Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (2)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
bun	remark-gfm	2025-02-10
github-actions	slsa-framework/slsa-github-generator	2025-02-24

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update github-actions (major) (actions/setup-python, astral-sh/setup-uv)

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.1
• chore(deps): update github-actions (TrigenSoftware/simple-release-action, actions/checkout, actions/setup-java, github/codeql-action, ossf/scorecard-action, pypa/gh-action-pypi-publish, ruby/setup-ruby, zizmorcore/zizmor-action)
• chore(deps): update devdependencies (non-major) (@sentry/node-core, conventional-changelog, knip, meriyah, oxfmt, oxlint, posthog-node)
• chore(deps): update prototools toolchain (gh, npm)
• 🔐 Create all awaiting schedule PRs at once 🔐

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• chore(deps): lock file maintenance
• chore(deps): lock file maintenance
• chore(deps): lock file maintenance

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): lock file maintenance
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

bun (2)

docs/package.json (5)

• @astrojs/starlight ^0.41.0
• astro ^7.0.0
• posthog-js ^1.368.2
• remark-gfm ^4.0.1
• sharp ^0.35.0

package.json (19)

• @commander-js/extra-typings 15.0.0
• @commitlint/cli 21.2.1
• @commitlint/config-conventional 21.2.0
• @sentry/node-core 10.67.0 → [Updates: 10.69.0]
• @simple-release/npm 3.2.5
• @types/bun 1.3.14
• conventional-changelog 8.1.0 → [Updates: 8.1.1]
• conventional-changelog-angular 9.2.1
• czg 1.13.1
• fast-check 4.9.0
• inquirer 14.0.2
• knip 6.29.0 → [Updates: 6.32.0]
• meriyah 7.1.2 → [Updates: 7.3.1]
• oxfmt 0.60.0 → [Updates: 0.62.0]
• oxlint 1.75.0 → [Updates: 1.77.0]
• oxlint-tsgolint 7.0.2001
• posthog-node 5.46.0 → [Updates: 5.48.1]
• typescript 7.0.2
• zod 4.4.3

bundler (1)

shims/rubygem/Gemfile (3)

• rake "~> 13.0"
• minitest "~> 6.0"
• minitest-mock "~> 5.0"

github-actions (13)

.github/actions/setup-bun-project/action.yml (1)

• moonrepo/setup-toolchain v0.6.4@261c62cb5b0f580c7be7c8cd0f023a2e96756095

.github/workflows/code-pull-request.yml (25)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/setup-java v5.6.0@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 → [Updates: v5.7.0]
• actions/setup-dotnet v6.0.0@a98b56852c35b8e3190ac28c8c2271da59106c68
• ruby/setup-ruby v1.319.0@003a5c4d8d6321bd302e38f6f0ec593f77f06600 → [Updates: v1.321.0]
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• zizmorcore/zizmor-action v0.6.0@6599ee8b7a49aef6a770f63d261d214911a7ce02 → [Updates: v0.6.2]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• github/codeql-action v4.37.1@7188fc363630916deb702c7fdcf4e481b751f97a → [Updates: v4.37.4]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• python 3.12
• go 1.21
• ruby 4.0.6
• go 1.21

.github/workflows/codeql.yml (3)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• github/codeql-action v4.37.1@7188fc363630916deb702c7fdcf4e481b751f97a → [Updates: v4.37.4]
• github/codeql-action v4.37.1@7188fc363630916deb702c7fdcf4e481b751f97a → [Updates: v4.37.4]

.github/workflows/dco.yml (1)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]

.github/workflows/publish-shims.yml (13)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• pypa/gh-action-pypi-publish v1.14.0@cef221092ed1bacb1cc03d23a2d87d1d172e277b → [Updates: v1.14.2]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-dotnet v6.0.0@a98b56852c35b8e3190ac28c8c2271da59106c68
• NuGet/login v1.2.0@8d196754b4036150537f80ac539e15c2f1028841
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-java v5.6.0@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 → [Updates: v5.7.0]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• ruby/setup-ruby v1.319.0@003a5c4d8d6321bd302e38f6f0ec593f77f06600 → [Updates: v1.321.0]
• rubygems/release-gem v1.4.0@052cc82692552de3ef2b81fd670e41d13cba8092
• ruby 4.0.6

.github/workflows/release-binaries.yml (14)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• moonrepo/setup-toolchain v0.6.4@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• actions/attest-build-provenance v4.1.1@0f67c3f4856b2e3261c31976d6725780e5e4c373 → [Updates: v4.2.2]
• actions/attest-build-provenance v4.1.1@0f67c3f4856b2e3261c31976d6725780e5e4c373 → [Updates: v4.2.2]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• moonrepo/setup-toolchain v0.6.4@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/attest-build-provenance v4.1.1@0f67c3f4856b2e3261c31976d6725780e5e4c373 → [Updates: v4.2.2]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• slsa-framework/slsa-github-generator v2.1.0
• go 1.21

.github/workflows/release.yml (16)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• moonrepo/setup-toolchain v0.6.4@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• TrigenSoftware/simple-release-action v2.0.8@1d376657d9af2a93f280e071b7327d3203719e24 → [Updates: v2.0.9]
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• moonrepo/setup-toolchain v0.6.4@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• TrigenSoftware/simple-release-action v2.0.8@1d376657d9af2a93f280e071b7327d3203719e24 → [Updates: v2.0.9]
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• moonrepo/setup-toolchain v0.6.4@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• TrigenSoftware/simple-release-action v2.0.8@1d376657d9af2a93f280e071b7327d3203719e24 → [Updates: v2.0.9]
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

.github/workflows/scorecard.yml (3)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a → [Updates: v2.4.4]
• github/codeql-action v4.37.1@7188fc363630916deb702c7fdcf4e481b751f97a → [Updates: v4.37.4]

.github/workflows/smoke-test-linux.yml (1)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]

.github/workflows/smoke-test-windows.yml (4)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• go 1.21

.github/workflows/track-adoption.yml

.github/workflows/update-llms.yaml (4)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• moonrepo/setup-toolchain v0.6.4@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• stefanzweifel/git-auto-commit-action v7.2.0@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d

.github/workflows/update-lock.yaml (4)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• moonrepo/setup-toolchain v0.6.4@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• stefanzweifel/git-auto-commit-action v7.2.0@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d

gomod (1)

shims/go/go.mod (1)

• go 1.21

maven (1)

shims/maven/pom.xml (7)

• org.junit.jupiter:junit-jupiter 5.14.4
• org.apache.maven.plugins:maven-jar-plugin 3.5.0 → [Updates: 3.5.1]
• org.apache.maven.plugins:maven-surefire-plugin 3.5.6
• org.apache.maven.plugins:maven-gpg-plugin 3.2.8
• org.apache.maven.plugins:maven-source-plugin 3.4.0
• org.apache.maven.plugins:maven-javadoc-plugin 3.12.0
• org.sonatype.central:central-publishing-maven-plugin 0.11.0

nuget (1)

shims/nuget/tests/Archgate.Tool.Tests/Archgate.Tool.Tests.csproj (4)

• coverlet.collector 10.*
• xunit.runner.visualstudio 3.*
• xunit.v3 3.*
• Microsoft.NET.Test.Sdk 18.*

pep621 (1)

shims/pypi/pyproject.toml (1)

• python >=3.8

proto (1)

.prototools (4)

• bun 1.3.14
• node 24
• npm 12.0.1 → [Updates: 12.0.2]
• gh 2.96.0 → [Updates: 2.97.0]

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository