Dependency Dashboard

[bootc-bot]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update quay.io/fedora/fedora-bootc:45 docker digest to d60de9f
• chore(deps): update dependency opencode-ai to v1.15.13
• chore(deps): update docker (astral-sh/uv, block/goose, nextest-rs/nextest, nushell/nushell, rust-nightly)
• chore(deps): update snok/container-retention-policy action to v3.1.0
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cargo (1)

scripts/sync-common/Cargo.toml (3)

• anyhow 1.0
• xshell 0.2
• tempfile 3.0

dockerfile (4)

devenv/Containerfile.c10s

devenv/Containerfile.debian

devenv/Containerfile.ubuntu (1)

• docker.io/library/ubuntu 26.04

staged-images/Containerfile

github-actions (7)

.github/workflows/build-devcontainer.yml (14)

• actions/checkout v6
• extractions/setup-just v4
• actions/checkout v6
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/metadata-action v6
• docker/build-push-action v7
• actions/upload-artifact v7
• actions/download-artifact v8
• docker/setup-buildx-action v4
• docker/metadata-action v6
• docker/login-action v4
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/build-staged-images.yml (12)

• actions/checkout v6
• extractions/setup-just v4
• actions/checkout v6
• bootc-dev/actions main
• actions/checkout v6
• bootc-dev/actions main
• actions/upload-artifact v7
• bootc-dev/actions main
• bootc-dev/actions main
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/container-gc.yml (1)

• snok/container-retention-policy v3.0.1 → [Updates: v3.1.0]

.github/workflows/renovate.yml (4)

• actions/checkout v6
• actions/create-github-app-token v3
• actions/checkout v6
• renovatebot/github-action v46.1.14

.github/workflows/sync-common.yml (11)

• actions/checkout v6
• bootc-dev/actions main
• actions/upload-artifact v7
• actions/create-github-app-token v3
• actions/create-github-app-token v3
• bootc-dev/actions main
• actions/create-github-app-token v3
• actions/checkout v6
• actions/checkout v6
• actions/download-artifact v8
• peter-evans/create-pull-request v8

.github/workflows/sync-labels.yml (8)

• actions/checkout v6
• actions/create-github-app-token v3
• actions/create-github-app-token v3
• bootc-dev/actions main
• actions/create-github-app-token v3
• actions/github-script v9
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/test-devcontainer.yml (3)

• actions/checkout v6
• bootc-dev/actions main
• ubuntu 24.04

regex (14)

devenv/cargo-tools.txt (2)

• cargo-vendor-filterer 0.5.18
• cargo-edit 0.13.9

devenv/cargo-tools.txt (2)

• cargo-vendor-filterer 0.5.18
• cargo-edit 0.13.9

devenv/Containerfile.c10s (3)

• astral-sh/uv 0.11.16 → [Updates: 0.11.17]
• kani-verifier 0.67.0
• rust-nightly nightly-2026-05-25 → [Updates: nightly-2026-05-31]

devenv/Containerfile.c10s (3)

• astral-sh/uv 0.11.16 → [Updates: 0.11.17]
• kani-verifier 0.67.0
• rust-nightly nightly-2026-05-25 → [Updates: nightly-2026-05-31]

devenv/Containerfile.debian (3)

• astral-sh/uv 0.11.16 → [Updates: 0.11.17]
• kani-verifier 0.67.0
• rust-nightly nightly-2026-05-25 → [Updates: nightly-2026-05-31]

devenv/Containerfile.debian (3)

• astral-sh/uv 0.11.16 → [Updates: 0.11.17]
• kani-verifier 0.67.0
• rust-nightly nightly-2026-05-25 → [Updates: nightly-2026-05-31]

devenv/Containerfile.ubuntu (3)

• astral-sh/uv 0.11.16 → [Updates: 0.11.17]
• kani-verifier 0.67.0
• rust-nightly nightly-2026-05-25 → [Updates: nightly-2026-05-31]

devenv/Containerfile.ubuntu (3)

• astral-sh/uv 0.11.16 → [Updates: 0.11.17]
• kani-verifier 0.67.0
• rust-nightly nightly-2026-05-25 → [Updates: nightly-2026-05-31]

devenv/npm.txt (1)

• opencode-ai 1.15.10 → [Updates: 1.15.13]

devenv/npm.txt (1)

• opencode-ai 1.15.10 → [Updates: 1.15.13]

devenv/tool-versions.txt (6)

• bootc-dev/bcvk v0.17.0
• ossf/scorecard v5.5.0
• nushell/nushell 0.113.0 → [Updates: 0.113.1]
• jj-vcs/jj 0.41.0
• nextest-rs/nextest 0.9.136 → [Updates: 0.9.137]
• block/goose v1.35.0 → [Updates: v1.36.0]

devenv/tool-versions.txt (6)

• bootc-dev/bcvk v0.17.0
• ossf/scorecard v5.5.0
• nushell/nushell 0.113.0 → [Updates: 0.113.1]
• jj-vcs/jj 0.41.0
• nextest-rs/nextest 0.9.136 → [Updates: 0.9.137]
• block/goose v1.35.0 → [Updates: v1.36.0]

staged-images/sources.json (3)

• quay.io/fedora/fedora-bootc 45@sha256:ffe10c6a943fc3bdb3f20574d8523032cb0a8474d56530ccbda5bb68744861b2 → [Updates: 45]
• quay.io/centos-bootc/centos-bootc stream9@sha256:f6a99b19ace9dfd7384dd46c7ad5e4285683d8b4ee3767a4245d1748f70d307d
• quay.io/centos-bootc/centos-bootc stream10@sha256:fdb6387f6010182e117ed8a47e81a0663cee512573221bf6551d306e514e8440

staged-images/sources.json (3)

• quay.io/fedora/fedora-bootc 45@sha256:ffe10c6a943fc3bdb3f20574d8523032cb0a8474d56530ccbda5bb68744861b2 → [Updates: 45]
• quay.io/centos-bootc/centos-bootc stream9@sha256:f6a99b19ace9dfd7384dd46c7ad5e4285683d8b4ee3767a4245d1748f70d307d
• quay.io/centos-bootc/centos-bootc stream10@sha256:fdb6387f6010182e117ed8a47e81a0663cee512573221bf6551d306e514e8440

renovate-config (1)

renovate.json