04-08
npm @semantic-release/exec 2025-05-09
npm semantic-release-helm3 2025-04-09
npm semantic-release-monorepo 2024-02-05
regex cross 2023-02-04
regex pyyaml 2025-09-25

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

  • chore(deps): roll back dependency lycheeverse/lychee to v0.15.1
  • chore(deps): pin dependencies (conventional-changelog-conventionalcommits, docker/dockerfile, globby, got, harbor.webgrip.dev/ghcr/gitleaks/gitleaks, node, semantic-release, semantic-release-monorepo, tar)
  • chore(deps): update docker.io/library/eclipse-temurin:11.0.31_11-jre-jammy docker digest ( 76ffb74 ➔ eca8fa3 )
  • chore(deps): update node.js ( 3638d9a ➔ 0e0ff40 )
  • ci(actions): Update actions/checkout action ( v7.0.0 ➔ v7.0.1 )
  • fix(deps): update dependency @anthropic-ai/claude-code ( 2.1.223 ➔ 2.1.283 )
  • fix(deps): update dependency @moonrepo/cli ( 2.4.4 ➔ 2.4.6 )
  • fix(deps): update dependency cargo-release ( 1.1.4 ➔ 1.1.6 )
  • fix(deps): update dependency helm/helm ( v3.21.3 ➔ v3.21.4 )
  • fix(deps): update dependency kubernetes/kubernetes ( v1.34.10 ➔ v1.34.12 )
  • fix(deps): update dependency mikefarah/yq ( v4.44.3 ➔ v4.44.6 )
  • fix(deps): update dependency mikefarah/yq ( v4.53.3 ➔ v4.53.6 )
  • fix(deps): update dependency sigstore/cosign ( v2.6.4 ➔ v2.6.5 )
  • fix(deps): update dependency wasm-bindgen-cli ( 0.2.127 ➔ 0.2.129 )
  • fix(deps): update docker.io/library/rust docker tag ( 1.97.0 ➔ 1.97.1 )
  • fix(deps): update ghcr.io/astral-sh/uv docker tag ( 0.9.2 ➔ 0.9.30 )
  • fix(deps): update harbor.webgrip.dev/webgrip/rust-ci-runner docker tag ( 1.4.0 ➔ 1.4.1 )
  • fix(deps): update mcr.microsoft.com/playwright docker tag ( v1.51.0 ➔ v1.51.1 )
  • fix(deps): update node.js ( v20.19.5 ➔ v20.19.6 )
  • fix(deps): update semantic-release monorepo (patch) (@semantic-release/commit-analyzer, @semantic-release/release-notes-generator)
  • fix(toolchain): update semantic-release toolchain (patch) (@semantic-release/commit-analyzer, @semantic-release/release-notes-generator, @webgrip/semantic-release-config)
  • feat(deps): update dependency @fission-ai/openspec ( 1.6.0 ➔ 1.13.2 )
  • feat(deps): update dependency @moonrepo/cli ( 2.4.4 ➔ 2.5.6 )
  • feat(deps): update dependency @webgrip/semantic-release-config ( 1.2.3 ➔ 1.3.1 )
  • feat(deps): update dependency anchore/syft ( v1.50.0 ➔ v1.52.0 )
  • feat(deps): update dependency digitalocean/doctl ( v1.166.0 ➔ v1.175.0 )
  • feat(deps): update dependency git-cliff ( 2.13.1 ➔ 2.14.2 )
  • feat(deps): update dependency helm/helm to v3.22.0
  • feat(deps): update dependency kubernetes/kubernetes ( v1.34.10 ➔ v1.37.1 )
  • feat(deps): update dependency mikefarah/yq ( v4.44.3 ➔ v4.53.6 )
  • feat(deps): update docker.io/library/rust docker tag ( 1.97.0 ➔ 1.98.1 )
  • feat(deps): update ghcr.io/actions/actions-runner docker tag ( 2.335.1 ➔ 2.337.0 )
  • feat(deps): update ghcr.io/astral-sh/uv docker tag ( 0.9.2 ➔ 0.12.19 )
  • feat(deps): update mcr.microsoft.com/playwright docker tag ( v1.51.0 ➔ v1.63.0 )
  • feat(deps): update node.js ( v20.19.5 ➔ v20.20.2 )
  • fix(toolchain): update semantic-release toolchain (minor) (@webgrip/semantic-release-config, conventional-changelog-conventionalcommits, globby, got, tar)
  • feat(deps)!: Update dependency @aimbitgmbh/vikunja-mcp ( 0.1.0 ➔ 1.0.0 )
  • feat(deps)!: Update dependency globby ( 11.1.0 ➔ 12.2.0 )
  • feat(deps)!: Update dependency globby ( 11.1.0 ➔ 13.2.2 )
  • feat(deps)!: Update dependency globby ( 11.1.0 ➔ 14.1.0 )
  • feat(deps)!: Update dependency globby ( 11.1.0 ➔ 15.0.0 )
  • feat(deps)!: Update dependency globby ( 11.1.0 ➔ 16.2.4 )
  • feat(deps)!: Update dependency got ( 11.8.6 ➔ 12.6.1 )
  • feat(deps)!: Update dependency got ( 11.8.6 ➔ 13.0.0 )
  • feat(deps)!: Update dependency got ( 11.8.6 ➔ 14.6.6 )
  • feat(deps)!: Update dependency got ( 11.8.6 ➔ 15.1.0 )
  • feat(deps)!: Update dependency got ( 11.8.6 ➔ 16.0.0 )
  • feat(deps)!: Update dependency helm/helm to v4.3.0
  • feat(deps)!: Update dependency sigstore/cosign ( v2.6.4 ➔ v3.1.3 )
  • feat(deps)!: Update Node.js ( v20.19.5 ➔ v22.23.3 )
  • feat(deps)!: Update Node.js ( v20.19.5 ➔ v24.21.0 )
  • fix(toolchain)!: Update semantic-release toolchain ( 11.1.0 ➔ 12.2.0 ) (globby, got)
  • fix(toolchain)!: Update semantic-release toolchain ( 11.1.0 ➔ 13.2.2 ) (globby, got)
  • fix(toolchain)!: Update semantic-release toolchain ( 11.1.0 ➔ 14.1.0 ) (globby, got)
  • fix(toolchain)!: Update semantic-release toolchain ( 11.1.0 ➔ 15.0.0 ) (globby, got)
  • fix(toolchain)!: Update semantic-release toolchain ( 11.1.0 ➔ 16.2.4 ) (globby, got)
  • chore(deps): lock file maintenance
  • fix(toolchain): lock file maintenance
  • 🔐 Create all pending approval PRs at once 🔐

⚠️ Warning

Renovate failed to look up the following dependencies: Failed to look up docker package dhi.io/alpine-base: no-result, Failed to look up docker package dhi.io/node: no-result, Failed to look up docker package dhi.io/python: no-result, Failed to look up docker package dhi.io/golang: no-result, Failed to look up docker package dhi.io/static: no-result, Failed to look up docker package dhi.io/grype: no-result.

Files affected: ops/docker/act-runner/Dockerfile, ops/docker/agent-runner/Dockerfile, ops/docker/cve-gate/Dockerfile, ops/docker/helm-deploy/Dockerfile, ops/docker/node-ci-runner/Dockerfile, ops/docker/semantic-release-monorepo/Dockerfile, ops/docker/semantic-release/Dockerfile, ops/docker/techdocs-builder/Dockerfile


Vulnerabilities

❗ Important

0/4 CVEs have Renovate fixes.

regex
ops/docker/agent-runner/Dockerfile
pyyaml

Detected Dependencies

docker-compose (1)
docker-compose.yml
dockerfile (19)
ops/docker/act-runner/Dockerfile
ops/docker/agent-runner/Dockerfile
ops/docker/ci-runner/Dockerfile (2)
  • harbor.webgrip.dev/webgrip/cve-gate 0.3.4@sha256:6afd2c3aea931364810835b4c2f0121ad57f0b5c20f0b2ce44c336124e683bf2
  • ghcr.io/actions/actions-runner 2.335.1@sha256:08c30b0a7105f64bddfc485d2487a22aa03932a791402393352fdf674bda2c29 → [Updates: 2.337.0]
ops/docker/cve-gate/Dockerfile
ops/docker/helm-deploy/Dockerfile
ops/docker/mkdocs-runner/Dockerfile (1)
  • harbor.webgrip.dev/webgrip/techdocs-builder 1.8.0@sha256:2726a41cd7f3d40813baf3301a65b7f1cc6fa47d43518d57b3f1f0e4dc95150a
ops/docker/node-ci-runner/Dockerfile (1)
  • docker/dockerfile 1 → [Updates: 1]
ops/docker/php-ci-runner/Dockerfile
ops/docker/playwright-runner/Dockerfile
ops/docker/rust-ci-runner/Dockerfile
ops/docker/rust-releaser/Dockerfile
ops/docker/semantic-release-monorepo/Dockerfile
ops/docker/semantic-release-rust/Dockerfile
ops/docker/semantic-release/Dockerfile
ops/docker/static-site-ci-runner/Dockerfile (1)
  • docker/dockerfile 1 → [Updates: 1]
ops/docker/tauri-ci-runner/Dockerfile (1)
  • harbor.webgrip.dev/webgrip/rust-ci-runner 1.4.0@sha256:2ef5fcb9b81ff145ae3a0f0263bdaf5098874fb40145a1e97c65e6e9023a6638 → [Updates: 1.4.1]
ops/docker/techdocs-builder/Dockerfile (1)
  • harbor.webgrip.dev/ghcr/gitleaks/gitleaks v8.30.1 → [Updates: v8.30.1]
ops/docker/techdocs-runner/Dockerfile (1)
  • harbor.webgrip.dev/webgrip/techdocs-builder 1.8.0@sha256:2726a41cd7f3d40813baf3301a65b7f1cc6fa47d43518d57b3f1f0e4dc95150a
ops/docker/vikunja-mcp/Dockerfile
github-actions (5)
.forgejo/actions/semantic-release-monorepo/action.yml (4)
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
  • actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
  • actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
  • node 24
.forgejo/workflows/measure_cve_budgets.yml (1)
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
.forgejo/workflows/on_docs_change.yml
.forgejo/workflows/on_release_published.yml (1)
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
.forgejo/workflows/on_source_change.yml (3)
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
npm (20)
ops/docker/act-runner/package.json
ops/docker/agent-runner/package.json
ops/docker/ci-runner/package.json
ops/docker/cve-gate/package.json
ops/docker/helm-deploy/package.json
ops/docker/mkdocs-runner/package.json
ops/docker/node-ci-runner/package.json
ops/docker/php-ci-runner/package.json
ops/docker/playwright-runner/package.json
ops/docker/rust-ci-runner/package.json
ops/docker/rust-releaser/package.json
ops/docker/semantic-release-monorepo/package.json (16)
  • @saithodev/semantic-release-gitea 2.1.0
  • @semantic-release/changelog 7.0.0
  • @semantic-release/commit-analyzer 14.0.0-beta.3 → [Updates: 14.0.0-beta.4]
  • @semantic-release/exec 7.1.0
  • @semantic-release/git 11.0.1
  • @semantic-release/release-notes-generator 15.0.0-beta.2 → [Updates: 15.0.0-beta.3]
  • @webgrip/semantic-release-config 1.2.3 → [Updates: 1.3.1]
  • conventional-changelog-conventionalcommits 10.2.1 → [Updates: 10.4.0]
  • semantic-release 25.0.9
  • semantic-release-helm3 2.10.0
  • semantic-release-monorepo 8.0.2
  • @semantic-release/commit-analyzer 14.0.0-beta.3 → [Updates: 14.0.0-beta.4]
  • @semantic-release/release-notes-generator 15.0.0-beta.2 → [Updates: 15.0.0-beta.3]
  • got ^11.8.6 → [Updates: 11.8.6, ^12.0.0, ^13.0.0, ^14.0.0, ^15.0.0, ^16.0.0]
  • tar ^7.5.21 → [Updates: 7.5.22]
  • globby ^11.1.0 → [Updates: 11.1.0, ^12.0.0, ^13.0.0, ^14.0.0, ^15.0.0, ^16.0.0]
ops/docker/semantic-release-rust/package.json (16)
  • @saithodev/semantic-release-gitea 2.1.0
  • @semantic-release/changelog 7.0.0
  • @semantic-release/commit-analyzer 14.0.0-beta.3 → [Updates: 14.0.0-beta.4]
  • @semantic-release/exec 7.1.0
  • @semantic-release/git 11.0.1
  • @semantic-release/release-notes-generator 15.0.0-beta.2 → [Updates: 15.0.0-beta.3]
  • @webgrip/semantic-release-config 1.2.3 → [Updates: 1.3.1]
  • conventional-changelog-conventionalcommits 10.2.1 → [Updates: 10.4.0]
  • semantic-release 25.0.9
  • semantic-release-cargo 2.4.2
  • semantic-release-helm3 2.10.0
  • @semantic-release/commit-analyzer 14.0.0-beta.3 → [Updates: 14.0.0-beta.4]
  • @semantic-release/release-notes-generator 15.0.0-beta.2 → [Updates: 15.0.0-beta.3]
  • got ^11.8.6 → [Updates: 11.8.6, ^12.0.0, ^13.0.0, ^14.0.0, ^15.0.0, ^16.0.0]
  • tar ^7.5.21 → [Updates: 7.5.22]
  • globby ^11.1.0 → [Updates: 11.1.0, ^12.0.0, ^13.0.0, ^14.0.0, ^15.0.0, ^16.0.0]
ops/docker/semantic-release/package.json (15)
  • @saithodev/semantic-release-gitea 2.1.0
  • @semantic-release/changelog 7.0.0
  • @semantic-release/commit-analyzer 14.0.0-beta.3 → [Updates: 14.0.0-beta.4]
  • @semantic-release/exec 7.1.0
  • @semantic-release/git 11.0.1
  • @semantic-release/release-notes-generator 15.0.0-beta.2 → [Updates: 15.0.0-beta.3]
  • @webgrip/semantic-release-config 1.3.0 → [Updates: 1.3.1]
  • conventional-changelog-conventionalcommits 10.2.1 → [Updates: 10.4.0]
  • semantic-release 25.0.9
  • semantic-release-helm3 2.10.0
  • @semantic-release/commit-analyzer 14.0.0-beta.3 → [Updates: 14.0.0-beta.4]
  • @semantic-release/release-notes-generator 15.0.0-beta.2 → [Updates: 15.0.0-beta.3]
  • got ^11.8.6 → [Updates: 11.8.6, ^12.0.0, ^13.0.0, ^14.0.0, ^15.0.0, ^16.0.0]
  • tar ^7.5.21 → [Updates: 7.5.22]
  • globby ^11.1.0 → [Updates: 11.1.0, ^12.0.0, ^13.0.0, ^14.0.0, ^15.0.0, ^16.0.0]
ops/docker/static-site-ci-runner/package.json (1)
  • @lhci/cli 0.15.1
ops/docker/tauri-ci-runner/package.json
ops/docker/techdocs-builder/package.json
ops/docker/techdocs-runner/package.json
ops/docker/vikunja-mcp/package.json
package.json (10)
  • @webgrip/semantic-release-config 1.2.3 → [Updates: 1.3.1]
  • conventional-changelog-conventionalcommits ^10.2.1 → [Updates: 10.4.0]
  • semantic-release ^25.0.9 → [Updates: 25.0.9]
  • semantic-release-monorepo ^8.0.2 → [Updates: 8.0.2]
  • node ^22.22.2 || >=24.15.0 → [Updates: v26.10.0]
  • got ^11.8.6 → [Updates: 11.8.6, ^12.0.0, ^13.0.0, ^14.0.0, ^15.0.0, ^16.0.0]
  • tar ^7.5.21 → [Updates: 7.5.22]
  • globby ^11.1.0 → [Updates: 11.1.0, ^12.0.0, ^13.0.0, ^14.0.0, ^15.0.0, ^16.0.0]
  • @semantic-release/commit-analyzer 14.0.0-beta.3 → [Updates: 14.0.0-beta.4]
  • @semantic-release/release-notes-generator 15.0.0-beta.2 → [Updates: 15.0.0-beta.3]
regex (21)
.forgejo/actions/cosign-sign-attest/action.yml (2)
  • sigstore/cosign v2.6.4 → [Updates: v2.6.5, v3.1.3]
  • anchore/syft v1.50.0 → [Updates: v1.52.0]
.forgejo/actions/semantic-release-monorepo/action.yml
ops/docker/act-runner/Dockerfile (2)
  • dhi.io/alpine-base 3.23-dev@sha256:a5d8ac99e233c9141bbefb2afa1809923f420aeeeb11e9dbb463d0bddb943327
  • nektos/act 0.2.89
ops/docker/agent-runner/Dockerfile (9)
  • ghcr.io/astral-sh/uv 0.9.2@sha256:6dbd7c42a9088083fa79e41431a579196a189bcee3ae68ba904ac2bf77765867 → [Updates: 0.9.30, 0.12.19]
  • dhi.io/node 24.19.0-alpine3.24-dev@sha256:4b70bb724239d33250044c831c04746c75c4041e1247fecd9372b5da59d5d972
  • dhi.io/python 3.12.13-alpine3.24-dev@sha256:cf1c0e16904b7e831e430a02811cd36381c0e5b8ccf615be9be37fed0953260b
  • aaif-goose/goose 1.52.0
  • openhands 1.16.0
  • @moonrepo/cli 2.4.4 → [Updates: 2.4.6, 2.5.6]
  • @fission-ai/openspec 1.6.0 → [Updates: 1.13.2]
  • @qwen-code/qwen-code 0.24.6
  • pyyaml 6.0.3
ops/docker/ci-runner/Dockerfile (8)
  • ghcr.io/actions/actions-runner 2.335.1@sha256:08c30b0a7105f64bddfc485d2487a22aa03932a791402393352fdf674bda2c29 → [Updates: 2.337.0]
  • harbor.webgrip.dev/webgrip/cve-gate 0.3.4@sha256:6afd2c3aea931364810835b4c2f0121ad57f0b5c20f0b2ce44c336124e683bf2
  • helm/helm 3.21.3 → [Updates: 3.21.4, 3.22.0, 4.3.0]
  • mikefarah/yq 4.53.3 → [Updates: 4.53.6]
  • sigstore/cosign 2.6.4 → [Updates: 2.6.5, 3.1.3]
  • anchore/syft 1.50.0 → [Updates: 1.52.0]
  • node 20.19.5 → [Updates: 20.19.6, 20.20.2, 22.23.3, 24.21.0]
  • @anthropic-ai/claude-code 2.1.223 → [Updates: 2.1.283]
ops/docker/cve-gate/Dockerfile (3)
  • dhi.io/golang 1.26.5-alpine3.23-dev@sha256:f748c8d66b258cc04e8f3c90ac65190716faec01f0f5acc633bdeb36a90beda8
  • dhi.io/static 20260611-musl-alpine3.23@sha256:2050f91d1b5038e65cf406d533b845e92651dca16367744e6d28c92c8eadb638
  • dhi.io/grype 0.116.1-alpine3.23@sha256:90b143fb0da1d7fc61ae86b6e4da973e23ddabe6a9f5a73844bc9708b7017c9e
ops/docker/helm-deploy/Dockerfile (6)
  • dhi.io/alpine-base 3.23-dev@sha256:a5d8ac99e233c9141bbefb2afa1809923f420aeeeb11e9dbb463d0bddb943327
  • kubernetes/kubernetes v1.34.10 → [Updates: v1.34.12, v1.37.1]
  • helm/helm 3.18.6 → [Updates: 3.22.0, 4.3.0]
  • digitalocean/doctl 1.166.0 → [Updates: 1.175.0]
  • mikefarah/yq 4.53.3 → [Updates: 4.53.6]
  • getsops/sops 3.13.3
ops/docker/mkdocs-runner/Dockerfile (1)
  • harbor.webgrip.dev/webgrip/techdocs-builder 1.8.0@sha256:2726a41cd7f3d40813baf3301a65b7f1cc6fa47d43518d57b3f1f0e4dc95150a
ops/docker/node-ci-runner/Dockerfile (1)
  • dhi.io/node 24.19.0-alpine3.23-dev@sha256:d00350837e082dc254939ffcf53861b3b965ff159e506d6ab1775710f91a82fe
ops/docker/php-ci-runner/Dockerfile (1)
  • extism/extism 1.30.0
ops/docker/playwright-runner/Dockerfile (1)
  • mcr.microsoft.com/playwright v1.51.0-noble@sha256:dcc7a57c035cea22d94ef62edaf4e63b2d84352d990f936424344c6b05a3d9b4 → [Updates: v1.51.1-noble, v1.63.0-noble]
ops/docker/rust-ci-runner/Dockerfile (2)
  • docker.io/library/rust 1.97.0-slim-bookworm@sha256:6d220bf85c74e842a79da63997af8d2e74455c0b8847d8bb3a5888572334991d → [Updates: 1.97.1-slim-bookworm, 1.98.1-slim-bookworm]
  • docker.io/library/rust 1.97.0 → [Updates: 1.97.1, 1.98.1]
ops/docker/rust-releaser/Dockerfile (7)
  • docker.io/library/node 24-bookworm-slim@sha256:3638d9a6fe4030bd716be989438248074489337ba3275657f93595428be4fc03 → [Updates: 24-bookworm-slim]
  • docker.io/library/rust 1.97.0 → [Updates: 1.97.1, 1.98.1]
  • cargo-release 1.1.4 → [Updates: 1.1.6]
  • git-cliff 2.13.1 → [Updates: 2.14.2]
  • cross 0.2.5
  • wasm-bindgen-cli 0.2.127 → [Updates: 0.2.129]
  • semantic-release 25.0.9
ops/docker/semantic-release-monorepo/Dockerfile (2)
  • dhi.io/node 24.19.0-alpine3.23-dev@sha256:d00350837e082dc254939ffcf53861b3b965ff159e506d6ab1775710f91a82fe
  • mikefarah/yq v4.44.3 → [Updates: v4.44.6, v4.53.6]
ops/docker/semantic-release-rust/Dockerfile (3)
  • docker.io/library/node 24-bookworm-slim@sha256:3638d9a6fe4030bd716be989438248074489337ba3275657f93595428be4fc03 → [Updates: 24-bookworm-slim]
  • mikefarah/yq v4.44.3 → [Updates: v4.44.6, v4.53.6]
  • docker.io/library/rust 1.97.0 → [Updates: 1.97.1, 1.98.1]
ops/docker/semantic-release/Dockerfile (2)
  • dhi.io/node 24.19.0-alpine3.23-dev@sha256:d00350837e082dc254939ffcf53861b3b965ff159e506d6ab1775710f91a82fe
