Dependency Dashboard

[svc-secops]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

See Config Migration PR: #483.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• chore(deps): update actions/checkout action to v5
• chore(deps): update actions/create-github-app-token action to v2
• chore(deps): update actions/setup-node action to v6
• chore(deps): update actions/upload-artifact action to v5
• chore(deps): update dependency next to v16
• chore(deps): update dependency node to v24
• chore(deps): update relative-ci/agent-action action to v3
• chore(deps): update stefanzweifel/git-auto-commit-action action to v7
• fix(deps): update dependency global-jsdom to v27
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update dependency esbuild to v0.25.0 [security]
• chore(deps): update dependency tsup to v8.3.5 [security]
• chore(deps): pin dependency next to v16.0.0
• chore(deps): update dependency graphql to v17.0.0-alpha.9
• chore(deps): update all @types (@types/node, @types/pacote, @types/react, @types/react-dom, @typescript-eslint/eslint-plugin, @typescript-eslint/parser)
• chore(deps): update all devdependencies (@arethetypeswrong/cli, @microsoft/api-documenter, @microsoft/api-extractor, @size-limit/file, @size-limit/webpack, @size-limit/webpack-why, @tanstack/react-router, @tanstack/react-start, @tanstack/router-core, @testing-library/dom, @testing-library/react, @tsconfig/recommended, @yarnpkg/cli, @yarnpkg/core, eslint, eslint-plugin-react, eslint-plugin-react-hooks, graphql, jsdom, knip, pacote, publint, react-error-boundary, react-router, rimraf, rxjs, size-limit, tsx, typescript, zx)
• chore(deps): update dependency @microsoft/api-documenter to v7.27.3
• chore(deps): update yarn to v4.10.3
• chore(deps): update all @types (major) (@types/node, @typescript-eslint/eslint-plugin, @typescript-eslint/parser)
• chore(deps): update all devdependencies (major) (concurrently, eslint, eslint-plugin-react-hooks, global-jsdom, jsdom, react-error-boundary, rimraf)
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

8/8 CVEs have Renovate fixes.

npm

packages/client-react-streaming/package.json

esbuild

• GHSA-67mh-4wv8-2f99 (fixed in >= 0.25.0)

tsup

• GHSA-3mv9-4h5g-vhg3 (fixed in > 8.3.4)

packages/nextjs/package.json

esbuild

• GHSA-67mh-4wv8-2f99 (fixed in >= 0.25.0)

tsup

• GHSA-3mv9-4h5g-vhg3 (fixed in > 8.3.4)

packages/react-router/package.json

esbuild

• GHSA-67mh-4wv8-2f99 (fixed in >= 0.25.0)

tsup

• GHSA-3mv9-4h5g-vhg3 (fixed in > 8.3.4)

packages/tanstack-start/package.json

esbuild

• GHSA-67mh-4wv8-2f99 (fixed in >= 0.25.0)

tsup

• GHSA-3mv9-4h5g-vhg3 (fixed in > 8.3.4)

Detected dependencies

circleci

.circleci/config.yml

• secops 2.0.7

github-actions

.github/workflows/docs.yml

• actions/create-github-app-token v1
• actions/checkout v4
• actions/setup-node v4
• stefanzweifel/git-auto-commit-action v5
• node 18.x

.github/workflows/issue-close-user-survey.yml

.github/workflows/knip.yml

• actions/checkout v4
• actions/setup-node v4
• node 24.x

.github/workflows/pkg-pr-new-publish.yml

• actions/checkout v4
• actions/setup-node v4
• node 24.x

.github/workflows/publish.yml

• actions/create-github-app-token v1
• actions/checkout v4
• actions/setup-node v4
• changesets/action v1
• node 24.x

.github/workflows/relative-ci.yaml

• relative-ci/agent-action v2

.github/workflows/size-limit.yml

• actions/checkout v4
• actions/setup-node v4
• andresz1/size-limit-action v1
• node 24.x

.github/workflows/tests.yml

• actions/checkout v4
• actions/setup-node v4
• actions/checkout v4
• actions/setup-node v4
• actions/checkout v4
• actions/setup-node v4
• actions/checkout v4
• actions/setup-node v4
• actions/cache v4
• relative-ci/agent-upload-artifact-action v2
• actions/upload-artifact v4
• node 24.x
• node 24.x
• node 24.x
• node 24.x

.github/workflows/vercel-integration.yml

• actions/checkout v4
• actions/setup-node v4
• actions/cache v4
• actions/upload-artifact v4
• node 24.x

npm

package.json

• @changesets/cli ^2.27.10
• @yarnpkg/types ^4.0.0
• prettier ^3.0.0
• semver ^7.6.0
• @microsoft/api-documenter 7.24.3
• @size-limit/file 11.1.2
• @size-limit/webpack 11.1.2
• @size-limit/webpack-why 11.1.2
• @types/node ^22.10.9
• @types/pacote ^11.1.8
• @yarnpkg/cli ^4.9.1
• @yarnpkg/core ^4.2.0
• knip ^5.43.1
• pacote ^21.0.3
• size-limit 11.1.2
• typescript ^5.7.3
• zx ^8.8.3
• @microsoft/api-documenter 7.24.1
• graphql 17.0.0-alpha.2
• @types/react 19.0.2
• @types/react-dom 19.0.2
• yarn 4.9.1

packages/client-react-streaming/package.json

• @types/react-dom ^19.0.0
• @wry/equality ^0.5.6
• @arethetypeswrong/cli 0.15.3
• @microsoft/api-extractor 7.43.2
• @testing-library/dom ^10.4.0
• @testing-library/react ^16.1.0
• @total-typescript/shoehorn 0.1.2
• @tsconfig/recommended 1.0.6
• @types/node 20.12.11
• @types/react ^19.0.0
• @types/react-dom *
• concurrently 8.2.2
• esbuild ^0.24.2
• eslint 8.57.0
• global-jsdom 24.0.0
• graphql ^16.10.0
• jsdom 24.0.0
• publint 0.2.7
• react-error-boundary 4.0.13
• rimraf 5.0.5
• rxjs ^7.8.2
• tsup 8.0.2
• tsx 4.7.1
• typescript ^5.7.3
• graphql ^16 || >=17.0.0-alpha.2
• rxjs ^7.3.0

packages/experimental-nextjs-app-support/package.json

• @arethetypeswrong/cli 0.15.3
• @tsconfig/recommended 1.0.6
• @types/react *
• @types/react-dom *
• graphql *
• publint 0.2.7
• rxjs ^7.8.2
• typescript ^5.7.3
• next ^15.2.3
• rxjs ^7.3.0

packages/nextjs/package.json

• @arethetypeswrong/cli 0.15.3
• @microsoft/api-extractor 7.43.2
• @tsconfig/recommended 1.0.6
• @types/node 20.12.11
• @types/react ^19.0.8
• @types/react-dom ^19.0.3
• concurrently 8.2.2
• esbuild ^0.24.2
• eslint 8.57.0
• graphql ^16.10.0
• next ^16.0.0
• publint 0.2.7
• react-error-boundary ^5.0.0
• rimraf 5.0.5
• rxjs ^7.8.2
• tsup 8.0.2
• typescript ^5.7.3
• next ^15.2.3 || ^16.0.0
• rxjs ^7.3.0

packages/package.json

• @types/eslint 9.6.1
• @typescript-eslint/eslint-plugin 7.5.0
• @typescript-eslint/parser 7.5.0
• eslint 8.57.0
• eslint-plugin-react 7.34.1
• eslint-plugin-react-hooks 4.6.0

packages/react-router/package.json

• @types/react-dom ^19.0.0
• promiscade ^0.0.2
• @arethetypeswrong/cli 0.15.3
• @microsoft/api-extractor 7.43.2
• @tsconfig/recommended 1.0.6
• @types/node 20.12.11
• @types/react ^19.0.0
• @types/react-dom *
• concurrently 8.2.2
• esbuild 0.24.2
• eslint 8.57.0
• graphql ^16.10.0
• publint 0.2.7
• react-router ^7.2.0-pre.3
• rimraf 5.0.5
• rxjs ^7.8.2
• tsup 8.0.2
• typescript 5.4.5
• react-router ^7.2.0-pre.3
• rxjs ^7.3.0

packages/tanstack-start/package.json

• @arethetypeswrong/cli 0.15.3
• @microsoft/api-extractor 7.43.2
• @tanstack/react-router ^1.132.47
• @tanstack/react-start ^1.132.48
• @tanstack/router-core ^1.132.47
• @tsconfig/recommended 1.0.6
• @types/node 20.12.11
• @types/react ^19.0.0
• @types/react-dom *
• concurrently 8.2.2
• esbuild 0.24.2
• eslint 8.57.0
• graphql ^16.10.0
• publint 0.2.7
• rimraf 5.0.5
• rxjs ^7.8.2
• tsup 8.0.2
• typescript 5.4.5
• @tanstack/react-router ^1.132.47
• @tanstack/react-start ^1.132.48
• @tanstack/router-core ^1.132.47
• graphql ^16 || >=17.0.0-alpha.2
• rxjs ^7.3.0

packages/test-utils/package.json

• @testing-library/react-render-stream ^2.0.0
• global-jsdom ^26.0.0
• rxjs ^7.8.2
• typescript ^5.7.3
• @types/react *
• @types/react-dom *