🔄 Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	lucide-svelte

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update gcr.io/oss-fuzz-base/base-builder-javascript docker digest to 2fa7bd9
• chore(deps): update actions/upload-artifact action to v7.0.1
• chore(deps): update codecov/codecov-action action to v5.5.5
• chore(deps): update dependency @sveltejs/adapter-cloudflare to v7.2.9
• chore(deps): update dependency dompurify to v3.4.12
• chore(deps): update dependency minimatch@3>brace-expansion to v1.1.16
• chore(deps): update dependency pnpm to v10.34.5
• chore(deps): update dependency prettier-plugin-svelte to v3.5.2
• chore(deps): update dependency svelte to v5.56.4
• chore(deps): update eslint monorepo to v9.39.5 (@eslint/js, eslint)
• chore(deps): update ossf/scorecard-action action to v2.4.4
• chore(deps): update tailwindcss monorepo to v4.3.2 (@tailwindcss/vite, tailwindcss)
• chore(deps): update vitest monorepo to v3.2.7 (@vitest/coverage-v8, vitest)
• fix(deps): update dependency @ai-sdk/mistral to v3.0.48
• fix(deps): update dependency ai to v6.0.224
• chore(deps): update actions/cache action to v5.1.0
• chore(deps): update actions/setup-node action to v6.5.0
• chore(deps): update dependency @sveltejs/kit to v2.69.2
• chore(deps): update dependency bits-ui to v2.18.1
• chore(deps): update dependency eslint-plugin-svelte to v3.20.0
• chore(deps): update dependency globals to v17.7.0
• chore(deps): update dependency lucide-svelte to v0.577.0
• chore(deps): update dependency minimatch@9>brace-expansion to v2.1.2
• chore(deps): update dependency prettier to v3.9.5
• chore(deps): update dependency prettier-plugin-tailwindcss to v0.8.0
• chore(deps): update dependency sharp to v0.35.3
• chore(deps): update dependency svelte-check to v4.7.2
• chore(deps): update dependency tailwind-merge to v3.6.0
• chore(deps): update dependency typescript-eslint to v8.63.0
• chore(deps): update dependency wrangler to v4.110.0
• chore(deps): update github/codeql-action action to v4.37.3
• chore(deps): update node.js to v24.18.0
• chore(deps): update step-security/harden-runner action to v2.20.0
• fix(deps): update dependency @fortawesome/fontawesome-free to v7.3.0
• fix(deps): update dependency @supabase/ssr to v0.12.0
• fix(deps): update dependency @supabase/supabase-js to v2.110.2
• fix(deps): update dependency @xyflow/svelte to v1.6.2
• fix(deps): update dependency zod to v4.4.3
• chore(deps): update actions/cache action to v6
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/create-github-app-token action to v3
• chore(deps): update actions/dependency-review-action action to v5
• chore(deps): update actions/setup-node action to v7
• chore(deps): update codecov/codecov-action action to v7
• chore(deps): update dependency @sveltejs/vite-plugin-svelte to v7
• chore(deps): update dependency cookie to v2
• chore(deps): update dependency js-yaml to v5
• chore(deps): update dependency lucide-svelte to v1
• chore(deps): update dependency minimatch@3>brace-expansion to v5
• chore(deps): update dependency minimatch@9>brace-expansion to v5
• chore(deps): update dependency picomatch to v4
• chore(deps): update dependency pnpm to v11
• chore(deps): update dependency postcss-load-config>yaml to v2
• chore(deps): update dependency prettier-plugin-svelte to v4
• chore(deps): update dependency typescript to v7
• chore(deps): update dependency undici to v8
• chore(deps): update dependency vite to v8
• chore(deps): update dorny/paths-filter action to v4
• chore(deps): update pnpm/action-setup action to v6
• fix(deps): update dependency @ai-sdk/mistral to v4
• fix(deps): update dependency ai to v7
• fix(deps): update dependency layerchart to v2
• fix(deps): update dependency marked to v18
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• fix(deps): update dependency marked to v17.0.6

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency devalue to v5.8.2
• chore(deps): update dependency flatted to v3.4.3
• chore(deps): update dependency ws to v8.21.1
• chore(deps): update dependency undici to v7.29.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update github/codeql-action digest to e4fba86
• chore(deps): update actions/checkout action to v6.1.0
• chore(deps): update eslint monorepo to v10 (@eslint/js, eslint)
• chore(deps): update vitest monorepo to v4 (@vitest/coverage-v8, vitest)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

.clusterfuzzlite/Dockerfile (1)

• gcr.io/oss-fuzz-base/base-builder-javascript sha256:26c2e9a9333b120f48c561441976e7de16f194f10e41e18e4798e1911f051c24 → [Updates: undefined]

github-actions (7)

.github/workflows/clusterfuzzlite.yml (6)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• google/clusterfuzzlite v1@884713a6c30a92e5e8544c39945cd7cb630abcd1
• google/clusterfuzzlite v1@884713a6c30a92e5e8544c39945cd7cb630abcd1
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• google/clusterfuzzlite v1@884713a6c30a92e5e8544c39945cd7cb630abcd1
• google/clusterfuzzlite v1@884713a6c30a92e5e8544c39945cd7cb630abcd1

.github/workflows/codeql-analysis.yml (9)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• github/codeql-action v4.32.6@0d579ffd059c29b07949a3cce3983f0780820c98 → [Updates: v4.37.3]
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6.5.0, v7.0.0]
• pnpm/action-setup v4.4.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.9]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• github/codeql-action v4.32.6@0d579ffd059c29b07949a3cce3983f0780820c98 → [Updates: v4.37.3]
• node 24.14.0 → [Updates: 24.18.0]
• pnpm 10.34.1 → [Updates: 10.34.5, 11.11.0]

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/dependency-review-action v4.9.0@2031cfc080254a8a887f58cffee85186f0e49e48 → [Updates: v5.0.0]

.github/workflows/deploy.yml (7)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6.5.0, v7.0.0]
• pnpm/action-setup v4.4.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.9]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• pnpm 10.34.1 → [Updates: 10.34.5, 11.11.0]

.github/workflows/pull-request.yml (8)

• dorny/paths-filter v3.0.3@d1c1ffe0248fe513906c8e24db8ea791d46f8590 → [Updates: v4.0.2]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6.5.0, v7.0.0]
• pnpm/action-setup v4.4.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.9]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• codecov/codecov-action v5.5.4@75cd11691c0faa626561e295848008c8a7dddffe → [Updates: v5.5.5, v7.0.0]
• pnpm 10.34.1 → [Updates: 10.34.5, 11.11.0]

.github/workflows/release.yml (15)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6.5.0, v7.0.0]
• pnpm/action-setup v4.4.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.9]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• codecov/codecov-action v5.5.4@75cd11691c0faa626561e295848008c8a7dddffe → [Updates: v5.5.5, v7.0.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6.5.0, v7.0.0]
• pnpm/action-setup v4.4.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.9]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• actions/create-github-app-token v2.2.2@fee1f7d63c2ff003460e3d139729b119787bc349 → [Updates: v3.2.0]
• cycjimmy/semantic-release-action v6.0.0@b12c8f6015dc215fe37bc154d4ad456dd3833c90
• pnpm 10.34.1 → [Updates: 10.34.5, 11.11.0]
• pnpm 10.34.1 → [Updates: 10.34.5, 11.11.0]

.github/workflows/scorecard.yml (5)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a → [Updates: v2.4.4]
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7.0.1]
• github/codeql-action v4@e46ed2cbd01164d986452f91f178727624ae40d7 → [Updates: v4]

npm (2)

package.json (41)

• @ai-sdk/mistral 3.0.21 → [Updates: 3.0.48, 4.0.8]
• @fortawesome/fontawesome-free 7.2.0 → [Updates: 7.3.0]
• @octokit/rest 22.0.1
• @supabase/ssr 0.8.0 → [Updates: 0.12.0]
• @supabase/supabase-js 2.98.0 → [Updates: 2.110.2]
• @xyflow/svelte 1.5.1 → [Updates: 1.6.2]
• ai 6.0.105 → [Updates: 6.0.224, 7.0.22]
• dompurify ^3.4.11 → [Updates: ^3.4.11]
• highlight.js 11.11.1
• layerchart 1.0.13 → [Updates: 2.0.1]
• marked 17.0.3 → [Updates: 17.0.6, 18.0.6]
• yaml 2.9.0
• zod 4.3.6 → [Updates: 4.4.3]
• @eslint/js 9.39.3 → [Updates: 9.39.5, 10.0.1]
• @sveltejs/adapter-cloudflare 7.2.8 → [Updates: 7.2.9]
• @sveltejs/kit ^2.60.1 → [Updates: ^2.60.1]
• @sveltejs/vite-plugin-svelte 6.2.4 → [Updates: 7.2.0]
• @tailwindcss/vite 4.3.0 → [Updates: 4.3.2]
• @vitest/coverage-v8 3.2.6 → [Updates: 3.2.7, 4.1.10]
• bits-ui 2.16.2 → [Updates: 2.18.1]
• clsx 2.1.1
• eslint 9.39.3 → [Updates: 9.39.5, 10.7.0]
• eslint-plugin-svelte 3.15.0 → [Updates: 3.20.0]
• globals 17.3.0 → [Updates: 17.7.0]
• lucide-svelte 0.575.0 → [Updates: 0.577.0, 1.0.1]
• mode-watcher 1.1.0
• prettier 3.8.1 → [Updates: 3.9.5]
• prettier-plugin-svelte 3.5.0 → [Updates: 3.5.2, 4.1.1]
• prettier-plugin-tailwindcss 0.7.2 → [Updates: 0.8.0]
• sharp 0.34.5 → [Updates: 0.35.3]
• svelte 5.56.1 → [Updates: 5.56.4]
• svelte-check 4.4.6 → [Updates: 4.7.2]
• tailwind-merge 3.5.0 → [Updates: 3.6.0]
• tailwindcss 4.3.0 → [Updates: 4.3.2]
• tailwindcss-animate 1.0.7
• tw-animate-css 1.4.0
• typescript 5.9.3 → [Updates: 7.0.2]
• typescript-eslint 8.56.1 → [Updates: 8.63.0]
• vite 6.4.3 → [Updates: 8.1.4]
• vitest 3.2.6 → [Updates: 3.2.7, 4.1.10]
• wrangler 4.69.0 → [Updates: 4.110.0]

pnpm-workspace.yaml (14)

• cookie 1.1.1 → [Updates: 2.0.1]
• devalue 5.8.1 → [Updates: 5.8.2]
• esbuild 0.28.1
• flatted 3.4.2 → [Updates: 3.4.3]
• js-yaml ^4.2.0 → [Updates: ^5.0.0]
• lodash-es 4.18.1
• minimatch@3>brace-expansion 1.1.13 → [Updates: 1.1.16, 5.0.7]
• minimatch@9>brace-expansion 2.0.3 → [Updates: 2.1.2, 5.0.7]
• picomatch 2.3.2 → [Updates: 4.0.5]
• postcss ^8.5.10
• postcss-load-config>yaml 1.10.3 → [Updates: 2.9.0]
• undici 7.28.0 → [Updates: 7.29.0, 8.7.0]
• ws 8.21.0 → [Updates: 8.21.1]
• zod 4.3.6 → [Updates: 4.4.3]

nvm (1)

.nvmrc (1)

• node 24.14.0 → [Updates: 24.18.0]

---

• Check this box to trigger a request for Renovate to run again on this repository