Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/bahmutov/cly).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [dependency-check](https://redirect.github.com/dependency-check-team/dependency-check) |  |
| npm | [nsp](https://redirect.github.com/nodesecurity/nsp) |  |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update cycjimmy/semantic-release-action action to v6
- [ ] chore(deps): update dependency mocha to v12
- [ ] fix(deps): update dependency yargs to v18
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): pin dependencies](../pull/171) (`actions/checkout`, `bahmutov/npm-install`, `cycjimmy/semantic-release-action`)
- [ ] [chore(deps): update dependency ban-sensitive-files to v1.10.11](../pull/160)
- [ ] [chore(deps): update dependency standard to v17.1.2](../pull/161)
- [ ] [fix(deps): update dependency debug to v4.4.3](../pull/164)
- [ ] [fix(deps): update dependency shelljs to v0.10.0](../pull/168)
- [ ] [chore(deps): update actions/checkout action to v7](../pull/172)
- [ ] [chore(deps): update dependency dependency-check to v4](../pull/29)
- [ ] [chore(deps): update dependency semantic-release to v25](../pull/104)
- [ ] [chore(deps): update dependency ubuntu to v24](../pull/165)
- [ ] [chore(deps): lock file maintenance](../pull/158)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

github-actions (1)

.github/workflows/ci.yml (10)

- `actions/checkout v3` → [Updates: `v3.7.0`, `v7`]
- `bahmutov/npm-install v1` → [Updates: `v1.12.1`]
- `actions/checkout v3` → [Updates: `v3.7.0`, `v7`]
- `bahmutov/npm-install v1` → [Updates: `v1.12.1`]
- `actions/checkout v3` → [Updates: `v3.7.0`, `v7`]
- `bahmutov/npm-install v1` → [Updates: `v1.12.1`]
- `cycjimmy/semantic-release-action v2` → [Updates: `v2.7.0`, `v6.0.0`]
- `ubuntu 20.04` → [Updates: `24.04`]
- `ubuntu 20.04` → [Updates: `24.04`]
- `ubuntu 20.04` → [Updates: `24.04`]

npm (1)

package.json (14)

- `debug 4.3.4` → [Updates: `4.4.3`]
- `shelljs 0.8.5` → [Updates: `0.10.0`]
- `yargs 12.0.5` → [Updates: `18.1.0`]
- `ban-sensitive-files 1.9.18` → [Updates: `1.10.11`]
- `dependency-check 3.4.1` → [Updates: `4.1.0`]
- `deps-ok 1.4.1`
- `git-issues 1.3.1`
- `license-checker 25.0.1`
- `mocha 5.2.0` → [Updates: `12.0.1`]
- `nsp 3.2.1`
- `pre-git 3.17.1`
- `prettier-standard 16.4.1`
- `standard 17.0.0` → [Updates: `17.1.2`]
- `semantic-release 17.4.7` → [Updates: `25.0.9`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the Renovate Dependency Dashboard documentation, then inspect package.json and .github/workflows/ci.yml alongside the linked pull requests. Determine which listed dependency updates remain actionable and verify the resulting dependency state and CI checks before considering the dashboard entries handled.

Written by the indexing model from the issue text.