Dependency Dashboard

[bootc-bot]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update dependency block/goose to v1.31.1
• chore(deps): update dependency opencode-ai to v1.14.19
• chore(deps): update renovatebot/github-action action to v46.1.10
• 🔐 Create all awaiting schedule PRs at once 🔐

Detected Dependencies

cargo (1)

scripts/sync-common/Cargo.toml (3)

• anyhow 1.0
• xshell 0.2
• tempfile 3.0

dockerfile (4)

devenv/Containerfile.c10s

devenv/Containerfile.debian

devenv/Containerfile.ubuntu (1)

• docker.io/library/ubuntu 24.04

staged-images/Containerfile

github-actions (7)

.github/workflows/build-devcontainer.yml (14)

• actions/checkout v6
• extractions/setup-just v4
• actions/checkout v6
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/metadata-action v6
• docker/build-push-action v7
• actions/upload-artifact v7
• actions/download-artifact v8
• docker/setup-buildx-action v4
• docker/metadata-action v6
• docker/login-action v4
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/build-staged-images.yml (12)

• actions/checkout v6
• extractions/setup-just v4
• actions/checkout v6
• bootc-dev/actions main
• actions/checkout v6
• bootc-dev/actions main
• actions/upload-artifact v7
• bootc-dev/actions main
• bootc-dev/actions main
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/container-gc.yml (1)

• snok/container-retention-policy v3.0.1

.github/workflows/renovate.yml (4)

• actions/checkout v6
• actions/create-github-app-token v3
• actions/checkout v6
• renovatebot/github-action v46.1.9 → [Updates: v46.1.10]

.github/workflows/sync-common.yml (11)

• actions/checkout v6
• bootc-dev/actions main
• actions/upload-artifact v7
• actions/create-github-app-token v3
• actions/create-github-app-token v3
• bootc-dev/actions main
• actions/create-github-app-token v3
• actions/checkout v6
• actions/checkout v6
• actions/download-artifact v8
• peter-evans/create-pull-request v8

.github/workflows/sync-labels.yml (8)

• actions/checkout v6
• actions/create-github-app-token v3
• actions/create-github-app-token v3
• bootc-dev/actions main
• actions/create-github-app-token v3
• actions/github-script v9
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/test-devcontainer.yml (3)

• actions/checkout v6
• bootc-dev/actions main
• ubuntu 24.04

regex (12)

devenv/Containerfile.c10s (3)

• astral-sh/uv 0.11.7
• kani-verifier 0.67.0
• rust-nightly nightly-2026-04-19

devenv/Containerfile.c10s (3)

• astral-sh/uv 0.11.7
• kani-verifier 0.67.0
• rust-nightly nightly-2026-04-19

devenv/Containerfile.debian (3)

• astral-sh/uv 0.11.7
• kani-verifier 0.67.0
• rust-nightly nightly-2026-04-19

devenv/Containerfile.debian (3)

• astral-sh/uv 0.11.7
• kani-verifier 0.67.0
• rust-nightly nightly-2026-04-19

devenv/Containerfile.ubuntu (3)

• astral-sh/uv 0.11.7
• kani-verifier 0.67.0
• rust-nightly nightly-2026-04-19

devenv/Containerfile.ubuntu (3)

• astral-sh/uv 0.11.7
• kani-verifier 0.67.0
• rust-nightly nightly-2026-04-19

devenv/npm.txt (1)

• opencode-ai 1.14.18 → [Updates: 1.14.19]

devenv/npm.txt (1)

• opencode-ai 1.14.18 → [Updates: 1.14.19]

devenv/tool-versions.txt (6)

• bootc-dev/bcvk v0.13.0
• ossf/scorecard v5.4.0
• nushell/nushell 0.112.2
• jj-vcs/jj 0.40.0
• nextest-rs/nextest 0.9.133
• block/goose v1.31.0 → [Updates: v1.31.1]

devenv/tool-versions.txt (6)

• bootc-dev/bcvk v0.13.0
• ossf/scorecard v5.4.0
• nushell/nushell 0.112.2
• jj-vcs/jj 0.40.0
• nextest-rs/nextest 0.9.133
• block/goose v1.31.0 → [Updates: v1.31.1]

staged-images/sources.json (3)

• quay.io/fedora/fedora-bootc 45@sha256:fa8f8175b20f80df3072d86fbd8de1b9309956cba6df3b18e3c4a9e8f2df7a3b
• quay.io/centos-bootc/centos-bootc stream9@sha256:52aa6430270ce52f4103cb3cf246a5c79ae08ae6dbf29716b4f90d450cb846d8
• quay.io/centos-bootc/centos-bootc stream10@sha256:3d784d5e41e2cb3b6f0c21a065ea0cf2a413feaffab1add0eeae40df9c1aaecd

staged-images/sources.json (3)

• quay.io/fedora/fedora-bootc 45@sha256:fa8f8175b20f80df3072d86fbd8de1b9309956cba6df3b18e3c4a9e8f2df7a3b
• quay.io/centos-bootc/centos-bootc stream9@sha256:52aa6430270ce52f4103cb3cf246a5c79ae08ae6dbf29716b4f90d450cb846d8
• quay.io/centos-bootc/centos-bootc stream10@sha256:3d784d5e41e2cb3b6f0c21a065ea0cf2a413feaffab1add0eeae40df9c1aaecd

renovate-config-presets (1)

renovate.json