🔄 Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/checkout action to v6.0.3
• chore(deps): update dependency mocha to v11.7.6
• chore(deps): update dependency vite to v7.3.3
• fix(deps): update codemirror (@codemirror/commands, @codemirror/language, @codemirror/legacy-modes, @codemirror/state, @codemirror/view)
• fix(deps): update dependency @actions/workflow-parser to v0.3.57
• fix(deps): update dependency @xyflow/react to v12.10.2
• fix(deps): update react monorepo (@types/react, eslint-plugin-react-hooks, react, react-dom)
• chore(deps): update actions/create-github-app-token action to v3.2.0
• chore(deps): update dependency @types/vscode to v1.120.0
• chore(deps): update dependency @vitejs/plugin-react to v5.2.0
• chore(deps): update dependency @vscode/vsce to v3.9.1
• chore(deps): update dependency autoprefixer to v10.5.0
• chore(deps): update dependency eslint>ajv to v6.15.0
• chore(deps): update dependency fast-check to v4.8.0
• chore(deps): update dependency globals to v17.6.0
• chore(deps): update dependency pnpm to v10.33.4
• chore(deps): update dependency webpack to v5.107.1
• chore(deps): update github/codeql-action action to v4.36.2
• chore(deps): update node.js to v24.16.0 (node, @types/node)
• chore(deps): update tailwindcss monorepo to v4.3.0 (@tailwindcss/postcss, tailwindcss)
• chore(deps): update typescript-eslint monorepo to v8.59.4
• chore(deps): update vitest monorepo to v4.1.7 (@vitest/coverage-v8, vitest)
• fix(deps): update dependency react-icons to v5.6.0
• fix(deps): update dependency yaml to v2.9.0
• chore(deps): update actions/dependency-review-action action to v5
• chore(deps): update codecov/codecov-action action to v6
• chore(deps): update dependency @vitejs/plugin-react to v6
• chore(deps): update dependency anymatch>picomatch to v4
• chore(deps): update dependency eslint>ajv to v8
• chore(deps): update dependency pnpm to v11
• chore(deps): update dependency readdirp>picomatch to v4
• chore(deps): update dependency typescript to v6
• chore(deps): update dependency vite to v8
• chore(deps): update dependency webpack-cli to v7
• chore(deps): update dorny/paths-filter action to v4
• chore(deps): update pnpm/action-setup action to v6
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency ts-loader to v9.6.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update github/codeql-action digest to 8aad20d
• chore(deps): update dependency postcss to v8.5.15
• chore(deps): update dorny/paths-filter action to v3.0.3
• chore(deps): update step-security/harden-runner action to v2.19.4
• chore(deps): update eslint monorepo to v10.4.0
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (6)

.github/workflows/codeql-analysis.yml (9)

• step-security/harden-runner v2.19.1@a5ad31d6a139d249332a2605b85202e8c0b78450 → [Updates: v2.19.4]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• github/codeql-action v4.32.6@0d579ffd059c29b07949a3cce3983f0780820c98 → [Updates: v4.36.2]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• pnpm/action-setup v4.4.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.8]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• github/codeql-action v4.32.6@0d579ffd059c29b07949a3cce3983f0780820c98 → [Updates: v4.36.2]
• node 24.15.0 → [Updates: 24.16.0]
• pnpm 10.30.3 → [Updates: 10.33.4, 11.2.2]

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.19.1@a5ad31d6a139d249332a2605b85202e8c0b78450 → [Updates: v2.19.4]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/dependency-review-action v4.9.0@2031cfc080254a8a887f58cffee85186f0e49e48 → [Updates: v5.0.0]

.github/workflows/publish.yml (8)

• step-security/harden-runner v2.19.1@a5ad31d6a139d249332a2605b85202e8c0b78450 → [Updates: v2.19.4]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• pnpm/action-setup v4.4.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.8]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• pnpm 10.30.3 → [Updates: 10.33.4, 11.2.2]

.github/workflows/pull-request.yml (15)

• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36 → [Updates: v3.0.3, v4.0.1]
• step-security/harden-runner v2.19.1@a5ad31d6a139d249332a2605b85202e8c0b78450 → [Updates: v2.19.4]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• pnpm/action-setup v4.4.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.8]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• codecov/codecov-action v5.5.4@75cd11691c0faa626561e295848008c8a7dddffe → [Updates: v6.0.1]
• step-security/harden-runner v2.19.1@a5ad31d6a139d249332a2605b85202e8c0b78450 → [Updates: v2.19.4]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• pnpm/action-setup v4.4.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.8]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• pnpm 10.30.3 → [Updates: 10.33.4, 11.2.2]
• pnpm 10.30.3 → [Updates: 10.33.4, 11.2.2]

.github/workflows/release.yml (16)

• step-security/harden-runner v2.19.1@a5ad31d6a139d249332a2605b85202e8c0b78450 → [Updates: v2.19.4]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• pnpm/action-setup v4.4.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.8]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• codecov/codecov-action v5.5.4@75cd11691c0faa626561e295848008c8a7dddffe → [Updates: v6.0.1]
• step-security/harden-runner v2.19.1@a5ad31d6a139d249332a2605b85202e8c0b78450 → [Updates: v2.19.4]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• pnpm/action-setup v4.4.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.8]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/create-github-app-token v3.1.1@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 → [Updates: v3.2.0]
• cycjimmy/semantic-release-action v6.0.0@b12c8f6015dc215fe37bc154d4ad456dd3833c90
• actions/attest-build-provenance v4.1.0@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32
• pnpm 10.30.3 → [Updates: 10.33.4, 11.2.2]
• pnpm 10.30.3 → [Updates: 10.33.4, 11.2.2]

.github/workflows/scorecard.yml (5)

• step-security/harden-runner v2.19.1@a5ad31d6a139d249332a2605b85202e8c0b78450 → [Updates: v2.19.4]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4@e46ed2cbd01164d986452f91f178727624ae40d7 → [Updates: v4]

npm (2)

package.json (63)

• @actions/workflow-parser 0.3.53 → [Updates: 0.3.57]
• @codemirror/commands 6.10.2 → [Updates: 6.10.3]
• @codemirror/language 6.12.1 → [Updates: 6.12.3]
• @codemirror/legacy-modes 6.5.2 → [Updates: 6.5.3]
• @codemirror/state 6.5.4 → [Updates: 6.6.0]
• @codemirror/theme-one-dark 6.1.3
• @codemirror/view 6.39.15 → [Updates: 6.43.0]
• @xyflow/react 12.10.1 → [Updates: 12.10.2]
• react 19.2.4 → [Updates: 19.2.6]
• react-dom 19.2.4 → [Updates: 19.2.6]
• react-icons 5.5.0 → [Updates: 5.6.0]
• yaml 2.8.3 → [Updates: 2.9.0]
• @eslint/js 10.0.1
• @tailwindcss/postcss 4.2.0 → [Updates: 4.3.0]
• @types/mocha 10.0.10
• @types/node 24.12.2 → [Updates: 24.12.4]
• @types/react 19.2.14 → [Updates: 19.2.15]
• @types/react-dom 19.2.3
• @types/vscode 1.80.0 → [Updates: 1.120.0]
• @vitejs/plugin-react 5.1.4 → [Updates: 5.2.0, 6.0.2]
• @vitest/coverage-v8 4.0.18 → [Updates: 4.1.7]
• @vscode/test-electron 2.5.2
• @vscode/vsce 3.7.1 → [Updates: 3.9.1]
• autoprefixer 10.4.27 → [Updates: 10.5.0]
• css-loader 7.1.4
• eslint 10.2.0 → [Updates: 10.4.0]
• eslint-plugin-react-hooks 7.0.1 → [Updates: 7.1.1]
• eslint-plugin-react-refresh 0.5.2
• fast-check 4.6.0 → [Updates: 4.8.0]
• globals 17.3.0 → [Updates: 17.6.0]
• mini-css-extract-plugin 2.10.2
• mocha ^11.7.5 → [Updates: ^11.7.5]
• postcss 8.5.9 → [Updates: 8.5.15]
• postcss-loader 8.2.1
• tailwindcss 4.2.0 → [Updates: 4.3.0]
• ts-loader 9.5.7 → [Updates: 9.6.0]
• typescript 5.9.3 → [Updates: 6.0.3]
• typescript-eslint 8.56.0 → [Updates: 8.59.4]
• vite 7.3.2 → [Updates: 7.3.3, 8.0.14]
• vitest 4.0.18 → [Updates: 4.1.7]
• webpack 5.106.2 → [Updates: 5.107.1]
• webpack-cli 6.0.1 → [Updates: 7.0.2]
• vscode ^1.80.0
• node >=24
• underscore >=1.13.8
• markdown-it >=14.1.1
• test-exclude>minimatch >=10.2.1
• qs >=6.14.2
• rollup >=4.59.0
• @typescript-eslint/typescript-estree>minimatch >=9.0.7
• minimatch>brace-expansion >=5.0.5
• serialize-javascript >=7.0.5
• eslint>ajv 6.14.0 → [Updates: 6.15.0, 8.20.0]
• flatted >=3.4.2
• anymatch>picomatch 2.3.2 → [Updates: 4.0.4]
• readdirp>picomatch 2.3.2 → [Updates: 4.0.4]
• micromatch>picomatch 4.0.4
• tinyglobby>picomatch 4.0.4
• vite>picomatch 4.0.4
• vitest>picomatch 4.0.4
• mocha>diff >=8.0.3
• @textlint/linter-formatter>lodash >=4.18.0
• undici >=7.24.0

pnpm-workspace.yaml

nvm (1)

.nvmrc (1)

• node 24.15.0 → [Updates: 24.16.0]

---

• Check this box to trigger a request for Renovate to run again on this repository