ethereum-optimism / ethereum-optimism/optimism

Renovate CVE Dashboard

Open
#22,070 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
6.5k
Forks
4k
Avg merge
2d 18h
Merged PRs (30d)
134

Description

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [security: Update dependency sharp@0.33.5 to v0.35.4 [SECURITY]](../pull/22831)

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [security: Update module github.com/pion/dtls/v2 to v3 [SECURITY]](../pull/22463)
- [ ] [security: Update module github.com/pion/stun to v2 [SECURITY]](../pull/22498)

## Detected Dependencies

cargo (71)

rust/alloy-op-evm/Cargo.toml

rust/alloy-op-hardforks/Cargo.toml

rust/Cargo.toml

rust/kona/bin/client/Cargo.toml

rust/kona/bin/host/Cargo.toml

rust/kona/bin/node/Cargo.toml

rust/kona/crates/node/disc/Cargo.toml

rust/kona/crates/node/engine/Cargo.toml

rust/kona/crates/node/gossip/Cargo.toml

rust/kona/crates/node/peers/Cargo.toml

rust/kona/crates/node/rpc/Cargo.toml

rust/kona/crates/node/safedb/Cargo.toml

rust/kona/crates/node/service/Cargo.toml

rust/kona/crates/node/sources/Cargo.toml

rust/kona/crates/proof/driver/Cargo.toml

rust/kona/crates/proof/executor/Cargo.toml

rust/kona/crates/proof/mpt/Cargo.toml

rust/kona/crates/proof/preimage/Cargo.toml

rust/kona/crates/proof/proof-interop/Cargo.toml

rust/kona/crates/proof/proof/Cargo.toml

rust/kona/crates/proof/std-fpvm-proc/Cargo.toml

rust/kona/crates/proof/std-fpvm/Cargo.toml

rust/kona/crates/protocol/derive/Cargo.toml

rust/kona/crates/protocol/genesis/Cargo.toml

rust/kona/crates/protocol/hardforks/Cargo.toml

rust/kona/crates/protocol/interop/Cargo.toml

rust/kona/crates/protocol/protocol/Cargo.toml

rust/kona/crates/protocol/registry/Cargo.toml

rust/kona/crates/providers/providers-alloy/Cargo.toml

rust/kona/crates/providers/providers-local/Cargo.toml

rust/kona/crates/utilities/cli/Cargo.toml

rust/kona/crates/utilities/serde/Cargo.toml

rust/kona/sp1/crates/client/Cargo.toml

rust/kona/sp1/crates/ethereum/client/Cargo.toml

rust/kona/sp1/crates/host/Cargo.toml

rust/kona/sp1/crates/proposer/Cargo.toml

rust/kona/sp1/crates/super-range-executor/Cargo.toml

rust/kona/sp1/crates/zkvm-canary/Cargo.toml

rust/kona/sp1/programs/Cargo.toml

rust/kona/sp1/programs/super-aggregation/Cargo.toml

rust/kona/sp1/programs/super-range/Cargo.toml

rust/lokahi/Cargo.toml

rust/op-alloy/crates/consensus/Cargo.toml

rust/op-alloy/crates/network/Cargo.toml

rust/op-alloy/crates/op-alloy/Cargo.toml

rust/op-alloy/crates/provider/Cargo.toml

rust/op-alloy/crates/rpc-jsonrpsee/Cargo.toml

rust/op-alloy/crates/rpc-types-engine/Cargo.toml

rust/op-alloy/crates/rpc-types/Cargo.toml

rust/op-reth-test-engine/Cargo.toml

rust/op-reth/bin/Cargo.toml

rust/op-reth/bin/proof-bench/Cargo.toml

rust/op-reth/crates/chainspec/Cargo.toml

rust/op-reth/crates/cli/Cargo.toml

rust/op-reth/crates/consensus/Cargo.toml

rust/op-reth/crates/evm/Cargo.toml

rust/op-reth/crates/exex/Cargo.toml

rust/op-reth/crates/flashblocks/Cargo.toml

rust/op-reth/crates/hardforks/Cargo.toml

rust/op-reth/crates/node/Cargo.toml

rust/op-reth/crates/payload/Cargo.toml

rust/op-reth/crates/post-exec-replay/Cargo.toml

rust/op-reth/crates/primitives/Cargo.toml

rust/op-reth/crates/reth/Cargo.toml

rust/op-reth/crates/rpc/Cargo.toml

rust/op-reth/crates/sdm-fixture-node/Cargo.toml

rust/op-reth/crates/storage/Cargo.toml

rust/op-reth/crates/trie/Cargo.toml

rust/op-reth/crates/txpool/Cargo.toml

rust/op-revm/Cargo.toml

rust/revm-ee-tests/Cargo.toml

circleci (5)

.circleci/config.yml

.circleci/continue/main.yml

.circleci/continue/rust-ci.yml

.circleci/continue/rust-e2e.yml

.circleci/continue/rust-nightly-bump.yml

docker-compose (3)

docs/public-docs/create-l2-rollup-example/docker-compose.yml

rust/kona/docker/recipes/kona-node-dev/compose.yaml

rust/kona/docker/recipes/kona-node/docker-compose.yaml

dockerfile (11)

cannon/Dockerfile.diff

op-up/Dockerfile

ops/docker/deployment-utils/Dockerfile

ops/docker/op-stack-go/Dockerfile

rust/kona/docker/apps/kona_app_generic.dockerfile

rust/kona/docker/asterisc/asterisc.dockerfile

rust/kona/docker/cannon/cannon.dockerfile

rust/kona/docker/fpvm-prestates/cannon-repro.dockerfile

rust/kona/docker/recipes/kona-node-dev/kona-node/kona-node.dockerfile

rust/kona/docker/recipes/kona-node-dev/op-reth/op-reth.dockerfile

rust/op-reth/DockerfileOp

github-actions (6)

.github/actions/docker-build-prep/action.yml

.github/workflows/build-images.apko.yaml

.github/workflows/dependency-review.yml

.github/workflows/pr-title.yml

.github/workflows/renovate.yaml

.github/workflows/security.yml

gomod (10)

cannon/testdata/common/go.mod

cannon/testdata/diff-hello/go.mod

go.mod (2)

- `github.com/pion/dtls/v2 v2.2.12` → [Updates: `v3.0.0`]
- `github.com/pion/stun v0.6.1` → [Updates: `v2.0.0`]

ops/scripts/check-op-geth-version/testdata/invalid-geth-encoding/go.mod

ops/scripts/check-op-geth-version/testdata/invalid-version/go.mod

ops/scripts/check-op-geth-version/testdata/no-replacement/go.mod

ops/scripts/check-op-geth-version/testdata/pseudoversion/go.mod

ops/scripts/check-op-geth-version/testdata/valid-rc/go.mod

ops/scripts/check-op-geth-version/testdata/valid/go.mod

ops/scripts/check-op-geth-version/testdata/wrong-replacement/go.mod

mise (1)

docs/public-docs/create-l2-rollup-example/mise.toml

nodenv (1)

docs/public-docs/.node-version

npm (2)

docs/public-docs/package.json (1)

- `sharp@0.33.5 0.35.0` → [Updates: `0.35.4`]

docs/public-docs/pnpm-workspace.yaml

nvm (1)

docs/public-docs/.nvmrc

renovate-config (1)

renovate.json

rust-toolchain (1)

rust/rust-toolchain.toml

Contributor guide

Open the contributing guide

Research direction

Read the linked Renovate Dependency Dashboard documentation first, then inspect go.mod, docs/public-docs/package.json, the listed rust/**/Cargo.toml files, renovate.json, and the relevant CI workflow files. The dashboard shows existing security update PRs and blocked updates, so completion would require resolving the listed dependency status rather than making one localized change.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, docker-compose, github-actions, go, javascript, rust
Domain
build-system, ci-cd, devops, security
Issue type
Refactor
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
15/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.