Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	request

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update docker.io/curlimages/curl docker tag to v8.20.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency @slack/bolt to v4.7.2
• chore(deps): update docker/dockerfile docker tag to v1.24
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

devbox (1)

devbox.json (14)

• kics 2.1.19
• checkov 3.2.526
• hadolint 2.14.0
• trivy 0.69.3
• skopeo 1.22.2
• infisical 0.41.90
• dive 0.13.1
• dockle 0.4.15
• kubernetes-helm 3.20.2
• nodejs_22 22.22.2
• eslint 10.2.1
• kind 0.31.0
• kubectl 1.36.0
• grype 0.112.0

dockerfile (1)

Dockerfile (3)

• docker/dockerfile 1.7 → [Updates: 1.24]
• node 24-alpine
• node 24-alpine

github-actions (2)

.github/workflows/build.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121
• docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f

.github/workflows/chart.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• azure/setup-helm v5.0.0@dda3372f752e03dde6b3237bc9431cdc2f7a02a2
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• azure/setup-helm v5.0.0@dda3372f752e03dde6b3237bc9431cdc2f7a02a2

helm-values (1)

helm/silencer/values.yaml (1)

• docker.io/curlimages/curl 8.16.0 → [Updates: 8.20.0]

npm (2)

app/package.json (9)

• @slack/bolt ^4.0.0 → [Updates: ^4.0.0]
• express ^5.0.0
• express-prom-bundle ^8.0.0
• moment ^2.30.0
• moment-timezone ^0.6.0
• prom-client ^15.1.3
• relaxed-json ^1.0.3
• request ^2.88.2
• winston ^3.15.0

package.json

---

• Check this box to trigger a request for Renovate to run again on this repository