  • mikefarah/yq v4.44.3 → [Updates: v4.44.6, v4.53.6]
ops/docker/static-site-ci-runner/Dockerfile (1)
  • cypress/browsers node-24.20.0-chrome-152.0.7977.64-1-ff-155.0-edge-152.0.4191.53-1@sha256:4e487953a62c66c9b0ba84e07ecc84089612e213718b2a76c13c98ca66f97bae
ops/docker/tauri-ci-runner/Dockerfile (1)
  • harbor.webgrip.dev/webgrip/rust-ci-runner 1.4.0@sha256:2ef5fcb9b81ff145ae3a0f0263bdaf5098874fb40145a1e97c65e6e9023a6638 → [Updates: 1.4.1]
ops/docker/techdocs-builder/Dockerfile (4)
  • dhi.io/node 24.19.0-alpine3.23-dev@sha256:d00350837e082dc254939ffcf53861b3b965ff159e506d6ab1775710f91a82fe
  • dhi.io/python 3.13.15-alpine3.24-dev@sha256:8e51f99fa957d0b2531c4936b178d67d997e76fe48d7150357143295a03b1fd4
  • docker.io/library/eclipse-temurin 11.0.31_11-jre-jammy@sha256:76ffb747ad3a62a8b81ac3c76e2c3b1c06e475b1e10109d0a4dd604db627c9f5 → [Updates: 11.0.31_11-jre-jammy]
  • lycheeverse/lychee 0.24.2 → [Updates: v0.15.1]
ops/docker/techdocs-runner/Dockerfile (1)
  • harbor.webgrip.dev/webgrip/techdocs-builder 1.8.0@sha256:2726a41cd7f3d40813baf3301a65b7f1cc6fa47d43518d57b3f1f0e4dc95150a
ops/docker/vikunja-mcp/Dockerfile (1)
  • @aimbitgmbh/vikunja-mcp 0.1.0 → [Updates: 1.0.0]
renovate-config (1)
renovate.json (1)
  • webgrip/renovate-config v1.5.3
This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Abandoned Dependencies The following dependencies have not received updates for an extended period and may be unmaintained. <details> <summary>View abandoned dependencies (14)</summary> > ℹ️ **Note** > Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity. > | Datasource | Package | Last Updated | |------------|------|-------------| | npm | [@lhci/cli](https://github.com/GoogleChrome/lighthouse-ci) | `2025-06-25` | | npm | [@saithodev/semantic-release-gitea](https://github.com/saitho/semantic-release-gitea) | `2021-04-08` | | npm | [@semantic-release/exec](https://github.com/semantic-release/exec) | `2025-05-09` | | npm | [semantic-release-helm3](https://github.com/nflaig/semantic-release-helm) | `2025-04-09` | | npm | `semantic-release-monorepo` | `2024-02-05` | | regex | [cross](https://github.com/cross-rs/cross) | `2023-02-04` | | regex | [pyyaml](https://github.com/yaml/pyyaml) | `2025-09-25` | </details> ## Pending Approval The following branches are pending approval. To create them, click on a checkbox below. - [ ] <!-- approve-branch=renovate/lycheeverse-lychee-rollback -->chore(deps): roll back dependency lycheeverse/lychee to v0.15.1 - [ ] <!-- approve-branch=renovate/pin-dependencies -->chore(deps): pin dependencies (`conventional-changelog-conventionalcommits`, `docker/dockerfile`, `globby`, `got`, `harbor.webgrip.dev/ghcr/gitleaks/gitleaks`, `node`, `semantic-release`, `semantic-release-monorepo`, `tar`) - [ ] <!-- approve-branch=renovate/docker.io-library-eclipse-temurin-11.0.31_11-jre-jammy -->chore(deps): update docker.io/library/eclipse-temurin:11.0.31_11-jre-jammy docker digest ( 76ffb74 ➔ eca8fa3 ) - [ ] <!-- approve-branch=renovate/docker.io-library-node-24-bookworm-slim -->chore(deps): update node.js ( 3638d9a ➔ 0e0ff40 ) - [ ] <!-- approve-branch=renovate/actions-checkout-7.0.x -->ci(actions): Update actions/checkout action ( v7.0.0 ➔ v7.0.1 ) - [ ] <!-- approve-branch=renovate/anthropic-ai-claude-code-2.1.x -->fix(deps): update dependency @anthropic-ai/claude-code ( 2.1.223 ➔ 2.1.283 ) - [ ] <!-- approve-branch=renovate/moonrepo-cli-2.4.x -->fix(deps): update dependency @moonrepo/cli ( 2.4.4 ➔ 2.4.6 ) - [ ] <!-- approve-branch=renovate/cargo-release-1.1.x -->fix(deps): update dependency cargo-release ( 1.1.4 ➔ 1.1.6 ) - [ ] <!-- approve-branch=renovate/helm-helm-3.21.x -->fix(deps): update dependency helm/helm ( v3.21.3 ➔ v3.21.4 ) - [ ] <!-- approve-branch=renovate/kubernetes-kubernetes-1.34.x -->fix(deps): update dependency kubernetes/kubernetes ( v1.34.10 ➔ v1.34.12 ) - [ ] <!-- approve-branch=renovate/mikefarah-yq-4.44.x -->fix(deps): update dependency mikefarah/yq ( v4.44.3 ➔ v4.44.6 ) - [ ] <!-- approve-branch=renovate/mikefarah-yq-4.53.x -->fix(deps): update dependency mikefarah/yq ( v4.53.3 ➔ v4.53.6 ) - [ ] <!-- approve-branch=renovate/sigstore-cosign-2.6.x -->fix(deps): update dependency sigstore/cosign ( v2.6.4 ➔ v2.6.5 ) - [ ] <!-- approve-branch=renovate/patch-rust-wasm-bindgen-monorepo -->fix(deps): update dependency wasm-bindgen-cli ( 0.2.127 ➔ 0.2.129 ) - [ ] <!-- approve-branch=renovate/docker.io-library-rust-1.97.x -->fix(deps): update docker.io/library/rust docker tag ( 1.97.0 ➔ 1.97.1 ) - [ ] <!-- approve-branch=renovate/ghcr.io-astral-sh-uv-0.9.x -->fix(deps): update ghcr.io/astral-sh/uv docker tag ( 0.9.2 ➔ 0.9.30 ) - [ ] <!-- approve-branch=renovate/harbor.webgrip.dev-webgrip-rust-ci-runner-1.4.x -->fix(deps): update harbor.webgrip.dev/webgrip/rust-ci-runner docker tag ( 1.4.0 ➔ 1.4.1 ) - [ ] <!-- approve-branch=renovate/mcr.microsoft.com-playwright-1.51.x -->fix(deps): update mcr.microsoft.com/playwright docker tag ( v1.51.0 ➔ v1.51.1 ) - [ ] <!-- approve-branch=renovate/node-20.19.x -->fix(deps): update node.js ( v20.19.5 ➔ v20.19.6 ) - [ ] <!-- approve-branch=renovate/patch-semantic-release-monorepo -->fix(deps): update semantic-release monorepo (patch) (`@semantic-release/commit-analyzer`, `@semantic-release/release-notes-generator`) - [ ] <!-- approve-branch=renovate/patch-semantic-release-toolchain -->fix(toolchain): update semantic-release toolchain (patch) (`@semantic-release/commit-analyzer`, `@semantic-release/release-notes-generator`, `@webgrip/semantic-release-config`) - [ ] <!-- approve-branch=renovate/fission-ai-openspec-1.x -->feat(deps): update dependency @fission-ai/openspec ( 1.6.0 ➔ 1.13.2 ) - [ ] <!-- approve-branch=renovate/moonrepo-cli-2.x -->feat(deps): update dependency @moonrepo/cli ( 2.4.4 ➔ 2.5.6 ) - [ ] <!-- approve-branch=renovate/webgrip-semantic-release-config-1.x -->feat(deps): update dependency @webgrip/semantic-release-config ( 1.2.3 ➔ 1.3.1 ) - [ ] <!-- approve-branch=renovate/anchore-syft-1.x -->feat(deps): update dependency anchore/syft ( v1.50.0 ➔ v1.52.0 ) - [ ] <!-- approve-branch=renovate/digitalocean-doctl-1.x -->feat(deps): update dependency digitalocean/doctl ( v1.166.0 ➔ v1.175.0 ) - [ ] <!-- approve-branch=renovate/git-cliff-2.x -->feat(deps): update dependency git-cliff ( 2.13.1 ➔ 2.14.2 ) - [ ] <!-- approve-branch=renovate/helm-helm-3.x -->feat(deps): update dependency helm/helm to v3.22.0 - [ ] <!-- approve-branch=renovate/kubernetes-kubernetes-1.x -->feat(deps): update dependency kubernetes/kubernetes ( v1.34.10 ➔ v1.37.1 ) - [ ] <!-- approve-branch=renovate/mikefarah-yq-4.x -->feat(deps): update dependency mikefarah/yq ( v4.44.3 ➔ v4.53.6 ) - [ ] <!-- approve-branch=renovate/docker.io-library-rust-1.x -->feat(deps): update docker.io/library/rust docker tag ( 1.97.0 ➔ 1.98.1 ) - [ ] <!-- approve-branch=renovate/ghcr.io-actions-actions-runner-2.x -->feat(deps): update ghcr.io/actions/actions-runner docker tag ( 2.335.1 ➔ 2.337.0 ) - [ ] <!-- approve-branch=renovate/ghcr.io-astral-sh-uv-0.x -->feat(deps): update ghcr.io/astral-sh/uv docker tag ( 0.9.2 ➔ 0.12.19 ) - [ ] <!-- approve-branch=renovate/mcr.microsoft.com-playwright-1.x -->feat(deps): update mcr.microsoft.com/playwright docker tag ( v1.51.0 ➔ v1.63.0 ) - [ ] <!-- approve-branch=renovate/node-20.x -->feat(deps): update node.js ( v20.19.5 ➔ v20.20.2 ) - [ ] <!-- approve-branch=renovate/semantic-release-toolchain -->fix(toolchain): update semantic-release toolchain (minor) (`@webgrip/semantic-release-config`, `conventional-changelog-conventionalcommits`, `globby`, `got`, `tar`) - [ ] <!-- approve-branch=renovate/aimbitgmbh-vikunja-mcp-1.x -->feat(deps)!: Update dependency @aimbitgmbh/vikunja-mcp ( 0.1.0 ➔ 1.0.0 ) - [ ] <!-- approve-branch=renovate/globby-12.x -->feat(deps)!: Update dependency globby ( 11.1.0 ➔ 12.2.0 ) - [ ] <!-- approve-branch=renovate/globby-13.x -->feat(deps)!: Update dependency globby ( 11.1.0 ➔ 13.2.2 ) - [ ] <!-- approve-branch=renovate/globby-14.x -->feat(deps)!: Update dependency globby ( 11.1.0 ➔ 14.1.0 ) - [ ] <!-- approve-branch=renovate/globby-15.x -->feat(deps)!: Update dependency globby ( 11.1.0 ➔ 15.0.0 ) - [ ] <!-- approve-branch=renovate/globby-16.x -->feat(deps)!: Update dependency globby ( 11.1.0 ➔ 16.2.4 ) - [ ] <!-- approve-branch=renovate/got-12.x -->feat(deps)!: Update dependency got ( 11.8.6 ➔ 12.6.1 ) - [ ] <!-- approve-branch=renovate/got-13.x -->feat(deps)!: Update dependency got ( 11.8.6 ➔ 13.0.0 ) - [ ] <!-- approve-branch=renovate/got-14.x -->feat(deps)!: Update dependency got ( 11.8.6 ➔ 14.6.6 ) - [ ] <!-- approve-branch=renovate/got-15.x -->feat(deps)!: Update dependency got ( 11.8.6 ➔ 15.1.0 ) - [ ] <!-- approve-branch=renovate/got-16.x -->feat(deps)!: Update dependency got ( 11.8.6 ➔ 16.0.0 ) - [ ] <!-- approve-branch=renovate/helm-helm-4.x -->feat(deps)!: Update dependency helm/helm to v4.3.0 - [ ] <!-- approve-branch=renovate/sigstore-cosign-3.x -->feat(deps)!: Update dependency sigstore/cosign ( v2.6.4 ➔ v3.1.3 ) - [ ] <!-- approve-branch=renovate/node-22.x -->feat(deps)!: Update Node.js ( v20.19.5 ➔ v22.23.3 ) - [ ] <!-- approve-branch=renovate/node-24.x -->feat(deps)!: Update Node.js ( v20.19.5 ➔ v24.21.0 ) - [ ] <!-- approve-branch=renovate/major-12-semantic-release-toolchain -->fix(toolchain)!: Update semantic-release toolchain ( 11.1.0 ➔ 12.2.0 ) (`globby`, `got`) - [ ] <!-- approve-branch=renovate/major-13-semantic-release-toolchain -->fix(toolchain)!: Update semantic-release toolchain ( 11.1.0 ➔ 13.2.2 ) (`globby`, `got`) - [ ] <!-- approve-branch=renovate/major-14-semantic-release-toolchain -->fix(toolchain)!: Update semantic-release toolchain ( 11.1.0 ➔ 14.1.0 ) (`globby`, `got`) - [ ] <!-- approve-branch=renovate/major-15-semantic-release-toolchain -->fix(toolchain)!: Update semantic-release toolchain ( 11.1.0 ➔ 15.0.0 ) (`globby`, `got`) - [ ] <!-- approve-branch=renovate/major-16-semantic-release-toolchain -->fix(toolchain)!: Update semantic-release toolchain ( 11.1.0 ➔ 16.2.4 ) (`globby`, `got`) - [ ] <!-- approve-branch=renovate/lock-file-maintenance -->chore(deps): lock file maintenance - [ ] <!-- approve-branch=renovate/lock-file-maintenance-semantic-release-toolchain -->fix(toolchain): lock file maintenance - [ ] <!