Vulnerability dashboard #9

Open
opened 2026-03-23 18:28:38 +00:00 by bot-ci · 0 comments
Owner

This issue list updates about vulnerabilities that are detected by trivy.woodpecker plugin.

Summary

Severity Count
CRITICAL 0
HIGH 0
MEDIUM 2
LOW 0
UNKNOWN 0

Detected packages and vulnerabilities

Packages

Node.js

code.thinkaboutit.tech/pandora/renovate.woodpecker:latest

Name Version
1to2 1.0.0
@arcanis/slice-ansi 1.1.1
@aws-crypto/crc32 5.2.0
@aws-crypto/crc32c 5.2.0
@aws-crypto/sha1-browser 5.2.0
@aws-crypto/sha256-browser 5.2.0
@aws-crypto/sha256-js 5.2.0
@aws-crypto/supports-web-crypto 5.2.0
@aws-crypto/util 5.2.0
@aws-sdk/checksums 3.1000.6
@aws-sdk/client-codecommit 3.1053.0
@aws-sdk/client-cognito-identity 3.1053.0
@aws-sdk/client-ec2 3.1053.0
@aws-sdk/client-ecr 3.1053.0
@aws-sdk/client-eks 3.1053.0
@aws-sdk/client-rds 3.1053.0
@aws-sdk/client-s3 3.1053.0
@aws-sdk/core 3.974.21
@aws-sdk/credential-provider-cognito-identity 3.972.46
@aws-sdk/credential-provider-env 3.972.47
@aws-sdk/credential-provider-http 3.972.49
@aws-sdk/credential-provider-ini 3.972.54
@aws-sdk/credential-provider-login 3.972.53
@aws-sdk/credential-provider-node 3.972.56
@aws-sdk/credential-provider-process 3.972.47
@aws-sdk/credential-provider-sso 3.972.53
@aws-sdk/credential-provider-web-identity 3.972.53
@aws-sdk/credential-providers 3.1053.0
@aws-sdk/middleware-bucket-endpoint 3.972.25
@aws-sdk/middleware-expect-continue 3.972.21
@aws-sdk/middleware-flexible-checksums 3.974.31
@aws-sdk/middleware-location-constraint 3.972.18
@aws-sdk/middleware-sdk-ec2 3.972.35
@aws-sdk/middleware-sdk-rds 3.972.35
@aws-sdk/middleware-sdk-s3 3.972.52
@aws-sdk/middleware-ssec 3.972.18
@aws-sdk/nested-clients 3.997.21
@aws-sdk/signature-v4-multi-region 3.996.35
@aws-sdk/token-providers 3.1069.0
@aws-sdk/types 3.973.13
@aws-sdk/util-locate-window 3.965.8
@aws-sdk/xml-builder 3.972.30
@aws/lambda-invoke-store 0.2.4
@babel/code-frame 7.29.7
@babel/helper-validator-identifier 7.29.7
@babel/runtime-corejs3 7.29.7
@baszalmstra/rattler 0.2.1
@breejs/later 4.2.0
@cdktf/hcl2json 0.21.0
@gwhitney/detect-indent 7.0.1
@isaacs/cliui 8.0.2
@isaacs/fs-minipass 4.0.1
@keyv/serialize 1.1.1
@kwsites/file-exists 1.1.1
@kwsites/promise-deferred 1.1.1
@nodable/entities 2.2.0
@nodelib/fs.scandir 2.1.5
@nodelib/fs.stat 2.0.5
@nodelib/fs.walk 1.2.8
@npmcli/fs 5.0.0
@one-ini/wasm 0.2.1
@opentelemetry/api 1.9.1
@opentelemetry/api-logs 0.218.0
@opentelemetry/context-async-hooks 2.7.1
@opentelemetry/core 2.7.1
@opentelemetry/exporter-trace-otlp-http 0.218.0
@opentelemetry/instrumentation 0.218.0
@opentelemetry/instrumentation-bunyan 0.63.0
@opentelemetry/instrumentation-http 0.218.0
@opentelemetry/instrumentation-redis 0.66.0
@opentelemetry/otlp-exporter-base 0.218.0
@opentelemetry/otlp-transformer 0.218.0
@opentelemetry/redis-common 0.38.3
@opentelemetry/resource-detector-aws 2.18.0
@opentelemetry/resource-detector-azure 0.26.0
@opentelemetry/resource-detector-gcp 0.53.0
@opentelemetry/resource-detector-github 0.32.0
@opentelemetry/resources 2.7.1
@opentelemetry/sdk-logs 0.218.0
@opentelemetry/sdk-metrics 2.7.1
@opentelemetry/sdk-trace-base 2.7.1
@opentelemetry/sdk-trace-node 2.7.1
@opentelemetry/semantic-conventions 1.41.1
@pkgjs/parseargs 0.11.0
@pnpm/catalogs.protocol-parser 1001.0.0
@pnpm/catalogs.resolver 1000.0.5
@pnpm/catalogs.types 1000.0.0
@pnpm/constants 1001.3.1
@pnpm/constants 6.1.0
@pnpm/error 1000.1.0
@pnpm/error 4.0.0
@pnpm/graceful-fs 2.0.0
@pnpm/parse-overrides 1001.0.4
@pnpm/parse-wanted-dependency 1001.0.0
@pnpm/read-project-manifest 4.1.1
@pnpm/text.comments-parser 1.0.0
@pnpm/types 8.9.0
@pnpm/util.lex-comparator 1.0.0
@pnpm/write-project-manifest 4.1.1
@qnighy/marshal 0.1.3
@redis/client 5.12.1
@redis/client 5.12.1
@renovatebot/detect-tools 4.0.8
@renovatebot/good-enough-parser 2.0.1
@renovatebot/osv-offline 3.0.3
@renovatebot/osv-offline-db 3.0.3
@renovatebot/pep440 5.0.0
@renovatebot/pgp 1.3.14
@renovatebot/ruby-semver 5.0.0
@sec-ant/readable-stream 0.4.1
@simple-git/args-pathspec 1.0.3
@simple-git/argv-parser 1.1.1
@sindresorhus/is 4.6.0
@sindresorhus/is 7.2.0
@sindresorhus/is 8.1.0
@smithy/core 3.25.0
@smithy/credential-provider-imds 4.4.0
@smithy/fetch-http-handler 5.5.0
@smithy/is-array-buffer 2.2.0
@smithy/node-http-handler 4.8.0
@smithy/signature-v4 5.5.0
@smithy/types 4.15.0
@smithy/util-buffer-from 2.2.0
@smithy/util-utf8 2.3.0
@szmarczak/http-timer 4.0.6
@thi.ng/api 7.2.0
@thi.ng/arrays 1.0.3
@thi.ng/checks 2.9.11
@thi.ng/compare 1.3.34
@thi.ng/equiv 1.0.45
@thi.ng/errors 1.3.4
@thi.ng/hex 1.0.4
@thi.ng/random 2.4.8
@thi.ng/zipper 1.0.3
@types/bunyan 1.8.11
@types/cacheable-request 6.0.3
@types/debug 4.1.13
@types/emscripten 1.41.5
@types/http-cache-semantics 4.2.0
@types/keyv 3.1.4
@types/mdast 4.0.4
@types/moo 0.5.10
@types/ms 2.1.0
@types/node 25.9.3
@types/parse-path 7.0.3
@types/responselike 1.0.3
@types/semver 7.7.1
@types/treeify 1.0.3
@types/unist 3.0.3
@yarnpkg/core 4.8.0
@yarnpkg/fslib 3.1.5
@yarnpkg/libzip 3.2.2
@yarnpkg/parsers 3.0.3
@yarnpkg/shell 4.1.3
abbrev 4.0.0
acorn 8.17.0
acorn-import-attributes 1.9.5
adm-zip 0.5.17
ae-cvss-calculator 1.0.12
agent-base 7.1.4
agentkeepalive 4.6.0
ansi-regex 5.0.1
ansi-regex 6.2.2
ansi-regex 6.2.2
ansi-regex 6.2.2
ansi-styles 4.3.0
ansi-styles 6.2.3
anynum 1.0.0
argparse 1.0.10
argparse 2.0.1
argparse 2.0.1
argparse 2.0.1
async-mutex 0.5.0
aws4 1.13.2
azure-devops-node-api 15.1.2
backslash 0.2.2
bail 2.0.2
balanced-match 1.0.2
balanced-match 1.0.2
balanced-match 4.0.4
base64-js 1.5.1
bignumber.js 9.3.1
boolbase 1.0.0
boolean 3.2.0
bowser 2.14.1
brace-expansion 1.1.15
brace-expansion 2.1.1
brace-expansion 5.0.6
braces 3.0.3
buffer-equal-constant-time 1.0.1
buffer-from 1.1.2
builtins 5.1.0
bunyan 1.8.15
byte-counter 0.1.0
cacache 20.0.4
cacheable-lookup 5.0.4
cacheable-lookup 7.0.0
cacheable-request 13.0.19
cacheable-request 7.0.4
call-bind-apply-helpers 1.0.2
call-bound 1.0.4
camelcase 5.3.1
ccount 2.0.1
chalk 4.1.2
changelog-filename-regex 2.0.1
character-entities 2.0.2
chownr 3.0.0
chunk-data 0.1.0
ci-info 4.4.0
cjs-module-lexer 2.2.0
clean-git-ref 2.0.1
clipanion 4.0.0-rc.4
clone-response 1.0.3
cluster-key-slot 1.1.2
color-convert 2.0.1
color-name 1.1.4
commander 14.0.3
concat-map 0.0.1
core-js-pure 3.49.0
croner 10.0.1
cronstrue 3.14.0
cross-spawn 7.0.6
css-select 5.2.2
css-what 6.2.2
data-uri-to-buffer 4.0.1
debug 4.4.3
decode-named-character-reference 1.3.0
decompress-response 10.0.0
decompress-response 6.0.0
deepmerge 4.3.1
defer-to-connect 2.0.1
define-data-property 1.1.4
define-properties 1.2.1
dequal 2.0.3
des.js 1.1.0
detect-indent 7.0.2
detect-node 2.1.0
devlop 1.1.0
diff 5.2.2
diff 9.0.0
dom-serializer 2.0.0
domelementtype 2.3.0
domhandler 5.0.3
domutils 3.2.2
dotenv 16.6.1
dtrace-provider 0.8.8
dunder-proto 1.0.1
eastasianwidth 0.2.0
ecdsa-sig-formatter 1.0.11
editorconfig 3.0.2
email-addresses 5.0.0
emoji-regex 10.6.0
emoji-regex 8.0.0
emoji-regex 8.0.0
emoji-regex 9.2.2
emojibase 17.0.0
emojibase-regex 17.0.0
end-of-stream 1.4.5
entities 4.5.0
env-paths 2.2.1
error-ex 1.3.4
es-define-property 1.0.1
es-errors 1.3.0
es-object-atoms 1.1.2
es-toolkit 1.47.1
es6-error 4.1.1
escape-string-regexp 4.0.0
escape-string-regexp 5.0.0
eslint-visitor-keys 5.0.1
esprima 4.0.1
eventemitter3 5.0.4
execa 8.0.1
exponential-backoff 3.1.3
extend 3.0.2
fast-deep-equal 3.1.3
fast-glob 3.3.3
fast-xml-builder 1.2.0
fast-xml-parser 5.7.3
fastq 1.20.1
fdir 6.5.0
fetch-blob 3.2.0
fill-range 7.1.1
find-packages 10.0.4
find-up 8.0.0
foreground-child 3.3.1
form-data-encoder 4.1.0
formdata-polyfill 4.0.10
forwarded-parse 2.1.2
fs-extra 11.3.0
fs-extra 11.3.5
fs-minipass 3.0.3
function-bind 1.1.2
gaxios 7.1.3
gaxios 7.1.5
gcp-metadata 8.1.2
gcp-metadata 8.1.3
get-intrinsic 1.3.0
get-proto 1.0.1
get-stream 5.2.0
get-stream 8.0.1
get-stream 9.0.1
git-up 8.1.1
git-url-parse 16.1.0
github-url-from-git 1.5.0
glob 10.5.0
glob 13.0.6
glob 6.0.4
glob-parent 5.1.2
global-agent 3.0.0
globalthis 1.0.4
google-auth-library 10.7.0
google-logging-utils 1.1.3
gopd 1.2.0
got 11.8.6
got 14.6.6
got 15.0.5
graceful-fs 4.2.11
graph-data-structure 4.5.0
grapheme-splitter 1.0.4
handlebars 4.7.9
has-flag 4.0.0
has-property-descriptors 1.0.2
has-symbols 1.1.0
hasown 2.0.4
he 1.2.0
hpagent 1.2.0
http-cache-semantics 4.2.0
http2-wrapper 1.0.3
http2-wrapper 2.2.1
https-proxy-agent 7.0.6
human-signals 5.0.0
humanize-ms 1.2.1
ignore 7.0.5
import-in-the-middle 3.1.0
imurmurhash 0.1.4
inflight 1.0.6
inherits 2.0.4
ini 6.0.0
install-artifact-from-github 1.6.0
is-arrayish 0.2.1
is-extglob 2.1.1
is-fullwidth-code-point 3.0.0
is-glob 4.0.3
is-number 7.0.0
is-plain-obj 2.1.0
is-plain-obj 4.1.0
is-ssh 1.4.1
is-stream 3.0.0
is-stream 4.0.1
is-typedarray 1.0.0
is-windows 1.0.2
isexe 2.0.0
isexe 4.0.0
jackspeak 3.4.3
js-md4 0.3.2
js-tokens 4.0.0
js-yaml 3.14.2
js-yaml 4.2.0
js-yaml 4.2.0
json-bigint 1.0.0
json-buffer 3.0.1
json-dup-key-validator 1.0.3
json-parse-even-better-errors 2.3.1
json-stringify-pretty-compact 4.0.0
json-stringify-safe 5.0.1
json5 2.2.3
jsonata 2.2.1
jsonc-morph 0.3.4
jsonc-weaver 0.2.4
jsonfile 6.2.1
jwa 2.0.1
jws 4.0.1
keyv 4.5.4
keyv 5.6.0
klona 2.0.6
lines-and-columns 1.2.4
linkify-it 5.0.1
locate-path 8.0.0
long 5.3.2
longest-streak 3.1.0
lowercase-keys 2.0.0
lowercase-keys 3.0.0
lowercase-keys 4.0.1
lru-cache 10.4.3
lru-cache 11.5.1
luxon 3.7.2
markdown-it 14.2.0
markdown-table 3.0.4
matcher 3.0.0
math-intrinsics 1.1.0
mdast-util-find-and-replace 3.0.2
mdast-util-from-markdown 2.0.3
mdast-util-gfm 3.1.0
mdast-util-gfm-autolink-literal 2.0.1
mdast-util-gfm-footnote 2.1.0
mdast-util-gfm-strikethrough 2.0.0
mdast-util-gfm-table 2.0.0
mdast-util-gfm-task-list-item 2.0.0
mdast-util-phrasing 4.1.0
mdast-util-to-markdown 2.1.2
mdast-util-to-string 4.0.0
mdurl 2.0.0
merge-stream 2.0.0
merge2 1.4.1
micromark 4.0.2
micromark-core-commonmark 2.0.3
micromark-extension-gfm 3.0.0
micromark-extension-gfm-autolink-literal 2.1.0
micromark-extension-gfm-footnote 2.1.0
micromark-extension-gfm-strikethrough 2.1.0
micromark-extension-gfm-table 2.1.1
micromark-extension-gfm-tagfilter 2.0.0
micromark-extension-gfm-task-list-item 2.1.0
micromark-factory-destination 2.0.1
micromark-factory-label 2.0.1
micromark-factory-space 2.0.1
micromark-factory-title 2.0.1
micromark-factory-whitespace 2.0.1
micromark-util-character 2.1.1
micromark-util-chunked 2.0.1
micromark-util-classify-character 2.0.1
micromark-util-combine-extensions 2.0.1
micromark-util-decode-numeric-character-reference 2.0.2
micromark-util-decode-string 2.0.1
micromark-util-encode 2.0.1
micromark-util-html-tag-name 2.0.1
micromark-util-normalize-identifier 2.0.1
micromark-util-resolve-all 2.0.1
micromark-util-sanitize-uri 2.0.1
micromark-util-subtokenize 2.1.0
micromark-util-symbol 2.0.1
micromark-util-types 2.0.2
micromatch 4.0.8
mimic-fn 4.0.0
mimic-response 1.0.1
mimic-response 3.1.0
mimic-response 4.0.0
minimalistic-assert 1.0.1
minimatch 10.2.5
minimatch 3.1.5
minimatch 9.0.9
minimist 1.2.8
minipass 3.3.6
minipass 3.3.6
minipass 7.1.3
minipass-collect 2.0.1
minipass-flush 1.0.7
minipass-pipeline 1.2.4
minizlib 3.1.0
mkdirp 0.5.6
module-details-from-path 1.0.4
moment 2.30.1
moo 0.5.3
ms 2.1.3
mv 2.1.1
nan 2.27.0
ncp 2.0.0
neo-async 2.6.2
neotraverse 0.6.18
node-domexception 1.0.0
node-fetch 3.3.2
node-gyp 12.4.0
node-html-parser 7.1.0
nopt 9.0.0
normalize-url 6.1.0
normalize-url 8.1.1
npm-run-path 5.3.0
nth-check 2.1.1
object-inspect 1.13.4
object-keys 1.1.1
once 1.4.0
onetime 6.0.0
openpgp 6.3.1
p-all 5.0.1
p-cancelable 2.1.1
p-cancelable 4.0.1
p-filter 2.1.0
p-limit 2.3.0
p-limit 4.0.0
p-locate 6.0.0
p-map 2.1.0
p-map 6.0.0
p-map 7.0.4
p-queue 9.3.0
p-throttle 8.1.0
p-timeout 7.0.1
p-try 2.2.0
package-json-from-dist 1.0.1
parse-json 5.2.0
parse-link-header 2.0.0
parse-path 7.1.0
parse-url 9.2.0
path-expression-matcher 1.5.0
path-is-absolute 1.0.1
path-key 3.1.1
path-key 4.0.0
path-scurry 1.11.1
path-scurry 2.0.2
picocolors 1.1.1
picomatch 2.3.2
picomatch 4.0.4
prettier 3.8.1
proc-log 6.1.0
protobufjs 8.6.2
protocols 2.0.2
pump 3.0.4
punycode 2.3.1
punycode.js 2.3.1
qs 6.15.2
queue-microtask 1.2.3
quick-lru 5.1.1
re2 1.24.1
read-yaml-file 2.1.0
remark 15.0.1
remark-gfm 4.0.1
remark-github 12.0.0
remark-parse 11.0.0
remark-stringify 11.0.0
renovate 43.227.1
require-in-the-middle 8.0.1
resolve-alpn 1.2.1
responselike 2.0.1
responselike 4.0.2
reusify 1.1.0
rimraf 2.4.5
rimraf 5.0.10
roarr 2.15.4
run-parallel 1.2.0
safe-buffer 5.2.1
safe-json-stringify 1.2.0
safe-stable-stringify 2.5.0
sax 1.6.0
semver 6.3.1
semver 7.8.3
semver-compare 1.0.0
semver-stable 3.0.0
semver-utils 1.1.4
serialize-error 7.0.1
shebang-command 2.0.0
shebang-regex 3.0.0
shlex 3.0.0
side-channel 1.1.1
side-channel-list 1.0.1
side-channel-map 1.0.1
side-channel-weakmap 1.0.2
signal-exit 3.0.7
signal-exit 4.1.0
simple-git 3.36.0
slugify 1.6.9
sort-keys 4.2.0
source-map 0.6.1
source-map-support 0.5.21
sprintf-js 1.0.3
sprintf-js 1.1.3
ssri 13.0.1
string-width 4.2.3
string-width 4.2.3
string-width 5.1.2
strip-ansi 6.0.1
strip-ansi 6.0.1
strip-ansi 7.2.0
strip-ansi 7.2.0
strip-ansi 7.2.0
strip-bom 4.0.0
strip-comments-strings 1.2.0
strip-final-newline 3.0.0
strip-json-comments 5.0.3
strnum 2.4.0
supports-color 7.2.0
tagged-tag 1.0.0
tar 7.5.16
tinyglobby 0.2.17
tinylogic 2.0.0
to-regex-range 5.0.1
to-vfile 8.0.0
toml-eslint-parser 1.0.3
treeify 1.1.0
trough 2.2.0
tslib 2.8.1
tunnel 0.0.6
typanion 3.14.0
type-fest 0.13.1
type-fest 4.41.0
type-fest 5.7.0
typed-rest-client 2.1.0
typedarray-to-buffer 3.1.5
uc.micro 2.1.0
uglify-js 3.19.3
uint8array-extras 1.5.0
underscore 1.13.8
undici 6.27.0
undici-types 7.24.6
unicorn-magic 0.3.0
unified 11.0.5
unist-util-is 6.0.1
unist-util-stringify-position 4.0.0
unist-util-visit 5.1.0
unist-util-visit-parents 6.0.2
universalify 2.0.1
upath 3.0.7
url-join 5.0.0
validate-npm-package-name 5.0.0
validate-npm-package-name 7.0.2
vfile 6.0.3
vfile-message 4.0.3
web-streams-polyfill 3.3.3
which 2.0.2
which 6.0.1
wordwrap 1.0.0
wrap-ansi 7.0.0
wrap-ansi 8.1.0
wrappy 1.0.2
write-file-atomic 3.0.3
write-file-atomic 5.0.1
write-yaml-file 4.2.0
xml-naming 0.1.0
xmldoc 2.0.3
xtend 4.0.2
yallist 4.0.0
yallist 4.0.0
yallist 5.0.0
yaml 2.9.0
yocto-queue 1.2.2
zod 4.4.3
zwitch 2.0.4

code.thinkaboutit.tech/pandora/renovate.woodpecker:latest (wolfi 20230201)

code.thinkaboutit.tech/pandora/renovate.woodpecker:latest

Name Version
apk-tools 2.14.10-r12
busybox 1.37.0-r60
c-ares 1.34.6-r1
ca-certificates 20260413-r0
ca-certificates-bundle 20260413-r0
cyrus-sasl-heimdal-libs 2.1.28-r52
gdbm 1.26-r5
git 2.54.0-r0
glibc 2.43-r8
glibc-locale-posix 2.43-r8
heimdal-libs 7.8.0-r48
icu78-data-full 78.3-r1
keyutils-libs 1.6.3-r38
krb5-conf 1.0-r9
krb5-libs 1.22.2-r2
ld-linux 2.43-r8
libbrotlicommon1 1.2.0-r3
libbrotlidec1 1.2.0-r3
libbrotlienc1 1.2.0-r3
libcom_err 1.47.4-r1
libcrypt1 2.43-r8
libcrypto3 3.6.3-r1
libcurl-openssl4 8.20.0-r1
libexpat1 2.8.1-r1
libgcc 16.1.0-r2
libicu78 78.3-r1
libidn2 2.3.8-r7
libldap 2.6.10-r5
libnghttp2-14 1.69.0-r0
libpcre2-8-0 10.47-r0
libpsl 0.21.5-r8
libssl3 3.6.3-r1
libstdc++ 16.1.0-r2
libunistring 1.4.2-r2
libuv 1.52.1-r1
libverto 0.3.2-r7
libxcrypt 4.5.2-r3
ncurses 6.6.20260613-r2
ncurses-terminfo-base 6.6.20260613-r2
nghttp3 1.16.0-r0
ngtcp2 1.23.0-r0
node-gyp 13.0.0-r0
nodejs-24 24.16.0-r1
npm 11.17.0-r0
readline 8.3-r2
sqlite-libs 3.53.2-r1
wolfi-base 1-r7
wolfi-baselayout 20230201-r29
wolfi-keys 1-r13
zlib 1.3.2-r3
Vulnerabilities

Node.js

code.thinkaboutit.tech/pandora/renovate.woodpecker:latest

Package Name Severity Installed version Fixed Version Status Link
@opentelemetry/core MEDIUM 2.7.1 2.8.0 fixed CVE-2026-54285
js-yaml MEDIUM 3.14.2 4.2.0 fixed CVE-2026-53550
This issue list updates about vulnerabilities that are detected by [trivy.woodpecker](https://code.thinkaboutit.tech/pandora/trivy.woodpecker) plugin. ## Summary | Severity | Count | | -------- | ----- | | CRITICAL | 0 | | HIGH | 0 | | MEDIUM | 2 | | LOW | 0 | | UNKNOWN | 0 | ## Detected packages and vulnerabilities <details><summary>Packages</summary> ### Node.js **code.thinkaboutit.tech/pandora/renovate.woodpecker:latest** | Name | Version | | ---- | ------- | | 1to2 | 1.0.0 | | @arcanis/slice-ansi | 1.1.1 | | @aws-crypto/crc32 | 5.2.0 | | @aws-crypto/crc32c | 5.2.0 | | @aws-crypto/sha1-browser | 5.2.0 | | @aws-crypto/sha256-browser | 5.2.0 | | @aws-crypto/sha256-js | 5.2.0 | | @aws-crypto/supports-web-crypto | 5.2.0 | | @aws-crypto/util | 5.2.0 | | @aws-sdk/checksums | 3.1000.6 | | @aws-sdk/client-codecommit | 3.1053.0 | | @aws-sdk/client-cognito-identity | 3.1053.0 | | @aws-sdk/client-ec2 | 3.1053.0 | | @aws-sdk/client-ecr | 3.1053.0 | | @aws-sdk/client-eks | 3.1053.0 | | @aws-sdk/client-rds | 3.1053.0 | | @aws-sdk/client-s3 | 3.1053.0 | | @aws-sdk/core | 3.974.21 | | @aws-sdk/credential-provider-cognito-identity | 3.972.46 | | @aws-sdk/credential-provider-env | 3.972.47 | | @aws-sdk/credential-provider-http | 3.972.49 | | @aws-sdk/credential-provider-ini | 3.972.54 | | @aws-sdk/credential-provider-login | 3.972.53 | | @aws-sdk/credential-provider-node | 3.972.56 | | @aws-sdk/credential-provider-process | 3.972.47 | | @aws-sdk/credential-provider-sso | 3.972.53 | | @aws-sdk/credential-provider-web-identity | 3.972.53 | | @aws-sdk/credential-providers | 3.1053.0 | | @aws-sdk/middleware-bucket-endpoint | 3.972.25 | | @aws-sdk/middleware-expect-continue | 3.972.21 | | @aws-sdk/middleware-flexible-checksums | 3.974.31 | | @aws-sdk/middleware-location-constraint | 3.972.18 | | @aws-sdk/middleware-sdk-ec2 | 3.972.35 | | @aws-sdk/middleware-sdk-rds | 3.972.35 | | @aws-sdk/middleware-sdk-s3 | 3.972.52 | | @aws-sdk/middleware-ssec | 3.972.18 | | @aws-sdk/nested-clients | 3.997.21 | | @aws-sdk/signature-v4-multi-region | 3.996.35 | | @aws-sdk/token-providers | 3.1069.0 | | @aws-sdk/types | 3.973.13 | | @aws-sdk/util-locate-window | 3.965.8 | | @aws-sdk/xml-builder | 3.972.30 | | @aws/lambda-invoke-store | 0.2.4 | | @babel/code-frame | 7.29.7 | | @babel/helper-validator-identifier | 7.29.7 | | @babel/runtime-corejs3 | 7.29.7 | | @baszalmstra/rattler | 0.2.1 | | @breejs/later | 4.2.0 | | @cdktf/hcl2json | 0.21.0 | | @gwhitney/detect-indent | 7.0.1 | | @isaacs/cliui | 8.0.2 | | @isaacs/fs-minipass | 4.0.1 | | @keyv/serialize | 1.1.1 | | @kwsites/file-exists | 1.1.1 | | @kwsites/promise-deferred | 1.1.1 | | @nodable/entities | 2.2.0 | | @nodelib/fs.scandir | 2.1.5 | | @nodelib/fs.stat | 2.0.5 | | @nodelib/fs.walk | 1.2.8 | | @npmcli/fs | 5.0.0 | | @one-ini/wasm | 0.2.1 | | @opentelemetry/api | 1.9.1 | | @opentelemetry/api-logs | 0.218.0 | | @opentelemetry/context-async-hooks | 2.7.1 | | @opentelemetry/core | 2.7.1 | | @opentelemetry/exporter-trace-otlp-http | 0.218.0 | | @opentelemetry/instrumentation | 0.218.0 | | @opentelemetry/instrumentation-bunyan | 0.63.0 | | @opentelemetry/instrumentation-http | 0.218.0 | | @opentelemetry/instrumentation-redis | 0.66.0 | | @opentelemetry/otlp-exporter-base | 0.218.0 | | @opentelemetry/otlp-transformer | 0.218.0 | | @opentelemetry/redis-common | 0.38.3 | | @opentelemetry/resource-detector-aws | 2.18.0 | | @opentelemetry/resource-detector-azure | 0.26.0 | | @opentelemetry/resource-detector-gcp | 0.53.0 | | @opentelemetry/resource-detector-github | 0.32.0 | | @opentelemetry/resources | 2.7.1 | | @opentelemetry/sdk-logs | 0.218.0 | | @opentelemetry/sdk-metrics | 2.7.1 | | @opentelemetry/sdk-trace-base | 2.7.1 | | @opentelemetry/sdk-trace-node | 2.7.1 | | @opentelemetry/semantic-conventions | 1.41.1 | | @pkgjs/parseargs | 0.11.0 | | @pnpm/catalogs.protocol-parser | 1001.0.0 | | @pnpm/catalogs.resolver | 1000.0.5 | | @pnpm/catalogs.types | 1000.0.0 | | @pnpm/constants | 1001.3.1 | | @pnpm/constants | 6.1.0 | | @pnpm/error | 1000.1.0 | | @pnpm/error | 4.0.0 | | @pnpm/graceful-fs | 2.0.0 | | @pnpm/parse-overrides | 1001.0.4 | | @pnpm/parse-wanted-dependency | 1001.0.0 | | @pnpm/read-project-manifest | 4.1.1 | | @pnpm/text.comments-parser | 1.0.0 | | @pnpm/types | 8.9.0 | | @pnpm/util.lex-comparator | 1.0.0 | | @pnpm/write-project-manifest | 4.1.1 | | @qnighy/marshal | 0.1.3 | | @redis/client | 5.12.1 | | @redis/client | 5.12.1 | | @renovatebot/detect-tools | 4.0.8 | | @renovatebot/good-enough-parser | 2.0.1 | | @renovatebot/osv-offline | 3.0.3 | | @renovatebot/osv-offline-db | 3.0.3 | | @renovatebot/pep440 | 5.0.0 | | @renovatebot/pgp | 1.3.14 | | @renovatebot/ruby-semver | 5.0.0 | | @sec-ant/readable-stream | 0.4.1 | | @simple-git/args-pathspec | 1.0.3 | | @simple-git/argv-parser | 1.1.1 | | @sindresorhus/is | 4.6.0 | | @sindresorhus/is | 7.2.0 | | @sindresorhus/is | 8.1.0 | | @smithy/core | 3.25.0 | | @smithy/credential-provider-imds | 4.4.0 | | @smithy/fetch-http-handler | 5.5.0 | | @smithy/is-array-buffer | 2.2.0 | | @smithy/node-http-handler | 4.8.0 | | @smithy/signature-v4 | 5.5.0 | | @smithy/types | 4.15.0 | | @smithy/util-buffer-from | 2.2.0 | | @smithy/util-utf8 | 2.3.0 | | @szmarczak/http-timer | 4.0.6 | | @thi.ng/api | 7.2.0 | | @thi.ng/arrays | 1.0.3 | | @thi.ng/checks | 2.9.11 | | @thi.ng/compare | 1.3.34 | | @thi.ng/equiv | 1.0.45 | | @thi.ng/errors | 1.3.4 | | @thi.ng/hex | 1.0.4 | | @thi.ng/random | 2.4.8 | | @thi.ng/zipper | 1.0.3 | | @types/bunyan | 1.8.11 | | @types/cacheable-request | 6.0.3 | | @types/debug | 4.1.13 | | @types/emscripten | 1.41.5 | | @types/http-cache-semantics | 4.2.0 | | @types/keyv | 3.1.4 | | @types/mdast | 4.0.4 | | @types/moo | 0.5.10 | | @types/ms | 2.1.0 | | @types/node | 25.9.3 | | @types/parse-path | 7.0.3 | | @types/responselike | 1.0.3 | | @types/semver | 7.7.1 | | @types/treeify | 1.0.3 | | @types/unist | 3.0.3 | | @yarnpkg/core | 4.8.0 | | @yarnpkg/fslib | 3.1.5 | | @yarnpkg/libzip | 3.2.2 | | @yarnpkg/parsers | 3.0.3 | | @yarnpkg/shell | 4.1.3 | | abbrev | 4.0.0 | | acorn | 8.17.0 | | acorn-import-attributes | 1.9.5 | | adm-zip | 0.5.17 | | ae-cvss-calculator | 1.0.12 | | agent-base | 7.1.4 | | agentkeepalive | 4.6.0 | | ansi-regex | 5.0.1 | | ansi-regex | 6.2.2 | | ansi-regex | 6.2.2 | | ansi-regex | 6.2.2 | | ansi-styles | 4.3.0 | | ansi-styles | 6.2.3 | | anynum | 1.0.0 | | argparse | 1.0.10 | | argparse | 2.0.1 | | argparse | 2.0.1 | | argparse | 2.0.1 | | async-mutex | 0.5.0 | | aws4 | 1.13.2 | | azure-devops-node-api | 15.1.2 | | backslash | 0.2.2 | | bail | 2.0.2 | | balanced-match | 1.0.2 | | balanced-match | 1.0.2 | | balanced-match | 4.0.4 | | base64-js | 1.5.1 | | bignumber.js | 9.3.1 | | boolbase | 1.0.0 | | boolean | 3.2.0 | | bowser | 2.14.1 | | brace-expansion | 1.1.15 | | brace-expansion | 2.1.1 | | brace-expansion | 5.0.6 | | braces | 3.0.3 | | buffer-equal-constant-time | 1.0.1 | | buffer-from | 1.1.2 | | builtins | 5.1.0 | | bunyan | 1.8.15 | | byte-counter | 0.1.0 | | cacache | 20.0.4 | | cacheable-lookup | 5.0.4 | | cacheable-lookup | 7.0.0 | | cacheable-request | 13.0.19 | | cacheable-request | 7.0.4 | | call-bind-apply-helpers | 1.0.2 | | call-bound | 1.0.4 | | camelcase | 5.3.1 | | ccount | 2.0.1 | | chalk | 4.1.2 | | changelog-filename-regex | 2.0.1 | | character-entities | 2.0.2 | | chownr | 3.0.0 | | chunk-data | 0.1.0 | | ci-info | 4.4.0 | | cjs-module-lexer | 2.2.0 | | clean-git-ref | 2.0.1 | | clipanion | 4.0.0-rc.4 | | clone-response | 1.0.3 | | cluster-key-slot | 1.1.2 | | color-convert | 2.0.1 | | color-name | 1.1.4 | | commander | 14.0.3 | | concat-map | 0.0.1 | | core-js-pure | 3.49.0 | | croner | 10.0.1 | | cronstrue | 3.14.0 | | cross-spawn | 7.0.6 | | css-select | 5.2.2 | | css-what | 6.2.2 | | data-uri-to-buffer | 4.0.1 | | debug | 4.4.3 | | decode-named-character-reference | 1.3.0 | | decompress-response | 10.0.0 | | decompress-response | 6.0.0 | | deepmerge | 4.3.1 | | defer-to-connect | 2.0.1 | | define-data-property | 1.1.4 | | define-properties | 1.2.1 | | dequal | 2.0.3 | | des.js | 1.1.0 | | detect-indent | 7.0.2 | | detect-node | 2.1.0 | | devlop | 1.1.0 | | diff | 5.2.2 | | diff | 9.0.0 | | dom-serializer | 2.0.0 | | domelementtype | 2.3.0 | | domhandler | 5.0.3 | | domutils | 3.2.2 | | dotenv | 16.6.1 | | dtrace-provider | 0.8.8 | | dunder-proto | 1.0.1 | | eastasianwidth | 0.2.0 | | ecdsa-sig-formatter | 1.0.11 | | editorconfig | 3.0.2 | | email-addresses | 5.0.0 | | emoji-regex | 10.6.0 | | emoji-regex | 8.0.0 | | emoji-regex | 8.0.0 | | emoji-regex | 9.2.2 | | emojibase | 17.0.0 | | emojibase-regex | 17.0.0 | | end-of-stream | 1.4.5 | | entities | 4.5.0 | | env-paths | 2.2.1 | | error-ex | 1.3.4 | | es-define-property | 1.0.1 | | es-errors | 1.3.0 | | es-object-atoms | 1.1.2 | | es-toolkit | 1.47.1 | | es6-error | 4.1.1 | | escape-string-regexp | 4.0.0 | | escape-string-regexp | 5.0.0 | | eslint-visitor-keys | 5.0.1 | | esprima | 4.0.1 | | eventemitter3 | 5.0.4 | | execa | 8.0.1 | | exponential-backoff | 3.1.3 | | extend | 3.0.2 | | fast-deep-equal | 3.1.3 | | fast-glob | 3.3.3 | | fast-xml-builder | 1.2.0 | | fast-xml-parser | 5.7.3 | | fastq | 1.20.1 | | fdir | 6.5.0 | | fetch-blob | 3.2.0 | | fill-range | 7.1.1 | | find-packages | 10.0.4 | | find-up | 8.0.0 | | foreground-child | 3.3.1 | | form-data-encoder | 4.1.0 | | formdata-polyfill | 4.0.10 | | forwarded-parse | 2.1.2 | | fs-extra | 11.3.0 | | fs-extra | 11.3.5 | | fs-minipass | 3.0.3 | | function-bind | 1.1.2 | | gaxios | 7.1.3 | | gaxios | 7.1.5 | | gcp-metadata | 8.1.2 | | gcp-metadata | 8.1.3 | | get-intrinsic | 1.3.0 | | get-proto | 1.0.1 | | get-stream | 5.2.0 | | get-stream | 8.0.1 | | get-stream | 9.0.1 | | git-up | 8.1.1 | | git-url-parse | 16.1.0 | | github-url-from-git | 1.5.0 | | glob | 10.5.0 | | glob | 13.0.6 | | glob | 6.0.4 | | glob-parent | 5.1.2 | | global-agent | 3.0.0 | | globalthis | 1.0.4 | | google-auth-library | 10.7.0 | | google-logging-utils | 1.1.3 | | gopd | 1.2.0 | | got | 11.8.6 | | got | 14.6.6 | | got | 15.0.5 | | graceful-fs | 4.2.11 | | graph-data-structure | 4.5.0 | | grapheme-splitter | 1.0.4 | | handlebars | 4.7.9 | | has-flag | 4.0.0 | | has-property-descriptors | 1.0.2 | | has-symbols | 1.1.0 | | hasown | 2.0.4 | | he | 1.2.0 | | hpagent | 1.2.0 | | http-cache-semantics | 4.2.0 | | http2-wrapper | 1.0.3 | | http2-wrapper | 2.2.1 | | https-proxy-agent | 7.0.6 | | human-signals | 5.0.0 | | humanize-ms | 1.2.1 | | ignore | 7.0.5 | | import-in-the-middle | 3.1.0 | | imurmurhash | 0.1.4 | | inflight | 1.0.6 | | inherits | 2.0.4 | | ini | 6.0.0 | | install-artifact-from-github | 1.6.0 | | is-arrayish | 0.2.1 | | is-extglob | 2.1.1 | | is-fullwidth-code-point | 3.0.0 | | is-glob | 4.0.3 | | is-number | 7.0.0 | | is-plain-obj | 2.1.0 | | is-plain-obj | 4.1.0 | | is-ssh | 1.4.1 | | is-stream | 3.0.0 | | is-stream | 4.0.1 | | is-typedarray | 1.0.0 | | is-windows | 1.0.2 | | isexe | 2.0.0 | | isexe | 4.0.0 | | jackspeak | 3.4.3 | | js-md4 | 0.3.2 | | js-tokens | 4.0.0 | | js-yaml | 3.14.2 | | js-yaml | 4.2.0 | | js-yaml | 4.2.0 | | json-bigint | 1.0.0 | | json-buffer | 3.0.1 | | json-dup-key-validator | 1.0.3 | | json-parse-even-better-errors | 2.3.1 | | json-stringify-pretty-compact | 4.0.0 | | json-stringify-safe | 5.0.1 | | json5 | 2.2.3 | | jsonata | 2.2.1 | | jsonc-morph | 0.3.4 | | jsonc-weaver | 0.2.4 | | jsonfile | 6.2.1 | | jwa | 2.0.1 | | jws | 4.0.1 | | keyv | 4.5.4 | | keyv | 5.6.0 | | klona | 2.0.6 | | lines-and-columns | 1.2.4 | | linkify-it | 5.0.1 | | locate-path | 8.0.0 | | long | 5.3.2 | | longest-streak | 3.1.0 | | lowercase-keys | 2.0.0 | | lowercase-keys | 3.0.0 | | lowercase-keys | 4.0.1 | | lru-cache | 10.4.3 | | lru-cache | 11.5.1 | | luxon | 3.7.2 | | markdown-it | 14.2.0 | | markdown-table | 3.0.4 | | matcher | 3.0.0 | | math-intrinsics | 1.1.0 | | mdast-util-find-and-replace | 3.0.2 | | mdast-util-from-markdown | 2.0.3 | | mdast-util-gfm | 3.1.0 | | mdast-util-gfm-autolink-literal | 2.0.1 | | mdast-util-gfm-footnote | 2.1.0 | | mdast-util-gfm-strikethrough | 2.0.0 | | mdast-util-gfm-table | 2.0.0 | | mdast-util-gfm-task-list-item | 2.0.0 | | mdast-util-phrasing | 4.1.0 | | mdast-util-to-markdown | 2.1.2 | | mdast-util-to-string | 4.0.0 | | mdurl | 2.0.0 | | merge-stream | 2.0.0 | | merge2 | 1.4.1 | | micromark | 4.0.2 | | micromark-core-commonmark | 2.0.3 | | micromark-extension-gfm | 3.0.0 | | micromark-extension-gfm-autolink-literal | 2.1.0 | | micromark-extension-gfm-footnote | 2.1.0 | | micromark-extension-gfm-strikethrough | 2.1.0 | | micromark-extension-gfm-table | 2.1.1 | | micromark-extension-gfm-tagfilter | 2.0.0 | | micromark-extension-gfm-task-list-item | 2.1.0 | | micromark-factory-destination | 2.0.1 | | micromark-factory-label | 2.0.1 | | micromark-factory-space | 2.0.1 | | micromark-factory-title | 2.0.1 | | micromark-factory-whitespace | 2.0.1 | | micromark-util-character | 2.1.1 | | micromark-util-chunked | 2.0.1 | | micromark-util-classify-character | 2.0.1 | | micromark-util-combine-extensions | 2.0.1 | | micromark-util-decode-numeric-character-reference | 2.0.2 | | micromark-util-decode-string | 2.0.1 | | micromark-util-encode | 2.0.1 | | micromark-util-html-tag-name | 2.0.1 | | micromark-util-normalize-identifier | 2.0.1 | | micromark-util-resolve-all | 2.0.1 | | micromark-util-sanitize-uri | 2.0.1 | | micromark-util-subtokenize | 2.1.0 | | micromark-util-symbol | 2.0.1 | | micromark-util-types | 2.0.2 | | micromatch | 4.0.8 | | mimic-fn | 4.0.0 | | mimic-response | 1.0.1 | | mimic-response | 3.1.0 | | mimic-response | 4.0.0 | | minimalistic-assert | 1.0.1 | | minimatch | 10.2.5 | | minimatch | 3.1.5 | | minimatch | 9.0.9 | | minimist | 1.2.8 | | minipass | 3.3.6 | | minipass | 3.3.6 | | minipass | 7.1.3 | | minipass-collect | 2.0.1 | | minipass-flush | 1.0.7 | | minipass-pipeline | 1.2.4 | | minizlib | 3.1.0 | | mkdirp | 0.5.6 | | module-details-from-path | 1.0.4 | | moment | 2.30.1 | | moo | 0.5.3 | | ms | 2.1.3 | | mv | 2.1.1 | | nan | 2.27.0 | | ncp | 2.0.0 | | neo-async | 2.6.2 | | neotraverse | 0.6.18 | | node-domexception | 1.0.0 | | node-fetch | 3.3.2 | | node-gyp | 12.4.0 | | node-html-parser | 7.1.0 | | nopt | 9.0.0 | | normalize-url | 6.1.0 | | normalize-url | 8.1.1 | | npm-run-path | 5.3.0 | | nth-check | 2.1.1 | | object-inspect | 1.13.4 | | object-keys | 1.1.1 | | once | 1.4.0 | | onetime | 6.0.0 | | openpgp | 6.3.1 | | p-all | 5.0.1 | | p-cancelable | 2.1.1 | | p-cancelable | 4.0.1 | | p-filter | 2.1.0 | | p-limit | 2.3.0 | | p-limit | 4.0.0 | | p-locate | 6.0.0 | | p-map | 2.1.0 | | p-map | 6.0.0 | | p-map | 7.0.4 | | p-queue | 9.3.0 | | p-throttle | 8.1.0 | | p-timeout | 7.0.1 | | p-try | 2.2.0 | | package-json-from-dist | 1.0.1 | | parse-json | 5.2.0 | | parse-link-header | 2.0.0 | | parse-path | 7.1.0 | | parse-url | 9.2.0 | | path-expression-matcher | 1.5.0 | | path-is-absolute | 1.0.1 | | path-key | 3.1.1 | | path-key | 4.0.0 | | path-scurry | 1.11.1 | | path-scurry | 2.0.2 | | picocolors | 1.1.1 | | picomatch | 2.3.2 | | picomatch | 4.0.4 | | prettier | 3.8.1 | | proc-log | 6.1.0 | | protobufjs | 8.6.2 | | protocols | 2.0.2 | | pump | 3.0.4 | | punycode | 2.3.1 | | punycode.js | 2.3.1 | | qs | 6.15.2 | | queue-microtask | 1.2.3 | | quick-lru | 5.1.1 | | re2 | 1.24.1 | | read-yaml-file | 2.1.0 | | remark | 15.0.1 | | remark-gfm | 4.0.1 | | remark-github | 12.0.0 | | remark-parse | 11.0.0 | | remark-stringify | 11.0.0 | | renovate | 43.227.1 | | require-in-the-middle | 8.0.1 | | resolve-alpn | 1.2.1 | | responselike | 2.0.1 | | responselike | 4.0.2 | | reusify | 1.1.0 | | rimraf | 2.4.5 | | rimraf | 5.0.10 | | roarr | 2.15.4 | | run-parallel | 1.2.0 | | safe-buffer | 5.2.1 | | safe-json-stringify | 1.2.0 | | safe-stable-stringify | 2.5.0 | | sax | 1.6.0 | | semver | 6.3.1 | | semver | 7.8.3 | | semver-compare | 1.0.0 | | semver-stable | 3.0.0 | | semver-utils | 1.1.4 | | serialize-error | 7.0.1 | | shebang-command | 2.0.0 | | shebang-regex | 3.0.0 | | shlex | 3.0.0 | | side-channel | 1.1.1 | | side-channel-list | 1.0.1 | | side-channel-map | 1.0.1 | | side-channel-weakmap | 1.0.2 | | signal-exit | 3.0.7 | | signal-exit | 4.1.0 | | simple-git | 3.36.0 | | slugify | 1.6.9 | | sort-keys | 4.2.0 | | source-map | 0.6.1 | | source-map-support | 0.5.21 | | sprintf-js | 1.0.3 | | sprintf-js | 1.1.3 | | ssri | 13.0.1 | | string-width | 4.2.3 | | string-width | 4.2.3 | | string-width | 5.1.2 | | strip-ansi | 6.0.1 | | strip-ansi | 6.0.1 | | strip-ansi | 7.2.0 | | strip-ansi | 7.2.0 | | strip-ansi | 7.2.0 | | strip-bom | 4.0.0 | | strip-comments-strings | 1.2.0 | | strip-final-newline | 3.0.0 | | strip-json-comments | 5.0.3 | | strnum | 2.4.0 | | supports-color | 7.2.0 | | tagged-tag | 1.0.0 | | tar | 7.5.16 | | tinyglobby | 0.2.17 | | tinylogic | 2.0.0 | | to-regex-range | 5.0.1 | | to-vfile | 8.0.0 | | toml-eslint-parser | 1.0.3 | | treeify | 1.1.0 | | trough | 2.2.0 | | tslib | 2.8.1 | | tunnel | 0.0.6 | | typanion | 3.14.0 | | type-fest | 0.13.1 | | type-fest | 4.41.0 | | type-fest | 5.7.0 | | typed-rest-client | 2.1.0 | | typedarray-to-buffer | 3.1.5 | | uc.micro | 2.1.0 | | uglify-js | 3.19.3 | | uint8array-extras | 1.5.0 | | underscore | 1.13.8 | | undici | 6.27.0 | | undici-types | 7.24.6 | | unicorn-magic | 0.3.0 | | unified | 11.0.5 | | unist-util-is | 6.0.1 | | unist-util-stringify-position | 4.0.0 | | unist-util-visit | 5.1.0 | | unist-util-visit-parents | 6.0.2 | | universalify | 2.0.1 | | upath | 3.0.7 | | url-join | 5.0.0 | | validate-npm-package-name | 5.0.0 | | validate-npm-package-name | 7.0.2 | | vfile | 6.0.3 | | vfile-message | 4.0.3 | | web-streams-polyfill | 3.3.3 | | which | 2.0.2 | | which | 6.0.1 | | wordwrap | 1.0.0 | | wrap-ansi | 7.0.0 | | wrap-ansi | 8.1.0 | | wrappy | 1.0.2 | | write-file-atomic | 3.0.3 | | write-file-atomic | 5.0.1 | | write-yaml-file | 4.2.0 | | xml-naming | 0.1.0 | | xmldoc | 2.0.3 | | xtend | 4.0.2 | | yallist | 4.0.0 | | yallist | 4.0.0 | | yallist | 5.0.0 | | yaml | 2.9.0 | | yocto-queue | 1.2.2 | | zod | 4.4.3 | | zwitch | 2.0.4 | ### code.thinkaboutit.tech/pandora/renovate.woodpecker:latest (wolfi 20230201) **code.thinkaboutit.tech/pandora/renovate.woodpecker:latest** | Name | Version | | ---- | ------- | | apk-tools | 2.14.10-r12 | | busybox | 1.37.0-r60 | | c-ares | 1.34.6-r1 | | ca-certificates | 20260413-r0 | | ca-certificates-bundle | 20260413-r0 | | cyrus-sasl-heimdal-libs | 2.1.28-r52 | | gdbm | 1.26-r5 | | git | 2.54.0-r0 | | glibc | 2.43-r8 | | glibc-locale-posix | 2.43-r8 | | heimdal-libs | 7.8.0-r48 | | icu78-data-full | 78.3-r1 | | keyutils-libs | 1.6.3-r38 | | krb5-conf | 1.0-r9 | | krb5-libs | 1.22.2-r2 | | ld-linux | 2.43-r8 | | libbrotlicommon1 | 1.2.0-r3 | | libbrotlidec1 | 1.2.0-r3 | | libbrotlienc1 | 1.2.0-r3 | | libcom_err | 1.47.4-r1 | | libcrypt1 | 2.43-r8 | | libcrypto3 | 3.6.3-r1 | | libcurl-openssl4 | 8.20.0-r1 | | libexpat1 | 2.8.1-r1 | | libgcc | 16.1.0-r2 | | libicu78 | 78.3-r1 | | libidn2 | 2.3.8-r7 | | libldap | 2.6.10-r5 | | libnghttp2-14 | 1.69.0-r0 | | libpcre2-8-0 | 10.47-r0 | | libpsl | 0.21.5-r8 | | libssl3 | 3.6.3-r1 | | libstdc++ | 16.1.0-r2 | | libunistring | 1.4.2-r2 | | libuv | 1.52.1-r1 | | libverto | 0.3.2-r7 | | libxcrypt | 4.5.2-r3 | | ncurses | 6.6.20260613-r2 | | ncurses-terminfo-base | 6.6.20260613-r2 | | nghttp3 | 1.16.0-r0 | | ngtcp2 | 1.23.0-r0 | | node-gyp | 13.0.0-r0 | | nodejs-24 | 24.16.0-r1 | | npm | 11.17.0-r0 | | readline | 8.3-r2 | | sqlite-libs | 3.53.2-r1 | | wolfi-base | 1-r7 | | wolfi-baselayout | 20230201-r29 | | wolfi-keys | 1-r13 | | zlib | 1.3.2-r3 | </details> <details><summary>Vulnerabilities</summary> ### Node.js **code.thinkaboutit.tech/pandora/renovate.woodpecker:latest** | Package Name | Severity | Installed version | Fixed Version | Status | Link | | ------------ | -------- | ----------------- | ------------- | ------ | ---- | | @opentelemetry/core | MEDIUM | 2.7.1 | 2.8.0 | fixed | [CVE-2026-54285](https://avd.aquasec.com/nvd/cve-2026-54285) | | js-yaml | MEDIUM | 3.14.2 | 4.2.0 | fixed | [CVE-2026-53550](https://avd.aquasec.com/nvd/cve-2026-53550) | </details>
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
pandora/renovate.woodpecker#9
No description provided.