Dependency Dashboard

[renovate-fullsend]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.
• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency eslint-plugin-svelte to v3.23.0
• chore(deps): update dependency typescript-eslint to v8.67.0
• chore(deps): update docker/setup-qemu-action action to v4.2.0
• chore(deps): update python docker tag to v3.14
• chore(deps): update renovatebot/github-action action to v46.2.2
• fix(deps): update module github.com/cucumber/godog to v0.16.0
• fix(deps): update module github.com/google/cel-go to v0.31.0
• fix(deps): update module go.opentelemetry.io/proto/otlp to v1.11.0
• fix(deps): update module golang.org/x/crypto to v0.55.0
• fix(deps): update module golang.org/x/text to v0.41.0
• fix(deps): update opentelemetry-go monorepo to v1.45.0 (go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/trace)
• chore(deps): update actions/cache action to v6
• chore(deps): update actions/setup-go action to v7
• chore(deps): update actions/setup-node action to v7
• chore(deps): update actions/setup-python action to v7
• chore(deps): update actions/stale action to v11
• chore(deps): update astral-sh/setup-uv action to v10
• chore(deps): update cloudflare/wrangler-action action to v4
• chore(deps): update dependency @sveltejs/vite-plugin-svelte to v7
• chore(deps): update dependency concurrently to v10
• chore(deps): update dependency cross-env to v10
• chore(deps): update dependency jsdom to v30
• chore(deps): update dependency lint-staged to v17
• chore(deps): update dependency postcss-html to v2
• chore(deps): update dependency prettier-plugin-svelte to v4
• chore(deps): update dependency stylelint-config-html to v2
• chore(deps): update dependency typescript to v7
• chore(deps): update dependency vite to v8
• chore(deps): update dependency vitest to v4
• chore(deps): update gcr.io/google.com/cloudsdktool/google-cloud-cli docker tag to v580
• chore(deps): update node.js to v24 (node, @types/node)
• chore(deps): update vueuse monorepo to v14 (@vueuse/core, @vueuse/integrations)
• fix(deps): update dependency @octokit/rest to v22
• fix(deps): update dependency svelte-spa-router to v5
• fix(deps): update module github.com/charmbracelet/lipgloss to v2
• fix(deps): update module github.com/cucumber/messages/go/v21 to v34
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-releases package NVIDIA/OpenShell).

Files affected: .github/scripts/openshell-version.sh

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update registry.access.redhat.com/ubi10/go-toolset docker digest to 1db86a2
• chore(deps): update dependency @anthropic-ai/claude-code to v2.1.233
• chore(deps): update dependency cytoscape to v3.34.1
• chore(deps): update dependency go to v1.26.6
• chore(deps): update dependency svelte to v5.56.9
• chore(deps): update dependency svelte-check to v4.7.6
• fix(deps): update module google.golang.org/protobuf to v1.36.12
• chore(deps): update cloudflare-workers (@cloudflare/vitest-pool-workers, @cloudflare/workers-types, wrangler)
• chore(deps): update dependency globals to v17.11.0
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency sheeki03/tirith to v0.3.3

Detected Dependencies

dockerfile (3)

images/code/Containerfile

images/runner/Containerfile (2)

• registry.access.redhat.com/ubi10/go-toolset sha256:cc3a002ecdb1b7e6e0e2988333b257eb97cfce84dbdfc98f4e02297c9190c4e1 → [Updates: undefined]
• registry.access.redhat.com/ubi10/ubi sha256:ccb838d655199bff6a77fc4296a2b2a44e00163dabd0ba8b0d9030f281ec935f

images/sandbox/Containerfile (1)

• ghcr.io/nvidia/openshell-community/sandboxes/base sha256:aeef1c63f00e2913ea002ccb3aaf925f338b5c5d70e63576f0d95c16a138044e

git-submodules (1)

.gitmodules (2)

• experiments main@5fd791259aba9a2d6832adbdeed183fd8d8036a1
• eval/.agent-eval-harness worktree-execution-hooks@ff68bc572e40a16f6ea5070ec3812912deef82e3

github-actions (30)

.github/actions/install-fullsend-cli/action.yml (1)

• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]

.github/actions/setup-gcp/action.yml (1)

• google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093

.github/workflows/branch-cleanup.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ubuntu 24.04

.github/workflows/e2e.yml (13)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/fullsend.yaml (1)

• ubuntu 24.04

.github/workflows/functional-tests.yml (10)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• astral-sh/setup-uv v7.6.0@37802adc94f370d6bfd71619e3f0bf239e1f3b78 → [Updates: v10.0.1]
• google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• ubuntu 24.04
• ubuntu 24.04
• python 3.12 → [Updates: 3.14]

.github/workflows/lint.yml (16)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• astral-sh/setup-uv v7.6.0@37802adc94f370d6bfd71619e3f0bf239e1f3b78 → [Updates: v10.0.1]
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• astral-sh/setup-uv v7.6.0@37802adc94f370d6bfd71619e3f0bf239e1f3b78 → [Updates: v10.0.1]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]
• ubuntu 24.04
• python 3.12 → [Updates: 3.14]
• ubuntu 24.04
• ubuntu 24.04
• node 22 → [Updates: 24]

.github/workflows/mint-cf-worker-test.yml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]
• ubuntu 24.04
• node 22 → [Updates: 24]

.github/workflows/notify-adr-slack.yml (1)

• ubuntu 24.04

.github/workflows/notify-vouch-slack.yml (1)

• ubuntu 24.04

.github/workflows/release.yml (6)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• ubuntu 24.04

.github/workflows/renovate.yml (4)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• renovatebot/github-action v46.1.21@1a96852b0384df1837619d04c60b2d10d1f9ff08 → [Updates: v46.2.2]
• ubuntu 24.04

.github/workflows/reusable-code.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/reusable-dispatch.yml (25)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v6.1.0]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v6.1.0]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/reusable-fix.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/reusable-prioritize.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/reusable-retro.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/reusable-review.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/reusable-triage.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/runner-image.yml (8)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.2.0]
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• ubuntu 24.04

.github/workflows/sandbox-images.yml (15)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.2.0]
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.2.0]
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/site-build.yml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• ubuntu 24.04
• node 22 → [Updates: 24]

.github/workflows/site-deploy.yml (9)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• cloudflare/wrangler-action v3.15.0@9acf94ace14e7dc412b076f2c5c20b8ce93c79cd → [Updates: v4.0.0]
• cloudflare/wrangler-action v3.15.0@9acf94ace14e7dc412b076f2c5c20b8ce93c79cd → [Updates: v4.0.0]
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• ubuntu 24.04
• node 22 → [Updates: 24]

.github/workflows/stale.yml (2)

• actions/stale v10.4.0@1e223db275d687790206a7acac4d1a11bd6fe629 → [Updates: v11.0.0]
• ubuntu 24.04

.github/workflows/vouch-check.yml (2)

• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• ubuntu 24.04

.github/workflows/vouch-command.yml (2)

• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• ubuntu 24.04

action.yml (3)

• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

internal/scaffold/fullsend-repo/.github/workflows/dispatch.yml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

internal/scaffold/fullsend-repo/.github/workflows/prioritize-scheduler.yml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

internal/scaffold/fullsend-repo/.github/workflows/repo-maintenance.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

gomod (5)

cmd/mint-wasm/go.mod (2)

• go 1.26
• github.com/fullsend-ai/fullsend/internal/mintcore v0.0.0

cmd/mint/go.mod (2)

• go 1.26
• github.com/fullsend-ai/fullsend/internal/mintcore v0.0.0

go.mod (24)

• go 1.26.5
• github.com/charmbracelet/lipgloss v1.1.0 → [Updates: v2.0.6]
• github.com/cucumber/godog v0.14.1 → [Updates: v0.16.0]
• github.com/cucumber/messages/go/v21 v21.0.1 → [Updates: v34.2.1]
• github.com/google/cel-go v0.29.2 → [Updates: v0.31.0]
• github.com/google/uuid v1.6.0
• github.com/knights-analytics/hugot v0.7.7
• github.com/spf13/cobra v1.10.2
• github.com/stretchr/testify v1.11.1
• github.com/yuin/goldmark v1.8.5
• go.opentelemetry.io/otel v1.44.0 → [Updates: v1.45.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0 → [Updates: v1.45.0]
• go.opentelemetry.io/otel/sdk v1.44.0 → [Updates: v1.45.0]
• go.opentelemetry.io/otel/trace v1.44.0 → [Updates: v1.45.0]
• go.opentelemetry.io/proto/otlp v1.10.0 → [Updates: v1.11.0]
• go.uber.org/goleak v1.3.0
• golang.org/x/crypto v0.54.0 → [Updates: v0.55.0]
• golang.org/x/oauth2 v0.36.0
• golang.org/x/term v0.45.0
• golang.org/x/text v0.40.0 → [Updates: v0.41.0]
• gopkg.in/yaml.v3 v3.0.1
• github.com/fullsend-ai/fullsend/internal/mintcore v0.0.0
• golang.org/x/sync v0.22.0
• google.golang.org/protobuf v1.36.11 → [Updates: v1.36.12]

internal/mint/go.mod (3)

• go 1.26
• github.com/GoogleCloudPlatform/functions-framework-go v1.9.2
• github.com/fullsend-ai/fullsend/internal/mintcore v0.0.0

internal/mintcore/go.mod (2)

• go 1.26
• github.com/stretchr/testify v1.11.1

html (1)

web/public/graph.html (1)

• cytoscape 3.34.0@sha512-n+SgrlF4TYdx4NkqE4I3ChWle+geKhq5zSgDh7QYErCPRKGpDcuBsFwfE/1hCaIwTnkQv43UzjlVa7oFLVVqSg== → [Updates: 3.34.1, 3.34.0]

mise (1)

mise.toml (2)

• node 22 → [Updates: 24]
• go 1.26.5 → [Updates: 1.26.6]

npm (2)

internal/dispatch/cf/workersrc/package.json (5)

• @cloudflare/vitest-pool-workers ^0.8.0 → [Updates: ^0.21.0]
• @cloudflare/workers-types ^5.20260708.1
• typescript ^5.8.0 → [Updates: ^7.0.0]
• vitest ^3.2.0 → [Updates: ^4.0.0]
• wrangler ^4.0.0

package.json (51)

• @octokit/rest ^21.1.1 → [Updates: ^22.0.0]
• github-slugger ^2.0.0
• gray-matter ^4.0.3
• mdast-util-to-string ^4.0.0
• rehype-sanitize ^6.0.0
• rehype-slug ^6.0.0
• rehype-stringify ^10.0.1
• remark-gfm ^4.0.1
• remark-parse ^11.0.0
• remark-rehype ^11.1.2
• svelte-spa-router ^4.0.1 → [Updates: ^5.0.0]
• unified ^11.0.5
• unist-util-visit ^5.1.0
• yaml ^2.4.2
• @cloudflare/vitest-pool-workers ^0.18.0 → [Updates: ^0.21.0]
• @cloudflare/workers-types ^5.20260708.1 → [Updates: ^5.20260708.1]
• @eslint/js ^10.0.1
• @sveltejs/vite-plugin-svelte ^5.0.0 → [Updates: ^7.0.0]
• @tsconfig/svelte ^5.0.0
• @types/hast ^3.0.4
• @types/mdast ^4.0.4
• @types/node ^22.0.0 → [Updates: ^24.0.0]
• concurrently ^9.1.2 → [Updates: ^10.0.0]
• cross-env ^7.0.3 → [Updates: ^10.0.0]
• eslint ^10.3.0
• eslint-plugin-svelte ^3.17.1 → [Updates: ^3.17.1]
• globals ^17.6.0 → [Updates: ^17.6.0]
• jsdom ^25.0.0 → [Updates: ^30.0.0]
• lint-staged ^16.4.0 → [Updates: ^17.0.0]
• postcss-html ^1.8.1 → [Updates: ^2.0.0]
• prettier ^3.8.3
• prettier-plugin-svelte ~3.5.1 → [Updates: ~4.1.0]
• stylelint ^17.10.0
• stylelint-config-html ^1.1.0 → [Updates: ^2.0.0]
• stylelint-config-standard ^40.0.0
• svelte ^5.0.0 → [Updates: ^5.0.0]
• svelte-check ^4.0.0 → [Updates: ^4.0.0]
• toml-eslint-parser ^1.0.3
• typescript ^5.6.0 → [Updates: ^7.0.0]
• typescript-eslint ^8.59.1 → [Updates: ^8.59.1]
• vite ^6.0.0 → [Updates: ^8.0.0]
• vitest ^4.1.4
• wrangler ^4.110.0 → [Updates: ^4.110.0]
• @vueuse/core ^12.4.0 → [Updates: ^14.0.0]
• @vueuse/integrations ^12.4.0 → [Updates: ^14.0.0]
• mark.js 8.11.1
• mermaid ~11.16.0
• minisearch ^7.1.1
• vitepress 1.6.4
• vue ^3.5.14
• node >=22

pyenv (1)

.python-version (1)

• python 3.12 → [Updates: 3.14]

regex (12)

.github/scripts/openshell-version.sh (1)

• NVIDIA/OpenShell 0.0.83@e3d26dd3ae0dee247bbc5db368545832757ac493

.github/scripts/openshell-version.sh (1)

• NVIDIA/OpenShell 0.0.83@e3d26dd3ae0dee247bbc5db368545832757ac493

.github/workflows/site-deploy.yml (2)

• wrangler 4.113.0 → [Updates: 4.123.0]
• wrangler 4.113.0 → [Updates: 4.123.0]

.github/workflows/site-deploy.yml (2)

• wrangler 4.113.0 → [Updates: 4.123.0]
• wrangler 4.113.0 → [Updates: 4.123.0]

images/runner/Containerfile (1)

• gcr.io/google.com/cloudsdktool/google-cloud-cli 576.0.0 → [Updates: 580.0.0]

images/runner/Containerfile (1)

• gcr.io/google.com/cloudsdktool/google-cloud-cli 576.0.0 → [Updates: 580.0.0]

images/sandbox/Containerfile (1)

• @anthropic-ai/claude-code 2.1.226 → [Updates: 2.1.233]

images/sandbox/Containerfile (1)

• sheeki03/tirith 0.3.1 → [Updates: 0.3.3]

images/sandbox/Containerfile (1)

• @anthropic-ai/claude-code 2.1.226 → [Updates: 2.1.233]

images/sandbox/Containerfile (1)

• sheeki03/tirith 0.3.1 → [Updates: 0.3.3]

scripts/renovate/update-tirith-checksums.sh (1)

• sigstore/cosign 3.1.3

scripts/renovate/update-tirith-checksums.sh (1)

• sigstore/cosign 3.1.3

[fullsend-ai-triage]

🤖 Finished Triage · ✅ Success · Started 8:17 AM UTC · Completed 8:18 AM UTC
Commit: 2d8adb7 · View workflow run →

[fullsend-ai-triage]

Triage Summary

This is an automated Renovate Dependency Dashboard created by the Renovate bot. It is a self-managing tracking issue — not a bug, feature request, or action item requiring investigation.

Current State

• 1 open PR: chore(deps): update eval/.agent-eval-harness digest to ff68bc5 #2681 updates the eval/.agent-eval-harness submodule digest
• ~50 rate-limited updates across Go modules, npm packages, GitHub Actions, Docker images, and other dependency managers
• Repository warning: Renovate cannot access vulnerability alerts — permissions may need to be granted
• Config migration available: A checkbox at the top can trigger an automated config migration PR

Recommended Actions

• Periodically review rate-limited updates and unlock those ready to merge
• Consider granting Renovate vulnerability alert permissions to resolve the warning
• Select the config migration checkbox if a Renovate config update is desired

No code changes or developer investigation required for this issue itself.

---

Labels: Automated Renovate dependency dashboard is a chore/maintenance tracking issue covering dependency updates.

[m13v]

the WARN about vuln alerts is the line that actually bites here. renovate can't read the vulnerability feed, downgrades it to a warning, then generates 40-plus update PRs and paints the dashboard as current. the run 'succeeds', so nobody circles back to the one path that mattered. every rate-limited bump gets its checkbox, but the security-scoped update that needed the alert data just isn't in the list, and nothing flags that it's missing. a permission gap that logs a warning instead of failing the run leaves the dashboard looking complete while the security half quietly no-op'd.

[fullsend-ai-prioritize]

RICE Priority Score: 0.8

Score breakdown

Dimension	Score	Reasoning
Reach	1	This is an automated Renovate Dependency Dashboard tracking ~50 dependency updates across the entire repository. It affects all developers working on this codebase, but it is internal tooling rather than user-facing. The vulnerability alert permissions gap noted by commenter m13v could indirectly affect all platform users if a security vulnerability goes unpatched, but the primary audience is the development team.
Impact	0.5	The dashboard itself is functioning — it tracks dependencies and creates PRs for updates. The main gap is the missing vulnerability alert permissions, which means security-scoped updates may be silently absent. However, workarounds exist (manual vulnerability checking, individual dependency PRs are still being created for non-security updates). The impact per affected developer is low since this is a tracking issue, not a broken workflow.
Confidence	0.8	High confidence — this is a well-understood, standard Renovate dashboard issue with clear triage commentary and a specific, actionable concern (vulnerability alert permissions). The scope and nature of the issue are unambiguous. The labels and triage summary confirm it is a chore/maintenance tracking issue.
Effort	0.5	The primary actionable item is granting Renovate vulnerability alert permissions, which is a repository settings or GitHub App permissions change — not a code change. Individual dependency updates within the dashboard are handled through separate PRs with their own effort. The dashboard issue itself requires minimal effort to address.

Formula: (1 x 0.5 x 0.8) / 0.5 = 0.8