Dependency Dashboard

[github-actions]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.
• ⚠️ WARN: Package lookup failures
• ⚠️ WARN: Error updating branch: update failure

Errored

The following updates encountered an error and will be retried. To force a retry now, click on a checkbox below.

• chore(deps): update obolnetwork/obol-stack-front-end docker tag to v0.1.28-rc2-arm64

---

Warning

Renovate failed to look up the following dependencies: Failed to look up github-tags package aquasecurity/trivy-action: no-result.

Files affected: .github/workflows/docker-publish-openclaw.yml, .github/workflows/docker-publish-storefront.yml, .github/workflows/docker-publish-x402.yml

---

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• chore(deps): update actions/checkout action to v6.0.3
• chore(deps): update azure/setup-helm action to v5.0.1
• chore(deps): update github/codeql-action action to v4.36.3
• chore(deps): update renovatebot/github-action action to v46.1.18
• chore(deps): update softprops/action-gh-release action to v3.0.1
• chore(deps): update actions/create-github-app-token action to v2.2.2
• chore(deps): update actions/setup-go action to v6.5.0
• chore(deps): update actions/setup-python action to v6.3.0
• chore(deps): update dependency helm to v3.21.2
• chore(deps): update dependency python to 3.14
• chore(deps): update docker/build-push-action action to v7.3.0
• chore(deps): update docker/login-action action to v4.4.0
• chore(deps): update docker/metadata-action action to v6.2.0
• chore(deps): update docker/setup-buildx-action action to v4.2.0
• chore(deps): update docker/setup-qemu-action action to v4.2.0
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/create-github-app-token action to v3

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency @scalar/api-reference to v1.62.4
• chore(deps): update dependency helmfile/helmfile to v1.7.0
• chore(deps): update ethereum el/cl client updates (ChainSafe/lodestar, Consensys/teku, OffchainLabs/prysm)
• chore(deps): update nousresearch/hermes-agent docker tag to v2026.7.1
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update aztecprotocol/aztec docker tag to v6

Detected Dependencies

github-actions (9)

.github/workflows/docker-publish-openclaw.yml (16)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4.36.3]

.github/workflows/docker-publish-storefront.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4.36.3]

.github/workflows/docker-publish-x402.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4.36.3]

.github/workflows/gitleaks.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]

.github/workflows/helm-template-smoke.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• azure/setup-helm v5.0.0@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 → [Updates: v5.0.1]
• helm v3.21.0 → [Updates: v3.21.2]

.github/workflows/lint-test.yaml (10)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• azure/setup-helm v5.0.0@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 → [Updates: v5.0.1]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6.3.0]
• helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
• helm/kind-action v1.14.0@ef37e7f390d99f746eb8b610417061a60e82a6cc
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• extractions/setup-just v4.0.0@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3
• helm v3.12.0 → [Updates: v3.21.2]
• python 3.12 → [Updates: 3.14]

.github/workflows/release-prep.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• actions/create-github-app-token v2.1.4@67018539274d69449ef7c02e8e71183d1719ab42 → [Updates: v2.2.2, v3.2.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]

.github/workflows/release.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• softprops/action-gh-release v3.0.0@b4309332981a82ec1c5618f44dd2e27cc8bfbfda → [Updates: v3.0.1]

.github/workflows/renovate.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• renovatebot/github-action v46.1.14@693b9ef15eec82123529a37c782242f091365961 → [Updates: v46.1.18]

regex (15)

internal/embed/infrastructure/base/templates/llm.yaml (3)

• ghcr.io/obolnetwork/litellm sha-9b3e569@sha256:ac453f9cdfa3752efa38998aa5bbf4f9a67e642a68b27a647aaf667c083ddc51
• ghcr.io/obolnetwork/litellm sha-9b3e569@sha256:ac453f9cdfa3752efa38998aa5bbf4f9a67e642a68b27a647aaf667c083ddc51
• ghcr.io/obolnetwork/x402-buyer 62f11c9@sha256:c58f7a20303538311d7e207e816e699c038bd8ded6339697fc0a01ed187abcda

internal/embed/infrastructure/base/templates/x402.yaml (2)

• ghcr.io/obolnetwork/x402-verifier 62f11c9@sha256:013e3c26b97a92e357265be0e929c55fa3dbc08c9e7a088bc297d0c9266fa2a9
• ghcr.io/obolnetwork/serviceoffer-controller 62f11c9@sha256:db8e6aeafc4b1077d5f860ede5258b5d8183ee070b301cd3dbb081e128135fbd

internal/embed/infrastructure/cloudflared/values.yaml (1)

• cloudflare/cloudflared 2026.6.1@sha256:6d91c121b803126f7a5344005d17a9324788fc09d305b6e2560ec6040a7ae283

internal/embed/infrastructure/helmfile.yaml (1)

• kubernetes-sigs/gateway-api v1.6.0

internal/embed/infrastructure/values/obol-frontend.yaml.gotmpl (1)

• obolnetwork/obol-stack-front-end v0.1.28-rc1@sha256:6075170e7246eba583ca7504a9bf411ddb581ae9b26cba219c3d7b8c481265d5 → [Updates: v0.1.28-rc2-arm64]

internal/embed/k3d-config.yaml

internal/embed/networks/aztec/helmfile.yaml.gotmpl (1)

• aztecprotocol/aztec 4.4.0 → [Updates: 6.0.0-nightly.20260605-arm64]

internal/embed/networks/aztec/helmfile.yaml.gotmpl (1)

• aztec-node 2.3.0

internal/embed/networks/ethereum/helmfile.yaml.gotmpl (9)

• paradigmxyz/reth v2.3.0
• ethereum/go-ethereum v1.17.4
• NethermindEth/nethermind 1.38.1
• hyperledger/besu 26.6.1
• erigontech/erigon v3.5.0
• sigp/lighthouse v8.2.0
• OffchainLabs/prysm v7.1.5 → [Updates: v7.1.6]
• Consensys/teku 26.6.1 → [Updates: 26.7.0]
• ChainSafe/lodestar v1.43.0 → [Updates: v1.44.0]

internal/embed/networks/ethereum/helmfile.yaml.gotmpl (1)

• ethereum-node 0.2.15

internal/hermes/hermes.go (1)

• nousresearch/hermes-agent v2026.6.19 → [Updates: v2026.7.1]

internal/openclaw/openclaw.go (1)

• openclaw 0.4.0

internal/serviceoffercontroller/agent_render.go (1)

• nousresearch/hermes-agent v2026.6.19 → [Updates: v2026.7.1]

internal/serviceoffercontroller/scalar_html.go (1)

• @scalar/api-reference 1.62.1 → [Updates: 1.62.4]

obolup.sh (7)

• kubernetes/kubernetes 1.36.2
• helm/helm 3.21.2
• k3d-io/k3d 5.9.0
• helmfile/helmfile 1.6.0 → [Updates: 1.7.0]
• derailed/k9s 0.51.0
• databus23/helm-diff 3.15.10
• ollama/ollama 0.31.1