Dependency Dashboard

[github-actions]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.
• ⚠️ WARN: Error updating branch: update failure

Errored

The following updates encountered an error and will be retried. To force a retry now, click on a checkbox below.

• chore(deps): update obolnetwork/obol-stack-front-end docker tag to v0.1.28-rc0-arm64

---

Warning

Renovate failed to look up the following dependencies: Failed to look up github-tags package aquasecurity/trivy-action: no-result.

Files affected: .github/workflows/docker-publish-openclaw.yml, .github/workflows/docker-publish-storefront.yml, .github/workflows/docker-publish-x402.yml

---

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• chore(deps): update actions/checkout action to v6.0.3
• chore(deps): update azure/setup-helm action to v5.0.1
• chore(deps): update github/codeql-action action to v4.36.2
• chore(deps): update renovatebot/github-action action to v46.1.17
• chore(deps): update softprops/action-gh-release action to v3.0.1
• chore(deps): update actions/create-github-app-token action to v2.2.2
• chore(deps): update actions/setup-go action to v6.5.0
• chore(deps): update actions/setup-python action to v6.3.0
• chore(deps): update dependency helm to v3.21.2
• chore(deps): update dependency python to 3.14
• chore(deps): update docker/setup-qemu-action action to v4.1.0
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/create-github-app-token action to v3

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update aztecprotocol/aztec docker tag to v6

Detected Dependencies

github-actions (9)

.github/workflows/docker-publish-openclaw.yml (16)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.1.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.1.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4.36.2]

.github/workflows/docker-publish-storefront.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.1.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4.36.2]

.github/workflows/docker-publish-x402.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.1.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4.36.2]

.github/workflows/gitleaks.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]

.github/workflows/helm-template-smoke.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• azure/setup-helm v5.0.0@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 → [Updates: v5.0.1]
• helm v3.21.0 → [Updates: v3.21.2]

.github/workflows/lint-test.yaml (10)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• azure/setup-helm v5.0.0@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 → [Updates: v5.0.1]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6.3.0]
• helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
• helm/kind-action v1.14.0@ef37e7f390d99f746eb8b610417061a60e82a6cc
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• extractions/setup-just v4.0.0@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3
• helm v3.12.0 → [Updates: v3.21.2]
• python 3.12 → [Updates: 3.14]

.github/workflows/release-prep.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.1.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• actions/create-github-app-token v2.1.4@67018539274d69449ef7c02e8e71183d1719ab42 → [Updates: v2.2.2, v3.2.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]

.github/workflows/release.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• softprops/action-gh-release v3.0.0@b4309332981a82ec1c5618f44dd2e27cc8bfbfda → [Updates: v3.0.1]

.github/workflows/renovate.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• renovatebot/github-action v46.1.14@693b9ef15eec82123529a37c782242f091365961 → [Updates: v46.1.17]

regex (14)

internal/embed/infrastructure/base/templates/llm.yaml (3)

• ghcr.io/obolnetwork/litellm sha-9b3e569@sha256:ac453f9cdfa3752efa38998aa5bbf4f9a67e642a68b27a647aaf667c083ddc51
• ghcr.io/obolnetwork/litellm sha-9b3e569@sha256:ac453f9cdfa3752efa38998aa5bbf4f9a67e642a68b27a647aaf667c083ddc51
• ghcr.io/obolnetwork/x402-buyer 4c6ddeb@sha256:ce447c7ed6dc74c4b3a5fccde3f830cafa6b2651d7ad198df6bd4c72d7e112ba

internal/embed/infrastructure/base/templates/x402.yaml (2)

• ghcr.io/obolnetwork/x402-verifier 4c6ddeb@sha256:73190427fed2b650d9edec2f78bb9a3c8f1837738389128a931a51a842f9b70d
• ghcr.io/obolnetwork/serviceoffer-controller 4c6ddeb@sha256:5ba1226a136d33ffdaca714fd825c5b1b8d86f777894e170bdcca19a74bb5d77

internal/embed/infrastructure/cloudflared/values.yaml (1)

• cloudflare/cloudflared 2026.6.1@sha256:6d91c121b803126f7a5344005d17a9324788fc09d305b6e2560ec6040a7ae283

internal/embed/infrastructure/helmfile.yaml (1)

• kubernetes-sigs/gateway-api v1.6.0

internal/embed/infrastructure/values/obol-frontend.yaml.gotmpl (1)

• obolnetwork/obol-stack-front-end v0.1.28-rc0@sha256:2a3f5cedebaee042bac666b211d2e051f0c612923f0a86ed9a36806f5fe6a293 → [Updates: v0.1.28-rc0-arm64]

internal/embed/k3d-config.yaml

internal/embed/networks/aztec/helmfile.yaml.gotmpl (1)

• aztecprotocol/aztec 4.4.0 → [Updates: 6.0.0-nightly.20260605-arm64]

internal/embed/networks/aztec/helmfile.yaml.gotmpl (1)

• aztec-node 2.3.0

internal/embed/networks/ethereum/helmfile.yaml.gotmpl (9)

• paradigmxyz/reth v2.3.0
• ethereum/go-ethereum v1.17.4
• NethermindEth/nethermind 1.38.1
• hyperledger/besu 26.6.1
• erigontech/erigon v3.5.0
• sigp/lighthouse v8.2.0
• OffchainLabs/prysm v7.1.5
• Consensys/teku 26.6.1
• ChainSafe/lodestar v1.43.0

internal/embed/networks/ethereum/helmfile.yaml.gotmpl (1)

• ethereum-node 0.2.15

internal/hermes/hermes.go (1)

• nousresearch/hermes-agent v2026.6.19

internal/openclaw/openclaw.go (1)

• openclaw 0.4.0

internal/serviceoffercontroller/agent_render.go (1)

• nousresearch/hermes-agent v2026.6.19

obolup.sh (7)

• kubernetes/kubernetes 1.36.2
• helm/helm 3.21.2
• k3d-io/k3d 5.9.0
• helmfile/helmfile 1.6.0
• derailed/k9s 0.51.0
• databus23/helm-diff 3.15.10
• ollama/ollama 0.31.1