Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/chrisleekr/github-app).

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| bun | [@octokit/webhooks-types](https://redirect.github.com/octokit/webhooks) |  |

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): update docker:29-dind docker digest to 5efed98
- [ ] chore(deps): update bun runtime to v1.4.2 (`bun`, `oven/bun`)
- [ ] chore(deps): update dependency fast-uri to v3.1.7
- [ ] chore(deps): update dockerfile tool versions (`@anthropic-ai/claude-code`, `argoproj/argo-cd`, `asdf-vm/asdf`, `fluxcd/flux2`, `golang`, `hadolint/hadolint`, `hashicorp/terraform`, `helm/helm`, `kubernetes/kubernetes`, `mikefarah/yq`, `nvm-sh/nvm`, `poetry`, `terraform-linters/tflint`)
- [ ] chore(deps): update dependency @anthropic-ai/sdk to v0.124.0
- [ ] chore(deps): update dependency express-rate-limit to v8.7.0
- [ ] chore(deps): update dependency fast-xml-builder to v1.3.1
- [ ] chore(deps): update dependency fast-xml-parser to v5.11.1
- [ ] chore(deps): update dependency hono to v4.13.7
- [ ] chore(deps): update github-actions (`actions/cache`, `actions/checkout`, `actions/setup-python`, `anthropics/claude-code-action`, `docker/build-push-action`, `docker/login-action`, `docker/metadata-action`, `docker/setup-buildx-action`, `github/codeql-action`)
- [ ] fix(deps): update production dependencies (`@anthropic-ai/bedrock-sdk`, `picomatch`)
- [ ] chore(deps): update dependency fast-uri to v4
- [ ] chore(deps): update dependency js-yaml to v5
- [ ] chore(deps): update dependency protobufjs to v8
- [ ] chore(deps): update dev dependencies (major) (`@commitlint/cli`, `@commitlint/config-conventional`, `@types/node`, `eslint-plugin-simple-import-sort`, `typescript`)
- [ ] chore(deps): update github-actions (major) (`actions/cache`, `actions/checkout`, `actions/setup-python`, `gitleaks/gitleaks-action`, `googleapis/release-please-action`)
- [ ] fix(deps): update dependency @kubernetes/client-node to v2
- [ ] 🔐 **Create all awaiting schedule PRs at once** 🔐

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update dependency adm-zip to v0.6.1
- [ ] chore(deps): update dependency yaml to v2.9.1

## Detected Dependencies

asdf (1)

.tool-versions (1)

- `bun 1.4.1` → [Updates: `1.4.2`]

bun (1)

package.json (49)

- `@anthropic-ai/bedrock-sdk ^0.29.0` → [Updates: `^0.33.0`]
- `@anthropic-ai/claude-agent-sdk ^0.3.208`
- `@huggingface/transformers ^4.2.0`
- `@kubernetes/client-node ^1.4.0` → [Updates: `^2.0.0`]
- `@modelcontextprotocol/sdk ^1.29.0`
- `@octokit/webhooks 14.2.0`
- `@octokit/webhooks-types ^7.6.1`
- `cron-parser ^5.5.0`
- `octokit ^5.0.5`
- `picomatch 4.0.5` → [Updates: `4.0.7`]
- `pino ^10.3.1`
- `zod ^4.3.6`
- `@commitlint/cli ^20.5.0` → [Updates: `^21.0.0`]
- `@commitlint/config-conventional ^20.5.0` → [Updates: `^21.0.0`]
- `@eslint/js ^10.0.1`
- `@octokit/plugin-paginate-graphql ^6.0.0`
- `@types/bun ^1.4.1`
- `@types/node ^25.6.0` → [Updates: `^26.0.0`]
- `@types/picomatch ^4.0.3`
- `eslint ^10.2.1`
- `eslint-config-prettier ^10.1.8`
- `eslint-plugin-security ^4.0.0`
- `eslint-plugin-simple-import-sort ^13.0.0` → [Updates: `^14.0.0`]
- `husky ^9.1.7`
- `lint-staged ^17.0.0`
- `pino-pretty ^13.1.3`
- `prettier ^3.8.3`
- `typescript ^6.0.3` → [Updates: `^7.0.0`]
- `typescript-eslint ^8.58.2`
- `bun >=1.4.1`
- `bun 1.4.1` → [Updates: `1.4.2`]
- `@anthropic-ai/sdk 0.120.0` → [Updates: `0.124.0`]
- `@hono/node-server 2.1.1`
- `adm-zip 0.6.0` → [Updates: `0.6.1`]
- `express-rate-limit 8.5.2` → [Updates: `8.7.0`]
- `fast-uri 3.1.6` → [Updates: `3.1.7`, `4.1.3`]
- `fast-xml-builder 1.2.0` → [Updates: `1.3.1`]
- `fast-xml-parser 5.7.0` → [Updates: `5.11.1`]
- `flatted 3.4.4`
- `form-data 4.0.6`
- `hono 4.12.34` → [Updates: `4.13.7`]
- `ip-address 10.7.0`
- `js-yaml 4.3.2` → [Updates: `5.4.1`]
- `path-to-regexp 8.4.2`
- `picomatch 4.0.7`
- `protobufjs 7.6.6` → [Updates: `8.8.0`]
- `sharp 0.35.4`
- `ws 8.21.3`
- `yaml 2.9.0` → [Updates: `2.9.1`]

docker-compose (1)

docker-compose.dev.yml (1)

- `valkey/valkey 9`

dockerfile (2)

Dockerfile.daemon (4)

- `docker/dockerfile 1`
- `oven/bun 1.4.1` → [Updates: `1.4.2`]
- `docker 29-cli`
- `docker 29-cli`

Dockerfile.orchestrator (2)

- `docker/dockerfile 1`
- `oven/bun 1.4.1` → [Updates: `1.4.2`]

github-actions (8)

.github/workflows/ci.yml (8)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `oven-sh/setup-bun v2.2.0@0c5077e51419868618aeaa5fe8019c62421857d6`
- `actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae` → [Updates: `v5.1.0`, `v6.1.0`]
- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `oven-sh/setup-bun v2.2.0@0c5077e51419868618aeaa5fe8019c62421857d6`
- `valkey/valkey 9`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/docker-build.yml (10)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5` → [Updates: `v4.3.0`]
- `docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee` → [Updates: `v4.6.0`]
- `docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf` → [Updates: `v7.3.0`]
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c`
- `docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5` → [Updates: `v4.3.0`]
- `docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee` → [Updates: `v4.6.0`]
- `docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9` → [Updates: `v6.2.0`]
- `ubuntu 24.04`

.github/workflows/docs.yml (5)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `oven-sh/setup-bun v2.2.0@0c5077e51419868618aeaa5fe8019c62421857d6`
- `actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405` → [Updates: `v6.3.0`, `v7.0.0`]
- `ubuntu 24.04`
- `python 3.x`

.github/workflows/generate-labels.yml (3)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `srvaroa/labeler v1@9c29ad1ef33d169f9ef33c52722faf47a566bcf3`
- `ubuntu 24.04`

.github/workflows/release-please.yml (3)

- `googleapis/release-please-action v4.4.1@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071` → [Updates: `v5.0.0`]
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/research.yml (3)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `anthropics/claude-code-action v1.0.140@fbda2eb1bdc90d319b8d853f5deb53bca199a7c1` → [Updates: `v1.0.217`]
- `ubuntu 24.04`

.github/workflows/secrets-scan.yml (3)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `gitleaks/gitleaks-action v2.3.9@ff98106e4c7b2bc287b24eaf42907196329070c7` → [Updates: `v3.0.0`]
- `ubuntu 24.04`

.github/workflows/trivy-scan.yml (5)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee` → [Updates: `v4.6.0`]
- `aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25`
- `github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e` → [Updates: `v4.37.9`]
- `ubuntu 24.04`

gitlabci (1)

.gitlab-ci.yml (6)

- `oven/bun 1.4.1-alpine` → [Updates: `1.4.2-alpine`]
- `valkey/valkey 9`
- `oven/bun 1.4.1-alpine@sha256:2ef545220f7a886f22fcb3f2309bbd6bcf1c0aa04b7d79c31765c7aa4a13aac1` → [Updates: `1.4.2-alpine`]
- `docker 29-dind@sha256:12e683a161823b2a839aeea999b9d960e6e1f9a97b1679ad6b441982e2d9cf07` → [Updates: `29-dind`]
- `docker 29-dind`
- `docker 29-dind`

nvm (1)

.nvmrc (1)

- `node 25`

pip_requirements (1)

docs/requirements.txt (4)

- `mkdocs-material >=9.5,<10`
- `Pillow >=12.2.0,<13`
- `cairosvg >=2.7,<3`
- `mike >=2.1,<3`

regex (3)

.gitlab-ci.yml (1)

- `oven/bun 1.4.1-alpine@sha256:2ef545220f7a886f22fcb3f2309bbd6bcf1c0aa04b7d79c31765c7aa4a13aac1` → [Updates: `1.4.2-alpine`]

Dockerfile.daemon (18)

- `@anthropic-ai/claude-code 2.1.236` → [Updates: `2.1.263`]
- `kubernetes/kubernetes v1.36.2` → [Updates: `v1.37.0`]
- `helm/helm v4.2.1` → [Updates: `v4.2.4`]
- `hashicorp/terraform 1.15.6` → [Updates: `1.16.1`]
- `aws/aws-cli 2.34.32`
- `mikefarah/yq v4.53.3` → [Updates: `v4.53.6`]
- `asdf-vm/asdf v0.19.0` → [Updates: `v0.20.0`]
- `nvm-sh/nvm v0.40.5` → [Updates: `v0.40.7`]
- `kubernetes-sigs/kustomize v5.8.1`
- `derailed/k9s v0.51.0`
- `stern/stern v1.34.0`
- `argoproj/argo-cd v3.4.3` → [Updates: `v3.5.2`]
- `fluxcd/flux2 v2.8.8` → [Updates: `v2.9.5`]
- `terraform-linters/tflint v0.63.1` → [Updates: `v0.64.0`]
- `koalaman/shellcheck v0.11.0`
- `hadolint/hadolint v2.14.0` → [Updates: `v2.15.1`]
- `golang 1.26.4` → [Updates: `1.27.1`]
- `poetry 2.4.1` → [Updates: `2.4.3`]

Dockerfile.orchestrator (1)

- `@anthropic-ai/claude-code 2.1.236` → [Updates: `2.1.263`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository