Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
nuget	IdentityServer4.AccessTokenValidation

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• [deps] crowdin: Update crowdin/cli Docker tag to v4.14.1
• [deps] download-artifacts: Update minor (@actions/artifact, adm-zip, filesize)
• [deps] example-references: Update minor (actions/cache, actions/checkout, docker/build-push-action)
• [deps] fixtures: Update minor (AWSSDK.KeyManagementService, Azure.Identity, Azure.Security.KeyVault.Keys, Azure.Security.KeyVault.Secrets, Azure.Storage.Blobs, Google.Cloud.Kms.V1, Microsoft.EntityFrameworkCore.Design, Microsoft.EntityFrameworkCore.Relational, Microsoft.EntityFrameworkCore.SqlServer, Microsoft.EntityFrameworkCore.Sqlite, MongoDB.Driver, Npgsql.EntityFrameworkCore.PostgreSQL)
• [deps] workflow-templates: Update actions/checkout action to v5.0.1
• [deps] workflows: Update minor (actions-cool/check-user-permission, actions/checkout, actions/create-github-app-token, checkmarx/ast-github-action, github/codeql-action, python, ruby/setup-ruby, sonarsource/sonarqube-scan-action)
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• [deps] get-keyvault-secrets: Update minor (@azure/keyvault-secrets, @types/node)
• [deps]: Update actions/github-script action to v9
• [deps]: Lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• [deps]: Update @actions/artifact to v6
• [deps]: Update actions/setup-dotnet action to v5

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• [deps] run-code-review: Update anthropics/claude-code-action action to v1.0.101

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• [deps] : Update minor (husky, lint-staged, prettier)
• [deps]: Update @actions/github to v9
• [deps]: Update actions/checkout action to v6
• [deps]: Update actions/create-github-app-token action to v3
• [deps]: Update actions/setup-java action to v5
• [deps]: Update filesize to v11
• [deps]: Update GitHub Artifact Actions (major) (actions/download-artifact, actions/upload-artifact)
• [deps]: Update lint-staged to v16
• [deps]: Update typescript to v6
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (2)

crowdin/Dockerfile (1)

• crowdin/cli 4.14.0 → [Updates: 4.14.1]

version-bump/Dockerfile (1)

• python 3-slim

github-actions (47)

.github/templates/workflow-templates/example-references/_build.yml (4)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.2]
• actions/setup-dotnet v4.3.1@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 → [Updates: v5.2.0]
• actions/cache v5.0.1@9255dc7a253b0ccc959486e2bca901246202afeb → [Updates: v5.0.4]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.1]

.github/templates/workflow-templates/example-references/_docker.yml (4)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.2]
• Azure/login v3.0.0@532459ea530d8321f2fb9bb10d1e0bcf23869a43
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]
• docker/build-push-action v7.0.0@d08e5c354a6adb9ed34480a06d141179aa583294 → [Updates: v7.1.0]

.github/templates/workflow-templates/example-references/_test.yml (3)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.2]
• actions/setup-dotnet v4.3.1@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 → [Updates: v5.2.0]
• actions/cache v5.0.1@9255dc7a253b0ccc959486e2bca901246202afeb → [Updates: v5.0.4]

.github/templates/workflow-templates/example-references/_version.yml (1)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.2]

.github/templates/workflow-templates/example.yaml (1)

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v5.0.1, v6.0.2]

.github/workflows/_check-permission.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• bitwarden/gh-actions main

.github/workflows/_checkmarx.yml (6)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• checkmarx/ast-github-action 2.3.33@c52fa63dbd4916520882e10456d66ff4dd7bf754 → [Updates: 2.3.34]
• github/codeql-action v4.31.11@19b2f06db2b6f5108140aeb04014ef02b648f789 → [Updates: v4.35.1]

.github/workflows/_cherry-pick.yml (7)

• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• actions/create-github-app-token v2.1.4@67018539274d69449ef7c02e8e71183d1719ab42 → [Updates: v2.2.2, v3.1.1]
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]

.github/workflows/_enforce-labels.yml

.github/workflows/_ephemeral_environment_manager.yml (11)

• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main

.github/workflows/_publish-mobile-github-release.yml (6)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]
• ruby/setup-ruby v1.286.0@90be1154f987f4dc0fe0dd0feedac9e473aa4ba8 → [Updates: v1.300.0]
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.1]

.github/workflows/_respond.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• anthropics/claude-code-action v1.0.99@c3d45e8e941e1b2ad7b278c57482d9c5bf1f35b3 → [Updates: v1.0.101]

.github/workflows/_review-code.yml (1)

• bitwarden/gh-actions main

.github/workflows/_sonar.yml (7)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• sonarsource/sonarqube-scan-action v7.0.0@a31c9398be7ace6bbfaf30c0bd5d415f843d45e9 → [Updates: v7.1.0]
• actions/setup-java v4.8.0@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 → [Updates: v5.2.0]
• actions/setup-dotnet v4.3.1@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 → [Updates: v5.2.0]

.github/workflows/_version.yml (1)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]

.github/workflows/check-run.yml (1)

• actions-cool/check-user-permission v2.3.0@7b90a27f92f3961b368376107661682c441f6103 → [Updates: v2.4.0]

.github/workflows/respond.yml (1)

• bitwarden/gh-actions main

.github/workflows/review-code.yml (1)

• bitwarden/gh-actions main

.github/workflows/scan.yml (3)

• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main

.github/workflows/test-api-commit.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/test-check-permission.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/test-cherry-pick.yml (2)

• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]

.github/workflows/test-container-tag.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/test-download-artifacts.yml (9)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]

.github/workflows/test-enforce-labels.yml

.github/workflows/test-free-disk-space.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/test-get-pull-request-threads.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/test-get-secrets.yml (5)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]

.github/workflows/test-proxy-action-codecov.yml (2)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]

.github/workflows/test-release-version-check.yml (1)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]

.github/workflows/test-report-deployment-status-to-slack.yml (2)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]

.github/workflows/test-report-upcoming-release-version.yml (1)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]

.github/workflows/test-respond.yml

.github/workflows/test-review-code.yml

.github/workflows/test-update-pr-comment.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/test-version-bump.yml (1)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]

.github/workflows/test-version-check.yml (1)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]

.github/workflows/test-version.yml (2)

• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]

.github/workflows/upload-test-artifacts.yml (5)

• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.1]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.1]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.1]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.1]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.1]

.github/workflows/workflow-linter.yml (7)

• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• actions/create-github-app-token v2.1.4@67018539274d69449ef7c02e8e71183d1719ab42 → [Updates: v2.2.2, v3.1.1]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• python 3.13.7 → [Updates: 3.14.4]

api-commit/action.yml (1)

• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9.0.0]

azure-login/action.yml (1)

• Azure/login v3.0.0@532459ea530d8321f2fb9bb10d1e0bcf23869a43

proxy-actions/codecov/action.yml (1)

• codecov/codecov-action v6.0.0@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2

report-deployment-status-to-slack/action.yml (4)

• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• slackapi/slack-github-action v3.0.1@af78098f536edbc4de71162a307590698245be95

report-upcoming-release-version/action.yml (4)

• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• slackapi/slack-github-action v3.0.1@af78098f536edbc4de71162a307590698245be95

run-code-review/action.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• anthropics/claude-code-action v1.0.99@c3d45e8e941e1b2ad7b278c57482d9c5bf1f35b3 → [Updates: v1.0.101]
• bitwarden/gh-actions main

setup-docker-trust/action.yml (4)

• Azure/login v3.0.0@532459ea530d8321f2fb9bb10d1e0bcf23869a43
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main

npm (3)

download-artifacts/package.json (5)

• @actions/artifact 5.0.1 → [Updates: 5.0.3, 6.2.1]
• @actions/core 3.0.0
• @actions/github 7.0.0 → [Updates: 9.1.0]
• adm-zip 0.5.12 → [Updates: 0.5.17]
• filesize 10.1.1 → [Updates: 10.1.6, 11.0.15]

get-keyvault-secrets/package.json (6)

• @actions/core 3.0.0
• @azure/identity 4.13.1
• @azure/keyvault-secrets 4.10.0 → [Updates: 4.11.1]
• @types/node 25.5.0 → [Updates: 25.6.0]
• @vercel/ncc 0.38.4
• typescript 5.9.3 → [Updates: 6.0.2]

package.json (3)

• husky 9.0.11 → [Updates: 9.1.7]
• lint-staged 15.2.2 → [Updates: 15.5.2, 16.4.0]
• prettier 3.2.5 → [Updates: 3.8.2]

nuget (1)

version-bump/tests/fixtures/test.csproj (22)

• VaultSharp [1.17.5.1]
• Serilog.Sinks.File [7.0.0]
• Serilog.Sinks.Console [6.1.1]
• Serilog.Settings.Configuration [10.0.0]
• Serilog.AspNetCore [10.0.0]
• Pomelo.EntityFrameworkCore.MySql [9.0.0]
• Pkcs11Interop [5.3.0]
• Npgsql.EntityFrameworkCore.PostgreSQL [10.0.0] → [Updates: [10.0.1]]
• MongoDB.Driver [3.5.0] → [Updates: [3.7.1]]
• Microsoft.EntityFrameworkCore.SqlServer [10.0.1] → [Updates: [10.0.5]]
• Microsoft.EntityFrameworkCore.Sqlite [10.0.1] → [Updates: [10.0.5]]
• Microsoft.EntityFrameworkCore.Relational [10.0.1] → [Updates: [10.0.5]]
• Microsoft.EntityFrameworkCore.Design [10.0.1] → [Updates: [10.0.5]]
• JsonFlatFileDataStore [2.4.2]
• IdentityServer4.AccessTokenValidation [3.0.1]
• Google.Cloud.Kms.V1 [3.20.0] → [Updates: [3.23.0]]
• Azure.Storage.Blobs [12.26.0] → [Updates: [12.27.0]]
• Azure.Security.KeyVault.Secrets [4.8.0] → [Updates: [4.9.0]]
• Azure.Security.KeyVault.Keys [4.8.0] → [Updates: [4.9.0]]
• Azure.Security.KeyVault.Certificates [4.8.0]
• Azure.Identity [1.17.0] → [Updates: [1.21.0]]
• AWSSDK.KeyManagementService [4.0.7] → [Updates: [4.0.9.11]]

regex (1)

proxy-actions/codecov/action.yml (1)

• getsentry/prevent-cli v11.2.8

---

• Check this box to trigger a request for Renovate to run again on this repository