Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (14)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	amannn/action-semantic-pull-request	2025-08-22
github-actions	suzuki-shunsuke/github-token-action	2023-11-26
mise	aqua:direnv/direnv	2025-07-20
mise	aqua:koalaman/shellcheck	2025-08-04
mise	aqua:segmentio/golines	2025-08-21
mise	npm:@trunkio/launcher	2024-11-06
mise	npm:bash-language-server	2025-04-13
mise	npm:jsonlint	2018-02-21
mise	npm:markdown-toc	2017-09-19
mise	npm:sql-language-server	2024-11-14
mise	pipx:gitlint-core	2023-09-02
mise	pipx:pyproject-flake8	2024-04-09
mise	pipx:ruff-lsp	2025-02-10
regex	max-baz/yubikey-touch-detector	2025-06-04

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): lock file maintenance
• chore(deps): update ⬆️ github-actions to v4.2.5
• chore(deps): update ⬆️ aqua-packages to v4.554.0
• chore(deps): update ⬆️ github-actions to v2
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update ⬆️ agent extensions (@narumitw/pi-starship, @tintinweb/pi-subagents)
• chore(deps): update ⬆️ dagger to v0.21.9
• chore(deps): update ⬆️ mise-packages (aqua:ast-grep/ast-grep, aqua:astral-sh/uv, aqua:atuinsh/atuin, aqua:dagger/dagger, aqua:earendil-works/pi, aqua:editorconfig-checker/editorconfig-checker, aqua:google/go-containerregistry, aqua:neovim/neovim, aqua:nushell/nushell, aqua:openai/codex, aqua:securego/gosec, aqua:sharkdp/fd, aqua:snyk/cli, aqua:sst/opencode, aqua:tree-sitter/tree-sitter, aqua:vercel-labs/agent-browser, aqua:walles/moor, github:agavra/tuicr, github:anthropics/claude-code, github:backnotprop/plannotator, github:janosmiko/lfk, github:modem-dev/hunk, go:golang.org/x/vuln/cmd/govulncheck, node, npm:cspell, npm:socket, pipx:semgrep, usage)

Detected Dependencies

github-actions (8)

.github/workflows/pr_aqua_update_checksum.yaml (1)

• aquaproj/update-checksum-workflow v1.0.6@d3ab3ae1f9db2320a23efeaf9baaafeaae45af56

.github/workflows/pr_chezmoi_init.yaml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• dagger/dagger-for-github v8.4.1@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77

.github/workflows/pr_mise_lock.yaml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• jdx/mise-action v4.2.4@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 → [Updates: v4.2.5]

.github/workflows/pr_renovate_release_notes.yaml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• node 24.19.0

.github/workflows/pr_semantic.yml (1)

• amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50

.github/workflows/pr_trunkio.yaml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• trunk-io/trunk-action v1.3.1@04ba50e7658c81db7356da96657e6e77f220bfa3 → [Updates: v2.0.0]

.github/workflows/release_please.yml (2)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• googleapis/release-please-action v5@45996ed1f6d02564a971a2fa1b5860e934307cf7

.github/workflows/trunk_upgrades.yaml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• suzuki-shunsuke/github-token-action v0.2.1@350d7506222e3a0016491abe85b5c4dd475b67d1
• trunk-io/trunk-action v1.3.1@04ba50e7658c81db7356da96657e6e77f220bfa3 → [Updates: v2.0.0]

mise (2)

home/dot_local/share/private_vet/mise.toml (16)

• aqua:ossf/scorecard 5.5.0
• aqua:google/osv-scanner 2.5.1
• aqua:aquasecurity/trivy 0.74.0
• aqua:gitleaks/gitleaks 8.30.1
• aqua:securego/gosec 2.28.0 → [Updates: 2.29.0]
• aqua:cli/cli 2.98.0
• aqua:jqlang/jq 1.8.1
• go:golang.org/x/vuln/cmd/govulncheck 1.1.4 → [Updates: 1.7.0]
• cargo:cargo-audit 0.22.2
• cargo:cargo-deny 0.20.2
• cargo:cargo-geiger 0.13.0
• pipx:semgrep 1.174.0 → [Updates: 1.175.0]
• pipx:bandit 1.9.4
• pipx:pip-audit 2.10.1
• pipx:guarddog 3.2.0
• npm:socket 1.1.158 → [Updates: 1.1.160]

mise/config.toml (124)

• bun 1.4.0
• go 1.27.0
• node 24.19.0 → [Updates: 24.20.0]
• rust 1.98.0
• usage 6.0.0 → [Updates: 6.4.1]
• amazon-ecr-credential-helper 0.12.0
• aqua:vercel-labs/agent-browser 0.34.0 → [Updates: 0.35.0]
• aqua:ast-grep/ast-grep 0.45.1 → [Updates: 0.45.2]
• aqua:atuinsh/atuin 18.19.0 → [Updates: 18.20.0]
• github:aquaproj/aqua v2.62.3
• github:erikjuhani/basalt basalt/v0.12.5
• aqua:sharkdp/bat 0.26.1
• aqua:twpayne/chezmoi 2.72.0
• github:anthropics/claude-code v2.1.240 → [Updates: v2.1.246]
• aqua:cli/cli 2.98.0
• aqua:openai/codex rust-v0.149.0 → [Updates: rust-v0.149.1]
• aqua:google/go-containerregistry 0.21.9 → [Updates: 0.22.0]
• aqua:dagger/dagger 0.21.8 → [Updates: 0.21.9]
• aqua:dandavison/delta 0.19.2
• aqua:dlvhdr/diffnav 0.12.0
• aqua:direnv/direnv 2.37.1
• aqua:bootandy/dust 1.2.5
• aqua:homeport/dyff 1.12.0
• aqua:eza-community/eza 0.23.5
• aqua:fastfetch-cli/fastfetch 2.67.1
• aqua:sharkdp/fd 10.4.2 → [Updates: 10.5.0]
• aqua:antonmedv/fx 39.2.0
• aqua:junegunn/fzf 0.74.3
• aqua:int128/ghcp 1.15.3
• github:dlvhdr/gh-dash v4.25.2
• github:dlvhdr/gh-enhance v0.7.0
• github:thiagokokada/gh-gfm-preview v1.3.1
• github:github/gh-stack v0.1.0
• aqua:suzuki-shunsuke/ghtkn 0.4.0
• github:kitlangton/ghui v0.9.0
• aqua:charmbracelet/glow 3.0.0
• npm:@withgraphite/graphite-cli 1.8.6
• aqua:charmbracelet/gum 2.0.0
• aqua:helm/helm 4.2.4
• github:ogulcancelik/herdr 0.8.2
• github:modem-dev/hunk v0.19.0 → [Updates: v0.20.0]
• aqua:stedolan/jq 1.8.1
• aqua:borghei/ink 0.7.0
• aqua:casey/just 1.58.0
• aqua:derailed/k9s 0.51.0
• aqua:kubernetes/kubectl 1.35.3
• aqua:jesseduffield/lazygit 0.64.1
• github:janosmiko/lfk v0.18.1 → [Updates: v0.18.2]
• github:schpet/linear-cli v2.5.0
• aqua:walles/moor 2.17.0 → [Updates: 2.18.0]
• aqua:neovim/neovim 0.12.4 → [Updates: 0.12.5]
• github:nolabs-ai/nono v0.74.0
• aqua:nushell/nushell 0.115.0 → [Updates: 0.115.1]
• aqua:sst/opencode 1.18.21 → [Updates: 1.18.23]
• npm:opkg 0.11.3
• aqua:earendil-works/pi 0.84.2 → [Updates: 0.84.3]
• aqua:suzuki-shunsuke/pinact 4.1.1
• github:backnotprop/plannotator v0.27.6 → [Updates: v0.27.8]
• aqua:sethvargo/ratchet 0.12.0
• github:vitor-mariano/regex-tui 0.7.0
• aqua:BurntSushi/ripgrep 15.2.0
• aqua:spacelift-io/spacectl 1.25.0
• aqua:starship/starship 1.26.0
• aqua:stern/stern 1.34.0
• aqua:siderolabs/talos 1.13.9
• npm:@trunkio/launcher 1.3.4
• aqua:alexpasmantier/television 0.15.9
• github:tassiovirginio/try-rs v1.7.11
• github:agavra/tuicr v0.23.1 → [Updates: v0.24.0]
• github:max-sixty/worktrunk v0.74.0
• aqua:sxyazi/yazi 26.8.15
• aqua:mikefarah/yq 4.53.6
• aqua:ajeetdsouza/zoxide 0.10.0
• aqua:zellij-org/zellij 0.45.0
• aqua:LuaLS/lua-language-server 3.19.1
• aqua:aquasecurity/tfsec 1.28.14
• aqua:artempyanykh/marksman 2026-02-08
• aqua:astral-sh/ruff 0.16.4
• aqua:astral-sh/uv 0.12.5 → [Updates: 0.12.6]
• aqua:checkmake/checkmake 0.3.2
• aqua:crate-ci/typos 1.49.0
• aqua:dprint/dprint 0.56.1
• aqua:editorconfig-checker/editorconfig-checker 3.11.1 → [Updates: 3.11.2]
• aqua:golangci/golangci-lint 2.13.1
• aqua:google/yamlfmt 0.21.0
• aqua:gotestyourself/gotestsum 1.13.0
• aqua:incu6us/goimports-reviser 3.12.6
• aqua:koalaman/shellcheck 0.11.0
• aqua:mvdan/gofumpt 0.11.0
• aqua:mvdan/sh 3.13.1
• aqua:nametake/golangci-lint-langserver 0.0.12
• aqua:psf/black 26.5.1
• aqua:rhysd/actionlint 1.7.12
• aqua:rust-lang/rust-analyzer 2026-02-16
• aqua:segmentio/golines 0.13.0
• aqua:snyk/cli 1.1306.4 → [Updates: 1.1307.0]
• aqua:tamasfe/taplo 0.10.0
• aqua:terraform-linters/tflint 0.64.0
• aqua:tree-sitter/tree-sitter 0.26.12 → [Updates: 0.26.13]
• go:golang.org/x/tools/gopls v0.23.0
• npm:@commitlint/cli 21.2.2
• npm:@fsouza/prettierd 0.29.0
• npm:bash-language-server 5.6.0
• npm:cspell 10.1.0 → [Updates: 10.1.1]
• npm:dockerfile-language-server-nodejs 0.15.0
• npm:jsonlint 1.6.3
• npm:markdown-toc 1.2.0
• npm:markdownlint-cli 0.49.1
• npm:prettier 3.9.6
• npm:pyright 1.1.413
• npm:sql-formatter 15.8.2
• npm:sql-language-server 1.7.1
• npm:stylelint 17.14.1
• npm:textlint 15.8.0
• pipx:ansible-lint 26.8.0
• pipx:beautysh 6.4.3
• pipx:gitlint-core 0.19.1
• pipx:isort 8.0.1
• pipx:mypy 2.3.1
• pipx:pyproject-flake8 7.0.0
• pipx:ruff-lsp 0.0.62
• pipx:semgrep 1.174.0 → [Updates: 1.175.0]
• pipx:sqlfluff 4.3.0
• pipx:yamllint 1.38.0

nix (1)

flake.nix (7)

• flake-utils lock file @ 11707dc2f618dd54ca8739b309ec4fc024de578b
• homebrew-bundle lock file @ a3265c84b232e13048ecbf6fc18a2eedfadbeb08
• homebrew-cask lock file @ 967dc9775524309f2651fbc953d57a69c706f7d0
• homebrew-core lock file @ 4ccb2e0b7a5c29e6a132ef62e5e3f13928e0891e
• nix-darwin lock file @ 4cff07de74b50e64bdd68cd4e722ab5b6b35ee48
• nix-homebrew lock file @ b00218e4aec0e5bf07d61a0bb13f842faa582d7b
• nixpkgs nixpkgs-unstable

npm (1)

home/dot_local/share/private_pi-extensions/package.json (4)

• @narumitw/pi-starship 0.52.2 → [Updates: 0.52.3]
• pi-ask-user 0.14.0
• pi-web-search 1.3.1
• @tintinweb/pi-subagents 0.18.0 → [Updates: 0.18.2]

regex (7)

.github/workflows/pr_aqua_update_checksum.yaml (1)

• aquaproj/aqua v2.62.3

.github/workflows/pr_chezmoi_init.yaml (1)

• dagger/dagger v0.21.8 → [Updates: v0.21.9]

aqua/aqua.yaml (1)

• aquaproj/aqua-registry v4.553.0 → [Updates: v4.554.0]

home/.chezmoiexternal.toml.tmpl (3)

• ryanoasis/nerd-fonts v3.5.1
• gabm/Satty v0.22.0
• max-baz/yubikey-touch-detector 1.13.0

home/.chezmoiscripts/run_once_after_40_catppuccin.sh.tmpl (1)

• catppuccin/gtk v1.0.3

home/.chezmoiscripts/run_once_after_42_colloid.sh.tmpl (1)

• vinceliuice/Colloid-icon-theme 2023-07-01

home/private_dot_config/k9s/private_config.yaml.tmpl (1)

• busybox 1.38.0@sha256:dc2d74b28e4cf8984fa52af1f39bc7c3d9c73760b41a74d629f5d11b1ab28616

renovate-config (1)

.github/renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository