Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update actions/attest action to v4.2.2
• Update dependency @sigstore/verify to v4.1.2
• Update dependency rolldown to v1.2.2
• Update github/codeql-action action to v4.37.6
• Update moby/buildkit Docker tag to v0.32.2
• Update module github.com/moby/buildkit to v0.32.2
• Update pnpm to v11.20.0
• Update voidzero-dev/setup-vp action to v1.16.1
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update ghcr.io/pnpm/pnpm:11 Docker digest to eba7695
• Update golang:1.26-alpine Docker digest to 3889b42
• Update dependency vite-plus to v0.2.9
• Update dorny/paths-filter action to v4.0.3
• Update module google.golang.org/protobuf to v1.36.12

Detected Dependencies

docker-compose (4)

compose.test-explicit.yaml

compose.test-transparent.yaml

compose.yaml

docker/compose.action.yaml

dockerfile (2)

docker/explicit/Dockerfile (3)

• golang 1.26-alpine@sha256:0178a641fbb4858c5f1b48e34bdaabe0350a330a1b1149aabd498d0699ff5fb2 → [Updates: 1.26-alpine]
• ghcr.io/pnpm/pnpm 11@sha256:e26f380828856f205feaaf42abd157df9ce41bc8e17b662eeaa3379a9638dee0 → [Updates: 11]
• moby/buildkit v0.32.0@sha256:1f8167fcb0eca5b7126353d35299386945cbb8949cc516c592a49f80cfce4fa2 → [Updates: v0.32.2]

docker/transparent/Dockerfile (3)

• alpine 3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b
• ghcr.io/pnpm/pnpm 11@sha256:e26f380828856f205feaaf42abd157df9ce41bc8e17b662eeaa3379a9638dee0 → [Updates: 11]
• moby/buildkit v0.32.0@sha256:1f8167fcb0eca5b7126353d35299386945cbb8949cc516c592a49f80cfce4fa2 → [Updates: v0.32.2]

github-actions (12)

.github/actions/setup-vp/action.yml (1)

• voidzero-dev/setup-vp v1.15.0@250f29ce396baf5e8f24498e17c0dfdebabc26eb → [Updates: v1.16.1]

.github/workflows/docker-publish.yml (8)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-qemu-action v4.2.0@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/attest v4.2.1@508db95dd578ae2727ebd6217d5ba78e4fbda05d → [Updates: v4.2.2]

.github/workflows/example-audit.yml (4)

• buildcage/docker v3.0.3@abd2df9ccd0b4169e5fd74c5f40481fb95e353fe
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• buildcage/docker v3.0.3@abd2df9ccd0b4169e5fd74c5f40481fb95e353fe

.github/workflows/example-explicit.yml (4)

• buildcage/docker v3.0.3@abd2df9ccd0b4169e5fd74c5f40481fb95e353fe
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• buildcage/docker v3.0.3@abd2df9ccd0b4169e5fd74c5f40481fb95e353fe

.github/workflows/example-restrict.yml (4)

• buildcage/docker v3.0.3@abd2df9ccd0b4169e5fd74c5f40481fb95e353fe
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• buildcage/docker v3.0.3@abd2df9ccd0b4169e5fd74c5f40481fb95e353fe

.github/workflows/image-scan.yml (6)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.37.4@f205ea1c3313d32999d8d6a48b4f6530d4437b38 → [Updates: v4.37.6]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25

.github/workflows/release.yml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/scorecard.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• github/codeql-action v4.37.4@f205ea1c3313d32999d8d6a48b4f6530d4437b38 → [Updates: v4.37.6]

.github/workflows/test-e2e.yml (4)

• dorny/paths-filter v4.0.2@7b450fff21473bca461d4b92ce414b9d0420d706 → [Updates: v4.0.3]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a

.github/workflows/test-integration.yml (10)

• dorny/paths-filter v4.0.2@7b450fff21473bca461d4b92ce414b9d0420d706 → [Updates: v4.0.3]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-qemu-action v4.2.0@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• ubuntu 24.04-arm

.github/workflows/test-unit.yml (2)

• dorny/paths-filter v4.0.2@7b450fff21473bca461d4b92ce414b9d0420d706 → [Updates: v4.0.3]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/update-major-tag.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

gomod (1)

docker/explicit/buildkit-proxy/go.mod (4)

• go 1.26.3
• github.com/moby/buildkit v0.32.0 → [Updates: v0.32.2]
• google.golang.org/grpc v1.83.0
• google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af@f2248ac996af → [Updates: v1.36.12]

npm (2)

package.json (12)

• @actions/core ^3.0.1
• @sigstore/bundle ^5.0.0
• @sigstore/tuf ^5.0.0
• @sigstore/verify ^4.1.0 → [Updates: ^4.1.0]
• @types/node ^24.13.3
• fast-check ^4.9.0
• rolldown ^1.2.0 → [Updates: ^1.2.0]
• typescript ^7.0.2
• vite-plus ^0.2.5 → [Updates: ^0.2.5]
• node >=24
• pnpm >=11
• pnpm 11.19.0 → [Updates: 11.20.0]

pnpm-workspace.yaml

regex (4)

docker/transparent/Dockerfile (1)

• containernetworking/plugins v1.9.1

docs/explicit-engine.md (1)

• buildcage/docker v3.0.3@abd2df9ccd0b4169e5fd74c5f40481fb95e353fe

docs/self-hosting.md (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

README.md (6)

• buildcage/docker v3.0.3@abd2df9ccd0b4169e5fd74c5f40481fb95e353fe
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• buildcage/docker v3.0.3@abd2df9ccd0b4169e5fd74c5f40481fb95e353fe
• buildcage/docker v3.0.3@abd2df9ccd0b4169e5fd74c5f40481fb95e353fe
• buildcage/docker v3.0.3@abd2df9ccd0b4169e5fd74c5f40481fb95e353fe

---

• Check this box to trigger a request for Renovate to run again on this repository