Dependency Dashboard

[agntcy-automation]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@types/uuid

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update dependency renovatebot/renovate to v43.244.1
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update github actions (actions/cache, docker/login-action, dorny/paths-filter, github/codeql-action)
• chore(deps): update node (eslint, npm, prettier, typescript-eslint, workerpool)

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

github-actions (6)

.github/workflows/ci.yaml (5)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• dorny/paths-filter v4.0.1@fbd0ab8f3e69293af611ebaee6363fc25e6d187d → [Updates: v4.0.2]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• node 24.x

.github/workflows/codeql.yml (5)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.36.3]
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.36.3]
• node 24.x

.github/workflows/conventional_commits.yml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• webiny/action-conventional-commits v1.4.2@7f91b1595ca1951cdb671ddc9f07a49081ec5b69

.github/workflows/dependencies.yaml (5)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• go-task/setup-task v2.1.0@01a4adf9db2d14c1de7a560f09170b6e0df736aa
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• node 24.x

.github/workflows/reusable-release-sdk.yaml (4)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• go-task/setup-task v2.1.0@01a4adf9db2d14c1de7a560f09170b6e0df736aa
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• node 24.x

.github/workflows/reusable-test-sdk.yaml (8)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• go-task/setup-task v2.1.0@01a4adf9db2d14c1de7a560f09170b6e0df736aa
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/cache v6.0.0@2c8a9bd7457de244a408f35966fab2fb45fda9c8 → [Updates: v6.1.0]
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• node 24.x

npm (1)

package.json (25)

• @connectrpc/connect ^2.1.0
• @connectrpc/connect-node ^2.1.0
• @grpc/grpc-js ^1.14.4
• spiffe ^0.5.0
• @eslint/js ^10.0.0
• @microsoft/api-extractor ^7.58.7
• @rollup/plugin-json ^6.1.0
• @rollup/plugin-node-resolve ^16.0.1
• @types/node ^24.13.2
• @types/uuid ^11.0.0
• @vitest/coverage-v8 ^4.1.9
• eslint ^10.0.0 → [Updates: ^10.0.0]
• eslint-config-prettier ^10.1.8
• globals ^17.0.0
• prettier ^3.8.3 → [Updates: ^3.8.3]
• rollup-plugin-typescript2 ^0.37.0
• ts-node ^10.9.2
• typescript ^6.0.0
• typescript-eslint ^8.40.0 → [Updates: ^8.40.0]
• uuid ^14.0.0
• vitest ^4.0.0
• workerpool ^10.0.2 → [Updates: ^10.0.2]
• @rollup/rollup-linux-x64-gnu 4.62.2
• node >=20.0.0
• npm 11.17.0 → [Updates: 11.18.0]

regex (1)

Taskfile.yml (5)

• renovatebot/renovate 43.243.2 → [Updates: 43.244.1]
• helm/helm 4.2.2
• kubernetes/kubernetes 1.36.2
• sigs.k8s.io/kind 0.32.0
• sigstore/cosign 3.1.1

[arpad-csepi]

Not used with renovate bot anymore