Repository navigation
Dependency Dashboard #274
Description
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Rate-Limited
The following updates are currently rate-limited. To force their creation now, click on a checkbox below.
- chore(deps): update actions/setup-node action to v7
- chore(deps): update actions/upload-artifact action to v7
- chore(deps): update googleapis/release-please-action action to v5
- chore(deps): update node.js to v26
- 🔐 Create all rate-limited PRs at once 🔐
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
- chore(deps): update github actions (
actions/download-artifact,anchore/sbom-action,github/codeql-action,step-security/harden-runner,zizmorcore/zizmor-action) - chore(deps): update actions/github-script action to v9
- chore(deps): update actions/labeler action to v7
- Click on this checkbox to rebase all open PRs at once
Detected Dependencies
github-actions (19)
.github/workflows/beta.yml (23)
actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02→ [Updates:v7]actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02→ [Updates:v7]actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02→ [Updates:v7]actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02→ [Updates:v7]actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c→ [Updates:v8.0.2]actions/attest-build-provenance v4@4d101475d8b20a2381f78447822ac1eab6504dd8actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c→ [Updates:v8.0.2]windows 2025node 22→ [Updates:26]node 22→ [Updates:26]node 22→ [Updates:26]node 22→ [Updates:26]node 22→ [Updates:26].github/workflows/ci.yml (20)
actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]codecov/codecov-action v7.1.1@303a32d7a59b442fa8d48b6a1cc6825c09c847a5codecov/codecov-action v7.1.1@303a32d7a59b442fa8d48b6a1cc6825c09c847a5actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02→ [Updates:v7]node 22→ [Updates:26]node 22→ [Updates:26]node 22→ [Updates:26]node 22→ [Updates:26]node 22→ [Updates:26].github/workflows/codeql.yml (3)
actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1github/codeql-action v4.38.2@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2→ [Updates:v4.39.3]github/codeql-action v4.38.2@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2→ [Updates:v4.39.3].github/workflows/dependency-review.yml (2)
actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294.github/workflows/dev-artifact-validation.yml (2)
actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1windows 2025.github/workflows/dev-card-exploration.yml (5)
actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02→ [Updates:v7]windows 2025node 22→ [Updates:26].github/workflows/ghostdeps.yml (1)
actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1.github/workflows/guide-drift.yml (6)
actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]node 22→ [Updates:26]node 22→ [Updates:26].github/workflows/hosted-build.yml (4)
step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1→ [Updates:v2.22.4]actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]node 22→ [Updates:26].github/workflows/hosted-deploy.yml (7)
step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1→ [Updates:v2.22.4]actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1→ [Updates:v2.22.4]actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1→ [Updates:v2.22.4]node 22→ [Updates:26].github/workflows/issue-labels.yml (1)
actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd→ [Updates:v9].github/workflows/linux-desktop.yml (3)
actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]node 22→ [Updates:26].github/workflows/mira-pause.yml (1)
actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd→ [Updates:v9].github/workflows/pull-request-labels.yml (3)
actions/labeler v6@b8dd2d9be0f68b860e7dae5dae7d772984eacd6d→ [Updates:v7]actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd→ [Updates:v9]actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd→ [Updates:v9].github/workflows/recover-release.yml (5)
actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c→ [Updates:v8.0.2]actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c→ [Updates:v8.0.2]node 22→ [Updates:26].github/workflows/release-cadence.yml (3)
googleapis/release-please-action v4@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071→ [Updates:v5]actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1.github/workflows/release.yml (18)
step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1→ [Updates:v2.22.4]actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]anchore/sbom-action v0.24.2@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26→ [Updates:v0.24.3]actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02→ [Updates:v7]actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02→ [Updates:v7]step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1→ [Updates:v2.22.4]actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c→ [Updates:v8.0.2]actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c→ [Updates:v8.0.2]actions/attest-build-provenance v4@4d101475d8b20a2381f78447822ac1eab6504dd8node 22→ [Updates:26]windows 2025node 22→ [Updates:26]node 22→ [Updates:26].github/workflows/windows.yml (6)
actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020→ [Updates:v7]actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02→ [Updates:v7]actions/attest-build-provenance v4@4d101475d8b20a2381f78447822ac1eab6504dd8actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02→ [Updates:v7]node 22→ [Updates:26].github/workflows/workflow-security.yml (3)
actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1zizmorcore/zizmor-action v0.6.4@cc914d7f3750a2d13d75c7f184a1060aa0e9d482→ [Updates:v0.8.1]
npm (2)
hosted/package.json (1)
node 22.x→ [Updates:26.x]package.json (3)
sharp ^0.35.5ghost-deps ^0.1.6node >=22
- Check this box to trigger a request for Renovate to run again on this repository
Activity
rowkav09 commentedon Sep 24, 2026
Triage for the 0.2 freeze (QA lane): every pending Renovate update is held until 0.2.0 ships. None of them fixes a security issue.
npm auditshows 0 vulnerabilities for both prod and dev dependencies.test/labeler-config.test.js.