Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/woodpecker-ci/woodpecker). ## Rate-Limited The following updates are currently rate-limited. To force their creation now, click on a checkbox below. - [ ] Update web npm deps non-major (`@types/node`, `@vitejs/plugin-vue`, `@vue/compiler-sfc`, `@vue/test-utils`, `eslint`, `jsdom`, `pnpm`, `prettier`, `vitest`, `vue`, `vue-i18n`) - [ ] Update dependency mvdan/gofumpt to v0.12.0 - [ ] Update dependency @vueuse/core to v15 - [ ] Update dependency dotenv to v18 - [ ] Update module github.com/google/go-github/v91 to v92 - [ ] Update module gitlab.com/gitlab-org/api/client-go/v2 to v3 - [ ] Lock file maintenance - [ ] **Create all rate-limited PRs at once** ## PR Edited (Blocked) The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below. - [ ] [Update golangci/golangci-lint Docker tag to v2.13.2](../pull/7057) - [ ] [Update dependency typescript to v7](../pull/6837) ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [Update docs npm deps non-major](../pull/7163) (`@types/node`, `pnpm`, `prettier`) - [ ] [Update golang-packages](../pull/7147) (`github.com/docker/cli`, `github.com/urfave/cli/v3`, `github.com/yaronf/httpsign`, `google.golang.org/grpc`) - [ ] [Update pre-commit hook rbubley/mirrors-prettier to v3.9.8](../pull/7164) - [ ] **Click on this checkbox to rebase all open PRs at once** ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] [Update module github.com/swaggo/files to v2](../pull/2731) ## Detected Dependencies docker-compose (2)

docker-compose.example.yaml (2) - `woodpeckerci/woodpecker-server v3` - `woodpeckerci/woodpecker-agent v3` docker-compose.gitpod.yaml (2) - `postgres 18.6-alpine` - `gitea/gitea 1.27`

dockerfile (7)

docker/Dockerfile.agent.alpine.multiarch (2) - `docker.io/golang 1.27` - `docker.io/alpine 3.24` docker/Dockerfile.agent.multiarch (1) - `docker.io/golang 1.27` docker/Dockerfile.cli.alpine.multiarch.rootless (2) - `docker.io/golang 1.27` - `docker.io/alpine 3.24` docker/Dockerfile.cli.multiarch.rootless (1) - `docker.io/golang 1.27` docker/Dockerfile.make (2) - `docker.io/golang 1.27-alpine` - `docker.io/node 24-alpine` docker/Dockerfile.server.alpine.multiarch.rootless (1) - `docker.io/alpine 3.24` docker/Dockerfile.server.multiarch.rootless (1) - `docker.io/golang 1.27`

gomod (1)

go.mod (72) - `go 1.26.0` - `al.essio.dev/pkg/shellescape v1.6.1` - `charm.land/huh/v2 v2.0.3` - `code.gitea.io/sdk/gitea v0.25.1` - `codeberg.org/6543/go-yaml2json/v2 v2.0.0` - `codeberg.org/6543/xyaml/v2 v2.0.1` - `codeberg.org/mvdkleijn/forgejo-sdk/forgejo/v3 v3.0.0` - `github.com/6543/logfile-open v1.2.1` - `github.com/adrg/xdg v0.5.3` - `github.com/bmatcuk/doublestar/v4 v4.10.0` - `github.com/cenkalti/backoff/v7 v7.0.0` - `github.com/containerd/errdefs v1.0.0` - `github.com/distribution/reference v0.6.0` - `github.com/docker/cli v29.8.0+incompatible` → [Updates: `v29.8.1+incompatible`] - `github.com/docker/go-connections v0.8.1` - `github.com/docker/go-units v0.5.0` - `github.com/drone/envsubst v1.0.3` - `github.com/expr-lang/expr v1.17.8` - `github.com/fsnotify/fsnotify v1.10.1` - `github.com/gdgvda/cron v0.7.0` - `github.com/getkin/kin-openapi v0.149.0` - `github.com/gin-gonic/gin v1.12.0` - `github.com/gitsight/go-vcsurl v1.0.1` - `github.com/go-sql-driver/mysql v1.10.1` - `github.com/go-viper/mapstructure/v2 v2.5.0` - `github.com/golang-jwt/jwt/v5 v5.3.1` - `github.com/google/go-github/v91 v91.0.0` → [Updates: `v92.0.0`] - `github.com/hashicorp/go-hclog v1.6.3` - `github.com/hashicorp/go-plugin v1.8.0` - `github.com/jellydator/ttlcache/v3 v3.4.1` - `github.com/joho/godotenv v1.5.1` - `github.com/kinbiko/jsonassert v1.2.0` - `github.com/lib/pq v1.12.3` - `github.com/mattn/go-sqlite3 v1.14.52` - `github.com/migueleliasweb/go-github-mock v1.5.0` - `github.com/moby/moby/api v1.56.0` - `github.com/moby/moby/client v0.6.0` - `github.com/moby/term v0.5.2` - `github.com/muesli/termenv v0.16.0` - `github.com/neticdk/go-bitbucket v1.0.5` - `github.com/oklog/ulid/v2 v2.1.2` - `github.com/prometheus/client_golang v1.24.1` - `github.com/rs/zerolog v1.35.1` - `github.com/stretchr/testify v1.12.1` - `github.com/swaggo/files v1.0.1` → [Updates: `v2.0.2`] - `github.com/swaggo/gin-swagger v1.6.1` - `github.com/swaggo/swag v1.16.6` - `github.com/tink-crypto/tink-go/v2 v2.8.0` - `github.com/urfave/cli-docs/v3 v3.1.1-0.20251022123016-72b87d11c482@72b87d11c482` - `github.com/urfave/cli/v3 v3.11.0` → [Updates: `v3.12.0`] - `github.com/xeipuuv/gojsonschema v1.2.0` - `github.com/yaronf/httpsign v0.5.2` → [Updates: `v0.6.1`] - `github.com/zalando/go-keyring v0.2.8` - `gitlab.com/gitlab-org/api/client-go/v2 v2.64.0` → [Updates: `v3.12.0`] - `go.uber.org/multierr v1.11.0` - `go.yaml.in/yaml/v4 v4.0.0-rc.6` - `golang.org/x/image v0.46.0` - `golang.org/x/net v0.59.0` - `golang.org/x/oauth2 v0.37.0` - `golang.org/x/sync v0.23.0` - `golang.org/x/term v0.46.0` - `golang.org/x/text v0.42.0` - `google.golang.org/grpc v1.83.2` → [Updates: `v1.84.0`] - `google.golang.org/protobuf v1.36.12` - `gopkg.in/yaml.v3 v3.0.1` - `k8s.io/api v0.37.0` - `k8s.io/apimachinery v0.37.0` - `k8s.io/client-go v0.37.0` - `sigs.k8s.io/yaml v1.6.0` - `src.techknowlogick.com/xormigrate v1.7.1` - `xorm.io/builder v0.3.13` - `xorm.io/xorm v1.4.1`

npm (5)

docs/package.json (21) - `@docusaurus/core ^3.10.1` - `@docusaurus/faster ^3.10.1` - `@docusaurus/plugin-content-blog ^3.10.1` - `@docusaurus/preset-classic ^3.10.1` - `@easyops-cn/docusaurus-search-local ^0.55.1` - `clsx ^2.1.1` - `prism-react-renderer ^2.4.1` - `react ^19.2.4` - `react-dom ^19.2.4` - `redocusaurus ^2.5.0` - `@docusaurus/module-type-aliases ^3.10.1` - `@docusaurus/tsconfig 3.10.2` - `@docusaurus/types ^3.10.1` - `@ianvs/prettier-plugin-sort-imports ^4.7.1` - `@types/node ^25.3.3` → [Updates: `^25.3.3`] - `@types/react ^19.2.14` - `@types/react-helmet ^6.1.11` - `@types/react-router-dom ^5.3.3` - `prettier ^3.8.1` → [Updates: `^3.8.1`] - `typescript ^5.9.3` → [Updates: `^7.0.0`] - `pnpm 12.4.1` → [Updates: `12.4.2`] docs/plugins/woodpecker-plugins/package.json (16) - `fuse.js ^7.1.0` - `yaml ^2.8.2` - `@docusaurus/module-type-aliases ^3.9.2` - `@docusaurus/theme-classic ^3.9.2` - `@docusaurus/types ^3.9.2` - `@tsconfig/docusaurus ^2.0.7` - `@types/node ^24.10.9` → [Updates: `^24.10.9`] - `axios ^1.13.4` - `concurrently ^10.0.0` - `isomorphic-dompurify ^4.0.0` - `marked ^18.0.0` - `slugify ^1.6.6` - `tslib ^2.8.1` - `typescript ^5.9.3` → [Updates: `^7.0.0`] - `react ^17.0.2 || ^18.0.0 || ^19.0.0` - `react-dom ^17.0.2 || ^18.0.0 || ^19.0.0` docs/pnpm-workspace.yaml (5) - `serialize-javascript ^7.0.5` - `uuid ^14.0.0` - `brace-expansion ^5.0.0` - `qs ^6.16.0` - `image-size ^2.1.1` web/package.json (48) - `@kyvg/vue3-notification ^3.4.2` - `@mdi/js ^7.4.47` - `@vueuse/core ^14.2.1` → [Updates: `^15.0.0`] - `ansi_up ^6.0.6` - `dompurify ^3.4.11` - `fuse.js ^7.3.0` - `js-base64 ^3.7.8` - `marked ^18.0.0` - `node-emoji ^2.2.0` - `pinia ^4.0.0` - `prismjs ^1.30.0` - `semver ^7.7.4` - `simple-icons ^16.16.0` - `tailwindcss ^4.2.2` - `vue ^3.5.32` → [Updates: `^3.5.32`] - `vue-i18n ^11.3.2` → [Updates: `^11.3.2`] - `vue-router ^5.0.4` - `@antfu/eslint-config ^9.0.0` - `@eslint/js ^10.0.1` - `@ianvs/prettier-plugin-sort-imports ^4.7.1` - `@intlify/eslint-plugin-vue-i18n 4.5.1` - `@intlify/unplugin-vue-i18n ^11.0.7` - `@tailwindcss/typography ^0.5.19` - `@tailwindcss/vite 4.3.3` - `@types/node ^24.12.2` → [Updates: `^24.12.2`] - `@types/prismjs ^1.26.6` - `@types/semver ^7.7.1` - `@types/tinycolor2 ^1.4.6` - `@vitejs/plugin-vue ^6.0.6` → [Updates: `^6.0.6`] - `@vue/compiler-sfc ^3.5.32` → [Updates: `^3.5.32`] - `@vue/test-utils ^2.4.6` → [Updates: `^2.4.6`] - `dotenv ^17.4.2` → [Updates: `^18.0.0`] - `eslint ^10.2.0` → [Updates: `^10.2.0`] - `eslint-plugin-promise ^7.2.1` - `eslint-plugin-vue-scoped-css ^3.0.0` - `jsdom ^30.0.0` → [Updates: `^30.0.0`] - `prettier ^3.8.3` → [Updates: `^3.8.3`] - `prettier-plugin-tailwindcss ^0.8.0` - `tinycolor2 ^1.6.0` - `ts-node ^10.9.2` - `typescript 6.0.3` → [Updates: `7.0.2`] - `vite ^8.0.5` - `vite-plugin-prismjs ^0.0.11` - `vite-svg-loader ^5.1.1` - `vitest ^5.0.0` → [Updates: `^5.0.0`] - `vue-tsc ^3.2.6` - `node >=20` - `pnpm 12.4.1` → [Updates: `12.4.2`] web/pnpm-workspace.yaml

pre-commit (1)

.pre-commit-config.yaml (7) - `pre-commit/pre-commit-hooks v6.0.0` - `golangci/golangci-lint v2.13.2` - `igorshubovych/markdownlint-cli v0.49.1` - `mrtazz/checkmake v0.3.2` - `hadolint/hadolint v2.15.1` - `rbubley/mirrors-prettier v3.9.6` → [Updates: `v3.9.8`] - `adrienverge/yamllint v1.38.0`

regex (2)

Makefile (3) - `mvdan/gofumpt v0.11.0` → [Updates: `v0.12.0`] - `golangci/golangci-lint v2.12.2` → [Updates: `v2.13.2`] - `docker.io/techknowlogick/xgo go-1.27.x` shared/constant/constant.go (1) - `woodpeckerci/plugin-git 2.10.1`

renovate-config (1)

.github/renovate.json

woodpecker (10)

.woodpecker/binaries.yaml (10) - `docker.io/node 24-alpine` - `docker.io/golang 1.27` - `docker.io/techknowlogick/xgo go-1.27.x` - `docker.io/golang 1.27` - `docker.io/golang 1.27` - `docker.io/golang 1.27` - `docker.io/golang 1.27` - `docker.io/golang 1.27` - `docker.io/golang 1.27` - `woodpeckerci/plugin-release 0.3.1` .woodpecker/docker.yaml (22) - `docker.io/golang 1.27` - `docker.io/node 24-alpine` - `docker.io/techknowlogick/xgo go-1.27.x` - `docker.io/techknowlogick/xgo go-1.27.x` - `docker.io/woodpeckerci/plugin-docker-buildx 6.1.1` - `docker.io/woodpeckerci/plugin-docker-buildx 6.1.1` - `docker.io/woodpeckerci/plugin-docker-buildx 6.1.1` - `docker.io/woodpeckerci/plugin-docker-buildx 6.1.1` - `docker.io/woodpeckerci/plugin-docker-buildx 6.1.1` - `docker.io/woodpeckerci/plugin-docker-buildx 6.1.1` - `docker.io/woodpeckerci/plugin-docker-buildx 6.1.1` - `docker.io/woodpeckerci/plugin-docker-buildx 6.1.1` - `docker.io/woodpeckerci/plugin-docker-buildx 6.1.1` - `docker.io/woodpeckerci/plugin-docker-buildx 6.1.1` - `docker.io/woodpeckerci/plugin-docker-buildx 6.1.1` - `docker.io/woodpeckerci/plugin-docker-buildx 6.1.1` - `docker.io/woodpeckerci/plugin-docker-buildx 6.1.1` - `docker.io/woodpeckerci/plugin-docker-buildx 6.1.1` - `docker.io/woodpeckerci/plugin-docker-buildx 6.1.1` - `docker.io/woodpeckerci/plugin-docker-buildx 6.1.1` - `docker.io/woodpeckerci/plugin-docker-buildx 6.1.1` - `docker.io/woodpeckerci/plugin-docker-buildx 6.1.1` .woodpecker/docs.yaml (10) - `docker.io/node 24-alpine` - `docker.io/node 24-alpine` - `docker.io/golang 1.27` - `docker.io/node 24-alpine` - `docker.io/woodpeckerci/plugin-surge-preview 1.4.2` - `docker.io/alpine 3.24` - `docker.io/alpine 3.24` - `docker.io/alpine 3.24` - `docker.io/alpine 3.24` - `docker.io/alpine 3.24` .woodpecker/links.yaml (2) - `docker.io/lycheeverse/lychee 0.24.2` - `docker.io/alpine 3.24` .woodpecker/release-helper.yaml (1) - `docker.io/woodpeckerci/plugin-ready-release-go 4.1.2` .woodpecker/securityscan.yaml (4) - `docker.io/woodpeckerci/plugin-trivy 1.6.0` - `docker.io/woodpeckerci/plugin-trivy 1.6.0` - `docker.io/woodpeckerci/plugin-trivy 1.6.0` - `docker.io/woodpeckerci/plugin-trivy 1.6.0` .woodpecker/social.yaml .woodpecker/static.yaml (3) - `docker.io/woodpeckerci/plugin-editorconfig-checker 0.3.3` - `docker.io/node 24-alpine` - `docker.io/alpine 3.24` .woodpecker/test.yaml (15) - `docker.io/golang 1.27` - `docker.io/golang 1.27` - `docker.io/golang 1.27` - `golangci/golangci-lint v2.12.2` → [Updates: `v2.13.2`] - `docker.io/golang 1.27` - `docker.io/golang 1.27` - `docker.io/golang 1.27` - `docker.io/golang 1.27` - `docker.io/golang 1.27` - `docker.io/golang 1.27` - `docker.io/golang 1.27` - `docker.io/golang 1.27` - `docker.io/woodpeckerci/plugin-codecov 2.3.2` - `docker.io/postgres 18` - `docker.io/mysql 26.7.0` .woodpecker/web.yaml (5) - `docker.io/node 24-alpine` - `docker.io/node 24-alpine` - `docker.io/node 24-alpine` - `docker.io/node 24-alpine` - `docker.io/node 24-alpine`

--- - [ ] Check this box to trigger a request for Renovate to run again on this repository