Renovate Dependency Dashboard

[bug-ops]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (19)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
cargo	async-stream	2024-10-01
cargo	cpu-time	2019-10-27
cargo	crossterm	2025-04-05
cargo	dirs	2025-01-12
cargo	eventsource-stream	2022-02-17
cargo	hex	2021-03-03
cargo	include_dir	2024-06-17
cargo	nucleo-matcher	2024-02-20
cargo	seccompiler	2025-03-07
cargo	serde_norway	2024-12-21
cargo	subtle	2024-06-24
cargo	teloxide	2025-07-11
cargo	tracing-chrome	2024-03-15
cargo	tree-sitter-json	2024-11-11
cargo	tree-sitter-toml-ng	2024-12-03
cargo	tree-sitter-typescript	2024-11-11
cargo	walkdir	2024-03-01
github-actions	contributor-assistant/github-action	2024-09-26
github-actions	ludeeus/action-shellcheck	2023-01-29

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update busybox:1.38-musl docker digest to 32b5cda
• chore(deps): update gcr.io/distroless/static-debian12:nonroot docker digest to f5b485e
• chore(deps): update ghcr.io/bug-ops/zeph:latest docker digest to abef448
• chore(deps): update github-actions (docker/login-action, github/codeql-action, mozilla-actions/sccache-action, node, renovatebot/github-action, taiki-e/install-action)
• chore(deps): update ollama/ollama:latest docker digest to 4dea9fb
• chore(deps): update rust:1.97.1-slim docker digest to 5c6f46a
• chore(deps): update grafana/grafana docker tag to v13.1.1
• chore(deps): update qdrant/qdrant docker tag to v1.18.3
• chore(deps): update serde (serde, serde_json)
• chore(deps): update tokio (tokio, tokio-stream, tokio-util)
• chore(deps): update rust-minor-patch (agent-client-protocol-schema, anyhow, async-trait, base64, bytemuck, clap, glob, http, ignore, landlock, ollama-rs, reqwest012, schemars, scrape-core, thiserror, toml)
• chore(deps): update github-actions to v7 (actions/labeler, actions/setup-python)
• chore(deps): update rust crate serial_test to v4
• chore(deps): refresh cargo lock file
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update prom/prometheus docker tag to v3.13.2
• chore(deps): update rust crate audioadapter-buffers to v5
• chore(deps): update rust crate rmcp to v3

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package rust-lang/crates-io-auth-action).

Files affected: .github/workflows/release.yml

---

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

cargo (33)

Cargo.toml (140)

• age 0.12.1
• agent-client-protocol 2.0.0
• agent-client-protocol-schema =1.5.0 → [Updates: =1.6.0]
• anyhow 1.0.103 → [Updates: 1.0.104]
• arboard 3.6.1
• arc-swap 1.9.2
• async-stream 0.3.6
• async-trait 0.1.89 → [Updates: 0.1.91]
• audioadapter-buffers 4.0 → [Updates: 5.0.0]
• axum 0.8.9
• base64 0.22.1 → [Updates: 0.23.0]
• bech32 0.12.0
• blake3 1.8.5
• bytemuck 1.25.1 → [Updates: 1.25.2]
• bytes 1.12.1
• candle-core 0.11.0
• candle-nn 0.11.0
• candle-transformers 0.11.0
• chacha20poly1305 0.11.0
• chrono 0.4.45
• clap 4.6.2 → [Updates: 4.6.4]
• cpu-time 1.0
• criterion 0.8.2
• cron 0.17.0
• crossterm 0.29
• dashmap 6.2.1
• dialoguer 0.12
• dirs 6.0
• eventsource-stream 0.2.3
• expectrl 0.9.0
• flate2 1.1.9
• futures 0.3.33
• futures-core 0.3.33
• glob 0.3.3 → [Updates: 0.3.4]
• globset 0.4.19
• hex 0.4.3
• hf-hub 1.0.0
• hmac 0.13
• http 1.4.2 → [Updates: 1.5.0]
• http-body-util 0.1.4
• ignore 0.4.30 → [Updates: 0.4.31]
• image 0.25.10
• include_dir 0.7.4
• indexmap 2.14.0
• indoc 2.0.7
• insta 1.48.0
• k256 0.14.0
• landlock 0.4.5 → [Updates: 0.4.7]
• libsqlite3-sys 0.38.1
• lru 0.18.1
• metrics 0.24.6
• metrics-util 0.20.4
• nix 0.31.3
• notify 8.2.0
• notify-debouncer-mini 0.7
• nucleo-matcher 0.3.1
• ollama-rs 0.3.5 → [Updates: 0.3.6]
• open 5.4.0
• opentelemetry 0.32.0
• opentelemetry-otlp 0.32.0
• opentelemetry_sdk 0.32.1
• ordered-float 5.3
• p256 0.14.0
• parking_lot 0.12.5
• pdf-extract 0.12.0
• petgraph 0.8.3
• pprof 0.15.0
• prometheus-client 0.25.0
• proptest 1.11
• pulldown-cmark 0.13.4
• qdrant-client 1.18
• rand 0.10.2
• rand_distr 0.6
• ratatui 0.30.2
• regex 1.13.1
• reqwest 0.13.4
• ripemd 0.2
• rmcp 2.2.0 → [Updates: 3.1.0]
• rubato 4.0.0
• rustix 1.1.4
• schemars 1.2.1 → [Updates: 1.2.2]
• scrape-core 0.2.9 → [Updates: 0.2.10]
• seccompiler 0.5.0
• semver 1.0.28
• serde 1.0.228 → [Updates: 1.0.229]
• serde_json 1.0.150 → [Updates: 1.0.151]
• serde_json_canonicalizer 0.3.2
• serde_norway 0.9.42
• serial_test 3.5.0 → [Updates: 4.0.1]
• sha2 0.11
• shell-words 1.1.1
• signal-hook 0.4.4
• similar 3.1.1
• sqlx 0.9.0
• subtle 2.6
• symphonia 0.6.0
• sysinfo 0.39.6
• teloxide 0.17
• tempfile 3.27
• testcontainers 0.27.3
• tar 0.4.46
• testcontainers-modules 0.15
• thiserror 2.0.18 → [Updates: 2.0.19]
• throbber-widgets-tui 0.11.1
• tiktoken-rs 0.12.0
• tokenizers 0.23.1
• tokio 1.53.0 → [Updates: 1.53.1]
• tokio-stream 0.1.18 → [Updates: 0.1.19]
• tokio-tungstenite 0.30.0
• tokio-util 0.7.18 → [Updates: 0.7.19]
• toml 1.1.3 → [Updates: 1.1.4]
• toml_edit 0.25.13
• tower 0.5.3
• tower-http 0.7.0
• tracing 0.1.44
• tracing-appender 0.2.5
• tracing-chrome 0.7.2
• tracing-opentelemetry 0.33.0
• tracing-subscriber 0.3.23
• tracing-test 0.2.6
• tree-sitter 0.26.11
• tree-sitter-bash 0.25.1
• tree-sitter-go 0.25
• tree-sitter-highlight 0.26.11
• tree-sitter-javascript 0.25
• tree-sitter-json 0.24.8
• tree-sitter-md 0.5.3
• tree-sitter-python 0.25
• tree-sitter-rust 0.24.2
• tree-sitter-toml-ng 0.7
• tree-sitter-typescript 0.23.2
• tree-sitter-yaml 0.7.2
• tree-sitter-sequel 0.3.11
• unicode-normalization 0.1.25
• unicode-width 0.2.2
• url 2.5.8
• uuid 1.24.0
• walkdir 2.5
• wiremock 0.6.5
• zeroize 1.9.0

crates/zeph-a2a/Cargo.toml

crates/zeph-acp/Cargo.toml

crates/zeph-agent-context/Cargo.toml

crates/zeph-agent-feedback/Cargo.toml

crates/zeph-agent-persistence/Cargo.toml

crates/zeph-bench/Cargo.toml

crates/zeph-channels/Cargo.toml

crates/zeph-commands/Cargo.toml

crates/zeph-common/Cargo.toml

crates/zeph-config/Cargo.toml

crates/zeph-context/Cargo.toml

crates/zeph-core/Cargo.toml

crates/zeph-db/Cargo.toml

crates/zeph-durable/Cargo.toml

crates/zeph-experiments/Cargo.toml

crates/zeph-gateway/Cargo.toml

crates/zeph-index/Cargo.toml

crates/zeph-llm/Cargo.toml (1)

