Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update dependency shiki to v4.3.1
• chore(deps): update dependency vitest to v4.1.10
• chore(deps): update react monorepo to v19.2.17 (@types/react, react, react-dom)
• chore(deps): update dependency @playwright/test to v1.61.1
• chore(deps): update dependency @tailwindcss/postcss to v4.3.2
• chore(deps): update dependency react-router-dom to v7.18.1
• fix(deps): update all non-major dependencies (@sveltejs/vite-plugin-svelte, @tailwindcss/typography, @tauri-apps/plugin-log, @types/hast, @types/node, @types/sanitize-html, @vitejs/plugin-react, ajv, anyhow, chrono, clap, dialoguer, git2, github.com/fsnotify/fsnotify, github.com/modelcontextprotocol/go-sdk, github.com/yuin/goldmark, idb-keyval, ignore, jsdom, libc, log, marked, mermaid, nanoid, nix, opener, pnpm, postcss, prettier, prettier-plugin-svelte, rand, regex, reqwest, rusqlite, rusqlite_migration, rust, rustls, sanitize-html, serde_json, shadcn-svelte, svelte-check, tauri-plugin-log, tauri-plugin-store, tokio, tower-http, uuid, vite)
• chore(deps): update actions/create-github-app-token action to v3
• chore(deps): update dependency @sveltejs/vite-plugin-svelte to v7
• chore(deps): update dependency vite to v8
• 🔐 Create all awaiting schedule PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update axum monorepo (axum, axum-extra)
• chore(deps): update dependency @lucide/svelte to v1.24.0
• chore(deps): update dependency eslint to v10.7.0
• chore(deps): update tauri monorepo (tauri, tauri-build)
• chore(deps): update actions/checkout action to v7
• chore(deps): update dependency @vitejs/plugin-react to v6
• chore(deps): update dependency prettier-plugin-svelte to v4
• chore(deps): update dependency typescript to v7
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): update pnpm to v11
• fix(deps): update dependency marked to v18
• fix(deps): update dependency shiki to v4
• fix(deps): update rust crate agent-client-protocol to v1
• fix(deps): update rust crate core-text to v22
• fix(deps): update rust crate dirs to v6
• fix(deps): update rust crate rmcp to v2
• 🔐 Create all rate-limited PRs at once 🔐

Detected Dependencies

cargo (10)

apps/differ/src-tauri/Cargo.toml (7)

• serde 1.0
• serde_json 1.0 → [Updates: 1.0]
• tauri 2.10.2 → [Updates: 2.10.2]
• tauri-plugin-store 2 → [Updates: 2]
• dirs 5.0 → [Updates: 6.0]
• tauri-build 2.5.5 → [Updates: 2.5.5]
• core-text 20 → [Updates: 22]

apps/penpal/frontend/src-tauri/Cargo.toml (6)

• tauri 2 → [Updates: 2]
• tauri-plugin-shell 2
• serde 1
• serde_json 1 → [Updates: 1]
• tauri-plugin-decorum 1
• tauri-build 2 → [Updates: 2]

apps/staged/src-tauri/Cargo.toml (45)

• serde_json 1.0
• serde 1.0
• log 0.4
• libc 0.2
• tauri 2.10.2
• tauri-plugin-log 2.8.0 → [Updates: 2.8.0]
• thiserror 2.0
• anyhow 1.0
• base64 0.22
• tempfile 3
• sha2 0.11
• rusqlite 0.39 → [Updates: 0.40]
• rusqlite_migration 2.5.0 → [Updates: 2.5.0]
• include_dir 0.7.4
• uuid 1.0 → [Updates: 1.0]
• dirs 6.0
• tauri-plugin-clipboard-manager 2.3.2
• tauri-plugin-window-state 2.4.1
• reqwest 0.13.1
• tokio 1.50.0
• tauri-plugin-opener 2
• tauri-plugin-dialog 2
• tauri-plugin-process 2
• tauri-plugin-updater 2
• agent-client-protocol 0.15.1 → [Updates: 1.0.0]
• regex 1 → [Updates: 1]
• strip-ansi-escapes 0.2
• async-trait 0.1
• tokio-util 0.7
• tauri-plugin-store 2.4.2
• rmcp 0.17 → [Updates: 2.0]
• axum 0.8
• axum-extra 0.10 → [Updates: 0.12]
• tower-http 0.6 → [Updates: 0.7]
• rustls 0.23 → [Updates: 0.23]
• tokio-rustls 0.26
• rand 0.9 → [Updates: 0.10]
• hex 0.4
• subtle 2.6
• time 0.3
• pikchr 0.1.4
• resvg 0.47
• usvg 0.47
• tiny-skia 0.12
• tauri-build 2.5.5

crates/acp-client/Cargo.toml (9)

• agent-client-protocol 0.15.1 → [Updates: 1.0.0]
• tokio 1 → [Updates: 1]
• tokio-util 0.7
• serde 1
• serde_json 1 → [Updates: 1]
• anyhow 1 → [Updates: 1]
• async-trait 0.1
• log 0.4 → [Updates: 0.4]
• nix 0.31 → [Updates: 0.31]

crates/blox-cli/Cargo.toml (5)

• log 0.4 → [Updates: 0.4]
• serde 1
• serde_json 1 → [Updates: 1]
• thiserror 2
• wait-timeout 0.2

crates/builderbot-actions/Cargo.toml (7)

• tokio 1.50 → [Updates: 1.50]
• serde 1.0
• serde_json 1.0 → [Updates: 1.0]
• uuid 1.0 → [Updates: 1.0]
• anyhow 1.0 → [Updates: 1.0]
• async-trait 0.1
• libc 0.2 → [Updates: 0.2]

crates/doctor/Cargo.toml (8)

• serde 1.0
• serde_json 1 → [Updates: 1]
• tokio 1.0 → [Updates: 1.0]
• futures 0.3
• reqwest 0.13 → [Updates: 0.13]
• dirs 6
• wait-timeout 0.2
• nix 0.31 → [Updates: 0.31]

crates/git-diff/Cargo.toml (6)

• serde 1.0
• thiserror 2.0
• git2 0.20 → [Updates: 0.21]
• base64 0.22
• log 0.4 → [Updates: 0.4]
• tempfile 3.0

crates/pm/Cargo.toml (9)

• clap 4 → [Updates: 4]
• serde 1
• serde_json 1 → [Updates: 1]
• chrono 0.4 → [Updates: 0.4]
• anyhow 1 → [Updates: 1]
• dirs 6
• colored 3
• dialoguer 0.11 → [Updates: 0.12]
• tempfile 3

crates/summarize/Cargo.toml (17)

• anyhow 1 → [Updates: 1]
• clap 4 → [Updates: 4]
• ignore 0.4 → [Updates: 0.4]
• reqwest 0.13 → [Updates: 0.13]
• serde 1
• serde_json 1 → [Updates: 1]
• serde_urlencoded 0.7
• sha2 0.11
• base64 0.22
• chrono 0.4 → [Updates: 0.4]
• tokio 1 → [Updates: 1]
• url 2
• nanoid 0.4 → [Updates: 0.5]
• axum 0.8 → [Updates: 0.8]
• opener 0.8 → [Updates: 0.8]
• dirs 6
• tempfile 3

github-actions (7)

.github/workflows/crates-ci.yml (3)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• cashapp/activate-hermit v1.1.5@cea9af7913204a965fd488637a8d1811bba2e616
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32

.github/workflows/differ-ci.yml (3)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• cashapp/activate-hermit v1.1.5@cea9af7913204a965fd488637a8d1811bba2e616
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32

.github/workflows/penpal-ci.yml (3)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• cashapp/activate-hermit v1.1.5@cea9af7913204a965fd488637a8d1811bba2e616
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32

.github/workflows/penpal-release.yml (7)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• cashapp/activate-hermit v1.1.5@cea9af7913204a965fd488637a8d1811bba2e616
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8]
• actions/create-github-app-token v1@d72941d797fd3113feb6b93fd0dec494b13a2547 → [Updates: v3]

.github/workflows/staged-bump-acp-tools.yml (2)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• cashapp/activate-hermit v1.1.5@cea9af7913204a965fd488637a8d1811bba2e616

.github/workflows/staged-ci.yml (3)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• cashapp/activate-hermit v1.1.5@cea9af7913204a965fd488637a8d1811bba2e616
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32

.github/workflows/staged-release.yml (4)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• cashapp/activate-hermit v1.1.5@cea9af7913204a965fd488637a8d1811bba2e616
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• block/apple-codesign-action v1.1.0@679535d1ab7c5a7c18e6f9afcba3464512cc3dde

gomod (1)

apps/penpal/go.mod (5)

• go 1.25.0
• github.com/fsnotify/fsnotify v1.9.0 → [Updates: v1.10.1]
• github.com/modelcontextprotocol/go-sdk v1.4.1 → [Updates: v1.6.1]
• github.com/yuin/goldmark v1.8.2 → [Updates: v1.8.4]
• github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc@37449abec8cc

hermit (1)

bin/hermit (6)

• go 1.26.4 → [Updates: 1.26.5]
• just 1.54.0 → [Updates: 1.56.0]
• lefthook 2.1.9 → [Updates: 2.1.10]
• node 24.15.0
• pnpm 10.33.0 → [Updates: 10.34.5, 11.13.1]
• rustup 1.28.2 → [Updates: 1.29.0]

npm (7)

apps/differ/package.json (17)

• @tauri-apps/api ^2.10.0
• @lucide/svelte ^1.22.0 → [Updates: ^1.22.0]
• @tauri-apps/plugin-store ^2.2.0
• marked ^17.0.1 → [Updates: ^17.0.1, ^18.0.0]
• sanitize-html ^2.17.0 → [Updates: ^2.17.0]
• shiki ^3.20.0 → [Updates: ^4.0.0]
• @sveltejs/vite-plugin-svelte ^6.2.1 → [Updates: ^7.0.0]
• @tauri-apps/cli ^2.10.0
• @tsconfig/svelte ^5.0.6
• @types/node ^24.10.1 → [Updates: ^24.10.1]
• @types/sanitize-html ^2.13.0 → [Updates: ^2.13.0]
• prettier ^3.7.4 → [Updates: ^3.7.4]
• prettier-plugin-svelte ^3.4.1 → [Updates: ^3.4.1, ^4.0.0]
• svelte ^5.46.4 → [Updates: ^5.46.4]
• svelte-check ^4.3.4 → [Updates: ^4.3.4]
• typescript ~5.9.3 → [Updates: ~7.0.0]
• vite ^7.2.4 → [Updates: ^7.2.4, ^8.0.0]

apps/penpal/e2e/package.json (1)

• @playwright/test ^1.58.2 → [Updates: ^1.58.2]

apps/penpal/frontend/package.json (31)

• @tauri-apps/api ^2.2.0
• @tauri-apps/plugin-shell ^2.3.5
• @types/react-syntax-highlighter ^15.5.13
• mermaid ^11.12.3 → [Updates: ^11.12.3]
• react ^19.0.0 → [Updates: ^19.0.0]
• react-dom ^19.0.0 → [Updates: ^19.0.0]
• react-markdown ^10.1.0
• react-router-dom ^7.1.1 → [Updates: ^7.1.1]
• react-syntax-highlighter ^16.1.0
• rehype-raw ^7.0.0
• remark-gfm ^4.0.1
• @tailwindcss/postcss ^4.2.1 → [Updates: ^4.2.1]
• @tailwindcss/typography ^0.5.0 → [Updates: ^0.5.0]
• @tauri-apps/cli ^2.2.0
• @testing-library/jest-dom ^6.0.0
• @testing-library/react ^16.0.0
• @types/hast ^3.0.4 → [Updates: ^3.0.4]
• @types/mdast ^4.0.4
• @types/node ^24.11.0 → [Updates: ^24.11.0]
• @types/react ^19.0.0 → [Updates: ^19.0.0]
• @types/react-dom ^19.0.0
• @types/unist ^3.0.3
• @vitejs/plugin-react ^5.0.0 → [Updates: ^5.0.0, ^6.0.0]
• eslint ^10.0.0 → [Updates: ^10.0.0]
• jsdom ^29.0.0 → [Updates: ^29.0.0]
• postcss ^8.4.0 → [Updates: ^8.4.0]
• tailwindcss ^4.0.0
• typescript ~5.9.0 → [Updates: ~7.0.0]
• unist-util-visit ^5.1.0
• vite ^7.0.0 → [Updates: ^7.0.0, ^8.0.0]
• vitest ^4.0.0 → [Updates: ^4.0.0]

apps/staged/package.json (42)

• @tauri-apps/api ^2.11.1
• @tauri-apps/plugin-clipboard-manager ^2.3.2
• @tauri-apps/plugin-dialog ^2.7.1
• @tauri-apps/plugin-log ^2.8.0 → [Updates: ^2.8.0]
• @tauri-apps/plugin-process ^2.3.1
• @tauri-apps/plugin-store ^2.4.3
• @tauri-apps/plugin-updater ^2.10.1
• ansi-to-html ^0.7.2
• d3-selection 3.0.0
• d3-zoom 3.0.0
• idb-keyval ^6.2.6 → [Updates: ^6.2.6]
• marked ^18.0.5 → [Updates: ^18.0.5]
• pikchr-js 0.1.4
• sanitize-html ^2.17.5 → [Updates: ^2.17.5]
• shiki ^4.3.0 → [Updates: ^4.3.0]
• @fontsource-variable/inter ^5.2.8
• @internationalized/date ^3.12.2
• @lucide/svelte ^1.22.0 → [Updates: ^1.22.0]
• @sveltejs/vite-plugin-svelte ^7.1.2 → [Updates: ^7.1.2]
• @tailwindcss/vite ^4.3.2
• @tauri-apps/cli ^2.11.4
• @tsconfig/svelte ^5.0.8
• @types/d3-selection 3.0.11
• @types/d3-zoom 3.0.8
• @types/node ^24.11.0 → [Updates: ^24.11.0]
• bits-ui ^2.18.1
• clsx ^2.1.1
• fake-indexeddb ^6.2.5
• prettier ^3.9.4 → [Updates: ^3.9.4]
• prettier-plugin-svelte ^4.1.1
• shadcn-svelte ^1.3.0 → [Updates: ^1.3.0]
• svelte ^5.56.4 → [Updates: ^5.56.4]
• svelte-check ^4.7.1 → [Updates: ^4.7.1]
• svelte-sonner ^1.1.1
• tailwind-merge ^3.6.0
• tailwind-variants ^3.2.2
• tailwindcss ^4.3.2
• tw-animate-css ^1.4.0
• typescript ~6.0.3 → [Updates: ~7.0.0]
• vite ^8.1.0 → [Updates: ^8.1.0]
• vitest ^4.1.9 → [Updates: ^4.1.9]
• ajv 8.18.0 → [Updates: 8.20.0]

package.json (1)

• pnpm 10.33.0 → [Updates: 10.34.5, 11.13.0]

packages/diff-viewer/package.json (7)

• svelte ^5.56.4 → [Updates: ^5.56.4]
• typescript ~5.9.3 → [Updates: ~7.0.0]
• @lucide/svelte >=1.0.0
• marked >=12.0.0
• sanitize-html >=2.0.0
• shiki >=1.0.0
• svelte ^5.0.0

pnpm-workspace.yaml

rust-toolchain (1)

rust-toolchain.toml (1)

• rust 1.96.1 → [Updates: 1.97.0]

---

• Check this box to trigger a request for Renovate to run again on this repository