This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/cerbos/cerbos-sdk-javascript). ## Awaiting Schedule The following updates are awaiting their schedule. To get an update now, click on a checkbox below. - [ ] <!-- unschedule-branch=renovate/opentelemetry -->Update opentelemetry (`@opentelemetry/instrumentation`, `@opentelemetry/sdk-metrics`, `@opentelemetry/sdk-trace-base`, `@opentelemetry/sdk-trace-node`) - [ ] <!-- unschedule-branch=renovate/major-6-development-dependencies -->Update pnpm/action-setup action to v6 - [ ] <!-- unschedule-branch=renovate/lock-file-maintenance -->Lock file maintenance (npm) - [ ] <!-- create-all-awaiting-schedule-prs -->🔐 **Create all awaiting schedule PRs at once** 🔐 ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] <!-- rebase-branch=renovate/npm-uuid-vulnerability -->[Update dependency uuid to v14 [SECURITY]](../pull/1425) - [ ] <!-- rebase-branch=renovate/buf -->[Update dependency @bufbuild/buf to v1.68.3](../pull/1426) - [ ] <!-- rebase-branch=renovate/development-dependencies -->[Update development dependencies](../pull/1427) (`@types/web`, `actions/setup-node`, `eslint-plugin-react-hooks`, `ruby`, `traefik`, `typescript`, `typescript-eslint`, `vitest`) - [ ] <!-- rebase-branch=renovate/major-10-development-dependencies -->[Update development dependencies to v10 (major)](../pull/1371) (`@eslint/js`, `eslint`) - [ ] <!-- rebase-all-open-prs -->**Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies <details><summary>docker-compose (2)</summary> <blockquote> <details><summary>private/test/servers/docker-compose.yaml (3)</summary> - `ruby 4.0.2-alpine@sha256:9623b709c5c0c99ac3bf2ca6f1911456338eae46e8344c80a2092a38ec38e993` → [Updates: `4.0.3-alpine`] - `traefik v3.6.12@sha256:171c9c3565b29f6c133f1c1b43c5d4e5853415198e9e1078c001f8702ff66aec` → [Updates: `v3.6.13`] - `jaegertracing/jaeger 2.17.0@sha256:6266573208d665ce5c17483bce0a75d0806480d92c84766d288d0aee885ce708` </details> <details><summary>scripts/docker-compose.yaml (1)</summary> - `lycheeverse/lychee 0.23.0-alpine@sha256:77ca5d963d8b935626ae46e6989b61a85b0e584828e061bc36d92dda1db0c4e2` → [Updates: `0.24.1-alpine`] </details> </blockquote> </details> <details><summary>github-actions (8)</summary> <blockquote> <details><summary>.github/actions/lint/action.yaml (2)</summary> - `actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae` - `actions/create-github-app-token v3.1.1@1b10c78c7865c340bc4f6099eb2f838309f1e8c3` </details> <details><summary>.github/actions/setup-node/action.yaml (4)</summary> - `actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f` → [Updates: `v6.4.0`] - `pnpm/action-setup v5.0.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320` → [Updates: `v6.0.3`] - `actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae` - `actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae` </details> <details><summary>.github/workflows/cache.yaml (1)</summary> - `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` </details> <details><summary>.github/workflows/ci.yaml (6)</summary> - `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` - `cerbos/actions main@77f6019c58e3749bc035c696149309861302101f` - `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` - `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` - `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` - `cerbos/actions main@77f6019c58e3749bc035c696149309861302101f` </details> <details><summary>.github/workflows/publish-docs.yaml (5)</summary> - `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` - `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `cerbos/actions main@77f6019c58e3749bc035c696149309861302101f` - `actions/deploy-pages v5.0.0@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128` - `cerbos/actions main@77f6019c58e3749bc035c696149309861302101f` </details> <details><summary>.github/workflows/publish-npm.yaml (2)</summary> - `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` - `cerbos/actions main@77f6019c58e3749bc035c696149309861302101f` </details> <details><summary>.github/workflows/update-protos.yaml (3)</summary> - `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` - `cerbos/actions main@77f6019c58e3749bc035c696149309861302101f` - `cerbos/actions main@77f6019c58e3749bc035c696149309861302101f` </details> <details><summary>.github/workflows/zizmor.yaml (2)</summary> - `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` - `cerbos/actions main@77f6019c58e3749bc035c696149309861302101f` </details> </blockquote> </details> <details><summary>nodenv (1)</summary> <blockquote> <details><summary>.node-version (1)</summary> - `node 25.9.0` </details> </blockquote> </details> <details><summary>npm (15)</summary> <blockquote> <details><summary>package.json (20)</summary> - `@arethetypeswrong/cli 0.18.2` - `@bufbuild/buf 1.68.1` → [Updates: `1.68.3`] - `@bufbuild/protoc-gen-es 2.11.0` → [Updates: `2.12.0`] - `@tsconfig/node20 20.1.9` - `@tsconfig/strictest 2.0.8` - `@types/node 20.19.39` → [Updates: `22.19.17`, `24.12.2`] - `@types/web 0.0.345` → [Updates: `0.0.347`] - `concurrently 9.2.1` - `depcheck 1.4.7` - `eslint 9.39.4` → [Updates: `10.2.1`] - `prettier 3.8.3` - `prettier-plugin-pkg 0.22.1` - `ts-proto 2.11.6` - `tsx 4.21.0` - `typedoc 0.28.19` - `typedoc-plugin-mdn-links 5.1.1` - `typescript 6.0.2` → [Updates: `6.0.3`] - `node 25.9.0` - `pnpm 10.33.0` → [Updates: `10.33.2`] - `pnpm 10.33.0+sha512.10568bb4a6afb58c9eb3630da90cc9516417abebd3fabbe6739f0ae795728da1491e9db5a544c76ad8eb7570f5c4bb3d6c637b2cb41bfdcdb47fa823c8649319` → [Updates: `10.33.2`] </details> <details><summary>packages/api/package.json (2)</summary> - `@bufbuild/protobuf ^2.11.0` → [Updates: `^2.12.0`] - `node >= 20` </details> <details><summary>packages/core/package.json (4)</summary> - `@cerbos/api ^0.6.0` - `uuid ^13.0.0` → [Updates: `^14.0.0`] - `@bufbuild/protobuf ^2.11.0` → [Updates: `^2.12.0`] - `node >= 20` </details> <details><summary>packages/embedded-client/package.json (8)</summary> - `@bufbuild/protovalidate ^1.1.1` → [Updates: `^1.2.0`] - `@cerbos/core ^0.28.0` - `@cerbos/hub ^0.5.2` - `ulid ^3.0.2` - `@bufbuild/protobuf ^2.11.0` → [Updates: `^2.12.0`] - `@cerbos/api ^0.6.0` - `@cerbos/embedded-server ^0.4.1` - `node >= 20` </details> <details><summary>packages/embedded/package.json (5)</summary> - `@cerbos/core ^0.28.0` - `ulid ^3.0.2` - `@bufbuild/protobuf ^2.11.0` → [Updates: `^2.12.0`] - `@cerbos/api ^0.6.0` - `node >= 20` </details> <details><summary>packages/files/package.json (5)</summary> - `@cerbos/core ^0.28.0` - `yaml ^2.8.3` - `@bufbuild/protobuf ^2.11.0` → [Updates: `^2.12.0`] - `@cerbos/api ^0.6.0` - `node >= 20` </details> <details><summary>packages/grpc/package.json (5)</summary> - `@cerbos/core ^0.28.0` - `@grpc/grpc-js ^1.14.3` - `@bufbuild/protobuf ^2.11.0` → [Updates: `^2.12.0`] - `@cerbos/api ^0.6.0` - `node >= 20` </details> <details><summary>packages/http/package.json (4)</summary> - `@cerbos/core ^0.28.0` - `@bufbuild/protobuf ^2.11.0` → [Updates: `^2.12.0`] - `@cerbos/api ^0.6.0` - `node >= 20` </details> <details><summary>packages/hub/package.json (7)</summary> - `@cerbos/core ^0.28.0` - `@connectrpc/connect ^2.1.1` - `@connectrpc/connect-node ^2.1.1` - `@connectrpc/connect-web ^2.1.1` - `@connectrpc/validate ^0.2.0` - `@bufbuild/protobuf ^2.11.0` → [Updates: `^2.12.0`] - `node >= 20` </details> <details><summary>packages/opentelemetry/package.json (7)</summary> - `@opentelemetry/api ^1.9.1` - `@opentelemetry/instrumentation ^0.214.0` → [Updates: `^0.215.0`] - `@opentelemetry/semantic-conventions ^1.40.0` - `@bufbuild/protobuf ^2.11.0` → [Updates: `^2.12.0`] - `@cerbos/api ^0.6.0` - `@cerbos/core ^0.28.0` - `node >= 20` </details> <details><summary>packages/react/package.json (5)</summary> - `use-deep-compare-effect ^1.8.1` - `@types/react 19.2.14` - `@cerbos/core ^0.28.0` - `react >=18.0.0` - `node >= 20` </details> <details><summary>pnpm-workspace.yaml</summary> </details> <details><summary>private/eslint/package.json (6)</summary> - `@eslint/js 9.39.4` → [Updates: `10.0.1`] - `@stylistic/eslint-plugin 5.10.0` - `@vitest/eslint-plugin 1.6.16` - `eslint-plugin-import 2.32.0` - `eslint-plugin-react-hooks 7.0.1` → [Updates: `7.1.1`] - `typescript-eslint 8.58.2` → [Updates: `8.59.0`] </details> <details><summary>private/scripts/package.json (9)</summary> - `@types/semver 7.7.1` - `date-fns 4.1.0` - `execa 9.6.1` - `node-html-parser 7.1.0` - `prettier 3.8.3` - `semver 7.7.4` - `typedoc 0.28.19` - `yaml 2.8.3` - `zod 4.3.6` </details> <details><summary>private/test/package.json (23)</summary> - `@bufbuild/protobuf 2.11.0` → [Updates: `2.12.0`] - `@cerbos/embedded-server 0.4.2` - `@connectrpc/connect 2.1.1` - `@connectrpc/connect-node 2.1.1` - `@grpc/grpc-js 1.14.3` - `@opentelemetry/api 1.9.1` - `@opentelemetry/sdk-metrics 2.6.1` → [Updates: `2.7.0`] - `@opentelemetry/sdk-trace-base 2.6.1` → [Updates: `2.7.0`] - `@opentelemetry/sdk-trace-node 2.6.1` → [Updates: `2.7.0`] - `@opentelemetry/semantic-conventions 1.40.0` - `@testing-library/react 16.3.2` - `@testing-library/user-event 14.6.1` - `@types/adm-zip 0.5.8` - `@types/react 19.2.14` - `@types/semver 7.7.1` - `@ungap/with-resolvers 0.1.0` - `adm-zip 0.5.17` - `jose 6.2.2` - `jsdom 29.0.2` → [Updates: `29.1.0`] - `react 19.2.5` - `react-dom 19.2.5` - `semver 7.7.4` - `vitest 4.1.4` → [Updates: `4.1.5`] </details> </blockquote> </details> <details><summary>renovate-config-presets (1)</summary> <blockquote> <details><summary>renovate.json</summary> </details> </blockquote> </details> --- - [ ] <!-- manual job -->Check this box to trigger a request for Renovate to run again on this repository
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Awaiting Schedule
The following updates are awaiting their schedule. To get an update now, click on a checkbox below.
@opentelemetry/instrumentation,@opentelemetry/sdk-metrics,@opentelemetry/sdk-trace-base,@opentelemetry/sdk-trace-node)Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
@types/web,actions/setup-node,eslint-plugin-react-hooks,ruby,traefik,typescript,typescript-eslint,vitest)@eslint/js,eslint)Detected Dependencies
docker-compose (2)
github-actions (8)
nodenv (1)
npm (15)
renovate-config-presets (1)