SonarSource / SonarSource/sonarqube-cli

Dependency Dashboard

Open
#267 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

renovate-dependencies
Dominant language
TypeScript
Stars
279
Forks
19
Avg merge
1d 22h
Merged PRs (30d)
114

Description

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

  • Update dependency bun to v1.4.2
  • Update dependency mise to 2026.9.9
  • πŸ” Create all awaiting schedule PRs at once πŸ”

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

  • Update dependency prettier to v3.9.8
  • Update dependency @sentry/cli to v3.8.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

Detected Dependencies

bun (1)
package.json (35)
  • @clack/core 1.4.3 β†’ [Updates: 1.5.1]
  • @sentry/bun 10.73.0 β†’ [Updates: 10.74.0]
  • @toon-format/toon 2.3.1 β†’ [Updates: 4.1.1]
  • commander 15.0.0
  • js-yaml 5.4.1 β†’ [Updates: 5.4.2]
  • launchdarkly-node-client-sdk 3.4.3
  • neverthrow 8.2.0
  • node-forge 1.4.0
  • openpgp 6.3.1
  • picocolors 1.1.1
  • picomatch 4.0.7
  • smol-toml 1.8.0
  • @ninoseki/eslint-plugin-neverthrow 0.3.1
  • @sentry/cli 3.7.0 β†’ [Updates: 3.8.0]
  • @sonar/scan 5.0.0
  • @types/bun 1.4.1 β†’ [Updates: 1.4.2]
  • @types/istanbul-lib-coverage 2.0.6
  • @types/istanbul-lib-instrument 1.7.8
  • @types/istanbul-lib-report 3.0.3
  • @types/istanbul-reports 3.0.4
  • @types/node-forge 1.3.14
  • @types/picomatch 4.0.3
  • eslint 10.9.1 β†’ [Updates: 10.10.0]
  • eslint-config-prettier 10.1.8
  • eslint-plugin-headers 1.3.4
  • eslint-plugin-simple-import-sort 14.0.0
  • husky 9.1.7
  • istanbul-lib-instrument 6.0.3
  • istanbul-lib-report 3.0.1
  • istanbul-reports 3.2.0
  • lint-staged 16.4.0 β†’ [Updates: 17.5.1]
  • prettier 3.9.6 β†’ [Updates: 3.9.8]
  • typescript 6.0.3 β†’ [Updates: 7.0.2]
  • typescript-eslint 8.69.0 β†’ [Updates: 8.70.0]
  • flatted 3.4.4
github-actions (14)
.github/actions/run-integration-and-e2e/action.yml (3)
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e β†’ [Updates: 3.7.0]
  • actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
.github/actions/setup-bun/action.yml (2)
  • jdx/mise-action v4.3.0@c2a87611a18de5b3828c5652fe268e992400cb5c
  • jdx/mise 2026.8.14
.github/workflows/build.yml (37)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • jdx/mise-action v4.3.0@c2a87611a18de5b3828c5652fe268e992400cb5c
  • SonarSource/ci-github-actions 1.8.9@983645f538ff01044b1e567adb23e6f527d8b52a β†’ [Updates: 2.0.1]
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e β†’ [Updates: 3.7.0]
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • SonarSource/gh-action_setup-cloudflare-warp v2.1.0@fe31a2b2f31595cffdef290985700732cb3469d6
  • actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e β†’ [Updates: 3.7.0]
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • jfrog/setup-jfrog-cli v5.1.0@deda456d982fc5e9a7a020b63eb0d2968aedd33e β†’ [Updates: v5.2.0]
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e β†’ [Updates: 3.7.0]
  • actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e β†’ [Updates: 3.7.0]
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e β†’ [Updates: 3.7.0]
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e β†’ [Updates: 3.7.0]
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e β†’ [Updates: 3.7.0]
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e β†’ [Updates: 3.7.0]
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e β†’ [Updates: 3.7.0]
  • actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • SonarSource/ci-github-actions 1.8.9@983645f538ff01044b1e567adb23e6f527d8b52a β†’ [Updates: 2.0.1]
  • jdx/mise 2026.8.14
  • jfrog-cli 2.77.0
.github/workflows/full-release.yml (5)
  • SonarSource/release-github-actions 1.9.13@c0da64503d0438488fda702c33c797678143be4e β†’ [Updates: 1.9.15]
  • SonarSource/release-github-actions 1.9.13@c0da64503d0438488fda702c33c797678143be4e β†’ [Updates: 1.9.15]
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e β†’ [Updates: 3.7.0]
  • peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1
.github/workflows/notify-failure.yml (2)
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e β†’ [Updates: 3.7.0]
  • slackapi/slack-github-action v3.0.5@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc β†’ [Updates: v4.0.0]
.github/workflows/pr-cleanup.yml (1)
  • SonarSource/ci-github-actions 1.8.9@983645f538ff01044b1e567adb23e6f527d8b52a β†’ [Updates: 2.0.1]
.github/workflows/prepare-release-notes.yml (4)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e β†’ [Updates: 3.7.0]
  • SonarSource/release-github-actions 1.9.13@c0da64503d0438488fda702c33c797678143be4e β†’ [Updates: 1.9.15]
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
.github/workflows/PullRequestClosed.yml (2)
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e β†’ [Updates: 3.7.0]
  • sonarsource/gh-action-lt-backlog v2 β†’ [Updates: v2]
.github/workflows/PullRequestCreated.yml (2)
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e β†’ [Updates: 3.7.0]
  • sonarsource/gh-action-lt-backlog v2 β†’ [Updates: v2]
.github/workflows/releasability.yml (1)
  • SonarSource/gh-action_releasability 3.3.0@760079129287f6a5ae9ffcceecc5d73befdd700c
.github/workflows/release.yml (2)
  • SonarSource/gh-action_release 7.5.0@529f38f4023781f25105e03941ca1a4806bfb27b β†’ [Updates: 7.7.0]
  • SonarSource/ci-github-actions master@d41706a4180f70b6c0d0479795309a6c99726022 β†’ [Updates: master]
.github/workflows/RequestReview.yml (2)
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e β†’ [Updates: 3.7.0]
  • sonarsource/gh-action-lt-backlog v2 β†’ [Updates: v2]
.github/workflows/SubmitReview.yml (2)
  • SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e β†’ [Updates: 3.7.0]
  • sonarsource/gh-action-lt-backlog v2 β†’ [Updates: v2]
.github/workflows/update-release-channel.yml (1)
  • SonarSource/ci-github-actions master@d41706a4180f70b6c0d0479795309a6c99726022 β†’ [Updates: master]
mise (1)
mise.toml (1)
  • bun 1.4.0 β†’ [Updates: 1.4.2]
regex (2)
.github/actions/setup-bun/action.yml (1)
  • mise 2026.8.14 β†’ [Updates: 2026.9.9]
.github/workflows/build.yml (1)
  • mise 2026.8.14 β†’ [Updates: 2026.9.9]
renovate-config (1)
.github/renovate.json
  • Check this box to trigger a request for Renovate to run again on this repository

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up β€” it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

This is a Renovate-generated dashboard rather than a single change request. Start with package.json, .github/renovate.json, mise.toml, and the listed GitHub Actions workflow files; review the linked pull requests and dependency status, and consider it done only when the intended updates are resolved and checks pass.

Written by the indexing model from the issue text.

Assessment

Tech stack
bun, github-actions, typescript
Domain
ci-cd, cli, tooling
Issue type
Refactor
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
10/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.