Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
bun	@octokit/webhooks-types

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update dependency express-rate-limit to v8.6.2
• chore(deps): update dependency fast-xml-builder to v1.3.1
• chore(deps): update dependency hono to v4.13.3
• chore(deps): update dockerfile tool versions (argoproj/argo-cd, asdf-vm/asdf, fluxcd/flux2, golang, hadolint/hadolint, hashicorp/terraform, helm/helm, kubernetes/kubernetes, mikefarah/yq, nvm-sh/nvm, terraform-linters/tflint)
• chore(deps): update github-actions (actions/cache, actions/checkout, actions/setup-python, anthropics/claude-code-action, docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action, github/codeql-action)
• fix(deps): update dependency @anthropic-ai/bedrock-sdk to ^0.32.0
• chore(deps): update dependency fast-uri to v4
• chore(deps): update dependency protobufjs to v8
• chore(deps): update dev dependencies (major) (@commitlint/cli, @commitlint/config-conventional, @types/node, eslint-plugin-simple-import-sort, typescript)
• chore(deps): update github-actions (major) (actions/cache, actions/checkout, actions/setup-python, gitleaks/gitleaks-action, googleapis/release-please-action)
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency fast-uri to v3.1.6
• chore(deps): update dependency picomatch to v4.0.7
• chore(deps): update dependency @anthropic-ai/sdk to v0.120.0
• chore(deps): update dependency bun to v1.4.0
• chore(deps): update oven/bun docker tag to v1.4.0
• chore(deps): update oven/bun docker tag to v1.4.0
• fix(deps): update dependency @kubernetes/client-node to v2

Detected Dependencies

asdf (1)

.tool-versions (1)

• bun 1.3.14 → [Updates: 1.4.0]

bun (1)

package.json (42)

• @anthropic-ai/bedrock-sdk ^0.29.0 → [Updates: ^0.32.0]
• @anthropic-ai/claude-agent-sdk ^0.3.0
• @huggingface/transformers ^4.2.0
• @kubernetes/client-node ^1.4.0 → [Updates: ^2.0.0]
• @modelcontextprotocol/sdk ^1.29.0
• @octokit/webhooks 14.2.0
• @octokit/webhooks-types ^7.6.1
• cron-parser ^5.5.0
• octokit ^5.0.5
• pino ^10.3.1
• zod ^4.3.6
• @commitlint/cli ^20.5.0 → [Updates: ^21.0.0]
• @commitlint/config-conventional ^20.5.0 → [Updates: ^21.0.0]
• @eslint/js ^10.0.1
• @octokit/plugin-paginate-graphql ^6.0.0
• @types/bun ^1.3.12
• @types/node ^25.6.0 → [Updates: ^26.0.0]
• @types/picomatch ^4.0.3
• eslint ^10.2.1
• eslint-config-prettier ^10.1.8
• eslint-plugin-security ^4.0.0
• eslint-plugin-simple-import-sort ^13.0.0 → [Updates: ^14.0.0]
• husky ^9.1.7
• lint-staged ^17.0.0
• pino-pretty ^13.1.3
• prettier ^3.8.3
• typescript ^6.0.3 → [Updates: ^7.0.0]
• typescript-eslint ^8.58.2
• @anthropic-ai/sdk 0.117.1 → [Updates: 0.120.0]
• @hono/node-server 2.1.1
• adm-zip 0.6.0
• express-rate-limit 8.5.2 → [Updates: 8.6.2]
• fast-uri 3.1.5 → [Updates: 3.1.6, 4.1.2]
• fast-xml-builder 1.2.0 → [Updates: 1.3.1]
• flatted 3.4.4
• form-data 4.0.6
• hono 4.12.29 → [Updates: 4.13.3]
• path-to-regexp 8.4.2
• picomatch 4.0.5 → [Updates: 4.0.7]
• protobufjs 7.6.5 → [Updates: 8.7.2]
• ws 8.21.3
• yaml 2.9.0

docker-compose (1)

docker-compose.dev.yml (1)

• valkey/valkey 9

dockerfile (2)

Dockerfile.daemon (4)

• docker/dockerfile 1
• oven/bun 1.3.14 → [Updates: 1.4.0]
• docker 29-cli
• docker 29-cli

Dockerfile.orchestrator (2)

• docker/dockerfile 1
• oven/bun 1.3.14 → [Updates: 1.4.0]

github-actions (7)

.github/workflows/ci.yml (5)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• oven-sh/setup-bun v2.2.0@0c5077e51419868618aeaa5fe8019c62421857d6
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• valkey/valkey 9
• ubuntu 24.04

.github/workflows/docker-build.yml (15)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.6.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.6.0]
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.6.0]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.37.7]
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/docs.yml (5)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• oven-sh/setup-bun v2.2.0@0c5077e51419868618aeaa5fe8019c62421857d6
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6.3.0, v7.0.0]
• ubuntu 24.04
• python 3.x

.github/workflows/generate-labels.yml (3)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• srvaroa/labeler v1@9c29ad1ef33d169f9ef33c52722faf47a566bcf3
• ubuntu 24.04

.github/workflows/release-please.yml (3)

• googleapis/release-please-action v4.4.1@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 → [Updates: v5.0.0]
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/research.yml (3)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• anthropics/claude-code-action v1.0.140@fbda2eb1bdc90d319b8d853f5deb53bca199a7c1 → [Updates: v1.0.195]
• ubuntu 24.04

.github/workflows/secrets-scan.yml (3)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• gitleaks/gitleaks-action v2.3.9@ff98106e4c7b2bc287b24eaf42907196329070c7 → [Updates: v3.0.0]
• ubuntu 24.04

gitlabci (1)

.gitlab-ci.yml (5)

• oven/bun 1.3.14-alpine → [Updates: 1.4.0-alpine]
• docker 29-dind
• docker 29-dind
• docker 29-dind
• docker 29-dind

nvm (1)

.nvmrc (1)

• node 25

pip_requirements (1)

docs/requirements.txt (4)

• mkdocs-material >=9.5,<10
• Pillow >=12.2.0,<13
• cairosvg >=2.7,<3
• mike >=2.1,<3

regex (1)

Dockerfile.daemon (17)

• kubernetes/kubernetes v1.36.2 → [Updates: v1.36.3]
• helm/helm v4.2.1 → [Updates: v4.2.4]
• hashicorp/terraform 1.15.6 → [Updates: 1.15.8]
• aws/aws-cli 2.34.32
• mikefarah/yq v4.53.3 → [Updates: v4.53.4]
• asdf-vm/asdf v0.19.0 → [Updates: v0.20.0]
• nvm-sh/nvm v0.40.5 → [Updates: v0.40.7]
• kubernetes-sigs/kustomize v5.8.1
• derailed/k9s v0.51.0
• stern/stern v1.34.0
• argoproj/argo-cd v3.4.3 → [Updates: v3.5.1]
• fluxcd/flux2 v2.8.8 → [Updates: v2.9.4]
• terraform-linters/tflint v0.63.1 → [Updates: v0.64.0]
• koalaman/shellcheck v0.11.0
• hadolint/hadolint v2.14.0 → [Updates: v2.15.1]
• golang 1.26.4 → [Updates: 1.27.0]
• poetry 2.4.1

---

• Check this box to trigger a request for Renovate to run again on this repository