Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package arduino/setup-task).

Files affected: .github/workflows/build.yml, .github/workflows/lint.yml, .github/workflows/release.yml, .github/workflows/test.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/setup-go digest to 4b73464
• chore(deps): update aquasecurity/trivy-action action to v0.34.1
• chore(deps): update dependency @types/node to v24.10.15
• chore(deps): update eslint monorepo (eslint, typescript-eslint)
• fix(deps): update module google.golang.org/grpc to v1.79.1
• chore(deps): update dependency @modelcontextprotocol/ext-apps to v1.1.2
• fix(deps): update module github.com/mark3labs/mcp-go to v0.44.1
• chore(deps): update actions/upload-artifact action to v7
• chore(deps): update dependency eslint to v10
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (5)

.github/workflows/build.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 → [Updates: v6]
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]
• node 24

.github/workflows/lint.yml (9)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 → [Updates: v6]
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• golangci/golangci-lint-action v9.2.0@1e7e51e771db61008b38414a730f564565cf7c20
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238
• node 24
• node 24

.github/workflows/release.yml (8)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 → [Updates: v6]
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad
• node 24

.github/workflows/security.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• aquasecurity/trivy-action 0.34.0@c1824fd6edce30d7ab345a9989de00bbd46ef284 → [Updates: 0.34.1]
• aquasecurity/trivy-action 0.34.0@c1824fd6edce30d7ab345a9989de00bbd46ef284 → [Updates: 0.34.1]

.github/workflows/test.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 → [Updates: v6]
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• node 24

gomod (1)

go.mod (9)

• go 1.25
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/mark3labs/mcp-go v0.43.2 → [Updates: v0.44.1]
• github.com/mindersec/minder v0.1.1
• github.com/rs/cors v1.11.1
• github.com/stretchr/testify v1.11.1
• golang.org/x/oauth2 v0.35.0
• google.golang.org/grpc v1.79.0 → [Updates: v1.79.1]
• google.golang.org/protobuf v1.36.11

npm (1)

ui/compliance-dashboard/package.json (9)

• @modelcontextprotocol/ext-apps ^1.0.1 → [Updates: ^1.0.1]
• @types/node ^24.0.0 → [Updates: ^24.0.0]
• eslint ^9.18.0 → [Updates: ^9.18.0, ^10.0.0]
• globals ^17.0.0
• prettier ^3.4.2
• typescript ^5.7.3
• typescript-eslint ^8.21.0 → [Updates: ^8.21.0]
• vite ^7.0.0
• vite-plugin-singlefile ^2.0.3

---

• Check this box to trigger a request for Renovate to run again on this repository