Dependency Dashboard

[bootc-bot]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update staged-images (quay.io/centos-bootc/centos-bootc, quay.io/fedora/fedora-bootc)
• chore(deps): update dependency opencode-ai to v1.14.25
• chore(deps): update renovatebot/github-action action to v46.1.10
• chore(deps): update docker (block/goose, docker.io/library/ubuntu, ossf/scorecard, rust-nightly)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cargo (1)

scripts/sync-common/Cargo.toml (3)

• anyhow 1.0
• xshell 0.2
• tempfile 3.0

dockerfile (4)

devenv/Containerfile.c10s

devenv/Containerfile.debian

devenv/Containerfile.ubuntu (1)

• docker.io/library/ubuntu 24.04 → [Updates: 26.04]

staged-images/Containerfile

github-actions (7)

.github/workflows/build-devcontainer.yml (14)

• actions/checkout v6
• extractions/setup-just v4
• actions/checkout v6
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/metadata-action v6
• docker/build-push-action v7
• actions/upload-artifact v7
• actions/download-artifact v8
• docker/setup-buildx-action v4
• docker/metadata-action v6
• docker/login-action v4
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/build-staged-images.yml (12)

• actions/checkout v6
• extractions/setup-just v4
• actions/checkout v6
• bootc-dev/actions main
• actions/checkout v6
• bootc-dev/actions main
• actions/upload-artifact v7
• bootc-dev/actions main
• bootc-dev/actions main
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/container-gc.yml (1)

• snok/container-retention-policy v3.0.1

.github/workflows/renovate.yml (4)

• actions/checkout v6
• actions/create-github-app-token v3
• actions/checkout v6
• renovatebot/github-action v46.1.9 → [Updates: v46.1.10]

.github/workflows/sync-common.yml (11)

• actions/checkout v6
• bootc-dev/actions main
• actions/upload-artifact v7
• actions/create-github-app-token v3
• actions/create-github-app-token v3
• bootc-dev/actions main
• actions/create-github-app-token v3
• actions/checkout v6
• actions/checkout v6
• actions/download-artifact v8
• peter-evans/create-pull-request v8

.github/workflows/sync-labels.yml (8)

• actions/checkout v6
• actions/create-github-app-token v3
• actions/create-github-app-token v3
• bootc-dev/actions main
• actions/create-github-app-token v3
• actions/github-script v9
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/test-devcontainer.yml (3)

• actions/checkout v6
• bootc-dev/actions main
• ubuntu 24.04

regex (14)

devenv/cargo-tools.txt (2)

• cargo-vendor-filterer 0.5.18
• cargo-edit 0.13.9

devenv/cargo-tools.txt (2)

• cargo-vendor-filterer 0.5.18
• cargo-edit 0.13.9

devenv/Containerfile.c10s (3)

• astral-sh/uv 0.11.7
• kani-verifier 0.67.0
• rust-nightly nightly-2026-04-19 → [Updates: nightly-2026-04-25]

devenv/Containerfile.c10s (3)

• astral-sh/uv 0.11.7
• kani-verifier 0.67.0
• rust-nightly nightly-2026-04-19 → [Updates: nightly-2026-04-25]

devenv/Containerfile.debian (3)

• astral-sh/uv 0.11.7
• kani-verifier 0.67.0
• rust-nightly nightly-2026-04-19 → [Updates: nightly-2026-04-25]

devenv/Containerfile.debian (3)

• astral-sh/uv 0.11.7
• kani-verifier 0.67.0
• rust-nightly nightly-2026-04-19 → [Updates: nightly-2026-04-25]

devenv/Containerfile.ubuntu (3)

• astral-sh/uv 0.11.7
• kani-verifier 0.67.0
• rust-nightly nightly-2026-04-19 → [Updates: nightly-2026-04-25]

devenv/Containerfile.ubuntu (3)

• astral-sh/uv 0.11.7
• kani-verifier 0.67.0
• rust-nightly nightly-2026-04-19 → [Updates: nightly-2026-04-25]

devenv/npm.txt (1)

• opencode-ai 1.14.18 → [Updates: 1.14.25]

devenv/npm.txt (1)

• opencode-ai 1.14.18 → [Updates: 1.14.25]

devenv/tool-versions.txt (6)

• bootc-dev/bcvk v0.14.0
• ossf/scorecard v5.4.0 → [Updates: v5.5.0]
• nushell/nushell 0.112.2
• jj-vcs/jj 0.40.0
• nextest-rs/nextest 0.9.133
• block/goose v1.31.0 → [Updates: v1.32.0]

devenv/tool-versions.txt (6)

• bootc-dev/bcvk v0.14.0
• ossf/scorecard v5.4.0 → [Updates: v5.5.0]
• nushell/nushell 0.112.2
• jj-vcs/jj 0.40.0
• nextest-rs/nextest 0.9.133
• block/goose v1.31.0 → [Updates: v1.32.0]

staged-images/sources.json (3)

• quay.io/fedora/fedora-bootc 45@sha256:fa8f8175b20f80df3072d86fbd8de1b9309956cba6df3b18e3c4a9e8f2df7a3b → [Updates: 45]
• quay.io/centos-bootc/centos-bootc stream9@sha256:52aa6430270ce52f4103cb3cf246a5c79ae08ae6dbf29716b4f90d450cb846d8 → [Updates: stream9]
• quay.io/centos-bootc/centos-bootc stream10@sha256:3d784d5e41e2cb3b6f0c21a065ea0cf2a413feaffab1add0eeae40df9c1aaecd

staged-images/sources.json (3)

• quay.io/fedora/fedora-bootc 45@sha256:fa8f8175b20f80df3072d86fbd8de1b9309956cba6df3b18e3c4a9e8f2df7a3b → [Updates: 45]
• quay.io/centos-bootc/centos-bootc stream9@sha256:52aa6430270ce52f4103cb3cf246a5c79ae08ae6dbf29716b4f90d450cb846d8 → [Updates: stream9]
• quay.io/centos-bootc/centos-bootc stream10@sha256:3d784d5e41e2cb3b6f0c21a065ea0cf2a413feaffab1add0eeae40df9c1aaecd

renovate-config-presets (1)

renovate.json