Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (2)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
npm	cli-real-favicon	2024-05-13
pre-commit	pre-commit/pre-commit-hooks	2025-08-09

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update github/codeql-action action to v4.37.7

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update pnpm to v11
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (3)

.github/workflows/codeql.yml (4)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• github/codeql-action v4.37.6@5595ccaf912efad79be6eef63a5619ff05969be3 → [Updates: v4.37.7]
• github/codeql-action v4.37.6@5595ccaf912efad79be6eef63a5619ff05969be3 → [Updates: v4.37.7]

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294

.github/workflows/scorecard.yml (5)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.37.6@5595ccaf912efad79be6eef63a5619ff05969be3 → [Updates: v4.37.7]

npm (3)

brands/grendel-consulting/package.json (3)

• cli-real-favicon 0.0.9
• node >=18
• pnpm >=7

package.json (9)

• turbo 2.10.9
• node >=20
• pnpm >=10
• pnpm 10.34.5 → [Updates: 11.21.0]
• axios@>=0.8.1 <0.28.0 >=0.28.0
• follow-redirects@<=1.15.5 >=1.15.6
• follow-redirects@<1.15.4 >=1.15.4
• isarray ^1
• safer-buffer ^1

pnpm-workspace.yaml

pre-commit (1)

.pre-commit-config.yaml (2)

• gitleaks/gitleaks v8.30.1
• pre-commit/pre-commit-hooks v6.0.0

---

• Check this box to trigger a request for Renovate to run again on this repository