Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency stacklok/toolhive to v0.29.3
• chore(deps): update anthropics/claude-code-action digest to d5726de
• chore(deps): update aws-actions/configure-aws-credentials digest to e7f100c
• chore(deps): update peaceiris/actions-gh-pages digest to 84c30a8
• chore(deps): update dependency @electron/fuses to ^2.1.2
• chore(deps): update dependency hono to >=4.12.25
• chore(deps): update dependency json-schema-faker to ^0.6.2
• chore(deps): update dependency memfs to ^4.57.7
• chore(deps): update dependency prettier to v3.8.4
• chore(deps): update dependency prettier-plugin-classnames to ^0.10.2
• chore(deps): update dependency tar to v7.5.16
• chore(deps): update dependency vite to ^8.0.16
• chore(deps): update electron-forge monorepo to ^7.11.2 (@electron-forge/cli, @electron-forge/maker-base, @electron-forge/maker-deb, @electron-forge/maker-dmg, @electron-forge/maker-rpm, @electron-forge/maker-squirrel, @electron-forge/maker-zip, @electron-forge/plugin-auto-unpack-natives, @electron-forge/plugin-fuses, @electron-forge/plugin-vite, @electron-forge/publisher-github, @electron-forge/publisher-s3, @electron-forge/shared-types)
• chore(deps): update vitest monorepo to ^4.1.8 (@vitest/coverage-v8, vitest)
• fix(deps): update ai stack (@ai-sdk/anthropic, @ai-sdk/google, @ai-sdk/mcp, @ai-sdk/openai, @ai-sdk/openai-compatible, @ai-sdk/react, @ai-sdk/xai, @modelcontextprotocol/ext-apps, @openrouter/ai-sdk-provider, ai, ai-sdk-ollama)
• fix(deps): update dependency electron-log to ^5.4.4
• fix(deps): update radix-ui-primitives monorepo (@radix-ui/react-checkbox, @radix-ui/react-collapsible, @radix-ui/react-dialog, @radix-ui/react-dropdown-menu, @radix-ui/react-label, @radix-ui/react-navigation-menu, @radix-ui/react-popover, @radix-ui/react-progress, @radix-ui/react-radio-group, @radix-ui/react-scroll-area, @radix-ui/react-select, @radix-ui/react-separator, @radix-ui/react-slot, @radix-ui/react-switch, @radix-ui/react-tabs, @radix-ui/react-tooltip)
• fix(deps): update react monorepo (@types/react, react, react-dom)
• chore(deps): update dependency @hey-api/openapi-ts to v0.98.2
• chore(deps): update dependency electron to v41.7.2
• chore(deps): update dependency knip to ^6.16.1
• chore(deps): update dependency tsx to ^4.22.4
• chore(deps): update node.js to v24.16.0 (node, @types/node)
• chore(deps): update playwright monorepo to ^1.60.0
• chore(deps): update pnpm to v11.5.3
• chore(deps): update typescript-eslint monorepo to ^8.61.0
• fix(deps): update dependency @sentry/vite-plugin to ^5.3.0
• fix(deps): update dependency better-sqlite3 to ^12.10.0
• fix(deps): update dependency date-fns to ^4.4.0
• fix(deps): update dependency react-hook-form to v7.78.0
• fix(deps): update tanstack-query monorepo to ^5.101.0 (@tanstack/react-query, @tanstack/react-query-devtools)
• fix(deps): update tanstack-router monorepo (@tanstack/react-router, @tanstack/react-router-devtools, @tanstack/router-plugin)
• fix(deps): update tanstack-virtual monorepo to ^3.14.2
• chore(deps): update dependency @hono/node-server to v2
• chore(deps): update dependency brace-expansion@<1.1.13 to v5
• chore(deps): update dependency brace-expansion@>=2.0.0 <2.0.3 to v5
• chore(deps): update dependency fast-uri to v4
• chore(deps): update dependency lint-staged to v17
• chore(deps): update eslint monorepo to v10 (@eslint/js, eslint)
• fix(deps): update dependency electron-store to v11
• fix(deps): update lucide monorepo to v1
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update dependency eslint-plugin-react-refresh to ^0.5.2

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• fix(deps): update tailwindcss monorepo to ^4.3.1 (@tailwindcss/vite, tailwindcss)
• chore(deps): update ghcr.io/devcontainers/features/docker-in-docker docker tag to v3

---

Warning

Renovate failed to look up the following dependencies: Failed to look up npm package tmp: no-result.

Files affected: pnpm-workspace.yaml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/checkout digest to df4cb1c
• chore(deps): update dependency electron to v42
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (1)

• ghcr.io/devcontainers/features/docker-in-docker 2 → [Updates: 3]

dockerfile (1)

.devcontainer/Dockerfile (1)

• mcr.microsoft.com/devcontainers/javascript-node 24-bookworm

github-actions (18)

.github/actions/setup-azure-trusted-signing/action.yml (1)

• azure/login v3.0.0@532459ea530d8321f2fb9bb10d1e0bcf23869a43

.github/actions/setup/action.yaml (4)

• pnpm/action-setup v6@0e279bb959325dab635dd2c09392533439d90093
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• pnpm 11.1.2 → [Updates: 11.5.3]
• node 24.15.0 → [Updates: 24.16.0]

.github/workflows/_bug-fix-agent.yml (5)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• anthropics/claude-code-action v1@787c5a0ce96a9a6cfb050ea0c8f4c05f2447c251 → [Updates: v1]
• anthropics/claude-code-action v1@787c5a0ce96a9a6cfb050ea0c8f4c05f2447c251 → [Updates: v1]
• anthropics/claude-code-action v1@787c5a0ce96a9a6cfb050ea0c8f4c05f2447c251 → [Updates: v1]

.github/workflows/_build-matrix.yml (1)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]

.github/workflows/_e2e.yml (8)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• docker/setup-buildx-action v4@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/_security-checks.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• anchore/scan-action v7.4.0@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]

.github/workflows/_security-fix-agent.yml (4)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• anthropics/claude-code-action v1@787c5a0ce96a9a6cfb050ea0c8f4c05f2447c251 → [Updates: v1]
• anthropics/claude-code-action v1@787c5a0ce96a9a6cfb050ea0c8f4c05f2447c251 → [Updates: v1]

.github/workflows/_static-checks.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]

.github/workflows/_unit-tests.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• coverallsapp/github-action v2.3.6@648a8eb78e6d50909eff900e4ec85cab4524a45b

.github/workflows/bug-triage-cron.yml (3)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• anthropics/claude-code-action v1@787c5a0ce96a9a6cfb050ea0c8f4c05f2447c251 → [Updates: v1]

.github/workflows/claude.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• anthropics/claude-code-action v1@787c5a0ce96a9a6cfb050ea0c8f4c05f2447c251 → [Updates: v1]

.github/workflows/lint-pr-title.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• ubuntu 24.04

.github/workflows/mirror-to-gh-pages.yml (1)

• peaceiris/actions-gh-pages v4@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e → [Updates: v4]

.github/workflows/on-release.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• aws-actions/configure-aws-credentials v6@acca2b1b2070338fb9fd1ca27ecee81d687e58e5 → [Updates: v6]

.github/workflows/pr-build-test.yml (8)

• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3

.github/workflows/pr-size-labeler.yml (2)

• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3

.github/workflows/renovate-post-upgrade.yml (6)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• pnpm/action-setup v6@0e279bb959325dab635dd2c09392533439d90093
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• pnpm 11.1.2 → [Updates: 11.5.3]
• node 24.15.0 → [Updates: 24.16.0]

.github/workflows/triage.yml (1)

• stacklok/.github v1@b43e3f174f9bbf2ca4efe6e421a1d007e7fa1b8f

npm (2)

package.json (125)

• @ai-sdk/anthropic ^3.0.76 → [Updates: ^3.0.82]
• @ai-sdk/google ^3.0.71 → [Updates: ^3.0.80]
• @ai-sdk/mcp ^1.0.41 → [Updates: ^1.0.47]
• @ai-sdk/openai ^3.0.63 → [Updates: ^3.0.69]
• @ai-sdk/openai-compatible ^2.0.47 → [Updates: ^2.0.48]
• @ai-sdk/provider ^3.0.10
• @ai-sdk/react ^3.0.179 → [Updates: ^3.0.202]
• @ai-sdk/xai ^3.0.89 → [Updates: ^3.0.93]
• @fontsource-variable/inter ^5.2.8
• @fontsource-variable/merriweather ^5.2.6
• @fontsource/atkinson-hyperlegible ^5.2.8
• @fontsource/space-mono ^5.2.9
• @modelcontextprotocol/ext-apps ^1.7.1 → [Updates: ^1.7.4]
• @modelcontextprotocol/sdk ^1.29.0
• @openrouter/ai-sdk-provider ^2.9.0 → [Updates: ^2.9.1]
• @radix-ui/react-checkbox ^1.3.3 → [Updates: ^1.3.4]
• @radix-ui/react-collapsible ^1.1.12 → [Updates: ^1.1.13]
• @radix-ui/react-dialog ^1.1.15 → [Updates: ^1.1.16]
• @radix-ui/react-dropdown-menu ^2.1.16 → [Updates: ^2.1.17]
• @radix-ui/react-label ^2.1.8 → [Updates: ^2.1.9]
• @radix-ui/react-navigation-menu ^1.2.14 → [Updates: ^1.2.15]
• @radix-ui/react-popover ^1.1.15 → [Updates: ^1.1.16]
• @radix-ui/react-progress ^1.1.8 → [Updates: ^1.1.9]
• @radix-ui/react-radio-group ^1.3.8 → [Updates: ^1.4.0]
• @radix-ui/react-scroll-area ^1.2.10 → [Updates: ^1.2.11]
• @radix-ui/react-select ^2.2.6 → [Updates: ^2.3.0]
• @radix-ui/react-separator ^1.1.8 → [Updates: ^1.1.9]
• @radix-ui/react-slot ^1.2.4 → [Updates: ^1.2.5]
• @radix-ui/react-switch ^1.2.6 → [Updates: ^1.3.0]
• @radix-ui/react-tabs ^1.1.13 → [Updates: ^1.1.14]
• @radix-ui/react-tooltip ^1.2.8 → [Updates: ^1.2.9]
• @sentry/electron ^7.13.0
• @sentry/vite-plugin ^5.2.1 → [Updates: ^5.3.0]
• @streamdown/cjk ^1.0.3
• @streamdown/code ^1.1.1
• @streamdown/mermaid ^1.0.2
• @tanstack/react-query ^5.100.9 → [Updates: ^5.101.0]
• @tanstack/react-query-devtools ^5.100.9 → [Updates: ^5.101.0]
• @tanstack/react-router ^1.169.1 → [Updates: ^1.170.15]
• @tanstack/react-router-devtools ^1.166.13 → [Updates: ^1.167.0]
• @tanstack/react-virtual ^3.13.24 → [Updates: ^3.14.2]
• ai ^6.0.177 → [Updates: ^6.0.200]
• ai-sdk-ollama ^3.8.3 → [Updates: ^3.8.7]
• better-sqlite3 ^12.9.0 → [Updates: ^12.10.0]
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• cmdk ^1.1.1
• date-fns ^4.1.0 → [Updates: ^4.4.0]
• electron-log ^5.4.3 → [Updates: ^5.4.4]
• electron-squirrel-startup ^1.0.1
• electron-store 10.1.0 → [Updates: 11.0.2]
• lucide-react ^0.577.0 → [Updates: ^1.17.0]
• nanoid ^5.1.11
• react ^19.2.6 → [Updates: ^19.2.7]
• react-dom ^19.2.6 → [Updates: ^19.2.7]
• react-hook-form 7.75.0 → [Updates: 7.78.0]
• regexp.escape ^2.0.1
• sonner ^2.0.7
• streamdown ^2.5.0
• tailwind-merge ^3.6.0
• tailwindcss ^4.3.0 → [Updates: ^4.3.1]
• tw-animate-css ^1.4.0
• update-electron-app ^3.2.0
• zod 4.4.3
• @electron-forge/cli ^7.11.1 → [Updates: ^7.11.2]
• @electron-forge/maker-base ^7.11.1 → [Updates: ^7.11.2]
• @electron-forge/maker-deb ^7.11.1 → [Updates: ^7.11.2]
• @electron-forge/maker-dmg ^7.11.1 → [Updates: ^7.11.2]
• @electron-forge/maker-rpm ^7.11.1 → [Updates: ^7.11.2]
• @electron-forge/maker-squirrel ^7.11.1 → [Updates: ^7.11.2]
• @electron-forge/maker-zip ^7.11.1 → [Updates: ^7.11.2]
• @electron-forge/plugin-auto-unpack-natives ^7.11.1 → [Updates: ^7.11.2]
• @electron-forge/plugin-fuses ^7.11.1 → [Updates: ^7.11.2]
• @electron-forge/plugin-vite ^7.11.1 → [Updates: ^7.11.2]
• @electron-forge/publisher-github ^7.11.1 → [Updates: ^7.11.2]
• @electron-forge/publisher-s3 ^7.11.1 → [Updates: ^7.11.2]
• @electron-forge/shared-types ^7.11.1 → [Updates: ^7.11.2]
• @electron/fuses ^2.1.1 → [Updates: ^2.1.2]
• @electron/rebuild ^4.0.4
• @eslint/js ^9.39.4 → [Updates: ^10.0.1]
• @hey-api/openapi-ts 0.97.1 → [Updates: 0.98.2]
• @playwright/test ^1.59.1 → [Updates: ^1.60.0]
• @tailwindcss/vite ^4.3.0 → [Updates: ^4.3.1]
• @tanstack/router-plugin ^1.167.32 → [Updates: ^1.168.18]
• @testing-library/jest-dom ^6.9.1
• @testing-library/react ^16.3.2
• @testing-library/user-event ^14.6.1
• @types/better-sqlite3 ^7.6.13
• @types/electron-squirrel-startup ^1.0.2
• @types/node ^24.12.4 → [Updates: ^24.13.2]
• @types/react ^19.2.14 → [Updates: ^19.2.17]
• @types/react-dom ^19.2.3
• @types/regexp.escape ^2.0.0
• @types/unzipper ^0.10.11
• @vitejs/plugin-react ^6.0.2
• @vitest/coverage-v8 ^4.1.5 → [Updates: ^4.1.8]
• dotenv ^17.4.2
• electron 41.6.1 → [Updates: 41.7.2, 42.4.0]
• eslint ^9.39.4 → [Updates: ^10.4.1]
• eslint-plugin-react-hooks ~7.1.1
• eslint-plugin-react-refresh ^0.4.19 → [Updates: ^0.5.2]
• globals ^17.6.0
• husky ^9.1.7
• icon-gen ^5.0.0
• jsdom ^29.1.1
• json-schema-faker ^0.6.1 → [Updates: ^0.6.2]
• knip ^6.12.2 → [Updates: ^6.16.1]
• lint-staged ^16.4.0 → [Updates: ^17.0.7]
• memfs ^4.57.2 → [Updates: ^4.57.7]
• msw ^2.14.6
• prettier 3.8.3 → [Updates: 3.8.4]
• prettier-plugin-classnames ^0.10.1 → [Updates: ^0.10.2]
• prettier-plugin-merge ^0.10.1
• prettier-plugin-tailwindcss ^0.8.0
• rimraf ^6.1.3
• tar ^7.5.15 → [Updates: ^7.5.16]
• tsx ^4.21.0 → [Updates: ^4.22.4]
• typescript 6.0.3
• typescript-eslint ^8.59.3 → [Updates: ^8.61.0]
• unzipper ^0.12.3
• vite ^8.0.13 → [Updates: ^8.0.16]
• vitest ^4.1.5 → [Updates: ^4.1.8]
• vitest-fail-on-console ^0.10.1
• node >=24.0.0 <25.0.0
• pnpm 11.1.2 → [Updates: 11.5.3]

pnpm-workspace.yaml (20)

• @electron/rebuild ^4.0.4
• @hono/node-server >=1.19.14 → [Updates: >=2.0.4]
• @xmldom/xmldom >=0.9.10
• fast-uri >=3.1.2 → [Updates: >=4.0.0]
• fast-xml-builder >=1.2.0
• fast-xml-parser 5.8.0
• hono >=4.12.23 → [Updates: >=4.12.25]
• ip-address >=10.2.0
• lodash-es >=4.18.0
• mermaid >=11.15.0
• tar >=7.5.15 → [Updates: >=7.5.16]
• picomatch >=4.0.4
• qs >=6.15.2
• tmp >=0.2.6
• @tootallnate/once >=3.0.1
• serialize-javascript >=7.0.5
• uuid >=14.0.0
• brace-expansion@>=4.0.0 <5.0.5 5.0.6
• brace-expansion@>=2.0.0 <2.0.3 2.1.1 → [Updates: 5.0.6]
• brace-expansion@<1.1.13 1.1.15 → [Updates: 5.0.6]

nvm (1)

.nvmrc (1)

• node 24.15.0 → [Updates: 24.16.0]

regex (1)

utils/constants.ts (1)

• stacklok/toolhive v0.29.1 → [Updates: v0.29.3]

---

• Check this box to trigger a request for Renovate to run again on this repository