Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency buildifier_prebuilt to v8.2.1.2
• chore(deps): update rust crate prost to v0.14.3
• chore(deps): update rust crate serde_json to v1.0.149
• chore(deps): update rust crate worker to v0.7.4
• fix(deps): update rust crate wasm-bindgen-cli to v0.2.108
• chore(deps): update bazel-contrib/setup-bazel action to v0.18.0
• chore(deps): update dependency bazel to v9
• fix(deps): update module github.com/google/go-github/v66 to v82
• fix(deps): update module github.com/google/go-github/v80 to v82
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update github.com/bazelbuild/buildtools digest to 54a7200
• fix(deps): update go.starlark.net digest to 3fee463
• chore(deps): update dependency bazel to v8.5.1
• chore(deps): update dependency rules_rs to v0.0.27
• fix(deps): update module google.golang.org/protobuf to v1.36.11
• chore(deps): update dependency bazel_skylib to v1.9.0
• chore(deps): update dependency go to v1.25.6
• fix(deps): update module golang.org/x/oauth2 to v0.34.0
• fix(deps): update module google.golang.org/grpc to v1.78.0
• chore(deps): update dependency rules_java to v9
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

bazel-module (1)

bazel_tools/deps/bcr.MODULE.bazel (11)

• bazel_skylib 1.8.2 → [Updates: 1.9.0]
• buildifier_prebuilt 8.2.1.1 → [Updates: 8.2.1.2]
• gazelle 0.47.0
• rules_go 0.59.0
• rules_java 8.16.1 → [Updates: 9.3.0]
• rules_multitool 1.11.1
• rules_proto 7.1.0
• rules_rs 0.0.20 → [Updates: 0.0.27]
• rules_rust_wasm_bindgen 0.68.1
• rules_rust 0.68.1
• rules_tsickle 1.1.0

bazelisk (1)

.bazelversion (1)

• bazel 8.5.0 → [Updates: 8.5.1, 9.0.0]

cargo (2)

app/api/Cargo.toml (5)

• worker 0.7.1 → [Updates: 0.7.1]
• serde 1.0
• serde_json 1.0 → [Updates: 1.0]
• prost 0.14.1 → [Updates: 0.14.1]
• pbjson 0.9.0

tools/rust/Cargo.toml (4)

• protoc-gen-tonic 0.5.0
• protoc-gen-prost 0.5.0
• protoc-gen-prost-serde 0.4.0
• wasm-bindgen-cli =0.2.106 → [Updates: =0.2.108]

github-actions (5)

.github/workflows/ci.yaml (2)

• actions/checkout v6
• bazel-contrib/setup-bazel 0.16.0 → [Updates: 0.18.0]

.github/workflows/deploy-and-merge-bcr-pr.yaml (2)

• actions/checkout v6
• bazel-contrib/setup-bazel 0.16.0 → [Updates: 0.18.0]

.github/workflows/publish.yaml (1)

• bazel-contrib/publish-to-bcr v1.1.0

.github/workflows/release_ruleset.yaml (10)

• actions/checkout v6
• bazel-contrib/setup-bazel 0.16.0 → [Updates: 0.18.0]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd
• actions/attest-build-provenance v3
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd
• softprops/action-gh-release v2

.github/workflows/update-bcr-submodule.yaml (2)

• actions/checkout v6
• bazel-contrib/setup-bazel 0.16.0 → [Updates: 0.18.0]

gomod (1)

go.mod (23)

• go 1.24.0
• go 1.24.10 → [Updates: 1.25.6]
• github.com/amenzhinsky/go-memexec v0.7.1
• github.com/bazelbuild/bazel-gazelle v0.47.0
• github.com/bazelbuild/buildtools v0.0.0-20250930140053-2eb4fccefb52@2eb4fccefb52 → [Updates: v0.0.0-20260130104808-54a7200a18c1]
• github.com/chromedp/chromedp v0.14.2
• github.com/dominikbraun/graph v0.23.0
• github.com/google/go-github/v66 v66.0.0 → [Updates: v82.0.0]
• github.com/google/go-github/v80 v80.0.0 → [Updates: v82.0.0]
• github.com/junkblocker/codesearch v1.4.0
• github.com/rs/zerolog v1.34.0
• github.com/samthor/sre2 v0.0.0-20150929104051-385a11de6465@385a11de6465
• github.com/schollz/progressbar/v3 v3.19.0
• github.com/shurcooL/githubv4 v0.0.0-20240727222349-48295856cce7@48295856cce7
• github.com/teacat/noire v1.1.0
• github.com/zeebo/blake3 v0.2.4
• go.starlark.net v0.0.0-20250906160240-bf296ed553ea@bf296ed553ea → [Updates: v0.0.0-20260102030733-3fee463870c9]
• golang.org/x/oauth2 v0.30.0 → [Updates: v0.34.0]
• golang.org/x/sync v0.19.0
• golang.org/x/time v0.14.0
• google.golang.org/grpc v1.75.1 → [Updates: v1.78.0]
• google.golang.org/protobuf v1.36.9 → [Updates: v1.36.11]
• gopkg.in/yaml.v3 v3.0.1

html (1)

app/bcr/index.html (1)

• Primer 21.1.1@sha512-DQRZcDaNuIkb4JiH6PHalnncWllAK5txkJVocLdyfglJSavW/HxQaJRJeRw5eEPnp+kD1QImSxCwUiOsRrCMEw==

---

• Check this box to trigger a request for Renovate to run again on this repository