Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

This repository currently has no open or pending branches.

Detected Dependencies

github-actions (4)

.github/workflows/claude-routines.yml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/data-freshness.yml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/deploy.yml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• actions/upload-pages-artifact v5.0.0@fc324d3547104276b827a68afc52ff2a11cc49c9
• actions/deploy-pages v5.0.1@368f82528645a54fb793d4d04e342629a3f51346
• node 24

.github/workflows/fleet-sync.yml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

npm (1)

package.json (9)

• @astrojs/markdown-remark ^7.2.4
• @xterm/addon-fit 0.11.0
• @xterm/xterm 6.0.0
• @astrojs/check ^0.9.9
• @types/node ^24.0.0
• astro ^7.2.4
• typescript ^6.0.3
• node >=24.0.0
• esbuild ^0.28.1

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository

[Gerrrt]

The one actionable row here — astro + @astrojs/markdown-remark 7.2.1 → 7.2.4 — has
been handled by hand in #164, now merged.

Doing it manually rather than via the dashboard checkbox, because the checkbox would not
have helped for long: PR #153 was closed unmerged, so Renovate has ^7.2.1 on its ignore
list and re-raises only once something newer than 7.2.4 ships. 7.2.4 is currently the
newest published version of both packages, so that was an indefinite wait rather than a
short one.

Renovate should now track normally from 7.2.4 and this row should drop off the dashboard
on its next run.

Two notes for whoever reads this next:

• The typescript hold in renovate.json was deliberately left alone. It is still
  correct: @astrojs/check@0.9.9 declares peerDependencies typescript ^5.0.0 || ^6.0.0,
  so a bump to 7 fails npm ci with ERESOLVE and takes the Pages deploy with it.
• npm audit reports one high-severity advisory in the tree, nanoid <3.3.18
  (GHSA-2v37-7h3g-55p8). It is transitive and pre-existing — the lockfile pinned 3.3.17
  both before and after the Astro bump — so chore(deps): update astro monorepo to 7.2.4 #164 deliberately did not fold it in. Worth
  its own change.

Leaving this issue open, since a dependency dashboard is meant to stay open.