Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	lucide-svelte

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• fix(deps): update axum monorepo (axum, axum-extra)
• chore(deps): update dependency @playwright/test to v1.60.0
• chore(deps): update dependency react-router-dom to v7.15.1
• chore(deps): update tailwindcss monorepo to v4.3.0 (@tailwindcss/postcss, tailwindcss)
• chore(deps): update actions/create-github-app-token action to v3
• chore(deps): update dependency @sveltejs/vite-plugin-svelte to v7
• chore(deps): update dependency typescript to v6
• chore(deps): update dependency vite to v8
• 🔐 Create all awaiting schedule PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency vitest to v4.1.6
• chore(deps): update react monorepo to v19.2.6 (react, react-dom)
• chore(deps): update dependency eslint to v10.4.0
• chore(deps): update tauri monorepo (@tauri-apps/api, @tauri-apps/cli, tauri, tauri-build)
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): update pnpm to v11
• fix(deps): update dependency lucide-svelte to v1
• fix(deps): update dependency marked to v18
• fix(deps): update dependency shiki to v4
• fix(deps): update rust crate core-text to v22
• fix(deps): update rust crate dirs to v6
• fix(deps): update rust crate rmcp to v1
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update all non-major dependencies (@tauri-apps/plugin-dialog, @tauri-apps/plugin-store, @tauri-apps/plugin-updater, @types/node, @types/sanitize-html, @vitejs/plugin-react, agent-client-protocol, ajv, clap, dialoguer, github.com/fsnotify/fsnotify, github.com/modelcontextprotocol/go-sdk, jsdom, libc, marked, mermaid, nanoid, nix, pnpm, postcss, prettier, prettier-plugin-svelte, rand, reqwest, rustls, sanitize-html, svelte, svelte-check, tauri-plugin-dialog, tauri-plugin-opener, tauri-plugin-store, tokio, tower-http, uuid, vite)
• chore(deps): update dependency @vitejs/plugin-react to v6
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cargo (10)

apps/differ/src-tauri/Cargo.toml (7)

• serde 1.0
• serde_json 1.0
• tauri 2.10.2 → [Updates: 2.10.2]
• tauri-plugin-store 2 → [Updates: 2]
• dirs 5.0 → [Updates: 6.0]
• tauri-build 2.5.5 → [Updates: 2.5.5]
• core-text 20 → [Updates: 22]

apps/penpal/frontend/src-tauri/Cargo.toml (6)

• tauri 2 → [Updates: 2]
• tauri-plugin-shell 2
• serde 1
• serde_json 1
• tauri-plugin-decorum 1
• tauri-build 2 → [Updates: 2]

apps/staged/src-tauri/Cargo.toml (40)

• serde_json 1.0
• serde 1.0
• log 0.4
• libc 0.2 → [Updates: 0.2]
• tauri 2.10.2 → [Updates: 2.10.2]
• tauri-plugin-log 2.8.0
• thiserror 2.0
• anyhow 1.0
• base64 0.22
• tempfile 3
• sha2 0.11
• rusqlite 0.39
• rusqlite_migration 2.5.0
• include_dir 0.7.4
• uuid 1.0 → [Updates: 1.0]
• dirs 6.0
• tauri-plugin-clipboard-manager 2.3.2
• tauri-plugin-window-state 2.4.1
• reqwest 0.13.1 → [Updates: 0.13.1]
• tokio 1.50.0 → [Updates: 1.50.0]
• tauri-plugin-opener 2 → [Updates: 2]
• tauri-plugin-dialog 2 → [Updates: 2]
• tauri-plugin-process 2
• tauri-plugin-updater 2
• regex 1
• strip-ansi-escapes 0.2
• async-trait 0.1
• tokio-util 0.7
• tauri-plugin-store 2.4.2 → [Updates: 2.4.2]
• rmcp 0.17 → [Updates: 1.0]
• axum 0.8
• axum-extra 0.10 → [Updates: 0.12]
• tower-http 0.6 → [Updates: 0.6]
• rustls 0.23 → [Updates: 0.23]
• tokio-rustls 0.26
• rand 0.9 → [Updates: 0.10]
• hex 0.4
• subtle 2.6
• time 0.3
• tauri-build 2.5.5 → [Updates: 2.5.5]

crates/acp-client/Cargo.toml (9)

• agent-client-protocol 0.10 → [Updates: 0.12]
• tokio 1 → [Updates: 1]
• tokio-util 0.7
• serde 1
• serde_json 1
• anyhow 1
• async-trait 0.1
• log 0.4
• nix 0.31 → [Updates: 0.31]

crates/blox-cli/Cargo.toml (5)

• log 0.4
• serde 1
• serde_json 1
• thiserror 2
• wait-timeout 0.2

crates/builderbot-actions/Cargo.toml (7)

• tokio 1.50 → [Updates: 1.50]
• serde 1.0
• serde_json 1.0
• uuid 1.0 → [Updates: 1.0]
• anyhow 1.0
• async-trait 0.1
• libc 0.2 → [Updates: 0.2]

crates/doctor/Cargo.toml (2)

• serde 1.0
• tokio 1.0 → [Updates: 1.0]

crates/git-diff/Cargo.toml (6)

• serde 1.0
• thiserror 2.0
• git2 0.20 → [Updates: 0.21]
• base64 0.22
• log 0.4
• tempfile 3.0

crates/pm/Cargo.toml (8)

• clap 4 → [Updates: 4]
• serde 1
• serde_json 1
• chrono 0.4
• anyhow 1
• dirs 6
• colored 3
• dialoguer 0.11 → [Updates: 0.12]

crates/summarize/Cargo.toml (17)

• anyhow 1
• clap 4 → [Updates: 4]
• ignore 0.4
• reqwest 0.13 → [Updates: 0.13]
• serde 1
• serde_json 1
• serde_urlencoded 0.7
• sha2 0.11
• base64 0.22
• chrono 0.4
• tokio 1 → [Updates: 1]
• url 2
• nanoid 0.4 → [Updates: 0.5]
• axum 0.8 → [Updates: 0.8]
• opener 0.8
• dirs 6
• tempfile 3

github-actions (6)

.github/workflows/crates-ci.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32

.github/workflows/differ-ci.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32

.github/workflows/penpal-ci.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32

.github/workflows/penpal-release.yml (7)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8]
• actions/create-github-app-token v1@d72941d797fd3113feb6b93fd0dec494b13a2547 → [Updates: v3]

.github/workflows/staged-ci.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32

.github/workflows/staged-release.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• block/apple-codesign-action v1.1.0@679535d1ab7c5a7c18e6f9afcba3464512cc3dde

gomod (1)

apps/penpal/go.mod (5)

• go 1.25.0
• github.com/fsnotify/fsnotify v1.9.0 → [Updates: v1.10.1]
• github.com/modelcontextprotocol/go-sdk v1.4.1 → [Updates: v1.6.0]
• github.com/yuin/goldmark v1.8.2
• github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc@37449abec8cc

hermit (1)

bin/hermit (6)

• go 1.26.0 → [Updates: 1.26.3]
• just 1.46.0 → [Updates: 1.51.0]
• lefthook 2.1.2 → [Updates: 2.1.6]
• node @24
• pnpm 10.33.0 → [Updates: 10.33.4, 11.1.3]
• rustup 1.28.2 → [Updates: 1.29.0]

npm (7)

apps/differ/package.json (17)

• @tauri-apps/api ^2.10.0 → [Updates: ^2.10.0]
• @tauri-apps/plugin-store ^2.2.0 → [Updates: ^2.2.0]
• lucide-svelte ^0.577.0 → [Updates: ^1.0.0]
• marked ^17.0.1 → [Updates: ^17.0.1, ^18.0.0]
• sanitize-html ^2.17.0 → [Updates: ^2.17.0]
• shiki ^3.20.0 → [Updates: ^4.0.0]
• @sveltejs/vite-plugin-svelte ^6.2.1 → [Updates: ^7.0.0]
• @tauri-apps/cli ^2.10.0 → [Updates: ^2.10.0]
• @tsconfig/svelte ^5.0.6
• @types/node ^24.10.1 → [Updates: ^24.10.1]
• @types/sanitize-html ^2.13.0 → [Updates: ^2.13.0]
• prettier ^3.7.4 → [Updates: ^3.7.4]
• prettier-plugin-svelte ^3.4.1 → [Updates: ^3.4.1]
• svelte ^5.46.4 → [Updates: ^5.46.4]
• svelte-check ^4.3.4 → [Updates: ^4.3.4]
• typescript ~5.9.3 → [Updates: ~6.0.0]
• vite ^7.2.4 → [Updates: ^7.2.4, ^8.0.0]

apps/penpal/e2e/package.json (1)

• @playwright/test ^1.58.2 → [Updates: ^1.58.2]

apps/penpal/frontend/package.json (31)

• @tauri-apps/api ^2.2.0 → [Updates: ^2.2.0]
• @tauri-apps/plugin-shell ^2.3.5
• @types/react-syntax-highlighter ^15.5.13
• mermaid ^11.12.3 → [Updates: ^11.12.3]
• react ^19.0.0 → [Updates: ^19.0.0]
• react-dom ^19.0.0 → [Updates: ^19.0.0]
• react-markdown ^10.1.0
• react-router-dom ^7.1.1 → [Updates: ^7.1.1]
• react-syntax-highlighter ^16.1.0
• rehype-raw ^7.0.0
• remark-gfm ^4.0.1
• @tailwindcss/postcss ^4.2.1 → [Updates: ^4.2.1]
• @tailwindcss/typography ^0.5.0
• @tauri-apps/cli ^2.2.0 → [Updates: ^2.2.0]
• @testing-library/jest-dom ^6.0.0
• @testing-library/react ^16.0.0
• @types/hast ^3.0.4
• @types/mdast ^4.0.4
• @types/node ^24.11.0 → [Updates: ^24.11.0]
• @types/react ^19.0.0 → [Updates: ^19.0.0]
• @types/react-dom ^19.0.0
• @types/unist ^3.0.3
• @vitejs/plugin-react ^5.0.0 → [Updates: ^5.0.0, ^6.0.0]
• eslint ^10.0.0 → [Updates: ^10.0.0]
• jsdom ^29.0.0 → [Updates: ^29.0.0]
• postcss ^8.4.0 → [Updates: ^8.4.0]
• tailwindcss ^4.0.0 → [Updates: ^4.0.0]
• typescript ~5.9.0 → [Updates: ~6.0.0]
• unist-util-visit ^5.1.0
• vite ^7.0.0 → [Updates: ^7.0.0, ^8.0.0]
• vitest ^4.0.0 → [Updates: ^4.0.0]

apps/staged/package.json (24)

• @tauri-apps/api ^2.10.0 → [Updates: ^2.10.0]
• @tauri-apps/plugin-clipboard-manager ^2.3.2
• @tauri-apps/plugin-dialog ^2.6.0 → [Updates: ^2.6.0]
• @tauri-apps/plugin-log ^2.8.0
• @tauri-apps/plugin-process ^2.3.1
• @tauri-apps/plugin-store ^2.4.2 → [Updates: ^2.4.2]
• @tauri-apps/plugin-updater ^2.10.0 → [Updates: ^2.10.0]
• ansi-to-html ^0.7.2
• lucide-svelte ^0.577.0 → [Updates: ^1.0.0]
• marked ^17.0.1 → [Updates: ^17.0.1, ^18.0.0]
• sanitize-html ^2.17.0 → [Updates: ^2.17.0]
• shiki ^3.20.0 → [Updates: ^4.0.0]
• @sveltejs/vite-plugin-svelte ^6.2.1 → [Updates: ^7.0.0]
• @tauri-apps/cli ^2.10.0 → [Updates: ^2.10.0]
• @tsconfig/svelte ^5.0.6
• @types/node ^24.10.1 → [Updates: ^24.10.1]
• prettier ^3.7.4 → [Updates: ^3.7.4]
• prettier-plugin-svelte ^3.4.1 → [Updates: ^3.4.1]
• svelte ^5.46.4 → [Updates: ^5.46.4]
• svelte-check ^4.3.4 → [Updates: ^4.3.4]
• typescript ~5.9.3 → [Updates: ~6.0.0]
• vite ^7.2.4 → [Updates: ^7.2.4, ^8.0.0]
• vitest ^4.0.18 → [Updates: ^4.0.18]
• ajv 8.18.0 → [Updates: 8.20.0]

package.json (1)

• pnpm 10.33.0 → [Updates: 10.33.4, 11.1.2]

packages/diff-viewer/package.json (7)

• svelte ^5.46.4 → [Updates: ^5.46.4]
• typescript ~5.9.3 → [Updates: ~6.0.0]
• svelte ^5.0.0
• lucide-svelte >=0.300.0
• marked >=12.0.0
• sanitize-html >=2.0.0
• shiki >=1.0.0

pnpm-workspace.yaml

---

• Check this box to trigger a request for Renovate to run again on this repository