Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (4)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	hkusu/review-assign-action	2024-02-14
npm	@semantic-release/git	2021-10-30
npm	eslint-plugin-json	2024-08-07
npm	husky	2024-11-18

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• build(deps): update dependency typescript to v6
• chore(deps): update eslint monorepo to v10 (major) (@eslint/js, eslint)
• chore(deps): update pnpm/action-setup action to v6
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• build(deps): lock file maintenance

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update commitlint monorepo to v20.5.3 (@commitlint/cli, @commitlint/config-conventional)
• chore(deps): update dependency typescript-eslint to v8.59.2
• chore(deps): update pnpm to v10.33.4
• chore(deps): update dependency globals to v17.6.0
• ci(deps): update ghcr.io/renovatebot/renovate docker tag to v43.168.4
• chore(deps): update dependency lint-staged to v17

Detected Dependencies

github-actions (3)

.github/actions/setup-node/action.yml (4)

• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• pnpm/action-setup v5.0.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.5]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae

.github/workflows/build.yml (11)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• wagoid/commitlint-github-action v6.2.1@b948419dd99f3fd78a6548d48f94e3df7f6bf3ed
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• zizmorcore/zizmor-action v0.5.3@b1d7e1fb5de872772f31590499237e7cce841e8e
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ghcr.io/zizmorcore/zizmor 1.24.1
• ghcr.io/renovatebot/renovate 43.167.0@sha256:244b48d3f24221edc9aae1540f0b484f5205f3d549d7ff62d992e551f638b9eb → [Updates: 43.168.4]

.github/workflows/pr-auto.yml (2)

• hkusu/review-assign-action v1.4.0@5bee595fdb9765d4a0bd35724b6302fa15569158
• ubuntu 24.04

nodenv (1)

.node-version (1)

• node 24.15.0

npm (3)

example/package.json

package.json (30)

• @actions/core 3.0.1
• @actions/exec 3.0.0
• @commitlint/cli 20.5.2 → [Updates: 20.5.3]
• @commitlint/config-conventional 20.5.0 → [Updates: 20.5.3]
• @eslint/js 9.39.4 → [Updates: 10.0.1]
• @semantic-release/git 10.0.1
• @semantic-release/github 12.0.6
• @semantic-release/npm 13.1.5
• @tsconfig/node24 24.0.4
• @tsconfig/strictest 2.0.8
• @types/eslint-config-prettier 6.11.3
• @types/node 24.12.2
• conventional-changelog-conventionalcommits 9.3.1
• esbuild 0.28.0
• eslint 9.39.4 → [Updates: 10.2.1]
• eslint-config-prettier 10.1.8
• eslint-plugin-json 4.0.1
• globals 17.5.0 → [Updates: 17.6.0]
• husky 9.1.7
• lint-staged 16.4.0 → [Updates: 17.0.2]
• npm-run-all2 8.0.4
• prettier 3.8.3
• prettier-plugin-packagejson 3.0.2
• rimraf 6.1.3
• semantic-release 25.0.3
• typescript 5.9.3 → [Updates: 6.0.3]
• typescript-eslint 8.59.1 → [Updates: 8.59.2]
• node >=24.11.0
• pnpm ^10.0.0
• pnpm 10.33.2 → [Updates: 10.33.4]

pnpm-workspace.yaml

regex (9)

.github/workflows/build.yml (1)

• ghcr.io/renovatebot/renovate 43.167.0 → [Updates: 43.168.4]

action.yml (1)

• ghcr.io/renovatebot/renovate 43

README.md (1)

• ghcr.io/renovatebot/renovate 43.167.0 → [Updates: 43.168.4]

README.md (24)

• actions/checkout v6.0.2
• renovatebot/github-action v46.1.13
• actions/checkout v6.0.2
• renovatebot/github-action v46.1.13
• actions/checkout v6.0.2
• renovatebot/github-action v46.1.13
• actions/checkout v6.0.2
• renovatebot/github-action v46.1.13
• actions/checkout v6.0.2
• renovatebot/github-action v46.1.13
• actions/checkout v6.0.2
• renovatebot/github-action v46.1.13
• actions/checkout v6.0.2
• renovatebot/github-action v46.1.13
• renovatebot/github-action v46.1.13
• actions/checkout v6.0.2
• renovatebot/github-action v46.1.13
• renovatebot/github-action v46.1.13
• actions/checkout v6.0.2
• renovatebot/github-action v46.1.13
• actions/checkout v6.0.2
• renovatebot/github-action v46.1.13
• renovatebot/github-action v46.1.13
• renovatebot/github-action v46.1.13

README.md (14)

• renovatebot/github-action v46.1.13
• renovatebot/github-action v46.1.13
• renovatebot/github-action v46.1.13
• renovatebot/github-action v46.1.13
• renovatebot/github-action v46.1.13
• renovatebot/github-action v46.1.13
• renovatebot/github-action v46.1.13
• renovatebot/github-action v46.1.13
• renovatebot/github-action v46.1.13
• renovatebot/github-action v46.1.13
• renovatebot/github-action v46.1.13
• renovatebot/github-action v46.1.13
• renovatebot/github-action v46.1.13
• renovatebot/github-action v46.1.13

README.md (2)

• ghcr.io/renovatebot/renovate 43.167.0 → [Updates: 43.168.4]
• ghcr.io/renovatebot/renovate 43.167.0 → [Updates: 43.168.4]

src/docker.ts (1)

• ghcr.io/renovatebot/renovate 43

tools/tsconfig.json (1)

• @tsconfig/node24 24

tsconfig.json (1)

• @tsconfig/node24 24

renovate-config (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository

[jdbruijn]

@viceice Should "lock file maintenance" be enabled? If so I'll check the checkbox to approve it.

[viceice]

You can approve it, but it will always come back to be un approved after run. We can do lockfile management on manual regular schedule, or if security issues occure, which can be fixed by lockfile maintenance.

[jdbruijn]

So this is just like the rebase checkbox in a PR where you check it once to rebase the PR. I think the lockfile management is only needed when there is a security issue (handled by dependabot if I'm not mistaken). So, we don't need to do anything for it IMHO. Just to check: are security issues enabled for this repository?

[viceice]

actions/setup-node v2 is currently a pre-release