Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Repository Problems

Renovate tried to run on this repository, but found these problems.

- ⚠️ WARN: Package lookup failures

## Abandoned Dependencies

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>
> These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (4)

| Datasource | Name | Last Updated |
|------------|------|-------------|
| gomod | `github.com/google/go-cmp` | `2025-01-14` |
| npm | `clsx` | `2024-04-23` |
| npm | `cookiejs` | `2023-11-26` |
| npm | `prism-react-renderer` | `2024-12-11` |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] fix(deps): update module github.com/stretchr/testify to v1.11.1
- [ ] chore(deps): update actions/setup-go action to v6
- [ ] chore(deps): update actions/setup-node action to v6
- [ ] chore(deps): update dependency @tsconfig/docusaurus to v2
- [ ] chore(deps): update dependency cspell to v9
- [ ] chore(deps): update dependency typescript to v5
- [ ] fix(deps): update dependency @mdx-js/react to v3
- [ ] fix(deps): update dependency clsx to v2
- [ ] fix(deps): update dependency docusaurus-lunr-search to v3
- [ ] fix(deps): update dependency prism-react-renderer to v2
- [ ] fix(deps): update docusaurus monorepo to v3 (major) (`@docusaurus/core`, `@docusaurus/module-type-aliases`, `@docusaurus/preset-classic`)
- [ ] fix(deps): update react monorepo to v19 (major) (`react`, `react-dom`)
- [ ] chore(deps): lock file maintenance
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

---

> [!WARNING]
> Renovate failed to look up the following dependencies: `Could not determine new digest for update (github-tags package grafana/shared-workflows)`.
>
> Files affected: `.github/workflows/deploy-to-developer-portal-dev.yml`, `.github/workflows/deploy-to-developer-portal-prod.yml`

---

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(deps): update module github.com/grafana/grafana-plugin-sdk-go to v0.250.0 [security]](../pull/60)
- [ ] [chore(deps): pin dependencies](../pull/61) (`@tsconfig/docusaurus`, `actions/checkout`, `actions/setup-go`, `typescript`)
- [ ] [chore(deps): update google-github-actions/setup-gcloud digest to aa5489c](../pull/62)
- [ ] [chore(deps): update dependency docusaurus-lunr-search to v2.4.2](../pull/63)
- [ ] [fix(deps): update docusaurus monorepo to v2.4.3](../pull/64) (`@docusaurus/core`, `@docusaurus/module-type-aliases`, `@docusaurus/preset-classic`)
- [ ] [chore(deps): update actions/checkout action to v4.3.1](../pull/70)
- [ ] [chore(deps): update dependency cspell to v8.19.4](../pull/71)
- [ ] [chore(deps): update dependency turbo to v2.8.9](../pull/72)
- [ ] [fix(deps): update module github.com/google/go-cmp to v0.7.0](../pull/68)
- [ ] [chore(deps): update actions/checkout action to v6](../pull/74)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Vulnerabilities

> [!IMPORTANT]
> `4`/`4` CVEs have Renovate fixes.

gomod

examples/go.mod

github.com/grafana/grafana-plugin-sdk-go

- [GO-2024-3140](https://osv.dev/vulnerability/GO-2024-3140) (fixed in >= 0.250.0)
- [GHSA-xxxw-3j6h-q7h6](https://osv.dev/vulnerability/GHSA-xxxw-3j6h-q7h6) (fixed in >= 0.250.0)

sdata/go.mod

github.com/grafana/grafana-plugin-sdk-go

- [GO-2024-3140](https://osv.dev/vulnerability/GO-2024-3140) (fixed in >= 0.250.0)
- [GHSA-xxxw-3j6h-q7h6](https://osv.dev/vulnerability/GHSA-xxxw-3j6h-q7h6) (fixed in >= 0.250.0)

## Detected Dependencies

github-actions (3)

.github/workflows/ci.yml (3)

- `actions/checkout v3` → [Updates: `v6`, `v3`]
- `actions/setup-go v3` → [Updates: `v6`, `v3`]
- `go 1.22.4`

.github/workflows/deploy-to-developer-portal-dev.yml (5)

- `actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683` → [Updates: `v4.3.1`, `v6.0.2`]
- `actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020` → [Updates: `v6.2.0`]
- `grafana/shared-workflows v0.2.0@64c35f1dffd024130947f485ed6a150edfe83d22`
- `google-github-actions/setup-gcloud 77e7a554d41e2ee56fc945c52dfd3f33d12def9a` → [Updates: `undefined`]
- `node 22`

.github/workflows/deploy-to-developer-portal-prod.yml (5)

- `actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683` → [Updates: `v4.3.1`, `v6.0.2`]
- `actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020` → [Updates: `v6.2.0`]
- `grafana/shared-workflows v0.2.0@64c35f1dffd024130947f485ed6a150edfe83d22`
- `google-github-actions/setup-gcloud 77e7a554d41e2ee56fc945c52dfd3f33d12def9a` → [Updates: `undefined`]
- `node 22`

gomod (3)

examples/go.mod (3)

- `go 1.22.4`
- `github.com/grafana/grafana-plugin-sdk-go v0.236.0` → [Updates: `v0.250.0`]
- `github.com/stretchr/testify v1.9.0` → [Updates: `v1.11.1`]

go.mod (1)

- `go 1.22.4`

sdata/go.mod (4)

- `go 1.22.4`
- `github.com/google/go-cmp v0.6.0` → [Updates: `v0.7.0`]
- `github.com/grafana/grafana-plugin-sdk-go v0.236.0` → [Updates: `v0.250.0`]
- `github.com/stretchr/testify v1.9.0` → [Updates: `v1.11.1`]

npm (4)

docusaurus/website/package.json (13)

- `@docusaurus/core 2.4.0` → [Updates: `2.4.3`, `3.9.2`]
- `@docusaurus/preset-classic 2.4.0` → [Updates: `2.4.3`, `3.9.2`]
- `@mdx-js/react ^1.6.22` → [Updates: `^3.0.0`]
- `clsx ^1.2.1` → [Updates: `^2.0.0`]
- `cookiejs ^2.1.2`
- `docusaurus-lunr-search ^2.4.1` → [Updates: `^2.4.1`, `^3.0.0`]
- `prism-react-renderer ^1.3.5` → [Updates: `^2.0.0`]
- `react ^17.0.2` → [Updates: `^19.0.0`]
- `react-dom ^17.0.2` → [Updates: `^19.0.0`]
- `@docusaurus/module-type-aliases 2.4.0` → [Updates: `2.4.3`, `3.9.2`]
- `@tsconfig/docusaurus ^1.0.5` → [Updates: `1.0.7`, `^2.0.0`]
- `typescript ^4.7.4` → [Updates: `4.9.5`, `^5.0.0`]
- `node >=16`

examples/package.json

package.json (3)

- `cspell 8.9.1` → [Updates: `8.19.4`, `9.6.4`]
- `turbo 2.0.5` → [Updates: `2.8.9`]
- `yarn 1.22.22`

sdata/package.json

---
## Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.