Dependency Dashboard

[github-actions]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.
• ⚠️ WARN: Package lookup failures
• ⚠️ WARN: Error updating branch: update failure

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update nousresearch/hermes-agent docker tag to v2026.7.20

Errored

The following updates encountered an error and will be retried. To force a retry now, click on a checkbox below.

• chore(deps): update obolnetwork/obol-stack-front-end docker tag to v0.1.28-rc3-arm64

---

Warning

Renovate failed to look up the following dependencies: Failed to look up github-tags package aquasecurity/trivy-action: no-result.

Files affected: .github/workflows/docker-publish-openclaw.yml, .github/workflows/docker-publish-storefront.yml, .github/workflows/docker-publish-x402.yml

---

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• chore(deps): update azure/setup-helm action to v5.0.1
• chore(deps): update renovatebot/github-action action to v46.1.20
• chore(deps): update actions/checkout action to v6.1.0
• chore(deps): update actions/setup-go action to v6.5.0
• chore(deps): update actions/setup-python action to v6.3.0
• chore(deps): update dependency helm to v3.21.3
• chore(deps): update dependency python to 3.14
• chore(deps): update docker/build-push-action action to v7.3.0
• chore(deps): update docker/login-action action to v4.4.0
• chore(deps): update docker/metadata-action action to v6.2.0
• chore(deps): update docker/setup-buildx-action action to v4.2.0
• chore(deps): update docker/setup-qemu-action action to v4.2.0
• chore(deps): update github/codeql-action action to v4.37.3
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-go action to v7
• chore(deps): update actions/setup-python action to v7

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update cloudflare/cloudflared docker tag to v2026.7.2
• chore(deps): update dependency kubernetes-sigs/gateway-api to v1.6.1
• chore(deps): update ethereum el/cl client updates (NethermindEth/nethermind, OffchainLabs/prysm, erigontech/erigon, paradigmxyz/reth, sigp/lighthouse)
• chore(deps): update obolup.sh dependency updates (helmfile/helmfile, ollama/ollama)
• chore(deps): update dependency @scalar/api-reference to v1.63.0
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update aztecprotocol/aztec docker tag to v6

Detected Dependencies

github-actions (8)

.github/workflows/docker-publish-openclaw.yml (16)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4.37.3]

.github/workflows/docker-publish-storefront.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4.37.3]

.github/workflows/docker-publish-x402.yml (6)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• docker/bake-action v7.3.0@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4.37.3]

.github/workflows/gitleaks.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]

.github/workflows/helm-template-smoke.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• azure/setup-helm v5.0.0@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 → [Updates: v5.0.1]
• helm v3.21.0 → [Updates: v3.21.3]

.github/workflows/lint-test.yaml (14)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• azure/setup-helm v5.0.0@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 → [Updates: v5.0.1]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6.3.0, v7.0.0]
• helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
• helm/kind-action v1.14.0@ef37e7f390d99f746eb8b610417061a60e82a6cc
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• extractions/setup-just v4.0.0@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3
• helm v3.12.0 → [Updates: v3.21.3]
• python 3.12 → [Updates: 3.14]

.github/workflows/release.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94

.github/workflows/renovate.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• renovatebot/github-action v46.1.14@693b9ef15eec82123529a37c782242f091365961 → [Updates: v46.1.20]

regex (15)

internal/embed/infrastructure/base/templates/llm.yaml (3)

• ghcr.io/obolnetwork/litellm sha-9b3e569@sha256:ac453f9cdfa3752efa38998aa5bbf4f9a67e642a68b27a647aaf667c083ddc51
• ghcr.io/obolnetwork/litellm sha-9b3e569@sha256:ac453f9cdfa3752efa38998aa5bbf4f9a67e642a68b27a647aaf667c083ddc51
• ghcr.io/obolnetwork/x402-buyer __OBOL_IMAGE__

internal/embed/infrastructure/base/templates/x402.yaml (3)

• ghcr.io/obolnetwork/x402-verifier __OBOL_IMAGE__
• ghcr.io/obolnetwork/serviceoffer-controller __OBOL_IMAGE__
• ghcr.io/obolnetwork/job-broker __OBOL_IMAGE__

internal/embed/infrastructure/cloudflared/values.yaml (1)

• cloudflare/cloudflared 2026.7.1@sha256:188bb03589a32affed3cf4d0590565ffe67b78866e6b5582574afab2b705bafe → [Updates: 2026.7.2]

internal/embed/infrastructure/helmfile.yaml (1)

• kubernetes-sigs/gateway-api v1.6.0 → [Updates: v1.6.1]

internal/embed/infrastructure/values/obol-frontend.yaml.gotmpl (1)

• obolnetwork/obol-stack-front-end v0.1.28-rc3@sha256:eaf7afc6242b480a873df8bd55d0076641ce5407278813eb9856c19274a15f17 → [Updates: v0.1.28-rc3-arm64]

internal/embed/k3d-config.yaml

internal/embed/networks/aztec/helmfile.yaml.gotmpl (1)

• aztecprotocol/aztec 4.4.0 → [Updates: 6.0.0-nightly.20260722-arm64]

internal/embed/networks/aztec/helmfile.yaml.gotmpl (1)

• aztec-node 2.3.0

internal/embed/networks/ethereum/helmfile.yaml.gotmpl (9)

• paradigmxyz/reth v2.3.0 → [Updates: v2.4.1]
• ethereum/go-ethereum v1.17.4
• NethermindEth/nethermind 1.39.0 → [Updates: 1.39.2]
• hyperledger/besu 26.7.0
• erigontech/erigon v3.5.1 → [Updates: v3.5.2]
• sigp/lighthouse v8.2.0 → [Updates: v8.2.1]
• OffchainLabs/prysm v7.1.6 → [Updates: v7.1.7]
• Consensys/teku 26.7.1
• ChainSafe/lodestar v1.44.0

internal/embed/networks/ethereum/helmfile.yaml.gotmpl (1)

• ethereum-node 0.2.15

internal/hermes/hermes.go (1)

• nousresearch/hermes-agent v2026.7.7.2 → [Updates: v2026.7.20]

internal/openclaw/openclaw.go (1)

• openclaw 0.4.0

internal/serviceoffercontroller/agent_render.go (1)

• nousresearch/hermes-agent v2026.7.7.2 → [Updates: v2026.7.20]

internal/serviceoffercontroller/scalar_html.go (1)

• @scalar/api-reference 1.62.5 → [Updates: 1.63.0]

obolup.sh (7)

• kubernetes/kubernetes 1.36.2
• helm/helm 3.21.3
• k3d-io/k3d 5.9.0
• helmfile/helmfile 1.7.0 → [Updates: 1.7.1]
• derailed/k9s 0.51.0
• databus23/helm-diff 3.15.10
• ollama/ollama 0.31.2 → [Updates: 0.32.1]