Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (4)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/gorilla/websocket	2024-06-14
npm	class-variance-authority	2024-11-26
npm	clsx	2024-04-23

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): pin dependencies (@biomejs/biome, @types/node, postcss, turbo, typescript)
• chore(deps): pin dependencies (@types/react, @types/react-dom)
• chore(deps): update non-major (github-actions) (actions/attest-build-provenance, actions/setup-go, docker/build-push-action, docker/login-action, docker/setup-buildx-action, docker/setup-qemu-action, github/codeql-action, golangci/golangci-lint-action, goreleaser/goreleaser-action, qltysh/qlty-action, securego/gosec, step-security/harden-runner, zizmorcore/zizmor-action)
• chore(deps): update non-major (npm) (@biomejs/biome, npm, postcss, turbo)
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-go action to v7
• chore(deps): update dependency js-yaml to v5
• chore(deps): update dependency typescript to v7
• chore(deps): update npm to v12
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update cgr.dev/chainguard/wolfi-base:latest docker digest to 003627d
• chore(deps): update dependency macos to v26

Detected Dependencies

dockerfile (4)

Dockerfile (2)

• golang 1.26.5-alpine@sha256:0178a641fbb4858c5f1b48e34bdaabe0350a330a1b1149aabd498d0699ff5fb2
• cgr.dev/chainguard/wolfi-base latest@sha256:e161445c05b19e668cb5cc44df2f0403329fd4f0ac892794255e328e760612a1 → [Updates: latest]

Dockerfile.armv7 (2)

• golang 1.26.5-alpine@sha256:0178a641fbb4858c5f1b48e34bdaabe0350a330a1b1149aabd498d0699ff5fb2
• alpine 3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b

Dockerfile.dev (1)

• golang 1.26.5-alpine@sha256:0178a641fbb4858c5f1b48e34bdaabe0350a330a1b1149aabd498d0699ff5fb2

Dockerfile.release (2)

• cgr.dev/chainguard/wolfi-base latest@sha256:e161445c05b19e668cb5cc44df2f0403329fd4f0ac892794255e328e760612a1 → [Updates: latest]
• alpine 3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b

github-actions (11)

.github/workflows/ci.yml (35)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• qltysh/qlty-action v2.2.1@fd52dc852530a708d68c3b7342f8d33d1df4cd55 → [Updates: v2.3.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• golangci/golangci-lint-action v9.2.1@82606bf257cbaff209d206a39f5134f0cfbfd2ee → [Updates: v9.3.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• zizmorcore/zizmor-action v0.5.6@5f14fd08f7cf1cb1609c1e344975f152c7ee938d → [Updates: v0.6.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• goreleaser/goreleaser-action v7.2.2@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 → [Updates: v7.2.3]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.37.1]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.37.1]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• qltysh/qlty-action v2.2.1@fd52dc852530a708d68c3b7342f8d33d1df4cd55 → [Updates: v2.3.0]

.github/workflows/quality-bench-monthly.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/quality-fuzz-monthly.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/quality-fuzz-nightly.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/quality-integration.yml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]

.github/workflows/quality-mutation-monthly.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/quality-soak-weekly.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/release-cut.yml (2)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]

.github/workflows/release.yml (17)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/setup-qemu-action v4.1.0@06116385d9baf250c9f4dcb4858b16962ea869c3 → [Updates: v4.2.0]
• goreleaser/goreleaser-action v7.2.2@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 → [Updates: v7.2.3]
• actions/attest-build-provenance v4.1.0@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 → [Updates: v4.1.1]
• actions/attest-build-provenance v4.1.0@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 → [Updates: v4.1.1]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• macos 15 → [Updates: 26]

.github/workflows/security-grype.yml (17)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0, v7.0.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• anchore/scan-action v7.4.0@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.37.1]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• anchore/scan-action v7.4.0@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.37.1]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• securego/gosec v2.27.1@9e6a9843d7a4a6e3e9a8539b02612c8a4aa3f889 → [Updates: v2.28.0]
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.37.1]

.github/workflows/security-scorecard.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v6.1.0, v7.0.0]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a → [Updates: v2.4.4]
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.37.1]

gomod (1)

go.mod (5)

• go 1.26.0
• go 1.26.5
• github.com/google/uuid v1.6.0
• github.com/gorilla/websocket v1.5.3
• golang.org/x/crypto v0.54.0

npm (3)

docs/package.json (19)

• @vercel/analytics ^2.0.1
• fumadocs-core ^16.9.3
• fumadocs-mdx ^15.0.11
• fumadocs-ui ^16.9.3
• lucide-react ^1.17.0
• next 16.2.12
• next-themes ^0.4.6
• react ^19.2.8
• react-dom ^19.2.8
• @tailwindcss/postcss 4.3.3
• @types/mdx 2.0.14
• @types/node ^25.9.2 → [Updates: 25.9.5]
• @types/react ^19.2.17 → [Updates: 19.2.18]
• @types/react-dom 19.2.3 → [Updates: 19.2.4]
• postcss ^8.5.24 → [Updates: 8.5.25]
• tailwindcss 4.3.3
• typescript ^6.0.3 → [Updates: 6.0.3, ^7.0.0]
• postcss ^8.5.24
• postcss ^8.5.24

package.json (7)

• @biomejs/biome ^2.4.16 → [Updates: 2.4.16, ^2.5.6]
• turbo ^2.9.17 → [Updates: 2.9.18, ^2.10.7]
• node >=22.0.0
• npm 11.13.0 → [Updates: 11.19.0, 12.0.1]
• js-yaml ^4.3.0 → [Updates: ^4.3.0, ^5.0.0]
• postcss ^8.5.24 → [Updates: ^8.5.24]
• sharp ^0.35.3

website/package.json (19)

• @radix-ui/react-slot ^1.2.4
• @tailwindcss/postcss ^4.3.3
• @vercel/analytics ^2.0.1
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• lucide-react ^1.17.0
• next 16.2.12
• next-themes ^0.4.6
• postcss ^8.5.24
• react ^19.2.8
• react-dom ^19.2.8
• tailwind-merge ^3.6.0
• tailwindcss ^4.3.3
• @types/node ^25.9.2 → [Updates: 25.9.5]
• @types/react ^19.2.17 → [Updates: 19.2.18]
• @types/react-dom ^19.2.3 → [Updates: 19.2.4]
• typescript ^6.0.3 → [Updates: 6.0.3, ^7.0.0]
• postcss ^8.5.24
• postcss ^8.5.24

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository