Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update dependency jdx/mise to v2026.5.15
• chore(deps): update dependency aqua:golangci/golangci-lint to v2.12.2
• chore(deps): update docker/build-push-action action to v7.2.0
• chore(deps): update docker/login-action action to v4.2.0
• chore(deps): update docker/metadata-action action to v6.1.0
• chore(deps): update docker/setup-buildx-action action to v4.1.0
• chore(deps): update koki-develop/claude-renovate-review action to v1.3.1
• fix(deps): update dependency rust to v1.95.0
• fix(deps): update module golang.org/x/sys to v0.45.0
• fix(deps): update node.js to v24.16.0 (node, @types/node)
• chore(deps): update googleapis/release-please-action action to v5
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update docker/setup-qemu-action action to v4.1.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency aqua:evilmartians/lefthook to v2.1.8
• fix(deps): update module github.com/labstack/echo/v5 to v5.1.1
• chore(deps): update actions/create-github-app-token action to v3.2.0
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency typescript to v6
• fix(deps): update dependency ruby to v4

Detected Dependencies

bundler (1)

internal/sandbox/defaults/ruby/Gemfile (3)

• base64 "0.3.0"
• csv "3.3.5"
• fiddle "1.1.8"

docker-compose (1)

compose.yml

dockerfile (1)

Dockerfile (3)

• alpine 3.23.4@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11
• ghcr.io/codize-dev/nsjail latest@sha256:fce880b72103fcd2da8f78c68ca7b574917b2d33b82ae1f2608b93b90f61b44b
• golang 1.26.3-bookworm@sha256:386d475a660466863d9f8c766fec64d7fdad3edac2c6a05020c09534d71edb4b

github-actions (3)

.github/workflows/ci.yml (12)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.1.0]
• docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7.2.0]

.github/workflows/claude-renovate-review.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• koki-develop/claude-renovate-review v1.2.0@831fe686c28d0a9a348bc6cf1d5ce86cc7c8f50d → [Updates: v1.3.1]

.github/workflows/release-please.yml (8)

• actions/create-github-app-token v3.1.1@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 → [Updates: v3.2.0]
• googleapis/release-please-action v4.4.1@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 → [Updates: v5.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.1.0]
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.1.0]
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4.2.0]
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf → [Updates: v6.1.0]
• docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7.2.0]

gomod (1)

go.mod (6)

• go 1.26.3
• github.com/labstack/echo/v5 v5.1.0 → [Updates: v5.1.1]
• github.com/spf13/cobra v1.10.2
• github.com/stretchr/testify v1.11.1
• go.yaml.in/yaml/v4 v4.0.0-rc.4
• golang.org/x/sys v0.43.0 → [Updates: v0.45.0]

mise (1)

mise.toml (8)

• go 1.26.3
• aqua:golangci/golangci-lint 2.11.4 → [Updates: 2.12.2]
• aqua:evilmartians/lefthook 2.1.6 → [Updates: 2.1.8]
• aqua:hadolint/hadolint 2.14.0
• node 24.14.1 → [Updates: 24.16.0]
• ruby 3.4.9 → [Updates: 4.0.5]
• rust 1.94.1 → [Updates: 1.95.0]
• python 3.14.5

npm (2)

internal/sandbox/defaults/node-typescript/package.json (4)

• lodash 4.18.1
• @types/lodash 4.17.24
• @types/node 24.12.2 → [Updates: 24.12.4]
• typescript 5.9.3 → [Updates: 6.0.3]

internal/sandbox/defaults/node/package.json (1)

• lodash 4.18.1

regex (3)

Dockerfile (6)

• jdx/mise 2026.5.14 → [Updates: 2026.5.15]
• node 24.14.1 → [Updates: 24.16.0]
• ruby 3.4.9 → [Updates: 4.0.5]
• go 1.26.3
• python 3.14.5
• rust 1.94.1 → [Updates: 1.95.0]

internal/sandbox/defaults/go/go.mod.tmpl (1)

• go 1.26.3

internal/sandbox/runtime.go (1)

• rust 1.94.1 → [Updates: 1.95.0]

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository