Dependency Dashboard

[agntcy-automation]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update github actions (actions/checkout, docker/login-action, github/codeql-action)
• chore(deps): update node (@microsoft/api-extractor, @rollup/rollup-linux-x64-gnu, eslint, globals, prettier, typescript-eslint)
• chore(deps): update taskfile (helm/helm, renovatebot/renovate, sigstore/cosign)
• chore(deps): lock file maintenance

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update node (major) (npm, typescript)

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

github-actions (6)

.github/workflows/ci.yaml (5)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• dorny/paths-filter v4.0.2@7b450fff21473bca461d4b92ce414b9d0420d706
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• node 24.x

.github/workflows/codeql.yml (5)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• github/codeql-action v4.37.1@7188fc363630916deb702c7fdcf4e481b751f97a → [Updates: v4.37.3]
• github/codeql-action v4.37.1@7188fc363630916deb702c7fdcf4e481b751f97a → [Updates: v4.37.3]
• node 24.x

.github/workflows/conventional_commits.yml (3)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• webiny/action-conventional-commits v1.4.2@7f91b1595ca1951cdb671ddc9f07a49081ec5b69

.github/workflows/dependencies.yaml (5)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• go-task/setup-task v2.1.0@01a4adf9db2d14c1de7a560f09170b6e0df736aa
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• node 24.x

.github/workflows/reusable-release-sdk.yaml (4)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• go-task/setup-task v2.1.0@01a4adf9db2d14c1de7a560f09170b6e0df736aa
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• node 24.x

.github/workflows/reusable-test-sdk.yaml (8)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• docker/login-action v4.4.0@af1e73f918a031802d376d3c8bbc3fe56130a9b0 → [Updates: v4.5.1]
• go-task/setup-task v2.1.0@01a4adf9db2d14c1de7a560f09170b6e0df736aa
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• node 24.x

npm (1)

package.json (24)

• @connectrpc/connect ^2.1.0
• @connectrpc/connect-node ^2.1.0
• @grpc/grpc-js ^1.14.4
• spiffe ^0.5.0
• @eslint/js ^10.0.0
• @microsoft/api-extractor ^7.58.11 → [Updates: ^7.58.11]
• @rollup/plugin-json ^6.1.0
• @rollup/plugin-node-resolve ^16.0.1
• @types/node ^24.13.3
• @vitest/coverage-v8 ^4.1.10
• eslint ^10.7.0 → [Updates: ^10.7.0]
• eslint-config-prettier ^10.1.8
• globals ^17.0.0 → [Updates: ^17.0.0]
• prettier ^3.9.5 → [Updates: ^3.9.5]
• rollup-plugin-typescript2 ^0.37.0
• ts-node ^10.9.2
• typescript ^6.0.0 → [Updates: ^7.0.0]
• typescript-eslint ^8.64.0 → [Updates: ^8.64.0]
• uuid ^14.0.0
• vitest ^4.1.10
• workerpool ^10.0.3
• @rollup/rollup-linux-x64-gnu 4.62.2 → [Updates: 4.62.3]
• node >=20.0.0
• npm 11.18.0 → [Updates: 12.0.1]

regex (1)

Taskfile.yml (5)

• renovatebot/renovate 43.255.2 → [Updates: 43.272.0]
• helm/helm 4.2.2 → [Updates: 4.2.3]
• kubernetes/kubernetes 1.36.2 → [Updates: 1.36.3]
• sigs.k8s.io/kind 0.32.0
• sigstore/cosign 3.1.1 → [Updates: 3.1.2]

[arpad-csepi]

Not used with renovate bot anymore