Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update docker/build-push-action digest to f9f3042
• chore(deps): update docker/login-action digest to 650006c
• chore(deps): update docker/metadata-action digest to 80c7e94
• chore(deps): update docker/setup-buildx-action digest to d7f5e7f
• chore(deps): update ghcr.io/nvidia/openshell-community/sandboxes/base docker digest to aeef1c6
• chore(deps): update actions/checkout action to v6.0.3
• chore(deps): update dependency go to v1.26.4
• chore(deps): update dependency nvidia/openshell to v0.0.66
• chore(deps): update vitest monorepo to v4.1.9
• fix(deps): update module github.com/googlecloudplatform/functions-framework-go to v1.9.2
• fix(deps): update module github.com/knights-analytics/hugot to v0.7.5
• chore(deps): update cloudflare/wrangler-action action to v3.15.0
• chore(deps): update dependency @cloudflare/vitest-pool-workers to ^0.16.0
• chore(deps): update dependency @cloudflare/workers-types to v4.20260621.1
• chore(deps): update dependency @types/node to v22.20.0
• chore(deps): update dependency cytoscape to v3.33.1
• chore(deps): update dependency svelte-check to v4.6.0
• chore(deps): update dependency wrangler to v4.103.0
• chore(deps): update dependency yaml to v2.9.0
• chore(deps): update docker/setup-qemu-action action to v4.1.0
• chore(deps): update python docker tag to v3.14
• fix(deps): update module golang.org/x/crypto to v0.53.0
• fix(deps): update module golang.org/x/term to v0.44.0
• fix(deps): update module golang.org/x/text to v0.38.0
• chore(deps): update actions/cache action to v5
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/github-script action to v9
• chore(deps): update actions/setup-go action to v6
• chore(deps): update actions/stale action to v10
• chore(deps): update astral-sh/setup-uv action to v8
• chore(deps): update cloudflare/wrangler-action action to v4
• chore(deps): update codecov/codecov-action action to v7
• chore(deps): update dependency @sveltejs/vite-plugin-svelte to v7
• chore(deps): update dependency concurrently to v10
• chore(deps): update dependency cross-env to v10
• chore(deps): update dependency jsdom to v29
• chore(deps): update dependency typescript to v6
• chore(deps): update dependency vite to v8
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): update google-github-actions/auth action to v3
• chore(deps): update node.js to v24 (node, @types/node)
• chore(deps): update sigstore/cosign-installer action to v4
• fix(deps): update dependency svelte-spa-router to v5
• fix(deps): update module github.com/charmbracelet/lipgloss to v2
• fix(deps): update octokit monorepo to v22
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency svelte to v5.55.7 [security]
• chore(deps): update dependency mermaid to v11.15.0 [security]
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (2)

images/code/Containerfile

images/sandbox/Containerfile (1)

• ghcr.io/nvidia/openshell-community/sandboxes/base sha256:11c73b5a90297f59172abc1b0cd36dc87a2be3a942c4ed604a4da653a4c67c68 → [Updates: undefined]

git-submodules (1)

.gitmodules (1)

• experiments main@bafeb37fed9e492c6a9052278d7ef41d82659f58

github-actions (24)

.github/actions/setup-gcp/action.yml (1)

• google-github-actions/auth v3

.github/workflows/branch-cleanup.yml (1)

• actions/checkout v6.0.2 → [Updates: v6.0.3, v7.0.0]

.github/workflows/e2e.yml (5)

• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/setup-go v5 → [Updates: v6]
• google-github-actions/auth v2 → [Updates: v3]
• actions/upload-artifact v4 → [Updates: v7]

.github/workflows/fullsend.yaml (1)

• fullsend-ai/.fullsend main

.github/workflows/lint.yml (11)

• actions/checkout v6.0.2 → [Updates: v6.0.3, v7.0.0]
• actions/setup-go v5 → [Updates: v6]
• actions/setup-python v6.2.0
• astral-sh/setup-uv v7.6.0 → [Updates: v8.2.0]
• codecov/codecov-action v5 → [Updates: v7]
• actions/checkout v6.0.2 → [Updates: v6.0.3, v7.0.0]
• astral-sh/setup-uv v7.6.0 → [Updates: v8.2.0]
• actions/checkout v6.0.2 → [Updates: v6.0.3, v7.0.0]
• actions/setup-node v6
• python 3.12 → [Updates: 3.14]
• node 22 → [Updates: 24]

