Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update codecov/codecov-action action to v7
• Update dependency @babel/code-frame to v8
• Update dependency @changesets/cli to v3
• Update dependency @changesets/write to v1
• Update dependency pnpm to v12
• Update pnpm/action-setup action to v6
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency @xmldom/xmldom to v0.8.15 [SECURITY]
• Update dependency vitest to v4 [SECURITY]
• Update dependency @vitest/ui to v3.2.7
• Update dependency esbuild to ^0.28.0
• Update dependency flow-bin to ^0.333.0
• Update actions/checkout action to v7
• Update actions/setup-node action to v7
• Update dependency @humanwhocodes/momoa to v3
• Update dependency git-format-staged to v4
• Update dependency node to v24
• Update eslint monorepo to v10 (@eslint/js, eslint)
• Update vitest monorepo to v5 (@vitest/coverage-v8, @vitest/ui)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (4)

.github/workflows/codeql-analysis.yml (4)

• actions/checkout v4 → [Updates: v7]
• github/codeql-action v4
• github/codeql-action v4
• github/codeql-action v4

.github/workflows/dependabot.yml (5)

• actions/checkout v4 → [Updates: v7]
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v4 → [Updates: v7]
• pnpm 10 → [Updates: 12]
• node 20.x → [Updates: 24.x]

.github/workflows/main.yml (10)

• actions/checkout v4 → [Updates: v7]
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v4 → [Updates: v7]
• codecov/codecov-action v6 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v4 → [Updates: v7]
• pnpm 10 → [Updates: 12]
• pnpm 10 → [Updates: 12]
• node 20.x → [Updates: 24.x]

.github/workflows/release.yml (7)

• actions/checkout v4 → [Updates: v7]
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v4 → [Updates: v7]
• changesets/action master
• atlassian-labs/artifact-publish-token v1.0.1
• pnpm 10 → [Updates: 12]
• node 18.x → [Updates: 24.x]

npm (2)

package.json (26)

• @babel/code-frame ^7.27.1 → [Updates: ^8.0.0]
• @humanwhocodes/momoa ^2.0.4 → [Updates: ^3.0.0]
• jsonpointer ^5.0.1
• @changesets/cli ^2.29.8 → [Updates: ^3.0.0]
• @changesets/write ^0.4.0 → [Updates: ^1.0.0]
• @eslint/eslintrc ^3.3.3
• @eslint/js ^9.39.2 → [Updates: ^10.0.0]
• @vitest/coverage-v8 ^3.2.4 → [Updates: ^5.0.0]
• @vitest/eslint-plugin ^1.6.4
• @vitest/ui 3.2.4 → [Updates: 3.2.7, 5.0.2]
• ajv ^8.17.1
• esbuild ^0.25.12 → [Updates: ^0.28.0]
• eslint ^9.39.2 → [Updates: ^10.0.0]
• fast-glob ^3.3.3
• flow-bin ^0.272.2 → [Updates: ^0.333.0]
• git-format-staged ^3.1.2 → [Updates: ^4.0.0]
• globals ^17.0.0
• husky ^9.0.0
• is-ci ^4.1.0
• jest-fixtures ^0.6.0
• prettier ^3.7.4
• publint ^0.3.16
• svg-term-cli ^2.1.1
• vitest ^3.2.4 → [Updates: ^4.0.0]
• ajv 4.11.8 - 8
• node >= 18.20.6

pnpm-workspace.yaml (10)

• @babel/runtime@<7.26.10 >=7.26.10
• cross-spawn@<6.0.6 >=6.0.6
• cross-spawn@>=7.0.0 <7.0.5 >=7.0.5
• node-fetch@<2.6.7 >=2.6.7
• nth-check@<2.0.1 >=2.0.1
• plist@<3.0.5 >=3.0.5
• semver@<5.7.2 >=5.7.2
• semver@>=7.0.0 <7.5.2 >=7.5.2
• trim-newlines@<3.0.1 >=3.0.1
• @xmldom/xmldom 0.8.13 → [Updates: 0.8.15]

---

• Check this box to trigger a request for Renovate to run again on this repository