Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (2)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
bun	remark-gfm	2025-02-10
github-actions	slsa-framework/slsa-github-generator	2025-02-24

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update dependency @commander-js/extra-typings to v15
• chore(deps): update dotnet dependencies (Microsoft.NET.Test.Sdk, coverlet.collector)
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update github-actions (actions/checkout, astral-sh/setup-uv, github/codeql-action)
• chore(deps): update devdependencies (non-major) (@commitlint/cli, @commitlint/config-conventional, @sentry/node-core, inquirer, knip, oxfmt, oxlint, posthog-node)
• chore(deps): update java dependencies to v3.5.6
• chore(deps): update prototools toolchain to v2.93.0
• fix(deps): update docs dependencies (@astrojs/starlight, sharp)
• chore(deps): lock file maintenance
• chore(deps): lock file maintenance docs dependencies
• chore(deps): lock file maintenance dotnet dependencies
• chore(deps): lock file maintenance python dependencies
• chore(deps): lock file maintenance ruby dependencies
• 🔐 Create all awaiting schedule PRs at once 🔐

Detected Dependencies

bun (2)

docs/package.json (5)

• @astrojs/starlight ^0.39.0 → [Updates: ^0.40.0]
• astro ^6.0.0
• posthog-js ^1.368.2
• remark-gfm ^4.0.1
• sharp ^0.34.1 → [Updates: ^0.35.0]

package.json (18)

• @commander-js/extra-typings 14.0.0 → [Updates: 15.0.0]
• @commitlint/cli 21.0.1 → [Updates: 21.0.2]
• @commitlint/config-conventional 21.0.1 → [Updates: 21.0.2]
• @sentry/node-core 10.54.0 → [Updates: 10.57.0]
• @simple-release/npm 2.3.0
• @types/bun 1.3.14
• conventional-changelog 7.2.0
• conventional-changelog-angular 8.3.1
• czg 1.13.1
• fast-check 4.8.0
• inquirer 14.0.0 → [Updates: 14.0.2]
• knip 6.14.2 → [Updates: 6.16.1]
• meriyah 7.1.0
• oxfmt 0.52.0 → [Updates: 0.54.0]
• oxlint 1.67.0 → [Updates: 1.69.0]
• posthog-node 5.35.5 → [Updates: 5.36.15]
• zod 4.4.3
• typescript ^5 || ^6.0.0

bundler (1)

shims/rubygem/Gemfile (3)

• rake "~> 13.0"
• minitest "~> 6.0"
• minitest-mock "~> 5.0"

github-actions (13)

.github/actions/setup-bun-project/action.yml (1)

• moonrepo/setup-toolchain v0@261c62cb5b0f580c7be7c8cd0f023a2e96756095

.github/workflows/code-pull-request.yml (18)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654
• actions/setup-dotnet v5@9a946fdbd5fb07b82b2f5a4466058b876ab72bb2
• ruby/setup-ruby v1.310.0@afeafc3d1ab54a631816aba4c914a0081c12ff2f → [Updates: v1.313.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• python 3.12
• go 1.21
• ruby 4.0.5

.github/workflows/codeql.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4.36.2]
• github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4.36.2]

.github/workflows/dco.yml (1)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]

.github/workflows/publish-shims.yml (13)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.2.0]
• pypa/gh-action-pypi-publish v1.14.0@cef221092ed1bacb1cc03d23a2d87d1d172e277b
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-dotnet v5@9a946fdbd5fb07b82b2f5a4466058b876ab72bb2
• NuGet/login v1.2.0@8d196754b4036150537f80ac539e15c2f1028841
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• ruby/setup-ruby v1.310.0@afeafc3d1ab54a631816aba4c914a0081c12ff2f → [Updates: v1.313.0]
• rubygems/release-gem v1.2.0@6317d8d1f7e28c24d28f6eff169ea854948bd9f7 → [Updates: v1.4.0]
• ruby 4.0.5

.github/workflows/release-binaries.yml (8)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• moonrepo/setup-toolchain v0@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• actions/attest-build-provenance v4@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32
• actions/attest-build-provenance v4@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• slsa-framework/slsa-github-generator v2.1.0

.github/workflows/release.yml (16)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• moonrepo/setup-toolchain v0@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• TrigenSoftware/simple-release-action v1.1.8@e7293dad843693d8692d443c3f21b78338048f13
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• moonrepo/setup-toolchain v0@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• TrigenSoftware/simple-release-action v1.1.8@e7293dad843693d8692d443c3f21b78338048f13
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• moonrepo/setup-toolchain v0@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• TrigenSoftware/simple-release-action v1.1.8@e7293dad843693d8692d443c3f21b78338048f13
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae

.github/workflows/scorecard.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4.36.2]

.github/workflows/smoke-test-linux.yml (1)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]

.github/workflows/smoke-test-windows.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/track-adoption.yml

.github/workflows/update-llms.yaml (4)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• moonrepo/setup-toolchain v0@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• stefanzweifel/git-auto-commit-action v7@04702edda442b2e678b25b537cec683a1493fcb9

.github/workflows/update-lock.yaml (4)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• moonrepo/setup-toolchain v0@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• stefanzweifel/git-auto-commit-action v7@04702edda442b2e678b25b537cec683a1493fcb9

gomod (1)

shims/go/go.mod (1)

• go 1.21

maven (1)

shims/maven/pom.xml (7)

• org.junit.jupiter:junit-jupiter 5.14.4
• org.apache.maven.plugins:maven-jar-plugin 3.5.0
• org.apache.maven.plugins:maven-surefire-plugin 3.5.5 → [Updates: 3.5.6]
• org.apache.maven.plugins:maven-gpg-plugin 3.2.8
• org.apache.maven.plugins:maven-source-plugin 3.4.0
• org.apache.maven.plugins:maven-javadoc-plugin 3.12.0
• org.sonatype.central:central-publishing-maven-plugin 0.10.0

nuget (1)

shims/nuget/tests/Archgate.Tool.Tests/Archgate.Tool.Tests.csproj (4)

• coverlet.collector 6.* → [Updates: 10.*]
• xunit.runner.visualstudio 3.*
• xunit.v3 3.*
• Microsoft.NET.Test.Sdk 17.* → [Updates: 18.*]

pep621 (1)

shims/pypi/pyproject.toml (1)

• python >=3.8

proto (1)

.prototools (4)

• bun 1.3.14
• node 24
• npm 11.16.0 → [Updates: 11.17.0]
• gh 2.92.0 → [Updates: 2.93.0]

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository