Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(astro): Update dependency astro to v7
• chore(backend): Update dependency cookie to v2
• chore(chrome-extension): Update dependency type-fest to v5
• chore(clerk-js): Update [DEV] major dependencies (major) (jsdom, webpack-merge)
• chore(expo-passkeys): Update dependency expo to v56
• chore(expo): Update [DEV] major dependencies to v56 (@expo/config-plugins, expo-apple-authentication, expo-auth-session, expo-constants, expo-crypto, expo-local-authentication, expo-secure-store, expo-web-browser)
• chore(express): Update [DEV] major dependencies (major) (@types/express, @types/supertest, express, supertest)
• chore(nextjs): Update [DEV] major dependencies (major) (crypto-es, next)
• chore(react-router): Update dependency react-router to v8
• chore(repo): Update dependency @babel/plugin-transform-modules-systemjs@<=7.29.3 to v8
• chore(repo): Update dependency @types/node to v26
• chore(repo): Update dependency axios@<=0.31.1 to v1
• chore(repo): Update dependency electron to v42
• chore(repo): Update dependency electron-store to v11
• chore(repo): Update dependency fast-uri@<=3.1.1 to v4
• chore(repo): Update dependency jws@<3.2.3 to v4
• chore(repo): Update dependency minimatch@>=9.0.0 <9.0.7 to v10
• chore(repo): Update dependency picomatch@<2.3.2 to v4
• chore(repo): Update dependency picomatch@>=3.0.0 <3.0.2 to v4
• chore(repo): Update dependency shiki to v4
• chore(repo): Update dependency svgo@>=3.0.0 <3.3.3 to v4
• chore(repo): Update dependency undici-types@<7.16.0 to v8
• chore(repo): Update dependency utf-8-validate to v6
• chore(repo): Update dependency vite to v8
• chore(repo): Update dependency vite-plugin-dts to v5
• chore(repo): Update dependency vitest to v4
• chore(repo): Update ESLint (major) (@eslint/js, eslint, eslint-import-resolver-typescript, eslint-plugin-jsdoc, eslint-plugin-react-hooks, eslint-plugin-simple-import-sort, eslint-plugin-yml)
• chore(repo): Update GitHub Actions (major) (major) (actions/cache, actions/checkout, actions/download-artifact, actions/github-script, actions/setup-java, actions/setup-node, actions/stale, actions/upload-artifact, clerk/break-check, dessant/lock-threads, node, peter-evans/create-or-update-comment, pnpm/action-setup, ravsamhq/notify-slack-action, slackapi/slack-github-action)
• chore(repo): Update pnpm to v11
• chore(repo): Update react monorepo to v19 (@types/react, @types/react-dom, react, react-dom)
• chore(repo): Update zxcvbn-ts monorepo to v4 (@zxcvbn-ts/core, @zxcvbn-ts/language-common)
• chore(shared): Update [DEV] major dependencies (major) (@stripe/react-stripe-js, @stripe/stripe-js)
• chore(testing): Update dependency cypress to v15
• chore(ui): Update [DEV] major dependencies (major) (@svgr/webpack, webpack-merge)
• chore(upgrade): Update [DEV] major dependencies (major) (@babel/cli, @babel/preset-react, @types/jscodeshift)
• fix(clerk-js): Update major dependencies (major) (@stripe/stripe-js, alien-signals)
• fix(expo): Update dependency react-native-url-polyfill to v3
• fix(fastify): Update dependency fastify-plugin to v6
• fix(react-router): Update dependency cookie to v2
• fix(repo): Update nextjs monorepo to v16 (@next/mdx, next)
• fix(repo): Update Rust crate napi to v3
• fix(repo): Update Rust crate napi-derive to v3
• fix(ui): Update dependency copy-to-clipboard to v4
• fix(upgrade): Update major dependencies (major) (ejs, index-to-position, marked, meow, read-pkg)
• 🔐 Create all pending approval PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(repo): Update dependency @mdx-js/react to ^3.1.1
• chore(repo): Update dependency @napi-rs/cli to ^3.7.2
• chore(repo): Update dependency @rspack/plugin-react-refresh to v2.0.2
• chore(repo): Update dependency @solana/wallet-standard to v1.1.5
• chore(repo): Update dependency @swc/helpers to v0.5.23
• chore(repo): Update dependency @types/react to v18.3.31
• chore(repo): Update dependency @wallet-standard/core to v1.1.2
• chore(repo): Update dependency electron to ^39.8.10
• chore(repo): Update dependency happy-dom to ^20.10.6
• chore(repo): Update dependency minimatch@>=9.0.0 <9.0.7 to v9.0.9
• chore(repo): Update dependency remark-gfm to ^4.0.1
• chore(repo): Update dependency rolldown to v1.1.3
• chore(repo): Update dependency shadcn to ^4.11.0
• chore(repo): Update dependency shiki to ^1.29.2
• chore(repo): Update dependency tar@<7.5.11 to v7.5.16
• chore(repo): Update dependency tmp@<0.2.6 to v0.2.7
• chore(repo): Update dependency tsdown to v0.22.3
• chore(repo): Update dependency vite to v6.4.3
• chore(repo): Update dependency vue to v3.5.39
• chore(repo): Update linting & formatting (@arethetypeswrong/cli, @commitlint/cli, @commitlint/config-conventional, prettier, publint)
• chore(repo): Update rspack monorepo to v2.0.8 (@rspack/cli, @rspack/core)
• chore(repo): Update Rust crate napi-build to 2.3.2
• chore(repo): Update tailwindcss monorepo to ^4.3.1 (@tailwindcss/postcss, tailwindcss)
• chore(ui): Update dependency @rsdoctor/rspack-plugin to ^1.5.16
• chore(upgrade): Update [DEV] minor & patch dependencies to ^7.29.7 (@babel/cli, @babel/preset-react)
• chore(vue): Update [DEV] minor & patch dependencies (@vitejs/plugin-vue, unplugin-vue, vue-tsc)
• fix(nuxt): Update minor & patch dependencies to ^4.4.8 (@nuxt/kit, @nuxt/schema)
• fix(repo): Update dependency @emotion/react to ^11.14.0
• fix(repo): Update dependency @tailwindcss/typography to ^0.5.20
• fix(repo): Update dependency react-grab to ^0.1.47
• fix(repo): Update nextjs monorepo to ^15.5.19 (@next/mdx, next)
• fix(repo): Update Rust crate base64 to 0.22.1
• fix(repo): Update Rust crate napi to 2.16.17
• fix(repo): Update Rust crate napi-derive to 2.16.13
• fix(repo): Update Rust crate objc2 to 0.6.4
• fix(repo): Update Rust crate objc2-app-kit to 0.3.2
• fix(repo): Update Rust crate objc2-authentication-services to 0.3.2
• fix(repo): Update Rust crate objc2-foundation to 0.3.2
• fix(repo): Update Rust crate serde to 1.0.228
• fix(repo): Update Rust crate serde_json to 1.0.150
• fix(repo): Update Rust crate tokio to 1.52.3
• chore(react-router): Update dependency react-router to v7.18.0
• chore(repo): Update dependency @base-org/account to v2.5.6
• chore(repo): Update dependency @rspack/dev-server to v2.1.0
• chore(repo): Update dependency axe-core to ^4.12.1
• chore(repo): Update dependency axios@<=0.31.1 to v0.33.0
• chore(repo): Update dependency core-js to v3.49.0
• chore(repo): Update dependency ip-address@<=10.1.0 to v10.2.0
• chore(repo): Update dependency preact@>=10.27.0 <10.27.3 to v10.29.2
• chore(repo): Update dependency semver@<7.7.3 to v7.8.5
• chore(repo): Update dependency smol-toml@<1.6.1 to v1.7.0
• chore(repo): Update dependency undici-types@<7.16.0 to v7.28.0
• chore(repo): Update ESLint (@eslint/js, @typescript-eslint/parser, @typescript-eslint/utils, eslint, eslint-config-turbo, eslint-plugin-playwright, eslint-plugin-turbo, eslint-plugin-yml, typescript-eslint)
• chore(repo): Update GitHub Actions (node, peter-evans/create-or-update-comment, slackapi/slack-github-action)
• chore(repo): Update plugin org.jetbrains.kotlin.plugin.compose to v2.4.0
• chore(shared): Update [DEV] minor & patch dependencies (@stripe/react-stripe-js, @stripe/stripe-js)
• chore(tanstack-react-start): Update [DEV] minor & patch dependencies (@tanstack/react-router, @tanstack/react-start)
• fix(clerk-js): Update minor & patch dependencies (@stripe/stripe-js, alien-signals)
• fix(msw): Update dependency msw to v2.14.6
• fix(react-router): Update dependency cookie to v1.1.1
• fix(repo): Update dependency @base-ui/react to ^1.6.0
• fix(repo): Update dependency lucide-react to ^1.21.0
• fix(repo): Update dependency org.jetbrains.kotlinx:kotlinx-coroutines-android to v1.11.0
• fix(repo): Update Rust crate windows to 0.62.2
• fix(testing): Update dependency dotenv to v17.4.2
• fix(ui): Update minor & patch dependencies (@emotion/cache, @emotion/react, @formkit/auto-animate, csstype)
• chore(repo): Update Clerk monorepo (major) (@actions/core, @faker-js/faker, @octokit/rest, @vitejs/plugin-react, chalk, conventional-changelog-conventionalcommits, cpy-cli, dotenv, execa, expect-type, get-port, globals, husky, lint-staged, prettier-plugin-packagejson, statuses, uuid)
• chore(repo): Update linting & formatting to v21 (@commitlint/cli, @commitlint/config-conventional)
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(backend): Update dependency msw to v2.14.6
• fix(shared): Update dependency js-cookie to v3.0.8
• chore(repo): Update Clerk monorepo (@changesets/cli, @changesets/get-github-info, @vitejs/plugin-react, citty, dotenv, fs-extra, jsonwebtoken, prettier-plugin-packagejson, prettier-plugin-tailwindcss, rimraf, tinyglobby, turbo, typedoc, typedoc-plugin-markdown, unrun)
• chore(testing): Update testing (@playwright/test, @testing-library/dom, @testing-library/jest-dom, @testing-library/react, @testing-library/user-event, @vitest/coverage-v8, vitest)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(fastify): Update dependency fastify to ^5.9.0

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package changesets/action), Failed to look up maven package androidx.credentials:credentials: no-result, Failed to look up maven package androidx.credentials:credentials-play-services-auth: no-result, Failed to look up maven package com.google.android.libraries.identity.googleid:googleid: no-result, Failed to look up maven package androidx.compose.ui:ui: no-result, Failed to look up maven package androidx.compose.material3:material3: no-result, Failed to look up maven package androidx.activity:activity-compose: no-result, Failed to look up maven package androidx.lifecycle:lifecycle-runtime-compose: no-result, Failed to look up maven package androidx.lifecycle:lifecycle-viewmodel-compose: no-result.

Files affected: .github/workflows/release.yml, packages/expo-passkeys/android/build.gradle, packages/expo/android/build.gradle

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(clerk-js): Update dependency @rsdoctor/rspack-plugin to ^1.5.16
• chore(hono): Update dependency hono to ^4.12.27
• chore(nextjs): Update dependency next to v15.5.19
• chore(react): Update [DEV] minor & patch dependencies (semver, yaml)
• chore(repo): Update dependency @babel/plugin-transform-modules-systemjs@<=7.29.3 to v7.29.7
• chore(repo): Update dependency @floating-ui/react to v0.27.19
• fix(astro): Update minor & patch dependencies (nanoid, nanostores)
• fix(upgrade): Update minor & patch dependencies (chalk, jscodeshift, marked, tinyglobby)
• chore(chrome-extension): Update dependency @types/chrome to ^0.2.0
• chore(repo): Update dependency @tanstack/query-core to ^5.101.1
• chore(repo): Update dependency @types/node to ^22.20.0
• chore(repo): Update pnpm to v10.34.4
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cargo (1)

packages/electron-passkeys/Cargo.toml (13)

• napi 2 → [Updates: 2.16.17, 3.9.4]
• napi-derive 2 → [Updates: 2.16.13, 3.5.7]
• serde 1 → [Updates: 1.0.228]
• serde_json 1 → [Updates: 1.0.150]
• base64 0.22 → [Updates: 0.22.1]
• tokio 1 → [Updates: 1.52.3]
• napi-build 2 → [Updates: 2.3.2]
• objc2 0.6 → [Updates: 0.6.4]
• objc2-foundation 0.3 → [Updates: 0.3.2]
• objc2-app-kit 0.3 → [Updates: 0.3.2]
• objc2-authentication-services 0.3 → [Updates: 0.3.2]
• objc2-foundation 0.3 → [Updates: 0.3.2]
• windows 0.61 → [Updates: 0.62.2]

github-actions (20)

.github/actions/ensure-stable-pr/action.yml (1)

• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]

.github/actions/init-blacksmith/action.yml (4)

• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]
• pnpm/action-setup v4@b906affcce14559ad1aafd4ab0e942779e9f58b1 → [Updates: v6]
• useblacksmith/setup-node v5@65c6ca86fdeb0ab3d85e78f57e4f6a7e4780b391
• useblacksmith/cache v5@71c7c918062ba3861252d84b07fe5ab2a6b467a6

.github/actions/init/action.yml (4)

• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]
• pnpm/action-setup v4@b906affcce14559ad1aafd4ab0e942779e9f58b1 → [Updates: v6]
• actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v6]
• actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v6]

.github/workflows/actionlint.yml (2)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• rhysd/actionlint sha256:b1934ee5f1c509618f2508e6eb47ee0d3520686341fec936f3b79331f9315667

.github/workflows/api-changes.yml (4)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• clerk/break-check v0.5.0@28f2635be18aa1127189f088a564645efb3aad90 → [Updates: v1]

.github/workflows/ci.yml (13)

• actions-cool/check-user-permission v2@c21884f3dda18dafc2f8b402fe807ccc9ec1aa5e
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]

.github/workflows/e2e-cleanups.yml (1)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]

.github/workflows/e2e-staging.yml (7)

• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• slackapi/slack-github-action v1.24.0@e28cf165c92ffef168d23c5c9000cffc8a25e117 → [Updates: v1.27.1, v3.0.3]

.github/workflows/electron-passkeys.yml (14)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v6]
• pnpm/action-setup v4@b906affcce14559ad1aafd4ab0e942779e9f58b1 → [Updates: v6]
• dtolnay/rust-toolchain stable@29eef336d9b2848a0b548edc03f92a220660cdb8
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v6]
• pnpm/action-setup v4@b906affcce14559ad1aafd4ab0e942779e9f58b1 → [Updates: v6]
• actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• node 24 → [Updates: 24.18.0]
• rust stable
• node 24 → [Updates: 24.18.0]

.github/workflows/expo-native-build.yml (5)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• pnpm/action-setup v4@b906affcce14559ad1aafd4ab0e942779e9f58b1 → [Updates: v6]
• actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v6]
• actions/setup-java v4@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 → [Updates: v5]
• node 24.15.0 → [Updates: 24.18.0]

.github/workflows/labeler-apply.yml (4)

• actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8]
• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• actions/labeler v6@f27b608878404679385c85cfa523b85ccb86e213

.github/workflows/labeler.yml (1)

• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]

.github/workflows/lock-threads.yml (3)

• actions/stale v9@5bef64f19d7facfb25b37b414482c7164d639639 → [Updates: v10]
• actions/stale v9@5bef64f19d7facfb25b37b414482c7164d639639 → [Updates: v10]
• dessant/lock-threads v4@be8aa5be94131386884a6da4189effda9b14aa21 → [Updates: v6]

.github/workflows/major-version-check.yml (2)

• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]
• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]

.github/workflows/mobile-e2e.yml (16)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• pnpm/action-setup v4@b906affcce14559ad1aafd4ab0e942779e9f58b1 → [Updates: v6]
• actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v6]
• actions/setup-java v4@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 → [Updates: v5]
• reactivecircus/android-emulator-runner v2@e89f39f1abbbd05b1113a29cf4db69e7540cae5a
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• pnpm/action-setup v4@b906affcce14559ad1aafd4ab0e942779e9f58b1 → [Updates: v6]
• actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v6]
• actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v6]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• node 20 → [Updates: 20.20.2, 24.18.0]
• macos 15 → [Updates: 26]
• node 20 → [Updates: 20.20.2, 24.18.0]

.github/workflows/nightly-checks.yml (3)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• ravsamhq/notify-slack-action v1@4ed28566c2bdcdaee6dca2b46b9666d01b4ed8a4 → [Updates: v2]

.github/workflows/pr-title-linter.yml (1)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]

.github/workflows/release-preflight.yml (2)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]

.github/workflows/release.yml (19)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• dawidd6/action-download-artifact v21@b6e2e70617bc3265edd6dab6c906732b2f1ae151
• changesets/action v1@63a615b9cd06ba9a3e6d13796c7fbcb080a60a0b
• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]
• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]
• slackapi/slack-github-action v1.24.0@e28cf165c92ffef168d23c5c9000cffc8a25e117 → [Updates: v1.27.1, v3.0.3]
• slackapi/slack-github-action v1.24.0@e28cf165c92ffef168d23c5c9000cffc8a25e117 → [Updates: v1.27.1, v3.0.3]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]
• slackapi/slack-github-action v1.24.0@e28cf165c92ffef168d23c5c9000cffc8a25e117 → [Updates: v1.27.1, v3.0.3]
• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]
• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]
• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]
• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]
• peter-evans/create-or-update-comment v3.0.0@3383acd359705b10cb1eeef05c0e88c056ea4666 → [Updates: v3.1.0, v5.0.0]
• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]
• peter-evans/create-or-update-comment v3.0.0@3383acd359705b10cb1eeef05c0e88c056ea4666 → [Updates: v3.1.0, v5.0.0]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]

.github/workflows/validate-renovate-config.yml (1)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v7]

gradle (2)

packages/expo-passkeys/android/build.gradle (3)

• androidx.credentials:credentials 1.3.0-rc01
• androidx.credentials:credentials-play-services-auth 1.3.0-rc01
• org.jetbrains.kotlinx:kotlinx-coroutines-android 1.7.3 → [Updates: 1.11.0]

packages/expo/android/build.gradle (12)

• org.jetbrains.kotlin.plugin.compose 2.1.20 → [Updates: 2.4.0]
• androidx.credentials:credentials 1.3.0
• androidx.credentials:credentials-play-services-auth 1.3.0
• com.google.android.libraries.identity.googleid:googleid 1.1.1
• org.jetbrains.kotlinx:kotlinx-coroutines-android 1.7.3 → [Updates: 1.11.0]
• com.clerk:clerk-android-ui 1.0.31
• com.clerk:clerk-android-api 1.0.31
• androidx.compose.ui:ui 1.7.0
• androidx.compose.material3:material3 1.3.0
• androidx.activity:activity-compose 1.9.0
• androidx.lifecycle:lifecycle-runtime-compose 2.8.0
• androidx.lifecycle:lifecycle-viewmodel-compose 2.8.0

npm (69)

package.json (90)

• @actions/core ^1.11.1 → [Updates: ^3.0.1]
• @arethetypeswrong/cli 0.18.2 → [Updates: 0.18.4]
• @changesets/cli ^2.29.4 → [Updates: ^2.31.0]
• @changesets/get-github-info ^0.6.0 → [Updates: ^0.8.0]
• @commitlint/cli ^20.5.2 → [Updates: ^20.5.3, ^21.1.0]
• @commitlint/config-conventional ^20.5.0 → [Updates: ^20.5.3, ^21.1.0]
• @eslint/eslintrc ^3.3.5
• @eslint/js 9.31.0 → [Updates: 9.39.4, 10.0.1]
• @faker-js/faker ^9.9.0 → [Updates: ^10.5.0]
• @octokit/rest ^20.1.2 → [Updates: ^22.0.1]
• @playwright/test ^1.56.1 → [Updates: ^1.61.1]
• @testing-library/dom ^10.1.0 → [Updates: ^10.4.1]
• @testing-library/jest-dom ^6.4.6 → [Updates: ^6.9.1]
• @testing-library/react ^16.0.0 → [Updates: ^16.3.2]
• @testing-library/user-event ^14.5.2 → [Updates: ^14.6.1]
• @types/cross-spawn ^6.0.6
• @types/node ^22.19.17 → [Updates: ^22.20.0, ^26.0.1]
• @vitejs/plugin-react ^4.5.2 → [Updates: ^4.7.0, ^6.0.3]
• @vitest/coverage-v8 4.1.5 → [Updates: 4.1.9]
• chalk 4.1.2 → [Updates: 5.6.2]
• citty ^0.1.6 → [Updates: ^0.2.2]
• conventional-changelog-conventionalcommits ^4.6.3 → [Updates: ^9.3.1]
• cpy-cli ^5.0.0 → [Updates: ^7.0.0]
• cross-spawn ^7.0.6
• dotenv ^16.5.0 → [Updates: ^16.6.1, ^17.4.2]
• eslint 9.31.0 → [Updates: 9.39.4, 10.5.0]
• eslint-config-prettier 10.1.8
• eslint-config-turbo 2.5.5 → [Updates: 2.10.0]
• eslint-import-resolver-typescript 3.10.1 → [Updates: 4.4.5]
• eslint-plugin-import 2.32.0
• eslint-plugin-jsdoc 50.8.0 → [Updates: 63.0.8]
• eslint-plugin-jsx-a11y 6.10.2
• eslint-plugin-playwright 2.10.1 → [Updates: 2.10.4]
• eslint-plugin-react 7.37.5
• eslint-plugin-react-hooks 5.2.0 → [Updates: 7.1.1]
• eslint-plugin-simple-import-sort 12.1.1 → [Updates: 13.0.0]
• eslint-plugin-turbo 2.5.5 → [Updates: 2.10.0]
• eslint-plugin-unused-imports 4.4.1
• eslint-plugin-yml 1.18.0 → [Updates: 1.19.1, 3.5.0]
• execa ^5.1.1 → [Updates: ^9.6.1]
• expect-type ^0.20.0 → [Updates: ^1.4.0]
• fs-extra ^11.3.0 → [Updates: ^11.3.5]
• get-port ^5.1.1 → [Updates: ^7.2.0]
• globals ^15.15.0 → [Updates: ^17.7.0]
• http-proxy ^1.18.1
• http-server ^14.1.1
• husky ^8.0.3 → [Updates: ^9.1.7]
• json5 2.2.3
• jsonwebtoken 9.0.2 → [Updates: 9.0.3]
• lint-staged ^14.0.1 → [Updates: ^17.0.8]
• pkglab 0.17.1
• prettier ^3.8.3 → [Updates: ^3.8.4]
• prettier-plugin-astro ^0.14.1
• prettier-plugin-packagejson ^2.5.15 → [Updates: ^2.5.22, ^3.0.2]
• prettier-plugin-tailwindcss ^0.6.12 → [Updates: ^0.8.0]
• publint ^0.3.18 → [Updates: ^0.3.21]
• rimraf 6.0.1 → [Updates: 6.1.3]
• statuses ^1.5.0 → [Updates: ^2.0.2]
• tinyglobby ^0.2.15 → [Updates: ^0.2.17]
• tree-kill ^1.2.2
• turbo ^2.9.14 → [Updates: ^2.10.0]
• typedoc 0.28.5 → [Updates: 0.28.19]
• typedoc-plugin-markdown 4.6.4 → [Updates: 4.12.0]
• typedoc-plugin-replace-text 4.2.0
• typescript-eslint 8.58.0 → [Updates: 8.62.0]
• unrun 0.2.39 → [Updates: 0.3.1]
• uuid 8.3.2 → [Updates: 14.0.1]
• vitest 4.1.5 → [Updates: 4.1.9]
• pnpm >=10.33.0 → [Updates: >=10.34.4, >=11.9.0]
• pnpm 10.33.0+sha512.10568bb4a6afb58c9eb3630da90cc9516417abebd3fabbe6739f0ae795728da1491e9db5a544c76ad8eb7570f5c4bb3d6c637b2cb41bfdcdb47fa823c8649319 → [Updates: 10.34.4, 11.9.0]
• @babel/plugin-transform-modules-systemjs@<=7.29.3 7.29.4 → [Updates: 7.29.7, 8.0.1]
• axios@<=0.31.1 0.32.0 → [Updates: 0.33.0, 1.18.1]
• chokidar@<5.0.0 5.0.0
• fast-uri@<=3.1.1 3.1.2 → [Updates: 4.0.0]
• flatted@<=3.4.1 3.4.2
• follow-redirects@<=1.15.11 1.16.0
• ip-address@<=10.1.0 10.1.1 → [Updates: 10.2.0]
• jws@<3.2.3 3.2.3 → [Updates: 4.0.1]
• minimatch@>=9.0.0 <9.0.7 9.0.7 → [Updates: 9.0.9, 10.2.5]
• picomatch@>=3.0.0 <3.0.2 3.0.2 → [Updates: 4.0.4]
• picomatch@<2.3.2 2.3.2 → [Updates: 4.0.4]
• preact@>=10.27.0 <10.27.3 10.27.3 → [Updates: 10.29.2]
• semver@<7.7.3 7.7.4 → [Updates: 7.8.5]
• smol-toml@<1.6.1 1.6.1 → [Updates: 1.7.0]
• socket.io-parser@>=4.0.0 <4.2.6 4.2.6
• svgo@>=3.0.0 <3.3.3 3.3.3 → [Updates: 4.0.1]
• tar@<7.5.11 7.5.11 → [Updates: 7.5.16]
• tmp@<0.2.6 0.2.6 → [Updates: 0.2.7]
• undici-types@<7.16.0 7.24.8 → [Updates: 7.28.0, 8.5.0]
• utf-8-validate 5.0.10 → [Updates: 6.0.6]

packages/astro/client/package.json

packages/astro/internal/package.json

packages/astro/package.json (3)

• nanoid 5.1.6 → [Updates: 5.1.16]
• nanostores 1.0.1 → [Updates: 1.3.0]
• astro ^6.4.8 → [Updates: ^7.0.2]

packages/astro/react/package.json

packages/astro/server/package.json

packages/astro/webhooks/package.json

packages/backend/errors/package.json

packages/backend/internal/package.json

packages/backend/jwt/package.json

packages/backend/package.json (6)

• standardwebhooks ^1.0.0
• @edge-runtime/vm 5.0.0
• cookie 1.1.1 → [Updates: 2.0.0]
• msw 2.14.2 → [Updates: 2.14.6]
• npm-run-all ^4.1.5
• snakecase-keys 9.0.2

packages/backend/proxy/package.json

packages/backend/webhooks/package.json

packages/chrome-extension/background/package.json

packages/chrome-extension/client/package.json

packages/chrome-extension/internal/package.json

packages/chrome-extension/package.json (5)

• webextension-polyfill ~0.12.0
• @types/chrome ^0.1.40 → [Updates: ^0.2.0]
• @types/webextension-polyfill ^0.12.5
• type-fest ^4.41.0 → [Updates: ^5.7.0]
• vitest-chrome ^0.1.0

packages/chrome-extension/react/package.json

packages/chrome-extension/types/package.json

packages/clerk-js/package.json (13)

• @stripe/stripe-js 5.6.0 → [Updates: 5.10.0, 9.8.0]
• alien-signals 2.0.6 → [Updates: 2.0.8, 3.2.1]
• browser-tabs-lock 1.3.0
• crypto-js ^4.2.0
• dequal 2.0.3
• @emotion/react 11.14.0
• @rsdoctor/rspack-plugin ^1.5.9 → [Updates: ^1.5.16]
• @types/cloudflare-turnstile ^0.2.2
• @types/webpack-env ^1.18.8
• bundlewatch ^0.4.2
• jsdom 26.1.0 → [Updates: 29.1.1]
• minimatch ^10.2.5
• webpack-merge ^5.10.0 → [Updates: ^6.0.1]

packages/electron-passkeys/npm/darwin-arm64/package.json

packages/electron-passkeys/npm/darwin-x64/package.json

packages/electron-passkeys/npm/win32-arm64-msvc/package.json

packages/electron-passkeys/npm/win32-x64-msvc/package.json

packages/electron-passkeys/package.json (1)

• @napi-rs/cli ^3.0.0 → [Updates: ^3.7.2]

packages/electron/package.json (3)

• @types/node ^22.19.17 → [Updates: ^22.20.0, ^26.0.1]
• electron ^39.2.6 → [Updates: ^39.8.10, ^42.5.0]
• electron-store ^8.2.0 → [Updates: ^11.0.2]

packages/eslint-plugin/package.json (5)

• @types/node ^22.19.17 → [Updates: ^22.20.0, ^26.0.1]
• @typescript-eslint/parser 8.58.0 → [Updates: 8.62.0]
• @typescript-eslint/utils 8.58.0 → [Updates: 8.62.0]
• eslint 9.31.0 → [Updates: 9.39.4, 10.5.0]
• vitest 3.2.4 → [Updates: 3.2.6, 4.1.9]

packages/expo-passkeys/package.json (1)

• expo ~52.0.49 → [Updates: ~56.0.12]

packages/expo/apple/package.json

packages/expo/experimental/package.json

packages/expo/google/package.json

packages/expo/legacy/package.json

packages/expo/local-credentials/package.json

packages/expo/native/package.json

packages/expo/package.json (13)

• base-64 ^1.0.0
• react-native-url-polyfill 2.0.0 → [Updates: 3.0.0]
• @expo/config-plugins ^54.0.4 → [Updates: ^56.0.9]
• @types/base-64 ^1.0.2
• esbuild ^0.28.1
• expo-apple-authentication ^7.2.4 → [Updates: ^56.0.4]
• expo-auth-session ^5.5.2 → [Updates: ^56.0.14]
• expo-constants ^18.0.13 → [Updates: ^56.0.18]
• expo-crypto ^15.0.9 → [Updates: ^56.0.4]
• expo-local-authentication ^13.8.0 → [Updates: ^56.0.4]
• expo-secure-store ^12.8.1 → [Updates: ^56.0.4]
• expo-web-browser ^12.8.2 → [Updates: ^56.0.5]
• react-native ^0.86.0

packages/expo/passkeys/package.json

packages/expo/resource-cache/package.json

packages/expo/secure-store/package.json

packages/expo/token-cache/package.json

packages/expo/web/package.json

packages/express/package.json (4)

• @types/express ^4.17.25 → [Updates: ^5.0.6]
• @types/supertest ^6.0.3 → [Updates: ^7.2.0]
• express ^4.22.2 → [Updates: ^5.2.1]
• supertest ^6.3.4 → [Updates: ^7.2.2]

packages/express/webhooks/package.json

packages/fastify/package.json (2)

• fastify-plugin ^5.1.0 → [Updates: ^6.0.0]
• fastify ^5.8.5 → [Updates: ^5.9.0]

packages/fastify/webhooks/package.json

packages/headless/package.json (11)

• @testing-library/dom ^10.4.1
• @testing-library/jest-dom ^6.9.1
• @testing-library/react ^16.3.2
• @testing-library/user-event ^14.6.1
• axe-core ^4.11.3 → [Updates: ^4.12.1]
• happy-dom ^20.8.9 → [Updates: ^20.10.6]
• rollup-plugin-preserve-directives ^0.4.0
• vite 6.4.2 → [Updates: 6.4.3, 8.1.0]
• vite-plugin-dts ^4.5.4 → [Updates: ^5.0.3]
• vitest 4.1.6 → [Updates: 4.1.9]
• vitest-axe ^0.1.0

packages/hono/package.json (1)

• hono ^4.12.26 → [Updates: ^4.12.27]

packages/localizations/package.json

packages/msw/package.json (1)

• msw 2.13.6 → [Updates: 2.14.6]

packages/nextjs/errors/package.json

packages/nextjs/internal/package.json

packages/nextjs/package.json (3)

• server-only 0.0.1
• crypto-es ^2.1.0 → [Updates: ^3.1.3]
• next 15.5.18 → [Updates: 15.5.19, 16.2.9]

packages/nextjs/server/package.json

packages/nextjs/webhooks/package.json

packages/nuxt/package.json (4)

• @nuxt/kit ^4.1.3 → [Updates: ^4.4.8]
• @nuxt/schema ^4.1.3 → [Updates: ^4.4.8]
• h3 ^1.15.4
• nuxt ^4.4.8

packages/react-router/package.json (3)

• cookie 1.0.2 → [Updates: 1.1.1, 2.0.0]
• esbuild-plugin-file-path-extensions ^2.1.4
• react-router 7.15.0 → [Updates: 7.18.0, 8.0.1]

packages/react/package.json (3)

• @types/semver ^7.7.1
• semver ^7.7.4 → [Updates: ^7.8.5]
• yaml ^2.8.3 → [Updates: ^2.9.0]

packages/shared/package.json (8)

• dequal 2.0.3
• glob-to-regexp 0.4.1
• js-cookie 3.0.7 → [Updates: 3.0.8]
• @stripe/react-stripe-js 3.1.1 → [Updates: 3.10.0, 6.6.0]
• @stripe/stripe-js 5.6.0 → [Updates: 5.10.0, 9.8.0]
• @types/glob-to-regexp 0.4.4
• @types/js-cookie 3.0.6
• cross-fetch ^4.1.0

packages/swingset/package.json (20)

• @base-ui/react ^1.5.0 → [Updates: ^1.6.0]
• @emotion/react ^11.11.1 → [Updates: ^11.14.0]
• @tailwindcss/typography ^0.5.19 → [Updates: ^0.5.20]
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• lucide-react ^1.17.0 → [Updates: ^1.21.0]
• next ^15.0.0 → [Updates: ^15.5.19, ^16.2.9]
• next-themes ^0.4.6
• react-grab ^0.1.44 → [Updates: ^0.1.47]
• rehype-raw ^7.0.0
• tailwind-merge ^3.6.0
• tw-animate-css ^1.4.0
• @mdx-js/loader ^3.1.1
• @mdx-js/react ^3.1.0 → [Updates: ^3.1.1]
• @next/mdx ^15.0.0 → [Updates: ^15.5.19, ^16.2.9]
• @tailwindcss/postcss ^4.0.0 → [Updates: ^4.3.1]
• remark-gfm ^4.0.0 → [Updates: ^4.0.1]
• shadcn ^4.10.0 → [Updates: ^4.11.0]
• shiki ^1.0.0 → [Updates: ^1.29.2, ^4.3.0]
• tailwindcss ^4.0.0 → [Updates: ^4.3.1]

packages/tanstack-react-start/errors/package.json

packages/tanstack-react-start/package.json (3)

• @tanstack/react-router 1.157.16 → [Updates: 1.170.16]
• @tanstack/react-start 1.157.16 → [Updates: 1.168.26]
• esbuild-plugin-file-path-extensions ^2.1.4

packages/tanstack-react-start/server/package.json

packages/tanstack-react-start/webhooks/package.json

packages/testing/cypress/package.json

packages/testing/package.json (3)

• dotenv 17.2.2 → [Updates: 17.4.2]
• @playwright/test ^1.56.1 → [Updates: ^1.61.1]
• cypress ^14.5.4 → [Updates: ^15.18.0]

packages/testing/playwright/package.json

packages/ui/package.json (17)

• @emotion/cache 11.11.0 → [Updates: 11.14.0]
• @emotion/react 11.11.1 → [Updates: 11.14.0]
• @formkit/auto-animate ^0.8.2 → [Updates: ^0.9.0]
• copy-to-clipboard 3.3.3 → [Updates: 4.0.2]
• csstype 3.1.3 → [Updates: 3.2.3]
• dequal 2.0.3
• input-otp 1.4.2
• qrcode.react 4.2.0
• @floating-ui/react-dom ^2.1.8
• @rsdoctor/rspack-plugin ^1.5.9 → [Updates: ^1.5.16]
• @svgr/rollup ^8.1.0
• @svgr/webpack ^6.5.1 → [Updates: ^8.1.0]
• @types/webpack-env ^1.18.8
• bundlewatch ^0.4.2
• cross-fetch ^4.1.0
• minimatch ^10.2.5
• webpack-merge ^5.10.0 → [Updates: ^6.0.1]

packages/upgrade/package.json (13)

• chalk ^5.3.0 → [Updates: ^5.6.2]
• ejs 3.1.10 → [Updates: 6.0.1]
• gray-matter ^4.0.3
• index-to-position ^0.1.2 → [Updates: ^1.2.0]
• jscodeshift ^17.0.0 → [Updates: ^17.3.0]
• marked ^11.1.1 → [Updates: ^11.2.0, ^18.0.5]
• meow ^11.0.0 → [Updates: ^14.1.0]
• read-pkg ^9.0.1 → [Updates: ^10.1.0]
• semver-regex ^4.0.5
• tinyglobby ^0.2.15 → [Updates: ^0.2.17]
• @babel/cli ^7.28.6 → [Updates: ^7.29.7, ^8.0.1]
• @babel/preset-react ^7.28.5 → [Updates: ^7.29.7, ^8.0.1]
• @types/jscodeshift ^0.12.0 → [Updates: ^17.3.0]

packages/vue/package.json (5)

• @testing-library/vue ^8.1.0
• @vitejs/plugin-vue ^6.0.5 → [Updates: ^6.0.7]
• @vue.ts/tsx-auto-props ^1.0.0-beta.13
• unplugin-vue 7.0.8 → [Updates: 7.2.0]
• vue-tsc ^3.2.4 → [Updates: ^3.3.5]

pnpm-workspace.yaml (29)

• react ^18.0.0 || ~19.0.3 || ~19.1.4 || ~19.2.3 || ~19.3.0-0
• react-dom ^18.0.0 || ~19.0.3 || ~19.1.4 || ~19.2.3 || ~19.3.0-0
• @types/react 18.3.28 → [Updates: 18.3.31, 19.2.17]
• @types/react-dom 18.3.7 → [Updates: 19.2.3]
• react 18.3.1 → [Updates: 19.2.7]
• react-dom 18.3.1 → [Updates: 19.2.7]
• @floating-ui/react 0.27.12 → [Updates: 0.27.19]
• @swc/helpers 0.5.21 → [Updates: 0.5.23]
• @tanstack/query-core ^5.100.6 → [Updates: ^5.101.1]
• core-js 3.47.0 → [Updates: 3.49.0]
• rolldown 1.1.0 → [Updates: 1.1.3]
• tsdown 0.22.2 → [Updates: 0.22.3]
• tslib 2.8.1
• tsup 8.5.1
• typescript 6.0.3
• vue 3.5.33 → [Updates: 3.5.39]
• zx 8.8.5
• @rspack/cli 2.0.6 → [Updates: 2.0.8]
• @rspack/core 2.0.6 → [Updates: 2.0.8]
• @rspack/dev-server 2.0.3 → [Updates: 2.1.0]
• @rspack/plugin-react-refresh 2.0.1 → [Updates: 2.0.2]
• @base-org/account 2.0.1 → [Updates: 2.5.6]
• @coinbase/wallet-sdk 4.3.7
• @solana/wallet-adapter-base 0.9.27
• @solana/wallet-adapter-react 0.15.39
• @solana/wallet-standard 1.1.4 → [Updates: 1.1.5]
• @wallet-standard/core 1.1.1 → [Updates: 1.1.2]
• @zxcvbn-ts/core 3.0.4 → [Updates: 4.1.2]
• @zxcvbn-ts/language-common 3.0.4 → [Updates: 4.1.2]

---

• Check this box to trigger a request for Renovate to run again on this repository