Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update Rust crate fastcdc to v5

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency @biomejs/biome to v2
• Update dependency bazel to v9
• Update dependency motion to v13
• Update dependency rules_java to v9
• Update dependency sigstore/cosign to v3
• Update dependency typescript to v7
• Update Rust crate serial_test to v4

Detected Dependencies

bazel-module (4)

local-remote-execution/MODULE.bazel (7)

• platforms 1.1.0
• rules_cc 0.2.20 → [Updates: 0.2.22]
• rules_java 8.11.0 → [Updates: 8.16.1, 9.8.0]
• rules_rs 0.0.102 → [Updates: 0.0.106]
• llvm 0.8.15 → [Updates: 0.8.18]
• rules_rust 0.68.1 → [Updates: 0.73.0]
• bazel_skylib 1.9.0 → [Updates: 1.9.2]

MODULE.bazel (8)

• rules_cc 0.2.20 → [Updates: 0.2.22]
• platforms 1.1.0
• bazel_skylib 1.9.0 → [Updates: 1.9.2]
• rules_python 2.0.0 → [Updates: 2.3.2]
• rules_shell 0.6.1 → [Updates: 0.8.0]
• llvm 0.8.15 → [Updates: 0.8.18]
• rules_rs 0.0.102 → [Updates: 0.0.106]
• toolchains_protoc 0.4.3 → [Updates: 0.6.1]

templates/bazel/MODULE.bazel (1)

• rules_cc 0.2.8 → [Updates: 0.2.22]

toolchain-examples/MODULE.bazel (14)

• platforms 1.1.0
• rules_cc 0.2.20 → [Updates: 0.2.22]
• rules_java 9.0.3 → [Updates: 9.8.0]
• rules_python 2.0.0 → [Updates: 2.3.2]
• rules_go 0.62.0 → [Updates: 0.63.0]
• rules_rs 0.0.102 → [Updates: 0.0.106]
• llvm 0.8.15 → [Updates: 0.8.18]
• hermetic_cc_toolchain 4.0.1 → [Updates: 4.3.0]
• toolchains_llvm 1.3.0 → [Updates: 1.8.0]
• curl 8.8.0.bcr.3 → [Updates: 8.21.0.bcr.1]
• zstd 1.5.7 → [Updates: 1.5.7.bcr.1]
• abseil-cpp 20250814.1 → [Updates: 20250814.2]
• abseil-py 2.1.0 → [Updates: 2.4.0]
• circl 1.3.8

bazelisk (3)

.bazelversion (1)

• bazel 9.1.1 → [Updates: 9.2.0]

templates/bazel/.bazelversion (1)

• bazel 8.2.1 → [Updates: 8.7.0, 9.2.0]

toolchain-examples/.bazelversion (1)

• bazel 8.4.2 → [Updates: 8.7.0, 9.2.0]

bun (6)

web/apps/docs/package.json (16)

• @next/third-parties ^16.2.11
• fumadocs-core ^16
• fumadocs-mdx ^15
• fumadocs-ui ^16
• geist ^1.5.1
• mermaid ^11.4.1
• next ^16
• react ^19.0.0
• react-dom ^19.0.0
• @tailwindcss/postcss ^4.0.0
• @types/mdx ^2.0.13
• @types/node ^26.0.0
• @types/react ^19.0.7
• @types/react-dom ^19.0.3
• tailwindcss ^4.0.0
• typescript ^6.0.0 → [Updates: ^7.0.0]

web/apps/web/package.json (17)

• @mdx-js/loader ^3.1.0
• @mdx-js/react ^3.1.0
• @next/mdx ^16
• @next/third-parties ^16.2.11
• geist ^1.5.1
• marked ^18.0.0
• motion ^12.0.0 → [Updates: ^13.0.0]
• next ^16
• react ^19.0.0
• react-dom ^19.0.0
• @tailwindcss/postcss ^4.0.0
• @types/mdx ^2.0.13
• @types/node ^26.0.0
• @types/react ^19.0.7
• @types/react-dom ^19.0.3
• tailwindcss ^4.0.0
• typescript ^6.0.0 → [Updates: ^7.0.0]

web/package.json (4)

• @biomejs/biome 1.9.4 → [Updates: 2.5.10]
• turbo ^2.3.0
• typescript ^6.0.0 → [Updates: ^7.0.0]
• node >=20

web/packages/config/package.json

web/packages/tokens/package.json

web/packages/ui/package.json (10)

• @radix-ui/react-slot ^1.1.1
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• motion ^12.0.0 → [Updates: ^13.0.0]
• tailwind-merge ^3.0.0
• @types/react ^19.0.0
• @types/react-dom ^19.0.0
• typescript ^6.0.0 → [Updates: ^7.0.0]
• react ^19.0.0
• react-dom ^19.0.0

cargo (16)

Cargo.toml (17)

• async-lock 3.4.0 → [Updates: 3.4.0]
• axum 0.8.3 → [Updates: 0.8.3]
• bytes 1.10.1 → [Updates: 1.10.1]
• clap 4.5.35 → [Updates: 4.5.35]
• futures 0.3.31 → [Updates: 0.3.31]
• hex 0.4.3
• hyper 1.6.0 → [Updates: 1.6.0]
• hyper-util 0.1.11 → [Updates: 0.1.11]
• mimalloc 0.1.48 → [Updates: 0.1.48]
• rand 0.9.0 → [Updates: 0.10.0]
• rustls-pki-types 1.13.1 → [Updates: 1.13.1]
• sha2 0.10.8 → [Updates: 0.11.0]
• tokio 1.52.2 → [Updates: 1.52.2]
• tokio-rustls 0.26.2
• tonic 0.14.0
• tower 0.5.2 → [Updates: 0.5.2]
• tracing 0.1.41

nativelink-config/Cargo.toml (12)

• byte-unit 5.1.6 → [Updates: 5.1.6]
• humantime 2.3.0 → [Updates: 2.3.0]
• rand 0.9.0 → [Updates: 0.10.0]
• schemars 1.2.1 → [Updates: 1.2.1]
• serde 1.0.219 → [Updates: 1.0.219]
• serde_json 1.0.140 → [Updates: 1.0.140]
• serde_json5 0.2.1
• shellexpand 3.1.0 → [Updates: 3.1.0]
• tracing 0.1.41
• pretty_assertions 1.4.1
• serde_test 1.0
• tracing-test 0.2.5 → [Updates: 0.2.5]

nativelink-config/generate-stores-config/Cargo.toml (1)

• regex 1.11.3 → [Updates: 1.11.3]

nativelink-error/Cargo.toml (16)

• base64 0.22.1 → [Updates: 0.23.0]
• mongodb 3 → [Updates: 3]
• prost 0.14.4
• prost-types 0.14.4
• redis 1.0.0 → [Updates: 1.0.0]
• reqwest 0.13
• rustls-pki-types 1.13.1 → [Updates: 1.13.1]
• serde 1.0.219 → [Updates: 1.0.219]
• serde_json5 0.2.1
• tokio 1.52.2 → [Updates: 1.52.2]
• tonic 0.14.0
• url 2.5.7
• uuid 1.16.0 → [Updates: 1.16.0]
• walkdir 2.5.0
• zip 8.0.0
• tracing 0.1.41

nativelink-macro/Cargo.toml (3)

• proc-macro2 1.0.94 → [Updates: 1.0.94]
• quote 1.0.40 → [Updates: 1.0.40]
• syn 3.0.0 → [Updates: 3.0.0]

nativelink-metric/Cargo.toml (4)

• async-lock 3.4.0 → [Updates: 3.4.0]
• parking_lot 0.12.3
• tokio 1.52.2 → [Updates: 1.52.2]
• tracing 0.1.41

nativelink-metric/nativelink-metric-macro-derive/Cargo.toml (3)

• proc-macro2 1.0.94 → [Updates: 1.0.94]
• quote 1.0.40 → [Updates: 1.0.40]
• syn 3.0.0 → [Updates: 3.0.0]

nativelink-proto/Cargo.toml (6)

• derive_more 2.0.1 → [Updates: 2.0.1]
• prost 0.14.4
• prost-types 0.14.4
• tonic 0.14.0
• tonic-prost 0.14.6
• tonic-prost-build 0.14.0

nativelink-redis-tester/Cargo.toml (6)

• either 1.15.0 → [Updates: 1.15.0]
• redis 1.0.0 → [Updates: 1.0.0]
• redis-protocol 6.0.0
• redis-test 1.0.0 → [Updates: 1.0.0]
• tokio 1.52.2 → [Updates: 1.52.2]
• tracing 0.1.41

nativelink-scheduler/Cargo.toml (24)

• async-lock 3.4.0 → [Updates: 3.4.0]
• async-trait 0.1.88 → [Updates: 0.1.88]
• bytes 1.10.1 → [Updates: 1.10.1]
• futures 0.3.31 → [Updates: 0.3.31]
• humantime 2.3.0 → [Updates: 2.3.0]
• lru 0.18.0
• mock_instant 0.5.3 → [Updates: 0.6.0]
• opentelemetry 0.32.0
• opentelemetry-semantic-conventions 0.32.0
• parking_lot 0.12.3
• prost 0.14.4
• redis 1.0.0 → [Updates: 1.0.0]
• scopeguard 1.2.0
• serde 1.0.219 → [Updates: 1.0.219]
• serde_json 1.0.140 → [Updates: 1.0.140]
• static_assertions 1.1.0
• tokio 1.52.2 → [Updates: 1.52.2]
• tokio-stream 0.1.17 → [Updates: 0.1.17]
• tonic 0.14.0
• tracing 0.1.41
• uuid 1.16.0 → [Updates: 1.16.0]
• pretty_assertions 1.4.1
• tokio 1.52.2 → [Updates: 1.52.2]
• tracing-test 0.2.5 → [Updates: 0.2.5]

nativelink-service/Cargo.toml (32)

• axum 0.8.3 → [Updates: 0.8.3]
• bytes 1.10.1 → [Updates: 1.10.1]
• fastcdc 3.2.1 → [Updates: 5.0.0]
• futures 0.3.31 → [Updates: 0.3.31]
• http-body-util 0.1.3 → [Updates: 0.1.3]
• hyper 1.6.0 → [Updates: 1.6.0]
• opentelemetry 0.32.0
• opentelemetry-semantic-conventions 0.32.0
• parking_lot 0.12.3
• prost 0.14.4
• prost-types 0.14.4
• rand 0.9.0 → [Updates: 0.10.0]
• serde_json5 0.2.1
• tokio 1.52.2 → [Updates: 1.52.2]
• tokio-stream 0.1.17 → [Updates: 0.1.17]
• tokio-util 0.7.14 → [Updates: 0.7.14]
• tonic 0.14.0
• tower 0.5.2 → [Updates: 0.5.2]
• tracing 0.1.41
• uuid 1.16.0 → [Updates: 1.16.0]
• zstd 0.13.3
• async-lock 3.4.0 → [Updates: 3.4.0]
• async-trait 0.1.88 → [Updates: 0.1.88]
• hex 0.4.3
• hyper 1.6.0 → [Updates: 1.6.0]
• hyper-util 0.1.11 → [Updates: 0.1.11]
• pretty_assertions 1.4.1
• serde_json 1.0.140 → [Updates: 1.0.140]
• sha2 0.10.8 → [Updates: 0.11.0]
• tokio 1.52.2 → [Updates: 1.52.2]
• tonic-prost 0.14.6
• tracing-test 0.2.5 → [Updates: 0.2.5]

nativelink-store/Cargo.toml (72)

• async-lock 3.4.0 → [Updates: 3.4.0]
• async-trait 0.1.88 → [Updates: 0.1.88]
• aws-config 1.6.1 → [Updates: 1.6.1]
• aws-sdk-s3 1.82.0 → [Updates: 1.82.0]
• aws-smithy-runtime-api 1.7.4 → [Updates: 1.7.4]
• aws-smithy-types 1.3.0 → [Updates: 1.3.0]
• azure_identity 1
• azure_storage_blob 1
• base64 0.22.1 → [Updates: 0.23.0]
• blake3 1.8.0 → [Updates: 1.8.0]
• byteorder 1.5.0
• bytes 1.10.1 → [Updates: 1.10.1]
• const_format 0.2.34 → [Updates: 0.2.34]
• futures 0.3.31 → [Updates: 0.3.31]
• gcloud-auth 1.3
• gcloud-storage 1.3
• hex 0.4.3
• http 1.3.1 → [Updates: 1.3.1]
• http-body 1.0.1 → [Updates: 1.0.1]
• http-body-util 0.1.3 → [Updates: 0.1.3]
• humantime 2.3.0 → [Updates: 2.3.0]
• hyper 1.6.0 → [Updates: 1.6.0]
• hyper-rustls 0.27.5 → [Updates: 0.27.5]
• hyper-util 0.1.11 → [Updates: 0.1.11]
• itertools 0.14.0 → [Updates: 0.15.0]
• lz4_flex 0.11.3 → [Updates: 0.14.0]
• mongodb 3 → [Updates: 3]
• opentelemetry 0.32.0
• parking_lot 0.12.3
• patricia_tree 0.9.0 → [Updates: 0.10.0]
• prost 0.14.4
• rand 0.9.0 → [Updates: 0.10.0]
• redis 1.0.0 → [Updates: 1.0.0]
• regex 1.11.1 → [Updates: 1.11.1]
• reqwest 0.13
• reqwest-middleware 0.5
• rustls 0.23.27 → [Updates: 0.23.27]
• rustls-pki-types 1.13.1 → [Updates: 1.13.1]
• serde 1.0.219 → [Updates: 1.0.219]
• serde_json 1.0.140 → [Updates: 1.0.140]
• sha2 0.10.8 → [Updates: 0.11.0]
• tokio 1.52.2 → [Updates: 1.52.2]
• tokio-stream 0.1.17 → [Updates: 0.1.17]
• tokio-util 0.7.14 → [Updates: 0.7.14]
• tonic 0.14.0
• tracing 0.1.41
• url 2.5.7
• uuid 1.16.0 → [Updates: 1.16.0]
• webpki-roots 1 → [Updates: 1]
• wincode 0.5.4 → [Updates: 0.6.0]
• aws-sdk-s3 1.82.0 → [Updates: 1.82.0]
• aws-smithy-http-client 1.1.13 → [Updates: 1.1.13]
• aws-smithy-runtime-api 1.7.4 → [Updates: 1.7.4]
• aws-smithy-types 1.3.0 → [Updates: 1.3.0]
• dirs 6.0.0
• flate2 1.1.9
• fs-set-times 0.20.3
• futures 0.3.31 → [Updates: 0.3.31]
• http 1.3.1 → [Updates: 1.3.1]
• libc 0.2.177 → [Updates: 0.2.177]
• memory-stats 1.2.0
• mock_instant 0.5.3 → [Updates: 0.6.0]
• pretty_assertions 1.4.1
• rand 0.9.0 → [Updates: 0.10.0]
• redis-test 1.0.0 → [Updates: 1.0.0]
• rlimit 0.10.2 → [Updates: 0.11.0]
• serde_json 1.0.140 → [Updates: 1.0.140]
• tar 0.4.44
• tempfile 3.8.1 → [Updates: 3.8.1]
• tracing-test 0.2.5 → [Updates: 0.2.5]
• zip 8.0.0
• libc 0.2.177 → [Updates: 0.2.177]

nativelink-test/fuzz/Cargo.toml (2)

• libfuzzer-sys 0.4
• serde_json5 0.2.1

nativelink-util/Cargo.toml (55)

• async-trait 0.1.88 → [Updates: 0.1.88]
• base64 0.22.1 → [Updates: 0.23.0]
• bitflags 2.9.0 → [Updates: 2.9.0]
• blake3 1.8.0 → [Updates: 1.8.0]
• bytes 1.10.1 → [Updates: 1.10.1]
• futures 0.3.31 → [Updates: 0.3.31]
• hex 0.4.3
• humantime 2.3.0 → [Updates: 2.3.0]
• hyper 1.6.0 → [Updates: 1.6.0]
• hyper-util 0.1.11 → [Updates: 0.1.11]
• libc 0.2.177 → [Updates: 0.2.177]
• lru 0.18.0
• mock_instant 0.5.3 → [Updates: 0.6.0]
• opentelemetry 0.32.0
• opentelemetry-appender-tracing 0.32.0
• opentelemetry-http 0.32.0
• opentelemetry-otlp 0.32.0
• opentelemetry-semantic-conventions 0.32.0
• opentelemetry_sdk 0.32.1
• parking_lot 0.12.3
• pin-project 1.1.10 → [Updates: 1.1.10]
• pin-project-lite 0.2.16
• prost 0.14.4
• prost-types 0.14.4
• rand 0.9.0 → [Updates: 0.10.0]
• rlimit 0.10.2 → [Updates: 0.11.0]
• serde 1.0.219 → [Updates: 1.0.219]
• sha2 0.10.8 → [Updates: 0.11.0]
• tempfile 3.20.0 → [Updates: 3.20.0]
• tokio 1.52.2 → [Updates: 1.52.2]
• tokio-stream 0.1.17 → [Updates: 0.1.17]
• tokio-util 0.7.14 → [Updates: 0.7.14]
• tonic 0.14.0
• tower 0.5.2 → [Updates: 0.5.2]
• tracing 0.1.41
• tracing-opentelemetry 0.33.0
• tracing-subscriber 0.3.19
• tracing-test 0.2.5 → [Updates: 0.2.5]
• ginepro d08cdeff6300edfb46204b3b9fbde3f3355db35f → [Updates: ``]
• url 2.5.7
• uuid 1.16.0 → [Updates: 1.16.0]
• walkdir 2.5.0
• wincode 0.5.4 → [Updates: 0.6.0]
• zstd 0.13.3
• anyhow 1.0.103
• opentelemetry-proto 0.32.0
• serial_test 3.2.0 → [Updates: 4.0.0]
• axum 0.8.3 → [Updates: 0.8.3]
• http-body-util 0.1.3 → [Updates: 0.1.3]
• pretty_assertions 1.4.1
• rand 0.9.0 → [Updates: 0.10.0]
• serde_json 1.0.140 → [Updates: 1.0.140]
• tokio 1.52.2 → [Updates: 1.52.2]
• tonic-prost 0.14.6
• tracing-test 0.2.5 → [Updates: 0.2.5]

nativelink-worker/Cargo.toml (32)

• async-lock 3.4.0 → [Updates: 3.4.0]
• bytes 1.10.1 → [Updates: 1.10.1]
• dunce 1.0.5
• filetime 0.2.25 → [Updates: 0.2.25]
• formatx 0.2.3 → [Updates: 0.4.0]
• futures 0.3.31 → [Updates: 0.3.31]
• opentelemetry 0.32.0
• parking_lot 0.12.3
• prost 0.14.4
• relative-path 2.0.0
• scopeguard 1.2.0
• serde 1.0.219 → [Updates: 1.0.219]
• serde_json 1.0.140 → [Updates: 1.0.140]
• serde_json5 0.2.1
• shlex 2.0.0
• tokio 1.52.2 → [Updates: 1.52.2]
• tokio-stream 0.1.17 → [Updates: 0.1.17]
• tonic 0.14.0
• tracing 0.1.41
• uuid 1.16.0 → [Updates: 1.16.0]
• async-trait 0.1.88 → [Updates: 0.1.88]
• hyper 1.6.0 → [Updates: 1.6.0]
• pathdiff 0.2.3
• pretty_assertions 1.4.1
• prost-types 0.14.4
• serial_test 3.2.0 → [Updates: 4.0.0]
• tempfile 3.15.0 → [Updates: 3.15.0]
• tonic-prost 0.14.6
• tracing-test 0.2.5 → [Updates: 0.2.5]
• which 8.0.2 → [Updates: 8.0.2]
• libc 0.2.183 → [Updates: 0.2.183]
• libc 0.2.183 → [Updates: 0.2.183]

tools/generate-bazel-rc/Cargo.toml (1)

• toml 1.0.0 → [Updates: 1.0.0]

docker-compose (4)

deployment-examples/docker-compose/docker-compose-multi-worker.yml

deployment-examples/docker-compose/docker-compose.yml

deployment-examples/metrics/docker-compose.yaml (5)

• otel/opentelemetry-collector-contrib 0.98.0 → [Updates: 0.159.0]
• prom/prometheus v3.0.0 → [Updates: v3.14.0]
• prom/alertmanager v0.27.0 → [Updates: v0.34.0]
• prom/node-exporter v1.7.0 → [Updates: v1.12.1]
• jaegertracing/all-in-one 1.53 → [Updates: 1.60]

src/bin/docker-compose.store-tester.yaml (10)

• redis 8.4-alpine3.22
• redis 8.4-alpine3.22
• redis 8.4-alpine3.22
• redis 8.4-alpine3.22
• redis 8.4-alpine3.22
• redis 8.4-alpine3.22
• redis 8.4-alpine3.22
• redis 8.4-alpine3.22
• redis 8.4-alpine3.22
• redis 8.4-alpine3.22

dockerfile (6)

.clusterfuzzlite/Dockerfile (1)

• gcr.io/oss-fuzz-base/base-builder-rust sha256:a96c8dfb5e0b4c418a3a63c6b1acd04a13d70335fbcaa370d4e1840780a58ce6 → [Updates: undefined]

deployment-examples/docker-compose/Dockerfile (1)

• docker/dockerfile 1

deployment-examples/rhel/Dockerfile.rhel8 (2)

• redhat/ubi8 8.10-1756195303@sha256:534c2c0efa4150ede18e3f9d7480d3b9ec2a52e62bc91cd54e08ee7336819619 → [Updates: 8.10-1787257890]
• redhat/ubi8 8.10-1756195303@sha256:534c2c0efa4150ede18e3f9d7480d3b9ec2a52e62bc91cd54e08ee7336819619 → [Updates: 8.10-1787257890]

tools/toolchain-buck2/Dockerfile

tools/toolchain-drake/Dockerfile

tools/toolchain-nativelink/Dockerfile

github-actions (18)

.github/workflows/clusterfuzzlite.yaml

.github/workflows/codeql.yaml

.github/workflows/config-reference.yaml

.github/workflows/coverage.yaml

.github/workflows/custom-image.yaml

.github/workflows/docs-lint.yaml

.github/workflows/image.yaml (1)

• registry 3

.github/workflows/main.yaml

.github/workflows/native-bazel.yaml (1)

• hoverkraft-tech/compose-action v3.0.0@11beaa1c2dae4e8ed7b1665aa074723b6cecb0e4 → [Updates: v3.1.0]

.github/workflows/nativelink-cloud-canary.yaml

.github/workflows/nix.yaml

.github/workflows/pr-template-check.yaml

.github/workflows/pre-commit.yaml

.github/workflows/release.yaml (2)

• slsa-framework/slsa-github-generator v2.1.0
• sigstore/cosign v2.5.3 → [Updates: v2.6.5, v3.1.3]

.github/workflows/scorecard.yaml

.github/workflows/tagged_image.yaml

.github/workflows/vale.yaml

templates/bazel/.github/workflows/git-hooks.yaml

kustomize (4)

deploy/lre-manual/kustomization.yaml

kubernetes/workers/lre-cc/kustomization.yaml

kubernetes/workers/lre-rs/kustomization.yaml

kubernetes/workers/siso-chromium/kustomization.yaml

---

• Check this box to trigger a request for Renovate to run again on this repository