Dependency Dashboard

[bootc-bot]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update quay.io/fedora/fedora-bootc:45 docker digest to 54abae4
• chore(deps): update dependency opencode-ai to v1.15.5
• chore(deps): update docker (astral-sh/uv, rust-nightly)
• 🔐 Create all awaiting schedule PRs at once 🔐

Detected Dependencies

cargo (1)

scripts/sync-common/Cargo.toml (3)

• anyhow 1.0
• xshell 0.2
• tempfile 3.0

dockerfile (4)

devenv/Containerfile.c10s

devenv/Containerfile.debian

devenv/Containerfile.ubuntu (1)

• docker.io/library/ubuntu 26.04

staged-images/Containerfile

github-actions (7)

.github/workflows/build-devcontainer.yml (14)

• actions/checkout v6
• extractions/setup-just v4
• actions/checkout v6
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/metadata-action v6
• docker/build-push-action v7
• actions/upload-artifact v7
• actions/download-artifact v8
• docker/setup-buildx-action v4
• docker/metadata-action v6
• docker/login-action v4
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/build-staged-images.yml (12)

• actions/checkout v6
• extractions/setup-just v4
• actions/checkout v6
• bootc-dev/actions main
• actions/checkout v6
• bootc-dev/actions main
• actions/upload-artifact v7
• bootc-dev/actions main
• bootc-dev/actions main
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/container-gc.yml (1)

• snok/container-retention-policy v3.0.1

.github/workflows/renovate.yml (4)

• actions/checkout v6
• actions/create-github-app-token v3
• actions/checkout v6
• renovatebot/github-action v46.1.14

.github/workflows/sync-common.yml (11)

• actions/checkout v6
• bootc-dev/actions main
• actions/upload-artifact v7
• actions/create-github-app-token v3
• actions/create-github-app-token v3
• bootc-dev/actions main
• actions/create-github-app-token v3
• actions/checkout v6
• actions/checkout v6
• actions/download-artifact v8
• peter-evans/create-pull-request v8

.github/workflows/sync-labels.yml (8)

• actions/checkout v6
• actions/create-github-app-token v3
• actions/create-github-app-token v3
• bootc-dev/actions main
• actions/create-github-app-token v3
• actions/github-script v9
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/test-devcontainer.yml (3)

• actions/checkout v6
• bootc-dev/actions main
• ubuntu 24.04

regex (14)

devenv/cargo-tools.txt (2)

• cargo-vendor-filterer 0.5.18
• cargo-edit 0.13.9

devenv/cargo-tools.txt (2)

• cargo-vendor-filterer 0.5.18
• cargo-edit 0.13.9

devenv/Containerfile.c10s (3)

• astral-sh/uv 0.11.14 → [Updates: 0.11.15]
• kani-verifier 0.67.0
• rust-nightly nightly-2026-05-18 → [Updates: nightly-2026-05-19]

devenv/Containerfile.c10s (3)

• astral-sh/uv 0.11.14 → [Updates: 0.11.15]
• kani-verifier 0.67.0
• rust-nightly nightly-2026-05-18 → [Updates: nightly-2026-05-19]

devenv/Containerfile.debian (3)

• astral-sh/uv 0.11.14 → [Updates: 0.11.15]
• kani-verifier 0.67.0
• rust-nightly nightly-2026-05-18 → [Updates: nightly-2026-05-19]

devenv/Containerfile.debian (3)

• astral-sh/uv 0.11.14 → [Updates: 0.11.15]
• kani-verifier 0.67.0
• rust-nightly nightly-2026-05-18 → [Updates: nightly-2026-05-19]

devenv/Containerfile.ubuntu (3)

• astral-sh/uv 0.11.14 → [Updates: 0.11.15]
• kani-verifier 0.67.0
• rust-nightly nightly-2026-05-18 → [Updates: nightly-2026-05-19]

devenv/Containerfile.ubuntu (3)

• astral-sh/uv 0.11.14 → [Updates: 0.11.15]
• kani-verifier 0.67.0
• rust-nightly nightly-2026-05-18 → [Updates: nightly-2026-05-19]

devenv/npm.txt (1)

• opencode-ai 1.15.4 → [Updates: 1.15.5]

devenv/npm.txt (1)

• opencode-ai 1.15.4 → [Updates: 1.15.5]

devenv/tool-versions.txt (6)

• bootc-dev/bcvk v0.17.0
• ossf/scorecard v5.5.0
• nushell/nushell 0.112.2
• jj-vcs/jj 0.41.0
• nextest-rs/nextest 0.9.136
• block/goose v1.34.1

devenv/tool-versions.txt (6)

• bootc-dev/bcvk v0.17.0
• ossf/scorecard v5.5.0
• nushell/nushell 0.112.2
• jj-vcs/jj 0.41.0
• nextest-rs/nextest 0.9.136
• block/goose v1.34.1

staged-images/sources.json (3)

• quay.io/fedora/fedora-bootc 45@sha256:8b826cc273def94a68beb59d2cd214dc394dad4fd1c2baf5984e7ce98be39bbd → [Updates: 45]
• quay.io/centos-bootc/centos-bootc stream9@sha256:f6a99b19ace9dfd7384dd46c7ad5e4285683d8b4ee3767a4245d1748f70d307d
• quay.io/centos-bootc/centos-bootc stream10@sha256:fdb6387f6010182e117ed8a47e81a0663cee512573221bf6551d306e514e8440

staged-images/sources.json (3)

• quay.io/fedora/fedora-bootc 45@sha256:8b826cc273def94a68beb59d2cd214dc394dad4fd1c2baf5984e7ce98be39bbd → [Updates: 45]
• quay.io/centos-bootc/centos-bootc stream9@sha256:f6a99b19ace9dfd7384dd46c7ad5e4285683d8b4ee3767a4245d1748f70d307d
• quay.io/centos-bootc/centos-bootc stream10@sha256:fdb6387f6010182e117ed8a47e81a0663cee512573221bf6551d306e514e8440

renovate-config (1)

renovate.json