Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency bandit to v1.12.5
• chore(deps): update dependency git-cliff to v2.14.2
• chore(deps): update dependency kotlin to v2.4.20
• chore(deps): update dependency lazy_html to v0.1.13
• chore(deps): update dependency phoenix to v1.8.15
• chore(deps): update dependency phoenix_live_view to v1.2.12
• chore(deps): update dependency ruby to v4.0.7
• chore(deps): update rust crate blake3 to v1.8.7
• chore(deps): update rust crate console to v0.16.6
• chore(deps): update rust crate prost to v0.14.4
• chore(deps): update rust crate reqwest to v0.13.5
• chore(deps): update rust crate thiserror to v2.0.21
• chore(deps): update rust crate tokio-stream to v0.1.19
• chore(deps): update rust crate toml to v1.1.6
• chore(deps): update rust crate toml_edit to v0.25.15
• chore(deps): update rust crate uuid to v1.26.1
• chore(deps): update dependency erlang to v29.1.1
• chore(deps): update dependency github:superradcompany/microsandbox to v0.7.3
• chore(deps): update dependency go to v1.27.1
• chore(deps): update dependency hammer to v7.5.0
• chore(deps): update dependency helm to v4.3.0
• chore(deps): update dependency kubectl to v1.37.1
• chore(deps): update dependency lumis to ~> 0.9
• chore(deps): update dependency mimic to v2.4.2
• chore(deps): update dependency nimble_publisher to v2.1.0
• chore(deps): update dependency noora to ~> 0.86
• chore(deps): update dependency npm:jest to v30.5.2
• chore(deps): update dependency npm:opencode-ai to v1.18.33
• chore(deps): update dependency phoenix_live_reload to v1.7.0
• chore(deps): update dependency pipx to v1.17.7
• chore(deps): update dependency rust to v1.98.1
• chore(deps): update dependency telemetry_metrics to v1.2.0
• chore(deps): update node.js to v26.10.0
• chore(deps): update rust crate base64 to 0.23
• chore(deps): update rust crate bazel-remote-apis to 0.29
• chore(deps): update rust crate indicatif to 0.18
• chore(deps): update rust crate tokio to v1.53.1
• chore(deps): update rust crate tree-sitter to 0.27.0
• chore(deps): update rust crate usage to v6.11.1
• chore(deps): update rust crate zstd to 0.14
• fix(deps): update rust crate microsandbox to v0.7.4
• fix(deps): update rust crate rodio to 0.22
• chore(deps): update dependency aube to v2
• chore(deps): update dependency pipx:pytest to v9
• chore(deps): update dependency ubuntu to v26
• chore(deps): update rust crate zip to v8
• chore(deps): update sea-orm monorepo to v2 (sea-orm, sea-orm-migration)
• fix(deps): update rust crate jsonwebtoken to v11
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update dependency npm:vitest to v4.1.11 [security]
• chore(deps): update dependency vitest to v4.1.11 [security]
• chore(deps): update dependency java to v17.0.20+101
• chore(deps): update dependency jdx/mise to v2026.9.15
• chore(deps): update rust crate glob to v0.3.4
• chore(deps): update rust crate serde to v1.0.229
• chore(deps): update dependency aube to v1.41.0
• chore(deps): update dependency cmake to v4.4.3
• chore(deps): update dependency dns_cluster to ~> 0.3.0
• chore(deps): update dependency flop to ~> 0.29.0
• chore(deps): update dependency mdex to ~> 0.14
• chore(deps): update actions/upload-artifact action to v7

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (git-refs package https://github.com/superradcompany/microsandbox.git), Failed to look up github-tags package 1password/cli: no-result.

Files affected: crates/once-core/Cargo.toml, mise.toml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency nx to v22 [security]

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency java to v25

Detected Dependencies

cargo (12)

Cargo.toml (39)

• anyhow 1
• axum 0.8
• bazel-remote-apis 0.27 → [Updates: 0.29]
• base64 0.22 → [Updates: 0.23]
• blake3 1 → [Updates: 1]
• usage 6.4.1 → [Updates: 6.4.1]
• console 0.16 → [Updates: 0.16]
• indicatif 0.17 → [Updates: 0.18]
• fd-lock 4
• futures 0.3
• glob 0.3 → [Updates: 0.3]
• hex 0.4
• libc 0.2
• notify 8.2
• serde 1 → [Updates: 1]
• serde_json 1
• sha2 0.11
• sysinfo 0.39.6
• starlark 0.14.2
• toml 1.0 → [Updates: 1.0]
• toon-rust 0.5
• tempfile 3
• thiserror 2 → [Updates: 2]
• tokio 1 → [Updates: 1]
• tokio-util 0.7
• tonic 0.14
• tree-sitter 0.26.9 → [Updates: 0.27.0]
• tree-sitter-cypher 0.2.6
• reqwest 0.13 → [Updates: 0.13]
• sea-orm 1.1.20 → [Updates: 2.0.0]
• sea-orm-migration 1.1.20 → [Updates: 2.0.0]
• schlussel 80a7bc1fc0b68bdc2cd2379b16240ddbfbe0267b
• tracing 0.1
• tracing-subscriber 0.3
• uuid 1 → [Updates: 1]
• walkdir 2
• zstd 0.13 → [Updates: 0.14]
• tar 0.4
• zip 2 → [Updates: 8]

crates/once-cas/Cargo.toml

crates/once-cli/Cargo.toml (2)

• hex 0.4
• rodio 0.20 → [Updates: 0.22]

crates/once-core/Cargo.toml (2)

• jsonwebtoken 10.2.0 → [Updates: 11.0.0]
• microsandbox 0.5.1@975b62bfd331df7111b2de9abc1416fc87d7790b → [Updates: v0.7.4]

crates/once-events-client/Cargo.toml (6)

• prost 0.14 → [Updates: 0.14]
• tokio-stream 0.1 → [Updates: 0.1]
• tonic-prost 0.14
• protoc-bin-vendored 3
• tonic-build 0.14
• tonic-prost-build 0.14

crates/once-frontend/Cargo.toml (2)

• include_dir 0.7
• toml_edit 0.25 → [Updates: 0.25]

crates/once-host-tree/Cargo.toml

crates/once/Cargo.toml

fixtures/cargo_bat/Cargo.toml (1)

• itoa 1

fixtures/cargo_mise/Cargo.toml

fixtures/cargo_ripgrep/Cargo.toml

fixtures/cargo_ripgrep/crates/ignore/Cargo.toml

dockerfile (1)

web/Dockerfile (1)

• rust 1.96.0-slim-bookworm → [Updates: 1.98.1-slim-bookworm]

github-actions (5)

.github/workflows/bench.yml (5)

• actions/checkout v7
• jdx/mise-action v4
• Swatinem/rust-cache v2
• actions/upload-artifact v4 → [Updates: v7]
• jdx/mise 2026.9.2 → [Updates: 2026.9.15]

.github/workflows/deploy-web.yml

.github/workflows/once.yml (34)

• actions/checkout v7
• actions/checkout v7
• jdx/mise-action v4
• actions/checkout v7
• jdx/mise-action v4
• Swatinem/rust-cache v2
• actions/checkout v7
• jdx/mise-action v4
• Swatinem/rust-cache v2
• actions/checkout v7
• jdx/mise-action v4
• Swatinem/rust-cache v2
• actions/upload-artifact v7
• actions/checkout v7
• jdx/mise-action v4
• Swatinem/rust-cache v2
• actions/checkout v7
• jdx/mise-action v4
• actions/download-artifact v8
• actions/checkout v7
• jdx/mise-action v4
• actions/download-artifact v8
• actions/checkout v7
• Swatinem/rust-cache v2
• actions/checkout v7
• actions/checkout v7
• Swatinem/rust-cache v2
• jdx/mise 2026.9.2 → [Updates: 2026.9.15]
• jdx/mise 2026.9.2 → [Updates: 2026.9.15]
• jdx/mise 2026.9.2 → [Updates: 2026.9.15]
• jdx/mise 2026.9.2 → [Updates: 2026.9.15]
• jdx/mise 2026.9.2 → [Updates: 2026.9.15]
• jdx/mise 2026.9.2 → [Updates: 2026.9.15]
• jdx/mise 2026.9.2 → [Updates: 2026.9.15]

.github/workflows/release.yml (15)

• actions/checkout v7
• actions/checkout v7
• actions/upload-artifact v7
• actions/checkout v7
• actions/upload-artifact v7
• actions/checkout v7
• actions/upload-artifact v7
• actions/checkout v7
• actions/download-artifact v8
• actions/checkout v7
• actions/download-artifact v8
• ubuntu 24.04 → [Updates: 26.04]
• macos 26
• ubuntu 24.04 → [Updates: 26.04]
• ubuntu 24.04 → [Updates: 26.04]

.github/workflows/web.yml (4)

• postgres 18
• jdx/mise 2026.9.2 → [Updates: 2026.9.15]
• jdx/mise 2026.9.2 → [Updates: 2026.9.15]
• jdx/mise 2026.9.2 → [Updates: 2026.9.15]

helm-values (1)

infra/helm/once/values.yaml

mise (2)

benchmarks/cache-comparison/once/mise.toml (1)

• node 26.5.0 → [Updates: 26.10.0]

mise.toml (30)

• cmake 4.3.2 → [Updates: 4.4.3]
• ninja 1.13.2
• erlang 29.0.6 → [Updates: 29.1.1]
• elixir 1.20.4
• java 17.0.2 → [Updates: 17.0.20+101, 25.0.4+101.0.LTS]
• kotlin 2.4.10 → [Updates: 2.4.20]
• go 1.26.5 → [Updates: 1.27.1]
• rust 1.96.0 → [Updates: 1.98.1]
• zig 0.16.0
• ruby 4.0.6 → [Updates: 4.0.7]
• pipx 1.9.0 → [Updates: 1.17.7]
• pipx:pytest 8.4.2 → [Updates: 9.1.1]
• gem:rspec 3.13.2
• shellspec 0.28.1
• git-cliff 2.14.1 → [Updates: 2.14.2]
• github:tuist/blick 0.10.0
• github:superradcompany/microsandbox 0.5.7 → [Updates: 0.7.3]
• node 26.5.0 → [Updates: 26.10.0]
• npm:vitest 4.1.0 → [Updates: 4.1.11]
• npm:jest 30.4.0 → [Updates: 30.5.2]
• npm:opencode-ai 1.17.20 → [Updates: 1.18.33]
• aube 1.26.0 → [Updates: 1.41.0, 2.5.1]
• helm 4.2.4 → [Updates: 4.3.0]
• kubectl 1.36.2 → [Updates: 1.37.1]
• jq 1.8.2
• hyperfine 1.20.0
• github:bazelbuild/bazelisk 1.29.0
• github:buchgr/bazel-remote 2.6.2
• github:facebook/buck2 2026-07-15
• 1password-cli 2.32.0

mix (1)

web/mix.exs (24)

• phoenix ~> 1.8.4 → [Updates: ~> 1.8.4]
• phoenix_html ~> 4.1
• phoenix_live_reload ~> 1.2 → [Updates: ~> 1.2]
• phoenix_live_view ~> 1.2.0 → [Updates: ~> 1.2.0]
• lazy_html >= 0.1.0 → [Updates: >= 0.1.0]
• esbuild ~> 0.10
• telemetry_metrics ~> 1.0 → [Updates: ~> 1.0]
• telemetry_poller ~> 1.0
• jason ~> 1.2
• dns_cluster ~> 0.2.0 → [Updates: ~> 0.3.0]
• bandit ~> 1.5 → [Updates: ~> 1.5]
• mdex ~> 0.9 → [Updates: ~> 0.14]
• nimble_publisher ~> 2.0 → [Updates: ~> 2.0]
• flop ~> 0.26.4 → [Updates: ~> 0.29.0]
• lumis ~> 0.6 → [Updates: ~> 0.9]
• floki >= 0.30.0
• noora ~> 0.84 → [Updates: ~> 0.86]
• carta ~> 0.2
• browse_chrome ~> 0.4
• briefly ~> 0.5
• hammer ~> 7.0 → [Updates: ~> 7.0]
• mimic ~> 2.0 → [Updates: ~> 2.0]
• credo ~> 1.7
• quokka ~> 2.12

npm (3)

fixtures/exec/remote_dependency/package.json (1)

• vitest 4.1.10 → [Updates: 4.1.11]

fixtures/nx_hello/package.json (1)

• nx ^19.8.4 → [Updates: ^22.7.2]

packages/js/package.json (2)

• koffi ^3.0.0
• node >=18

---

• Check this box to trigger a request for Renovate to run again on this repository