Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/create-github-app-token action to v3
• chore(deps): update dependency typescript to v6
• chore(deps): update dependency vite to v8
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• fix(deps): update dependency lucide-svelte to v1
• fix(deps): update dependency shiki to v4
• fix(deps): update rust crate core-text to v21
• fix(deps): update rust crate dirs to v6
• fix(deps): update rust crate rmcp to v1
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): pin block/apple-codesign-action action to 679535d
• chore(deps): update dependency react-router-dom to v7.13.2
• chore(deps): update tailwindcss monorepo to v4.2.2 (@tailwindcss/postcss, tailwindcss)
• chore(deps): update dependency eslint to v10.1.0
• chore(deps): update dependency vitest to v4.1.2
• fix(deps): update all non-major dependencies (@types/node, @types/sanitize-html, @vitejs/plugin-react, clap, github.com/modelcontextprotocol/go-sdk, github.com/yuin/goldmark, libc, marked, mermaid, nix, pnpm, prettier-plugin-svelte, rusqlite, rusqlite_migration, sanitize-html, sha2, svelte, svelte-check, tempfile, tokio, uuid)
• fix(deps): update dependency lucide-svelte to ^0.577.0
• chore(deps): update dependency @sveltejs/vite-plugin-svelte to v7
• chore(deps): update dependency @vitejs/plugin-react to v6
• chore(deps): update dependency jsdom to v29
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cargo (8)

apps/differ/src-tauri/Cargo.toml (7)

• serde 1.0
• serde_json 1.0
• tauri 2.10.2
• tauri-plugin-store 2
• dirs 5.0 → [Updates: 6.0]
• tauri-build 2.5.5
• core-text 20 → [Updates: 21]

apps/penpal/frontend/src-tauri/Cargo.toml (6)

• tauri 2
• tauri-plugin-shell 2
• serde 1
• serde_json 1
• tauri-plugin-decorum 1
• tauri-build 2

apps/staged/src-tauri/Cargo.toml (29)

• serde_json 1.0
• serde 1.0
• log 0.4
• tauri 2.10.2
• tauri-plugin-log 2.8.0
• thiserror 2.0
• anyhow 1.0
• base64 0.22
• sha2 0.10 → [Updates: 0.11]
• rusqlite 0.38 → [Updates: 0.39]
• rusqlite_migration 2.4.1 → [Updates: 2.4.1]
• include_dir 0.7.4
• uuid 1.0 → [Updates: 1.0]
• dirs 6.0
• tauri-plugin-clipboard-manager 2.3.2
• tauri-plugin-window-state 2.4.1
• reqwest 0.13.1
• tokio 1.49.0
• tauri-plugin-opener 2
• tauri-plugin-dialog 2
• tauri-plugin-process 2
• tauri-plugin-updater 2
• regex 1
• async-trait 0.1
• tokio-util 0.7
• tauri-plugin-store 2.4.2
• rmcp 0.17 → [Updates: 1.0]
• axum 0.8
• tauri-build 2.5.5

crates/acp-client/Cargo.toml (9)

• agent-client-protocol 0.10
• tokio 1 → [Updates: 1]
• tokio-util 0.7
• serde 1
• serde_json 1
• anyhow 1
• async-trait 0.1
• log 0.4
• nix 0.29 → [Updates: 0.31]

crates/blox-cli/Cargo.toml (5)

• log 0.4
• serde 1
• serde_json 1
• thiserror 2
• wait-timeout 0.2

crates/builderbot-actions/Cargo.toml (7)

• tokio 1.49 → [Updates: 1.49]
• serde 1.0
• serde_json 1.0
• uuid 1.0 → [Updates: 1.0]
• anyhow 1.0
• async-trait 0.1
• libc 0.2 → [Updates: 0.2]

crates/git-diff/Cargo.toml (5)

• serde 1.0
• thiserror 2.0
• git2 0.20
• base64 0.22
• tempfile 3.0 → [Updates: 3.0]

crates/summarize/Cargo.toml (17)

• anyhow 1
• clap 4 → [Updates: 4]
• ignore 0.4
• reqwest 0.13
• serde 1
• serde_json 1
• serde_urlencoded 0.7
• sha2 0.10 → [Updates: 0.11]
• base64 0.22
• chrono 0.4
• tokio 1 → [Updates: 1]
• url 2
• nanoid 0.4
• axum 0.8
• opener 0.8
• dirs 6
• tempfile 3 → [Updates: 3]

github-actions (6)

.github/workflows/crates-ci.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32

.github/workflows/differ-ci.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32

.github/workflows/penpal-ci.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32

.github/workflows/penpal-release.yml (7)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8]
• actions/create-github-app-token v1@d72941d797fd3113feb6b93fd0dec494b13a2547 → [Updates: v3]

.github/workflows/staged-ci.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32

.github/workflows/staged-release.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• block/apple-codesign-action v1.1.0 → [Updates: v1.1.0]

gomod (1)

apps/penpal/go.mod (5)

• go 1.24.0
• github.com/fsnotify/fsnotify v1.9.0
• github.com/modelcontextprotocol/go-sdk v1.4.0 → [Updates: v1.4.1]
• github.com/yuin/goldmark v1.7.16 → [Updates: v1.8.2]
• github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc@37449abec8cc

hermit (1)

bin/hermit (6)

• go 1.26.0 → [Updates: 1.26.1]
• just 1.46.0 → [Updates: 1.48.1]
• lefthook 2.1.2 → [Updates: 2.1.4]
• node @24
• pnpm 10.33.0
• rustup 1.28.2 → [Updates: 1.29.0]

npm (7)

apps/differ/package.json (17)

• @tauri-apps/api ^2.10.0
• @tauri-apps/plugin-store ^2.2.0
• lucide-svelte ^0.575.0 → [Updates: ^0.577.0, ^1.0.0]
• marked ^17.0.1 → [Updates: ^17.0.1]
• sanitize-html ^2.17.0 → [Updates: ^2.17.0]
• shiki ^3.20.0 → [Updates: ^4.0.0]
• @sveltejs/vite-plugin-svelte ^6.2.1 → [Updates: ^7.0.0]
• @tauri-apps/cli ^2.10.0
• @tsconfig/svelte ^5.0.6
• @types/node ^24.10.1 → [Updates: ^24.10.1]
• @types/sanitize-html ^2.13.0 → [Updates: ^2.13.0]
• prettier ^3.7.4
• prettier-plugin-svelte ^3.4.1 → [Updates: ^3.4.1]
• svelte ^5.46.4 → [Updates: ^5.46.4]
• svelte-check ^4.3.4 → [Updates: ^4.3.4]
• typescript ~5.9.3 → [Updates: ~6.0.0]
• vite ^7.2.4 → [Updates: ^8.0.0]

apps/penpal/e2e/package.json (1)

• @playwright/test ^1.58.2

apps/penpal/frontend/package.json (31)

• @tauri-apps/api ^2.2.0
• @tauri-apps/plugin-shell ^2.3.5
• @types/react-syntax-highlighter ^15.5.13
• mermaid ^11.12.3 → [Updates: ^11.12.3]
• react ^19.0.0
• react-dom ^19.0.0
• react-markdown ^10.1.0
• react-router-dom ^7.1.1 → [Updates: ^7.1.1]
• react-syntax-highlighter ^16.1.0
• rehype-raw ^7.0.0
• remark-gfm ^4.0.1
• @tailwindcss/postcss ^4.2.1 → [Updates: ^4.2.1]
• @tailwindcss/typography ^0.5.0
• @tauri-apps/cli ^2.2.0
• @testing-library/jest-dom ^6.0.0
• @testing-library/react ^16.0.0
• @types/hast ^3.0.4
• @types/mdast ^4.0.4
• @types/node ^24.11.0
• @types/react ^19.0.0
• @types/react-dom ^19.0.0
• @types/unist ^3.0.3
• @vitejs/plugin-react ^5.0.0 → [Updates: ^5.0.0, ^6.0.0]
• eslint ^10.0.0 → [Updates: ^10.0.0]
• jsdom ^28.0.0 → [Updates: ^29.0.0]
• postcss ^8.4.0
• tailwindcss ^4.0.0 → [Updates: ^4.0.0]
• typescript ~5.9.0 → [Updates: ~6.0.0]
• unist-util-visit ^5.1.0
• vite ^7.0.0 → [Updates: ^8.0.0]
• vitest ^4.0.0 → [Updates: ^4.0.0]

apps/staged/package.json (23)

• @tauri-apps/api ^2.10.0
• @tauri-apps/plugin-clipboard-manager ^2.3.2
• @tauri-apps/plugin-dialog ^2.6.0
• @tauri-apps/plugin-log ^2.8.0
• @tauri-apps/plugin-process ^2.3.1
• @tauri-apps/plugin-store ^2.4.2
• @tauri-apps/plugin-updater ^2.10.0
• ansi-to-html ^0.7.2
• lucide-svelte ^0.575.0 → [Updates: ^0.577.0, ^1.0.0]
• marked ^17.0.1 → [Updates: ^17.0.1]
• sanitize-html ^2.17.0 → [Updates: ^2.17.0]
• shiki ^3.20.0 → [Updates: ^4.0.0]
• @sveltejs/vite-plugin-svelte ^6.2.1 → [Updates: ^7.0.0]
• @tauri-apps/cli ^2.10.0
• @tsconfig/svelte ^5.0.6
• @types/node ^24.10.1 → [Updates: ^24.10.1]
• prettier ^3.7.4
• prettier-plugin-svelte ^3.4.1 → [Updates: ^3.4.1]
• svelte ^5.46.4 → [Updates: ^5.46.4]
• svelte-check ^4.3.4 → [Updates: ^4.3.4]
• typescript ~5.9.3 → [Updates: ~6.0.0]
• vite ^7.2.4 → [Updates: ^8.0.0]
• ajv 8.18.0

package.json (1)

• pnpm 10.30.3 → [Updates: 10.33.0]

packages/diff-viewer/package.json (7)

• svelte ^5.46.4 → [Updates: ^5.46.4]
• typescript ~5.9.3 → [Updates: ~6.0.0]
• svelte ^5.0.0
• lucide-svelte >=0.300.0
• marked >=12.0.0
• sanitize-html >=2.0.0
• shiki >=1.0.0

pnpm-workspace.yaml

---

• Check this box to trigger a request for Renovate to run again on this repository