.github/workflows/notify-adr-slack.yml

.github/workflows/pat-cleanup.yml (2)

• actions/checkout v4 → [Updates: v7]
• actions/setup-go v5 → [Updates: v6]

.github/workflows/release.yml (4)

• actions/checkout v6.0.2 → [Updates: v6.0.3, v7.0.0]
• actions/setup-go v6
• sigstore/cosign-installer v3 → [Updates: v4.1.2]
• goreleaser/goreleaser-action v7

.github/workflows/reusable-code.yml (3)

• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]

.github/workflows/reusable-dispatch.yml (7)

• actions/checkout v6 → [Updates: v7]
• fullsend-ai/fullsend v0
• fullsend-ai/fullsend v0
• fullsend-ai/fullsend v0
• fullsend-ai/fullsend v0
• fullsend-ai/fullsend v0
• fullsend-ai/fullsend v0

.github/workflows/reusable-fix.yml (3)

• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]

.github/workflows/reusable-prioritize.yml (2)

• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]

.github/workflows/reusable-retro.yml (3)

• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]

.github/workflows/reusable-review.yml (3)

• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]

.github/workflows/reusable-triage.yml (3)

• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]

.github/workflows/sandbox-images.yml (13)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• docker/login-action v4@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4]
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.1.0]
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4]
• docker/metadata-action v6@030e881283bb7a6894de51c315a6bfe6a94e05cf → [Updates: v6]
• docker/build-push-action v7@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• docker/login-action v4@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4]
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.1.0]
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4]
• docker/metadata-action v6@030e881283bb7a6894de51c315a6bfe6a94e05cf → [Updates: v6]
• docker/build-push-action v7@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7]
• docker/build-push-action v7@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7]

.github/workflows/site-build.yml (4)

• actions/checkout v6.0.2 → [Updates: v6.0.3, v7.0.0]
• actions/setup-node v6
• actions/upload-artifact v4 → [Updates: v7]
• node 22 → [Updates: 24]

.github/workflows/site-deploy.yml (8)

• actions/checkout v6.0.2 → [Updates: v6.0.3, v7.0.0]
• actions/setup-node v6
• actions/download-artifact v4 → [Updates: v8]
• actions/github-script v8 → [Updates: v9]
• cloudflare/wrangler-action v3.14.1 → [Updates: v3.15.0, v4.0.0]
• cloudflare/wrangler-action v3.14.1 → [Updates: v3.15.0, v4.0.0]
• actions/github-script v8 → [Updates: v9]
• node 22 → [Updates: 24]

.github/workflows/stale.yml (1)

• actions/stale v9 → [Updates: v10]

action.yml (5)

• actions/setup-go v6
• actions/cache v4 → [Updates: v5]
• actions/cache v4 → [Updates: v5]
• actions/setup-go v6
• actions/upload-artifact v7

internal/scaffold/fullsend-repo/.github/workflows/dispatch.yml (1)

• actions/checkout v6 → [Updates: v7]

internal/scaffold/fullsend-repo/.github/workflows/prioritize-scheduler.yml (2)

• actions/checkout v6 → [Updates: v7]
• fullsend-ai/fullsend v0

internal/scaffold/fullsend-repo/.github/workflows/repo-maintenance.yml (3)

• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• fullsend-ai/fullsend v0

internal/scaffold/fullsend-repo/.github/workflows/retro.yml

gomod (3)

go.mod (14)

• go 1.26.0
• github.com/charmbracelet/lipgloss v1.1.0 → [Updates: v2.0.4]
• github.com/google/uuid v1.6.0
• github.com/knights-analytics/hugot v0.7.1 → [Updates: v0.7.5]
• github.com/playwright-community/playwright-go v0.5700.1
• github.com/pquerna/otp v1.5.0
• github.com/spf13/cobra v1.10.2
• github.com/stretchr/testify v1.11.1
• golang.org/x/crypto v0.50.0 → [Updates: v0.53.0]
• golang.org/x/oauth2 v0.36.0
• golang.org/x/term v0.42.0 → [Updates: v0.44.0]
• golang.org/x/text v0.36.0 → [Updates: v0.38.0]
• gopkg.in/yaml.v3 v3.0.1
• github.com/fullsend-ai/fullsend/internal/mintcore v0.0.0

internal/mint/go.mod (3)

• go 1.26
• github.com/GoogleCloudPlatform/functions-framework-go v1.9.0 → [Updates: v1.9.2]
• github.com/fullsend-ai/fullsend/internal/mintcore v0.0.0

internal/mintcore/go.mod (2)

• go 1.26
• github.com/stretchr/testify v1.11.1

html (1)

web/public/graph.html (1)

• cytoscape 3.30.4@sha384-H3uzGzTfGHUAumB8+s4GEdfFwzAceN9wCCndN8AXubWKFIPuBSWKKtWDx7RhSf/z → [Updates: 3.33.1, 3.30.4]

mise (1)

mise.toml (2)

• node 22 → [Updates: 24]
• go 1.26.0 → [Updates: 1.26.4]

npm (1)

package.json (33)

• @octokit/rest ^21.1.1 → [Updates: ^22.0.0]
• github-slugger ^2.0.0
• gray-matter ^4.0.3
• mdast-util-to-string ^4.0.0
• mermaid ^11.14.0 → [Updates: ^11.14.0]
• rehype-sanitize ^6.0.0
• rehype-slug ^6.0.0
• rehype-stringify ^10.0.1
• remark-gfm ^4.0.1
• remark-parse ^11.0.0
• remark-rehype ^11.1.2
• svelte-spa-router ^4.0.1 → [Updates: ^5.0.0]
• unified ^11.0.5
• unist-util-visit ^5.1.0
• yaml ^2.4.2 → [Updates: ^2.4.2]
• @cloudflare/vitest-pool-workers ^0.14.7 → [Updates: ^0.16.0]
• @cloudflare/workers-types ^4.20250420.0 → [Updates: ^4.20250420.0]
• @sveltejs/vite-plugin-svelte ^5.0.0 → [Updates: ^7.0.0]
• @tsconfig/svelte ^5.0.0
• @types/hast ^3.0.4
• @types/mdast ^4.0.4
• @types/node ^22.0.0 → [Updates: ^22.0.0, ^24.0.0]
• concurrently ^9.1.2 → [Updates: ^10.0.0]
• cross-env ^7.0.3 → [Updates: ^10.0.0]
• jsdom ^25.0.0 → [Updates: ^29.0.0]
• svelte ^5.0.0 → [Updates: ^5.0.0]
• svelte-check ^4.0.0 → [Updates: ^4.0.0]
• toml-eslint-parser ^1.0.3
• typescript ^5.6.0 → [Updates: ^6.0.0]
• vite ^6.0.0 → [Updates: ^8.0.0]
• vitest ^4.1.4 → [Updates: ^4.1.4]
• wrangler ^4.36.0 → [Updates: ^4.36.0]
• node >=22

pyenv (1)

.python-version (1)

• python 3.12 → [Updates: 3.14]

regex (1)

.github/scripts/openshell-version.sh (1)

• NVIDIA/OpenShell 0.0.63@ec197a43ef349e36c3fff04e9aaea9599fb83b31 → [Updates: 0.0.66]

---

• Check this box to trigger a request for Renovate to run again on this repository

[fullsend-ai-triage]

🤖 Finished Triage · ✅ Success · Started 8:26 AM UTC · Completed 8:28 AM UTC
Commit: 4e21a60 · View workflow run →

[fullsend-ai-triage]

Triage Summary

This is an automated Renovate Dependency Dashboard — a living issue maintained by the Renovate bot to track detected dependencies and available updates.

Key observations

• 2 open security PRs require attention: chore(deps): update dependency svelte to v5.55.7 [security] #2481 (svelte security update) and chore(deps): update dependency mermaid to v11.15.0 [security] #2482 (mermaid security update)
• 40+ rate-limited updates are queued, spanning GitHub Actions, Go modules, npm packages, Docker images, and more
• A config migration is available — select the checkbox in the issue body to trigger it

Recommended actions

1. Review and merge the two security update PRs (chore(deps): update dependency svelte to v5.55.7 [security] #2481, chore(deps): update dependency mermaid to v11.15.0 [security] #2482)
2. Periodically unblock rate-limited updates by selecting their checkboxes
3. Consider the config migration if Renovate configuration needs modernizing

No developer investigation is needed — this issue is self-maintaining.

---

Labels: Automated Renovate dependency dashboard tracking dependency updates across the repository.