Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update rust crate worker to v0.7.5
• chore(deps): update dependency rules_go to v0.60.0
• chore(deps): update dependency rules_rust to v0.69.0
• chore(deps): update dependency rules_rust_wasm_bindgen to v0.69.0
• chore(deps): update actions/attest-build-provenance action to v4
• chore(deps): update dependency bazel to v9
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• fix(deps): update module github.com/google/go-github/v66 to v84
• fix(deps): update module github.com/google/go-github/v80 to v84
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency buildifier_prebuilt to v8.2.1.2
• chore(deps): update dependency rules_rs to v0.0.41
• chore(deps): update rust crate prost to v0.14.3
• chore(deps): update rust crate serde_json to v1.0.149
• fix(deps): update rust crate wasm-bindgen-cli to v0.2.114
• chore(deps): update bazel-contrib/setup-bazel action to v0.18.0
• chore(deps): update dependency bazel to v8.6.0
• chore(deps): update dependency go to v1.26.1
• fix(deps): update module google.golang.org/grpc to v1.79.2
• chore(deps): update dependency rules_java to v9
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

bazel-module (1)

bazel_tools/deps/bcr.MODULE.bazel (11)

• bazel_skylib 1.9.0
• buildifier_prebuilt 8.2.1.1 → [Updates: 8.2.1.2]
• gazelle 0.47.0
• rules_go 0.59.0 → [Updates: 0.60.0]
• rules_java 8.16.1 → [Updates: 9.6.1]
• rules_multitool 1.11.1
• rules_proto 7.1.0
• rules_rs 0.0.20 → [Updates: 0.0.41]
• rules_rust_wasm_bindgen 0.68.1 → [Updates: 0.69.0]
• rules_rust 0.68.1 → [Updates: 0.69.0]
• rules_tsickle 1.1.0

bazelisk (1)

.bazelversion (1)

• bazel 8.5.0 → [Updates: 8.6.0, 9.0.0]

cargo (2)

app/api/Cargo.toml (5)

• worker 0.7.1 → [Updates: 0.7.1]
• serde 1.0
• serde_json 1.0 → [Updates: 1.0]
• prost 0.14.1 → [Updates: 0.14.1]
• pbjson 0.9.0

tools/rust/Cargo.toml (4)

• protoc-gen-tonic 0.5.0
• protoc-gen-prost 0.5.0
• protoc-gen-prost-serde 0.4.0
• wasm-bindgen-cli =0.2.106 → [Updates: =0.2.114]

github-actions (5)

.github/workflows/ci.yaml (2)

• actions/checkout v6
• bazel-contrib/setup-bazel 0.16.0 → [Updates: 0.18.0]

.github/workflows/periodic-submodule-sync.yaml (1)

• actions/checkout v6

.github/workflows/publish.yaml (1)

• bazel-contrib/publish-to-bcr v1.1.0

.github/workflows/release_ruleset.yaml (10)

• actions/checkout v6
• bazel-contrib/setup-bazel 0.16.0 → [Updates: 0.18.0]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.0]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd
• actions/attest-build-provenance v3 → [Updates: v4]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd
• softprops/action-gh-release v2

.github/workflows/trigger-via-bcr.yml (2)

• actions/checkout v6
• bazel-contrib/setup-bazel 0.16.0 → [Updates: 0.18.0]

gomod (1)

go.mod (23)

• go 1.24.0
• go 1.24.10 → [Updates: 1.26.1]
• github.com/amenzhinsky/go-memexec v0.7.1
• github.com/bazelbuild/bazel-gazelle v0.47.0
• github.com/bazelbuild/buildtools v0.0.0-20260211083412-859bfffeef82@859bfffeef82
• github.com/chromedp/chromedp v0.14.2
• github.com/dominikbraun/graph v0.23.0
• github.com/google/go-github/v66 v66.0.0 → [Updates: v84.0.0]
• github.com/google/go-github/v80 v80.0.0 → [Updates: v84.0.0]
• github.com/junkblocker/codesearch v1.4.0
• github.com/rs/zerolog v1.34.0
• github.com/samthor/sre2 v0.0.0-20150929104051-385a11de6465@385a11de6465
• github.com/schollz/progressbar/v3 v3.19.0
• github.com/shurcooL/githubv4 v0.0.0-20260209031235-2402fdf4a9ed@2402fdf4a9ed
• github.com/teacat/noire v1.1.0
• github.com/zeebo/blake3 v0.2.4
• go.starlark.net v0.0.0-20260210143700-b62fd896b91b@b62fd896b91b
• golang.org/x/oauth2 v0.35.0
• golang.org/x/sync v0.19.0
• golang.org/x/time v0.14.0
• google.golang.org/grpc v1.75.1 → [Updates: v1.79.2]
• google.golang.org/protobuf v1.36.11
• gopkg.in/yaml.v3 v3.0.1

html (1)

app/bcr/index.html (1)

• Primer 21.1.1@sha512-DQRZcDaNuIkb4JiH6PHalnncWllAK5txkJVocLdyfglJSavW/HxQaJRJeRw5eEPnp+kD1QImSxCwUiOsRrCMEw==

---

• Check this box to trigger a request for Renovate to run again on this repository