-- approve-all-pending-prs -->🔐 **Create all pending approval PRs at once** 🔐 --- > ⚠️ **Warning** > > Renovate failed to look up the following dependencies: `Failed to look up docker package dhi.io/alpine-base: no-result`, `Failed to look up docker package dhi.io/node: no-result`, `Failed to look up docker package dhi.io/python: no-result`, `Failed to look up docker package dhi.io/golang: no-result`, `Failed to look up docker package dhi.io/static: no-result`, `Failed to look up docker package dhi.io/grype: no-result`. > > Files affected: `ops/docker/act-runner/Dockerfile`, `ops/docker/agent-runner/Dockerfile`, `ops/docker/cve-gate/Dockerfile`, `ops/docker/helm-deploy/Dockerfile`, `ops/docker/node-ci-runner/Dockerfile`, `ops/docker/semantic-release-monorepo/Dockerfile`, `ops/docker/semantic-release/Dockerfile`, `ops/docker/techdocs-builder/Dockerfile` --- ## Vulnerabilities > ❗ **Important** > > `0`/`4` CVEs have Renovate fixes. <details><summary>regex</summary> <blockquote> <details><summary>ops/docker/agent-runner/Dockerfile</summary> <blockquote> <details><summary>pyyaml</summary> <blockquote> - [GHSA-8q59-q68h-6hv4](https://osv.dev/vulnerability/GHSA-8q59-q68h-6hv4) - [GHSA-rprw-h62v-c2w7](https://osv.dev/vulnerability/GHSA-rprw-h62v-c2w7) - [PYSEC-2018-49](https://osv.dev/vulnerability/PYSEC-2018-49) - [PYSEC-2021-142](https://osv.dev/vulnerability/PYSEC-2021-142) </blockquote> </details> </blockquote> </details> </blockquote> </details> ## Detected Dependencies <details><summary>docker-compose (1)</summary> <blockquote> <details><summary>docker-compose.yml</summary> </details> </blockquote> </details> <details><summary>dockerfile (19)</summary> <blockquote> <details><summary>ops/docker/act-runner/Dockerfile</summary> </details> <details><summary>ops/docker/agent-runner/Dockerfile</summary> </details> <details><summary>ops/docker/ci-runner/Dockerfile (2)</summary> - `harbor.webgrip.dev/webgrip/cve-gate 0.3.4@sha256:6afd2c3aea931364810835b4c2f0121ad57f0b5c20f0b2ce44c336124e683bf2` - `ghcr.io/actions/actions-runner 2.335.1@sha256:08c30b0a7105f64bddfc485d2487a22aa03932a791402393352fdf674bda2c29` → [Updates: `2.337.0`] </details> <details><summary>ops/docker/cve-gate/Dockerfile</summary> </details> <details><summary>ops/docker/helm-deploy/Dockerfile</summary> </details> <details><summary>ops/docker/mkdocs-runner/Dockerfile (1)</summary> - `harbor.webgrip.dev/webgrip/techdocs-builder 1.8.0@sha256:2726a41cd7f3d40813baf3301a65b7f1cc6fa47d43518d57b3f1f0e4dc95150a` </details> <details><summary>ops/docker/node-ci-runner/Dockerfile (1)</summary> - `docker/dockerfile 1` → [Updates: `1`] </details> <details><summary>ops/docker/php-ci-runner/Dockerfile</summary> </details> <details><summary>ops/docker/playwright-runner/Dockerfile</summary> </details> <details><summary>ops/docker/rust-ci-runner/Dockerfile</summary> </details> <details><summary>ops/docker/rust-releaser/Dockerfile</summary> </details> <details><summary>ops/docker/semantic-release-monorepo/Dockerfile</summary> </details> <details><summary>ops/docker/semantic-release-rust/Dockerfile</summary> </details> <details><summary>ops/docker/semantic-release/Dockerfile</summary> </details> <details><summary>ops/docker/static-site-ci-runner/Dockerfile (1)</summary> - `docker/dockerfile 1` → [Updates: `1`] </details> <details><summary>ops/docker/tauri-ci-runner/Dockerfile (1)</summary> - `harbor.webgrip.dev/webgrip/rust-ci-runner 1.4.0@sha256:2ef5fcb9b81ff145ae3a0f0263bdaf5098874fb40145a1e97c65e6e9023a6638` → [Updates: `1.4.1`] </details> <details><summary>ops/docker/techdocs-builder/Dockerfile (1)</summary> - `harbor.webgrip.dev/ghcr/gitleaks/gitleaks v8.30.1` → [Updates: `v8.30.1`] </details> <details><summary>ops/docker/techdocs-runner/Dockerfile (1)</summary> - `harbor.webgrip.dev/webgrip/techdocs-builder 1.8.0@sha256:2726a41cd7f3d40813baf3301a65b7f1cc6fa47d43518d57b3f1f0e4dc95150a` </details> <details><summary>ops/docker/vikunja-mcp/Dockerfile</summary> </details> </blockquote> </details> <details><summary>github-actions (5)</summary> <blockquote> <details><summary>.forgejo/actions/semantic-release-monorepo/action.yml (4)</summary> - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `node 24` </details> <details><summary>.forgejo/workflows/measure_cve_budgets.yml (1)</summary> - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] </details> <details><summary>.forgejo/workflows/on_docs_change.yml</summary> </details> <details><summary>.forgejo/workflows/on_release_published.yml (1)</summary> - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] </details> <details><summary>.forgejo/workflows/on_source_change.yml (3)</summary> - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] </details> </blockquote> </details> <details><summary>npm (20)</summary> <blockquote> <details><summary>ops/docker/act-runner/package.json</summary> </details> <details><summary>ops/docker/agent-runner/package.json</summary> </details> <details><summary>ops/docker/ci-runner/package.json</summary> </details> <details><summary>ops/docker/cve-gate/package.json</summary> </details> <details><summary>ops/docker/helm-deploy/package.json</summary> </details> <details><summary>ops/docker/mkdocs-runner/package.json</summary> </details> <details><summary>ops/docker/node-ci-runner/package.json</summary> </details> <details><summary>ops/docker/php-ci-runner/package.json</summary> </details> <details><summary>ops/docker/playwright-runner/package.json</summary> </details> <details><summary>ops/docker/rust-ci-runner/package.json</summary> </details> <details><summary>ops/docker/rust-releaser/package.json</summary> </details> <details><summary>ops/docker/semantic-release-monorepo/package.json (16)</summary> - `@saithodev/semantic-release-gitea 2.1.0` - `@semantic-release/changelog 7.0.0` - `@semantic-release/commit-analyzer 14.0.0-beta.3` → [Updates: `14.0.0-beta.4`] - `@semantic-release/exec 7.1.0` - `@semantic-release/git 