Renovate Dashboard 🤖

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Unable to read vulnerability information

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (3)

Datasource	Package	Last Updated
github-actions	EndBug/label-sync	2024-02-13
mise	shellcheck	2025-08-04

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update dependency wrangler to v4.131.2 [automerge]
• chore(github-tag): update tag actions/deploy-pages to v5.0.1 [automerge]
• chore(github-tag): update tag step-security/harden-runner to v2.21.1 [automerge]
• chore(mise): update tool uv to v0.12.9 [automerge]
• chore(github-release): update release jdx/mise to v2026.9.1 [automerge]
• chore(mise): update tool dprint to v0.57.0 [automerge]
• chore(mise): update tool git-cliff to v2.14.1 [automerge]
• chore(mise): update tool zizmor to v1.30.0 [automerge]
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(mise): update tool lefthook to v2.1.14 [automerge]
• chore(mise): update tool pipx:checkov to v3.3.19 [automerge]
• chore(mise): update tool shfmt to v3.14.1 [automerge]
• chore(deps): update dependency apm-cli to v0.31.0 [automerge]
• chore(github-tag): update tag github/codeql-action to v4.38.0 [automerge]
• chore(github-tag): update tag devsecninja/.github to v3.2.0

Pending Branch Automerge

The following updates await pending status checks before automerging. To abort the branch automerge and create a PR instead, click on a checkbox below.

• build(mise): lock file maintenance tool [automerge]

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(github-tag): pin tag devsecninja/ai-toolkit to 2491ced [automerge]

Detected Dependencies

apm (1)

apm.yml (1)

• DevSecNinja/ai-toolkit v0.8.0 → [Updates: v0.8.0]

devcontainer (1)

.devcontainer/devcontainer.json (1)

• ghcr.io/devsecninja/dotfiles-devcontainer v0.6.0@sha256:238aec66927da1d67f7f7225123c1d207f7c01c93d451fab7189c94d53453940

github-actions (30)

.github/workflows/apm-materialize.yml (5)

• DevSecNinja/.github v2.5.0@0d0f448de257f354c89dc3a128871235d6ba8c11 → [Updates: v3.2.0]
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• DevSecNinja/.github v2.5.0@0d0f448de257f354c89dc3a128871235d6ba8c11 → [Updates: v3.2.0]
• ubuntu 24.04

.github/workflows/apm-sync.yml (5)

• DevSecNinja/.github v2.5.0@0d0f448de257f354c89dc3a128871235d6ba8c11 → [Updates: v3.2.0]
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• DevSecNinja/.github v2.5.0@0d0f448de257f354c89dc3a128871235d6ba8c11 → [Updates: v3.2.0]
• ubuntu 24.04

.github/workflows/assign-issue-to-codeowners.yml (2)

• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• ubuntu 24.04

.github/workflows/autofix.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.3.0@c2a87611a18de5b3828c5652fe268e992400cb5c
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}

.github/workflows/config-sync.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• DevSecNinja/.github v2.5.0@0d0f448de257f354c89dc3a128871235d6ba8c11 → [Updates: v3.2.0]
• ubuntu 24.04

.github/workflows/label-sync.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• EndBug/label-sync v2.3.3@52074158190acb45f3077f9099fea818aa43f97a
• ubuntu 24.04

.github/workflows/labeler.yml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/labeler v7.0.0@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13
• github/issue-labeler v3.5@ccca1e16fcb66762200e616fc29b57b940c1cb67
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/lint.yml (50)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.3.0@c2a87611a18de5b3828c5652fe268e992400cb5c
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.3.0@c2a87611a18de5b3828c5652fe268e992400cb5c
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.3.0@c2a87611a18de5b3828c5652fe268e992400cb5c
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.3.0@c2a87611a18de5b3828c5652fe268e992400cb5c
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.3.0@c2a87611a18de5b3828c5652fe268e992400cb5c
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• golangci/golangci-lint-action v9.3.0@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.3.0@c2a87611a18de5b3828c5652fe268e992400cb5c
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.3.0@c2a87611a18de5b3828c5652fe268e992400cb5c
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.3.0@c2a87611a18de5b3828c5652fe268e992400cb5c
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.0]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.3.0@c2a87611a18de5b3828c5652fe268e992400cb5c
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.0]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.3.0@c2a87611a18de5b3828c5652fe268e992400cb5c
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.0]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04
• golangci/golangci-lint ${{ inputs.golangci-lint-version }}
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04

.github/workflows/pages.yml (43)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/configure-pages v6.0.0@45bfe0192ca1faeb007ade9deae92b16b8254a0d
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-pages-artifact v5.0.0@fc324d3547104276b827a68afc52ff2a11cc49c9
• actions/deploy-pages v5.0.0@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 → [Updates: v5.0.1]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• cloudflare/wrangler-action v4.0.0@ebbaa1584979971c8614a24965b4405ff95890e0
• cloudflare/wrangler-action v4.0.0@ebbaa1584979971c8614a24965b4405ff95890e0
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• cloudflare/wrangler-action v4.0.0@ebbaa1584979971c8614a24965b4405ff95890e0
• cloudflare/wrangler-action v4.0.0@ebbaa1584979971c8614a24965b4405ff95890e0
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• node ${{ inputs.node-version }}
• go ${{ inputs.go-version }}
• ubuntu 24.04
• node ${{ inputs.node-version }}
• go ${{ inputs.go-version }}
• ubuntu 24.04
• node ${{ inputs.node-version }}
• go ${{ inputs.go-version }}
• wrangler ${{ inputs.wrangler-version }}
• wrangler ${{ inputs.wrangler-version }}
• ubuntu 24.04
• ubuntu 24.04
• node ${{ inputs.node-version }}
• go ${{ inputs.go-version }}
• wrangler ${{ inputs.wrangler-version }}
• wrangler ${{ inputs.wrangler-version }}
• ubuntu 24.04

.github/workflows/release-please-caller.yml (1)

• DevSecNinja/.github v3.0.0@c61e8107b080f72e25bfc41d3eef947dbfa66446 → [Updates: v3.2.0]

.github/workflows/release-please.yml (3)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• googleapis/release-please-action v5.0.0@45996ed1f6d02564a971a2fa1b5860e934307cf7
• ubuntu 24.04

.github/workflows/release.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.3.0@c2a87611a18de5b3828c5652fe268e992400cb5c
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}

.github/workflows/renovate-pr-cooldown.yml (2)

• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• ubuntu 24.04

.github/workflows/sync-labels.yml (1)

• DevSecNinja/.github main@195660c2cde322b4f9402a20be4b2dac2fef77e0 → [Updates: main]

.github/workflows/test.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.3.0@c2a87611a18de5b3828c5652fe268e992400cb5c
• ubuntu 24.04
• jdx/mise 2026.8.14

.github/workflows/todo-to-issue.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• alstr/todo-to-issue-action v5.1.15@37bb7b56e58569ef273b60678048030a7f0c261a
• ubuntu 24.04

.github/workflows/vendored-file-sync.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• DevSecNinja/.github v2.5.0@0d0f448de257f354c89dc3a128871235d6ba8c11 → [Updates: v3.2.0]
• ubuntu 24.04

actions/harden-runner/action.yml (1)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c → [Updates: v2.21.1]

actions/release-publish/action.yml (2)

• jdx/mise-action v4.3.0@c2a87611a18de5b3828c5652fe268e992400cb5c
• jdx/mise ${{ inputs.mise-version }}

workflow-templates/assign-issue-to-codeowners.yml (1)

• DevSecNinja/.github v2.5.0@0d0f448de257f354c89dc3a128871235d6ba8c11 → [Updates: v3.2.0]

workflow-templates/autofix.yml (1)

• DevSecNinja/.github main@42b7c72b7ea3a1ba0002e0bec84a86cb8a8f896a → [Updates: main]

workflow-templates/config-sync.yml (1)

• DevSecNinja/.github v2.5.0@0d0f448de257f354c89dc3a128871235d6ba8c11 → [Updates: v3.2.0]

workflow-templates/label-sync.yml (1)

