Renovate Dependency Dashboard #3

Open
opened 2026-06-08 09:03:18 +00:00 by ryangr0 · 0 comments
Owner

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (1)

ℹ️ Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource Package Last Updated
regex cross 2023-02-04

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

  • chore(deps): pin dependencies (docker/dockerfile, harbor.webgrip.dev/ghcr/gitleaks/gitleaks)
  • chore(deps): roll back dependency lycheeverse/lychee to v0.15.1
  • chore(deps): update docker.io/library/eclipse-temurin:11.0.31_11-jre-jammy docker digest ( 76ffb74 ➔ e8acde9 )
  • chore(deps): update docker.io/library/python:3.12-slim-bookworm docker digest ( 4766d8b ➔ a116514 )
  • ci(actions): Update actions/checkout action ( v7.0.0 ➔ v7.0.1 )
  • fix(deps): update dependency @anthropic-ai/claude-code ( 2.1.223 ➔ 2.1.232 )
  • fix(deps): update dependency @moonrepo/cli ( 2.4.4 ➔ 2.4.6 )
  • fix(deps): update dependency cargo-release ( 1.1.4 ➔ 1.1.5 )
  • fix(deps): update dependency mikefarah/yq ( v4.44.3 ➔ v4.44.6 )
  • fix(deps): update dependency sigstore/cosign ( v2.6.4 ➔ v2.6.5 )
  • fix(deps): update docker.io/library/rust docker tag ( 1.97.0 ➔ 1.97.1 )
  • fix(deps): update ghcr.io/astral-sh/uv docker tag ( 0.9.2 ➔ 0.9.30 )
  • fix(deps): update harbor.webgrip.dev/webgrip/rust-ci-runner docker tag ( 1.4.0 ➔ 1.4.1 )
  • fix(deps): update mcr.microsoft.com/playwright docker tag ( v1.51.0 ➔ v1.51.1 )
  • fix(deps): update node.js ( v20.19.5 ➔ v20.19.6 )
  • feat(deps): update dependency @fission-ai/openspec ( 1.6.0 ➔ 1.9.0 )
  • feat(deps): update dependency anchore/syft ( v1.50.0 ➔ v1.51.0 )
  • feat(deps): update dependency helm/helm ( v3.18.6 ➔ v3.21.3 )
  • feat(deps): update dependency kubernetes/kubernetes ( v1.34.10 ➔ v1.36.3 )
  • feat(deps): update dependency mikefarah/yq ( v4.44.3 ➔ v4.53.3 )
  • feat(deps): update docker.io/library/docker docker tag ( 29.5.3 ➔ 29.7.2 )
  • feat(deps): update docker.io/library/python docker tag ( 3.12 ➔ 3.14 )
  • feat(deps): update ghcr.io/actions/actions-runner docker tag ( 2.335.1 ➔ 2.336.0 )
  • feat(deps): update ghcr.io/astral-sh/uv docker tag ( 0.9.2 ➔ 0.12.4 )
  • feat(deps): update mcr.microsoft.com/playwright docker tag ( v1.51.0 ➔ v1.62.1 )
  • feat(deps): update node.js ( v20.19.5 ➔ v20.20.2 )
  • feat(deps)!: Update dependency helm/helm to v4.2.4
  • feat(deps)!: Update dependency sigstore/cosign ( v2.6.4 ➔ v3.1.3 )
  • feat(deps)!: Update Node.js ( v20.19.5 ➔ v22.23.2 )
  • feat(deps)!: Update Node.js ( v20.19.5 ➔ v24.19.0 )
  • 🔐 Create all pending approval PRs at once 🔐

⚠️ Warning

Renovate failed to look up the following dependencies: Failed to look up docker package dhi.io/alpine-base: no-result, Failed to look up docker package dhi.io/golang: no-result, Failed to look up docker package dhi.io/static: no-result, Failed to look up docker package dhi.io/grype: no-result, Failed to look up docker package dhi.io/node: no-result, Failed to look up docker package dhi.io/python: no-result.

Files affected: ops/docker/act-runner/Dockerfile, ops/docker/cve-gate/Dockerfile, ops/docker/helm-deploy/Dockerfile, ops/docker/node-ci-runner/Dockerfile, ops/docker/semantic-release-monorepo/Dockerfile, ops/docker/semantic-release/Dockerfile, ops/docker/techdocs-builder/Dockerfile


Vulnerabilities

Important

0/4 CVEs have Renovate fixes.

regex
ops/docker/agent-runner/Dockerfile
pyyaml

Detected Dependencies

docker-compose (1)
docker-compose.yml
dockerfile (18)
ops/docker/act-runner/Dockerfile
ops/docker/agent-runner/Dockerfile
ops/docker/ci-runner/Dockerfile (2)
  • harbor.webgrip.dev/webgrip/cve-gate 0.3.4@sha256:6afd2c3aea931364810835b4c2f0121ad57f0b5c20f0b2ce44c336124e683bf2
  • ghcr.io/actions/actions-runner 2.335.1@sha256:08c30b0a7105f64bddfc485d2487a22aa03932a791402393352fdf674bda2c29 → [Updates: 2.336.0]
ops/docker/cve-gate/Dockerfile
ops/docker/helm-deploy/Dockerfile
ops/docker/mkdocs-runner/Dockerfile (1)
  • harbor.webgrip.dev/webgrip/techdocs-builder 1.8.0@sha256:2726a41cd7f3d40813baf3301a65b7f1cc6fa47d43518d57b3f1f0e4dc95150a
ops/docker/node-ci-runner/Dockerfile (1)
  • docker/dockerfile 1 → [Updates: 1]
ops/docker/php-ci-runner/Dockerfile
ops/docker/playwright-runner/Dockerfile
ops/docker/rust-ci-runner/Dockerfile
ops/docker/rust-releaser/Dockerfile
ops/docker/semantic-release-monorepo/Dockerfile
ops/docker/semantic-release-rust/Dockerfile
ops/docker/semantic-release/Dockerfile
ops/docker/tauri-ci-runner/Dockerfile (1)
  • harbor.webgrip.dev/webgrip/rust-ci-runner 1.4.0@sha256:2ef5fcb9b81ff145ae3a0f0263bdaf5098874fb40145a1e97c65e6e9023a6638 → [Updates: 1.4.1]
ops/docker/techdocs-builder/Dockerfile (1)
  • harbor.webgrip.dev/ghcr/gitleaks/gitleaks v8.30.1 → [Updates: v8.30.1]
ops/docker/techdocs-runner/Dockerfile (1)
  • harbor.webgrip.dev/webgrip/techdocs-builder 1.8.0@sha256:2726a41cd7f3d40813baf3301a65b7f1cc6fa47d43518d57b3f1f0e4dc95150a
ops/docker/vikunja-mcp/Dockerfile
github-actions (5)
.forgejo/actions/semantic-release-monorepo/action.yml (4)
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
  • actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
  • actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
  • node 24
.forgejo/workflows/measure_cve_budgets.yml (1)
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
.forgejo/workflows/on_docs_change.yml
.forgejo/workflows/on_release_published.yml (1)
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
.forgejo/workflows/on_source_change.yml (3)
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
  • actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
regex (20)
.forgejo/actions/cosign-sign-attest/action.yml (2)
  • sigstore/cosign v2.6.4 → [Updates: v2.6.5, v3.1.3]
  • anchore/syft v1.50.0 → [Updates: v1.51.0]
.forgejo/actions/semantic-release-monorepo/action.yml
ops/docker/act-runner/Dockerfile (2)
  • dhi.io/alpine-base 3.23-dev@sha256:a5d8ac99e233c9141bbefb2afa1809923f420aeeeb11e9dbb463d0bddb943327
  • nektos/act 0.2.89
ops/docker/agent-runner/Dockerfile (8)
  • ghcr.io/astral-sh/uv 0.9.2@sha256:6dbd7c42a9088083fa79e41431a579196a189bcee3ae68ba904ac2bf77765867 → [Updates: 0.9.30, 0.12.4]
  • docker.io/library/node 24-bookworm-slim@sha256:3638d9a6fe4030bd716be989438248074489337ba3275657f93595428be4fc03
  • docker.io/library/docker 29.5.3-cli@sha256:11e1133c30f3ceb73c6bdc7dfb78b3f9ed8e8e0d1d0400e91c5ec2eb240bf2ff → [Updates: 29.7.2-cli]
  • docker.io/library/python 3.12-slim-bookworm@sha256:4766d8b510c428e595d74b9cc5bbb2fae8e26316fffb4adc89908d79aacd58a2 → [Updates: 3.14-slim-bookworm, 3.12-slim-bookworm]
  • openhands 1.16.0
  • @moonrepo/cli 2.4.4 → [Updates: 2.4.6]
  • @fission-ai/openspec 1.6.0 → [Updates: 1.9.0]
  • pyyaml 6.0.3
ops/docker/ci-runner/Dockerfile (7)
  • harbor.webgrip.dev/webgrip/cve-gate 0.3.4@sha256:6afd2c3aea931364810835b4c2f0121ad57f0b5c20f0b2ce44c336124e683bf2
  • helm/helm 3.21.3 → [Updates: 4.2.4]
  • mikefarah/yq 4.53.3
  • sigstore/cosign 2.6.4 → [Updates: 2.6.5, 3.1.3]
  • anchore/syft 1.50.0 → [Updates: 1.51.0]
  • node 20.19.5 → [Updates: 20.19.6, 20.20.2, 22.23.2, 24.19.0]
  • @anthropic-ai/claude-code 2.1.223 → [Updates: 2.1.232]
ops/docker/cve-gate/Dockerfile (3)
  • dhi.io/golang 1.26.5-alpine3.23-dev@sha256:f748c8d66b258cc04e8f3c90ac65190716faec01f0f5acc633bdeb36a90beda8
  • dhi.io/static 20260611-musl-alpine3.23@sha256:2050f91d1b5038e65cf406d533b845e92651dca16367744e6d28c92c8eadb638
  • dhi.io/grype 0.116.1-alpine3.23@sha256:90b143fb0da1d7fc61ae86b6e4da973e23ddabe6a9f5a73844bc9708b7017c9e
ops/docker/helm-deploy/Dockerfile (6)
  • dhi.io/alpine-base 3.23-dev@sha256:a5d8ac99e233c9141bbefb2afa1809923f420aeeeb11e9dbb463d0bddb943327
  • kubernetes/kubernetes v1.34.10 → [Updates: v1.36.3]
  • helm/helm 3.18.6 → [Updates: 3.21.3, 4.2.4]
  • digitalocean/doctl 1.166.0
  • mikefarah/yq 4.53.3
  • getsops/sops 3.13.3
ops/docker/mkdocs-runner/Dockerfile (1)
  • harbor.webgrip.dev/webgrip/techdocs-builder 1.8.0@sha256:2726a41cd7f3d40813baf3301a65b7f1cc6fa47d43518d57b3f1f0e4dc95150a
ops/docker/node-ci-runner/Dockerfile (1)
  • dhi.io/node 24.19.0-alpine3.23-dev@sha256:d00350837e082dc254939ffcf53861b3b965ff159e506d6ab1775710f91a82fe
ops/docker/php-ci-runner/Dockerfile (1)
  • extism/extism 1.30.0
ops/docker/playwright-runner/Dockerfile (1)
  • mcr.microsoft.com/playwright v1.51.0-noble@sha256:dcc7a57c035cea22d94ef62edaf4e63b2d84352d990f936424344c6b05a3d9b4 → [Updates: v1.51.1-noble, v1.62.1-noble]
ops/docker/rust-ci-runner/Dockerfile (2)
  • docker.io/library/rust 1.97.0-slim-bookworm@sha256:6d220bf85c74e842a79da63997af8d2e74455c0b8847d8bb3a5888572334991d → [Updates: 1.97.1-slim-bookworm]
  • docker.io/library/rust 1.97.0 → [Updates: 1.97.1]
ops/docker/rust-releaser/Dockerfile (7)
  • docker.io/library/node 24-bookworm-slim@sha256:3638d9a6fe4030bd716be989438248074489337ba3275657f93595428be4fc03
  • docker.io/library/rust 1.97.0 → [Updates: 1.97.1]
  • cargo-release 1.1.4 → [Updates: 1.1.5]
  • git-cliff 2.13.1
  • cross 0.2.5
  • wasm-bindgen-cli 0.2.127
  • semantic-release 25.0.9
ops/docker/semantic-release-monorepo/Dockerfile (2)
  • dhi.io/node 24.19.0-alpine3.23-dev@sha256:d00350837e082dc254939ffcf53861b3b965ff159e506d6ab1775710f91a82fe
  • mikefarah/yq v4.44.3 → [Updates: v4.44.6, v4.53.3]
ops/docker/semantic-release-rust/Dockerfile (3)
  • docker.io/library/node 24-bookworm-slim@sha256:3638d9a6fe4030bd716be989438248074489337ba3275657f93595428be4fc03
  • mikefarah/yq v4.44.3 → [Updates: v4.44.6, v4.53.3]
  • docker.io/library/rust 1.97.0 → [Updates: 1.97.1]
ops/docker/semantic-release/Dockerfile (2)
  • dhi.io/node 24.19.0-alpine3.23-dev@sha256:d00350837e082dc254939ffcf53861b3b965ff159e506d6ab1775710f91a82fe
  • mikefarah/yq v4.44.3 → [Updates: v4.44.6, v4.53.3]
ops/docker/tauri-ci-runner/Dockerfile (1)
  • harbor.webgrip.dev/webgrip/rust-ci-runner 1.4.0@sha256:2ef5fcb9b81ff145ae3a0f0263bdaf5098874fb40145a1e97c65e6e9023a6638 → [Updates: 1.4.1]
ops/docker/techdocs-builder/Dockerfile (4)
  • dhi.io/node 24.19.0-alpine3.23-dev@sha256:d00350837e082dc254939ffcf53861b3b965ff159e506d6ab1775710f91a82fe
  • dhi.io/python 3.13.15-alpine3.24-dev@sha256:8e51f99fa957d0b2531c4936b178d67d997e76fe48d7150357143295a03b1fd4
  • docker.io/library/eclipse-temurin 11.0.31_11-jre-jammy@sha256:76ffb747ad3a62a8b81ac3c76e2c3b1c06e475b1e10109d0a4dd604db627c9f5 → [Updates: 11.0.31_11-jre-jammy]
  • lycheeverse/lychee 0.24.2 → [Updates: v0.15.1]
ops/docker/techdocs-runner/Dockerfile (1)
  • harbor.webgrip.dev/webgrip/techdocs-builder 1.8.0@sha256:2726a41cd7f3d40813baf3301a65b7f1cc6fa47d43518d57b3f1f0e4dc95150a
ops/docker/vikunja-mcp/Dockerfile (1)
  • @aimbitgmbh/vikunja-mcp 0.1.0
renovate-config (1)
renovate.json (1)
  • webgrip/renovate-config v1.5.3
This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Abandoned Dependencies The following dependencies have not received updates for an extended period and may be unmaintained. <details> <summary>View abandoned dependencies (1)</summary> > ℹ️ **Note** > Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity. > | Datasource | Package | Last Updated | |------------|------|-------------| | regex | [cross](https://github.com/cross-rs/cross) | `2023-02-04` | </details> ## Pending Approval The following branches are pending approval. To create them, click on a checkbox below. - [ ] <!-- approve-branch=renovate/pin-dependencies -->chore(deps): pin dependencies (`docker/dockerfile`, `harbor.webgrip.dev/ghcr/gitleaks/gitleaks`) - [ ] <!-- approve-branch=renovate/lycheeverse-lychee-rollback -->chore(deps): roll back dependency lycheeverse/lychee to v0.15.1 - [ ] <!-- approve-branch=renovate/docker.io-library-eclipse-temurin-11.0.31_11-jre-jammy -->chore(deps): update docker.io/library/eclipse-temurin:11.0.31_11-jre-jammy docker digest ( 76ffb74 ➔ e8acde9 ) - [ ] <!-- approve-branch=renovate/docker.io-library-python-3.12-slim-bookworm -->chore(deps): update docker.io/library/python:3.12-slim-bookworm docker digest ( 4766d8b ➔ a116514 ) - [ ] <!-- approve-branch=renovate/actions-checkout-7.0.x -->ci(actions): Update actions/checkout action ( v7.0.0 ➔ v7.0.1 ) - [ ] <!-- approve-branch=renovate/anthropic-ai-claude-code-2.1.x -->fix(deps): update dependency @anthropic-ai/claude-code ( 2.1.223 ➔ 2.1.232 ) - [ ] <!-- approve-branch=renovate/moonrepo-cli-2.4.x -->fix(deps): update dependency @moonrepo/cli ( 2.4.4 ➔ 2.4.6 ) - [ ] <!-- approve-branch=renovate/cargo-release-1.1.x -->fix(deps): update dependency cargo-release ( 1.1.4 ➔ 1.1.5 ) - [ ] <!-- approve-branch=renovate/mikefarah-yq-4.44.x -->fix(deps): update dependency mikefarah/yq ( v4.44.3 ➔ v4.44.6 ) - [ ] <!-- approve-branch=renovate/sigstore-cosign-2.6.x -->fix(deps): update dependency sigstore/cosign ( v2.6.4 ➔ v2.6.5 ) - [ ] <!-- approve-branch=renovate/docker.io-library-rust-1.97.x -->fix(deps): update docker.io/library/rust docker tag ( 1.97.0 ➔ 1.97.1 ) - [ ] <!-- approve-branch=renovate/ghcr.io-astral-sh-uv-0.9.x -->fix(deps): update ghcr.io/astral-sh/uv docker tag ( 0.9.2 ➔ 0.9.30 ) - [ ] <!-- approve-branch=renovate/harbor.webgrip.dev-webgrip-rust-ci-runner-1.4.x -->fix(deps): update harbor.webgrip.dev/webgrip/rust-ci-runner docker tag ( 1.4.0 ➔ 1.4.1 ) - [ ] <!-- approve-branch=renovate/mcr.microsoft.com-playwright-1.51.x -->fix(deps): update mcr.microsoft.com/playwright docker tag ( v1.51.0 ➔ v1.51.1 ) - [ ] <!-- approve-branch=renovate/node-20.19.x -->fix(deps): update node.js ( v20.19.5 ➔ v20.19.6 ) - [ ] <!-- approve-branch=renovate/fission-ai-openspec-1.x -->feat(deps): update dependency @fission-ai/openspec ( 1.6.0 ➔ 1.9.0 ) - [ ] <!-- approve-branch=renovate/anchore-syft-1.x -->feat(deps): update dependency anchore/syft ( v1.50.0 ➔ v1.51.0 ) - [ ] <!-- approve-branch=renovate/helm-helm-3.x -->feat(deps): update dependency helm/helm ( v3.18.6 ➔ v3.21.3 ) - [ ] <!-- approve-branch=renovate/kubernetes-kubernetes-1.x -->feat(deps): update dependency kubernetes/kubernetes ( v1.34.10 ➔ v1.36.3 ) - [ ] <!-- approve-branch=renovate/mikefarah-yq-4.x -->feat(deps): update dependency mikefarah/yq ( v4.44.3 ➔ v4.53.3 ) - [ ] <!-- approve-branch=renovate/docker.io-library-docker-29.x -->feat(deps): update docker.io/library/docker docker tag ( 29.5.3 ➔ 29.7.2 ) - [ ] <!-- approve-branch=renovate/docker.io-library-python-3.x -->feat(deps): update docker.io/library/python docker tag ( 3.12 ➔ 3.14 ) - [ ] <!-- approve-branch=renovate/ghcr.io-actions-actions-runner-2.x -->feat(deps): update ghcr.io/actions/actions-runner docker tag ( 2.335.1 ➔ 2.336.0 ) - [ ] <!-- approve-branch=renovate/ghcr.io-astral-sh-uv-0.x -->feat(deps): update ghcr.io/astral-sh/uv docker tag ( 0.9.2 ➔ 0.12.4 ) - [ ] <!-- approve-branch=renovate/mcr.microsoft.com-playwright-1.x -->feat(deps): update mcr.microsoft.com/playwright docker tag ( v1.51.0 ➔ v1.62.1 ) - [ ] <!-- approve-branch=renovate/node-20.x -->feat(deps): update node.js ( v20.19.5 ➔ v20.20.2 ) - [ ] <!-- approve-branch=renovate/helm-helm-4.x -->feat(deps)!: Update dependency helm/helm to v4.2.4 - [ ] <!-- approve-branch=renovate/sigstore-cosign-3.x -->feat(deps)!: Update dependency sigstore/cosign ( v2.6.4 ➔ v3.1.3 ) - [ ] <!-- approve-branch=renovate/node-22.x -->feat(deps)!: Update Node.js ( v20.19.5 ➔ v22.23.2 ) - [ ] <!-- approve-branch=renovate/node-24.x -->feat(deps)!: Update Node.js ( v20.19.5 ➔ v24.19.0 ) - [ ] <!-- approve-all-pending-prs -->🔐 **Create all pending approval PRs at once** 🔐 --- > ⚠️ **Warning** > > Renovate failed to look up the following dependencies: `Failed to look up docker package dhi.io/alpine-base: no-result`, `Failed to look up docker package dhi.io/golang: no-result`, `Failed to look up docker package dhi.io/static: no-result`, `Failed to look up docker package dhi.io/grype: no-result`, `Failed to look up docker package dhi.io/node: no-result`, `Failed to look up docker package dhi.io/python: no-result`. > > Files affected: `ops/docker/act-runner/Dockerfile`, `ops/docker/cve-gate/Dockerfile`, `ops/docker/helm-deploy/Dockerfile`, `ops/docker/node-ci-runner/Dockerfile`, `ops/docker/semantic-release-monorepo/Dockerfile`, `ops/docker/semantic-release/Dockerfile`, `ops/docker/techdocs-builder/Dockerfile` --- ## Vulnerabilities > ❗ **Important** > > `0`/`4` CVEs have Renovate fixes. <details><summary>regex</summary> <blockquote> <details><summary>ops/docker/agent-runner/Dockerfile</summary> <blockquote> <details><summary>pyyaml</summary> <blockquote> - [GHSA-8q59-q68h-6hv4](https://osv.dev/vulnerability/GHSA-8q59-q68h-6hv4) - [GHSA-rprw-h62v-c2w7](https://osv.dev/vulnerability/GHSA-rprw-h62v-c2w7) - [PYSEC-2018-49](https://osv.dev/vulnerability/PYSEC-2018-49) - [PYSEC-2021-142](https://osv.dev/vulnerability/PYSEC-2021-142) </blockquote> </details> </blockquote> </details> </blockquote> </details> ## Detected Dependencies <details><summary>docker-compose (1)</summary> <blockquote> <details><summary>docker-compose.yml</summary> </details> </blockquote> </details> <details><summary>dockerfile (18)</summary> <blockquote> <details><summary>ops/docker/act-runner/Dockerfile</summary> </details> <details><summary>ops/docker/agent-runner/Dockerfile</summary> </details> <details><summary>ops/docker/ci-runner/Dockerfile (2)</summary> - `harbor.webgrip.dev/webgrip/cve-gate 0.3.4@sha256:6afd2c3aea931364810835b4c2f0121ad57f0b5c20f0b2ce44c336124e683bf2` - `ghcr.io/actions/actions-runner 2.335.1@sha256:08c30b0a7105f64bddfc485d2487a22aa03932a791402393352fdf674bda2c29` → [Updates: `2.336.0`] </details> <details><summary>ops/docker/cve-gate/Dockerfile</summary> </details> <details><summary>ops/docker/helm-deploy/Dockerfile</summary> </details> <details><summary>ops/docker/mkdocs-runner/Dockerfile (1)</summary> - `harbor.webgrip.dev/webgrip/techdocs-builder 1.8.0@sha256:2726a41cd7f3d40813baf3301a65b7f1cc6fa47d43518d57b3f1f0e4dc95150a` </details> <details><summary>ops/docker/node-ci-runner/Dockerfile (1)</summary> - `docker/dockerfile 1` → [Updates: `1`] </details> <details><summary>ops/docker/php-ci-runner/Dockerfile</summary> </details> <details><summary>ops/docker/playwright-runner/Dockerfile</summary> </details> <details><summary>ops/docker/rust-ci-runner/Dockerfile</summary> </details> <details><summary>ops/docker/rust-releaser/Dockerfile</summary> </details> <details><summary>ops/docker/semantic-release-monorepo/Dockerfile</summary> </details> <details><summary>ops/docker/semantic-release-rust/Dockerfile</summary> </details> <details><summary>ops/docker/semantic-release/Dockerfile</summary> </details> <details><summary>ops/docker/tauri-ci-runner/Dockerfile (1)</summary> - `harbor.webgrip.dev/webgrip/rust-ci-runner 1.4.0@sha256:2ef5fcb9b81ff145ae3a0f0263bdaf5098874fb40145a1e97c65e6e9023a6638` → [Updates: `1.4.1`] </details> <details><summary>ops/docker/techdocs-builder/Dockerfile (1)</summary> - `harbor.webgrip.dev/ghcr/gitleaks/gitleaks v8.30.1` → [Updates: `v8.30.1`] </details> <details><summary>ops/docker/techdocs-runner/Dockerfile (1)</summary> - `harbor.webgrip.dev/webgrip/techdocs-builder 1.8.0@sha256:2726a41cd7f3d40813baf3301a65b7f1cc6fa47d43518d57b3f1f0e4dc95150a` </details> <details><summary>ops/docker/vikunja-mcp/Dockerfile</summary> </details> </blockquote> </details> <details><summary>github-actions (5)</summary> <blockquote> <details><summary>.forgejo/actions/semantic-release-monorepo/action.yml (4)</summary> - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `node 24` </details> <details><summary>.forgejo/workflows/measure_cve_budgets.yml (1)</summary> - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] </details> <details><summary>.forgejo/workflows/on_docs_change.yml</summary> </details> <details><summary>.forgejo/workflows/on_release_published.yml (1)</summary> - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] </details> <details><summary>.forgejo/workflows/on_source_change.yml (3)</summary> - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] </details> </blockquote> </details> <details><summary>regex (20)</summary> <blockquote> <details><summary>.forgejo/actions/cosign-sign-attest/action.yml (2)</summary> - `sigstore/cosign v2.6.4` → [Updates: `v2.6.5`, `v3.1.3`] - `anchore/syft v1.50.0` → [Updates: `v1.51.0`] </details> <details><summary>.forgejo/actions/semantic-release-monorepo/action.yml</summary> </details> <details><summary>ops/docker/act-runner/Dockerfile (2)</summary> - `dhi.io/alpine-base 3.23-dev@sha256:a5d8ac99e233c9141bbefb2afa1809923f420aeeeb11e9dbb463d0bddb943327` - `nektos/act 0.2.89` </details> <details><summary>ops/docker/agent-runner/Dockerfile (8)</summary> - `ghcr.io/astral-sh/uv 0.9.2@sha256:6dbd7c42a9088083fa79e41431a579196a189bcee3ae68ba904ac2bf77765867` → [Updates: `0.9.30`, `0.12.4`] - `docker.io/library/node 24-bookworm-slim@sha256:3638d9a6fe4030bd716be989438248074489337ba3275657f93595428be4fc03` - `docker.io/library/docker 29.5.3-cli@sha256:11e1133c30f3ceb73c6bdc7dfb78b3f9ed8e8e0d1d0400e91c5ec2eb240bf2ff` → [Updates: `29.7.2-cli`] - `docker.io/library/python 3.12-slim-bookworm@sha256:4766d8b510c428e595d74b9cc5bbb2fae8e26316fffb4adc89908d79aacd58a2` → [Updates: `3.14-slim-bookworm`, `3.12-slim-bookworm`] - `openhands 1.16.0` - `@moonrepo/cli 2.4.4` → [Updates: `2.4.6`] - `@fission-ai/openspec 1.6.0` → [Updates: `1.9.0`] - `pyyaml 6.0.3` </details> <details><summary>ops/docker/ci-runner/Dockerfile (7)</summary> - `harbor.webgrip.dev/webgrip/cve-gate 0.3.4@sha256:6afd2c3aea931364810835b4c2f0121ad57f0b5c20f0b2ce44c336124e683bf2` - `helm/helm 3.21.3` → [Updates: `4.2.4`] - `mikefarah/yq 4.53.3` - `sigstore/cosign 2.6.4` → [Updates: `2.6.5`, `3.1.3`] - `anchore/syft 1.50.0` → [Updates: `1.51.0`] - `node 20.19.5` → [Updates: `20.19.6`, `20.20.2`, `22.23.2`, `24.19.0`] - `@anthropic-ai/claude-code 2.1.223` → [Updates: `2.1.232`] </details> <details><summary>ops/docker/cve-gate/Dockerfile (3)</summary> - `dhi.io/golang 1.26.5-alpine3.23-dev@sha256:f748c8d66b258cc04e8f3c90ac65190716faec01f0f5acc633bdeb36a90beda8` - `dhi.io/static 20260611-musl-alpine3.23@sha256:2050f91d1b5038e65cf406d533b845e92651dca16367744e6d28c92c8eadb638` - `dhi.io/grype 0.116.1-alpine3.23@sha256:90b143fb0da1d7fc61ae86b6e4da973e23ddabe6a9f5a73844bc9708b7017c9e` </details> <details><summary>ops/docker/helm-deploy/Dockerfile (6)</summary> - `dhi.io/alpine-base 3.23-dev@sha256:a5d8ac99e233c9141bbefb2afa1809923f420aeeeb11e9dbb463d0bddb943327` - `kubernetes/kubernetes v1.34.10` → [Updates: `v1.36.3`] - `helm/helm 3.18.6` → [Updates: `3.21.3`, `4.2.4`] - `digitalocean/doctl 1.166.0` - `mikefarah/yq 4.53.3` - `getsops/sops 3.13.3` </details> <details><summary>ops/docker/mkdocs-runner/Dockerfile (1)</summary> - `harbor.webgrip.dev/webgrip/techdocs-builder 1.8.0@sha256:2726a41cd7f3d40813baf3301a65b7f1cc6fa47d43518d57b3f1f0e4dc95150a` </details> <details><summary>ops/docker/node-ci-runner/Dockerfile (1)</summary> - `dhi.io/node 24.19.0-alpine3.23-dev@sha256:d00350837e082dc254939ffcf53861b3b965ff159e506d6ab1775710f91a82fe` </details> <details><summary>ops/docker/php-ci-runner/Dockerfile (1)</summary> - `extism/extism 1.30.0` </details> <details><summary>ops/docker/playwright-runner/Dockerfile (1)</summary> - `mcr.microsoft.com/playwright v1.51.0-noble@sha256:dcc7a57c035cea22d94ef62edaf4e63b2d84352d990f936424344c6b05a3d9b4` → [Updates: `v1.51.1-noble`, `v1.62.1-noble`] </details> <details><summary>ops/docker/rust-ci-runner/Dockerfile (2)</summary> - `docker.io/library/rust 1.97.0-slim-bookworm@sha256:6d220bf85c74e842a79da63997af8d2e74455c0b8847d8bb3a5888572334991d` → [Updates: `1.97.1-slim-bookworm`] - `docker.io/library/rust 1.97.0` → [Updates: `1.97.1`] </details> <details><summary>ops/docker/rust-releaser/Dockerfile (7)</summary> - `docker.io/library/node 24-bookworm-slim@sha256:3638d9a6fe4030bd716be989438248074489337ba3275657f93595428be4fc03` - `docker.io/library/rust 1.97.0` → [Updates: `1.97.1`] - `cargo-release 1.1.4` → [Updates: `1.1.5`] - `git-cliff 2.13.1` - `cross 0.2.5` - `wasm-bindgen-cli 0.2.127` - `semantic-release 25.0.9` </details> <details><summary>ops/docker/semantic-release-monorepo/Dockerfile (2)</summary> - `dhi.io/node 24.19.0-alpine3.23-dev@sha256:d00350837e082dc254939ffcf53861b3b965ff159e506d6ab1775710f91a82fe` - `mikefarah/yq v4.44.3` → [Updates: `v4.44.6`, `v4.53.3`] </details> <details><summary>ops/docker/semantic-release-rust/Dockerfile (3)</summary> - `docker.io/library/node 24-bookworm-slim@sha256:3638d9a6fe4030bd716be989438248074489337ba3275657f93595428be4fc03` - `mikefarah/yq v4.44.3` → [Updates: `v4.44.6`, `v4.53.3`] - `docker.io/library/rust 1.97.0` → [Updates: `1.97.1`] </details> <details><summary>ops/docker/semantic-release/Dockerfile (2)</summary> - `dhi.io/node 24.19.0-alpine3.23-dev@sha256:d00350837e082dc254939ffcf53861b3b965ff159e506d6ab1775710f91a82fe` - `mikefarah/yq v4.44.3` → [Updates: `v4.44.6`, `v4.53.3`] </details> <details><summary>ops/docker/tauri-ci-runner/Dockerfile (1)</summary> - `harbor.webgrip.dev/webgrip/rust-ci-runner 1.4.0@sha256:2ef5fcb9b81ff145ae3a0f0263bdaf5098874fb40145a1e97c65e6e9023a6638` → [Updates: `1.4.1`] </details> <details><summary>ops/docker/techdocs-builder/Dockerfile (4)</summary> - `dhi.io/node 24.19.0-alpine3.23-dev@sha256:d00350837e082dc254939ffcf53861b3b965ff159e506d6ab1775710f91a82fe` - `dhi.io/python 3.13.15-alpine3.24-dev@sha256:8e51f99fa957d0b2531c4936b178d67d997e76fe48d7150357143295a03b1fd4` - `docker.io/library/eclipse-temurin 11.0.31_11-jre-jammy@sha256:76ffb747ad3a62a8b81ac3c76e2c3b1c06e475b1e10109d0a4dd604db627c9f5` → [Updates: `11.0.31_11-jre-jammy`] - `lycheeverse/lychee 0.24.2` → [Updates: `v0.15.1`] </details> <details><summary>ops/docker/techdocs-runner/Dockerfile (1)</summary> - `harbor.webgrip.dev/webgrip/techdocs-builder 1.8.0@sha256:2726a41cd7f3d40813baf3301a65b7f1cc6fa47d43518d57b3f1f0e4dc95150a` </details> <details><summary>ops/docker/vikunja-mcp/Dockerfile (1)</summary> - `@aimbitgmbh/vikunja-mcp 0.1.0` </details> </blockquote> </details> <details><summary>renovate-config (1)</summary> <blockquote> <details><summary>renovate.json (1)</summary> - `webgrip/renovate-config v1.5.3` </details> </blockquote> </details>
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
webgrip/infrastructure#3
No description provided.