Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	@rspack/plugin-html
npm	@tsconfig/esm
npm	@types/parse5
npm	eslint-plugin-i
npm	trim

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update babel monorepo (patch) (@babel/core, @babel/traverse@<7.23.2)
• fix(deps): update dependency @rspack/core to ^1.1.8
• fix(deps): update dependency @vitest/coverage-v8 to ^2.1.9
• fix(deps): update dependency rollup@>=4.0.0 <4.22.4 to >=4.22.5
• fix(deps): update type dependencies (patch) (@types/node, typescript)
• fix(deps): update visulima (patch) (@visulima/find-cache-dir, @visulima/packem)
• fix(deps): update babel monorepo to ^7.28.0 (minor) (@babel/core, @babel/eslint-parser, @babel/traverse@<7.23.2)
• fix(deps): update commitlint monorepo to ^19.8.1 (minor) (@commitlint/cli, @commitlint/config-conventional, commitlint)
• fix(deps): update dependency prettier to ^3.6.2
• fix(deps): update dependency textlint to ^14.8.4
• fix(deps): update eslint (minor) (eslint-plugin-mdx, eslint-plugin-n, eslint-plugin-vitest)
• fix(deps): update github-actions (actions/checkout, actions/dependency-review-action, actions/download-artifact, actions/setup-node, actions/upload-artifact, amannn/action-semantic-pull-request, github/codeql-action, lewagon/wait-on-check-action, ljharb/require-allow-edits, marocchino/sticky-pull-request-comment, node, ossf/scorecard-action, step-security/harden-runner)
• fix(deps): update nuxtjs monorepo to ^3.17.7 (minor) (@nuxt/kit, @nuxt/schema)
• fix(deps): update rollup (minor) (rollup, rollup@>=4.0.0 <4.22.4)
• fix(deps): update rspack monorepo to ^1.4.10 (minor) (@rspack/cli, @rspack/core)
• fix(deps): update secretlint monorepo to ^9.3.4 (minor) (@secretlint/secretlint-rule-preset-recommend, secretlint)
• fix(deps): update type dependencies (minor) (type-fest, typescript)
• fix(deps): update visulima (minor) (@visulima/package, @visulima/packem)
• build(deps): update dependency rollup to v4
• build(deps): update dependency vite to v7
• chore(deps): update dependency @anolilab/commitlint-config to v6
• chore(deps): update dependency @anolilab/eslint-config to v16
• chore(deps): update dependency @anolilab/lint-staged-config to v3
• chore(deps): update dependency @anolilab/prettier-config to v6
• chore(deps): update dependency @anolilab/semantic-release-preset to v10
• chore(deps): update dependency @anolilab/semantic-release-preset to v11
• chore(deps): update dependency @anolilab/textlint-config to v9
• chore(deps): update dependency @vitest/coverage-v8 to v3
• chore(deps): update dependency body-parser@<1.20.3 to v2
• chore(deps): update dependency conventional-changelog-conventionalcommits to v9
• chore(deps): update dependency cookie@<0.7.0 to v1
• chore(deps): update dependency cosmiconfig-typescript-loader to v6
• chore(deps): update dependency express@<4.20.0 to v5
• chore(deps): update dependency lint-staged to v16
• chore(deps): update dependency nanoid@<3.3.8 to v4
• chore(deps): update dependency nanoid@<3.3.8 to v5
• chore(deps): update dependency path-to-regexp@<0.1.10 to v1
• chore(deps): update dependency path-to-regexp@<0.1.10 to v2
• chore(deps): update dependency path-to-regexp@<0.1.10 to v3
• chore(deps): update dependency path-to-regexp@<0.1.10 to v4
• chore(deps): update dependency path-to-regexp@<0.1.10 to v5
• chore(deps): update dependency path-to-regexp@<0.1.10 to v6
• chore(deps): update dependency path-to-regexp@<0.1.10 to v7
• chore(deps): update dependency path-to-regexp@<0.1.10 to v8
• chore(deps): update dependency path-to-regexp@<0.1.12 to v1
• chore(deps): update dependency path-to-regexp@<0.1.12 to v2
• chore(deps): update dependency path-to-regexp@<0.1.12 to v3
• chore(deps): update dependency path-to-regexp@<0.1.12 to v4
• chore(deps): update dependency path-to-regexp@<0.1.12 to v5
• chore(deps): update dependency path-to-regexp@<0.1.12 to v6
• chore(deps): update dependency path-to-regexp@<0.1.12 to v7
• chore(deps): update dependency path-to-regexp@<0.1.12 to v8
• chore(deps): update dependency send@<0.19.0 to v1
• chore(deps): update dependency serve-static@<1.16.0 to v2
• chore(deps): update dependency sort-package-json to v3
• chore(deps): update dependency taze to v18
• chore(deps): update dependency taze to v19
• chore(deps): update dependency ws@>=7.0.0 <7.5.10 to v8
• chore(deps): update dependency zod@<=3.22.2 to v4
• chore(deps): update node.js to v20
• chore(deps): update node.js to v22
• chore(deps): update nuxtjs monorepo to v4 (major) (@nuxt/kit, @nuxt/schema)
• chore(deps): update pnpm to v10
• chore(deps): update secretlint monorepo to v10 (major) (@secretlint/secretlint-rule-preset-recommend, secretlint)
• ci(deps): update dependency @types/cacache to v19
• ci(deps): update dependency node to v20
• ci(deps): update dependency node to v22
• ci(deps): update dependency ubuntu to v24
• ci(deps): update pnpm/action-setup action to v4
• fix(deps): update dependency cacache to v20
• fix(deps): update dependency parse5 to v8
• style(deps): update dependency eslint to v9
• style(deps): update dependency textlint to v15
• 🔐 Create all rate-limited PRs at once 🔐

Pending Branch Automerge

The following updates await pending status checks before automerging. To abort the branch automerge and create a PR instead, click on a checkbox below.

• fix(deps): update dependency http-proxy-middleware@>=3.0.0 <3.0.3 to >=3.0.5 [security]
• fix(deps): update dependency esbuild to ^0.25.0 [security]
• fix(deps): update dependency http-proxy-middleware@<2.0.7 to v3 [security]

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• fix(deps): update dependency semantic-release to ^24.2.7
• fix(deps): update dependency textlint to ^14.4.2
• fix(deps): update eslint (patch) (eslint, eslint-plugin-n)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency vitest to v2.1.9 [security]
• fix(deps): update dependency vite to v6.1.6 [security]
• fix(deps): update dependency vite@>=5.4.0 <=5.4.5 to v6 [security]
• fix(deps): update dependency vite@>=5.4.0 <5.4.6 to v6 [security]
• fix(deps): update patch updates (patch) (@anolilab/semantic-release-preset, caniuse-lite, chrono-node@<2.2.4, cookie@<0.7.0, cross-spawn@>=7.0.0 <7.0.5, follow-redirects@<1.15.4, follow-redirects@<=1.15.5, got@<11.8.5, mime, mlly, nanoid@<3.3.8, path-to-regexp@<0.1.10, pkg-pr-new, pnpm, send@<0.19.0, serve-static@<1.16.0)
• fix(deps): update minor updates (minor) (chrono-node@<2.2.4, consola, cosmiconfig-typescript-loader, express@<4.20.0, favicons, lint-staged, nanoid@>=4.0.0 <5.0.9, parse5, path-to-regexp@<0.1.10, path-to-regexp@<0.1.12, publint, sort-package-json, unplugin, webpack, webpack@>=5.0.0-alpha.0 <5.94.0, ws@>=8.0.0 <8.17.1, zod@<=3.22.2)
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update dependency @sveltejs/kit to v2.20.6 [security]

Detected dependencies

github-actions

.github/workflows/allo-allo.yml

• anolilab/workflows main

.github/workflows/cache-clear.yml

• anolilab/workflows main

.github/workflows/codeql.yml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• github/codeql-action v3.28.1@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c
• github/codeql-action v3.28.1@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c
• github/codeql-action v3.28.1@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c

.github/workflows/comment-issue.yml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea

.github/workflows/dependency-review.yml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/dependency-review-action v4.5.0@3b139cfc5fae8b618d3eae3675e383bb1769c019

.github/workflows/lint.yml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36
• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• anolilab/workflows main
• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• anolilab/workflows main
• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• anolilab/workflows main
• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• ibiqlik/action-yamllint v3.1.1@2576378a8e339169678f9939646ee3ee325e845c
• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• pnpm/action-setup v3.0.0@a3252b78c470c02df07e9d59298aecedc3ccdd6d
• actions/setup-node v4.1.0@39370e3970a6d050c480ffad4ff0ed4d3fdee5af
• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• ubuntu 22.04
• node 18.x
• ubuntu 22.04

.github/workflows/lock-issues.yml

• anolilab/workflows main

.github/workflows/preview-release.yml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• anolilab/workflows main

.github/workflows/require-allow-edits.yml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• ljharb/require-allow-edits 2bf6dc5607979ae0e3f8739b9f9a4018e024b9a0

.github/workflows/scorecards.yml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• github/codeql-action v3.28.1@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c

.github/workflows/semantic-pull-request.yml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• amannn/action-semantic-pull-request v5.5.2@cfb60706e18bc85e8aec535e3c577abe8f70378e
• marocchino/sticky-pull-request-comment v2.9.0@331f8f5b4215f0445d3c07b4967662a32a2d3e31
• marocchino/sticky-pull-request-comment v2.9.0@331f8f5b4215f0445d3c07b4967662a32a2d3e31

.github/workflows/semantic-release.yml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• lewagon/wait-on-check-action v1.3.3@595dabb3acf442d47e29c9ec9ba44db0c6bdd18f
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• anolilab/workflows main
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• anolilab/workflows main
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16

.github/workflows/stale-issues.yml

• anolilab/workflows main

.github/workflows/test.yml

• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36
• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• anolilab/workflows main
• step-security/harden-runner v2.10.3@c95a14d0e5bab51a9f56296a4eb0e416910cd350
• ubuntu 22.04
• ubuntu 22.04

npm

package.json

• @visulima/find-cache-dir ^1.0.18
• @visulima/package ^3.2.2
• cacache ^19.0.1
• consola 3.2.3
• fast-json-stable-stringify ^2.1.0
• magic-string 0.30.17
• mime ^4.0.6
• mlly 1.7.3
• parse-author ^2.0.0
• parse5 ^7.2.1
• ssri ^12.0.0
• unplugin ^2.1.2
• @anolilab/commitlint-config ^5.0.3
• @anolilab/eslint-config ^15.0.3
• @anolilab/lint-staged-config ^2.1.7
• @anolilab/prettier-config ^5.0.14
• @anolilab/semantic-release-preset ^9.0.3
• @anolilab/textlint-config ^8.0.16
• @babel/core ^7.26.0
• @babel/eslint-parser 7.25.9
• @commitlint/cli ^19.6.1
• @commitlint/config-conventional ^19.6.0
• @nuxt/kit ^3.14.1592
• @nuxt/schema ^3.14.1592
• @rspack/core ^1.1.6
• @rspack/plugin-html ^0.5.8
• @secretlint/secretlint-rule-preset-recommend ^9.0.0
• @sveltejs/kit ^2.12.2
• @total-typescript/ts-reset ^0.6.1
• @tsconfig/esm ^1.0.5
• @tsconfig/node18 ^18.2.4
• @tsconfig/strictest ^2.0.5
• @types/cacache ^17.0.2
• @types/node 18.19.70
• @types/parse-author ^2.0.3
• @types/parse5 ^7.0.0
• @types/ssri ^7.1.5
• @visulima/packem ^1.10.4
• @vitest/coverage-v8 ^2.1.8
• audit-ci ^7.1.0
• caniuse-lite ^1.0.30001690
• commitizen ^4.3.1
• commitlint ^19.6.1
• conventional-changelog-conventionalcommits 8.0.0
• cz-conventional-changelog ^3.3.0
• esbuild ^0.24.2
• eslint 8.57.0
• eslint-plugin-deprecation ^3.0.0
• eslint-plugin-editorconfig ^4.0.3
• eslint-plugin-import 2.29.1
• eslint-plugin-mdx ^3.1.5
• eslint-plugin-n ^17.15.0
• eslint-plugin-vitest 0.4.1
• eslint-plugin-vitest-globals ^1.5.0
• favicons ^7.2.0
• html-webpack-plugin ^5.6.3
• husky ^9.1.7
• is-ci ^4.1.0
• lint-staged ^15.2.11
• pkg-pr-new ^0.0.39
• prettier ^3.4.2
• publint ^0.2.12
• read-pkg 9.0.1
• rimraf ^6.0.1
• rollup ^4.28.1
• secretlint 9.0.0
• semantic-release ^24.2.0
• sort-package-json ^2.12.0
• taze ^0.18.0
• textlint ^14.4.0
• type-fest ^4.30.2
• typescript ^5.7.2
• vite ^6.0.7
• vitest ^2.1.8
• webpack ^5.97.1
• @nuxt/kit ^3
• @nuxt/schema ^3
• @rspack/cli ^1.1.8
• esbuild *
• favicons ^7.0.2
• rollup ^3.0.1
• vite ^3 || ^4 || ^5 || ^6
• webpack ^4 || ^5
• pnpm 9.15.3
• @babel/traverse@<7.23.2 >=7.25.3
• braces@<3.0.3 >=3.0.3
• chrono-node@<2.2.4 >=2.2.4
• cosmiconfig-typescript-loader ^5.0.0
• follow-redirects@<1.15.4 >=1.15.6
• follow-redirects@<=1.15.5 >=1.15.6
• got@<11.8.5 >=14.4.2
• load-tsconfig ^0.2.5
• tar@<6.2.1 >=7.4.3
• trim@<0.0.3 >=1.0.1
• tsconfig-paths ^4.2.0
• webpack-dev-middleware@<=5.3.3 >=7.4.2
• ws@>=8.0.0 <8.17.1 >=8.17.1
• ws@>=7.0.0 <7.5.10 >=7.5.10
• zod@<=3.22.2 >=3.23.8
• micromatch@<4.0.8 >=4.0.8
• webpack@>=5.0.0-alpha.0 <5.94.0 >=5.94.0
• body-parser@<1.20.3 >=1.20.3
• path-to-regexp@<0.1.10 >=0.1.10
• vite@>=5.4.0 <5.4.6 >=5.4.6
• vite@>=5.4.0 <=5.4.5 >=5.4.6
• rollup@>=4.0.0 <4.22.4 >=4.22.4
• cookie@<0.7.0 >=0.7.0
• http-proxy-middleware@>=3.0.0 <3.0.3 >=3.0.3
• http-proxy-middleware@<2.0.7 >=2.0.7
• send@<0.19.0 >=0.19.0
• serve-static@<1.16.0 >=1.16.0
• express@<4.20.0 >=4.20.0
• cross-spawn@>=7.0.0 <7.0.5 >=7.0.5
• path-to-regexp@<0.1.12 >=0.1.12
• nanoid@<3.3.8 >=3.3.8
• nanoid@>=4.0.0 <5.0.9 >=5.0.9

pnpm-workspace.yaml

nvm

.nvmrc

• node 18

renovate-config-presets

.github/renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository

[github-actions]

Awesome! Thank you for taking the time to create your first issue! Please review the guidelines