Renovate Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (1)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
bun	husky	2024-11-18

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• build: lock file maintenance from to

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• build: update dev-dependency esbuild from 0.28.0 to 0.28.1 due to security vulnerability
• ci: update action codecov/codecov-action from 57e3a13 to fb8b358
• build: update dev-dependency @commitlint/cli from 20.5.2 to 20.5.3
• build: update dev-dependency @types/bun from 1.3.13 to 1.3.14
• build: update dev-dependency publint from 0.3.18 to 0.3.23
• build: update dev-dependency semantic-release from 25.0.3 to 25.0.9
• build: update dev-dependency @biomejs/biome from 2.4.13 to 2.5.8
• build: update dev-dependency tsc-alias from 1.8.16 to 1.9.1
• build: update dev-dependency type-coverage from 2.29.7 to 2.30.1
• ci: update action actions/checkout from de0fac2 to d23441a
• ci: update action github/codeql-action from 95e58e9 to ff2f1c6
• ci: update action step-security/harden-runner from 8d3c67d to 05e3151
• build: update commitlint monorepo (major) (@commitlint/cli, @commitlint/types)
• build: update dev-dependency conventional-changelog-conventionalcommits from 9.3.1 to 10.3.0
• build: update dev-dependency typescript from 6.0.3 to 7.0.2
• build: update peer-dependency chalk from ^5 to ^5 || ^6.0.0
• ci: update action actions/checkout from de0fac2 to 3d3c42e
• ci: update action actions/dependency-review-action from 2031cfc to a1d282b
• ci: update action codecov/codecov-action from 57e3a13 to fb8b358
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

1/1 CVEs have Renovate fixes.

bun

package.json

esbuild

• GHSA-g7r4-m6w7-qqqr (fixed in >= 0.28.1)

Detected Dependencies

bun (1)

package.json (13)

• @biomejs/biome 2.4.13 → [Updates: 2.5.8]
• @commitlint/cli 20.5.2 → [Updates: 20.5.3, 21.2.1]
• @types/bun 1.3.13 → [Updates: 1.3.14]
• conventional-changelog-conventionalcommits 9.3.1 → [Updates: 10.3.0]
• esbuild 0.28.0 → [Updates: 0.28.1]
• husky 9.1.7
• publint 0.3.18 → [Updates: 0.3.23]
• semantic-release 25.0.3 → [Updates: 25.0.9]
• tsc-alias 1.8.16 → [Updates: 1.9.1]
• type-coverage 2.29.7 → [Updates: 2.30.1]
• typescript 6.0.3 → [Updates: 7.0.2]
• @commitlint/types ^19 || ^20 → [Updates: ^19 || ^20 || ^21.0.0]
• chalk ^5 → [Updates: ^5 || ^6.0.0]

github-actions (3)

.github/workflows/ci.yaml (23)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.21.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• oven-sh/setup-bun v2.2.0@0c5077e51419868618aeaa5fe8019c62421857d6
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.21.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/dependency-review-action v4.9.0@2031cfc080254a8a887f58cffee85186f0e49e48 → [Updates: v5.0.0]
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.21.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• oven-sh/setup-bun v2.2.0@0c5077e51419868618aeaa5fe8019c62421857d6
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.21.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• oven-sh/setup-bun v2.2.0@0c5077e51419868618aeaa5fe8019c62421857d6
• codecov/codecov-action v6@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 → [Updates: v7, v6]
• codecov/test-results-action v1.2.1@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3
• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.21.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• oven-sh/setup-bun v2.2.0@0c5077e51419868618aeaa5fe8019c62421857d6
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/codeql.yaml (5)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.21.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4.37.7]
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4.37.7]
• ubuntu 24.04

.github/workflows/release.yaml (4)

• step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 → [Updates: v2.21.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• oven-sh/setup-bun v2.2.0@0c5077e51419868618aeaa5fe8019c62421857d6
• ubuntu 24.04

---

• Check this box to trigger a request for Renovate to run again on this repository