Dependency Dashboard

[fro-bot]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Package lookup failures

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (2)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
npm	@octokit/webhooks-types	2024-10-03
npm	@semantic-release/git	2021-10-30

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• build(deps): maintain lockfiles

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• fix(deps): update dependency @aws-sdk/client-s3 to v3.1039.0

---

Warning

Renovate failed to look up the following dependencies: Failed to look up github-tags package pnpm/action-setup: no-result, Failed to look up github-tags package actions/setup-node: no-result, Failed to look up github-tags package actions/create-github-app-token: no-result, Failed to look up github-tags package actions/checkout: no-result, Failed to look up github-tags package dorny/paths-filter: no-result, Failed to look up github-tags package actions/upload-artifact: no-result, Failed to look up github-tags package actions/dependency-review-action: no-result, Failed to look up github-tags package github/codeql-action: no-result, Failed to look up github-tags package bfra-me/.github: no-result, Failed to look up github-tags package ossf/scorecard-action: no-result, Failed to look up github-releases package bfra-me/renovate-config: no-result, Failed to look up github-releases package anomalyco/opencode: no-result, Failed to look up github-releases package oven-sh/bun: no-result.

Files affected: .github/actions/setup/action.yaml, .github/workflows/auto-release.yaml, .github/workflows/ci.yaml, .github/workflows/codeql-analysis.yaml, .github/workflows/copilot-setup-steps.yaml, .github/workflows/fro-bot.yaml, .github/workflows/prepare-release-pr.yaml, .github/workflows/renovate.yaml, .github/workflows/scorecard.yaml, .github/workflows/update-repo-settings.yaml, .github/renovate.json5, packages/runtime/src/shared/constants.ts

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• build(deps): update dependency @opencode-ai/sdk to v1.14.28
• chore(deps): update pnpm to v10.33.2
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

github-actions (10)

.github/actions/setup/action.yaml (2)

• pnpm/action-setup v6.0.3@903f9c1a6ebcba6cf41d87230be49611ac97822e
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e

.github/workflows/auto-release.yaml (2)

• actions/create-github-app-token v3.1.1@1b10c78c7865c340bc4f6099eb2f838309f1e8c3
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/ci.yaml (11)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• dorny/paths-filter v4.0.1@fbd0ab8f3e69293af611ebaee6363fc25e6d187d
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/dependency-review-action v4.9.0@2031cfc080254a8a887f58cffee85186f0e49e48
• actions/create-github-app-token v3.1.1@1b10c78c7865c340bc4f6099eb2f838309f1e8c3
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/codeql-analysis.yaml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225

.github/workflows/copilot-setup-steps.yaml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/fro-bot.yaml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/prepare-release-pr.yaml (2)

• actions/create-github-app-token v3.1.1@1b10c78c7865c340bc4f6099eb2f838309f1e8c3
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/renovate.yaml (1)

• bfra-me/.github v4.16.8@bedac8bd7b81a7832ae494873da2971e5ea7a8d4

.github/workflows/scorecard.yaml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225

.github/workflows/update-repo-settings.yaml (1)

• bfra-me/.github v4.16.8@bedac8bd7b81a7832ae494873da2971e5ea7a8d4

nodenv (1)

.node-version (1)

• node 24.15.0

npm (4)

apps/action/package.json

package.json (35)

• @actions/artifact 6.2.1
• @actions/cache 6.0.0
• @actions/core 3.0.1
• @actions/exec 3.0.0
• @actions/github 9.1.1
• @actions/tool-cache 4.0.0
• @aws-sdk/client-s3 3.1037.0 → [Updates: 3.1039.0]
• @bfra.me/es 0.1.0
• @octokit/auth-app 8.2.0
• @opencode-ai/sdk 1.14.25 → [Updates: 1.14.28]
• @bfra.me/eslint-config 0.51.0
• @bfra.me/prettier-config 0.16.8
• @bfra.me/tsconfig 0.13.0
• @octokit/webhooks-types 7.6.1
• @semantic-release/exec 7.1.0
• @semantic-release/git 10.0.1
• @types/node 24.12.2
• @vitest/eslint-plugin 1.6.16
• conventional-changelog-conventionalcommits 9.3.1
• eslint 10.2.1
• eslint-config-prettier 10.1.8
• eslint-plugin-prettier 5.5.5
• generate-license-file 4.1.1
• jiti 2.6.1
• js-yaml 4.1.1
• lint-staged 16.4.0
• prettier 3.8.3
• read-package-up 12.0.0
• semantic-release 25.0.3
• simple-git-hooks 2.13.1
• tsdown 0.21.10
• typescript 6.0.3
• vitest 4.1.5
• pnpm 10.33.1 → [Updates: 10.33.2]
• fast-xml-parser >=5.7.0

packages/runtime/package.json (2)

• @bfra.me/es 0.1.0
• @opencode-ai/sdk 1.14.25 → [Updates: 1.14.28]

pnpm-workspace.yaml (11)

• brace-expansion >=5.0.5
• fast-xml-parser >=5.5.7
• flatted 3.4.2
• handlebars >=4.7.9
• lodash >=4.18.0
• lodash-es >=4.18.0
• picomatch >=4.0.4
• tar@^7 >=7.5.11
• undici@^7 >=7.24.0
• vite 8.0.10
• yaml >=2.8.3

regex (5)

.github/renovate.json5 (1)

• bfra-me/renovate-config 5.2.1

packages/runtime/src/shared/constants.ts (1)

• oh-my-openagent 3.17.6

packages/runtime/src/shared/constants.ts (1)

• anomalyco/opencode 1.14.29

packages/runtime/src/shared/constants.ts (1)

• oven-sh/bun 1.3.13

packages/runtime/src/shared/constants.ts (1)

• @fro.bot/systematic 2.6.1

renovate-config-presets (1)

.github/renovate.json5

---

• Check here to trigger a Renovate run on this repository