Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (12)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	suzuki-shunsuke/github-token-action	2023-11-26
mise	aqua:direnv/direnv	2025-07-20
mise	npm:@trunkio/launcher	2024-11-06
mise	npm:bash-language-server	2025-04-13
mise	npm:jsonlint	2018-02-21
mise	npm:markdown-toc	2017-09-19
mise	npm:sql-language-server	2024-11-14
mise	pipx:gitlint-core	2023-09-02
mise	pipx:pyproject-flake8	2024-04-09
mise	pipx:ruff-lsp	2025-02-10
regex	max-baz/yubikey-touch-detector	2025-06-04
regex	vinceliuice/Colloid-icon-theme	2025-07-19

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update ⬆️ aqua-packages (aquaproj/aqua, aquaproj/aqua-registry)
• chore(deps): update ⬆️ dagger to v0.21.8
• chore(deps): update ⬆️ agent extensions to v0.40.1
• chore(deps): update ⬆️ mise-packages (aqua:astral-sh/uv, aqua:atuinsh/atuin, aqua:dagger/dagger, aqua:earendil-works/pi, aqua:mvdan/gofumpt, aqua:openai/codex, aqua:snyk/cli, aqua:sst/opencode, aqua:suzuki-shunsuke/ghtkn, aqua:suzuki-shunsuke/pinact, aqua:vercel-labs/agent-browser, aqua:walles/moor, cargo:cargo-audit, cargo:cargo-deny, github:aquaproj/aqua, github:backnotprop/plannotator, github:janosmiko/lfk, github:max-sixty/worktrunk, github:modem-dev/hunk, github:nolabs-ai/nono, node, npm:socket, pipx:semgrep, usage)
• chore(deps): lock file maintenance
• chore(deps): update ⬆️ github-actions to v24.18.1
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update ⬆️ container digests to dc2d74b
• chore(deps): update dependency gabm/satty to v0.22.0
• chore(deps): update dependency ryanoasis/nerd-fonts to v3.5.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): lock file maintenance ⬆️ agent extensions

Detected Dependencies

github-actions (8)

.github/workflows/pr_aqua_update_checksum.yaml (1)

• aquaproj/update-checksum-workflow v1.0.6@d3ab3ae1f9db2320a23efeaf9baaafeaae45af56

.github/workflows/pr_chezmoi_init.yaml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• dagger/dagger-for-github v8.4.1@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77

.github/workflows/pr_mise_lock.yaml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• jdx/mise-action v4.2.3@9e7f7633ff6f6d6048a9418a68d48f288f50eb14 → [Updates: v4.2.4]

.github/workflows/pr_renovate_release_notes.yaml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• node 24.18.0 → [Updates: 24.18.1]

.github/workflows/pr_semantic.yml (1)

• amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50

.github/workflows/pr_trunkio.yaml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• trunk-io/trunk-action v1.3.1@04ba50e7658c81db7356da96657e6e77f220bfa3

.github/workflows/release_please.yml (2)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• googleapis/release-please-action v5@45996ed1f6d02564a971a2fa1b5860e934307cf7

.github/workflows/trunk_upgrades.yaml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• suzuki-shunsuke/github-token-action v0.2.1@350d7506222e3a0016491abe85b5c4dd475b67d1
• trunk-io/trunk-action v1.3.1@04ba50e7658c81db7356da96657e6e77f220bfa3

mise (2)

home/dot_local/share/private_vet/mise.toml (16)

• aqua:ossf/scorecard 5.5.0
• aqua:google/osv-scanner 2.4.0
• aqua:aquasecurity/trivy 0.72.0 → [Updates: 0.73.0]
• aqua:gitleaks/gitleaks 8.30.1
• aqua:securego/gosec 2.28.0
• aqua:cli/cli 2.96.0 → [Updates: 2.97.0]
• aqua:jqlang/jq 1.8.1
• go:golang.org/x/vuln/cmd/govulncheck 1.1.4 → [Updates: 1.6.0]
• cargo:cargo-audit 0.22.0 → [Updates: 0.22.2]
• cargo:cargo-deny 0.20.0 → [Updates: 0.20.2]
• cargo:cargo-geiger 0.13.0
• pipx:semgrep 1.171.0 → [Updates: 1.172.0]
• pipx:bandit 1.9.4
• pipx:pip-audit 2.10.1
• pipx:guarddog 3.1.0
• npm:socket 1.1.146 → [Updates: 1.1.147]

mise/config.toml (123)

• bun 1.3.14
• go 1.26.5
• node 24.18.0 → [Updates: 24.18.1]
• rust 1.97.1
• usage 4.0.0 → [Updates: 4.1.0]
• amazon-ecr-credential-helper 0.12.0
• aqua:vercel-labs/agent-browser 0.33.0 → [Updates: 0.33.1]
• aqua:ast-grep/ast-grep 0.45.0
• aqua:atuinsh/atuin 18.17.1 → [Updates: 18.18.1]
• github:aquaproj/aqua v2.62.1 → [Updates: v2.62.2]
• github:erikjuhani/basalt basalt/v0.12.5
• aqua:sharkdp/bat 0.26.1
• aqua:twpayne/chezmoi 2.71.1 → [Updates: 2.72.0]
• aqua:anthropics/claude-code 2.1.220
• aqua:cli/cli 2.96.0 → [Updates: 2.97.0]
• aqua:openai/codex rust-v0.145.0 → [Updates: rust-v0.146.0]
• aqua:google/go-containerregistry 0.21.7 → [Updates: 0.21.8]
• aqua:dagger/dagger 0.21.7 → [Updates: 0.21.8]
• aqua:dandavison/delta 0.19.2
• aqua:dlvhdr/diffnav 0.12.0
• aqua:direnv/direnv 2.37.1
• aqua:bootandy/dust 1.2.4
• aqua:homeport/dyff 1.12.0
• aqua:eza-community/eza 0.23.5
• aqua:fastfetch-cli/fastfetch 2.66.0
• aqua:sharkdp/fd 10.4.2
• aqua:antonmedv/fx 39.2.0
• aqua:junegunn/fzf 0.74.1 → [Updates: 0.74.2]
• aqua:int128/ghcp 1.15.3
• github:dlvhdr/gh-dash v4.25.2
• github:dlvhdr/gh-enhance 0.6.1 → [Updates: v0.7.0]
• github:thiagokokada/gh-gfm-preview v1.3.1
• github:github/gh-stack v0.1.0
• aqua:suzuki-shunsuke/ghtkn 0.3.3 → [Updates: 0.3.4]
• github:kitlangton/ghui v0.9.0
• aqua:charmbracelet/glow 2.1.2
• npm:@withgraphite/graphite-cli 1.8.6
• aqua:charmbracelet/gum 0.17.0
• aqua:helm/helm 4.2.3
• github:ogulcancelik/herdr v0.7.5
• github:modem-dev/hunk v0.17.6 → [Updates: v0.17.7]
• aqua:stedolan/jq 1.8.1
• aqua:borghei/ink 0.6.7
• aqua:casey/just 1.57.0
• aqua:derailed/k9s 0.51.0
• aqua:kubernetes/kubectl 1.35.3
• aqua:jesseduffield/lazygit 0.63.1
• github:janosmiko/lfk v0.15.14 → [Updates: v0.15.15]
• aqua:walles/moor 2.15.1 → [Updates: 2.16.1]
• aqua:neovim/neovim 0.12.4
• github:nolabs-ai/nono 0.69.0 → [Updates: v0.70.0]
• aqua:nushell/nushell 0.114.1
• aqua:sst/opencode 1.18.5 → [Updates: 1.18.9]
• npm:opkg 0.11.3
• aqua:earendil-works/pi 0.82.1 → [Updates: 0.83.0]
• aqua:suzuki-shunsuke/pinact 4.1.0 → [Updates: 4.1.1]
• github:backnotprop/plannotator v0.25.0 → [Updates: v0.25.1]
• aqua:sethvargo/ratchet 0.12.0
• github:vitor-mariano/regex-tui 0.7.0
• aqua:BurntSushi/ripgrep 15.2.0
• aqua:spacelift-io/spacectl 1.24.0
• aqua:starship/starship 1.26.0
• aqua:stern/stern 1.34.0
• aqua:siderolabs/talos 1.13.7
• npm:@trunkio/launcher 1.3.4
• aqua:alexpasmantier/television 0.15.9
• github:tassiovirginio/try-rs v1.7.11
• github:agavra/tuicr v0.19.1 → [Updates: v0.20.0]
• github:max-sixty/worktrunk v0.69.2 → [Updates: v0.70.0]
• aqua:sxyazi/yazi 26.5.6
• aqua:mikefarah/yq 4.53.3
• aqua:ajeetdsouza/zoxide 0.10.0
• aqua:zellij-org/zellij 0.44.3
• aqua:LuaLS/lua-language-server 3.18.2
• aqua:aquasecurity/tfsec 1.28.14
• aqua:artempyanykh/marksman 2026-02-08
• aqua:astral-sh/ruff 0.16.0 → [Updates: 0.16.1]
• aqua:astral-sh/uv 0.11.32 → [Updates: 0.12.0]
• aqua:checkmake/checkmake 0.3.2
• aqua:crate-ci/typos 1.48.0
• aqua:dprint/dprint 0.55.2
• aqua:editorconfig-checker/editorconfig-checker 3.8.0
• aqua:golangci/golangci-lint 2.12.2
• aqua:google/yamlfmt 0.21.0
• aqua:gotestyourself/gotestsum 1.13.0
• aqua:incu6us/goimports-reviser 3.12.6
• aqua:koalaman/shellcheck 0.11.0
• aqua:mvdan/gofumpt 0.10.0 → [Updates: 0.11.0]
• aqua:mvdan/sh 3.13.1
• aqua:nametake/golangci-lint-langserver 0.0.12
• aqua:psf/black 26.5.1
• aqua:rhysd/actionlint 1.7.12
• aqua:rust-lang/rust-analyzer 2026-02-16
• aqua:segmentio/golines 0.13.0
• aqua:snyk/cli 1.1306.1 → [Updates: 1.1306.2]
• aqua:tamasfe/taplo 0.10.0
• aqua:terraform-linters/tflint 0.64.0
• aqua:tree-sitter/tree-sitter 0.26.11
• go:golang.org/x/tools/gopls v0.23.0
• npm:@commitlint/cli 21.2.1
• npm:@fsouza/prettierd 0.29.0
• npm:bash-language-server 5.6.0
• npm:cspell 10.0.1
• npm:dockerfile-language-server-nodejs 0.15.0
• npm:jsonlint 1.6.3
• npm:markdown-toc 1.2.0
• npm:markdownlint-cli 0.49.1
• npm:prettier 3.9.6
• npm:pyright 1.1.411
• npm:sql-formatter 15.8.2
• npm:sql-language-server 1.7.1
• npm:stylelint 17.14.1
• npm:textlint 15.7.1 → [Updates: 15.8.0]
• pipx:ansible-lint 26.6.0
• pipx:beautysh 6.4.3
• pipx:gitlint-core 0.19.1
• pipx:isort 8.0.1
• pipx:mypy 2.3.0
• pipx:pyproject-flake8 7.0.0
• pipx:ruff-lsp 0.0.62
• pipx:semgrep 1.171.0 → [Updates: 1.172.0]
• pipx:sqlfluff 4.2.2
• pipx:yamllint 1.38.0

nix (1)

flake.nix (7)

• flake-utils lock file @ 11707dc2f618dd54ca8739b309ec4fc024de578b
• homebrew-bundle lock file @ a3265c84b232e13048ecbf6fc18a2eedfadbeb08
• homebrew-cask lock file @ a61ec1d1ae76cff8cf10f792b617f5b4f7a49a84
• homebrew-core lock file @ db5f562346ffe90070e7357a3eb7f1e1303f1e92
• nix-darwin lock file @ 57a3171f94705599a2499248ca5758d5eb47c0e0
• nix-homebrew lock file @ 842eeb863ecca0eeb463f7a814cdc51e1d925776
• nixpkgs nixpkgs-unstable

npm (1)

home/dot_local/share/private_pi-extensions/package.json (3)

• @narumitw/pi-statusline 0.34.0 → [Updates: 0.40.1]
• pi-ask-user 0.13.0 → [Updates: 0.14.0]
• @tintinweb/pi-subagents 0.14.3

regex (7)

.github/workflows/pr_aqua_update_checksum.yaml (1)

• aquaproj/aqua v2.62.1 → [Updates: v2.62.2]

.github/workflows/pr_chezmoi_init.yaml (1)

• dagger/dagger v0.21.7 → [Updates: v0.21.8]

aqua/aqua.yaml (1)

• aquaproj/aqua-registry v4.544.0 → [Updates: v4.545.0]

home/.chezmoiexternal.toml.tmpl (3)

• ryanoasis/nerd-fonts v3.4.0 → [Updates: v3.5.0]
• gabm/Satty v0.21.1 → [Updates: v0.22.0]
• max-baz/yubikey-touch-detector 1.13.0

home/.chezmoiscripts/run_once_after_40_catppuccin.sh.tmpl (1)

• catppuccin/gtk v1.0.3

home/.chezmoiscripts/run_once_after_42_colloid.sh.tmpl (1)

• vinceliuice/Colloid-icon-theme 2023-07-01

home/private_dot_config/k9s/private_config.yaml.tmpl (1)

• busybox 1.38.0@sha256:fd8d9aa63ba2f0982b5304e1ee8d3b90a210bc1ffb5314d980eb6962f1a9715d → [Updates: 1.38.0]

renovate-config (1)

.github/renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository