Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Note

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (50)

Datasource	Name	Last Updated
github-actions	dessant/label-actions	2023-11-21
github-actions	dessant/lock-threads	2023-11-22
npm	@breejs/later	2023-11-28
npm	@hyrious/marshal	2024-02-19
npm	@openpgp/web-stream-tools	2024-06-26
npm	@opentelemetry/api	2024-06-05
npm	@qnighy/marshal	2021-08-15
npm	async-mutex	2024-03-11
npm	auth-header	2018-08-21
npm	bunyan	2021-01-08
npm	callsite	2013-01-24
npm	changelog-filename-regex	2018-07-30
npm	clean-git-ref	2019-01-18
npm	conventional-commits-detector	2020-06-25
npm	deepmerge	2023-03-16
npm	dequal	2022-07-11
npm	email-addresses	2021-08-17
npm	expect-more-jest	2023-01-31
npm	extract-zip	2020-06-10
npm	find-packages	2022-12-03
npm	github-url-from-git	2016-11-27
npm	global-agent	2021-07-23
npm	good-enough-parser	2023-05-12
npm	handlebars	2023-08-01
npm	ini	2024-09-04
npm	json-dup-key-validator	2021-02-06
npm	json-stringify-pretty-compact	2022-05-14
npm	json5	2022-12-31
npm	jsonc-parser	2024-06-24
npm	klona	2023-01-16
npm	markdown-it	2024-03-18
npm	moo	2022-10-03
npm	neotraverse	2024-08-09
npm	nyc	2024-09-19
npm	parse-link-header	2021-12-16
npm	punycode	2023-10-30
npm	remark	2023-09-18
npm	remark-github	2023-09-23
npm	safe-stable-stringify	2024-08-24
npm	sax	2024-05-27
npm	semver-stable	2019-08-16
npm	semver-utils	2018-10-09
npm	slugify	2023-03-26
npm	source-map-support	2021-11-19
npm	tar	2024-07-26
npm	tmp-promise	2021-10-26
npm	toml-eslint-parser	2024-06-26
npm	unified	2024-06-19
npm	upath	2020-11-07
npm	url-join	2022-03-23

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release.
Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• build(deps): update dependency got to v14 (main)
• build(deps): update dependency zod to v4 (main)
• chore(deps): update actions/setup-node action to v5 (main)
• chore(deps): update dependency type-fest to v5 (main)
• chore(deps): update slackapi/slack-github-action action to v2 (main)
• chore(deps): update python:3.13 docker digest to 2deb089 (next)
• build(deps): update dependency @pnpm/parse-overrides to v1001.0.3 (next)
• build(deps): update dependency @renovatebot/kbpgp to v4.0.3 (next)
• build(deps): update dependency @renovatebot/osv-offline to v1.6.10 (next)
• build(deps): update dependency @renovatebot/pep440 to v4.2.1 (next)
• build(deps): update dependency @renovatebot/ruby-semver to v4.1.2 (next)
• build(deps): update dependency @yarnpkg/core to v4.4.3 (next)
• build(deps): update dependency cacache to v20.0.1 (next)
• build(deps): update dependency commander to v14.0.1 (next)
• build(deps): update dependency luxon to v3.7.2 (next)
• build(deps): update dependency openpgp to v6.2.2 (next)
• build(deps): update dependency p-queue to v8.1.1 (next)
• build(deps): update dependency protobufjs to v7.5.4 (next)
• build(deps): update dependency semantic-release to v24.2.8 (next)
• build(deps): update dependency strip-json-comments to v5.0.3 (next)
• chore(deps): update actions/dependency-review-action action to v4.7.3 (next)
• chore(deps): update dependency @containerbase/eslint-plugin to v1.1.10 (next)
• chore(deps): update dependency @types/semver to v7.7.1 (next)
• chore(deps): update dependency @vitest/eslint-plugin to v1.3.9 (next)
• chore(deps): update dependency esbuild to v0.25.9 (next)
• chore(deps): update dependency google-github-actions/auth to v2.1.13 (next)
• chore(deps): update dependency lint-staged to v16.1.6 (next)
• chore(deps): update dependency nock to v14.0.10 (next)
• chore(deps): update dependency pdm to v2.25.9 (next)
• chore(deps): update dependency renovatebot/github-action to v43.0.12 (next)
• chore(deps): update dependency tsx to v4.20.5 (next)
• chore(deps): update dependency vite to v7.1.5 (next)
• chore(deps): update python docker tag to v3.13.7 (next)
• fix(deps): update dependency mkdocs-material to v9.6.20 (next)
• build(deps): update aws-sdk-js-v3 monorepo to v3.893.0 (next) (@aws-sdk/client-codecommit, @aws-sdk/client-ec2, @aws-sdk/client-ecr, @aws-sdk/client-eks, @aws-sdk/client-rds, @aws-sdk/client-s3, @aws-sdk/credential-providers)
• build(deps): update dependency @renovatebot/detect-tools to v1.2.4 (next)
• build(deps): update dependency @sindresorhus/is to v7.1.0 (next)
• build(deps): update dependency chalk to v5.6.2 (next)
• build(deps): update dependency cronstrue to v3.3.0 (next)
• build(deps): update dependency emoji-regex to v10.5.0 (next)
• build(deps): update dependency google-auth-library to v10.3.0 (next)
• build(deps): update dependency node to v22.19.0 (next) (node, @types/node)
• build(deps): update opentelemetry-js monorepo (next) (@opentelemetry/context-async-hooks, @opentelemetry/exporter-trace-otlp-http, @opentelemetry/instrumentation, @opentelemetry/instrumentation-http, @opentelemetry/resources, @opentelemetry/sdk-trace-base, @opentelemetry/sdk-trace-node, @opentelemetry/semantic-conventions)
• build(deps): update opentelemetry-js-contrib monorepo (next) (@opentelemetry/instrumentation-bunyan, @opentelemetry/resource-detector-aws, @opentelemetry/resource-detector-azure, @opentelemetry/resource-detector-gcp)
• chore(deps): update aquasecurity/trivy-action action to v0.33.1 (next)
• chore(deps): update codecov/codecov-action action to v5.5.1 (next)
• chore(deps): update containerbase/internal-tools action to v3.13.3 (next)
• chore(deps): update dependency @smithy/util-stream to v4.3.1 (next)
• chore(deps): update dependency globals to v16.4.0 (next)
• chore(deps): update dependency memfs to v4.39.0 (next)
• chore(deps): update dependency pnpm to v10.16.1 (next)
• chore(deps): update dependency typescript to v5.9.2 (next)
• chore(deps): update docker/dockerfile docker tag to v1.18.0 (next)
• chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v13.13.11 (next)
• chore(deps): update github/codeql-action action to v3.30.3 (next)
• chore(deps): update jaegertracing/jaeger docker tag to v2.10.0 (next)
• chore(deps): update linters (next) (@eslint/js, eslint, typescript-eslint)
• chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.135.0 (next)
• chore(deps): update sigstore/cosign-installer action to v3.10.0 (next)
• docs: update references to renovate/renovate (next)
• feat(deps): update ghcr.io/renovatebot/base-image docker tag to v11.18.3 (next)
• build(deps): update dependency p-throttle to v8 (next)
• build(deps): update dependency redis to v5 (next)
• build(deps): update dependency zod to v4 (next)
• chore(deps): update actions/checkout action to v5 (next)
• chore(deps): update actions/download-artifact action to v5 (next)
• chore(deps): update actions/setup-node action to v5 (next)
• chore(deps): update dependency google-github-actions/auth to v3 (next)
• chore(deps): update dependency type-fest to v5 (next)
• chore(deps): update slackapi/slack-github-action action to v2 (next)
• feat(deps)!: Update ghcr.io/renovatebot/base-image Docker tag to v12 (next)
• chore(deps): lock file maintenance (next)
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• build(deps): update aws-sdk-js-v3 monorepo to v3.893.0 (main) (@aws-sdk/client-codecommit, @aws-sdk/client-ec2, @aws-sdk/client-ecr, @aws-sdk/client-eks, @aws-sdk/client-rds, @aws-sdk/client-s3, @aws-sdk/credential-providers)
• docs: update references to renovate/renovate (main)
• chore(deps): lock file maintenance (main)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• build(deps): update dependency @yarnpkg/core to v4.4.4 (main)
• build(deps): update dependency ae-cvss-calculator to v1.0.9 (main)
• build(deps): update dependency detect-indent to v7.0.2 (main)
• build(deps): update dependency fs-extra to v11.3.2 (main)
• build(deps): update dependency p-all to v5.0.1 (main)
• build(deps): update dependency semantic-release to v24.2.9 (main)
• chore(deps): update dependency @smithy/util-stream to v4.3.2 (main)
• chore(deps): update dependency @types/node to v22.18.6 (main)
• chore(deps): update dependency @vitest/eslint-plugin to v1.3.12 (main)
• chore(deps): update dependency esbuild to v0.25.10 (main)
• chore(deps): update dependency vite to v7.1.6 (main)
• chore(deps): update dependency memfs to v4.43.0 (main)
• chore(deps): update dependency pnpm to v10.17.0 (main)
• chore(deps): update linters (main) (@eslint/js, eslint, typescript-eslint)
• build(deps): update dependency find-up to v8 (main)
• build(deps): update dependency detect-indent to v7.0.2 (next)
• build(deps): update dependency fs-extra to v11.3.2 (next)
• build(deps): update dependency p-all to v5.0.1 (next)
• build(deps): update dependency find-up to v8 (next)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• build(deps): update dependency @renovatebot/detect-tools to v1.2.4 (main)
• build(deps): update dependency @sindresorhus/is to v7.1.0 (main)
• feat(deps)!: Update ghcr.io/renovatebot/base-image Docker tag to v11 (main)
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency typescript to v5.9.2 (main)
• build(deps): update dependency redis to v5 (main)
• build(deps): update dependency got to v14 (next)

Detected dependencies

Branch main

dockerfile

.devcontainer/Dockerfile

• ghcr.io/containerbase/devcontainer 13.13.11

tools/docker/Dockerfile

• docker/dockerfile 1.18.0@sha256:dabfc0969b935b2080555ace70ee69a5261af8a8f1b4df97b9e7fbcf6722eddf
• ghcr.io/renovatebot/base-image 10.46.6@sha256:b4f97f2977eed5c15a55c816fcc2b9e7b30a7d2522dd2871a2cfdd2579ffdb71
• ghcr.io/renovatebot/base-image 10.46.6-full@sha256:81590df5001cc78ac19463dc25a9c589888cdb4c17ec8914da46e8de07efaee1
• ghcr.io/renovatebot/base-image 10.46.6@sha256:b4f97f2977eed5c15a55c816fcc2b9e7b30a7d2522dd2871a2cfdd2579ffdb71

github-actions

.github/actions/calculate-prefetch-matrix/action.yml

• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809
• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809

.github/actions/setup-node/action.yml

• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020
• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809
• nick-fields/retry v3.0.2@ce71cc2ab81d554ebbe88c79ab5975992d79ba08
• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809

.github/workflows/build.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809
• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809
• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• DavidAnson/markdownlint-cli2-action v20.0.0@992badcdf24e3b8eb7e87ff9287fe931bcb00c6e
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0
• codecov/codecov-action v5.5.1@5a1091511ad55cbe89839c7260b706298ca349f7
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pdm-project/setup-pdm v4.4@94a823180e06fcde4ad29308721954a521c96ed0
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• containerbase/internal-tools v3.13.3@472fcf657dccd01b614a0f5e9dbb28aca67ed3c9
• sigstore/cosign-installer v3.10.0@d7543c93d881b35a8faa02e8e3605f69b7a1ce62

.github/workflows/codeql-analysis.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• github/codeql-action v3.30.3@192325c86100d080feab897ff886c34abd4c83a3
• github/codeql-action v3.30.3@192325c86100d080feab897ff886c34abd4c83a3
• github/codeql-action v3.30.3@192325c86100d080feab897ff886c34abd4c83a3

.github/workflows/dependency-review.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/dependency-review-action v4.7.3@595b5aeba73380359d98a5e087f648dbb0edce1b

.github/workflows/devcontainer.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• devcontainers/ci v0.3.1900000417@8bf61b26e9c3a98f69cb6ce2f88d24ff59b785c6

.github/workflows/find-issues-with-missing-labels.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8

.github/workflows/label-actions.yml

• dessant/label-actions v4.0.1@102faf474a544be75fbaf4df54e73d3c515a0e65

.github/workflows/lock.yml

• dessant/lock-threads v5.0.1@1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771

.github/workflows/mend-slack.yml

• slackapi/slack-github-action v1.27.1@fcfb566f8b0aab22203f066d80ca1d7e4b5d05b3

.github/workflows/scorecard.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• ossf/scorecard-action v2.4.2@05b42c624433fc40578a4040d5cf5e36ddca8cde
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• github/codeql-action v3.30.3@192325c86100d080feab897ff886c34abd4c83a3

.github/workflows/trivy.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• aquasecurity/trivy-action 0.33.1@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8
• github/codeql-action v3.30.3@192325c86100d080feab897ff886c34abd4c83a3

.github/workflows/undesirable-test-additions.yaml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8

.github/workflows/update-data.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020
• peter-evans/create-pull-request v7.0.8@271a8d0340265f705b14b6d32b9829c1cb33d45e

.github/workflows/ws_scan.yaml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8

npm

package.json

• @aws-sdk/client-codecommit 3.879.0
• @aws-sdk/client-ec2 3.879.0
• @aws-sdk/client-ecr 3.879.0
• @aws-sdk/client-eks 3.879.0
• @aws-sdk/client-rds 3.879.0
• @aws-sdk/client-s3 3.879.0
• @aws-sdk/credential-providers 3.879.0
• @baszalmstra/rattler 0.2.1
• @breejs/later 4.2.0
• @cdktf/hcl2json 0.21.0
• @opentelemetry/api 1.9.0
• @opentelemetry/context-async-hooks 2.1.0
• @opentelemetry/exporter-trace-otlp-http 0.205.0
• @opentelemetry/instrumentation 0.205.0
• @opentelemetry/instrumentation-bunyan 0.51.0
• @opentelemetry/instrumentation-http 0.205.0
• @opentelemetry/resource-detector-aws 2.5.0
• @opentelemetry/resource-detector-azure 0.12.0
• @opentelemetry/resource-detector-gcp 0.40.0
• @opentelemetry/resource-detector-github 0.31.0
• @opentelemetry/resources 2.1.0
• @opentelemetry/sdk-trace-base 2.1.0
• @opentelemetry/sdk-trace-node 2.1.0
• @opentelemetry/semantic-conventions 1.37.0
• @pnpm/parse-overrides 1001.0.3
• @qnighy/marshal 0.1.3
• @renovatebot/detect-tools 1.1.0
• @renovatebot/kbpgp 4.0.3
• @renovatebot/osv-offline 1.6.10
• @renovatebot/pep440 4.2.1
• @renovatebot/ruby-semver 4.1.2
• @sindresorhus/is 7.0.2
• @yarnpkg/core 4.4.3
• @yarnpkg/parsers 3.0.3
• ae-cvss-calculator 1.0.8
• agentkeepalive 4.6.0
• async-mutex 0.5.0
• auth-header 1.0.0
• aws4 1.13.2
• azure-devops-node-api 15.1.1
• bunyan 1.8.15
• cacache 20.0.1
• chalk 5.6.2
• changelog-filename-regex 2.0.1
• clean-git-ref 2.0.1
• commander 14.0.1
• conventional-commits-detector 1.0.3
• croner 9.1.0
• cronstrue 3.3.0
• deepmerge 4.3.1
• dequal 2.0.3
• detect-indent 7.0.1
• diff 8.0.2
• editorconfig 3.0.1
• email-addresses 5.0.0
• emoji-regex 10.5.0
• emojibase 16.0.0
• emojibase-regex 16.0.0
• extract-zip 2.0.1
• find-packages 10.0.4
• find-up 7.0.0
• fs-extra 11.3.1
• git-url-parse 16.1.0
• github-url-from-git 1.5.0
• glob 11.0.3
• global-agent 3.0.0
• good-enough-parser 1.1.23
• google-auth-library 10.3.0
• got 11.8.6
• graph-data-structure 4.5.0
• handlebars 4.7.8
• ignore 7.0.5
• ini 5.0.0
• json-dup-key-validator 1.0.3
• json-stringify-pretty-compact 4.0.0
• json5 2.2.3
• jsonata 2.1.0
• jsonc-parser 3.3.1
• klona 2.0.6
• luxon 3.7.2
• markdown-it 14.1.0
• markdown-table 3.0.4
• minimatch 10.0.3
• moo 0.5.2
• ms 2.1.3
• nanoid 5.1.5
• neotraverse 0.6.18
• node-html-parser 7.0.1
• p-all 5.0.0
• p-map 7.0.3
• p-queue 8.1.1
• p-throttle 8.0.0
• parse-link-header 2.0.0
• prettier 3.6.2
• protobufjs 7.5.4
• punycode 2.3.1
• redis 4.7.1
• remark 15.0.1
• remark-gfm 4.0.1
• remark-github 12.0.0
• safe-stable-stringify 2.5.0
• sax 1.4.1
• semver 7.7.2
• semver-stable 3.0.0
• semver-utils 1.1.4
• shlex 3.0.0
• simple-git 3.28.0
• slugify 1.6.6
• source-map-support 0.5.21
• strip-json-comments 5.0.3
• toml-eslint-parser 0.10.0
• tslib 2.8.1
• upath 2.0.1
• url-join 5.0.0
• validate-npm-package-name 6.0.2
• xmldoc 2.0.2
• yaml 2.8.1
• zod 3.25.76
• @containerbase/eslint-plugin 1.1.10
• @eslint/js 9.35.0
• @hyrious/marshal 0.3.3
• @ls-lint/ls-lint 2.3.1
• @openpgp/web-stream-tools 0.1.3
• @semantic-release/exec 7.1.0
• @smithy/util-stream 4.3.1
• @types/auth-header 1.0.6
• @types/aws4 1.11.6
• @types/better-sqlite3 7.6.13
• @types/breejs__later 4.1.5
• @types/bunyan 1.8.11
• @types/cacache 19.0.0
• @types/callsite 1.0.34
• @types/changelog-filename-regex 2.0.2
• @types/clean-git-ref 2.0.2
• @types/common-tags 1.8.4
• @types/conventional-commits-detector 1.0.2
• @types/eslint-config-prettier 6.11.3
• @types/fs-extra 11.0.4
• @types/github-url-from-git 1.5.3
• @types/global-agent 3.0.0
• @types/ini 4.1.1
• @types/js-yaml 4.0.9
• @types/json-dup-key-validator 1.0.2
• @types/linkify-markdown 1.0.3
• @types/lodash 4.17.20
• @types/luxon 3.7.1
• @types/markdown-it 14.1.2
• @types/marshal 0.5.3
• @types/mdast 4.0.4
• @types/moo 0.5.10
• @types/ms 2.1.0
• @types/node 22.18.3
• @types/parse-link-header 2.0.3
• @types/punycode 2.1.4
• @types/sax 1.2.7
• @types/semver 7.7.1
• @types/semver-stable 3.0.2
• @types/semver-utils 1.1.3
• @types/tar 6.1.13
• @types/tmp 0.2.6
• @types/validate-npm-package-name 4.0.2
• @vitest/coverage-v8 3.2.4
• @vitest/eslint-plugin 1.3.9
• aws-sdk-client-mock 4.1.0
• callsite 1.0.0
• common-tags 1.8.2
• conventional-changelog-conventionalcommits 9.1.0
• emojibase-data 16.0.3
• esbuild 0.25.9
• eslint 9.35.0
• eslint-config-prettier 10.1.8
• eslint-formatter-gha 1.6.0
• eslint-import-resolver-typescript 4.4.4
• eslint-plugin-import-x 4.16.1
• eslint-plugin-promise 7.2.1
• expect-more-jest 5.5.0
• globals 16.4.0
• graphql 16.11.0
• husky 9.1.7
• jest-extended 6.0.0
• lint-staged 16.1.6
• markdownlint-cli2 0.18.1
• memfs 4.39.0
• nock 14.0.10
• npm-run-all2 8.0.4
• nyc 17.1.0
• rimraf 6.0.1
• semantic-release 24.2.8
• tar 7.4.3
• tmp-promise 3.0.3
• tsx 4.20.5
• type-fest 4.41.0
• typescript 5.8.3
• typescript-eslint 8.43.0
• unified 11.0.5
• vite 7.1.5
• vite-tsconfig-paths 5.1.4
• vitest 3.2.4
• vitest-mock-extended 3.1.0
• better-sqlite3 12.2.0
• openpgp 6.2.2
• re2 1.22.1
• node ^22.13.0
• pnpm ^10.0.0
• node 22.19.0
• pnpm 10.16.1
• pnpm 10.16.1
• esbuild 0.25.9

pnpm-workspace.yaml

nvm

.nvmrc

• node 22.19.0

pep621

pyproject.toml

• python >=3.11
• mkdocs-material ==9.6.20
• mkdocs-awesome-pages-plugin ==2.10.1

pyenv

.python-version

• python 3.13.7

regex

.devcontainer/Dockerfile

• pnpm 10.16.1

.github/workflows/build.yml

• pdm 2.25.9

docs/usage/configuration-options.md

docs/usage/docker.md

• renovate/renovate 41.113.3

docs/usage/docker.md

• google-github-actions/auth v3.0.0
• renovatebot/github-action v43.0.12

docs/usage/examples/opentelemetry.md

• jaegertracing/jaeger 2.10.0
• prom/prometheus v3.5.0
• otel/opentelemetry-collector-contrib 0.135.0

docs/usage/examples/self-hosting.md

• renovate/renovate 41
• renovate/renovate 41.113
• renovate/renovate 41.113.3
• renovate/renovate 41.113.3
• renovate/renovate 41.113.3
• renovate/renovate 41.113.3
• renovate/renovate 41.113.3
• renovate/renovate 41.113.3
• renovate/renovate 41.113.3

lib/modules/manager/azure-pipelines/readme.md

• ubuntu 24.04
• python 3.13@sha256:2deb0891ec3f643b1d342f04cc22154e6b6a76b41044791b537093fae00b6884

tools/docker/Dockerfile

• node 22.19.0
• pnpm 10.16.1

renovate-config-presets

renovate.json

Branch next

dockerfile

.devcontainer/Dockerfile

• ghcr.io/containerbase/devcontainer 13.8.65

tools/docker/Dockerfile

• docker/dockerfile 1.17.1@sha256:38387523653efa0039f8e1c89bb74a30504e76ee9f565e25c9a09841f9427b05
• ghcr.io/renovatebot/base-image 11.0.0@sha256:2574784f2d7b0af2171a4e7500f757b058c98b5ce3ae391d2573ed2f2a6c145f
• ghcr.io/renovatebot/base-image 11.0.0-full@sha256:5080ba6ee69cb3c072e056932dbd84f1637404b312b5b286d224eba6da17bfd4
• ghcr.io/renovatebot/base-image 11.0.0@sha256:2574784f2d7b0af2171a4e7500f757b058c98b5ce3ae391d2573ed2f2a6c145f

github-actions

.github/actions/calculate-prefetch-matrix/action.yml

• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809
• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809

.github/actions/setup-node/action.yml

• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020
• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809
• nick-fields/retry v3.0.2@ce71cc2ab81d554ebbe88c79ab5975992d79ba08
• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809

.github/workflows/build.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809
• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809
• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• DavidAnson/markdownlint-cli2-action v20.0.0@992badcdf24e3b8eb7e87ff9287fe931bcb00c6e
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/download-artifact v4.3.0@d3f86a106a0bac45b974a628896c90dbdf5c8093
• codecov/codecov-action v5.4.3@18283e04ce6e62d37312384ff67231eb8fd56d24
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/download-artifact v4.3.0@d3f86a106a0bac45b974a628896c90dbdf5c8093
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/download-artifact v4.3.0@d3f86a106a0bac45b974a628896c90dbdf5c8093
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• pdm-project/setup-pdm v4.4@94a823180e06fcde4ad29308721954a521c96ed0
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/download-artifact v4.3.0@d3f86a106a0bac45b974a628896c90dbdf5c8093
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• containerbase/internal-tools v3.10.71@7c3bf36c5b0f3ddd2c628e34417c085c16d1974d
• sigstore/cosign-installer v3.9.2@d58896d6a1865668819e1d91763c7751a165e159

.github/workflows/codeql-analysis.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• github/codeql-action v3.29.9@df559355d593797519d70b90fc8edd5db049e7a2
• github/codeql-action v3.29.9@df559355d593797519d70b90fc8edd5db049e7a2
• github/codeql-action v3.29.9@df559355d593797519d70b90fc8edd5db049e7a2

.github/workflows/dependency-review.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/dependency-review-action v4.7.1@da24556b548a50705dd671f47852072ea4c105d9

.github/workflows/devcontainer.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• devcontainers/ci v0.3.1900000417@8bf61b26e9c3a98f69cb6ce2f88d24ff59b785c6

.github/workflows/find-issues-with-missing-labels.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955

.github/workflows/label-actions.yml

• dessant/label-actions v4.0.1@102faf474a544be75fbaf4df54e73d3c515a0e65

.github/workflows/lock.yml

• dessant/lock-threads v5.0.1@1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771

.github/workflows/mend-slack.yml

• slackapi/slack-github-action v1.27.1@fcfb566f8b0aab22203f066d80ca1d7e4b5d05b3

.github/workflows/scorecard.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• ossf/scorecard-action v2.4.2@05b42c624433fc40578a4040d5cf5e36ddca8cde
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• github/codeql-action v3.29.9@df559355d593797519d70b90fc8edd5db049e7a2

.github/workflows/trivy.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• aquasecurity/trivy-action 0.32.0@dc5a429b52fcf669ce959baa2c2dd26090d2a6c4
• github/codeql-action v3.29.9@df559355d593797519d70b90fc8edd5db049e7a2

.github/workflows/undesirable-test-additions.yaml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955

.github/workflows/update-data.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• pnpm/action-setup v4.1.0@a7487c7e89a18df4991f7f222e4898a00d66ddda
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020
• peter-evans/create-pull-request v7.0.8@271a8d0340265f705b14b6d32b9829c1cb33d45e

.github/workflows/ws_scan.yaml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955

npm

package.json

• @aws-sdk/client-codecommit 3.858.0
• @aws-sdk/client-ec2 3.858.0
• @aws-sdk/client-ecr 3.858.0
• @aws-sdk/client-eks 3.858.0
• @aws-sdk/client-rds 3.858.0
• @aws-sdk/client-s3 3.858.0
• @aws-sdk/credential-providers 3.858.0
• @baszalmstra/rattler 0.2.1
• @breejs/later 4.2.0
• @cdktf/hcl2json 0.21.0
• @opentelemetry/api 1.9.0
• @opentelemetry/context-async-hooks 2.0.1
• @opentelemetry/exporter-trace-otlp-http 0.203.0
• @opentelemetry/instrumentation 0.203.0
• @opentelemetry/instrumentation-bunyan 0.49.0
• @opentelemetry/instrumentation-http 0.203.0
• @opentelemetry/resource-detector-aws 2.3.0
• @opentelemetry/resource-detector-azure 0.10.0
• @opentelemetry/resource-detector-gcp 0.37.0
• @opentelemetry/resource-detector-github 0.31.0
• @opentelemetry/resources 2.0.1
• @opentelemetry/sdk-trace-base 2.0.1
• @opentelemetry/sdk-trace-node 2.0.1
• @opentelemetry/semantic-conventions 1.36.0
• @pnpm/parse-overrides 1001.0.2
• @qnighy/marshal 0.1.3
• @renovatebot/detect-tools 1.1.0
• @renovatebot/kbpgp 4.0.1
• @renovatebot/osv-offline 1.6.9
• @renovatebot/pep440 4.2.0
• @renovatebot/ruby-semver 4.1.0
• @sindresorhus/is 7.0.2
• @yarnpkg/core 4.4.2
• @yarnpkg/parsers 3.0.3
• agentkeepalive 4.6.0
• async-mutex 0.5.0
• auth-header 1.0.0
• aws4 1.13.2
• azure-devops-node-api 15.1.1
• bunyan 1.8.15
• cacache 20.0.0
• chalk 5.5.0
• changelog-filename-regex 2.0.1
• clean-git-ref 2.0.1
• commander 14.0.0
• conventional-commits-detector 1.0.3
• croner 9.1.0
• cronstrue 3.2.0
• deepmerge 4.3.1
• dequal 2.0.3
• detect-indent 7.0.1
• diff 8.0.2
• editorconfig 3.0.1
• email-addresses 5.0.0
• emoji-regex 10.4.0
• emojibase 16.0.0
• emojibase-regex 16.0.0
• extract-zip 2.0.1
• find-packages 10.0.4
• find-up 7.0.0
• fs-extra 11.3.1
• git-url-parse 16.1.0
• github-url-from-git 1.5.0
• glob 11.0.3
• global-agent 3.0.0
• good-enough-parser 1.1.23
• google-auth-library 10.2.1
• got 11.8.6
• graph-data-structure 4.5.0
• handlebars 4.7.8
• ignore 7.0.5
• ini 5.0.0
• json-dup-key-validator 1.0.3
• json-stringify-pretty-compact 4.0.0
• json5 2.2.3
• jsonata 2.1.0
• jsonc-parser 3.3.1
• klona 2.0.6
• luxon 3.7.1
• markdown-it 14.1.0
• markdown-table 3.0.4
• minimatch 10.0.3
• moo 0.5.2
• ms 2.1.3
• nanoid 5.1.5
• neotraverse 0.6.18
• node-html-parser 7.0.1
• p-all 5.0.0
• p-map 7.0.3
• p-queue 8.1.0
• p-throttle 7.0.0
• parse-link-header 2.0.0
• prettier 3.6.2
• protobufjs 7.5.3
• punycode 2.3.1
• redis 4.7.1
• remark 15.0.1
• remark-github 12.0.0
• safe-stable-stringify 2.5.0
• sax 1.4.1
• semver 7.7.2
• semver-stable 3.0.0
• semver-utils 1.1.4
• shlex 3.0.0
• simple-git 3.28.0
• slugify 1.6.6
• source-map-support 0.5.21
• strip-json-comments 5.0.2
• toml-eslint-parser 0.10.0
• tslib 2.8.1
• upath 2.0.1
• url-join 5.0.0
• validate-npm-package-name 6.0.2
• vuln-vects 1.1.0
• xmldoc 2.0.2
• yaml 2.8.1
• zod 3.25.76
• @containerbase/eslint-plugin 1.1.6
• @eslint/js 9.32.0
• @hyrious/marshal 0.3.3
• @ls-lint/ls-lint 2.3.1
• @openpgp/web-stream-tools 0.1.3
• @semantic-release/exec 7.1.0
• @smithy/util-stream 4.2.4
• @types/auth-header 1.0.6
• @types/aws4 1.11.6
• @types/better-sqlite3 7.6.13
• @types/breejs__later 4.1.5
• @types/bunyan 1.8.11
• @types/cacache 19.0.0
• @types/callsite 1.0.34
• @types/changelog-filename-regex 2.0.2
• @types/clean-git-ref 2.0.2
• @types/common-tags 1.8.4
• @types/conventional-commits-detector 1.0.2
• @types/eslint-config-prettier 6.11.3
• @types/fs-extra 11.0.4
• @types/github-url-from-git 1.5.3
• @types/global-agent 3.0.0
• @types/ini 4.1.1
• @types/js-yaml 4.0.9
• @types/json-dup-key-validator 1.0.2
• @types/linkify-markdown 1.0.3
• @types/lodash 4.17.20
• @types/luxon 3.7.1
• @types/markdown-it 14.1.2
• @types/marshal 0.5.3
• @types/mdast 4.0.4
• @types/moo 0.5.10
• @types/ms 2.1.0
• @types/node 22.17.0
• @types/parse-link-header 2.0.3
• @types/punycode 2.1.4
• @types/sax 1.2.7
• @types/semver 7.7.0
• @types/semver-stable 3.0.2
• @types/semver-utils 1.1.3
• @types/tar 6.1.13
• @types/tmp 0.2.6
• @types/validate-npm-package-name 4.0.2
• @vitest/coverage-v8 3.2.4
• @vitest/eslint-plugin 1.3.4
• aws-sdk-client-mock 4.1.0
• callsite 1.0.0
• common-tags 1.8.2
• conventional-changelog-conventionalcommits 9.1.0
• emojibase-data 16.0.3
• esbuild 0.25.8
• eslint 9.32.0
• eslint-config-prettier 10.1.8
• eslint-formatter-gha 1.6.0
• eslint-import-resolver-typescript 4.4.4
• eslint-plugin-import-x 4.16.1
• eslint-plugin-promise 7.2.1
• expect-more-jest 5.5.0
• globals 16.3.0
• graphql 16.11.0
• husky 9.1.7
• jest-extended 6.0.0
• lint-staged 16.1.4
• markdownlint-cli2 0.18.1
• memfs 4.36.0
• nock 14.0.8
• npm-run-all2 8.0.4
• nyc 17.1.0
• rimraf 6.0.1
• semantic-release 24.2.7
• tar 7.4.3
• tmp-promise 3.0.3
• tsx 4.20.3
• type-fest 4.41.0
• typescript 5.8.3
• typescript-eslint 8.39.0
• unified 11.0.5
• vite 7.1.0
• vite-tsconfig-paths 5.1.4
• vitest 3.2.4
• vitest-mock-extended 3.1.0
• better-sqlite3 12.2.0
• openpgp 6.2.0
• re2 1.22.1
• node ^22.13.0
• pnpm ^10.0.0
• node 22.18.0
• pnpm 10.14.0
• pnpm 10.14.0
• esbuild 0.25.8

pnpm-workspace.yaml

nvm

.nvmrc

• node 22.18.0

pep621

pyproject.toml

• python >=3.11
• mkdocs-material ==9.6.16
• mkdocs-awesome-pages-plugin ==2.10.1

pyenv

.python-version

• python 3.13.6

regex

.devcontainer/Dockerfile

• pnpm 10.14.0

.github/workflows/build.yml

• pdm 2.25.6

docs/usage/configuration-options.md

docs/usage/docker.md

• renovate/renovate 41.61.1

docs/usage/docker.md

• google-github-actions/auth v2.1.12
• renovatebot/github-action v43.0.7

docs/usage/examples/opentelemetry.md

• jaegertracing/jaeger 2.9.0
• prom/prometheus v3.5.0
• otel/opentelemetry-collector-contrib 0.132.2

docs/usage/examples/self-hosting.md

• renovate/renovate 41
• renovate/renovate 41.61
• renovate/renovate 41.61.1
• renovate/renovate 41.61.1
• renovate/renovate 41.61.1
• renovate/renovate 41.61.1
• renovate/renovate 41.61.1
• renovate/renovate 41.61.1
• renovate/renovate 41.61.1

lib/modules/manager/azure-pipelines/readme.md

• ubuntu 24.04
• python 3.13@sha256:1e4584c017d9cecf8a952cfd8f8e47ef5611b28dfc29da9e1d4b6bad98daf9b0

tools/docker/Dockerfile

• node 22.18.0
• pnpm 10.14.0

renovate-config-presets

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository