DepsGuard

v0.1.38 Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

Published 1mo Secrets & Credentials

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

cli cooldown dependencies security npm package-manager

+6 more

pnpm rust software-supply-chain-security supply-chain-attacks supply-chain-security uv

Summary

AI summary

Minor fixes and improvements.

Type	Severity	Summary	CVE
Dependency
Dependency	Low	Bump actions/upload-pages-artifact from 4.0.0 to 5.0.0. Bump actions/upload-pages-artifact from 4.0.0 to 5.0.0. Source: llm_adapter@2026-06-12 Confidence: high	—
Dependency	Low	Bump pnpm/action-setup from 5.0.0 to 6.0.3. Bump pnpm/action-setup from 5.0.0 to 6.0.3. Source: llm_adapter@2026-06-12 Confidence: high	—
Dependency	Low	Bump actions/setup-node from 6.3.0 to 6.4.0. Bump actions/setup-node from 6.3.0 to 6.4.0. Source: llm_adapter@2026-06-12 Confidence: high	—
Dependency	Low	Bump tailwindcss from 4.2.2 to 4.3.0 in /docs. Bump tailwindcss from 4.2.2 to 4.3.0 in /docs. Source: llm_adapter@2026-06-12 Confidence: high	—
Dependency	Low	Bump actions/upload-artifact from 7.0.0 to 7.0.1. Bump actions/upload-artifact from 7.0.0 to 7.0.1. Source: llm_adapter@2026-06-12 Confidence: high	—
Dependency	Low	Bump softprops/action-gh-release from 2.6.1 to 3.0.0. Bump softprops/action-gh-release from 2.6.1 to 3.0.0. Source: llm_adapter@2026-06-12 Confidence: high	—

Full changelog

docs(site): correct config-resolution footnote for effective-config behavior by @eran-medan in https://github.com/arnica/depsguard/pull/51
deps(actions): bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 by @dependabot[bot] in https://github.com/arnica/depsguard/pull/26
deps(actions): bump pnpm/action-setup from 5.0.0 to 6.0.3 by @dependabot[bot] in https://github.com/arnica/depsguard/pull/35
deps(actions): bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in https://github.com/arnica/depsguard/pull/34
deps(docs): bump tailwindcss from 4.2.2 to 4.3.0 in /docs by @dependabot[bot] in https://github.com/arnica/depsguard/pull/43
deps(actions): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in https://github.com/arnica/depsguard/pull/32
deps(actions): bump softprops/action-gh-release from 2.6.1 to 3.0.0 by @dependabot[bot] in https://github.com/arnica/depsguard/pull/31

Full Changelog: https://github.com/arnica/depsguard/compare/v0.1.37...v0.1.38

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track DepsGuard

Get notified when new releases ship.

About DepsGuard