Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (2)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
bun	remark-gfm	2025-02-10
github-actions	slsa-framework/slsa-github-generator	2025-02-24

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update dependency @simple-release/npm to v3
• chore(deps): update dependency conventional-changelog to v8
• chore(deps): update dependency conventional-changelog-angular to v9
• chore(deps): update github-actions (major) (TrigenSoftware/simple-release-action, actions/cache)
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update github-actions (TrigenSoftware/simple-release-action, actions/setup-java, ruby/setup-ruby, stefanzweifel/git-auto-commit-action)
• chore(deps): update dependency npm to v11.18.0
• chore(deps): update devdependencies (non-major) (@commitlint/cli, @commitlint/config-conventional, @sentry/node-core, knip, oxfmt, oxlint, posthog-node)
• chore(deps): lock file maintenance
• chore(deps): lock file maintenance
• chore(deps): lock file maintenance
• chore(deps): lock file maintenance
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Detected Dependencies

bun (2)

docs/package.json (5)

• @astrojs/starlight ^0.41.0
• astro ^7.0.0
• posthog-js ^1.368.2
• remark-gfm ^4.0.1
• sharp ^0.35.0

package.json (18)

• @commander-js/extra-typings 15.0.0
• @commitlint/cli 21.1.0 → [Updates: 21.2.0]
• @commitlint/config-conventional 21.1.0 → [Updates: 21.2.0]
• @sentry/node-core 10.60.0 → [Updates: 10.63.0]
• @simple-release/npm 2.3.0 → [Updates: 3.0.5]
• @types/bun 1.3.14
• conventional-changelog 7.2.1 → [Updates: 8.0.1]
• conventional-changelog-angular 8.3.1 → [Updates: 9.2.1]
• czg 1.13.1
• fast-check 4.8.0
• inquirer 14.0.2
• knip 6.20.0 → [Updates: 6.24.0]
• meriyah 7.1.0 → [Updates: 7.1.1]
• oxfmt 0.56.0 → [Updates: 0.57.0]
• oxlint 1.71.0 → [Updates: 1.72.0]
• posthog-node 5.38.5 → [Updates: 5.39.4]
• zod 4.4.3
• typescript ^5 || ^6.0.0

bundler (1)

shims/rubygem/Gemfile (3)

• rake "~> 13.0"
• minitest "~> 6.0"
• minitest-mock "~> 5.0"

github-actions (13)

.github/actions/setup-bun-project/action.yml (1)

• moonrepo/setup-toolchain v0@261c62cb5b0f580c7be7c8cd0f023a2e96756095

.github/workflows/code-pull-request.yml (21)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-python v6@ece7cb06caefa5fff74198d8649806c4678c61a1
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16
• actions/setup-java v5@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 → [Updates: v5]
• actions/setup-dotnet v5@26b0ec14cb23fa6904739307f278c14f94c95bf1
• ruby/setup-ruby v1.314.0@9eb537ca036ebaed86729dcb9309076e4c5c3b74 → [Updates: v1.315.0]
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• zizmorcore/zizmor-action v0.5.7@192e21d79ab29983730a13d1382995c2307fbcaa
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• python 3.12
• go 1.21
• ruby 4.0.5

.github/workflows/codeql.yml (3)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.36.3]
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.36.3]

.github/workflows/dco.yml (1)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/publish-shims.yml (13)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• astral-sh/setup-uv v8.2.0@fac544c07dec837d0ccb6301d7b5580bf5edae39 → [Updates: v8.3.1]
• pypa/gh-action-pypi-publish v1.14.0@cef221092ed1bacb1cc03d23a2d87d1d172e277b
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-dotnet v5@26b0ec14cb23fa6904739307f278c14f94c95bf1
• NuGet/login v1.2.0@8d196754b4036150537f80ac539e15c2f1028841
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-java v5@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 → [Updates: v5]
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• ruby/setup-ruby v1.314.0@9eb537ca036ebaed86729dcb9309076e4c5c3b74 → [Updates: v1.315.0]
• rubygems/release-gem v1.4.0@052cc82692552de3ef2b81fd670e41d13cba8092
• ruby 4.0.5

.github/workflows/release-binaries.yml (8)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• moonrepo/setup-toolchain v0@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• actions/attest-build-provenance v4@0f67c3f4856b2e3261c31976d6725780e5e4c373
• actions/attest-build-provenance v4@0f67c3f4856b2e3261c31976d6725780e5e4c373
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• slsa-framework/slsa-github-generator v2.1.0

.github/workflows/release.yml (16)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• moonrepo/setup-toolchain v0@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• TrigenSoftware/simple-release-action v1.1.8@e7293dad843693d8692d443c3f21b78338048f13 → [Updates: v1.1.9, v2.0.0]
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• moonrepo/setup-toolchain v0@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• TrigenSoftware/simple-release-action v1.1.8@e7293dad843693d8692d443c3f21b78338048f13 → [Updates: v1.1.9, v2.0.0]
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• moonrepo/setup-toolchain v0@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• TrigenSoftware/simple-release-action v1.1.8@e7293dad843693d8692d443c3f21b78338048f13 → [Updates: v1.1.9, v2.0.0]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]

.github/workflows/scorecard.yml (3)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.36.3]

.github/workflows/smoke-test-linux.yml (1)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/smoke-test-windows.yml (2)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/track-adoption.yml

.github/workflows/update-llms.yaml (4)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• moonrepo/setup-toolchain v0@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• stefanzweifel/git-auto-commit-action v7@04702edda442b2e678b25b537cec683a1493fcb9 → [Updates: v7]

.github/workflows/update-lock.yaml (4)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• moonrepo/setup-toolchain v0@261c62cb5b0f580c7be7c8cd0f023a2e96756095
• stefanzweifel/git-auto-commit-action v7@04702edda442b2e678b25b537cec683a1493fcb9 → [Updates: v7]

gomod (1)

shims/go/go.mod (1)

• go 1.21

maven (1)

shims/maven/pom.xml (7)

• org.junit.jupiter:junit-jupiter 5.14.4
• org.apache.maven.plugins:maven-jar-plugin 3.5.0
• org.apache.maven.plugins:maven-surefire-plugin 3.5.6
• org.apache.maven.plugins:maven-gpg-plugin 3.2.8
• org.apache.maven.plugins:maven-source-plugin 3.4.0
• org.apache.maven.plugins:maven-javadoc-plugin 3.12.0
• org.sonatype.central:central-publishing-maven-plugin 0.11.0

nuget (1)

shims/nuget/tests/Archgate.Tool.Tests/Archgate.Tool.Tests.csproj (4)

• coverlet.collector 10.*
• xunit.runner.visualstudio 3.*
• xunit.v3 3.*
• Microsoft.NET.Test.Sdk 18.*

pep621 (1)

shims/pypi/pyproject.toml (1)

• python >=3.8

proto (1)

.prototools (4)

• bun 1.3.14
• node 24
• npm 11.17.0 → [Updates: 11.18.0]
• gh 2.95.0 → [Updates: 2.96.0]

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository