Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/renovate.yml
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ jobs:
- name: Checkout
uses: actions/checkout@v6
- name: Renovate
uses: renovatebot/github-action@v46.1.7
uses: renovatebot/github-action@v46.1.8

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Description: Check if v46.1.8 exists and find the latest version of renovatebot/github-action

# Check if v46.1.8 tag exists
echo "Checking if v46.1.8 exists..."
gh api repos/renovatebot/github-action/git/ref/tags/v46.1.8 --jq '.ref' 2>/dev/null || echo "Version v46.1.8 not found"

# Get latest releases
echo -e "\nLatest releases:"
gh api repos/renovatebot/github-action/releases --jq '.[0:5] | .[] | "\(.tag_name) - \(.published_at)"'

# Check for security advisories
echo -e "\nChecking for security advisories..."
gh api graphql -f query='
{
  repository(owner: "renovatebot", name: "github-action") {
    vulnerabilityAlerts(first: 5) {
      nodes {
        securityAdvisory {
          summary
          severity
          publishedAt
        }
        vulnerableManifestFilename
        vulnerableRequirements
      }
    }
  }
}'

Repository: shunkakinoki/dotfiles

Length of output: 383


Update renovatebot/github-action to v46.1.9

v46.1.9 is now available and should be used instead of v46.1.8. The newer version was released on April 13, 2026, with no security advisories.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In @.github/workflows/renovate.yml at line 17, The workflow currently references
the Renovate action version string "renovatebot/github-action@v46.1.8"; update
that exact reference to "renovatebot/github-action@v46.1.9" so the workflow uses
the new release, commit the change to the workflow file, and push to trigger CI
to verify the updated action runs correctly.

with:
configurationFile: renovate.json
token: ${{ secrets.PAT_TOKEN }}
Expand Down
6 changes: 3 additions & 3 deletions pyproject.toml
Original file line number Diff line number Diff line change
Expand Up @@ -9,11 +9,11 @@ requires-python = ">=3.13"
[dependency-groups]
tools = [
"aider-chat>=0.86.2",
"claude-swap>=0.7.1",
"claude-swap>=0.7.3",
"marker-pdf>=1.10.2",
"mempalace>=3.1.0",
"mistral-vibe>=2.7.3",
"ruff>=0.15.9",
"mistral-vibe>=2.7.4",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The PR description indicates that mistral-vibe has a pending update to 2.7.6. Additionally, note that v2.7.4 introduces a change where only agents of type agent are loadable with the --agent flag. If your workflow relies on other agent types with this flag, please verify compatibility. Consider updating to the latest available patch version 2.7.6 to fully satisfy the PR's intent.

Suggested change
"mistral-vibe>=2.7.4",
"mistral-vibe>=2.7.6",

"ruff>=0.15.10",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The PR description indicates that ruff has a pending update to 0.15.11. Since this PR aims to update all non-major dependencies, it is recommended to use the latest available patch version to ensure all fixes are included.

Suggested change
"ruff>=0.15.10",
"ruff>=0.15.11",

"serena-agent>=1.1.2",
"vllm>=0.19.0",
]
Expand Down
Loading