Dependency Dashboard

[fro-bot]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (3)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
npm	@octokit/webhooks-types	2024-10-03
npm	@semantic-release/exec	2025-05-09
npm	@semantic-release/git	2021-10-30

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• build(deps): update dependency oh-my-openagent to v4
• build(deps): update dependency oh-my-opencode-slim to v2
• build(deps): update mitmproxy/mitmproxy Docker tag to v12
• ci(deps): update GitHub Actions (major) (actions/checkout, peter-evans/create-pull-request)
• fix(deps): update dependency @hono/node-server to v2
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(dev): update @types devDependencies to v24.13.2
• build(deps): maintain lockfiles
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• build(dev): update dependency tsdown to v0.22.3
• fix(deps): update dependency effect to v3.21.4
• fix(deps): update dependency hono to v4.12.26
• chore(deps): update pnpm to v11.8.0
• fix(deps): update aws-sdk-js-v3 monorepo to v3.1072.0
• fix(deps): update dependency @actions/cache to v6.1.0

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

docker-compose (2)

deploy/compose.override.example.yaml

deploy/compose.yaml (1)

• mitmproxy/mitmproxy 11.1.3@sha256:e0deb0df7edf9f909053f274a067cd1cacb90f5c17d74459e1693179c0b98d8f → [Updates: 12.2.3]

dockerfile (2)

deploy/gateway.Dockerfile (2)

• node 24.17.0-alpine@sha256:156b55f92e98ccd5ef49578a8cea0df4679826564bad1c9d4ef04462b9f0ded6
• node 24.17.0-alpine@sha256:156b55f92e98ccd5ef49578a8cea0df4679826564bad1c9d4ef04462b9f0ded6

deploy/workspace.Dockerfile (2)

• node 24.17.0-alpine@sha256:156b55f92e98ccd5ef49578a8cea0df4679826564bad1c9d4ef04462b9f0ded6
• node 24.17.0-alpine@sha256:156b55f92e98ccd5ef49578a8cea0df4679826564bad1c9d4ef04462b9f0ded6

github-actions (11)

.github/actions/setup/action.yaml (2)

• pnpm/action-setup v6.0.9@0ebf47130e4866e96fce0953f49152a61190b271
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e

.github/workflows/auto-release.yaml (2)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]

.github/workflows/ci.yaml (13)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• dorny/paths-filter v4.0.1@fbd0ab8f3e69293af611ebaee6363fc25e6d187d
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]

.github/workflows/codeql-analysis.yaml (4)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e

.github/workflows/copilot-setup-steps.yaml (1)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]

.github/workflows/fro-bot.yaml (1)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]

.github/workflows/harness-release.yaml (27)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• peter-evans/create-pull-request v7.0.11@22a9089034f40e5a961c8808d113e2c98fb63676 → [Updates: v8.1.1]
• ubuntu 24.04
• bun 1.3.14
• ubuntu 24.04
• ubuntu 24.04
• bun 1.3.14
• node 24
• ubuntu 24.04

.github/workflows/prepare-release-pr.yaml (2)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]

.github/workflows/renovate.yaml (1)

• bfra-me/.github v4.16.27@3f97c9262265bc1881a8d34e99ae83df22ea8b89

.github/workflows/scorecard.yaml (4)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e

.github/workflows/update-repo-settings.yaml (1)

• bfra-me/.github v4.16.27@3f97c9262265bc1881a8d34e99ae83df22ea8b89

nodenv (1)

.node-version (1)

• node 24.17.0

npm (7)

apps/action/package.json

apps/workspace-agent/package.json (3)

• @hono/node-server 1.19.14 → [Updates: 2.0.5]
• hono 4.12.25 → [Updates: 4.12.26]
• vitest 4.1.9

package.json (34)

• @actions/artifact 6.2.1
• @actions/cache 6.0.1 → [Updates: 6.1.0]
• @actions/core 3.0.1
• @actions/exec 3.0.0
• @actions/github 9.1.1
• @actions/tool-cache 4.0.0
• @aws-sdk/client-s3 3.1069.0 → [Updates: 3.1072.0]
• @bfra.me/es 0.1.0
• @octokit/auth-app 8.2.0
• @opencode-ai/sdk 1.17.6
• @bfra.me/eslint-config 0.51.1
• @bfra.me/prettier-config 0.16.9
• @bfra.me/tsconfig 0.13.1
• @octokit/webhooks-types 7.6.1
• @semantic-release/exec 7.1.0
• @semantic-release/git 10.0.1
• @types/node 24.13.1 → [Updates: 24.13.2]
• @vitest/eslint-plugin 1.6.20
• conventional-changelog-conventionalcommits 9.3.1
• eslint 10.5.0
• eslint-config-prettier 10.1.8
• eslint-plugin-prettier 5.5.6
• generate-license-file 4.2.1
• jiti 2.7.0
• js-yaml 4.2.0
• lint-staged 17.0.7
• prettier 3.8.4
• read-package-up 12.0.0
• semantic-release 25.0.5
• simple-git-hooks 2.13.1
• tsdown 0.22.2 → [Updates: 0.22.3]
• typescript 6.0.3
• vitest 4.1.9
• pnpm 11.7.0 → [Updates: 11.8.0]

packages/gateway/package.json (4)

• @hono/node-server 1.19.14 → [Updates: 2.0.5]
• discord.js 14.26.4
• effect 3.21.3 → [Updates: 3.21.4]
• hono 4.12.25 → [Updates: 4.12.26]

packages/harness/package.json (1)

• node >=24

packages/runtime/package.json (2)

• @bfra.me/es 0.1.0
• @opencode-ai/sdk 1.17.6

pnpm-workspace.yaml (14)

• brace-expansion >=5.0.6
• fast-uri >=3.1.2
• fast-xml-builder >=1.1.7
• fast-xml-parser >=5.7.0
• flatted 3.4.2
• handlebars >=4.7.9
• ip-address >=10.1.1
• lodash >=4.18.0
• lodash-es >=4.18.0
• picomatch >=4.0.4
• tar@^7 >=7.5.11
• undici@^7 >=7.24.0
• vite 8.0.16
• yaml >=2.8.3

regex (13)

.github/renovate.json5 (1)

• bfra-me/renovate-config 5.2.3

.github/workflows/harness-release.yaml (1)

• npm 11.17.0

.github/workflows/harness-release.yaml (2)

• oven-sh/bun 1.3.14
• oven-sh/bun 1.3.14

deploy/gateway.Dockerfile

deploy/workspace.Dockerfile

deploy/workspace.Dockerfile (1)

• @fro.bot/systematic 2.32.0

packages/harness/harness.config.json (1)

• anomalyco/opencode 1.17.6

packages/harness/src/bun-version.ts (1)

• oven-sh/bun 1.3.14

packages/runtime/src/shared/constants.ts (1)

• oh-my-openagent 3.17.15 → [Updates: 4.10.0]

packages/runtime/src/shared/constants.ts (1)

• oh-my-opencode-slim 1.1.2 → [Updates: 2.0.3]

packages/runtime/src/shared/constants.ts (1)

• oven-sh/bun 1.3.14

packages/runtime/src/shared/constants.ts (1)

• @fro.bot/systematic 2.32.0

src/services/setup/opencode.ts (1)

• anomalyco/opencode 1.17.6

renovate-config (1)

.github/renovate.json5

---

• Check here to trigger a Renovate run on this repository