Dependency Dashboard

[fro-bot]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (3)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
bun	@octokit/webhooks-types	2024-10-03
bun	@semantic-release/exec	2025-05-09
bun	@semantic-release/git	2021-10-30

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• build(deps): update dependency oh-my-openagent to v4
• build(deps): update dependency oh-my-opencode-slim to v2
• chore(dev): update dependency @types/node to v26
• chore(dev): update dependency js-yaml to v5
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): maintain lockfiles

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(dev): update dependency eslint to v10.6.0
• chore(dev): update dependency js-yaml to v4.3.0
• chore(dev): update dependency prettier to v3.9.0
• feat(dev): update dependency conventional-changelog-conventionalcommits to v10

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

bun (6)

apps/action/package.json

apps/workspace-agent/package.json (3)

• @hono/node-server 2.0.6
• hono 4.12.27
• vitest 4.1.9

package.json (46)

• @actions/artifact 6.2.1
• @actions/cache 6.1.0
• @actions/core 3.0.1
• @actions/exec 3.0.0
• @actions/github 9.1.1
• @actions/tool-cache 4.0.0
• @aws-sdk/client-s3 3.1075.0
• @bfra.me/es 0.1.0
• @octokit/auth-app 8.2.0
• @opencode-ai/sdk 1.17.11
• @bfra.me/eslint-config 0.51.1
• @bfra.me/prettier-config 0.16.9
• @bfra.me/tsconfig 0.13.1
• @octokit/webhooks-types 7.6.1
• @semantic-release/exec 7.1.0
• @semantic-release/git 10.0.1
• @types/node 24.13.2 → [Updates: 26.0.1]
• @vitest/eslint-plugin 1.6.20
• conventional-changelog-conventionalcommits 9.3.1 → [Updates: 10.2.0]
• eslint 10.5.0 → [Updates: 10.6.0]
• eslint-config-prettier 10.1.8
• eslint-plugin-prettier 5.5.6
• jiti 2.7.0
• js-yaml 4.2.0 → [Updates: 4.3.0, 5.1.0]
• lint-staged 17.0.8
• prettier 3.8.4 → [Updates: 3.9.0]
• read-package-up 12.0.0
• semantic-release 25.0.5
• simple-git-hooks 2.13.1
• tsdown 0.22.3
• typescript 6.0.3
• vitest 4.1.9
• brace-expansion >=5.0.6
• fast-uri >=3.1.2
• fast-xml-builder >=1.1.7
• fast-xml-parser >=5.7.0
• flatted 3.4.2
• handlebars >=4.7.9
• ip-address >=10.1.1
• lodash >=4.18.0
• lodash-es >=4.18.0
• picomatch >=4.0.4
• tar >=7.5.11
• undici >=7.24.0
• vite 8.1.0
• yaml >=2.8.3

packages/gateway/package.json (6)

• @hono/node-server 2.0.6
• @octokit/core 7.0.6
• discord.js 14.26.4
• effect 3.21.4
• hono 4.12.27
• yaml 2.9.0

packages/harness/package.json (1)

• node >=24

packages/runtime/package.json (2)

• @bfra.me/es 0.1.0
• @opencode-ai/sdk 1.17.11

docker-compose (2)

deploy/compose.override.example.yaml

deploy/compose.yaml (1)

• mitmproxy/mitmproxy 12.2.3@sha256:00b77b5d8804c8ad18cb6caefbf9d5849e895e8986c5ce011f4ae30f4385962f

dockerfile (2)

deploy/gateway.Dockerfile (2)

• node 24.18.0-alpine@sha256:a0b9bf06e4e6193cf7a0f58816cc935ff8c2a908f81e6f1a95432d679c54fbfd
• node 24.18.0-alpine@sha256:a0b9bf06e4e6193cf7a0f58816cc935ff8c2a908f81e6f1a95432d679c54fbfd

deploy/workspace.Dockerfile (2)

• node 24.18.0-alpine@sha256:a0b9bf06e4e6193cf7a0f58816cc935ff8c2a908f81e6f1a95432d679c54fbfd
• node 24.18.0-alpine@sha256:a0b9bf06e4e6193cf7a0f58816cc935ff8c2a908f81e6f1a95432d679c54fbfd

github-actions (11)

.github/actions/setup/action.yaml (3)

• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

.github/workflows/auto-release.yaml (2)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/ci.yaml (14)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• dorny/paths-filter v4.0.1@fbd0ab8f3e69293af611ebaee6363fc25e6d187d
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/codeql-analysis.yaml (4)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e

.github/workflows/copilot-setup-steps.yaml (1)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/fro-bot.yaml (1)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/harness-release.yaml (23)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• node 24
• ubuntu 24.04

.github/workflows/prepare-release-pr.yaml (2)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/renovate.yaml (1)

• bfra-me/.github v4.16.31@7c7e50a51f430b42aae2165e5d555847aa738ba9

.github/workflows/scorecard.yaml (4)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e

.github/workflows/update-repo-settings.yaml (1)

• bfra-me/.github v4.16.31@7c7e50a51f430b42aae2165e5d555847aa738ba9

nodenv (1)

.node-version (1)

• node 24.18.0

regex (15)

.github/actions/setup/action.yaml (1)

• oven-sh/bun 1.3.14

.github/renovate.json5 (1)

• bfra-me/renovate-config 5.2.3

.github/workflows/harness-release.yaml (1)

• npm 11.17.0

.github/workflows/harness-release.yaml (2)

• oven-sh/bun 1.3.14
• oven-sh/bun 1.3.14

deploy/gateway.Dockerfile (1)

• oven-sh/bun 1.3.14

deploy/workspace.Dockerfile (1)

• @fro.bot/systematic 2.32.1

deploy/workspace.Dockerfile (1)

• oven-sh/bun 1.3.14

package.json (1)

• oven-sh/bun 1.3.14

packages/harness/harness.config.json (1)

• anomalyco/opencode 1.17.11

packages/harness/src/bun-version.ts (1)

• oven-sh/bun 1.3.14

packages/runtime/src/shared/constants.ts (1)

• oh-my-openagent 3.17.15 → [Updates: 4.13.0]

packages/runtime/src/shared/constants.ts (1)

• oh-my-opencode-slim 1.1.2 → [Updates: 2.0.5]

packages/runtime/src/shared/constants.ts (1)

• oven-sh/bun 1.3.14

packages/runtime/src/shared/constants.ts (1)

• @fro.bot/systematic 2.32.1

src/services/setup/opencode.ts (1)

• anomalyco/opencode 1.17.11

renovate-config (1)

.github/renovate.json5

---

• Check here to trigger a Renovate run on this repository