Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/checkout digest to df4cb1c
• chore(deps): update actions/upload-artifact digest to 043fb46
• chore(deps): update docker/login-action digest to 650006c
• chore(deps): update dependency prettier to v3.8.4
• chore(deps): update dependency vite to v7.3.6
• chore(deps): update golangci/golangci-lint-action action to v9.2.1
• chore(deps): update dependency @modelcontextprotocol/ext-apps to v1.7.4
• chore(deps): update dependency @types/node to v24.13.2
• chore(deps): update dependency globals to v17.7.0
• fix(deps): update module github.com/mark3labs/mcp-go to v0.55.1
• fix(deps): update module golang.org/x/oauth2 to v0.36.0
• fix(deps): update module google.golang.org/grpc to v1.81.1
• chore(deps): update actions/checkout action to v7
• chore(deps): update dependency typescript to v6
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package arduino/setup-task).

Files affected: .github/workflows/build.yml, .github/workflows/lint.yml, .github/workflows/release.yml, .github/workflows/test.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/setup-go digest to 924ae3a
• chore(deps): update actions/setup-node digest to 48b55a0
• chore(deps): update dependency vite-plugin-singlefile to v2.3.3
• chore(deps): update sigstore/cosign-installer action to v4.1.2
• fix(deps): update module github.com/mindersec/minder to v0.1.2
• chore(deps): update anchore/scan-action action to v7.4.0
• chore(deps): update dependency typescript-eslint to v8.62.0
• chore(deps): update dependency eslint to v10
• chore(deps): update dependency vite to v8
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (6)

.github/workflows/build.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• actions/setup-node v6@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6]
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/upload-artifact v7@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7]
• node 24

.github/workflows/lint.yml (9)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• actions/setup-node v6@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6]
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• golangci/golangci-lint-action v9.2.0@1e7e51e771db61008b38414a730f564565cf7c20 → [Updates: v9.2.1]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-node v6@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6]
• node 24
• node 24

.github/workflows/release.yml (8)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• actions/setup-node v6@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6]
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• docker/login-action v4@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4]
• sigstore/cosign-installer v4.1.0@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 → [Updates: v4.1.2]
• node 24

.github/workflows/security.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• anchore/scan-action v7.3.2@7037fa011853d5a11690026fb85feee79f4c946c → [Updates: v7.4.0]

.github/workflows/test.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6]
• actions/setup-node v6@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6]
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• node 24

.github/workflows/triage.yml (1)

• stacklok/.github v1@b43e3f174f9bbf2ca4efe6e421a1d007e7fa1b8f

gomod (1)

go.mod (9)

• go 1.25
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/mark3labs/mcp-go v0.45.0 → [Updates: v0.55.1]
• github.com/mindersec/minder v0.1.1 → [Updates: v0.1.2]
• github.com/rs/cors v1.11.1
• github.com/stretchr/testify v1.11.1
• golang.org/x/oauth2 v0.35.0 → [Updates: v0.36.0]
• google.golang.org/grpc v1.79.2 → [Updates: v1.81.1]
• google.golang.org/protobuf v1.36.11

npm (1)

ui/compliance-dashboard/package.json (9)

• @modelcontextprotocol/ext-apps ^1.0.1 → [Updates: ^1.0.1]
• @types/node ^24.0.0 → [Updates: ^24.0.0]
• eslint ^9.18.0 → [Updates: ^10.0.0]
• globals ^17.0.0 → [Updates: ^17.0.0]
• prettier ^3.4.2 → [Updates: ^3.4.2]
• typescript ^5.7.3 → [Updates: ^6.0.0]
• typescript-eslint ^8.21.0 → [Updates: ^8.21.0]
• vite ^7.0.0 → [Updates: ^7.0.0, ^8.0.0]
• vite-plugin-singlefile ^2.0.3 → [Updates: ^2.0.3]

---

• Check this box to trigger a request for Renovate to run again on this repository