11.0.1` - `@semantic-release/release-notes-generator 15.0.0-beta.2` → [Updates: `15.0.0-beta.3`] - `@webgrip/semantic-release-config 1.2.3` → [Updates: `1.3.1`] - `conventional-changelog-conventionalcommits 10.2.1` → [Updates: `10.4.0`] - `semantic-release 25.0.9` - `semantic-release-helm3 2.10.0` - `semantic-release-monorepo 8.0.2` - `@semantic-release/commit-analyzer 14.0.0-beta.3` → [Updates: `14.0.0-beta.4`] - `@semantic-release/release-notes-generator 15.0.0-beta.2` → [Updates: `15.0.0-beta.3`] - `got ^11.8.6` → [Updates: `11.8.6`, `^12.0.0`, `^13.0.0`, `^14.0.0`, `^15.0.0`, `^16.0.0`] - `tar ^7.5.21` → [Updates: `7.5.22`] - `globby ^11.1.0` → [Updates: `11.1.0`, `^12.0.0`, `^13.0.0`, `^14.0.0`, `^15.0.0`, `^16.0.0`] </details> <details><summary>ops/docker/semantic-release-rust/package.json (16)</summary> - `@saithodev/semantic-release-gitea 2.1.0` - `@semantic-release/changelog 7.0.0` - `@semantic-release/commit-analyzer 14.0.0-beta.3` → [Updates: `14.0.0-beta.4`] - `@semantic-release/exec 7.1.0` - `@semantic-release/git 11.0.1` - `@semantic-release/release-notes-generator 15.0.0-beta.2` → [Updates: `15.0.0-beta.3`] - `@webgrip/semantic-release-config 1.2.3` → [Updates: `1.3.1`] - `conventional-changelog-conventionalcommits 10.2.1` → [Updates: `10.4.0`] - `semantic-release 25.0.9` - `semantic-release-cargo 2.4.2` - `semantic-release-helm3 2.10.0` - `@semantic-release/commit-analyzer 14.0.0-beta.3` → [Updates: `14.0.0-beta.4`] - `@semantic-release/release-notes-generator 15.0.0-beta.2` → [Updates: `15.0.0-beta.3`] - `got ^11.8.6` → [Updates: `11.8.6`, `^12.0.0`, `^13.0.0`, `^14.0.0`, `^15.0.0`, `^16.0.0`] - `tar ^7.5.21` → [Updates: `7.5.22`] - `globby ^11.1.0` → [Updates: `11.1.0`, `^12.0.0`, `^13.0.0`, `^14.0.0`, `^15.0.0`, `^16.0.0`] </details> <details><summary>ops/docker/semantic-release/package.json (15)</summary> - `@saithodev/semantic-release-gitea 2.1.0` - `@semantic-release/changelog 7.0.0` - `@semantic-release/commit-analyzer 14.0.0-beta.3` → [Updates: `14.0.0-beta.4`] - `@semantic-release/exec 7.1.0` - `@semantic-release/git 11.0.1` - `@semantic-release/release-notes-generator 15.0.0-beta.2` → [Updates: `15.0.0-beta.3`] - `@webgrip/semantic-release-config 1.3.0` → [Updates: `1.3.1`] - `conventional-changelog-conventionalcommits 10.2.1` → [Updates: `10.4.0`] - `semantic-release 25.0.9` - `semantic-release-helm3 2.10.0` - `@semantic-release/commit-analyzer 14.0.0-beta.3` → [Updates: `14.0.0-beta.4`] - `@semantic-release/release-notes-generator 15.0.0-beta.2` → [Updates: `15.0.0-beta.3`] - `got ^11.8.6` → [Updates: `11.8.6`, `^12.0.0`, `^13.0.0`, `^14.0.0`, `^15.0.0`, `^16.0.0`] - `tar ^7.5.21` → [Updates: `7.5.22`] - `globby ^11.1.0` → [Updates: `11.1.0`, `^12.0.0`, `^13.0.0`, `^14.0.0`, `^15.0.0`, `^16.0.0`] </details> <details><summary>ops/docker/static-site-ci-runner/package.json (1)</summary> - `@lhci/cli 0.15.1` </details> <details><summary>ops/docker/tauri-ci-runner/package.json</summary> </details> <details><summary>ops/docker/techdocs-builder/package.json</summary> </details> <details><summary>ops/docker/techdocs-runner/package.json</summary> </details> <details><summary>ops/docker/vikunja-mcp/package.json</summary> </details> <details><summary>package.json (10)</summary> - `@webgrip/semantic-release-config 1.2.3` → [Updates: `1.3.1`] - `conventional-changelog-conventionalcommits ^10.2.1` → [Updates: `10.4.0`] - `semantic-release ^25.0.9` → [Updates: `25.0.9`] - `semantic-release-monorepo ^8.0.2` → [Updates: `8.0.2`] - `node ^22.22.2 || >=24.15.0` → [Updates: `v26.10.0`] - `got ^11.8.6` → [Updates: `11.8.6`, `^12.0.0`, `^13.0.0`, `^14.0.0`, `^15.0.0`, `^16.0.0`] - `tar ^7.5.21` → [Updates: `7.5.22`] - `globby ^11.1.0` → [Updates: `11.1.0`, `^12.0.0`, `^13.0.0`, `^14.0.0`, `^15.0.0`, `^16.0.0`] - `@semantic-release/commit-analyzer 14.0.0-beta.3` → [Updates: `14.0.0-beta.4`] - `@semantic-release/release-notes-generator 15.0.0-beta.2` → [Updates: `15.0.0-beta.3`] </details> </blockquote> </details> <details><summary>regex (21)</summary> <blockquote> <details><summary>.forgejo/actions/cosign-sign-attest/action.yml (2)</summary> - `sigstore/cosign v2.6.4` → [Updates: `v2.6.5`, `v3.1.3`] - `anchore/syft v1.50.0` → [Updates: `v1.52.0`] </details> <details><summary>.forgejo/actions/semantic-release-monorepo/action.yml</summary> </details> <details><summary>ops/docker/act-runner/Dockerfile (2)</summary> - `dhi.io/alpine-base 3.23-dev@sha256:a5d8ac99e233c9141bbefb2afa1809923f420aeeeb11e9dbb463d0bddb943327` - `nektos/act 0.2.89` </details> <details><summary>ops/docker/agent-runner/Dockerfile (9)</summary> - `ghcr.io/astral-sh/uv 0.9.2@sha256:6dbd7c42a9088083fa79e41431a579196a189bcee3ae68ba904ac2bf77765867` → [Updates: `0.9.30`, `0.12.19`] - `dhi.io/node 24.19.0-alpine3.24-dev@sha256:4b70bb724239d33250044c831c04746c75c4041e1247fecd9372b5da59d5d972` - `dhi.io/python 3.12.13-alpine3.24-dev@sha256:cf1c0e16904b7e831e430a02811cd36381c0e5b8ccf615be9be37fed0953260b` - `aaif-goose/goose 1.52.0` - `openhands 1.16.0` - `@moonrepo/cli 2.4.4` → [Updates: `2.4.6`, `2.5.6`] - `@fission-ai/openspec 1.6.0` → [Updates: `1.13.2`] - `@qwen-code/qwen-code 0.24.6` - `pyyaml 6.0.3` </details> <details><summary>ops/docker/ci-runner/Dockerfile (8)</summary> - `ghcr.io/actions/actions-runner 2.335.1@sha256:08c30b0a7105f64bddfc485d2487a22aa03932a791402393352fdf674bda2c29` → [Updates: `2.337.0`] - `harbor.webgrip.dev/webgrip/cve-gate 0.3.4@sha256:6afd2c3aea931364810835b4c2f0121ad57f0b5c20f0b2ce44c336124e683bf2` - `helm/helm 3.21.3` → [Updates: `3.21.4`, `3.22.0`, `4.3.0`] - `mikefarah/yq 4.53.3` → [Updates: `4.53.6`] - `sigstore/cosign 2.6.4` → [Updates: `2.6.5`, `3.1.3`] - `anchore/syft 1.50.0` → [Updates: `1.52.0`] - `node 20.19.5` → [Updates: `20.19.6`, `20.20.2`, `22.23.3`, `24.21.0`] - `@anthropic-ai/claude-code 2.1.223` → [Updates: `2.1.283`] </details> <details><summary>ops/docker/cve-gate/Dockerfile (3)</summary> - `dhi.io/golang 1.26.5-alpine3.23-dev@sha256:f748c8d66b258cc04e8f3c90ac65190716faec01f0f5acc633bdeb36a90beda8` - `dhi.io/static 20260611-musl-alpine3.23@sha256:2050f91d1b5038e65cf406d533b845e92651dca16367744e6d28c92c8eadb638` - `dhi.io/grype 0.116.1-alpine3.23@sha256:90b143fb0da1d7fc61ae86b6e4da973e23ddabe6a9f5a73844bc9708b7017c9e` </details> <details><summary>ops/docker/helm-deploy/Dockerfile (6)</summary> - `dhi.io/alpine-base 3.23-dev@sha256:a5d8ac99e233c9141bbefb2afa1809923f420aeeeb11e9dbb463d0bddb943327` - `kubernetes/kubernetes v1.34.10` → [Updates: `v1.34.12`, `v1.37.1`] - `helm/helm 3.18.6` → [Updates: `3.22.0`, `4.3.0`] - `digitalocean/doctl 1.166.0` → [Updates: `1.175.0`] - `mikefarah/yq 4.53.3` → [Updates: `4.53.6`] - `getsops/sops 3.13.3` </details> <details><summary>ops/docker/mkdocs-runner/Dockerfile (1)</summary> - `harbor.webgrip.dev/webgrip/techdocs-builder 1.8.0@sha256:2726a41cd7f3d40813baf3301a65b7f1cc6fa47d43518d57b3f1f0e4dc95150a` </details> <details><summary>ops/docker/node-ci-runner/Dockerfile (1)</summary> - `dhi.io/node 24.19.0-alpine3.23-dev@sha256:d00350837e082dc254939ffcf53861b3b965ff159e506d6ab1775710f91a82fe` </details> <details><summary>ops/docker/php-ci-runner/Dockerfile (1)</summary> - `extism/extism 1.30.0` </details> <details><summary>ops/docker/playwright-runner/Dockerfile (1)</summary> - `mcr.microsoft.com/playwright v1.51.0-noble@sha256:dcc7a57c035cea22d94ef62edaf4e63b2d84352d990f936424344c6b05a3d9b4` → [Updates: `v1.51.1-noble`, `v1.63.0-noble`] </details> <details><summary>ops/docker/rust-ci-runner/Dockerfile (2)</summary> - `docker.io/library/rust 1.97.0-slim-bookworm@sha256:6d220bf85c74e842a79da63997af8d2e74455c0b8847d8bb3a5888572334991d` → [Updates: `1.97.1-slim-bookworm`, `1.98.1-slim-bookworm`] - `docker.io/library/rust 1.97.0` → [Updates: `1.97.1`, `1.98.1`] </details> <details><summary>ops/docker/rust-releaser/Dockerfile (7)</summary> - `docker.io/library/node 24-bookworm-slim@sha256:3638d9a6fe4030bd716be989438248074489337ba3275657f93595428be4fc03` → [Updates: `24-bookworm-slim`] - `docker.io/library/rust 1.97.0` → [Updates: `1.97.1`, `1.98.1`] - `cargo-release 1.1.4` → [Updates: `1.1.6`] - `git-cliff 2.13.1` → [Updates: `2.14.2`] - `cross 0.2.5` - `wasm-bindgen-cli 0.2.127` → [Updates: `0.2.129`] - `semantic-release 25.0.9` </details> <details><summary>ops/docker/semantic-release-monorepo/Dockerfile (2)</summary> - `dhi.io/node 24.19.0-alpine3.23-dev@sha256:d00350837e082dc254939ffcf53861b3b965ff159e506d6ab1775710f91a82fe` - `mikefarah/yq v4.44.3` → [Updates: `v4.44.6`, `v4.53.6`] </details> <details><summary>ops/docker/semantic-release-rust/Dockerfile (3)</summary> - `docker.io/library/node 24-bookworm-slim@sha256:3638d9a6fe4030bd716be989438248074489337ba3275657f93595428be4fc03` → [Updates: `24-bookworm-slim`] - `mikefarah/yq v4.44.3` → [Updates: `v4.44.6`, `v4.53.6`] - `docker.io/library/rust 1.97.0` → [Updates: `1.97.1`, `1.98.1`] </details> <details><summary>ops/docker/semantic-release/Dockerfile (2)</summary> - `dhi.io/node 24.19.0-alpine3.23-dev@sha256:d00350837e082dc254939ffcf53861b3b965ff159e506d6ab1775710f91a82fe` - `mikefarah/yq v4.44.3` → [Updates: `v4.44.6`, `v4.53.6`] </details> <details><summary>ops/docker/static-site-ci-runner/Dockerfile (1)</summary> - `cypress/browsers node-24.20.0-chrome-152.0.7977.64-1-ff-155.0-edge-152.0.4191.53-1@sha256:4e487953a62c66c9b0ba84e07ecc84089612e213718b2a76c13c98ca66f97bae` </details> <details><summary>ops/docker/tauri-ci-runner/Dockerfile (1)</summary> - `harbor.webgrip.dev/webgrip/rust-ci-runner 1.4.0@sha256:2ef5fcb9b81ff145ae3a0f0263bdaf5098874fb40145a1e97c65e6e9023a6638` → [Updates: `1.4.1`] </details> <details><summary>ops/docker/techdocs-builder/Dockerfile (4)</summary> - `dhi.io/node 24.19.0-alpine3.23-dev@sha256:d00350837e082dc254939ffcf53861b3b965ff159e506d6ab1775710f91a82fe` - `dhi.io/python 3.13.15-alpine3.24-dev@sha256:8e51f99fa957d0b2531c4936b178d67d997e76fe48d7150357143295a03b1fd4` - `docker.io/library/eclipse-temurin 11.0.31_11-jre-jammy@sha256:76ffb747ad3a62a8b81ac3c76e2c3b1c06e475b1e10109d0a4dd604db627c9f5` → [Updates: `11.0.31_11-jre-jammy`] - `lycheeverse/lychee 0.24.2` → [Updates: `v0.15.1`] </details> <details><summary>ops/docker/techdocs-runner/Dockerfile (1)</summary> - `harbor.webgrip.dev/webgrip/techdocs-builder 1.8.0@sha256:2726a41cd7f3d40813baf3301a65b7f1cc6fa47d43518d57b3f1f0e4dc95150a` </details> <details><summary>ops/docker/vikunja-mcp/Dockerfile (1)</summary> - `@aimbitgmbh/vikunja-mcp 0.1.0` → [Updates: `1.0.0`] </details> </blockquote> </details> <details><summary>renovate-config (1)</summary> <blockquote> <details><summary>renovate.json (1)</summary> - `webgrip/renovate-config v1.5.3` </details> </blockquote> </details>
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
webgrip/infrastructure#3
No description provided.