Skip to content

Dependency Dashboard #577

Open
Open

Description

@renovate

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (13)
Datasource Package Last Updated
github-actions amannn/action-semantic-pull-request 2025-08-22
github-actions gaurav-nelson/github-action-markdown-link-check 2025-03-31
gomod github.com/google/uuid 2024-01-23
gomod github.com/pquerna/otp 2025-05-16
gomod github.com/trustelem/zxcvbn 2019-01-24
gomod gopkg.in/yaml.v3 2022-05-27
npm cmdk 2025-03-14
npm husky 2024-11-18
pre-commit dnephin/pre-commit-golang 2022-10-02
pre-commit koalaman/shellcheck-precommit 2025-08-04
pre-commit pre-commit/pre-commit-hooks 2025-08-09
regex github.com/google/go-licenses 2025-09-08
regex gotest.tools/gotestsum 2025-09-11

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

  • chore(deps): lock file maintenance

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

  • chore(deps): update dependency @babel/core to v8.0.9
  • chore(deps): update dependency undici to v8.12.3
  • chore(deps): update github actions (github/codeql-action, securego/gosec)
  • chore(deps): update node.js to v26.12.1
  • chore(deps): update storybook monorepo to v10.6.4 (@storybook/addon-a11y, @storybook/addon-docs, @storybook/addon-onboarding, @storybook/addon-vitest, @storybook/react-vite, storybook)
  • fix(deps): update dependency i18next to v26.5.11
  • fix(deps): update dependency i18next-browser-languagedetector to v8.2.3
  • fix(deps): update dependency react-i18next to v17.1.9
  • fix(deps): update dependency zustand to v5.0.16
  • fix(deps): update go dependencies (github.com/MustardSeedNetworks/foundation, modernc.org/sqlite)
  • chore(deps): update dependency @chromatic-com/storybook to v5.6.0
  • chore(deps): update markdownlint to v0.24.0 (DavidAnson/markdownlint-cli2, markdownlint-cli2)
  • chore(deps): update module github.com/securego/gosec/v2/cmd/gosec to v2.30.0
  • chore(deps): update module golang.org/x/tools/cmd/goimports to v0.52.0
  • chore(deps): update module golang.org/x/vuln/cmd/govulncheck to v1.9.0
  • fix(deps): update dependency @tanstack/react-query to v5.105.0
  • fix(deps): update dependency immer to v11.2.9
  • fix(deps): update dependency lucide-react to v1.61.0
  • fix(deps): update dependency react-hook-form to v7.91.0
  • fix(deps): update dependency react-router to v8.5.0
  • chore(deps): update davidanson/markdownlint-cli2-action action to v25

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

Detected Dependencies

github-actions (16)
.github/actions/setup-go/action.yml (3)
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
  • actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
.github/actions/setup-node/action.yml (1)
  • actions/setup-node v7.1.0@949feb2413d6458794dcd2491c4babbbce0c15c1
.github/workflows/ci-smoke.yml
.github/workflows/ci.yml (30)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • golangci/golangci-lint-action v9.3.0@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • MustardSeedNetworks/.github v1.14.0@76eb579ee0cbdef0a2aef9d9df1ae9ca38cad6bd
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • MustardSeedNetworks/.github v1.14.0@76eb579ee0cbdef0a2aef9d9df1ae9ca38cad6bd
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • securego/gosec v2.29.0@deb54465fea23d19a77f037e11e6589021f8501d → [Updates: v2.30.0]
  • github/codeql-action v4.39.0@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee → [Updates: v4.39.1]
  • aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
  • github/codeql-action v4.39.0@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee → [Updates: v4.39.1]
  • MustardSeedNetworks/.github v1.14.0@76eb579ee0cbdef0a2aef9d9df1ae9ca38cad6bd
  • MustardSeedNetworks/.github v1.14.0@76eb579ee0cbdef0a2aef9d9df1ae9ca38cad6bd
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • DavidAnson/markdownlint-cli2-action v24.2.0@21c1be1b93ad9ed58fa840aacc3f279cde2a72ff → [Updates: v25.0.0]
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333
  • actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • MustardSeedNetworks/.github v1.14.0@76eb579ee0cbdef0a2aef9d9df1ae9ca38cad6bd
  • MustardSeedNetworks/.github v1.14.0@76eb579ee0cbdef0a2aef9d9df1ae9ca38cad6bd
  • golangci/golangci-lint v2.14.0 → [Updates: v2.15.0]
.github/workflows/codeql.yml (4)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • github/codeql-action v4.39.0@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee → [Updates: v4.39.1]
  • github/codeql-action v4.39.0@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee → [Updates: v4.39.1]
  • github/codeql-action v4.39.0@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee → [Updates: v4.39.1]
.github/workflows/dead-code.yml (5)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
  • MustardSeedNetworks/.github v1.14.0@76eb579ee0cbdef0a2aef9d9df1ae9ca38cad6bd
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
.github/workflows/docs-link-check.yml (2)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • gaurav-nelson/github-action-markdown-link-check 1.0.17@3c3b66f1f7d0900e37b71eca45b63ea9eedfce31
.github/workflows/label-sync.yml (2)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • crazy-max/ghaction-github-labeler v6.0.0@548a7c3603594ec17c819e1239f281a3b801ab4d
.github/workflows/license-check.yml (1)
  • MustardSeedNetworks/.github v1.14.0@76eb579ee0cbdef0a2aef9d9df1ae9ca38cad6bd
.github/workflows/main-retry.yml
.github/workflows/merge-queue-ejection.yml
.github/workflows/pr-hygiene.yml (5)
  • amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50
  • actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
  • actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
  • actions/labeler v7.0.0@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13
  • actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
.github/workflows/release-please.yml (2)
  • actions/create-github-app-token v3.3.0@64ab729a6294000f5aa4a4bc0b73d1f32bc45510
  • googleapis/release-please-action v5.0.0@45996ed1f6d02564a971a2fa1b5860e934307cf7
.github/workflows/release.yml (8)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333
  • MustardSeedNetworks/.github v1.14.0@76eb579ee0cbdef0a2aef9d9df1ae9ca38cad6bd
  • actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9
  • actions/attest-build-provenance v4.2.2@4d101475d8b20a2381f78447822ac1eab6504dd8
  • goreleaser/goreleaser-cross v1.27.1-2-v2.18.2@sha256:8def7638d4f31ce8b22034694875c41c0cccb8392c9d06258c7dca9383bf1948
.github/workflows/scorecard.yml (3)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • ossf/scorecard-action v2.5.0@fa7117db83c52d787ae5a89f350999701505d78e
  • github/codeql-action v4.39.0@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee → [Updates: v4.39.1]
.github/workflows/todo-tracker.yml (1)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
gomod (1)
go.mod (15)
  • go 1.27.3
  • github.com/MustardSeedNetworks/foundation v0.13.6 → [Updates: v0.13.16]
  • github.com/go-playground/validator/v10 v10.30.5
  • github.com/go-webauthn/webauthn v0.18.2
  • github.com/golang-jwt/jwt/v5 v5.3.1
  • github.com/google/uuid v1.6.0
  • github.com/invopop/jsonschema v0.14.0
  • github.com/pquerna/otp v1.5.0
  • github.com/trustelem/zxcvbn v1.0.1
  • golang.org/x/crypto v0.58.0
  • golang.org/x/sys v0.49.0
  • golang.org/x/time v0.16.0
  • gopkg.in/natefinch/lumberjack.v2 v2.2.1
  • gopkg.in/yaml.v3 v3.0.1
  • modernc.org/sqlite v1.60.1 → [Updates: v1.61.0]
npm (2)
package.json (10)
  • @commitlint/cli 21.2.4
  • @commitlint/config-conventional 21.2.4
  • typescript 7.0.2
  • husky 9.1.7
  • lint-staged 17.6.0
  • node 26.12.0 → [Updates: 26.12.1]
  • npm 12.2.1
  • npm 12.2.1
  • fast-uri 4.2.3
  • js-yaml 5.5.0
ui/package.json (57)
  • @fontsource-variable/inter 5.3.0
  • @fontsource-variable/jetbrains-mono 5.3.0
  • @fontsource-variable/manrope 5.3.0
  • @hookform/resolvers 5.9.2 → [Updates: 6.0.0]
  • @tailwindcss/postcss 4.3.3
  • @tanstack/react-query 5.104.4 → [Updates: 5.105.0]
  • cmdk 1.1.1
  • i18next 26.5.2 → [Updates: 26.5.11]
  • i18next-browser-languagedetector 8.2.1 → [Updates: 8.2.3]
  • immer 11.1.21 → [Updates: 11.2.9]
  • lucide-react 1.59.0 → [Updates: 1.61.0]
  • react 19.3.0 → [Updates: 19.3.1]
  • react-dom 19.3.0 → [Updates: 19.3.1]
  • react-hook-form 7.90.0 → [Updates: 7.91.0]
  • react-i18next 17.1.0 → [Updates: 17.1.9]
  • react-router 8.4.0 → [Updates: 8.5.0]
  • tailwind-merge 3.7.0
  • tailwindcss 4.3.3
  • valibot 1.5.0
  • zustand 5.0.15 → [Updates: 5.0.16]
  • @babel/core 8.0.7 → [Updates: 8.0.9]
  • @biomejs/biome 2.5.15 → [Updates: 2.6.3]
  • @chromatic-com/storybook 5.5.1 → [Updates: 5.6.0]
  • @playwright/test 1.64.0 → [Updates: 1.64.1]
  • @rolldown/plugin-babel 0.2.4
  • @storybook/addon-a11y 10.6.2 → [Updates: 10.6.4]
  • @storybook/addon-docs 10.6.2 → [Updates: 10.6.4]
  • @storybook/addon-onboarding 10.6.2 → [Updates: 10.6.4]
  • @storybook/addon-vitest 10.6.2 → [Updates: 10.6.4]
  • @storybook/react-vite 10.6.2 → [Updates: 10.6.4]
  • @testing-library/dom 10.4.2
  • @testing-library/jest-dom 7.0.1
  • @testing-library/react 16.3.3
  • @types/babel__core 7.20.5
  • @types/node 26.6.5
  • @types/react 19.3.0
  • @types/react-dom 19.3.0
  • @vitejs/plugin-react 6.1.2
  • @vitest/browser-playwright 5.0.4 → [Updates: 5.0.5]
  • @vitest/coverage-v8 5.0.4 → [Updates: 5.0.5]
  • axe-core 4.14.0
  • babel-plugin-react-compiler 1.0.0
  • jsdom 30.1.3
  • json-schema-to-typescript 16.0.0
  • playwright 1.64.0 → [Updates: 1.64.1]
  • postcss 8.5.31
  • rollup-plugin-visualizer 7.1.1
  • storybook 10.6.2 → [Updates: 10.6.4]
  • typescript 7.0.2
  • vite 8.3.4 → [Updates: 8.3.5]
  • vitest 5.0.4 → [Updates: 5.0.5]
  • node 26.12.0 → [Updates: 26.12.1]
  • npm 12.2.1
  • npm 12.2.1
  • js-yaml 5.5.0
  • nanoid 6.0.2
  • undici 8.12.2 → [Updates: 8.12.3]
nvm (1)
.nvmrc (1)
  • node 26.12.0 → [Updates: 26.12.1]
pre-commit (1)
.pre-commit-config.yaml (6)
  • pre-commit/pre-commit-hooks v6.0.0
  • gitleaks/gitleaks v8.30.1
  • dnephin/pre-commit-golang v0.5.1
  • pre-commit/mirrors-clang-format v23.1.3
  • koalaman/shellcheck-precommit v0.11.0
  • DavidAnson/markdownlint-cli2 v0.23.3 → [Updates: v0.24.0]
regex (8)
.github/workflows/ci.yml (2)
  • golang.org/x/vuln/cmd/govulncheck v1.7.0 → [Updates: v1.9.0]
  • github.com/rhysd/actionlint/cmd/actionlint v1.7.12
.github/workflows/dead-code.yml (1)
  • honnef.co/go/tools/cmd/staticcheck v0.8.2
biome.json (1)
  • @biomejs/biome 2.5.15 → [Updates: 2.6.3]
mk/deps.mk (8)
  • github.com/golangci/golangci-lint/v2/cmd/golangci-lint v2.15.0
  • golang.org/x/vuln/cmd/govulncheck v1.7.0 → [Updates: v1.9.0]
  • github.com/securego/gosec/v2/cmd/gosec v2.29.0 → [Updates: v2.30.0]
  • mvdan.cc/gofumpt v0.12.0
  • golang.org/x/tools/cmd/goimports v0.49.0 → [Updates: v0.52.0]
  • honnef.co/go/tools/cmd/staticcheck v0.8.2
  • github.com/zricethezav/gitleaks/v8 v8.30.1
  • gotest.tools/gotestsum v1.13.0
mk/lint.mk (1)
  • markdownlint-cli2 0.23.3 → [Updates: 0.24.0]
mk/lint.mk (1)
  • github.com/golangci/golangci-lint/v2 v2.14.0 → [Updates: v2.15.0]
mk/security.mk (3)
  • golang.org/x/vuln/cmd/govulncheck v1.7.0 → [Updates: v1.9.0]
  • github.com/zricethezav/gitleaks/v8 v8.30.1
  • github.com/google/go-licenses v2.0.1
ui/biome.json (1)
  • @biomejs/biome 2.5.15 → [Updates: 2.6.3]
renovate-config (1)
renovate.json

  • Check this box to trigger a request for Renovate to run again on this repository
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions