Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update actions/checkout action to v6.0.3
• Update Go dependencies (github.com/oapi-codegen/oapi-codegen/v2, github.com/posthog/posthog-go, go.kenn.io/kit, golang.org/x/net, golang.org/x/text, golang.org/x/tools, modernc.org/sqlite)
• Update golangci/golangci-lint-action action to v9.2.1
• Update Rust dependencies (chrono, rand, serde_json, sha2)
• Update softprops/action-gh-release action to v3.0.1
• Update actions/setup-go action to v6.4.0
• Update dependency cargo:https://github.com/hughdbrown/samesame-rolling to v1.3.0
• Update dependency golangci-lint to v2.12.2
• Update dependency golangci/golangci-lint to v2.12.2
• Update dependency npm:vite-plus to v0.2.1
• Update gitea/gitea Docker tag to v1.26.2
• Update gitlab/gitlab-ce Docker tag to v18.11.5
• Update JavaScript dependencies (@lucide/svelte, @tiptap/core, @tiptap/extension-document, @tiptap/extension-hard-break, @tiptap/extension-paragraph, @tiptap/extension-placeholder, @tiptap/extension-text, @tiptap/pm, @tiptap/suggestion, svelte)
• Update Node.js to v24.17.0
• Update actions/checkout action to v7
• Update dorny/test-reporter action to v3
• Update GitHub Artifact Actions to v7
• Update gitlab/gitlab-ce Docker tag to v19
• Update Go dependencies (major) (github.com/google/go-github/v84, gitlab.com/gitlab-org/api/client-go)
• Update JavaScript dependencies (major) (@types/node, jsdom, marked)

---

Warning

Renovate failed to look up the following dependencies: Failed to look up docker package codeberg.org/forgejo/forgejo: no-result, Failed to look up docker package middleman/gitlab-ce-fixture-runtime: no-result.

Files affected: scripts/e2e/forgejo/docker-compose.yml, scripts/e2e/gitlab/Dockerfile.prebaked

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update mcr.microsoft.com/playwright Docker digest to 02810c9

Detected Dependencies

bun (4)

frontend/package.json (30)

• @codemirror/autocomplete ^6.20.2
• @codemirror/commands ^6.10.3
• @codemirror/lang-markdown ^6.5.0
• @codemirror/state ^6.6.0
• @codemirror/view ^6.43.0
• @lucide/svelte 1.17.0 → [Updates: 1.18.0]
• @pierre/trees 1.0.0-beta.4
• @xterm/addon-fit ^0.11.0
• @xterm/addon-ligatures ^0.10.0
• @xterm/addon-webgl ^0.19.0
• @xterm/xterm ^6.0.0
• dompurify 3.4.11
• ghostty-web ^0.4.0
• js-toml ^1.0.3
• marked 17.0.6 → [Updates: 18.0.5]
• mermaid 11.15.0
• openapi-fetch ^0.17.0
• simple-icons ^16.19.0
• @playwright/test 1.60.0 → [Updates: 1.61.0]
• @sveltejs/vite-plugin-svelte 7.1.2
• @testing-library/svelte 5.3.1 → [Updates: 5.4.0]
• @tsconfig/svelte 5.0.8
• @types/node ^24.9.2 → [Updates: ^25.0.0]
• jsdom 26.1.0 → [Updates: 29.1.1]
• openapi-typescript ^7.13.0
• playwright 1.60.0 → [Updates: 1.61.0]
• svelte 5.56.2 → [Updates: 5.56.3]
• vite 8.0.16
• vite-plus 0.1.24 → [Updates: 0.2.1]
• vitest-browser-svelte ^2.1.1

package.json (4)

• @sveltejs/mcp 0.1.24
• svelte-check 4.6.0
• vite-plus 0.1.24 → [Updates: 0.2.1]
• dompurify 3.4.11

packages/github-app-ui/package.json (9)

• @playwright/test 1.60.0 → [Updates: 1.61.0]
• @sveltejs/vite-plugin-svelte 7.1.2
• @tsconfig/svelte 5.0.8
• @types/node ^24.9.2 → [Updates: ^25.0.0]
• playwright 1.60.0 → [Updates: 1.61.0]
• svelte 5.56.2 → [Updates: 5.56.3]
• svelte-check 4.6.0
• vite 8.0.16
• vite-plus 0.1.24 → [Updates: 0.2.1]

packages/ui/package.json (23)

• @lucide/svelte 1.17.0 → [Updates: 1.18.0]
• @pierre/diffs 1.2.10 → [Updates: 1.2.11]
• @pierre/trees 1.0.0-beta.4
• @tiptap/core 3.26.0 → [Updates: 3.26.1]
• @tiptap/extension-document 3.26.0 → [Updates: 3.26.1]
• @tiptap/extension-hard-break 3.26.0 → [Updates: 3.26.1]
• @tiptap/extension-paragraph 3.26.0 → [Updates: 3.26.1]
• @tiptap/extension-placeholder 3.26.0 → [Updates: 3.26.1]
• @tiptap/extension-text 3.26.0 → [Updates: 3.26.1]
• @tiptap/pm 3.26.0 → [Updates: 3.26.1]
• @tiptap/suggestion 3.26.0 → [Updates: 3.26.1]
• dompurify 3.4.11
• marked 17.0.6 → [Updates: 18.0.5]
• openapi-fetch ^0.17.0
• prosemirror-state ^1.4.4
• svelte-tiptap 3.0.1
• @testing-library/svelte 5.3.1 → [Updates: 5.4.0]
• @tsconfig/svelte ^5.0.0
• @types/node ^24.9.2 → [Updates: ^25.0.0]
• openapi-fetch ^0.17.0
• svelte ^5.55.7
• vite-plus 0.1.24 → [Updates: 0.2.1]
• svelte ^5.55.7

cargo (1)

rust/pty-manager/Cargo.toml (9)

• anyhow 1.0
• base64 0.22
• chrono 0.4 → [Updates: 0.4]
• portable-pty 0.9
• rand 0.9 → [Updates: 0.10]
• serde 1.0
• serde_json 1.0 → [Updates: 1.0]
• sha2 0.10 → [Updates: 0.11]
• windows-sys 0.61

docker-compose (5)

compose.yml

scripts/e2e/fleet/docker-compose.yml

scripts/e2e/forgejo/docker-compose.yml (1)

• codeberg.org/forgejo/forgejo 12

scripts/e2e/gitea/docker-compose.yml (1)

• gitea/gitea 1.24.6 → [Updates: 1.26.2]

scripts/e2e/gitlab/docker-compose.yml (1)

• gitlab/gitlab-ce 18.9.5-ce.0 → [Updates: 18.11.5-ce.0, 19.0.2-ce.0]

dockerfile (3)

Dockerfile.dev (1)

• golang 1.26

scripts/e2e/gitlab/Dockerfile.fixture (1)

• gitlab/gitlab-ce 18.9.5-ce.0 → [Updates: 18.11.5-ce.0, 19.0.2-ce.0]

scripts/e2e/gitlab/Dockerfile.prebaked (1)

• middleman/gitlab-ce-fixture-runtime 18.9.5-ce.0

github-actions (2)

.github/workflows/ci.yml (34)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6.4.0]
• voidzero-dev/setup-vp v1@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1
• golangci/golangci-lint-action v9.2.0@1e7e51e771db61008b38414a730f564565cf7c20 → [Updates: v9.2.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6.4.0]
• voidzero-dev/setup-vp v1@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1
• dorny/test-reporter v2.7.0@df6247429542221bc30d46a036ee47af1102c451 → [Updates: v3.0.0]
• dorny/test-reporter v2.7.0@df6247429542221bc30d46a036ee47af1102c451 → [Updates: v3.0.0]
• dorny/test-reporter v2.7.0@df6247429542221bc30d46a036ee47af1102c451 → [Updates: v3.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6.4.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6.4.0]
• dorny/test-reporter v2.7.0@df6247429542221bc30d46a036ee47af1102c451 → [Updates: v3.0.0]
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6.4.0]
• voidzero-dev/setup-vp v1@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6.4.0]
• voidzero-dev/setup-vp v1@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6.4.0]
• voidzero-dev/setup-vp v1@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• voidzero-dev/setup-vp v1@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• golangci/golangci-lint v2.10.1 → [Updates: v2.12.2]
• mcr.microsoft.com/playwright sha256:9bd26ad900bb5e0f4dee75839e957a89ae89c2b7ab1e76050e559790e946b948 → [Updates: undefined]

.github/workflows/release.yml (13)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6.4.0]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6.4.0]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• softprops/action-gh-release v3.0.0@b4309332981a82ec1c5618f44dd2e27cc8bfbfda → [Updates: v3.0.1]
• bun 1.3.14
• bun 1.3.14

gomod (1)

go.mod (42)

• go 1.26.3
• code.gitea.io/sdk/gitea v0.25.1
• codeberg.org/mvdkleijn/forgejo-sdk/forgejo/v3 v3.0.0
• github.com/BurntSushi/toml v1.6.0
• github.com/andybalholm/brotli v1.2.1
• github.com/aymanbagabas/go-pty v0.2.3
• github.com/cenkalti/backoff/v5 v5.0.3 → [Updates: v6.0.1]
• github.com/coder/websocket v1.8.14 → [Updates: v1.8.15]
• github.com/creack/pty/v2 v2.0.1
• github.com/danielgtaylor/huma/v2 v2.38.0
• github.com/danielgtaylor/shorthand/v2 v2.4.0
• github.com/fsnotify/fsnotify v1.10.1
• github.com/gofrs/flock v0.13.0
• github.com/golang-migrate/migrate/v4 v4.19.1
• github.com/google/go-github/v84 v84.0.0 → [Updates: v88.0.0]
• github.com/hashicorp/golang-lru/v2 v2.0.7
• github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51@95032a82bc51
• github.com/klauspost/compress v1.18.6
• github.com/microcosm-cc/bluemonday v1.0.27
• github.com/oapi-codegen/runtime v1.4.1 → [Updates: v1.4.2]
• github.com/posthog/posthog-go v1.14.0 → [Updates: v1.15.0]
• github.com/sabhiram/go-gitignore v0.0.0-20210923224102-525f6e181f06@525f6e181f06
• github.com/shurcooL/githubv4 v0.0.0-20260209031235-2402fdf4a9ed@2402fdf4a9ed
• github.com/sourcegraph/go-diff v0.8.0
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/spf13/viper v1.21.0
• github.com/stretchr/testify v1.11.1
• github.com/testcontainers/testcontainers-go v0.42.0 → [Updates: v0.43.0]
• github.com/testcontainers/testcontainers-go/modules/compose v0.42.0 → [Updates: v0.43.0]
• gitlab.com/gitlab-org/api/client-go v1.46.0 → [Updates: v2.39.0]
• go.kenn.io/kit v0.1.3 → [Updates: v0.1.6]
• go.yaml.in/yaml/v3 v3.0.4
• golang.org/x/net v0.55.0 → [Updates: v0.56.0]
• golang.org/x/oauth2 v0.36.0
• golang.org/x/sync v0.21.0
• golang.org/x/sys v0.46.0
• golang.org/x/text v0.37.0 → [Updates: v0.38.0]
• golang.org/x/tools v0.45.0 → [Updates: v0.46.0]
• modernc.org/sqlite v1.51.0 → [Updates: v1.52.0]
• github.com/oapi-codegen/oapi-codegen/v2 v2.7.0 → [Updates: v2.7.1]
• gotest.tools/gotestsum v1.13.0

mise (1)

mise.toml (4)

• cargo:https://github.com/hughdbrown/samesame-rolling ff1f3b7942bd407ac3e30b21eb3dbe6085091a0f → [Updates: v1.3.0]
• golangci-lint 2.11.4 → [Updates: 2.12.2]
• node 24.16.0 → [Updates: 24.17.0]
• npm:vite-plus 0.1.24 → [Updates: 0.2.1]

regex (2)

.github/workflows/release.yml (2)

• oven-sh/bun 1.3.14
• oven-sh/bun 1.3.14

Dockerfile.dev (1)

• oven-sh/bun 1.3.14

---

• Check this box to trigger a request for Renovate to run again on this repository