Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update dependency mise to 2026.6.11

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Pin dependencies (SonarSource/ci-github-actions, SonarSource/release-github-actions, github/gh-aw-actions, jdx/mise-action, jfrog/setup-jfrog-cli)
• Update dependency @clack/core to v1.4.2
• Update dependency smol-toml to v1.7.0
• Update sentry-javascript monorepo
• Update typescript-eslint monorepo to v8.62.0 (@typescript-eslint/eslint-plugin, @typescript-eslint/parser, typescript-eslint)
• Update dependency js-yaml to v5

---

Warning

Renovate failed to look up the following dependencies: Can't find version matching c154b4a417b51cb98dd71137f49bf20e77c56820 for github-digest package SonarSource/vault-action-wrapper.

Files affected: .github/workflows/ci-failure-triage-agent.lock.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency @sentry/cli to v3.5.1
• Update dependency lint-staged to v17
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

bun (1)

package.json (34)

• @clack/core 1.4.1 → [Updates: 1.4.2]
• @sentry/bun 10.58.0 → [Updates: 10.60.0]
• @toon-format/toon 2.3.0
• commander 15.0.0
• js-yaml 4.2.0 → [Updates: 5.1.0]
• openpgp 6.3.1
• picocolors 1.1.1
• smol-toml 1.6.1 → [Updates: 1.7.0]
• picomatch 4.0.4
• @sentry/cli 3.4.2 → [Updates: 3.5.1]
• @sonar/scan 4.3.8
• @types/bun 1.3.14
• @types/istanbul-lib-coverage 2.0.6
• @types/istanbul-lib-instrument 1.7.8
• @types/istanbul-lib-report 3.0.3
• @types/istanbul-reports 3.0.4
• @types/js-yaml 4.0.9
• @types/picomatch 4.0.3
• @typescript-eslint/eslint-plugin 8.61.1 → [Updates: 8.62.0]
• @typescript-eslint/parser 8.61.1 → [Updates: 8.62.0]
• ajv 8.20.0
• eslint 10.5.0
• eslint-config-prettier 10.1.8
• eslint-plugin-headers 1.3.4
• eslint-plugin-simple-import-sort 13.0.0
• husky 9.1.7
• istanbul-lib-instrument 6.0.3
• istanbul-lib-report 3.0.1
• istanbul-reports 3.2.0
• lint-staged 16.4.0 → [Updates: 17.0.7]
• prettier 3.8.4
• typescript 6.0.3
• typescript-eslint 8.61.1 → [Updates: 8.62.0]
• flatted 3.4.2

github-actions (14)

.github/actions/setup-bun/action.yml (2)

• jdx/mise-action v4.1.0@dba19683ed58901619b14f395a24841710cb4925 → [Updates: v4.2.0]
• SonarSource/gh-action_cache v1.7.0@0666e03d7b6480758214db522a3aac989d67b026

.github/workflows/build.yml (30)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• jdx/mise-action v4.1.0@dba19683ed58901619b14f395a24841710cb4925 → [Updates: v4.2.0]
• SonarSource/ci-github-actions 1.6.0@657e44543f55422ffd28b91d62fe5386f07d6030 → [Updates: 1.7.1]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• SonarSource/gh-action_setup-cloudflare-warp v2.1.0@fe31a2b2f31595cffdef290985700732cb3469d6
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• jfrog/setup-jfrog-cli v5.0.0@1641575d87647fb969c0545f0b6a76873e328b7c → [Updates: v5.1.0]
• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• SonarSource/ci-github-actions 1.6.0@657e44543f55422ffd28b91d62fe5386f07d6030 → [Updates: 1.7.1]

.github/workflows/ci-failure-triage-agent.lock.yml (48)

• github/gh-aw-actions v0.79.8@c0338fef4749d08c21f8f975fb0e37efa17dda47 → [Updates: v0.80.4]
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/gh-aw-actions v0.79.8@c0338fef4749d08c21f8f975fb0e37efa17dda47 → [Updates: v0.80.4]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/gh-aw-actions v0.79.8@c0338fef4749d08c21f8f975fb0e37efa17dda47 → [Updates: v0.80.4]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• github/gh-aw-actions v0.79.8@c0338fef4749d08c21f8f975fb0e37efa17dda47 → [Updates: v0.80.4]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• github/gh-aw-actions v0.79.8@c0338fef4749d08c21f8f975fb0e37efa17dda47 → [Updates: v0.80.4]
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• github/gh-aw-actions v0.79.8@c0338fef4749d08c21f8f975fb0e37efa17dda47 → [Updates: v0.80.4]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• SonarSource/vault-action-wrapper c154b4a417b51cb98dd71137f49bf20e77c56820@c154b4a417b51cb98dd71137f49bf20e77c56820
• node 24

.github/workflows/full-release.yml (5)

• SonarSource/release-github-actions 1.7.2@7dd4782e88df1ac018969c71a89266c0d36dd758 → [Updates: v1.8.1]
• SonarSource/release-github-actions 1.7.2@7dd4782e88df1ac018969c71a89266c0d36dd758 → [Updates: v1.8.1]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/notify-failure.yml (2)

• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• slackapi/slack-github-action v3.0.3@45a88b9581bfab2566dc881e2cd66d334e621e2c

.github/workflows/pr-cleanup.yml (1)

• SonarSource/ci-github-actions 1.6.0@657e44543f55422ffd28b91d62fe5386f07d6030 → [Updates: 1.7.1]

.github/workflows/prepare-release-notes.yml (4)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• SonarSource/release-github-actions 1.7.2@7dd4782e88df1ac018969c71a89266c0d36dd758 → [Updates: v1.8.1]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/PullRequestClosed.yml (2)

• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• sonarsource/gh-action-lt-backlog v2

.github/workflows/PullRequestCreated.yml (2)

• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• sonarsource/gh-action-lt-backlog v2

.github/workflows/releasability.yml (1)

• SonarSource/gh-action_releasability 3.0.5@52f09917764eac5a80045d103bfa91e7eaf0c8d6

.github/workflows/release.yml (2)

• SonarSource/gh-action_release 7.4.0@0c9c1cc54cbdd24258f135601d1b77cfc87e67ae
• SonarSource/ci-github-actions master → [Updates: master]

.github/workflows/RequestReview.yml (2)

• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• sonarsource/gh-action-lt-backlog v2

.github/workflows/SubmitReview.yml (2)

• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• sonarsource/gh-action-lt-backlog v2

.github/workflows/update-release-channel.yml (1)

• SonarSource/ci-github-actions master → [Updates: master]

mise (1)

mise.toml (1)

• bun 1.3.14

regex (2)

.github/actions/setup-bun/action.yml (1)

• mise 2026.4.20 → [Updates: 2026.6.11]

.github/workflows/build.yml (1)

• mise 2026.4.20 → [Updates: 2026.6.11]

renovate-config (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository