Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (3)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
cargo	dotenvy	2023-03-22
cargo	envy	2021-01-04
cargo	validator	2025-01-20

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update postgres:latest Docker digest to 29ee7bb
• Update rust version
• Update cargo non-major (getset, http, jsonwebtoken, log, regex, reqwest, serde_json, serial_test, time, time-macros, tokio, uuid)
• Update github-actions non-major (pnpm/action-setup, release-drafter/release-drafter, taiki-e/install-action)
• Update Rust crate sqlx to 0.9
• Update Rust crate tower-http to 0.7.0
• Update actions/checkout action to v7
• Lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cargo (2)

Cargo.toml (32)

• anyhow 1.0.89
• async-graphql 7.2.1
• async-graphql-axum 7.2.1
• async-trait 0.1.83
• axum 0.8
• axum-extra 0.12
• axum-macros 0.5.0
• derive_more 2.0
• dotenvy 0.15.7
• envy 0.4.2
• futures-util 0.3.31
• getset 0.1.3 → [Updates: 0.1.3]
• http 1.1.0 → [Updates: 1.1.0]
• jsonwebtoken 10.3.0 → [Updates: 10.3.0]
• log 0.4.22 → [Updates: 0.4.22]
• mockall 0.14.0
• moka 0.12
• regex 1.11.0 → [Updates: 1.11.0]
• reqwest 0.13 → [Updates: 0.13]
• serde 1.0
• serde_json 1.0.128 → [Updates: 1.0.128]
• sqlx 0.8 → [Updates: 0.9]
• thiserror 2.0.0
• time 0.3.47 → [Updates: 0.3.47]
• time-macros 0.2.18 → [Updates: 0.2.18]
• tokio 1.43.1 → [Updates: 1.43.1]
• tower 0.5.1
• tower-http 0.6.1 → [Updates: 0.7.0]
• tracing 0.1.40
• tracing-subscriber 0.3.20
• uuid 1.10.0 → [Updates: 1.10.0]
• validator 0.20.0

e2e/Cargo.toml (9)

• anyhow 1.0
• axum 0.8
• jsonwebtoken 10.3.0 → [Updates: 10.3.0]
• reqwest 0.13 → [Updates: 0.13]
• serde 1.0
• serde_json 1.0 → [Updates: 1.0]
• serial_test 3 → [Updates: 3]
• tokio 1 → [Updates: 1]
• uuid 1.0 → [Updates: 1.0]

docker-compose (2)

docker-compose-test.yml (1)

• postgres latest@sha256:a9abf4275f9e99bff8e6aed712b3b7dfec9cac1341bba01c1ffdfce9ff9fc34a → [Updates: latest]

docker-compose.yml (1)

• postgres latest@sha256:a9abf4275f9e99bff8e6aed712b3b7dfec9cac1341bba01c1ffdfce9ff9fc34a → [Updates: latest]

dockerfile (2)

Dockerfile (2)

• rust 1.96.0-trixie@sha256:4fd8406017c992f7b8ab55a2f99a1d56aeb1d7ecd255850dfa04239a88601f73 → [Updates: 1.96.0-trixie]
• debian trixie-slim@sha256:4e401d95de7083948053197a9c3913343cd06b706bf15eb6a0c3ccd26f436a0e

rendercom/Dockerfile

github-actions (8)

.github/actions/setup-rust-toolchain/action.yml

.github/workflows/actionlint.yml (1)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]

.github/workflows/ci.yml (15)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• Swatinem/rust-cache v2.9.1@c19371144df3bb44fab255c43d04cbc2ab54d1c4
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• reproducible-containers/buildkit-cache-dance v3.4.0@5422eac04292c961a382e0f584ea0f03ad9da723
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• Swatinem/rust-cache v2.9.1@c19371144df3bb44fab255c43d04cbc2ab54d1c4
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• Swatinem/rust-cache v2.9.1@c19371144df3bb44fab255c43d04cbc2ab54d1c4
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• Swatinem/rust-cache v2.9.1@c19371144df3bb44fab255c43d04cbc2ab54d1c4

.github/workflows/deploy.yml (13)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• reproducible-containers/buildkit-cache-dance v3.4.0@5422eac04292c961a382e0f584ea0f03ad9da723
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• Swatinem/rust-cache v2.9.1@c19371144df3bb44fab255c43d04cbc2ab54d1c4
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• node 24

.github/workflows/e2e.yml (8)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• Swatinem/rust-cache v2.9.1@c19371144df3bb44fab255c43d04cbc2ab54d1c4
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• Swatinem/rust-cache v2.9.1@c19371144df3bb44fab255c43d04cbc2ab54d1c4
• node 24

.github/workflows/release-drafter.yml (4)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• release-drafter/release-drafter v7.3.1@693d20e7c1ce1a81d3a41962f85914253b518449 → [Updates: v7.4.0]
• taiki-e/install-action v2.81.9@fd2f5e3d644b484055ebf4268f474c565f148f25 → [Updates: v2.82.0]
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/renovate-config-validation.yml (1)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]

.github/workflows/zizmor.yml (1)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]

regex (1)

rust-toolchain.toml (1)

• rust 1.96.0

rust-toolchain (1)

rust-toolchain.toml (1)

• rust 1.96.0

---

• Check this box to trigger a request for Renovate to run again on this repository