• reqwest012 0.12 → [Updates: 0.13.4]

crates/zeph-mcp/Cargo.toml

crates/zeph-memory/Cargo.toml

crates/zeph-orchestration/Cargo.toml

crates/zeph-plugins/Cargo.toml

crates/zeph-sanitizer/Cargo.toml

crates/zeph-scheduler/Cargo.toml

crates/zeph-session/Cargo.toml

crates/zeph-skills/Cargo.toml

crates/zeph-subagent/Cargo.toml

crates/zeph-tools/Cargo.toml

crates/zeph-tui/Cargo.toml

crates/zeph-vault/Cargo.toml

crates/zeph-worktree/Cargo.toml

fuzz/Cargo.toml (3)

• arbitrary 1.4.2
• libfuzzer-sys 0.4.13
• toml 1.1.3 → [Updates: 1.1.4]

docker-compose (8)

docker/docker-compose.deps.yml (1)

• qdrant/qdrant v1.18.2@sha256:75eab8c4ba42096724fdcfde8b4de0b5713d529dde32f285a1f86fdcb2c9e50c → [Updates: v1.18.3]

docker/docker-compose.dev.yml (1)

• qdrant/qdrant v1.18.2@sha256:75eab8c4ba42096724fdcfde8b4de0b5713d529dde32f285a1f86fdcb2c9e50c → [Updates: v1.18.3]

docker/docker-compose.gpu.yml

docker/docker-compose.metrics.yml (2)

• prom/prometheus v3.13.1@sha256:3c42b892cf723fa54d2f262c37a0e1f80aa8c8ddb1da7b9b0df9455a35a7f893 → [Updates: v3.13.2]
• grafana/grafana 13.1.0@sha256:121a7a9ece6dc10b969f1f96eed64b4f07dfac0d0b8abc070f7cb83bbde86f63 → [Updates: 13.1.1]

docker/docker-compose.profiling.yml (1)

• grafana/grafana 13.1.0@sha256:121a7a9ece6dc10b969f1f96eed64b4f07dfac0d0b8abc070f7cb83bbde86f63 → [Updates: 13.1.1]

docker/docker-compose.tracing.yml (1)

• jaegertracing/all-in-one latest@sha256:ab6f1a1f0fb49ea08bcd19f6b84f6081d0d44b364b6de148e1798eb5816bacac

docker/docker-compose.vault.yml

docker/docker-compose.yml (3)

• ollama/ollama latest@sha256:6345fbc18bd73a1e16404be681dbc6fd291a027cab43ed541abe78c4c81051b0 → [Updates: latest]
• qdrant/qdrant v1.18.2@sha256:75eab8c4ba42096724fdcfde8b4de0b5713d529dde32f285a1f86fdcb2c9e50c → [Updates: v1.18.3]
• ghcr.io/bug-ops/zeph latest@sha256:ad524238432d778a41fe9b49ee4f5b15440ef5f3226371d734e0df142a2e2a2e → [Updates: latest]

dockerfile (2)

docker/Dockerfile (2)

• busybox 1.38-musl@sha256:8635836765b0c4c43970660219739baa58b0883c2e429e4b8918f7dd1519455c → [Updates: 1.38-musl]
• gcr.io/distroless/static-debian12 nonroot@sha256:aef9602f8710ec12bde19d593fed1f76c708531bb7aba205110f1029786ead7b → [Updates: nonroot]

docker/Dockerfile.dev (2)

• rust 1.97.1-slim@sha256:754a8924e308fb20a327febeda1a07053a2b0fd7474b5ac1cc460a6d33ab18f3 → [Updates: 1.97.1-slim]
• debian bookworm-slim@sha256:7b140f374b289a7c2befc338f42ebe6441b7ea838a042bbd5acbfca6ec875818

github-actions (11)

.github/workflows/ci-non-linux.yml (10)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain stable@4cda84d5c5c54efe2404f9d843567869ab1699d4
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• mozilla-actions/sccache-action v0.0.10@9e7fa8a12102821edf02ca5dbea1acd0f89a2696 → [Updates: v0.0.11]
• taiki-e/install-action nextest@37ba67210166984a515120020147f0b4ae3b8667 → [Updates: nextest]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• taiki-e/install-action nextest@37ba67210166984a515120020147f0b4ae3b8667 → [Updates: nextest]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• rust stable

.github/workflows/ci.yml (79)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dorny/paths-filter v4.0.2@7b450fff21473bca461d4b92ce414b9d0420d706
• contributor-assistant/github-action v2.6.1@ca4a40a7d1004f18d9960b404b97e5f30a505a08
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• ludeeus/action-shellcheck 2.0.0@00cae500b08a931fb5698e11e79bfbd38e612a38
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain nightly@4fd1da8b0805d2d2e936788875a7d65dbd677dc2
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain stable@4cda84d5c5c54efe2404f9d843567869ab1699d4
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain stable@4cda84d5c5c54efe2404f9d843567869ab1699d4
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain stable@4cda84d5c5c54efe2404f9d843567869ab1699d4
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• mozilla-actions/sccache-action v0.0.10@9e7fa8a12102821edf02ca5dbea1acd0f89a2696 → [Updates: v0.0.11]
• taiki-e/install-action nextest@37ba67210166984a515120020147f0b4ae3b8667 → [Updates: nextest]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain stable@4cda84d5c5c54efe2404f9d843567869ab1699d4
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• mozilla-actions/sccache-action v0.0.10@9e7fa8a12102821edf02ca5dbea1acd0f89a2696 → [Updates: v0.0.11]
• taiki-e/install-action nextest@37ba67210166984a515120020147f0b4ae3b8667 → [Updates: nextest]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• taiki-e/install-action nextest@37ba67210166984a515120020147f0b4ae3b8667 → [Updates: nextest]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• taiki-e/install-action nextest@37ba67210166984a515120020147f0b4ae3b8667 → [Updates: nextest]
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0 → [Updates: v4]
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain stable@4cda84d5c5c54efe2404f9d843567869ab1699d4
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• mozilla-actions/sccache-action v0.0.10@9e7fa8a12102821edf02ca5dbea1acd0f89a2696 → [Updates: v0.0.11]
• taiki-e/install-action cargo-llvm-cov@ea361d59ff285fa3ab7cc40dcba421e91017d586 → [Updates: cargo-llvm-cov]
• taiki-e/install-action nextest@37ba67210166984a515120020147f0b4ae3b8667 → [Updates: nextest]
• codecov/codecov-action v7@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4@e0647621c2984b5ed2f768cb892365bf2a616ad1 → [Updates: v4]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain stable@4cda84d5c5c54efe2404f9d843567869ab1699d4
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain stable@4cda84d5c5c54efe2404f9d843567869ab1699d4
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• mozilla-actions/sccache-action v0.0.10@9e7fa8a12102821edf02ca5dbea1acd0f89a2696 → [Updates: v0.0.11]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain stable@4cda84d5c5c54efe2404f9d843567869ab1699d4
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• mozilla-actions/sccache-action v0.0.10@9e7fa8a12102821edf02ca5dbea1acd0f89a2696 → [Updates: v0.0.11]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain stable@4cda84d5c5c54efe2404f9d843567869ab1699d4
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain stable@4cda84d5c5c54efe2404f9d843567869ab1699d4
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• rust nightly
• rust stable
• rust 1.97
• rust stable
• rust stable
• rust stable
• rust stable
• rust stable
• rust stable
• rust stable
• rust stable

.github/workflows/codeql.yml (5)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• github/codeql-action v4@e0647621c2984b5ed2f768cb892365bf2a616ad1 → [Updates: v4]
• dtolnay/rust-toolchain stable@4cda84d5c5c54efe2404f9d843567869ab1699d4
• github/codeql-action v4@e0647621c2984b5ed2f768cb892365bf2a616ad1 → [Updates: v4]
• rust stable

.github/workflows/docs.yml (8)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/configure-pages v6@45bfe0192ca1faeb007ade9deae92b16b8254a0d
• actions/upload-pages-artifact v5@fc324d3547104276b827a68afc52ff2a11cc49c9
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• lycheeverse/lychee-action v2@e7477775783ea5526144ba13e8db5eec57747ce8
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• lycheeverse/lychee-action v2@e7477775783ea5526144ba13e8db5eec57747ce8
• actions/deploy-pages v5@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128

.github/workflows/fuzz.yml (10)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain nightly@4fd1da8b0805d2d2e936788875a7d65dbd677dc2
• taiki-e/install-action cargo-fuzz@82fc405565b9cf90abfe700ba43b4751ce2fe422
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain nightly@4fd1da8b0805d2d2e936788875a7d65dbd677dc2
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/labeler.yml (5)

• actions/labeler v6@b8dd2d9be0f68b860e7dae5dae7d772984eacd6d → [Updates: v7]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3

.github/workflows/openai-integration.yml (5)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain stable@4cda84d5c5c54efe2404f9d843567869ab1699d4
• taiki-e/install-action nextest@37ba67210166984a515120020147f0b4ae3b8667 → [Updates: nextest]
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• mozilla-actions/sccache-action v0.0.10@9e7fa8a12102821edf02ca5dbea1acd0f89a2696 → [Updates: v0.0.11]

.github/workflows/release.yml (21)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain stable@4cda84d5c5c54efe2404f9d843567869ab1699d4
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• mozilla-actions/sccache-action v0.0.10@9e7fa8a12102821edf02ca5dbea1acd0f89a2696 → [Updates: v0.0.11]
• taiki-e/install-action cross@3ec0c1fda8222edd5d4b0561887df0dfc7c53bd8 → [Updates: cross]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain stable@4cda84d5c5c54efe2404f9d843567869ab1699d4
• rust-lang/crates-io-auth-action v1@b7e9a28eded4986ec6b1fa40eeee8f8f165559ec
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• softprops/action-gh-release v3@3d0d9888cb7fd7b750713d6e236d1fcb99157228
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0 → [Updates: v4]
• docker/metadata-action v6@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• rust stable
• rust stable

.github/workflows/renovate.yml (5)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• renovatebot/github-action v46.1.19@22e0a16091fc706b04affe6ae53d5e3358ac4023 → [Updates: v46.2.0]
• node 24.18.0 → [Updates: 24.18.1]

.github/workflows/security.yml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• taiki-e/install-action cargo-deny@af8167eefce493c60337887d7b96ffbc22df840c → [Updates: cargo-deny]

.github/workflows/telegram-e2e.yml (7)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dtolnay/rust-toolchain stable@4cda84d5c5c54efe2404f9d843567869ab1699d4
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• mozilla-actions/sccache-action v0.0.10@9e7fa8a12102821edf02ca5dbea1acd0f89a2696 → [Updates: v0.0.11]
• actions/setup-python v6@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• python 3.14.6

pip_requirements (1)

scripts/telegram-e2e/requirements.txt (1)

• telethon >=1.44.0

[bug-ops]

Research/monitoring sweep verification (CI-1371).

This issue is a Renovate-bot-maintained Dependency Dashboard — its content is continuously rewritten in the issue body (last updated 2026-07-06) rather than through comments, so it will always show comments.length == 0 regardless of freshness. It is a poor fit for the zero-comment staleness heuristic used by the research sweep and should be excluded from future comments.length == 0 frontier queries (methodology note, not a code fix).

Current content reviewed: only routine GitHub Actions/dependency version-bump entries (actions/checkout, taiki-e/install-action, docker/*-action, renovatebot/github-action, node) and an "Abandoned Dependencies" detected-list — no security-relevant or blocking items pending action right now.

No action required; leaving open as the bot's persistent dashboard.