Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (1)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
bun	@octokit/webhooks-methods	2025-05-20

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency wrangler to v4.129.1
• chore(deps): update dependency @descope/react-sdk to v3.3.1
• chore(deps): update dependency @types/node to v26.5.0
• fix(deps): update dependency @descope/node-sdk to v2.17.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency @cloudflare/vitest-pool-workers to v0.22.0
• chore(deps): update dependency go to v1.27.0
• chore(deps): update terraform cloudflare to v5.24.0
• chore(deps): update dependency vitest to v5
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

bun (1)

package.json (18)

• @descope/node-sdk 2.16.0 → [Updates: 2.17.0]
• hono 4.13.7
• jose 6.2.12
• zod 4.5.4
• @biomejs/biome 2.5.12
• @cloudflare/vitest-pool-workers 0.21.3 → [Updates: 0.22.0]
• @descope/react-sdk 3.2.1 → [Updates: 3.3.1]
• @octokit/webhooks-methods 6.0.0
• @types/node 26.4.1 → [Updates: 26.5.0]
• @types/react 19.2.18
• @types/react-dom 19.2.7
• bun-types 1.4.2
• msw 2.15.0
• react 19.2.8
• react-dom 19.2.8
• typescript 7.0.2
• vitest 4.1.11 → [Updates: 5.0.0]
• wrangler 4.129.0 → [Updates: 4.129.1]

devbox (1)

devbox.json (15)

• actionlint 1.7.12
• bun 1.3.13
• cosign 3.1.3
• gh 2.98.0
• git 2.55.0
• go 1.26.5 → [Updates: 1.27.0]
• jq 1.8.2
• opentofu 1.12.5
• shellcheck 0.11.0
• gofumpt 0.11.0
• golangci-lint 2.13.1
• govulncheck 1.7.0
• trivy 0.74.0
• terraform-docs 0.24.0
• tflint 0.64.0

github-actions (2)

.github/workflows/ci.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jetify-com/devbox-install-action v0.15.0@8c6a66ed6273138b1915457069de78cb52fe3bd7

.github/workflows/deploy.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• jetify-com/devbox-install-action v0.15.0@8c6a66ed6273138b1915457069de78cb52fe3bd7

gomod (1)

matcher/go.mod (2)

• go 1.26.3
• github.com/google/osv-scalibr v0.5.2

terraform (1)

infra/main.tf (2)

• cloudflare ~> 5.0 → [Updates: ~> 5.0]
• hashicorp/terraform >= 1.8.0

tflint-plugin (1)

infra/.tflint.hcl

---

• Check this box to trigger a request for Renovate to run again on this repository

[coderabbitai]

🔗 Related PRs

#1 - feat: add GitHub-attested SBOM monitoring [merged]
#23 - Update renovate.json [merged]
#37 - fix(osv): restore image backfills [merged]
#49 - fix(auth): validate sessions with Descope SDK [merged]

---

📝 Issue Planner

_{Check the box below or use the @coderabbitai plan command to generate an implementation plan and prompts that you can use with your favorite coding assistant.}

• Create Plan

---

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord!