Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

GitHub Actions updates

• deps: update denoland/setup-deno action to v2.0.5
• deps: update googleapis/release-please-action action to v4.4.1
• deps: update actions/checkout action to v6.1.0
• deps: update actions/create-github-app-token action to v3.2.0
• deps: update actions/setup-node action to v6.5.0
• deps: update dependency bun to v1.4.2
• deps: update dependency deno to v2.9.6
• deps: update jdx/mise-action action to v4.3.0
• deps: update oven-sh/setup-bun action to v2.2.0
• deps: update step-security/harden-runner action to v2.21.1
• deps: update actions/checkout action to v7
• deps: update actions/setup-node action to v7
• deps: update googleapis/release-please-action action to v5

JavaScript updates

• deps: update dependency undici to v7.29.1
• deps(dev): update dependency @ai-sdk/provider-utils to v5.0.39
• deps(dev): update dependency @anthropic-ai/claude-agent-sdk to v0.3.268
• deps(dev): update dependency @langchain/core to v1.2.10
• deps(dev): update dependency @langchain/langgraph to v1.4.14
• deps(dev): update dependency @types/node to v22.20.2
• deps(dev): update dependency ai to v7.0.97
• deps(dev): update dependency langchain to v1.5.11
• deps(dev): update dependency rolldown to v1.2.8
• deps(dev): update dependency @anthropic-ai/sdk to v0.125.0
• deps(dev): update dependency @mastra/core to v1.66.0
• deps(dev): update dependency @openai/agents to v0.18.0
• deps(dev): update dependency @strands-agents/sdk to v1.17.0
• deps(dev): update dependency @tanstack/ai to v0.54.0
• deps(dev): update dependency eve to v0.53.1
• deps(dev): update dependency genkit to v1.42.0
• deps(dev): update dependency react to v19.3.0
• deps(dev): update dependency react-dom to v19.3.0
• deps(dev): update dependency vite to v8.3.0
• deps: update dependency @nestjs/common to v12
• deps: update dependency cookie to v2
• deps: update dependency undici to v8
• deps(dev): update dependency typescript to v7
• deps(dev): update dependency undici-types to v8
• deps: lock file maintenance

All

• 🔐 Create all pending approval PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

GitHub Actions updates

• deps: update semgrep/semgrep:latest docker digest to 34ab619

JavaScript updates

• deps(dev): update dependency @nestjs/common to v11.2.5
• deps(dev): update dependency astro to v7.3.3
• deps(dev): update dependency fastify to v5.12.5
• deps(dev): update dependency next to v16.3.5
• deps(dev): update dependency turbo to v2.10.13
• deps: update dependency @bufbuild/protobuf to v2.15.0
• deps: update dependency @huggingface/transformers to v4.3.0
• deps(dev): update dependency @google/adk to v2.1.0
• deps(dev): update dependency oxfmt to v0.68.0
• deps(dev): update dependency oxlint to v1.83.0
• deps(dev): update dependency react-router to v8.4.0

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

GitHub Actions updates

• deps: update dependency node to v24

Detected Dependencies

github-actions (9)

.github/workflows/check-skills.yml (4)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6.5.0, v7.0.0]
• node 24

.github/workflows/guard.yml (12)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6.5.0, v7.0.0]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6.5.0, v7.0.0]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6.5.0, v7.0.0]
• oven-sh/setup-bun v2.1.2@3d267786b128fe76c2f16a390aa2448b815359f3 → [Updates: v2.2.0]
• denoland/setup-deno v2.0.3@e95548e56dfa95d4e1a28d6f422fafe75c4c26fb → [Updates: v2.0.5]
• node 24

.github/workflows/lint-workflows.yml (3)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• jdx/mise-action v4.0.1@1648a7812b9aeae629881980618f079932869151 → [Updates: v4.3.0]

.github/workflows/publish.yml (6)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6.5.0, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6.5.0, v7.0.0]
• node 24
• node 24

.github/workflows/push.yml (3)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/create-github-app-token v3.1.1@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 → [Updates: v3.2.0]
• googleapis/release-please-action v4.4.0@16a9c90856f42705d54a6fda1823352bdc62cf38 → [Updates: v4.4.1, v5.0.0]

.github/workflows/reusable-lint.yml (4)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6.5.0, v7.0.0]
• node 24

.github/workflows/reusable-test.yml (25)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• oven-sh/setup-bun v2.1.2@3d267786b128fe76c2f16a390aa2448b815359f3 → [Updates: v2.2.0]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6.5.0, v7.0.0]
• denoland/setup-deno v2.0.3@e95548e56dfa95d4e1a28d6f422fafe75c4c26fb → [Updates: v2.0.5]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6.5.0, v7.0.0]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6.5.0, v7.0.0]
• oven-sh/setup-bun v2.1.2@3d267786b128fe76c2f16a390aa2448b815359f3 → [Updates: v2.2.0]
• denoland/setup-deno v2.0.3@e95548e56dfa95d4e1a28d6f422fafe75c4c26fb → [Updates: v2.0.5]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6.5.0, v7.0.0]
• bun 1.2.19 → [Updates: 1.4.2]
• node 22 → [Updates: 24]
• deno v2.4.2 → [Updates: 2.9.6]
• node 22 → [Updates: 24]
• node 24

.github/workflows/semgrep.yml (3)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• semgrep/semgrep latest@sha256:326e5f41cc972bb423b764a14febbb62bbad29ee1c01820805d077dd868fea48 → [Updates: latest]

.github/workflows/verify-ip-ranges.yml (4)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.21.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6.5.0, v7.0.0]
• node 24

npm (37)

analyze-wasm/package.json (5)

• @bytecodealliance/jco 1.5.0
• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

analyze/package.json (5)

• @bytecodealliance/jco 1.5.0
• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

arcjet-astro/package.json (4)

• astro 7.3.2 → [Updates: 7.3.3]
• tsdown 0.23.0
• typescript 7.0.2
• astro ^5.9.3 || ^6.0.0 || ^7.0.0

arcjet-bun/package.json (4)

• bun-types 1.4.2
• tsdown 0.23.0
• typescript 7.0.2
• undici-types 7.29.1 → [Updates: 8.10.2]

arcjet-deno/package.json (3)

• @types/deno 2.7.0
• tsdown 0.23.0
• typescript 7.0.2

arcjet-fastify/package.json (6)

• @types/node 22.20.1 → [Updates: 22.20.2]
• fastify 5.12.3 → [Updates: 5.12.5]
• tsdown 0.23.0
• typescript 7.0.2
• fastify >=5
• node >=22.21.0 <23 || >=24.5.0

arcjet-guard/package.json (40)

• @bufbuild/protobuf 2.14.1 → [Updates: 2.15.0]
• @connectrpc/connect 2.2.0
• @connectrpc/connect-node 2.2.0
• @connectrpc/connect-web 2.2.0
• @ai-sdk/provider-utils 5.0.25 → [Updates: 5.0.39]
• @anthropic-ai/claude-agent-sdk 0.3.233 → [Updates: 0.3.268]
• @anthropic-ai/sdk 0.123.0 → [Updates: 0.125.0]
• @google/adk 2.0.0 → [Updates: 2.1.0]
• @langchain/core 1.2.9 → [Updates: 1.2.10]
• @langchain/langgraph 1.4.10 → [Updates: 1.4.14]
• @mastra/core 1.59.0 → [Updates: 1.66.0]
• @modelcontextprotocol/sdk 1.30.0
• @openai/agents 0.17.0 → [Updates: 0.18.0]
• @strands-agents/sdk 1.14.0 → [Updates: 1.17.0]
• @tanstack/ai 0.52.0 → [Updates: 0.54.0]
• @tanstack/intent 0.4.0
• @types/node 22.20.1 → [Updates: 22.20.2]
• ai 7.0.58 → [Updates: 7.0.97]
• eve 0.46.0 → [Updates: 0.53.1]
• genkit 1.41.0 → [Updates: 1.42.0]
• langchain 1.5.10 → [Updates: 1.5.11]
• miniflare 4.20260730.0
• oxlint-tsgolint 7.0.2001
• tsdown 0.23.0
• typescript 7.0.2
• @ai-sdk/provider-utils >=5 <6
• @anthropic-ai/claude-agent-sdk >=0.1.0 <1
• @anthropic-ai/sdk >=0.86.0 <1
• @google/adk >=2 <3
• @langchain/core >=1 <2
• @langchain/langgraph >=1 <2
• @mastra/core >=1 <2
• @openai/agents >=0.17.0 <1
• @strands-agents/sdk >=1.1.0 <2
• @tanstack/ai >=0.8.0 <1
• ai >=7 <8
• eve >=0.34.0 <1
• genkit >=1.0.0 <2
• langchain >=1.2.0 <2
• node >=22.21.0 <23 || >=24.5.0

arcjet-nest/package.json (9)

• @nestjs/common 11.2.3 → [Updates: 11.2.5, 12.0.1]
• @types/node 22.20.1 → [Updates: 22.20.2]
• reflect-metadata 0.2.2
• rxjs 7.8.2
• tsdown 0.23.0
• typescript 7.0.2
• @nestjs/common ^10 || ^11 → [Updates: ^10 || ^11 || ^12.0.0]
• reflect-metadata ^0.1.12 || ^0.2.0
• node >=22.21.0 <23 || >=24.5.0

arcjet-next/package.json (8)

• @types/node 22.20.1 → [Updates: 22.20.2]
• next 16.3.4 → [Updates: 16.3.5]
• react 19.2.8 → [Updates: 19.3.0]
• react-dom 19.2.8 → [Updates: 19.3.0]
• tsdown 0.23.0
• typescript 7.0.2
• next >=13
• node >=22.21.0 <23 || >=24.5.0

arcjet-node/package.json (4)

• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

arcjet-nuxt/package.json (6)

• @nuxt/kit 4.5.2
• @nuxt/schema 4.5.2
• tsdown 0.23.0
• typescript 7.0.2
• @nuxt/kit >=4
• @nuxt/schema >=4

arcjet-react-router/package.json (4)

• react-router 8.3.1 → [Updates: 8.4.0]
• tsdown 0.23.0
• typescript 7.0.2
• react-router >=7

arcjet-remix/package.json (2)

• tsdown 0.23.0
• typescript 7.0.2

arcjet-skills/package.json (5)

• @tanstack/intent 0.4.0
• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

arcjet-sveltekit/package.json (5)

• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• svelte ^3.54.0 || ^4.0.0 || ^5.0.0-0
• node >=22.21.0 <23 || >=24.5.0

arcjet/package.json (9)

• @bufbuild/protobuf 2.14.1 → [Updates: 2.15.0]
• @connectrpc/connect 2.2.0
• @connectrpc/connect-node 2.2.0
• @types/node 22.20.1 → [Updates: 22.20.2]
• miniflare 4.20260730.0
• rolldown 1.2.7 → [Updates: 1.2.8]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

body/package.json (4)

• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

cache/package.json (3)

• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

decorate/package.json (4)

• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

duration/package.json (4)

• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

env/package.json (3)

• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

headers/package.json (4)

• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

inspect/package.json (4)

• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

ip/package.json (4)

• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

logger/package.json (4)

• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

nosecone-next/package.json (6)

• @types/node 22.20.1 → [Updates: 22.20.2]
• next 16.3.4 → [Updates: 16.3.5]
• tsdown 0.23.0
• typescript 7.0.2
• next >=14
• node >=22.21.0 <23 || >=24.5.0

nosecone-sveltekit/package.json (9)

• @sveltejs/kit 2.70.3
• @sveltejs/vite-plugin-svelte 7.3.0
• @types/node 22.20.1 → [Updates: 22.20.2]
• svelte 5.57.0
• tsdown 0.23.0
• typescript 6.0.3 → [Updates: 7.0.2]
• vite 8.2.2 → [Updates: 8.3.0]
• @sveltejs/kit >=2
• node >=22.21.0 <23 || >=24.5.0

nosecone/package.json (4)

• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

package.json (11)

• oxfmt 0.67.0 → [Updates: 0.68.0]
• oxlint 1.82.0 → [Updates: 1.83.0]
• oxlint-tsgolint 7.0.2001
• turbo 2.10.12 → [Updates: 2.10.13]
• node >=22.21.0 <23 || >=24.5.0
• npm ^12.0.0
• npm 12.0.2
• sharp >=0.35.4
• cookie >=0.7.2 → [Updates: >=0.7.2]
• sharp >=0.35.4
• undici >=7.29.0 → [Updates: >=7.29.0]

protocol/package.json (6)

• @bufbuild/protobuf 2.14.1 → [Updates: 2.15.0]
• @connectrpc/connect 2.2.0
• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

redact-wasm/package.json (5)

• @bytecodealliance/jco 1.5.0
• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

redact/package.json (4)

• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

runtime/package.json (3)

• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

sensitive-info-rampart/package.json (5)

• @huggingface/transformers 4.2.0 → [Updates: 4.3.0]
• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

sprintf/package.json (4)

• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

stable-hash/package.json (4)

• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

transport/package.json (8)

• @bufbuild/protobuf 2.14.1 → [Updates: 2.15.0]
• @connectrpc/connect 2.2.0
• @connectrpc/connect-node 2.2.0
• @connectrpc/connect-web 2.2.0
• @types/node 22.20.1 → [Updates: 22.20.2]
• tsdown 0.23.0
• typescript 7.0.2
• node >=22.21.0 <23 || >=24.5.0

---

• Check this box to trigger a request for Renovate to run again on this repository