Dependency Dashboard

[squiggler-app]

How to use this dashboard

Full playbook: RENOVATE_STRATEGY.md

Quick section reference

• Pending Approval: should stay empty; we no longer gate updates behind dashboard approval.
• Awaiting Schedule / Rate-Limited: automatic, no action needed.
• Pending Status Checks: investigate if an item remains after a later Renovate run.
• PR Closed (Blocked): previously closed. Only tick to retry.
• Detected Dependencies: reference only.

Release-age policy follows the shared Sanity preset. The playbook documents the scoped timestamp exceptions for GitHub Action digests and lock file maintenance.

Common actions

Retry a closed PR: find it under "PR Closed (Blocked)" and tick the box.

A breaking major landed: majors automerge after CI and applicable release-age checks clear. If a major breaks our public API, edit the bump in the .changeset/renovate-*.md file on the Renovate branch from patch to minor or major before merge.

A PR won't automerge: check CI, the release-age status, and approval. A GitHub Action digest should not remain pending after a later Renovate run; see the playbook if it does.

A lockfile looks broken: run pnpm install locally, commit, and push to the Renovate branch. Renovate won't overwrite manual commits.

Rate-limited queue is huge: drain it by merging open Renovate PRs. The throttles are prHourlyLimit (currently 5) and prConcurrentLimit (currently 20) in .github/renovate.json.

The pnpm version comes from the root package.json packageManager field.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (14)

Datasource	Package	Last Updated
github-actions	CircleCI-Public/trigger-circleci-pipeline-action	2024-02-20
github-actions	LoveToKnow/slackify-markdown-action	2024-06-13
github-actions	amannn/action-semantic-pull-request	2025-08-22
github-actions	hmarr/auto-approve-action	2024-02-03
github-actions	thollander/actions-comment-pull-request	2024-11-02
npm	@sanity/browserslist-config	2024-12-18
npm	@sanity/json-match	2025-06-30
npm	eslint-plugin-react	2025-04-03
npm	husky	2024-11-18
npm	inter-ui	2025-06-22
npm	react-refractor	2025-07-23
npm	refractor	2025-03-11

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(dev-deps): update devdependencies (non-major) (@google-cloud/storage, fallow, knip, turbo, xstate)
• chore(tooling): update dependency eslint-config-turbo to ^2.11.4
• 🔐 Create all awaiting schedule PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency @module-federation/runtime to ^2.9.1
• chore(deps): update dependency reselect to ^5.3.0
• chore(tooling): update commitlint-tooling to ^21.2.3 (@commitlint/cli, @commitlint/config-conventional, @commitlint/types)
• chore(deps): update pnpm to v12.6.0
• fix(deps): update app dependencies (@portabletext/editor, @portabletext/plugin-sdk-value, @portabletext/toolbar, @sanity/ui, react-router, ui5)
• fix(deps): update dependency @types/node to ^24.19.0
• fix(deps): update sanity (@sanity/client, @sanity/diff-match-patch, @sanity/pkg-utils, @sanity/types)
• fix(deps): update sanity monorepo to ^6.16.0 (groq, sanity)
• chore(deps): update dependency @sanity/bifur-client to v2
• chore(deps): update dependency @sanity/diff-patch to v7
• chore(deps): update dependency dotenv to v18
• chore(apps): lock file maintenance
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update anthropics/claude-code-action digest to 756cc22
• chore(deps): update renovatebot/github-action action to v46.3.4
• fix(deps): update vitest-tooling to ^5.0.2 (@vitest/coverage-v8, vitest)
• chore(deps): update node.js to v24.21.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency rolldown to ^1.2.11
• fix(deps): update dependency vite to ^8.3.1
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update dependency typescript to v7

Detected Dependencies

circleci (1)

.circleci/config.yml (1)

• cimg/node 24.19.0 → [Updates: 24.21.0]

github-actions (23)

.github/actions/setup/action.yml (3)

• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• pnpm/action-setup v6@0977fd99725f1db4007ccb2928dbb4e90d06cc86
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

.github/workflows/ailf-run.yml (1)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1

.github/workflows/build.yml (1)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/bundle-stats.yml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• rexxars/bundle-stats v2.0.1@c8bb783559da734cbb251f66731ee5227ba41059

.github/workflows/changeset-reminder.yml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• thollander/actions-comment-pull-request v3@24bffb9b452ba05a4f3f77933840a6a841d1b32b
• thollander/actions-comment-pull-request v3@24bffb9b452ba05a4f3f77933840a6a841d1b32b

.github/workflows/claude-code-review.yml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• anthropics/claude-code-action v1@6b082c41935b4c8a3b8b0ef85ba4ba4d9eeb8975 → [Updates: v1]
• anthropics/claude-code-action v1@6b082c41935b4c8a3b8b0ef85ba4ba4d9eeb8975 → [Updates: v1]

.github/workflows/claude.yml (3)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• anthropics/claude-code-action v1@6b082c41935b4c8a3b8b0ef85ba4ba4d9eeb8975 → [Updates: v1]

.github/workflows/depcheck.yml (1)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/deploy-kitchensink.yml (4)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• pnpm/action-setup v6@0977fd99725f1db4007ccb2928dbb4e90d06cc86
• node 24.21.0

.github/workflows/e2e.yml (5)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/fallow.yml (1)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/kitchensink-preview.yml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/lint.yml (1)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/pkg-pr-new.yml (1)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/release-notes.yml (2)

• LoveToKnow/slackify-markdown-action v1.1.1@698a1d4d0ff1794152a93c03ee8ca5e03a310d4e
• slackapi/slack-github-action v4.0.0@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d

.github/workflows/release-rc.yml (4)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• pnpm/action-setup v6@0977fd99725f1db4007ccb2928dbb4e90d06cc86
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020

.github/workflows/release.yml (10)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• pnpm/action-setup v6@0977fd99725f1db4007ccb2928dbb4e90d06cc86
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• changesets/action v2.1.2@ae32849d5ba541f9ae29e40e22a623bc13562f51
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• pnpm/action-setup v6@0977fd99725f1db4007ccb2928dbb4e90d06cc86
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• sanity-labs/mark-issues-done-action main@88e6a3e6bc5a9c86d45873c4dba3302a4cafcb65
• CircleCI-Public/trigger-circleci-pipeline-action v1.2.0@a81cd720792a6088debd7f182b552845abb86f1b

.github/workflows/renovate-auto-approve.yml (2)

• lewagon/wait-on-check-action v1.9.1@369769072fe522a3a8a85c03c96af1e5242a1994
• hmarr/auto-approve-action v4

.github/workflows/renovate.yml (3)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• renovatebot/github-action v46.3.3@9fea9f0fbf80401026d11d03911d62b1f70fef1f → [Updates: v46.3.4]

.github/workflows/test.yml (5)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• davelosert/vitest-coverage-report-action v2@c4bbc33a89b7ace0e63d35f1f7d4bcee31155a73

.github/workflows/type-check.yml (1)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/upload-docs.yml (6)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• thollander/actions-comment-pull-request v3@24bffb9b452ba05a4f3f77933840a6a841d1b32b
• sanity-io/reference-api-typedoc main@fd5944c59c46ceb262fbb403f44299889c336ec7
• sanity-io/reference-api-typedoc main@fd5944c59c46ceb262fbb403f44299889c336ec7
• sanity-io/reference-api-typedoc main@fd5944c59c46ceb262fbb403f44299889c336ec7

.github/workflows/validate-pr-title.yml (1)

• amannn/action-semantic-pull-request v6@48f256284bd46cdaab1048c3721360e808335d50

npm (13)

apps/kitchensink-react/package.json (13)

• @portabletext/editor 8.1.5 → [Updates: 8.2.1]
• @portabletext/keyboard-shortcuts ^3.0.0
• @portabletext/plugin-sdk-value 8.1.4 → [Updates: 8.1.9]
• @portabletext/toolbar ^9.0.10 → [Updates: ^9.0.15]
• @sanity/icons ^5.2.2
• @sanity/ui ^4.2.1 → [Updates: ^4.2.6]
• inter-ui ^4.1.1
• json-edit-react ^1.30.2
• react-refractor ^4.0.0
• react-router ^8.3.1 → [Updates: ^8.4.0]
• refractor ^5.0.0
• styled-components ^6.5.3
• ui5 5.0.0-alpha.10 → [Updates: 5.0.0-alpha.11]

apps/standalone-react/package.json

package.json (16)

• @changesets/changelog-github ^1.0.1
• @changesets/cli ^3.0.3
• @commitlint/cli ^21.2.2 → [Updates: ^21.2.3]
• @commitlint/config-conventional ^21.2.2 → [Updates: ^21.2.3]
• @commitlint/types ^21.2.0 → [Updates: ^21.2.3]
• @google-cloud/storage ^8.1.0 → [Updates: ^8.2.0]
• esbuild ^0.28.2
• fallow ^3.24.1 → [Updates: ^3.28.0]
• husky ^9.1.7
• knip ^6.35.1 → [Updates: ^6.38.0]
• lint-staged ^17.5.1 → [Updates: ^17.6.0]
• npm-run-all2 ^9.0.3
• read-package-up ^12.0.0
• turbo ^2.10.12 → [Updates: ^2.11.4]
• typedoc ^0.28.20
• pnpm 12.4.0 → [Updates: 12.6.0]

packages/@repo/config-eslint/package.json (14)

• @eslint/js ^10.0.1
• eslint-config-prettier ^10.1.8
• eslint-config-turbo ^2.11.2 → [Updates: ^2.11.4]
• eslint-import-resolver-typescript ^4.4.5
• eslint-plugin-import-x ^4.17.1
• eslint-plugin-react ^7.37.5
• eslint-plugin-react-compiler 19.1.0-rc.2
• eslint-plugin-react-hooks ^7.1.1
• eslint-plugin-react-refresh ^0.5.7
• eslint-plugin-simple-import-sort ^14.0.0
• eslint-plugin-tsdoc ^0.5.3
• eslint-plugin-unused-imports ^4.4.1
• globals ^17.12.0
• typescript-eslint ^8.70.1

packages/@repo/config-test/package.json

packages/@repo/dev-aliases/package.json

packages/@repo/e2e/package.json (4)

• dotenv ^17.4.2 → [Updates: ^18.0.3]
• ora ^7.0.1
• @playwright/test ^1.57.0
• pnpm 12.4.0 → [Updates: 12.6.0]

packages/@repo/package.bundle/package.json (2)

• @rolldown/plugin-babel ^0.2.4
• babel-plugin-react-compiler ^1.0.0

packages/@repo/package.config/package.json

packages/@repo/tsconfig/package.json

packages/core/package.json (11)

• @sanity/bifur-client ^1.0.0 → [Updates: ^2.0.2]
• @sanity/diff-match-patch ^3.2.0 → [Updates: ^3.2.1]
• @sanity/diff-patch ^6.0.0 → [Updates: ^7.0.0]
• @sanity/id-utils ^1.1.0
• @sanity/image-url ^2.1.1
• @sanity/json-match ^1.0.5
• @sanity/mutate ^0.18.2
• @sanity/telemetry ^1.1.0
• reselect ^5.1.1 → [Updates: ^5.3.0]
• zustand ^5.0.15
• pnpm 12.4.0 → [Updates: 12.6.0]

packages/react/package.json (6)

• @module-federation/runtime ^2.9.0 → [Updates: ^2.9.1]
• babel-plugin-react-compiler ^1.0.0
• xstate 5.32.6 → [Updates: 5.33.2]
• react ^19.2.0
• react-dom ^19.2.0
• pnpm 12.4.0 → [Updates: 12.6.0]

pnpm-workspace.yaml (34)

• @playwright/test ^1.63.0
• @sanity/browserslist-config ^1.0.5
• @sanity/client ^8.6.2 → [Updates: ^8.7.0]
• @sanity/comlink ^4.0.3
• @sanity/message-protocol ^0.24.0
• @sanity/pkg-utils ^13.0.1 → [Updates: ^13.0.2]
• @sanity/tsconfig ^2.2.1
• @sanity/types ^6.15.0 → [Updates: ^6.16.0]
• sanity ^6.15.0 → [Updates: ^6.16.0]
• @testing-library/jest-dom ^7.0.1
• @testing-library/react ^16.3.3
• @types/lodash-es ^4.17.12
• @types/node ^24.13.6 → [Updates: ^24.19.0]
• @types/react ^19.3.0
• @types/react-dom ^19.3.0
• @vitejs/plugin-react ^6.1.1
• @vitest/coverage-v8 ^5.0.1 → [Updates: ^5.0.2]
• eslint ^10.11.0
• groq ^6.15.0 → [Updates: ^6.16.0]
• groq-js ^2.0.0
• jsdom ^30.1.1
• lodash-es ^4.18.1
• oxfmt ^0.70.0
• react ^19.3.0
• react-compiler-runtime ^1.0.0
• react-dom ^19.3.0
• react-error-boundary ^6.1.6
• rimraf ^6.0.1
• rolldown ^1.2.10 → [Updates: ^1.2.11]
• rxjs ^7.8.2
• tsx ^4.23.15
• typescript ^6.0.3 → [Updates: ^7.0.2]
• vite ^8.3.0 → [Updates: ^8.3.1]
• vitest ^5.0.1 → [Updates: ^5.0.2]

regex (1)

package.json (1)

• node 24.21.0

renovate-config (1)

.github/renovate.json