Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Run Logs

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update nsheaps + squink github actions (nsheaps/agents, nsheaps/ai-mktpl)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency bun to v1.4.2
• chore(deps): update dependency pipx:litellm to v1.101.0
• chore(deps): update postgres docker tag to v18
• chore(deps): pin dependencies (actions/checkout, actions/create-github-app-token, ghcr.io/berriai/litellm, marocchino/sticky-pull-request-comment, prom/prometheus, qoomon/actions--context, stefanzweifel/git-auto-commit-action)
• chore(deps): update actions/checkout digest to 3d3c42e
• chore(deps): update actions/create-github-app-token digest to bcd2ba4
• chore(deps): update anthropics/claude-code-action digest to 3b8197d

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-digest package nsheaps/github-actions).

Files affected: .github/workflows/cd.yaml, .github/workflows/release.yaml, .github/workflows/test.yaml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency npm:@anthropic-ai/claude-code to v2.1.163 [security]

Vulnerabilities

Important

2/2 CVEs have Renovate fixes.

mise

mise.toml

@anthropic-ai/claude-code

• GHSA-7835-87q9-rgvv (fixed in >= 2.1.163)
• GHSA-fg94-h982-f3mm (fixed in >= 2.1.163)

Detected Dependencies

bun (10)

apps/pr-status-cli/package.json (2)

• @types/node ^26.0.0
• typescript ^7.0.0

lib/agents-pg-utils/package.json

package.json (8)

• gray-matter ^4.0.3
• @release-it/bumper ^8.0.0
• @release-it/conventional-changelog ^12.0.0
• @types/bun ^1.1.0
• nx ^23.0.0
• prettier ^3.0.0
• release-it ^21.0.0
• typescript ^7.0.0

packages/agent-api/package.json

packages/agent-browser/package.json

packages/agent-ui/package.json

plugins/package.json

services/agent-cluster-controller/package.json

services/agent-controller/package.json

services/agent-web/package.json

docker-compose (1)

services/dev-litellm/docker-compose.yaml (3)

• ghcr.io/berriai/litellm main-stable → [Updates: main-stable]
• postgres 16 → [Updates: 18, 16]
• prom/prometheus unknown version → [Updates: undefined]

github-actions (13)

.github/actions/github-app-auth/action.yml (2)

• actions/create-github-app-token v3 → [Updates: v3]
• actions/checkout v7 → [Updates: v7]

.github/actions/setup-mise-and-bun/action.yaml (1)

• jdx/mise-action v4 → [Updates: v4]

.github/workflows/apply-repo-settings.yaml (2)

• nsheaps/github-actions main@1e129396b6f0b39257efac9a255010fe64a68ef8
• nsheaps/github-actions main@1e129396b6f0b39257efac9a255010fe64a68ef8

.github/workflows/cd.yaml (5)

• actions/checkout v7 → [Updates: v7]
• jdx/mise-action v4 → [Updates: v4]
• marocchino/sticky-pull-request-comment v3.0.5 → [Updates: v3.0.5]
• nsheaps/github-actions checkout-as-app@main@603052841cd49b9fdc99bc32979ff9c45c9b669e
• jdx/mise-action v4 → [Updates: v4]

.github/workflows/dispatch-review.yaml (1)

• nsheaps/agents main@57debfca1958b3632acd8b9a29bff99573b99993 → [Updates: main]

.github/workflows/pr-status-dispatch.yaml (2)

• nsheaps/github-actions main@1e129396b6f0b39257efac9a255010fe64a68ef8
• peter-evans/repository-dispatch v4@28959ce8df70de7be546dd1250a005dd32156697

.github/workflows/release.yaml (4)

• nsheaps/github-actions checkout-as-app@main@603052841cd49b9fdc99bc32979ff9c45c9b669e
• jdx/mise-action v4 → [Updates: v4]
• actions/checkout v7 → [Updates: v7]
• qoomon/actions--context v5 → [Updates: v5]

.github/workflows/review-dispatch.yaml (5)

• actions/create-github-app-token v3@f8d387b68d61c58ab83c6c016672934102569859 → [Updates: v3]
• LouisBrunner/checks-action v3.1.0@937cbbcde3259005b50746dc91cde29098aac2ff
• peter-evans/repository-dispatch v4@28959ce8df70de7be546dd1250a005dd32156697
• LouisBrunner/checks-action v3.1.0@937cbbcde3259005b50746dc91cde29098aac2ff
• LouisBrunner/checks-action v3.1.0@937cbbcde3259005b50746dc91cde29098aac2ff

.github/workflows/review-receiver.yaml (8)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• LouisBrunner/checks-action v3.1.0@937cbbcde3259005b50746dc91cde29098aac2ff
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• LouisBrunner/checks-action v3.1.0@937cbbcde3259005b50746dc91cde29098aac2ff
• LouisBrunner/checks-action v3.1.0@937cbbcde3259005b50746dc91cde29098aac2ff
• LouisBrunner/checks-action v3.1.0@937cbbcde3259005b50746dc91cde29098aac2ff

.github/workflows/sync-main-to-edge.yaml (1)

• nsheaps/github-actions main@1e129396b6f0b39257efac9a255010fe64a68ef8

.github/workflows/sync-plugin-specs.yaml (1)

• nsheaps/github-actions main@1e129396b6f0b39257efac9a255010fe64a68ef8

.github/workflows/test.yaml (4)

• nsheaps/github-actions checkout-as-app@main@603052841cd49b9fdc99bc32979ff9c45c9b669e
• stefanzweifel/git-auto-commit-action v7 → [Updates: v7]
• actions/checkout v7 → [Updates: v7]
• actions/checkout v7 → [Updates: v7]

plugins/claude-code/review-utils/actions/run-agent/action.yaml (7)

• qoomon/actions--context v5@e12e182be797e3476990faf801dd1b87f107f91c
• actions/create-github-app-token v3@f8d387b68d61c58ab83c6c016672934102569859 → [Updates: v3]
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• LouisBrunner/checks-action v3.1.0@937cbbcde3259005b50746dc91cde29098aac2ff
• nsheaps/ai-mktpl main@08d1043c9e012610b983331f921f781b995df294 → [Updates: main]
• anthropics/claude-code-action v1@537ffff2eff706bd7e3e1c3daf2d4b39067a9f85 → [Updates: v1]
• LouisBrunner/checks-action v3.1.0@937cbbcde3259005b50746dc91cde29098aac2ff

mise (1)

mise.toml (6)

• jq 1.8.2
• bun 1.3.14 → [Updates: 1.4.2]
• node 24.21.0
• npm:@anthropic-ai/claude-code 2.1.128 → [Updates: 2.1.163]
• pipx:litellm 1.97.0 → [Updates: 1.101.0]
• tilt 0.37.7

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository