Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update anchore/sbom-action action to v0.24.2
• chore(deps): update codecov/codecov-action action to v7.1.1
• chore(deps): update dependency eslint to v10.11.0
• chore(deps): update dependency eslint-plugin-sonarjs to v4.2.1
• chore(deps): update dependency typescript-eslint to v8.70.1
• chore(deps): update step-security/harden-runner action to v2.21.1
• chore(deps): update actions/setup-node action to v7
• chore(deps): update actions/setup-python action to v7
• chore(deps): update dependency @vscode/vsce to v4
• chore(deps): update dependency eslint-plugin-unicorn to v76
• chore(deps): update dependency mocha to v12
• chore(deps): update dependency typescript to v7
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update actions/checkout action to v7

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update github/codeql-action digest to 1c5b675
• chore(deps): update dependency prettier to v3.9.8
• chore(deps): update ossf/scorecard-action action to v2.4.4
• chore(deps): update restyled-io/actions action to v4.4.29
• chore(deps): update softprops/action-gh-release action to v3.0.3
• chore(deps): update sonarsource/sonarqube-scan-action action to v8.2.2
• chore(deps): update actions/attest-build-provenance action to v4.2.2
• chore(deps): update actions/checkout action to v6.1.0
• chore(deps): update actions/setup-node action to v6.5.0
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (19)

.github/workflows/auto-tag.yml (2)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]

.github/workflows/blaze-bot.yml (6)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• tibdex/github-app-token v2@3beb63f4bd073e61482598c45c71c1019b59b73a
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• tibdex/github-app-token v2@3beb63f4bd073e61482598c45c71c1019b59b73a
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/ci.yml (14)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7.1.1]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294
• node 24
• node 24

.github/workflows/ciel-bot.yml (6)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• tibdex/github-app-token v2@3beb63f4bd073e61482598c45c71c1019b59b73a
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• tibdex/github-app-token v2@3beb63f4bd073e61482598c45c71c1019b59b73a
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/dco.yml (4)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• python 3.14

.github/workflows/deploy-docs.yml (2)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]

.github/workflows/generate-readme.yml (4)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• node 24

.github/workflows/hash-check.yml (4)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• node 24

.github/workflows/justice-bot.yml (8)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• tibdex/github-app-token v2@3beb63f4bd073e61482598c45c71c1019b59b73a
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• tibdex/github-app-token v2@3beb63f4bd073e61482598c45c71c1019b59b73a
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• tibdex/github-app-token v2@3beb63f4bd073e61482598c45c71c1019b59b73a
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/luna-bot.yml (6)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• tibdex/github-app-token v2@3beb63f4bd073e61482598c45c71c1019b59b73a
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• tibdex/github-app-token v2@3beb63f4bd073e61482598c45c71c1019b59b73a
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/mimi-bot.yml (6)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• tibdex/github-app-token v2@3beb63f4bd073e61482598c45c71c1019b59b73a
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• tibdex/github-app-token v2@3beb63f4bd073e61482598c45c71c1019b59b73a
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/publish.yml (10)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610 → [Updates: v0.24.2]
• actions/attest-sbom v4.1.0@c604332985a26aa8cf1bdc465b92731239ec6b9e
• actions/attest-build-provenance v4.1.1@0f67c3f4856b2e3261c31976d6725780e5e4c373 → [Updates: v4.2.2]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• softprops/action-gh-release v3.0.1@718ea10b132b3b2eba29c1007bb80653f286566b → [Updates: v3.0.3]
• node 24

.github/workflows/reproducible-builds.yml (4)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• node 24

.github/workflows/restyled.yml (4)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• restyled-io/actions v4.4.27@bce8886781a3a4e9510a248d37a87e64ba143465 → [Updates: v4.4.29]
• restyled-io/actions v4.4.27@bce8886781a3a4e9510a248d37a87e64ba143465 → [Updates: v4.4.29]

.github/workflows/security.yml (30)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• github/codeql-action v4@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 → [Updates: v4]
• github/codeql-action v4@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 → [Updates: v4]
• github/codeql-action v4@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 → [Updates: v4]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• semgrep/semgrep-action v1@713efdd345f3035192eaa63f56867b88e63e4e5d
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• SocketDev/action v1.3.2@ba6de6cc0565af1f42295590380973573297e31f
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a → [Updates: v2.4.4]
• github/codeql-action v4@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 → [Updates: v4]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• node 24
• node 24
• node 24

.github/workflows/slow-bot.yml (6)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• tibdex/github-app-token v2@3beb63f4bd073e61482598c45c71c1019b59b73a
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• tibdex/github-app-token v2@3beb63f4bd073e61482598c45c71c1019b59b73a
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/sonarcloud.yml (5)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• SonarSource/sonarqube-scan-action v8.2.0@713881670b6b3676cda39549040e2d88c70d582e → [Updates: v8.2.2]
• node 24

.github/workflows/unpublish.yml (4)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• node 24

.github/workflows/vex-update.yml (5)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• node 24

npm (3)

extensions/git-id-switcher/package.json (15)

• @eslint/js ^10.0.1
• @types/mocha ^10.0.10
• @types/node ^25.9.3
• @vscode/test-cli ^0.0.15
• @vscode/test-electron ^3.0.0
• @vscode/vsce ^3.9.2 → [Updates: ^4.0.0]
• eslint ^10.5.0 → [Updates: ^10.5.0]
• eslint-plugin-sonarjs ^4.0.3 → [Updates: ^4.0.3]
• eslint-plugin-unicorn ^67.0.0 → [Updates: ^76.0.0]
• fast-check ^4.8.0
• glob ^13.0.6
• mocha ^11.7.6 → [Updates: ^12.0.0]
• typescript ^6.0.0 → [Updates: ^7.0.0]
• typescript-eslint ^8.62.0 → [Updates: ^8.62.0]
• vscode ^1.85.0

package.json (5)

• husky ^9.1.7
• lint-staged ^17.0.8
• prettier ^3.9.1 → [Updates: ^3.9.1]
• serialize-javascript ^7.0.5
• yauzl ^3.2.1

packages/git-id-switcher-npm/package.json

nvm (1)

.nvmrc (1)

• node 24

---

• Check this box to trigger a request for Renovate to run again on this repository