Dependency Dashboard

[bootc-bot]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: github.com token 401 unauthorized
• ⚠️ WARN: Package lookup failures

---

Warning

Renovate failed to look up the following dependencies: Failed to look up github-digest package bootc-dev/actions, Failed to look up github-digest package dtolnay/rust-toolchain.

Files affected: .github/workflows/bootc-revdep.yml, .github/workflows/ci.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update github actions (actions/cache, actions/checkout, actions/upload-artifact, extractions/setup-just, ubuntu)
• fix(deps): update rust (cap-std, cap-std-ext, cap-tempfile, fuser, indicatif, oci-spec, ocidir, rand, reqwest, test-with, toml)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cargo (13)

Cargo.toml

crates/cfsctl/Cargo.toml (10)

• anyhow 1.0.87
• fn-error-context 0.2
• clap 4.5.0
• comfy-table 7.1
• env_logger 0.11.0
• hex 0.4.0
• rustix 1.0.0
• serde 1.0
• serde_json 1.0
• tokio 1.24.2

crates/composefs-boot/Cargo.toml (7)

• anyhow 1.0.87
• fn-error-context 0.2
• hex 0.4.0
• regex-automata 0.4.4
• thiserror 2.0.0
• zerocopy 0.8.0
• similar-asserts 1.7.0

crates/composefs-fuse/Cargo.toml (4)

• anyhow 1.0.98
• fuser 0.15.1 → [Updates: 0.17.0]
• log 0.4.8
• rustix 1.0.0

crates/composefs-http/Cargo.toml (8)

• anyhow 1.0.87
• bytes 1.7.1
• hex 0.4.0
• indicatif 0.17.0 → [Updates: 0.18.0]
• reqwest 0.12.15 → [Updates: 0.13.0]
• sha2 0.10.1
• tokio 1.24.2
• similar-asserts 1.7.0

crates/composefs-ioctls/Cargo.toml (4)

• rustix 1.0.0
• thiserror 2
• tempfile 3.8.0
• test-with 0.14 → [Updates: 0.16]

crates/composefs-oci/Cargo.toml (23)

• anyhow 1.0.87
• fn-error-context 0.2
• async-compression 0.4.0
• bytes 1
• containers-image-proxy 0.9.2
• hex 0.4.0
• indicatif 0.17.0 → [Updates: 0.18.0]
• oci-spec 0.8.0 → [Updates: 0.9.0]
• rustix 1.0.0
• serde 1.0
• thiserror 2.0.0
• serde_json 1.0
• sha2 0.10.1
• tar-core 0.1.0
• tokio 1.24.2
• tokio-util 0.7
• cap-std 3.4.5 → [Updates: 4.0.0]
• cap-tempfile 3.4.5 → [Updates: 4.0.0]
• similar-asserts 1.7.0
• tar 0.4.38
• once_cell 1.21.3
• proptest 1
• tempfile 3.8.0

crates/composefs-setup-root/Cargo.toml (9)

• anyhow 1.0.87
• fn-error-context 0.2
• clap 4.0.1
• env_logger 0.11.0
• hex 0.4.3
• rustix 1.0.0
• serde 1.0.145
• toml 0.8.0 → [Updates: 1.0.0]
• similar-asserts 1.7.0

crates/composefs/Cargo.toml (23)

• anyhow 1.0.87
• serde 1.0
• fn-error-context 0.2
• hex 0.4.0
• log 0.4.8
• once_cell 1.21.3
• rustix 1.0.0
• sha2 0.10.1
• thiserror 2.0.0
• tokio 1.24.2
• tempfile 3.8.0
• xxhash-rust 0.8.2
• zerocopy 0.8.0
• zstd 0.13.0
• rand 0.9.1 → [Updates: 0.10.0]
• cap-std 3.4.5 → [Updates: 4.0.0]
• cap-tempfile 3.4.5 → [Updates: 4.0.0]
• insta 1.42.2
• proptest 1
• similar-asserts 1.7.0
• tempfile 3.8.0
• test-with 0.14 → [Updates: 0.16]
• tokio-test 0.4.4

crates/composefs/fuzz/Cargo.toml (1)

• libfuzzer-sys 0.4

crates/erofs-debug/Cargo.toml (1)

• clap 4.0.1

crates/integration-tests/Cargo.toml (11)

• anyhow 1
• cap-std-ext 4.0 → [Updates: 5.0]
• libtest-mimic 0.8
• linkme 0.3
• ocidir 0.6 → [Updates: 0.7]
• paste 1
• rustix 1.0.0
• serde_json 1.0
• tar 0.4
• tempfile 3
• xshell 0.2

crates/splitfdstream/Cargo.toml (3)

• rustix 1.0.0
• proptest 1
• tempfile 3.8.0

dockerfile (1)

Containerfile

github-actions (4)

.github/workflows/bootc-revdep.yml (3)

• actions/checkout v5 → [Updates: v6]
• bootc-dev/actions main
• ubuntu 24.04

.github/workflows/ci.yml (24)

• dtolnay/rust-toolchain nightly
• actions/checkout v4 → [Updates: v6]
• actions/checkout v4 → [Updates: v6]
• actions/checkout v5 → [Updates: v6]
• bootc-dev/actions main
• dtolnay/rust-toolchain stable
• Swatinem/rust-cache v2
• actions/checkout v4 → [Updates: v6]
• dtolnay/rust-toolchain nightly
• extractions/setup-just v2 → [Updates: v3]
• Swatinem/rust-cache v2
• actions/upload-artifact v4 → [Updates: v7]
• actions/checkout v5 → [Updates: v6]
• bootc-dev/actions main
• dtolnay/rust-toolchain stable
• Swatinem/rust-cache v2
• actions/checkout v4 → [Updates: v6]
• actions/cache v3 → [Updates: v5]
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/mirror-fixture-images.yml (2)

• actions/checkout v4 → [Updates: v6]
• ubuntu 24.04

.github/workflows/publish.yml (2)

• actions/checkout v4 → [Updates: v6]
• ubuntu 22.04 → [Updates: 24.04]

renovate-config-presets (1)

renovate.json