Dependency Dashboard

[fro-bot]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update actions/cache action to v6

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(dev): update dependency @types/node to v24.13.2
• chore(deps): maintain lockfiles
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(dev): update dependency eslint to v10.6.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update pnpm to v11.9.0

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

github-actions (24)

.github/actions/setup/action.yaml (2)

• jdx/mise-action v4.2.0@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d
• actions/cache v5.1.0@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6.1.0]

.github/workflows/apply-branding.yaml

.github/workflows/capture-learnings.yaml (3)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• fro-bot/agent v0.79.1@720b72169446b01bbc4042834ab948d4e3cef8d0

.github/workflows/check-private-leak.yaml (2)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• jdx/mise-action v4.2.0@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d

.github/workflows/codeql-analysis.yaml (3)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4.36.2]
• github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4.36.2]

.github/workflows/copilot-setup-steps.yaml (1)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/dependency-review.yaml (2)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294

.github/workflows/dispatch-renovate.yaml (2)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/fro-bot.yaml (2)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• fro-bot/agent v0.79.1@720b72169446b01bbc4042834ab948d4e3cef8d0

.github/workflows/gateway-rollout-tracker.yaml (1)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/main.yaml (7)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• rhysd/actionlint v1.7.12@914e7df21a07ef503a81201c76d2b11c789d3fca
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/manage-cache.yaml (2)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/manage-issues.yaml (5)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/stale v10.3.0@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• dessant/lock-threads v6.0.0@7266a7ce5c1df01b1c6db85bf8cd86c737dadbe7 → [Updates: v6.0.2]

.github/workflows/merge-data.yaml (3)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/poll-invitations.yaml (1)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/private-leak-sentinel.yaml

.github/workflows/reconcile-repos.yaml (2)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/renovate.yaml (1)

• bfra-me/.github v4.16.0@65caa6a021ae4a6597bd915f276e1ab9d75dc071 → [Updates: v4.16.31]

.github/workflows/reset-survey-status.yaml (2)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/scorecard.yaml (4)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4.36.2]

.github/workflows/survey-repo.yaml (4)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• fro-bot/agent v0.79.1@720b72169446b01bbc4042834ab948d4e3cef8d0
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1

.github/workflows/update-metadata.yaml (2)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/update-repo-settings.yaml (1)

• bfra-me/.github v4.16.0@65caa6a021ae4a6597bd915f276e1ab9d75dc071 → [Updates: v4.16.31]

.github/workflows/wiki-lint.yaml (5)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1

mise (1)

mise.toml (3)

• node 24.18.0
• pnpm 11.8.0 → [Updates: 11.9.0]
• python 3.14.0 → [Updates: 3.14.6]

npm (1)

package.json (19)

• @atproto/api ^0.20.0 → [Updates: ^0.20.0]
• @octokit/rest ^22.0.1
• yaml ^2.6.0
• @bfra.me/eslint-config 0.51.0 → [Updates: 0.51.1]
• @bfra.me/prettier-config 0.16.0 → [Updates: 0.16.9]
• @bfra.me/tsconfig 0.13.0 → [Updates: 0.13.1]
• @types/node 24.12.0 → [Updates: 24.13.2]
• @vitest/coverage-v8 4.1.4 → [Updates: 4.1.9]
• @vitest/eslint-plugin 1.6.15 → [Updates: 1.6.20]
• eslint 10.5.0 → [Updates: 10.6.0]
• eslint-config-prettier 10.1.1 → [Updates: 10.1.8]
• eslint-plugin-erasable-syntax-only 0.4.0 → [Updates: 0.4.2]
• eslint-plugin-node-dependencies 2.2.0
• eslint-plugin-prettier 5.5.0 → [Updates: 5.5.6]
• jiti 2.7.0
• prettier 3.8.1 → [Updates: 3.8.4]
• typescript 6.0.3
• vitest 4.1.4 → [Updates: 4.1.9]
• pnpm 11.8.0 → [Updates: 11.9.0]

regex (2)

.github/actions/setup/action.yaml (1)

• jdx/mise 2026.6.0 → [Updates: 2026.6.14]

.github/workflows/check-private-leak.yaml (1)

• jdx/mise 2026.6.0 → [Updates: 2026.6.14]

renovate-config-presets (1)

.github/renovate.json5

---

• Check here to trigger a Renovate run on this repository