Dependency Dashboard

[svc-secops]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository problems

Renovate tried to run on this repository, but found these problems.

• WARN: Release interceptor failed for "crate"

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): pin dependencies (actions-rust-lang/setup-rust-toolchain, actions/attest-build-provenance, actions/checkout, actions/download-artifact, actions/github-script, actions/setup-node, actions/upload-artifact, anthropics/claude-code-action, assert_fs, chrono, codecov/codecov-action, docker/build-push-action, docker/setup-buildx-action, figment, gcr.io/distroless/cc-debian12, http-body-util, knope-dev/action, mockito, opentelemetry_sdk, rust, serde_yaml, taiki-e/install-action, tempfile, test-log, tower, tracing-futures, tracing-test, wiremock)
• chore(deps): update docker/login-action digest to c144859
• chore(deps): update knope-dev/action action to v2.1.2
• chore(deps): update actions/download-artifact action to v4.3.0
• chore(deps): update actions/upload-artifact action to v4.6.2
• chore(deps): update actions/attest-build-provenance action to v4
• chore(deps): update actions/github-script action to v8
• chore(deps): update actions/setup-node action to v6
• chore(deps): update dependency node to v24
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): lock file maintenance

Other Branches

These updates are pending. To force PRs open, click the checkbox below.

• chore(deps): update rust
• chore(deps): update rust crate rstest to 0.26.0
• fix(deps): update rust crate graphql_client to 0.16.0
• fix(deps): update rust crate jsonschema to 0.45.0
• fix(deps): update rust crate tantivy to 0.25.0
• fix(deps): update rust crate rmcp to v1

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected dependencies

cargo

Cargo.toml

• apollo-compiler 1.31.1
• apollo-federation 2.12.0
• futures 0.3.31
• insta 1.43.1
• reqwest 0.13.0
• rstest 0.25.0
• secrecy 0.10.3
• serde 1.0.219
• serde_json 1.0.140
• thiserror 2.0.12
• tokio 1.45.0
• tokio-stream 0.1
• tracing 0.1.41
• tracing-core 0.1.33
• tracing-subscriber 0.3.19
• url 2.4

crates/apollo-mcp-registry/Cargo.toml

• derive_more 2.0.1
• educe 0.6.0
• graphql_client 0.14.0
• notify 8.0.0
• tower 0.5.2
• uuid 1.16.0
• test-log 0.2.16
• tracing-futures 0.2.5
• wiremock 0.6.3

crates/apollo-mcp-server/Cargo.toml

• anyhow 1.0.98
• axum 0.8.4
• axum-extra 0.12.0
• axum-otel-metrics 0.12.0
• axum-tracing-opentelemetry 0.33.0
• bon 3.6.3
• clap 4.5.36
• figment 0.10.19
• headers 0.4.1
• http 1.3.1
• humantime-serde 1.1.1
• jsonschema 0.42.0
• jsonwebtoken 10.3
• lz-str 0.2.1
• opentelemetry 0.31.0
• opentelemetry-otlp 0.31.0
• opentelemetry-semantic-conventions 0.31.0
• opentelemetry_sdk 0.31.0
• regex 1.11.1
• reqwest-middleware 0.5.1
• reqwest-tracing 0.7.0
• rustls 0.23
• rmcp 0.17
• schemars 1.0.1
• serde_yaml 0.9.34
• shellexpand 3.1
• tokio-util 0.7.15
• tonic 0.14
• tower-http 0.6.6
• tracing-appender 0.2.3
• tracing-opentelemetry 0.32.1
• tracing-subscriber 0.3.19
• assert_fs 1
• http-body-util 0.1
• tempfile 3
• chrono 0.4.41
• figment 0.10.19
• mockito 1.7.0
• opentelemetry_sdk 0.31.0
• serde_yaml 0.9.34
• tower 0.5.2
• tracing-test 0.2.5
• cruet 0.15.0
• prettyplease 0.2.37
• quote 1.0.40
• syn 2.0.106
• toml 1.0.0

crates/apollo-schema-index/Cargo.toml

• enumset 1.1.6
• heck 0.5
• itertools 0.14.0
• tantivy 0.24.2

dockerfile

Dockerfile

• rust 1.92.0-bookworm
• gcr.io/distroless/cc-debian12 unknown version

github-actions

.github/workflows/ci.yml

• actions/checkout v6
• actions-rust-lang/setup-rust-toolchain v1
• actions/checkout v6
• actions-rust-lang/setup-rust-toolchain v1
• actions/checkout v6
• actions-rust-lang/setup-rust-toolchain v1
• actions/checkout v6
• actions-rust-lang/setup-rust-toolchain v1
• actions/checkout v6
• actions-rust-lang/setup-rust-toolchain v1
• actions/checkout v6
• actions-rust-lang/setup-rust-toolchain v1
• taiki-e/install-action cargo-llvm-cov
• codecov/codecov-action v5
• actions/checkout v6
• actions-rust-lang/setup-rust-toolchain v1
• actions/setup-node v4
• node 20

.github/workflows/claude-code-review.yml

• actions/checkout v6
• anthropics/claude-code-action v1
• actions/github-script v7

.github/workflows/claude-code.yml

• anthropics/claude-code-action v1
• actions/github-script v7

.github/workflows/prep-release.yml

• actions/checkout v6
• knope-dev/action v2.1.0

.github/workflows/release-bins.yml

• actions/checkout v6
• knope-dev/action v2.1.0
• actions/checkout v6
• actions-rust-lang/setup-rust-toolchain v1
• actions/upload-artifact v4.4.0
• actions/checkout v6
• actions-rust-lang/setup-rust-toolchain v1
• actions/upload-artifact v4.4.0
• actions/checkout v6
• actions/download-artifact v4.1.8
• knope-dev/action v2.1.0

.github/workflows/release-canary.yml

• ubuntu 24.04

.github/workflows/release-container.yml

• actions/checkout v6
• knope-dev/action v2.1.0
• actions/checkout v6
• docker/setup-buildx-action v3
• docker/login-action 65b78e6e13532edd9afa3aa52ac7964289d1a9c1
• docker/build-push-action v6
• actions/attest-build-provenance v2
• docker/login-action 65b78e6e13532edd9afa3aa52ac7964289d1a9c1
• actions/checkout v6
• ubuntu 24.04

.github/workflows/release-experimental.yml

• actions/checkout v6
• knope-dev/action v2.1.0
• actions/checkout v6
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/verify-changeset.yml

• actions/github-script v7
• actions/github-script v7
• actions/github-script v7
• actions/github-script v7
• ubuntu 24.04
• ubuntu 24.04

renovate-config-presets

.github/renovate.json5

regex

rust-toolchain.toml

• rust 1.92.0