Dependency Dashboard

[bootc-bot]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update staged-images (quay.io/centos-bootc/centos-bootc, quay.io/fedora/fedora-bootc)
• chore(deps): update docker (astral-sh/uv, rust-nightly)
• chore(deps): update dependency opencode-ai to v1.4.3
• chore(deps): update github actions (actions/github-script, renovatebot/github-action)
• 🔐 Create all awaiting schedule PRs at once 🔐

Detected Dependencies

cargo (1)

scripts/sync-common/Cargo.toml (3)

• anyhow 1.0
• xshell 0.2
• tempfile 3.0

dockerfile (4)

devenv/Containerfile.c10s

devenv/Containerfile.debian

devenv/Containerfile.ubuntu (1)

• docker.io/library/ubuntu 24.04

staged-images/Containerfile

github-actions (7)

.github/workflows/build-devcontainer.yml (14)

• actions/checkout v6
• extractions/setup-just v4
• actions/checkout v6
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/metadata-action v6
• docker/build-push-action v7
• actions/upload-artifact v7
• actions/download-artifact v8
• docker/setup-buildx-action v4
• docker/metadata-action v6
• docker/login-action v4
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/build-staged-images.yml (12)

• actions/checkout v6
• extractions/setup-just v4
• actions/checkout v6
• bootc-dev/actions main
• actions/checkout v6
• bootc-dev/actions main
• actions/upload-artifact v7
• bootc-dev/actions main
• bootc-dev/actions main
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/container-gc.yml (1)

• snok/container-retention-policy v3.0.1

.github/workflows/renovate.yml (4)

• actions/checkout v6
• actions/create-github-app-token v3
• actions/checkout v6
• renovatebot/github-action v46.1.7 → [Updates: v46.1.8]

.github/workflows/sync-common.yml (11)

• actions/checkout v6
• bootc-dev/actions main
• actions/upload-artifact v7
• actions/create-github-app-token v3
• actions/create-github-app-token v3
• bootc-dev/actions main
• actions/create-github-app-token v3
• actions/checkout v6
• actions/checkout v6
• actions/download-artifact v8
• peter-evans/create-pull-request v8

.github/workflows/sync-labels.yml (8)

• actions/checkout v6
• actions/create-github-app-token v3
• actions/create-github-app-token v3
• bootc-dev/actions main
• actions/create-github-app-token v3
• actions/github-script v8 → [Updates: v9]
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/test-devcontainer.yml (3)

• actions/checkout v6
• bootc-dev/actions main
• ubuntu 24.04

regex (12)

devenv/Containerfile.c10s (3)

• astral-sh/uv 0.11.3 → [Updates: 0.11.6]
• kani-verifier 0.67.0
• rust-nightly nightly-2026-04-05 → [Updates: nightly-2026-04-10]

devenv/Containerfile.c10s (3)

• astral-sh/uv 0.11.3 → [Updates: 0.11.6]
• kani-verifier 0.67.0
• rust-nightly nightly-2026-04-05 → [Updates: nightly-2026-04-10]

devenv/Containerfile.debian (3)

• astral-sh/uv 0.11.3 → [Updates: 0.11.6]
• kani-verifier 0.67.0
• rust-nightly nightly-2026-04-05 → [Updates: nightly-2026-04-10]

devenv/Containerfile.debian (3)

• astral-sh/uv 0.11.3 → [Updates: 0.11.6]
• kani-verifier 0.67.0
• rust-nightly nightly-2026-04-05 → [Updates: nightly-2026-04-10]

devenv/Containerfile.ubuntu (3)

• astral-sh/uv 0.11.3 → [Updates: 0.11.6]
• kani-verifier 0.67.0
• rust-nightly nightly-2026-04-05 → [Updates: nightly-2026-04-10]

devenv/Containerfile.ubuntu (3)

• astral-sh/uv 0.11.3 → [Updates: 0.11.6]
• kani-verifier 0.67.0
• rust-nightly nightly-2026-04-05 → [Updates: nightly-2026-04-10]

devenv/npm.txt (1)

• opencode-ai 1.3.15 → [Updates: 1.4.3]

devenv/npm.txt (1)

• opencode-ai 1.3.15 → [Updates: 1.4.3]

devenv/tool-versions.txt (5)

• bootc-dev/bcvk v0.13.0
• ossf/scorecard v5.4.0
• nushell/nushell 0.111.0
• jj-vcs/jj 0.40.0
• nextest-rs/nextest 0.9.132

devenv/tool-versions.txt (5)

• bootc-dev/bcvk v0.13.0
• ossf/scorecard v5.4.0
• nushell/nushell 0.111.0
• jj-vcs/jj 0.40.0
• nextest-rs/nextest 0.9.132

staged-images/sources.json (4)

• quay.io/fedora/fedora-bootc 45@sha256:c03d2f5e8bc543c1371df582f40bc54b841a4bfa09749bac6b0137e37f74d665 → [Updates: 45]
• quay.io/fedora/fedora-bootc 45@sha256:c03d2f5e8bc543c1371df582f40bc54b841a4bfa09749bac6b0137e37f74d665 → [Updates: 45]
• quay.io/centos-bootc/centos-bootc stream9@sha256:c68a98f2026227bee0cf46b69ceeab0021aea9bc116d75e30076b31aa4fe1e5d → [Updates: stream9]
• quay.io/centos-bootc/centos-bootc stream10@sha256:046bb6a48b44f5c0b4781a2c3f641ff9ce93800a2abe4d2b013e99d99659466b → [Updates: stream10]

staged-images/sources.json (4)

• quay.io/fedora/fedora-bootc 45@sha256:c03d2f5e8bc543c1371df582f40bc54b841a4bfa09749bac6b0137e37f74d665 → [Updates: 45]
• quay.io/fedora/fedora-bootc 45@sha256:c03d2f5e8bc543c1371df582f40bc54b841a4bfa09749bac6b0137e37f74d665 → [Updates: 45]
• quay.io/centos-bootc/centos-bootc stream9@sha256:c68a98f2026227bee0cf46b69ceeab0021aea9bc116d75e30076b31aa4fe1e5d → [Updates: stream9]
• quay.io/centos-bootc/centos-bootc stream10@sha256:046bb6a48b44f5c0b4781a2c3f641ff9ce93800a2abe4d2b013e99d99659466b → [Updates: stream10]

renovate-config-presets (1)

renovate.json