Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency make-fetch-happen to v15.0.2
• chore(deps): update dependency @npmcli/agent to v4

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency tar-fs to v3.1.1
• fix(deps): update dependency @npmcli/package-json to v7.0.1
• chore(deps): update dependency python to 3.13
• chore(deps): update ruby/setup-ruby action to v1.260.0
• fix(deps): update dependency npm-pick-manifest to v11
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency cacache to v20.0.1
• chore(deps): update dependency debug to v4.4.3
• chore(deps): update dependency @appthreat/atom to v2.4.0
• chore(deps): update dependency @bufbuild/protobuf to v2.8.0
• fix(deps): update dependency packageurl-js to v1.2.1
• chore(deps): update dependency escape-string-regexp to v5
• chore(deps): update dependency negotiator to v1
• chore(deps): update dependency sqlite3 to v7
• chore(deps): update dependency strip-json-comments to v4
• chore(deps): update dependency strip-json-comments to v5
• chore(deps): update dependency type-fest to v5
• fix(deps): update dependency packageurl-js to v2
• fix(deps): update dependency uuid to v12
• fix(deps): update dependency uuid to v13
• fix(deps): update dependency yargs to v18

Detected dependencies

dockerfile

ci/Dockerfile

ci/Dockerfile-bun

• almalinux 10.0-minimal

ci/Dockerfile-deno

ci/Dockerfile-ppc64

• almalinux 10.0-minimal

ci/Dockerfile-secure

ci/images/al10/Dockerfile.ruby-builder

• almalinux 10.0-minimal

ci/images/alpine/Dockerfile.dotnet9

• mcr.microsoft.com/dotnet/sdk 9.0-alpine

ci/images/alpine/Dockerfile.golang123

• golang 1.23.12-alpine

ci/images/alpine/Dockerfile.golang124

• golang 1.24.7-alpine

ci/images/alpine/Dockerfile.java21

• eclipse-temurin 21.0.8_9-jdk-alpine

ci/images/alpine/Dockerfile.java24

• eclipse-temurin 24.0.2_12-jdk-alpine

ci/images/alpine/Dockerfile.node20

• node 20.19.5-alpine

ci/images/alpine/Dockerfile.node24

• node 24.7.0-alpine

ci/images/alpine/Dockerfile.php84

• php 8.4.12-alpine

ci/images/alpine/Dockerfile.ruby34

• ruby 3.4.6-alpine

ci/images/debian/Dockerfile.dotnet10

• mcr.microsoft.com/dotnet/sdk 10.0-preview-trixie-slim

ci/images/debian/Dockerfile.dotnet6

• mcr.microsoft.com/dotnet/sdk 6.0-bookworm-slim

ci/images/debian/Dockerfile.dotnet8

• mcr.microsoft.com/dotnet/sdk 8.0

ci/images/debian/Dockerfile.dotnet9

• mcr.microsoft.com/dotnet/sdk 9.0

ci/images/debian/Dockerfile.golang123

• golang 1.23.12-bookworm

ci/images/debian/Dockerfile.golang124

• golang 1.24.7-bookworm

ci/images/debian/Dockerfile.php83

• php 8.3.25-bookworm

ci/images/debian/Dockerfile.php84

• php 8.4.12-bookworm

ci/images/debian/Dockerfile.ruby26

• ruby 2.6.10-slim

ci/images/debian/Dockerfile.ruby33

• ruby 3.3.8-slim

ci/images/debian/Dockerfile.ruby34

• ruby 3.4.6-slim

ci/images/debian/Dockerfile.rust1

• rust 1.89.0-slim-bookworm

ci/images/debian/Dockerfile.swift6

• debian 12.12

ci/images/Dockerfile.dotnet7

• registry.suse.com/bci/dotnet-sdk 7.0

ci/images/Dockerfile.dotnet8

• registry.suse.com/bci/dotnet-sdk 8.0

ci/images/Dockerfile.dotnet9

• registry.suse.com/bci/dotnet-sdk 9.0

ci/images/Dockerfile.java11

• registry.suse.com/bci/openjdk-devel 11.0.25.0

ci/images/Dockerfile.java17

• registry.suse.com/bci/openjdk-devel 17.0.16.0

ci/images/Dockerfile.java17-slim

• registry.suse.com/bci/openjdk-devel 17.0.16.0

ci/images/Dockerfile.node20

• registry.suse.com/bci/nodejs 20.19.2

ci/images/Dockerfile.python311

• registry.suse.com/bci/python 3.11

ci/images/Dockerfile.python312

• registry.suse.com/bci/python 3.12

ci/images/Dockerfile.python313

• registry.suse.com/bci/python 3.13

ci/images/Dockerfile.python36

• registry.suse.com/bci/python 3.6

ci/images/Dockerfile.ruby25

• registry.suse.com/bci/ruby 2.5

ci/images/opensuse/Dockerfile.python310

• registry.opensuse.org/opensuse/bci/python 3.10

ci/images/opensuse/Dockerfile.python39

• registry.opensuse.org/opensuse/bci/python 3.9

ci/images/opensuse/Dockerfile.rolling

ci/images/temurin/Dockerfile.java21

• eclipse-temurin 21.0.8_9-jdk-ubi9-minimal

ci/images/temurin/Dockerfile.java24

• eclipse-temurin 24.0.2_12-jdk-ubi9-minimal

ci/images/temurin/Dockerfile.java8

• eclipse-temurin 8-jdk-ubi9-minimal

github-actions

.github/actions/build-docker-image/action.yml

• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83

.github/actions/build-docker-images-generate-attach-sboms/action.yml

• docker/metadata-action v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f

.github/workflows/binary-builds.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• shivammathur/setup-php 2.35.5@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f
• addnab/docker-run-action v3@4f65fabd2431ebc8d299f8e5a018d79a769ae185
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• softprops/action-gh-release v2.3.3@6cbd405e2c4e67a21c47fa9e383d020e4e28b836

.github/workflows/build-images.yml

.github/workflows/build-rolling-image.yml

.github/workflows/codeql.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• github/codeql-action v3.30.3@192325c86100d080feab897ff886c34abd4c83a3
• github/codeql-action v3.30.3@192325c86100d080feab897ff886c34abd4c83a3

.github/workflows/dockertests.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02

.github/workflows/fix-renovate-pnpm-checksum.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• mshick/add-pr-comment v2.8.2@b8f338c590a895d50bcbfa6c5859251edc8952fc
• EndBug/add-and-commit v9.1.4@a94899bca583c204427a224a7af87c02f9b325d5

.github/workflows/image-build.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• jlumbroso/free-disk-space main
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• oras-project/setup-oras v1.2.4@22ce207df3b08e061f537244349aac6ae1d214f6
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1

.github/workflows/java-reachables-test.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02

.github/workflows/lint.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• ubuntu 24.04

.github/workflows/nodejs.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-python v6.0.0@e797f83bcb11b83ae66e0230d6156d7c80228e7c
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• softprops/action-gh-release v2.3.3@6cbd405e2c4e67a21c47fa9e383d020e4e28b836
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• denoland/setup-deno v2.0.3@e95548e56dfa95d4e1a28d6f422fafe75c4c26fb
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• cachix/install-nix-action v31.6.1@7be5dee1421f63d07e71ce6e0a9f8a4b07c2a487
• cachix/cachix-action v16@0fc020193b5a1fa3ac4575aa3a7d3aa6a35435ad
• python 3.12

.github/workflows/npm-release.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1
• docker/metadata-action v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• cloudposse/github-action-matrix-outputs-write v1@ed06cf3a6bf23b8dce36d1cf0d63123885bb8375
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1
• docker/metadata-action v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• cloudposse/github-action-matrix-outputs-write v1@ed06cf3a6bf23b8dce36d1cf0d63123885bb8375
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1
• docker/metadata-action v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f
• int128/docker-manifest-create-action v2.8.0@736aaa0f6ae97b2fb7f43e8dcef3ab47a02ea96e
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• oras-project/setup-oras v1.2.4@22ce207df3b08e061f537244349aac6ae1d214f6
• jlumbroso/free-disk-space main
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1
• docker/metadata-action v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• softprops/action-gh-release v2.3.3@6cbd405e2c4e67a21c47fa9e383d020e4e28b836
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• oras-project/setup-oras v1.2.4@22ce207df3b08e061f537244349aac6ae1d214f6
• jlumbroso/free-disk-space main
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1
• docker/metadata-action v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• softprops/action-gh-release v2.3.3@6cbd405e2c4e67a21c47fa9e383d020e4e28b836
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• oras-project/setup-oras v1.2.4@22ce207df3b08e061f537244349aac6ae1d214f6
• jlumbroso/free-disk-space main
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1
• docker/metadata-action v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• softprops/action-gh-release v2.3.3@6cbd405e2c4e67a21c47fa9e383d020e4e28b836
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• oras-project/setup-oras v1.2.4@22ce207df3b08e061f537244349aac6ae1d214f6
• jlumbroso/free-disk-space main
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1
• docker/metadata-action v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• oras-project/setup-oras v1.2.4@22ce207df3b08e061f537244349aac6ae1d214f6
• jlumbroso/free-disk-space main
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1
• docker/metadata-action v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• softprops/action-gh-release v2.3.3@6cbd405e2c4e67a21c47fa9e383d020e4e28b836
• ubuntu 24.04
• ubuntu 24.04-arm
• ubuntu 24.04

.github/workflows/nydus-demo.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8

.github/workflows/python-atom-tests.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• coursier/cache-action v6.4.7@4e2615869d13561d626ed48655e1a39e5b192b3c
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8

.github/workflows/rebuild-release-images.yml

.github/workflows/renovate.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444

.github/workflows/repotests.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• denoland/setup-deno v2.0.3@e95548e56dfa95d4e1a28d6f422fafe75c4c26fb
• oven-sh/setup-bun v2.0.2@735343b667d3e6f658f44d0eca948eb6282f2b76
• sbt/setup-sbt v1.1.13@17575ea4e18dd928fe5968dbe32294b97923d65b
• android-actions/setup-android v3.2.2@9fc6c4e9069bf8d3d10b2204b1fb8f6ef7065407
• ruby/setup-ruby v1.259.0@866b91cc020931c510d42e43e498a7f07d335f60
• actions/setup-python v6.0.0@e797f83bcb11b83ae66e0230d6156d7c80228e7c
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• dtolnay/rust-toolchain stable
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• sbt/setup-sbt v1.1.13@17575ea4e18dd928fe5968dbe32294b97923d65b
• coursier/setup-action v1.3.9@039f736548afa5411c1382f40a5bd9c2d30e0383
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• sbt/setup-sbt v1.1.13@17575ea4e18dd928fe5968dbe32294b97923d65b
• coursier/setup-action v1.3.9@039f736548afa5411c1382f40a5bd9c2d30e0383
• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444
• sbt/setup-sbt v1.1.13@17575ea4e18dd928fe5968dbe32294b97923d65b
• actions/setup-python v6.0.0@e797f83bcb11b83ae66e0230d6156d7c80228e7c
• ruby/setup-ruby v1.259.0@866b91cc020931c510d42e43e498a7f07d335f60
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• go 1.25.1
• go 1.25.1
• python 3.12
• go 1.25.1
• python 3.12

.github/workflows/rerun-workflow.yml

.github/workflows/snapshot-tests.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02

.github/workflows/test-nodejs-nightly.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v5.0.0@a0853c24544627f65ddf259abe73b1d18a591444

jsonata

biome.json

• @biomejs/biome 2.2.4

package.json

• node 24.8.0
• bun 1.2.22
• deno 2.5.1

npm

package.json

• @babel/parser 7.28.4
• @babel/traverse 7.28.4
• @iarna/toml 2.2.5
• @isaacs/string-locale-compare 1.1.0
• @npmcli/fs 4.0.0
• @npmcli/installed-package-contents 3.0.0
• @npmcli/map-workspaces 5.0.0
• @npmcli/name-from-folder 3.0.0
• @npmcli/package-json 7.0.0
• @npmcli/query 4.0.1
• @npmcli/redact 3.2.2
• ajv 8.17.1
• ajv-formats 3.0.1
• bin-links 5.0.0
• cheerio 1.1.2
• common-ancestor-path 1.0.1
• edn-data 1.1.2
• encoding 0.1.13
• glob 11.0.3
• global-agent 3.0.0
• got 14.4.9
• hosted-git-info 9.0.0
• iconv-lite 0.7.0
• json-stringify-nice 1.1.4
• jws 4.0.0
• minimatch 10.0.3
• node-stream-zip 1.15.0
• npm-install-checks 7.1.2
• npm-package-arg 13.0.0
• npm-pick-manifest 10.0.0
• packageurl-js 1.0.2
• parse-conflict-json 4.0.0
• prettify-xml 1.2.0
• proc-log 5.0.0
• proggy 3.0.0
• promise-all-reject-late 1.0.1
• promise-call-limit 3.0.2
• properties-reader 2.3.0
• read-package-json-fast 4.0.0
• semver 7.7.2
• ssri 12.0.0
• table 6.9.0
• tar 7.4.3
• treeverse 3.0.0
• uuid 11.1.0
• walk-up-path 4.0.0
• xml-js 1.6.11
• yaml 2.8.1
• yargs 17.7.2
• yoctocolors 2.1.2
• @biomejs/biome 2.2.4
• poku 3.0.2
• typescript 5.9.2
• @appthreat/atom 2.3.0
• @appthreat/cdx-proto 1.1.4
• @bufbuild/protobuf 2.6.3
• @cyclonedx/cdxgen-plugins-bin 1.7.0
• @cyclonedx/cdxgen-plugins-bin-darwin-amd64 1.7.0
• @cyclonedx/cdxgen-plugins-bin-darwin-arm64 1.7.0
• @cyclonedx/cdxgen-plugins-bin-linux-amd64 1.7.0
• @cyclonedx/cdxgen-plugins-bin-linux-arm 1.7.0
• @cyclonedx/cdxgen-plugins-bin-linux-arm64 1.7.0
• @cyclonedx/cdxgen-plugins-bin-linux-ppc64 1.7.0
• @cyclonedx/cdxgen-plugins-bin-linuxmusl-amd64 1.7.0
• @cyclonedx/cdxgen-plugins-bin-linuxmusl-arm64 1.7.0
• @cyclonedx/cdxgen-plugins-bin-windows-amd64 1.7.0
• @cyclonedx/cdxgen-plugins-bin-windows-arm64 1.7.0
• body-parser 2.2.0
• compression 1.8.1
• connect 3.7.0
• jsonata 2.1.0
• sequelize 6.37.7
• sqlite3 6.0.9
• node >=20
• pnpm 10.17.0
• pnpm 10.17.0
• @npmcli/agent 3.0.0
• @npmcli/fs 4.0.0
• abbrev 3.0.1
• cacache 20.0.0
• chownr 3.0.0
• debug 4.4.1
• escape-string-regexp 4.0.0
• glob 11.0.3
• iconv-lite 0.7.0
• ini 5.0.0
• is-stream 4.0.1
• isexe 3.1.1
• json-parse-even-better-errors 4.0.0
• jwa 2.0.1
• lru-cache 11.2.1
• make-fetch-happen 15.0.1
• minimatch 10.0.3
• minizlib 3.0.2
• mkdirp 3.0.1
• ms 2.1.3
• negotiator 0.6.4
• node-gyp 11.4.2
• nopt 8.1.0
• on-finished 2.4.1
• proc-log 5.0.0
• semver 7.7.2
• signal-exit 4.1.0
• sprintf-js 1.1.3
• ssri 12.0.0
• statuses 2.0.2
• strip-json-comments 3.1.1
• tar 7.4.3
• type-fest 4.41.0
• unique-filename 4.0.0
• unique-slug 5.0.0
• uuid 11.1.0
• which 5.0.0
• write-file-atomic 6.0.0
• yallist 5.0.0
• yargs 17.7.2
• @npmcli/agent 3.0.0
• @npmcli/fs 4.0.0
• abbrev 3.0.1
• cacache 20.0.0
• chownr 3.0.0
• debug 4.4.1
• escape-string-regexp 4.0.0
• glob 11.0.3
• iconv-lite 0.7.0
• ini 5.0.0
• is-stream 4.0.1
• isexe 3.1.1
• json-parse-even-better-errors 4.0.0
• jwa 2.0.1
• lru-cache 11.2.1
• make-fetch-happen 15.0.1
• minimatch 10.0.3
• minizlib 3.0.2
• mkdirp 3.0.1
• ms 2.1.3
• negotiator 0.6.4
• node-gyp 11.4.2
• nopt 8.1.0
• on-finished 2.4.1
• proc-log 5.0.0
• semver 7.7.2
• signal-exit 4.1.0
• sprintf-js 1.1.3
• ssri 12.0.0
• statuses 2.0.2
• strip-json-comments 3.1.1
• tar 7.4.3
• tar-fs 3.1.0
• type-fest 4.41.0
• unique-filename 4.0.0
• unique-slug 5.0.0
• uuid 11.1.0
• which 5.0.0
• write-file-atomic 6.0.0
• yallist 5.0.0
• yargs 17.7.2

nvm

.nvmrc

• node 24.8.0

regex

.versions/node_20

• node 20.19.5

.versions/node_21

• node 21.7.3

.versions/node_22

• node 22.19.0

.versions/node_23

• node 23.11.1

.versions/node_24

• node 24.8.0

ci/Dockerfile

• gradle 8.14.3
• golang 1.25.1
• node 24.8.0

ci/Dockerfile-bun

• gradle 8.14.3
• golang 1.25.1

ci/Dockerfile-deno

• gradle 8.14.3
• golang 1.25.1

ci/Dockerfile-ppc64

• gradle 8.14.3
• golang 1.25.1

ci/images/debian/Dockerfile.dotnet10

• node 24.8.0

ci/images/debian/Dockerfile.dotnet6

• node 22.19.0

ci/images/debian/Dockerfile.dotnet8

• node 24.8.0

ci/images/debian/Dockerfile.dotnet9

• node 24.8.0

ci/images/debian/Dockerfile.golang123

• node 24.8.0

ci/images/debian/Dockerfile.golang124

• node 24.8.0

ci/images/debian/Dockerfile.php83

• node 24.8.0

ci/images/debian/Dockerfile.php84

• node 24.8.0

ci/images/debian/Dockerfile.ruby26

• node 20.19.5

ci/images/debian/Dockerfile.ruby33

• node 24.8.0

ci/images/debian/Dockerfile.ruby34

• node 24.8.0

ci/images/debian/Dockerfile.rust1

• node 24.8.0

ci/images/debian/Dockerfile.swift6

• node 22.19.0

ci/images/Dockerfile.java11

• gradle 7.6.6

ci/images/Dockerfile.java17

• gradle 8.14.3

ci/images/Dockerfile.java17-slim

• gradle 8.14.3

ci/images/Dockerfile.python311

• golang 1.25.1
• node 20.19.5

ci/images/Dockerfile.python312

• node 24.8.0

ci/images/Dockerfile.python313

• node 24.8.0

ci/images/Dockerfile.python36

• node 20.19.5

ci/images/opensuse/Dockerfile.python310

• golang 1.25.1

ci/images/opensuse/Dockerfile.rolling

• node 24.8.0

ci/images/temurin/Dockerfile.java21

• gradle 8.14.3
• node 24.8.0

ci/images/temurin/Dockerfile.java24

• gradle 8.14.3
• node 24.8.0

ci/images/temurin/Dockerfile.java8

• gradle 8.14.3
• node 24.8.0

---

• Check this box to trigger a request for Renovate to run again on this repository

[malice00]

@setchy I closed 'sbt/setup-sbt' because that version (1.1.9) has a bug. Currently there are already 2 new releases (both less than 3 days old though), but they don't appear in the dashboard at all... Did my closing completely disable checking of this action?

[setchy]

@setchy I closed 'sbt/setup-sbt' because that version (1.1.9) has a bug. Currently there are already 2 new releases (both less than 3 days old though), but they don't appear in the dashboard at all... Did my closing completely disable checking of this action?

It's always handy to check the renovate debug logs to understand what is happening : https://developer.mend.io/github/CycloneDX/cdxgen

For `sbt/setup-sbt` it shows the following

"updates": [
              {
                "bucket": "non-major",
                "newVersion": "v1.1.9",
                "newValue": "v1.1.9",
                "newDigest": "6c68d2fe8dfbc0a0534d70101baa2e0420e1a506",
                "releaseTimestamp": "2025-06-07T22:07:32.000Z",
                "newVersionAgeInDays": 18,
                "newMajor": 1,
                "newMinor": 1,
                "newPatch": 9,
                "updateType": "patch",
                "isBreaking": false,
                "pendingVersions": [
                  "v1.1.10",
                  "v1.1.11"
                ],
                "libYears": 0.03850621511922882,
                "branchName": "renovate/sbt-setup-sbt-1.x"
              }
            ]


...


{
      "branchName": "renovate/sbt-setup-sbt-1.x",
      "prNo": 1926,
      "prTitle": "chore(deps): update sbt/setup-sbt action to v1.1.9",
      "result": "already-existed",
      "upgrades": [
        {
          "datasource": "github-tags",
          "depName": "sbt/setup-sbt",
          "displayPending": "`v1.1.11` (+1)",
          "fixedVersion": "v1.1.8",
          "currentVersion": "v1.1.8",
          "currentValue": "v1.1.8",
          "currentDigest": "69a46ab4acd4316aa16e68d91a9249a98d7e78d5",
          "newValue": "v1.1.9",
          "newVersion": "v1.1.9",
          "newDigest": "6c68d2fe8dfbc0a0534d70101baa2e0420e1a506",
          "packageFile": ".github/workflows/repotests.yml",
          "updateType": "patch",
          "packageName": "sbt/setup-sbt"
        },
        {
          "datasource": "github-tags",
          "depName": "sbt/setup-sbt",
          "displayPending": "`v1.1.11` (+1)",
          "fixedVersion": "v1.1.8",
          "currentVersion": "v1.1.8",
          "currentValue": "v1.1.8",
          "currentDigest": "69a46ab4acd4316aa16e68d91a9249a98d7e78d5",
          "newValue": "v1.1.9",
          "newVersion": "v1.1.9",
          "newDigest": "6c68d2fe8dfbc0a0534d70101baa2e0420e1a506",
          "packageFile": ".github/workflows/repotests.yml",
          "updateType": "patch",
          "packageName": "sbt/setup-sbt"
        },
        {
          "datasource": "github-tags",
          "depName": "sbt/setup-sbt",
          "displayPending": "`v1.1.11` (+1)",
          "fixedVersion": "v1.1.8",
          "currentVersion": "v1.1.8",
          "currentValue": "v1.1.8",
          "currentDigest": "69a46ab4acd4316aa16e68d91a9249a98d7e78d5",
          "newValue": "v1.1.9",
          "newVersion": "v1.1.9",
          "newDigest": "6c68d2fe8dfbc0a0534d70101baa2e0420e1a506",
          "packageFile": ".github/workflows/repotests.yml",
          "updateType": "patch",
          "packageName": "sbt/setup-sbt"
        },
        {
          "datasource": "github-tags",
          "depName": "sbt/setup-sbt",
          "displayPending": "`v1.1.11` (+1)",
          "fixedVersion": "v1.1.8",
          "currentVersion": "v1.1.8",
          "currentValue": "v1.1.8",
          "currentDigest": "69a46ab4acd4316aa16e68d91a9249a98d7e78d5",
          "newValue": "v1.1.9",
          "newVersion": "v1.1.9",
          "newDigest": "6c68d2fe8dfbc0a0534d70101baa2e0420e1a506",
          "packageFile": ".github/workflows/repotests.yml",
          "updateType": "patch",
          "packageName": "sbt/setup-sbt"
        }
      ]
    },

[malice00]

OK, so renovate sees it, but it doesn't quite explain why it's not in the dashboard... Shouldn't it be in the pending-section:

"displayPending": "`v1.1.11` (+1)",

[setchy]

This is the line that's important

Closed PR already exists. Skipping branch. (branch="renovate/sbt-setup-sbt-1.x")
{
  "prTitle": "chore(deps): update sbt/setup-sbt action to v1.1.9"
}

So yes, @malice00, closing the other PR will be the reason.

[malice00]

OK, I'll reopen the issue again and see what happens...

[setchy]

My personal workflow with renovate is to rarely decline the auto-PRs, otherwise it can limit visibility to subsequent updates. I much prefer to leave them open or convert them to draft status

[malice00]

I didn't know renovate would ignore updates if I rejected a single one -- I think I'll take a page from your book and make them drafts! Does renovate update them to actual PRs again when it then adds the new update?

[setchy]

It all depends on the package rules that you extend or define. It's incredibly configurable and can behave however you may want :)

[malice00]

Guess I have some reading to do... 😉 Thanks for the info!