Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Post-upgrade task did not match any on allowedCommands list

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Lock file maintenance npm dependencies

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update GitHub actions to v7

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• Update dependency vite to v7.3.5 [SECURITY]
• Update dependency undici to v6.27.0 [SECURITY]

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency vitest to v3.2.6 [SECURITY]
• Pin dependencies (SonarSource/gh-action_cache, SonarSource/vault-action-wrapper, actions/checkout, jdx/mise-action)
• Update dependency mise to 2026.6.10
• Update npm dependencies (@aws-sdk/client-cognito-identity, @types/node, @vercel/ncc, fast-xml-parser, rollup)
• Update npm dependencies (major) (@actions/core, typescript)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (12)

.github/workflows/check-cache-migration.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• SonarSource/gh-action_cache v1 → [Updates: v1.7.0]

.github/workflows/cleanup-cache.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]

.github/workflows/pre-commit.yml (1)

• SonarSource/gh-action_pre-commit 1.2.0@2ddc0c7fdabce0adfaaa4075a17690972ed9961a

.github/workflows/PullRequestClosed.yml (2)

• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• sonarsource/gh-action-lt-backlog v2

.github/workflows/PullRequestCreated.yml (2)

• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• sonarsource/gh-action-lt-backlog v2

.github/workflows/RequestReview.yml (2)

• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• sonarsource/gh-action-lt-backlog v2

.github/workflows/SubmitReview.yml (2)

• SonarSource/vault-action-wrapper 3.6.1@881045d830534a70ec3c7c275fa3714412c8ff6e
• sonarsource/gh-action-lt-backlog v2

.github/workflows/test-action.yml (25)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.1.0]
• re-actors/alls-green v1.2.2@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe

.github/workflows/test-cache-migration-gh2s3.yml (10)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• re-actors/alls-green v1.2.2@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe

.github/workflows/test-credential-isolation.yml (2)

• SonarSource/vault-action-wrapper 3.5.0@0a3114fe1230b784c35b53b099f9ab1f1e538cc7 → [Updates: 3.6.1]
• convictional/trigger-workflow-and-wait v1.6.5@f69fa9eedd3c62a599220f4d5745230e237904be

action.yml (6)

• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• SonarSource/gh-action_cache v1 → [Updates: v1.7.0]
• runs-on/cache v5.0.7@88d90644011a3a9957fd141a106f5a94f9794203
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• SonarSource/gh-action_cache v1 → [Updates: v1.7.0]
• SonarSource/gh-action_cache symlink-keeper-1.0.0 → [Updates: symlink-keeper-1.0.0]

cleanup/action.yml (1)

• SonarSource/gh-action_cache v1 → [Updates: v1.7.0]

npm (1)

package.json (12)

• @actions/core ^1.11.1 → [Updates: ^3.0.0]
• @aws-sdk/client-cognito-identity ^3.750.0 → [Updates: ^3.750.0]
• @types/node ^25.2.3 → [Updates: ^25.2.3]
• @vercel/ncc ^0.38.3 → [Updates: ^0.44.0]
• typescript ^5.7.0 → [Updates: ^6.0.0]
• vitest ^3.0.0 → [Updates: ^3.0.0]
• fast-xml-parser ^5.7.0 → [Updates: ^5.7.0]
• undici ^6.24.0 → [Updates: ^6.24.0]
• vite ^7.3.2 → [Updates: ^7.3.2]
• rollup ^4.59.0 → [Updates: ^4.59.0]
• postcss ^8.5.10
• picomatch ^4.0.4

regex (1)

.github/workflows/test-action.yml (11)

• mise 2025.7.12 → [Updates: 2026.6.10]
• mise 2025.7.12 → [Updates: 2026.6.10]
• mise 2025.7.12 → [Updates: 2026.6.10]
• mise 2025.7.12 → [Updates: 2026.6.10]
• mise 2025.7.12 → [Updates: 2026.6.10]
• mise 2025.7.12 → [Updates: 2026.6.10]
• mise 2025.7.12 → [Updates: 2026.6.10]
• mise 2025.7.12 → [Updates: 2026.6.10]
• mise 2025.7.12 → [Updates: 2026.6.10]
• mise 2025.7.12 → [Updates: 2026.6.10]
• mise 2025.7.12 → [Updates: 2026.6.10]

---

• Check this box to trigger a request for Renovate to run again on this repository