Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@types/eslint__js

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update step-security/harden-runner action to v2.18.0

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency mage to v1.17.2
• chore(deps): update actions/setup-node action to v6.4.0
• chore(deps): update dependency plugin-validator to v0.41.0
• chore(deps): update dependency trufflehog to v3.95.2
• chore(deps): update googleapis/release-please-action action to v5

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package grafana/shared-workflows).

Files affected: actions/plugins/frontend-e2e-against-stack/action.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/cache action to v5.0.5
• chore(deps): update frontend-e2e-against-stack dependencies (@types/bun, actions/upload-artifact, typescript-eslint)
• chore(deps): update peter-evans/create-pull-request action to v8.1.1
• chore(deps): update softprops/action-gh-release action to v2.6.2
• chore(deps): update actions/create-github-app-token action to v3.1.1
• chore(deps): update actions/github-script action to v9
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): update pnpm/action-setup action to v6
• chore(deps): update softprops/action-gh-release action to v3
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update grafana/plugin-ci-workflows/ action to

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

docker-compose (1)

actions/plugins/frontend-e2e-against-stack/plop-templates/docker-compose.hbs.yaml

github-actions (20)

.github/workflows/cd.yml (28)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• grafana/plugin-ci-workflows main → [Updates: main]
• actions/download-artifact v6.0.0@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 → [Updates: v8.0.1]
• actions/attest-build-provenance v4.1.0@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• grafana/shared-workflows get-vault-secrets/v1.3.1@f1614b210386ac420af6807a997ac7f6d96e477a
• grafana/plugin-ci-workflows main → [Updates: main]
• grafana/plugin-ci-workflows main → [Updates: main]
• grafana/plugin-ci-workflows main → [Updates: main]
• grafana/shared-workflows trigger-argo-workflow/v1.2.2@b513eb1dfd9becfa671a41e55063cdd5c0a08031
• actions/download-artifact v6.0.0@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 → [Updates: v8.0.1]
• google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• google-github-actions/setup-gcloud v3.0.1@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db
• google-github-actions/upload-cloud-storage v3.0.0@6397bd7208e18d13ba2619ee21b9873edc94427a
• google-github-actions/upload-cloud-storage v3.0.0@6397bd7208e18d13ba2619ee21b9873edc94427a
• google-github-actions/upload-cloud-storage v3.0.0@6397bd7208e18d13ba2619ee21b9873edc94427a
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• grafana/shared-workflows get-vault-secrets/v1.3.1@f1614b210386ac420af6807a997ac7f6d96e477a
• actions/create-github-app-token v3.0.0@f8d387b68d61c58ab83c6c016672934102569859 → [Updates: v3.1.1]
• grafana/plugin-ci-workflows main → [Updates: main]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v6.0.0@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 → [Updates: v8.0.1]
• grafana/plugin-ci-workflows main → [Updates: main]
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• softprops/action-gh-release v2.6.1@153bb8e04406b158c6c84fc1615b65b24149a1fe → [Updates: v2.6.2, v3]

.github/workflows/check-release-channel.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/ci.yml (21)

• grafana/plugin-ci-workflows main → [Updates: main]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• grafana/plugin-ci-workflows main → [Updates: main]
• grafana/shared-workflows get-vault-secrets/v1.3.1@f1614b210386ac420af6807a997ac7f6d96e477a
• actions/create-github-app-token v3.0.0@f8d387b68d61c58ab83c6c016672934102569859 → [Updates: v3.1.1]
• grafana/plugin-ci-workflows main → [Updates: main]
• grafana/plugin-ci-workflows main → [Updates: main]
• grafana/plugin-ci-workflows main → [Updates: main]
• grafana/plugin-ci-workflows main → [Updates: main]
• grafana/plugin-ci-workflows main → [Updates: main]
• actions/upload-artifact v5.0.0@330a01c490aca151604b8cf639adc76d48f6c5d4 → [Updates: v7.0.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• grafana/plugin-ci-workflows main → [Updates: main]
• grafana/plugin-ci-workflows main → [Updates: main]
• grafana/plugin-ci-workflows main → [Updates: main]
• actions/download-artifact v6.0.0@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 → [Updates: v8.0.1]
• google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• google-github-actions/upload-cloud-storage v3.0.0@6397bd7208e18d13ba2619ee21b9873edc94427a
• google-github-actions/upload-cloud-storage v3.0.0@6397bd7208e18d13ba2619ee21b9873edc94427a

.github/workflows/playwright-docker.yml (9)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• grafana/plugin-actions e2e-version/v1.2.1
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v6.0.0@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 → [Updates: v8.0.1]
• grafana/shared-workflows get-vault-secrets/v1.3.1@f1614b210386ac420af6807a997ac7f6d96e477a
• grafana/shared-workflows login-to-gar/v1.0.1@c7ad5f57693ac858c698d95783685a9cbfd91223
• grafana/plugin-actions wait-for-grafana/v1.0.2
• actions/upload-artifact v5.0.0@330a01c490aca151604b8cf639adc76d48f6c5d4 → [Updates: v7.0.1]
• grafana/plugin-ci-workflows main → [Updates: main]

.github/workflows/playwright.yml (13)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• grafana/plugin-actions e2e-version/v1.2.1
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• grafana/plugin-ci-workflows main → [Updates: main]
• google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/cache v5.0.4@668228422ae6a00e4ad889ee87cd7109ec5666a7 → [Updates: v5.0.5]
• actions/download-artifact v6.0.0@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 → [Updates: v8.0.1]
• grafana/shared-workflows get-vault-secrets/v1.3.1@f1614b210386ac420af6807a997ac7f6d96e477a
• grafana/shared-workflows login-to-gar/v1.0.1@c7ad5f57693ac858c698d95783685a9cbfd91223
• grafana/plugin-actions wait-for-grafana/v1.0.2
• actions/upload-artifact v5.0.0@330a01c490aca151604b8cf639adc76d48f6c5d4 → [Updates: v7.0.1]
• grafana/plugin-ci-workflows main → [Updates: main]

.github/workflows/pr-checks-examples-readmes.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c

.github/workflows/pr-checks-lint.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• golangci/golangci-lint-action v9.2.0@1e7e51e771db61008b38414a730f564565cf7c20
• golangci/golangci-lint v${{ env.GOLANGCI_LINT_VERSION }}

.github/workflows/pr-checks-semantic-title.yml (1)

• amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50

.github/workflows/pr-checks-test-ci.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c

.github/workflows/pr-checks-workflow-references.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• grafana/plugin-ci-workflows main → [Updates: main]

.github/workflows/release-please-pr-update-tagged-references.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• grafana/shared-workflows get-vault-secrets/v1.3.1@f1614b210386ac420af6807a997ac7f6d96e477a
• actions/create-github-app-token v3.0.0@f8d387b68d61c58ab83c6c016672934102569859 → [Updates: v3.1.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• grafana/plugin-ci-workflows main → [Updates: main]
• grafana/plugin-ci-workflows main → [Updates: main]
• grafana/plugin-ci-workflows main → [Updates: main]
• stefanzweifel/git-auto-commit-action v7.1.0@04702edda442b2e678b25b537cec683a1493fcb9

.github/workflows/release-please-restore-rolling-release.yml (6)

• grafana/shared-workflows get-vault-secrets/v1.3.1@f1614b210386ac420af6807a997ac7f6d96e477a
• actions/create-github-app-token v3.0.0@f8d387b68d61c58ab83c6c016672934102569859 → [Updates: v3.1.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• grafana/plugin-ci-workflows main → [Updates: main]
• grafana/plugin-ci-workflows main → [Updates: main]
• peter-evans/create-pull-request v8.1.0@c0f553fe549906ede9cf27b5156039d195d2ece0 → [Updates: v8.1.1]

.github/workflows/release-please.yml (5)

• grafana/shared-workflows get-vault-secrets/v1.3.1@f1614b210386ac420af6807a997ac7f6d96e477a
• actions/create-github-app-token v3.0.0@f8d387b68d61c58ab83c6c016672934102569859 → [Updates: v3.1.1]
• step-security/harden-runner v2.17.0@f808768d1510423e83855289c910610ca9b43176 → [Updates: v2.18.0]
• googleapis/release-please-action v4.4.1@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 → [Updates: v5]
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]

actions/internal/plugins/backend/action.yml (1)

• grafana/shared-workflows get-vault-secrets/v1.3.1@f1614b210386ac420af6807a997ac7f6d96e477a

actions/internal/plugins/frontend/action.yml (3)

• grafana/shared-workflows get-vault-secrets/v1.3.1@f1614b210386ac420af6807a997ac7f6d96e477a
• google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• grafana/plugin-actions package-manager-detect/v1.0.1

actions/internal/plugins/setup/action.yml (8)

• grafana/plugin-actions package-manager-detect/v1.0.1
• pnpm/action-setup v5.0.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.0]
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6.4.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• actions/cache v5.0.4@668228422ae6a00e4ad889ee87cd7109ec5666a7 → [Updates: v5.0.5]
• pnpm ${{ steps.package-manager.outputs.version }}
• node ${{ inputs.node-version }}
• go ${{ inputs.go-version }}

actions/internal/plugins/trufflehog/action.yml (1)

• actions/cache v5.0.4@668228422ae6a00e4ad889ee87cd7109ec5666a7 → [Updates: v5.0.5]

actions/plugins/frontend-e2e-against-stack/action.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6.4.0]
• google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• grafana/shared-workflows v1.2.0@5d7e361bc7e0a183cde8afe9899fb7b596d2659b
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7.0.1]
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7.0.1]
• node 20

actions/plugins/release-please/action.yml (4)

• grafana/shared-workflows get-vault-secrets/v1.3.1@f1614b210386ac420af6807a997ac7f6d96e477a
• actions/create-github-app-token v3.0.0@f8d387b68d61c58ab83c6c016672934102569859 → [Updates: v3.1.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• googleapis/release-please-action v4.4.1@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 → [Updates: v5]

actions/plugins/version-bump-changelog/action.yml (3)

• grafana/shared-workflows get-vault-secrets/v1.3.1@f1614b210386ac420af6807a997ac7f6d96e477a
• actions/create-github-app-token v3.0.0@f8d387b68d61c58ab83c6c016672934102569859 → [Updates: v3.1.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

npm (1)

actions/plugins/frontend-e2e-against-stack/package.json (12)

• js-yaml ^4.1.0
• plop ^4.0.1
• @types/bun 1.3.12 → [Updates: 1.3.13]
• @eslint/js 10.0.1
• @types/eslint__js 9.14.0
• eslint 10.2.1
• eslint-config-prettier 10.1.8
• eslint-plugin-jest 29.15.2
• eslint-plugin-prettier 5.5.5
• prettier 3.8.3
• typescript 6.0.3
• typescript-eslint 8.58.2 → [Updates: 8.59.0]

regex (9)

.github/workflows/ci.yml (1)

• node 24

.github/workflows/ci.yml

.github/workflows/ci.yml (1)

• golangci-lint 2.11.4

.github/workflows/ci.yml (1)

• trufflehog 3.94.3 → [Updates: 3.95.2]

.github/workflows/ci.yml (1)

• mage 1.17.1 → [Updates: 1.17.2]

.github/workflows/ci.yml (1)

• plugin-validator 0.39.2 → [Updates: 0.41.0]

.github/workflows/pr-checks-lint.yml (1)

• golangci-lint 2.11.4

.github/workflows/pr-checks-lint.yml (1)

• actionlint 1.7.12

.github/workflows/pr-checks-test-ci.yml (1)

• act 0.2.87

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.