Skip to content

Dependency Dashboard #579

Open
Open

Description

@fro-bot

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

  • ⚠️ WARN: Hidden Unicode characters have been discovered in file(s) in your repository. See your Renovate logs for more details. Please confirm that they are intended to be there, as they could be an attempt to "smuggle" text into your codebase, or used to confuse tools like Renovate or Large Language Models (LLMs)

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource Package Replacement PR?
bun @octokit/webhooks-types Unavailable

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (2)
Datasource Package Last Updated
bun @semantic-release/exec 2025-05-09
bun web-push 2024-01-16

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

  • build(deps): update Node.js to v26
  • build(dev): update dependency typescript to v7
  • ci(deps): update dependency ubuntu to v26
  • fix(dev): update dependency effect to v4.0.7
  • 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

  • chore(deps): maintain lockfiles

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

  • build(dev): update dependency tsdown to v0.23.4
  • chore(dev): update dependency @opencode/plugin to v2.2.5
  • chore(dev): update dependency eslint to v10.14.0
  • fix(deps): update dependency @aws-sdk/client-s3 to v3.1161.0
  • fix(deps): update dependency discord.js to v14.28.0

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

bun (7)
apps/action/package.json
apps/workspace-agent/package.json (3)
  • @hono/node-server 2.1.5
  • hono 4.13.14
  • vitest 5.0.5
package.json (52)
  • @actions/artifact 6.3.1
  • @actions/cache 6.3.0
  • @actions/core 3.0.1
  • @actions/exec 3.0.0
  • @actions/github 9.1.1
  • @actions/tool-cache 4.0.0
  • @aws-sdk/client-s3 3.1159.0 → [Updates: 3.1161.0]
  • @bfra.me/es 0.1.0
  • @octokit/auth-app 8.3.1
  • @opencode-ai/sdk 1.19.4
  • @bfra.me/eslint-config 0.54.0
  • @bfra.me/prettier-config 0.16.13
  • @bfra.me/tsconfig 0.13.2
  • @octokit/webhooks-types 7.6.1
  • @semantic-release/exec 7.1.0
  • @semantic-release/git 11.0.1
  • @types/node 24.19.2
  • @vitest/eslint-plugin 1.6.28
  • conventional-changelog-conventionalcommits 10.4.1
  • eslint 10.13.0 → [Updates: 10.14.0]
  • eslint-config-prettier 10.1.8
  • eslint-plugin-prettier 5.5.7
  • jiti 2.7.0
  • lint-staged 17.6.0
  • prettier 3.9.10
  • read-package-up 12.0.0
  • semantic-release 25.0.9
  • simple-git-hooks 2.14.0
  • tsdown 0.23.3 → [Updates: 0.23.4]
  • typescript 6.0.3 → [Updates: 7.0.2]
  • vitest 5.0.5
  • bun 1.4.4
  • brace-expansion >=5.0.12
  • conventional-changelog-writer >=9
  • fast-uri >=4.1.5
  • fast-xml-builder >=1.1.7
  • fast-xml-parser >=5.10.1
  • flatted 3.4.4
  • handlebars >=4.7.9
  • ip-address >=10.7.1
  • js-yaml >=4.3.2 <5.0.0 → [Updates: >=4.3.2 <6.0.0]
  • lodash >=4.18.0
  • lodash-es >=4.18.0
  • nanoid >=3.3.18 <4.0.0 → [Updates: >=3.3.18 <7.0.0]
  • picomatch >=4.0.4
  • postcss >=8.5.23
  • postcss-selector-parser >=7.1.6 <8.0.0
  • source-map-js >=1.2.2 <2.0.0
  • tar >=7.5.21
  • undici >=8.10.2
  • vite 8.3.5
  • yaml >=2.8.3
packages/gateway/package.json (8)
  • @hono/node-server 2.1.5
  • @octokit/core 7.0.8
  • discord.js 14.27.0 → [Updates: 14.28.0]
  • effect 3.22.4 → [Updates: 4.0.7]
  • hono 4.13.14
  • web-push 3.6.7
  • yaml 2.9.1
  • @types/web-push 3.6.4
packages/harness/package.json (1)
  • node >=24
packages/opencode-plugin/package.json (5)
  • @opencode/plugin 2.2.0 → [Updates: 2.2.5]
  • effect 4.0.1 → [Updates: 4.0.7]
  • @opencode/plugin ^2.2.0
  • effect ^4.0.0
  • node >=24
packages/runtime/package.json (3)
  • @bfra.me/es 0.1.0
  • @opencode-ai/sdk 1.19.4
  • zod 4.6.7
docker-compose (2)
deploy/compose.override.example.yaml
deploy/compose.yaml (1)
  • mitmproxy/mitmproxy 12.3.1@sha256:2711066c855659b5af8b1dbb84494ed3eff69b42ece439c60b4fe09a2db829d4
dockerfile (2)
deploy/gateway.Dockerfile (2)
  • node 24.22.2-alpine3.24@sha256:8a32c8cf649a49915a66e81e7a609223c708d0adabf288ee3f4077d765542f85 → [Updates: 26.13.0-alpine3.24]
  • node 24.22.2-alpine3.24@sha256:8a32c8cf649a49915a66e81e7a609223c708d0adabf288ee3f4077d765542f85 → [Updates: 26.13.0-alpine3.24]
deploy/workspace.Dockerfile (3)
  • node 24.22.2-alpine3.24@sha256:8a32c8cf649a49915a66e81e7a609223c708d0adabf288ee3f4077d765542f85 → [Updates: 26.13.0-alpine3.24]
  • node 24.22.2-alpine3.24@sha256:8a32c8cf649a49915a66e81e7a609223c708d0adabf288ee3f4077d765542f85 → [Updates: 26.13.0-alpine3.24]
  • node 24.22.2-alpine3.24@sha256:8a32c8cf649a49915a66e81e7a609223c708d0adabf288ee3f4077d765542f85 → [Updates: 26.13.0-alpine3.24]
github-actions (14)
.github/actions/setup/action.yaml (3)
  • oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6
  • actions/setup-node v7.1.0@949feb2413d6458794dcd2491c4babbbce0c15c1
  • actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
.github/workflows/auto-release.yaml (2)
  • actions/create-github-app-token v3.3.0@64ab729a6294000f5aa4a4bc0b73d1f32bc45510
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
.github/workflows/ci.yaml (13)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • dorny/paths-filter v4.0.3@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294
  • actions/create-github-app-token v3.3.0@64ab729a6294000f5aa4a4bc0b73d1f32bc45510
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
.github/workflows/codeql-analysis.yaml (4)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • github/codeql-action v4.39.1@9b3254085494b55a0f7c4c2b3d2d52cc712ce370
  • github/codeql-action v4.39.1@9b3254085494b55a0f7c4c2b3d2d52cc712ce370
  • github/codeql-action v4.39.1@9b3254085494b55a0f7c4c2b3d2d52cc712ce370
.github/workflows/copilot-setup-steps.yaml (1)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
.github/workflows/fro-bot.yaml (4)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333
.github/workflows/harness-integrate.yaml (2)
  • step-security/harden-runner v2.22.3@46b06cea07f9e64621fdf066ba77ac6915163d43
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
.github/workflows/harness-release.yaml (23)
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9
  • actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333
  • actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333
  • actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333
  • actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333
  • actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333
  • actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-node v7@949feb2413d6458794dcd2491c4babbbce0c15c1
  • actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333
  • actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333
  • actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333
  • actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333
  • actions/create-github-app-token v3.3.0@64ab729a6294000f5aa4a4bc0b73d1f32bc45510
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1
  • ubuntu 24.04 → [Updates: 26.04]
  • ubuntu 24.04 → [Updates: 26.04]
  • ubuntu 24.04 → [Updates: 26.04]
  • node 24 → [Updates: 26]
  • ubuntu 24.04 → [Updates: 26.04]
.github/workflows/opencode-plugin-release.yaml (7)
  • actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9
  • actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333
  • actions/setup-node v7@949feb2413d6458794dcd2491c4babbbce0c15c1
  • ubuntu 24.04 → [Updates: 26.04]
  • ubuntu 24.04 → [Updates: 26.04]
  • node 24 → [Updates: 26]
.github/workflows/osv-scanner.yaml (2)
  • google/osv-scanner-action v2.7.0@b1d267aea5211fa648d9d442fa64b90dbdcbdd36
  • google/osv-scanner-action v2.7.0@b1d267aea5211fa648d9d442fa64b90dbdcbdd36
.github/workflows/prepare-release-pr.yaml (2)
  • actions/create-github-app-token v3.3.0@64ab729a6294000f5aa4a4bc0b73d1f32bc45510
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
.github/workflows/renovate.yaml (1)
  • bfra-me/.github v4.43.0@e6a1ab17bb68213940f63de91bd0450acdf9fff4
.github/workflows/scorecard.yaml (4)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • ossf/scorecard-action v2.5.0@fa7117db83c52d787ae5a89f350999701505d78e
  • actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9
  • github/codeql-action v4.39.1@9b3254085494b55a0f7c4c2b3d2d52cc712ce370
.github/workflows/update-repo-settings.yaml (1)
  • bfra-me/.github v4.43.0@e6a1ab17bb68213940f63de91bd0450acdf9fff4
nodenv (1)
.node-version (1)
  • node 24.22.2 → [Updates: 26.13.0]
regex (10)
.github/renovate.json5 (1)
  • bfra-me/renovate-config 5.3.1
deploy/gateway.Dockerfile (1)
  • oven-sh/bun 1.4.4
deploy/workspace.Dockerfile (1)
  • @fro.bot/systematic 3.29.0
deploy/workspace.Dockerfile (1)
  • oven-sh/bun 1.4.4
package.json (1)
  • oven-sh/bun 1.4.4
packages/harness/harness.config.json (1)
  • anomalyco/opencode 1.19.4
packages/harness/src/bun-version.ts (1)
  • oven-sh/bun 1.4.4
packages/runtime/src/shared/constants.ts (1)
  • @fro.bot/systematic 3.29.0
packages/runtime/src/shared/opencode-v2-pin.json (1)
  • anomalyco/opencode 2.2.5
src/services/setup/opencode.ts (1)
  • anomalyco/opencode 1.19.4
renovate-config (1)
.github/renovate.json5

  • Check here to trigger a Renovate run on this repository

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions