Renovate Dashboard 🤖

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (4)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	EndBug/label-sync	2024-02-13
github-actions	github/issue-labeler	2024-01-31
mise	shellcheck	2025-08-04

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• build(mise): lock file maintenance tool [automerge]

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(mise): update tool lefthook to v2.1.11 [automerge]
• chore(mise): update tool dprint to v0.56.1 [automerge]

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(github-release): update release jdx/mise to v2026.8.5 [automerge]
• chore(github-tag): update tag github/codeql-action to v4.37.7 [automerge]
• chore(github-tag): update tag jdx/mise-action to v4.2.5 [automerge]
• chore(github-tag): update tag step-security/harden-runner to v2.20.1 [automerge]
• chore(mise): update tool pipx:checkov to v3.3.11 [automerge]
• chore(mise): update tool uv to v0.12.4 [automerge]
• chore(deps): update dependency apm-cli to v0.28.0 [automerge]
• chore(deps): update dependency wrangler to v4.125.0 [automerge]
• chore(github-tag): update tag devsecninja/.github to v2.4.0 [automerge]
• chore(mise): update tool trivy to v0.73.0 [automerge]
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (1)

• ghcr.io/devsecninja/dotfiles-devcontainer v0.6.0@sha256:238aec66927da1d67f7f7225123c1d207f7c01c93d451fab7189c94d53453940

github-actions (30)

.github/workflows/apm-materialize.yml (5)

• DevSecNinja/.github v2.2.0@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 → [Updates: v2.4.0]
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• DevSecNinja/.github v2.2.0@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 → [Updates: v2.4.0]
• ubuntu 24.04

.github/workflows/apm-sync.yml (5)

• DevSecNinja/.github v2.2.0@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 → [Updates: v2.4.0]
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• DevSecNinja/.github v2.2.0@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 → [Updates: v2.4.0]
• ubuntu 24.04

.github/workflows/assign-issue-to-codeowners.yml (2)

• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• ubuntu 24.04

.github/workflows/autofix.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.2.4@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 → [Updates: v4.2.5]
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}

.github/workflows/config-sync.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• DevSecNinja/.github v2.2.0@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 → [Updates: v2.4.0]
• ubuntu 24.04

.github/workflows/label-sync.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• EndBug/label-sync v2.3.3@52074158190acb45f3077f9099fea818aa43f97a
• ubuntu 24.04

.github/workflows/labeler.yml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/labeler v7.0.0@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13
• github/issue-labeler v3.4@c1b0f9f52a63158c4adc09425e858e87b32e9685
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/lint.yml (50)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.2.4@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 → [Updates: v4.2.5]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.2.4@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 → [Updates: v4.2.5]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.2.4@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 → [Updates: v4.2.5]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.2.4@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 → [Updates: v4.2.5]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.2.4@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 → [Updates: v4.2.5]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• golangci/golangci-lint-action v9.3.0@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.2.4@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 → [Updates: v4.2.5]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.2.4@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 → [Updates: v4.2.5]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.2.4@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 → [Updates: v4.2.5]
• github/codeql-action v4.37.4@f205ea1c3313d32999d8d6a48b4f6530d4437b38 → [Updates: v4.37.7]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.2.4@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 → [Updates: v4.2.5]
• github/codeql-action v4.37.4@f205ea1c3313d32999d8d6a48b4f6530d4437b38 → [Updates: v4.37.7]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.2.4@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 → [Updates: v4.2.5]
• github/codeql-action v4.37.4@f205ea1c3313d32999d8d6a48b4f6530d4437b38 → [Updates: v4.37.7]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04
• golangci/golangci-lint ${{ inputs.golangci-lint-version }}
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}
• ubuntu 24.04

.github/workflows/pages.yml (38)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/configure-pages v6.0.0@45bfe0192ca1faeb007ade9deae92b16b8254a0d
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-pages-artifact v5.0.0@fc324d3547104276b827a68afc52ff2a11cc49c9
• actions/deploy-pages v5.0.0@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• cloudflare/wrangler-action v4.0.0@ebbaa1584979971c8614a24965b4405ff95890e0
• cloudflare/wrangler-action v4.0.0@ebbaa1584979971c8614a24965b4405ff95890e0
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• cloudflare/wrangler-action v4.0.0@ebbaa1584979971c8614a24965b4405ff95890e0
• cloudflare/wrangler-action v4.0.0@ebbaa1584979971c8614a24965b4405ff95890e0
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• node ${{ inputs.node-version }}
• go ${{ inputs.go-version }}
• ubuntu 24.04
• node ${{ inputs.node-version }}
• go ${{ inputs.go-version }}
• ubuntu 24.04
• node ${{ inputs.node-version }}
• go ${{ inputs.go-version }}
• ubuntu 24.04
• node ${{ inputs.node-version }}
• go ${{ inputs.go-version }}
• ubuntu 24.04

.github/workflows/release-please-caller.yml (1)

• DevSecNinja/.github main@fa92001d3877b58e3c8f8b0fa2f6f9230fbb0792 → [Updates: main]

.github/workflows/release-please.yml (3)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• googleapis/release-please-action v5.0.0@45996ed1f6d02564a971a2fa1b5860e934307cf7
• ubuntu 24.04

.github/workflows/release.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.2.4@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 → [Updates: v4.2.5]
• ubuntu 24.04
• jdx/mise ${{ inputs.mise-version }}

.github/workflows/renovate-pr-cooldown.yml (2)

• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• ubuntu 24.04

.github/workflows/sync-labels.yml (1)

• DevSecNinja/.github main@195660c2cde322b4f9402a20be4b2dac2fef77e0 → [Updates: main]

.github/workflows/test.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jdx/mise-action v4.2.4@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 → [Updates: v4.2.5]
• ubuntu 24.04
• jdx/mise 2026.8.0

.github/workflows/todo-to-issue.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• alstr/todo-to-issue-action v5.1.15@37bb7b56e58569ef273b60678048030a7f0c261a
• ubuntu 24.04

.github/workflows/vendored-file-sync.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• DevSecNinja/.github v2.2.0@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 → [Updates: v2.4.0]
• ubuntu 24.04

actions/harden-runner/action.yml (1)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]

actions/release-publish/action.yml (2)

• jdx/mise-action v4.2.4@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 → [Updates: v4.2.5]
• jdx/mise ${{ inputs.mise-version }}

workflow-templates/assign-issue-to-codeowners.yml (1)

• DevSecNinja/.github v2.2.0@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 → [Updates: v2.4.0]

workflow-templates/autofix.yml (1)

• DevSecNinja/.github main@42b7c72b7ea3a1ba0002e0bec84a86cb8a8f896a → [Updates: main]

workflow-templates/config-sync.yml (1)

• DevSecNinja/.github v2.2.0@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 → [Updates: v2.4.0]

workflow-templates/label-sync.yml (1)

• DevSecNinja/.github v2.2.0@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 → [Updates: v2.4.0]

workflow-templates/labeler.yml (1)

• DevSecNinja/.github v2.2.0@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 → [Updates: v2.4.0]

workflow-templates/lint.yml (1)

• DevSecNinja/.github v2.2.0@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 → [Updates: v2.4.0]

workflow-templates/pages.yml (1)

• DevSecNinja/.github v2.2.0@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 → [Updates: v2.4.0]

workflow-templates/release-please.yml (1)

• DevSecNinja/.github v2.2.0@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 → [Updates: v2.4.0]

workflow-templates/release.yml (1)

• DevSecNinja/.github v2.2.0@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 → [Updates: v2.4.0]

workflow-templates/renovate-pr-cooldown.yml (1)

• DevSecNinja/.github main@46c8d52b2f3ca613956756a583332ba84b7f938e → [Updates: main]

workflow-templates/todo-to-issue.yml (1)

• DevSecNinja/.github v2.2.0@783a7a3a03ae71efcdf5b13eaea80efe26dfa641 → [Updates: v2.4.0]

mise (2)

.mise.toml (14)

• actionlint 1.7.12
• cocogitto 7.0.0
• dprint 0.55.2 → [Updates: 0.56.1]
• gitleaks 8.30.1
• git-cliff 2.13.1
• pipx:checkov 3.3.9 → [Updates: 3.3.11]
• pipx:json5 0.15.0
• pipx:yamllint 1.38.0
• shellcheck 0.11.0
• shfmt 3.13.1
• trivy 0.72.0 → [Updates: 0.73.0]
• uv 0.12.1 → [Updates: 0.12.4]
• yamlfmt 0.21.0
• zizmor 1.29.0

config-sync/templates/.mise.toml (11)

• actionlint 1.7.12
• dprint 0.55.2 → [Updates: 0.56.1]
• gitleaks 8.30.1
• lefthook 2.1.10 → [Updates: 2.1.11]
• shellcheck 0.11.0
• shfmt 3.13.1
• trivy 0.72.0 → [Updates: 0.73.0]
• yamlfmt 0.21.0
• pipx:yamllint 1.38.0
• pipx:checkov 3.3.9 → [Updates: 3.3.11]
• zizmor 1.29.0

regex (11)

.github/workflows/apm-materialize.yml (1)

• apm-cli 0.27.0 → [Updates: 0.28.0]

.github/workflows/autofix-caller.yml (1)

• jdx/mise 2026.8.0 → [Updates: 2026.8.5]

.github/workflows/lint-caller.yml (1)

• jdx/mise 2026.8.0 → [Updates: 2026.8.5]

.github/workflows/test.yml (1)

• jdx/mise 2026.8.0 → [Updates: 2026.8.5]

.mise.toml (1)

• jdx/mise 2026.8.0 → [Updates: 2026.8.5]

apm.yml (1)

• DevSecNinja/ai-toolkit v0.8.0

config-sync/templates/.mise.toml (1)

• jdx/mise 2026.8.0 → [Updates: 2026.8.5]

workflow-templates/autofix.yml (1)

• jdx/mise 2026.8.0 → [Updates: 2026.8.5]

workflow-templates/lint.yml (1)

• jdx/mise 2026.8.0 → [Updates: 2026.8.5]

workflow-templates/pages.yml (2)

• node 24
• wrangler 4.123.0 → [Updates: 4.125.0]

workflow-templates/release.yml (1)

• jdx/mise 2026.8.0 → [Updates: 2026.8.5]

renovate-config (1)

renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository