Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

See Config Migration PR: #1317.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Updating multiple npm lock files is deprecated and support will be removed in future versions.
• ⚠️ WARN: Package lookup failures

Abandoned Dependencies

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (4)

Datasource	Package	Last Updated
github-actions	ouzi-dev/commit-status-updater	2024-05-28
gomod	github.com/sourcegraph/go-diff	2023-01-22
gomod	gopkg.in/yaml.v3	2022-05-27

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency @types/node to v22.19.13
• chore(deps): update github/codeql-action action to v3.32.4
• chore(deps): update grafana/shared-workflows/build-push-to-dockerhub action to v0.4.2
• chore(deps): update dependency go to v1.26.0
• chore(deps): update docker/build-push-action action to v6.19.2
• chore(deps): update grafana/shared-workflows/get-vault-secrets action to v1.3.1
• chore(deps): update actions/github-script action to v8
• chore(deps): update actions/setup-go action to v6
• chore(deps): update actions/setup-node action to v6
• chore(deps): update dependency @types/node to v24
• chore(deps): update github/codeql-action action to v4
• chore(deps): update google-github-actions/auth action to v3
• chore(deps): update google-github-actions/deploy-cloudrun action to v3
• chore(deps): update google-github-actions/setup-gcloud action to v3
• chore(deps): update peter-evans/create-or-update-comment action to v5
• chore(deps): update peter-evans/find-comment action to v4
• chore(deps): update step-security/changed-files action to v47
• fix(deps): update dependency @actions/core to v3
• fix(deps): update module github.com/google/go-github/v72 to v84
• fix(deps): update octokit monorepo (major) (@octokit/graphql, @octokit/rest)
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update docker/login-action action to v4

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package grafana/shared-workflows).

Files affected: .github/workflows/add-to-docs-project.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module golang.org/x/net to v0.45.0 [security]
• chore(deps): update golang:alpine docker digest to d4c4845
• chore(deps): update dependency prettier to v3.8.1
• chore(deps): update actions/github-script action to v7.1.0
• chore(deps): update jdkato/vale docker tag to v3.13.1
• chore(deps): update nginx docker tag to v1.29.5
• fix(deps): update module github.com/burntsushi/toml to v1.6.0
• fix(deps): update module github.com/gohugoio/hugo to v0.157.0
• fix(deps): update module github.com/stretchr/testify to v1.11.1
• chore(deps): update actions/checkout action to v6
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

2/2 CVEs have Renovate fixes.

gomod

tools/go.mod

golang.org/x/net

• GO-2026-4441 (fixed in >= 0.45.0)
• GO-2026-4440 (fixed in >= 0.45.0)

Detected Dependencies

dockerfile (2)

deploy-preview/Dockerfile (1)

• nginx 1.21.6-alpine@sha256:a74534e76ee1121d418fa7394ca930eb67440deda413848bc67c68138535b989 → [Updates: 1.29.5-alpine]

vale/Dockerfile (2)

• golang alpine@sha256:98e6cffc31ccc44c7c15d83df1d69891efee8115a5bb7ede2bf30a38af3e3c92 → [Updates: alpine]
• jdkato/vale v3.8.0@sha256:a744bc4f8164bceab6bda0fad6253dcd9cdab2365b437aa5e08fe4f07d6e3357 → [Updates: v3.13.1]

github-actions (18)

.github/workflows/add-to-docs-project.yml (7)

• grafana/shared-workflows get-vault-secrets-v1.0.1@97c6f45f01d4bca8a3b1acfe397113ce88858a81 → [Updates: get-vault-secrets/v1.3.1]
• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v6.2.0]
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea → [Updates: v7.1.0, v8.0.0]
• grafana/shared-workflows v1.0.0@7b628e7352c2dea057c565cc4fcd5564d5f396c0
• grafana/shared-workflows v1.0.0@7b628e7352c2dea057c565cc4fcd5564d5f396c0

.github/workflows/deploy-pr-preview.yml (1)

• grafana/writers-toolkit main

.github/workflows/deploy-preview.yml (19)

• peter-evans/find-comment v3.1.0@3eae4d37986fb5a8592848f6a574fdf654e61f9e → [Updates: v4.0.0]
• peter-evans/create-or-update-comment v4.0.0@71345be0265236311c031f5c7866368bd1eff043 → [Updates: v5.0.0]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• google-github-actions/auth v2.1.13@c200f3691d83b41bf9bbd8638997a462592937ed → [Updates: v3.0.0]
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.0.0]
• docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v6.19.2]
• google-github-actions/auth v2.1.13@c200f3691d83b41bf9bbd8638997a462592937ed → [Updates: v3.0.0]
• google-github-actions/deploy-cloudrun v2.7.6@251330ba9a8a34bfbc1622895f42e1d53fd14522 → [Updates: v3.0.1]
• google-github-actions/setup-gcloud v2.2.1@e427ad8a34f8676edf47cf7d7925499adf3eb74f → [Updates: v3.0.1]
• ouzi-dev/commit-status-updater v2.0.2@26588d166ff273fc4c0664517359948f7cdc9bf1
• ouzi-dev/commit-status-updater v2.0.2@26588d166ff273fc4c0664517359948f7cdc9bf1
• peter-evans/create-or-update-comment v4.0.0@71345be0265236311c031f5c7866368bd1eff043 → [Updates: v5.0.0]
• peter-evans/create-or-update-comment v4.0.0@71345be0265236311c031f5c7866368bd1eff043 → [Updates: v5.0.0]
• peter-evans/create-or-update-comment v4.0.0@71345be0265236311c031f5c7866368bd1eff043 → [Updates: v5.0.0]
• peter-evans/create-or-update-comment v4.0.0@71345be0265236311c031f5c7866368bd1eff043 → [Updates: v5.0.0]
• peter-evans/create-or-update-comment v4.0.0@71345be0265236311c031f5c7866368bd1eff043 → [Updates: v5.0.0]

.github/workflows/dictionaries.yml (6)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• grafana/shared-workflows get-vault-secrets-v1.0.1@97c6f45f01d4bca8a3b1acfe397113ce88858a81 → [Updates: get-vault-secrets/v1.3.1]
• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v6.2.0]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.3.0]

.github/workflows/docs-ci.yml (10)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v6.2.0]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• grafana/writers-toolkit build-website/v1@7e0981fdbf5a4446e309ecb655596a71113d60ae
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• grafana/writers-toolkit vale-action/v1.4.5@f49dd90f007967990095ac2d18c5bdf37b412a5f
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• grafana/writers-toolkit readability/v1@db70a56778bfaa00bbf2a6c37bbab2b79fb5c598
• node 20

.github/workflows/image.yml (2)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• grafana/shared-workflows build-push-to-dockerhub/v0.4.1@f02d5da7ddff4ea32bbe5034c7c70e90d2b9622c → [Updates: build-push-to-dockerhub/v0.4.2]

.github/workflows/prettier.yml (1)

• grafana/writers-toolkit main

.github/workflows/publish-technical-documentation.yml (1)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]

.github/workflows/review.yml (4)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.3.0]
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea → [Updates: v7.1.0, v8.0.0]
• go 1.21

.github/workflows/test-publish-technical-documentation-release.yml (1)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]

.github/workflows/validate-documentation.yml (2)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• step-security/changed-files v46.0.5@95b56dadb92a30ca9036f16423fd3c088a71ee94 → [Updates: v47.0.1]

.github/workflows/validate-policy-bot-config.yml (1)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]

build-website/action.yml (2)

• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea → [Updates: v7.1.0, v8.0.0]
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea → [Updates: v7.1.0, v8.0.0]

prettier/action.yml (3)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• grafana/shared-workflows get-vault-secrets-v1.0.1@97c6f45f01d4bca8a3b1acfe397113ce88858a81 → [Updates: get-vault-secrets/v1.3.1]
• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf

publish-technical-documentation-release/action.yaml (5)

• grafana/writers-toolkit build-website/v1@7e0981fdbf5a4446e309ecb655596a71113d60ae
• grafana/shared-workflows get-vault-secrets-v1.0.1@97c6f45f01d4bca8a3b1acfe397113ce88858a81 → [Updates: get-vault-secrets/v1.3.1]
• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]

publish-technical-documentation/action.yml (4)

• grafana/writers-toolkit build-website/v1@7e0981fdbf5a4446e309ecb655596a71113d60ae
• grafana/shared-workflows get-vault-secrets-v1.0.1@97c6f45f01d4bca8a3b1acfe397113ce88858a81 → [Updates: get-vault-secrets/v1.3.1]
• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]

readability/action.yml (1)

• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea → [Updates: v7.1.0, v8.0.0]

vale-action/action.yml (3)

• step-security/changed-files v46.0.5@95b56dadb92a30ca9036f16423fd3c088a71ee94 → [Updates: v47.0.1]
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea → [Updates: v7.1.0, v8.0.0]
• github/codeql-action v3.32.0@439137e1b50c27ba9e2f9befc93e43091b449c34 → [Updates: v3.32.4, v4.32.4]

gomod (3)

tools/go.mod (6)

• go 1.23.0
• go 1.25.6 → [Updates: 1.26.0]
• github.com/BurntSushi/toml v1.5.0 → [Updates: v1.6.0]
• github.com/gohugoio/hugo v0.147.3 → [Updates: v0.157.0]
• gopkg.in/yaml.v3 v3.0.1
• golang.org/x/net v0.39.0 → [Updates: v0.45.0]

vale/Grafana/styles/config/scripts/go.mod (1)

• go 1.22.0

vale/tools/go.mod (4)

• go 1.23.3
• github.com/google/go-github/v72 v72.0.0 → [Updates: v84.0.0]
• github.com/sourcegraph/go-diff v0.7.0
• github.com/stretchr/testify v1.10.0 → [Updates: v1.11.1]

npm (2)

add-to-docs-project/package.json (8)

• @actions/core 1.11.1 → [Updates: 3.0.0]
• @octokit/graphql 8.2.2 → [Updates: 9.0.3]
• @octokit/rest 21.1.1 → [Updates: 22.0.1]
• @types/node 22.19.7 → [Updates: 22.19.13, 24.11.0]
• ts-node 10.9.2
• typescript 5.9.3
• node >=22
• npm >=10

package.json (1)

• prettier 3.8.0 → [Updates: 3.8.1]

renovate-config-presets (1)

.github/renovate.json5

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.