Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (16)

Datasource	Package	Last Updated
github-actions	slsa-framework/slsa-github-generator	2025-02-24
github-actions	superfaceai/release-changelog-action	2024-03-24
github-actions	thomaseizinger/create-pull-request	2024-05-06
npm	@rabbitholesyndrome/electron-forge-maker-portable	2023-11-20
npm	commitizen	2024-09-27
npm	electron-squirrel-startup	2024-05-13
npm	eslint-plugin-autofix	2024-09-02
npm	gh-pages	2025-01-02
npm	http-request-mock	2024-10-16
npm	react-dnd	2022-04-19
npm	react-dnd-html5-backend	2022-04-19
npm	tailwindcss-animate	2023-08-28
npm	validate-branch-name	2025-01-13

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): lock file maintenance

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update italia/publiccode-parser-action action to v1.5.0
• chore(deps): update oxsecurity/megalinter action to v9.4.0
• chore(deps): update pnpm/action-setup action to v4.4.0
• chore(deps): update softprops/action-gh-release action to v2.6.1
• fix(deps): update dependency @material-symbols/svg-400 to ^0.42.0
• chore(deps-dev): update dependency @vitejs/plugin-react to v6
• chore(deps-dev): update dependency electron to v41
• chore(deps-dev): update dependency vite to v8
• chore(deps-dev): update dependency vite-plugin-css-injected-by-js to v4
• chore(deps-dev): update eslint monorepo to v10 (major) (@eslint/js, eslint)
• chore(deps): update crazy-max/ghaction-import-gpg action to v7
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): update pnpm/action-setup action to v5
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps-dev): update dependency electron to v39.8.4
• chore(deps-dev): update typescript-eslint monorepo to v8.57.2 (@typescript-eslint/eslint-plugin, @typescript-eslint/parser, typescript-eslint)
• chore(deps): update dependency i18next to v25.10.9
• chore(deps): update dependency react-i18next to v16.6.6

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/checkout action to v6.0.2
• chore(deps): update actions/setup-node action to v6.3.0
• chore(deps): update github/codeql-action action to v4.34.1
• chore(deps): update pnpm to v10.32.1
• chore(deps-dev): update dependency globals to v17
• chore(deps-dev): update dependency vitest-browser-react to v2
• chore(deps-dev): update vitest monorepo to v4 (major) (@vitest/browser, @vitest/coverage-v8, vitest)
• fix(deps-dev): update react monorepo (major) (@types/react, @types/react-dom, eslint-plugin-react-hooks, react, react-dom)
• fix(deps): update dependency immer to v11
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps-dev): update dependency tailwindcss to v4
• fix(deps): update dependency vis-data to v8
• fix(deps): update dependency vis-network to v10

Detected Dependencies

github-actions (10)

.github/workflows/build.yml (3)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• pnpm/action-setup v4.2.0@41ff72655975bd51cab0327fa583b6e92b6d3061 → [Updates: v4.4.0, v5.0.0]
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6.3.0]

.github/workflows/commit.yml (2)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• ghcr.io/siderolabs/conform v0.1.0-alpha.30-1-ga6572d2@sha256:31dbdabfe2d9e5d93035bdd8fb8a1e1181d247339e66536b8e6183801d390657

.github/workflows/create-release-draft.yml (7)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• pnpm/action-setup v4.2.0@41ff72655975bd51cab0327fa583b6e92b6d3061 → [Updates: v4.4.0, v5.0.0]
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6.3.0]
• crazy-max/ghaction-import-gpg v6@e89d40939c28e39f97cf32126055eeae86ba74ec → [Updates: v7]
• superfaceai/release-changelog-action v2.1.3@38646ad355e5d79bf7aa12e233a1573e4d36faee
• superfaceai/release-changelog-action v2.1.3@38646ad355e5d79bf7aa12e233a1573e4d36faee
• thomaseizinger/create-pull-request 1.4.0@955adb4634198898bc24dca0468514c63a8fc98d

.github/workflows/deploy-demo-app.yml (3)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• pnpm/action-setup v4.2.0@41ff72655975bd51cab0327fa583b6e92b6d3061 → [Updates: v4.4.0, v5.0.0]
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6.3.0]

.github/workflows/deploy-release.yml (12)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• pnpm/action-setup v4.2.0@41ff72655975bd51cab0327fa583b6e92b6d3061 → [Updates: v4.4.0, v5.0.0]
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6.3.0]
• crazy-max/ghaction-import-gpg v6@e89d40939c28e39f97cf32126055eeae86ba74ec → [Updates: v7]
• superfaceai/release-changelog-action v2.1.3@38646ad355e5d79bf7aa12e233a1573e4d36faee
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• slsa-framework/slsa-github-generator v2.1.0
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b → [Updates: v2.6.1]

.github/workflows/license.yml (2)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• fsfe/reuse-action v6.0.0@676e2d560c9a403aa252096d99fcab3e1132b0f5

.github/workflows/lint.yml (4)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• oxsecurity/megalinter v9.3.0@42bb470545e359597e7f12156947c436e4e3fb9a → [Updates: v9.4.0]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• github/codeql-action v4.31.10@cdefb33c0f6224e58673d9004f47f7cb3e328b89 → [Updates: v4.34.1]

.github/workflows/lintpubliccode.yml (2)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• italia/publiccode-parser-action v1.4.3@44a711e642b242be0cfc042b49f870ad2f9464fb → [Updates: v1.5.0]

.github/workflows/ssfscorecard.yml (4)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• github/codeql-action v4.31.10@cdefb33c0f6224e58673d9004f47f7cb3e328b89 → [Updates: v4.34.1]

.github/workflows/test.yml (3)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• pnpm/action-setup v4.2.0@41ff72655975bd51cab0327fa583b6e92b6d3061 → [Updates: v4.4.0, v5.0.0]
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6.3.0]

npm (9)

apps/desktop/package.json (11)

• electron-squirrel-startup ^1.0.1
• @electron-forge/cli 7.11.1
• @electron-forge/maker-deb 7.11.1
• @electron-forge/maker-rpm 7.11.1
• @electron-forge/maker-squirrel 7.11.1
• @electron-forge/maker-zip 7.11.1
• @electron-forge/plugin-auto-unpack-natives 7.11.1
• @electron-forge/plugin-fuses 7.11.1
• @electron/fuses 2.1.0
• @rabbitholesyndrome/electron-forge-maker-portable 0.2.0
• electron 39.8.3 → [Updates: 39.8.4, 41.0.3]

apps/web/package.json (10)

• http-request-mock ^2.0.0
• react ^18.3.1 → [Updates: ^19.0.0]
• react-dom ^18.3.1 → [Updates: ^19.0.0]
• @types/react 18.3.28 → [Updates: 19.2.14]
• @types/react-dom 18.3.7 → [Updates: 19.2.3]
• @types/wicg-file-system-access 2023.10.7
• @vitejs/plugin-react 5.2.0 → [Updates: 6.0.1]
• tailwindcss 3.4.19 → [Updates: 4.2.2]
• typescript 5.6.3 → [Updates: 5.9.3, 6.0.2]
• vite 7.3.1 → [Updates: 8.0.1]

package.json (11)

• @commitlint/cli 20.5.0
• @commitlint/config-conventional 20.5.0
• @commitlint/cz-commitlint 20.5.0
• commitizen 4.3.1
• inquirer 13.3.2
• lefthook 2.1.4
• validate-branch-name 1.3.2
• gh-pages 6.3.0
• pnpm 10.28.0 → [Updates: 10.32.1]
• tmp@<=0.2.3 >=0.2.4
• diff ^8.0.3

packages/config-tailwind/package.json (2)

• tailwindcss 3.4.19 → [Updates: 4.2.2]
• tailwindcss-animate 1.0.7

packages/config-typescript/package.json (1)

• typescript 5.6.3 → [Updates: 5.9.3, 6.0.2]

packages/react-mla/package.json (53)

• @geoman-io/leaflet-geoman-free ^2.17.0
• glob ^13.0.0
• http-request-mock ^2.0.0
• i18next ^25.0.0 → [Updates: ^25.0.0]
• immer ^10.1.1 → [Updates: ^11.0.0]
• leaflet ^1.9.4
• luxon ^3.5.0
• react ^18.3.1 → [Updates: ^19.0.0]
• react-dnd ^16.0.1
• react-dnd-html5-backend ^16.0.1
• react-dom ^18.3.1 → [Updates: ^19.0.0]
• react-i18next ^16.0.0 → [Updates: ^16.0.0]
• tailwindcss 3.4.19 → [Updates: 4.2.2]
• vis-data ^7.1.9 → [Updates: ^8.0.0]
• vis-network ^9.1.9 → [Updates: ^10.0.0]
• zustand ^5.0.0
• @eslint/compat 2.0.3
• @eslint/eslintrc 3.3.5
• @eslint/js 9.39.4 → [Updates: 10.0.1]
• @playwright/test 1.58.2
• @testing-library/dom 10.4.1
• @testing-library/react 16.3.2
• @types/leaflet 1.9.21
• @types/luxon 3.7.1
• @types/node 20.19.37 → [Updates: 24.12.0]
• @types/offscreencanvas 2019.7.3
• @types/react 18.3.28 → [Updates: 19.2.14]
• @types/react-dom 18.3.7 → [Updates: 19.2.3]
• @types/wicg-file-system-access 2023.10.7
• @typescript-eslint/eslint-plugin 8.57.1 → [Updates: 8.57.2]
• @typescript-eslint/parser 8.57.1 → [Updates: 8.57.2]
• @vitejs/plugin-react 5.2.0 → [Updates: 6.0.1]
• @vitest/browser 3.2.4 → [Updates: 4.1.0]
• @vitest/coverage-v8 3.2.4 → [Updates: 4.1.0]
• autoprefixer 10.4.27
• eslint 9.39.4 → [Updates: 10.1.0]
• eslint-plugin-autofix 2.2.0
• eslint-plugin-react 7.37.5
• eslint-plugin-react-hooks 5.2.0 → [Updates: 7.0.1]
• eslint-plugin-react-refresh 0.5.2
• globals 16.5.0 → [Updates: 17.4.0]
• playwright 1.58.2
• sass-embedded 1.98.0
• typescript 5.5.4 → [Updates: 5.9.3, 6.0.2]
• typescript-eslint 8.57.1 → [Updates: 8.57.2]
• vite 7.3.1 → [Updates: 8.0.1]
• vite-plugin-css-injected-by-js 3.5.2 → [Updates: 4.0.1]
• vite-plugin-dts 4.5.4
• vite-plugin-lib-inject-css 2.2.2
• vitest 3.2.4 → [Updates: 4.1.0]
• vitest-browser-react 1.0.1 → [Updates: 2.1.0]
• react ^18.3.1 → [Updates: ^18.3.1 || ^19.0.0]
• react-dom ^18.3.1 → [Updates: ^18.3.1 || ^19.0.0]

packages/webcomponent-mla/package.json (12)

• @r2wc/react-to-web-component ^2.0.3
• react ^18.3.1 → [Updates: ^19.0.0]
• react-dom ^18.3.1 → [Updates: ^19.0.0]
• @types/react 18.3.28 → [Updates: 19.2.14]
• @types/react-dom 18.3.7 → [Updates: 19.2.3]
• @types/wicg-file-system-access 2023.10.7
• @vitejs/plugin-react 5.2.0 → [Updates: 6.0.1]
• sass-embedded 1.98.0
• tailwindcss 3.4.19 → [Updates: 4.2.2]
• typescript 5.6.3 → [Updates: 5.9.3, 6.0.2]
• vite 7.3.1 → [Updates: 8.0.1]
• vite-plugin-css-injected-by-js 3.5.2 → [Updates: 4.0.1]

pnpm-workspace.yaml

tools/icon-scripts/package.json (1)

• @material-symbols/svg-400 ^0.40.0 → [Updates: ^0.42.0]

nvm (1)

.nvmrc (1)

• node 20 → [Updates: 24]

---

• Check this box to trigger a request for Renovate to run again on this repository