Dependency status 2026W37

[github-actions]

Dependency status

Artifact	Pinned	Latest	Status	Changelog / release notes
IG Publisher	2.3.2	2.3.4	update available	https://github.com/HL7/fhir-ig-publisher/releases
SUSHI (fsh-sushi)	3.20.1	3.20.1	ok	https://github.com/FHIR/sushi/releases
Jekyll	4.4.1	4.4.1	ok	https://github.com/jekyll/jekyll/releases
de.medizininformatikinitiative.template	#ig-template — not a version pin (vendored/floating); see docs/recipes/switch-template-to-published.md	1.3.2	pin not found	https://github.com/forschungsgruppe-digital-health/ig-template-mii-kds/releases
fhir2.base.template	0.1.0	0.1.0	ok	https://github.com/HL7/ig-template-base2/blob/main/package-list.json
forschungsgruppe-digital-health/agent-skills (vendored skills)	v0.15.1	0.25.0	update available	https://github.com/forschungsgruppe-digital-health/agent-skills/blob/main/CHANGELOG.md
de.basisprofil.r4	1.6.0	1.6.0	ok	https://simplifier.net/packages/de.basisprofil.r4
de.medizininformatikinitiative.kerndatensatz.meta	2027.0.0-ballot.rc3	2026.0.0	update available	https://simplifier.net/packages/de.medizininformatikinitiative.kerndatensatz.meta
hl7.fhir.uv.crmi	2.0.0	2.0.0	ok	https://simplifier.net/packages/hl7.fhir.uv.crmi
hl7.fhir.uv.xver-r5.r4	pin not found (not pinned in sushi-config.yaml)	0.1.0	pin not found	https://simplifier.net/packages/hl7.fhir.uv.xver-r5.r4
hl7.terminology.r4	7.3.0	7.3.0	ok	https://simplifier.net/packages/hl7.terminology.r4
hl7.fhir.uv.extensions.r4	5.3.0	5.3.0	ok	https://simplifier.net/packages/hl7.fhir.uv.extensions.r4
de.medizininformatikinitiative.kerndatensatz.molgen	2026.0.4	2026.0.4	ok	https://simplifier.net/packages/de.medizininformatikinitiative.kerndatensatz.molgen
de.medizininformatikinitiative.kerndatensatz.icu	2026.0.3	2026.0.2	update available	https://simplifier.net/packages/de.medizininformatikinitiative.kerndatensatz.icu
de.medizininformatikinitiative.kerndatensatz.studie	2027.0.0-ballot.rc1	2026.0.2	update available	https://simplifier.net/packages/de.medizininformatikinitiative.kerndatensatz.studie
de.medizininformatikinitiative.kerndatensatz.base	2027.0.0-ballot.rc1	2026.0.1	update available	https://simplifier.net/packages/de.medizininformatikinitiative.kerndatensatz.base
de.medizininformatikinitiative.kerndatensatz.medikation	2026.0.1	2026.0.1	ok	https://simplifier.net/packages/de.medizininformatikinitiative.kerndatensatz.medikation

Bumps are proposed only — never auto-merged, never auto-floated.
Review the linked changelog, update the pin in its real location, and —
for an IG Publisher bump — recompute the jar's SHA-256 next to the new
version. Steps: docs/recipes/review-a-dependency-update.md.

The skill-catalog row is bumped with scripts/sync-skills.sh --ref vX.Y.Z,
which re-vendors skills/ and rewrites skills-lock.json in one diff.
Read the catalog's CHANGELOG.md first: a skill can be deprecated or
removed between releases.

pin not found rows are expected until the file/workflow that carries
the pin has landed; they are a reminder, not an error. not yet published on the template package is expected until the IG template's first
release reaches a registry.

THO / Extensions Pack — lockstep with meta

• ⚠️ HL7 Terminology (THO): module pins hl7.terminology.r4@7.3.0 but meta 2027.0.0-ballot.rc3 ships hl7.terminology.r4@7.1.0 — align the module's pin (meta is the family's source of truth).
• ⚠️ HL7 Extensions Pack: module pins hl7.fhir.uv.extensions.r4@5.3.0 but meta 2027.0.0-ballot.rc3 ships hl7.fhir.uv.extensions.r4@5.2.0 — align the module's pin (meta is the family's source of truth).