• DevSecNinja/.github v2.5.0@0d0f448de257f354c89dc3a128871235d6ba8c11 → [Updates: v3.2.0]

workflow-templates/labeler.yml (1)

• DevSecNinja/.github v2.5.0@0d0f448de257f354c89dc3a128871235d6ba8c11 → [Updates: v3.2.0]

workflow-templates/lint.yml (1)

• DevSecNinja/.github v2.5.0@0d0f448de257f354c89dc3a128871235d6ba8c11 → [Updates: v3.2.0]

workflow-templates/pages.yml (1)

• DevSecNinja/.github v3.1.0@7a3e8e1475c658c60c23bedc7daf2e559bfe60b4 → [Updates: v3.2.0]

workflow-templates/release-please.yml (1)

• DevSecNinja/.github v3.0.0@c61e8107b080f72e25bfc41d3eef947dbfa66446 → [Updates: v3.2.0]

workflow-templates/release.yml (1)

• DevSecNinja/.github v2.5.0@0d0f448de257f354c89dc3a128871235d6ba8c11 → [Updates: v3.2.0]

workflow-templates/renovate-pr-cooldown.yml (1)

• DevSecNinja/.github main@46c8d52b2f3ca613956756a583332ba84b7f938e → [Updates: main]

workflow-templates/todo-to-issue.yml (1)

• DevSecNinja/.github v2.5.0@0d0f448de257f354c89dc3a128871235d6ba8c11 → [Updates: v3.2.0]

mise (2)

.mise.toml (14)

• actionlint 1.7.12
• cocogitto 7.0.0
• dprint 0.56.1 → [Updates: 0.57.0]
• gitleaks 8.30.1
• git-cliff 2.13.1 → [Updates: 2.14.1]
• pipx:checkov 3.3.16 → [Updates: 3.3.19]
• pipx:json5 0.15.0
• pipx:yamllint 1.38.0
• shellcheck 0.11.0
• shfmt 3.14.0 → [Updates: 3.14.1]
• trivy 0.74.0
• uv 0.12.7 → [Updates: 0.12.9]
• yamlfmt 0.21.0
• zizmor 1.29.0 → [Updates: 1.30.0]

config-sync/templates/.mise.toml (11)

• actionlint 1.7.12
• dprint 0.56.1 → [Updates: 0.57.0]
• gitleaks 8.30.1
• lefthook 2.1.12 → [Updates: 2.1.14]
• shellcheck 0.11.0
• shfmt 3.14.0 → [Updates: 3.14.1]
• trivy 0.74.0
• yamlfmt 0.21.0
• pipx:yamllint 1.38.0
• pipx:checkov 3.3.16 → [Updates: 3.3.19]
• zizmor 1.29.0 → [Updates: 1.30.0]

regex (11)

.github/workflows/apm-materialize.yml (1)

• apm-cli 0.29.0 → [Updates: 0.31.0]

.github/workflows/autofix-caller.yml (1)

• jdx/mise 2026.8.14 → [Updates: 2026.9.1]

.github/workflows/lint-caller.yml (1)

• jdx/mise 2026.8.14 → [Updates: 2026.9.1]

.github/workflows/test.yml (1)

• jdx/mise 2026.8.14 → [Updates: 2026.9.1]

.mise.toml (1)

• jdx/mise 2026.8.14 → [Updates: 2026.9.1]

apm.yml (1)

• DevSecNinja/ai-toolkit v0.8.0

config-sync/templates/.mise.toml (1)

• jdx/mise 2026.8.14 → [Updates: 2026.9.1]

workflow-templates/autofix.yml (1)

• jdx/mise 2026.8.14 → [Updates: 2026.9.1]

workflow-templates/lint.yml (1)

• jdx/mise 2026.8.14 → [Updates: 2026.9.1]

workflow-templates/pages.yml (2)

• node 24
• wrangler 4.131.0 → [Updates: 4.131.2]

workflow-templates/release.yml (1)

• jdx/mise 2026.8.14 → [Updates: 2026.9.1]

renovate-config (1)

renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository