Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency csv to v3.3.6
• fix(deps): update dependency python to v3.14.7
• chore(deps): update actions/checkout action to v6.1.0
• chore(deps): update dependency aqua:golangci/golangci-lint to v2.13.1
• chore(deps): update dependency aqua:hadolint/hadolint to v2.15.1
• chore(deps): update docker/build-push-action action to v7.3.0
• chore(deps): update docker/login-action action to v4.6.0
• chore(deps): update docker/setup-buildx-action action to v4.3.0
• chore(deps): update docker/setup-qemu-action action to v4.2.0
• chore(deps): update jdx/mise-action action to v4.3.0
• chore(deps): update koki-develop/claude-renovate-review action to v1.3.1
• fix(deps): update alpine docker tag to v3.24.1
• fix(deps): update dependency jdx/mise to v2026.8.14
• fix(deps): update dependency rust to v1.98.0
• fix(deps): update go to v1.27.0 (go, golang)
• fix(deps): update module github.com/labstack/echo/v5 to v5.3.1
• fix(deps): update module github.com/stretchr/testify to v1.12.1
• fix(deps): update node.js to v24.20.0 (node, @types/node)
• chore(deps): update actions/checkout action to v7
• chore(deps): update dependency typescript to v7
• chore(deps): update googleapis/release-please-action action to v5
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• fix(deps): update ghcr.io/codize-dev/nsjail:latest docker digest to 9b4b2bc

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package golang.org/x/sys: no-result.

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency @types/lodash to v4.17.25
• chore(deps): update dependency aqua:evilmartians/lefthook to v2.1.11
• fix(deps): update dependency ruby to v3.4.10
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update dependency ruby to v4

Detected Dependencies

bundler (1)

internal/sandbox/defaults/ruby/Gemfile (3)

• base64 "0.3.0"
• csv "3.3.5" → [Updates: "3.3.6"]
• fiddle "1.1.8"

docker-compose (1)

compose.yml

dockerfile (1)

Dockerfile (3)

• alpine 3.23.4@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11 → [Updates: 3.24.1]
• ghcr.io/codize-dev/nsjail latest@sha256:8f6ea5146f49825c3da34b560731d08c524de2dd8b1b6c98555348817355c77e → [Updates: latest]
• golang 1.26.4-bookworm@sha256:b305420a68d0f229d91eb3b3ed9e519fcf2cf5461da4bef997bf927e8c0bfd2b → [Updates: 1.27.0-bookworm]

github-actions (3)

.github/workflows/ci.yml (12)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.3.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.3.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.3.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.3.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.3.0]
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c → [Updates: v4.3.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]

.github/workflows/claude-renovate-review.yml (2)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• koki-develop/claude-renovate-review v1.2.0@831fe686c28d0a9a348bc6cf1d5ce86cc7c8f50d → [Updates: v1.3.1]

.github/workflows/release-please.yml (8)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• googleapis/release-please-action v4.4.1@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 → [Updates: v5.0.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.1]
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.2.0]
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c → [Updates: v4.3.0]
• docker/login-action v4.4.0@af1e73f918a031802d376d3c8bbc3fe56130a9b0 → [Updates: v4.6.0]
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]

gomod (1)

go.mod (6)

• go 1.26.4 → [Updates: 1.27.0]
• github.com/labstack/echo/v5 v5.1.1 → [Updates: v5.3.1]
• github.com/spf13/cobra v1.10.2
• github.com/stretchr/testify v1.11.1 → [Updates: v1.12.1]
• go.yaml.in/yaml/v4 v4.0.0-rc.6
• golang.org/x/sys v0.43.0

mise (1)

mise.toml (8)

• go 1.26.4 → [Updates: 1.27.0]
• aqua:golangci/golangci-lint 2.12.2 → [Updates: 2.13.1]
• aqua:evilmartians/lefthook 2.1.9 → [Updates: 2.1.11]
• aqua:hadolint/hadolint 2.14.0 → [Updates: 2.15.1]
• node 24.14.1 → [Updates: 24.20.0]
• ruby 3.4.9 → [Updates: 3.4.10, 4.0.6]
• rust 1.94.1 → [Updates: 1.98.0]
• python 3.14.6 → [Updates: 3.14.7]

npm (2)

internal/sandbox/defaults/node-typescript/package.json (4)

• lodash 4.18.1
• @types/lodash 4.17.24 → [Updates: 4.17.25]
• @types/node 24.12.2 → [Updates: 24.13.3]
• typescript 5.9.3 → [Updates: 7.0.2]

internal/sandbox/defaults/node/package.json (1)

• lodash 4.18.1

regex (3)

Dockerfile (6)

• jdx/mise 2026.5.14 → [Updates: 2026.8.14]
• node 24.14.1 → [Updates: 24.20.0]
• ruby 3.4.9 → [Updates: 3.4.10, 4.0.6]
• go 1.26.4 → [Updates: 1.27.0]
• python 3.14.6 → [Updates: 3.14.7]
• rust 1.94.1 → [Updates: 1.98.0]

internal/sandbox/defaults/go/go.mod.tmpl (1)

• go 1.26.4 → [Updates: 1.27.0]

internal/sandbox/runtime.go (1)

• rust 1.94.1 → [Updates: 1.98.0]

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository