Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
npm	left-pad

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update dependency eslint to v9.39.4
• fix(deps): update dependency typedoc to v0.28.18
• fix(deps): update semantic-release monorepo (patch) (@semantic-release/github, @semantic-release/npm)
• fix(deps): update commitlint monorepo to v20.5.0 (minor) (@commitlint/cli, @commitlint/config-conventional)
• fix(deps): update dependency @vitest/coverage-v8 to v4.1.2
• fix(deps): update nx monorepo to v22.6.1 (minor) (@nx/workspace, nx)
• fix(deps): update secretlint monorepo to v11.4.0 (minor) (@secretlint/secretlint-rule-preset-recommend, secretlint)
• fix(deps): update semantic-release (minor) (conventional-changelog-conventionalcommits, semantic-release)
• fix(deps): update type dependencies (minor) (@types/node, type-fest)
• fix(deps): update vitest to v4.1.2 (minor) (@vitest/ui, vitest)
• chore(deps): update dependency @anolilab/eslint-config to v22
• chore(deps): update dependency @anolilab/lint-staged-config to v6
• chore(deps): update dependency @ckeditor/typedoc-plugins to v55
• chore(deps): update dependency normalize-url to v9
• chore(deps): update dependency p-retry to v8
• ci(deps): update actions/upload-artifact action to v7
• ci(deps): update dependency typescript to v6
• ci(deps): update dorny/paths-filter action to v4
• ci(deps): update github-actions to v5 (major) (nrwl/nx-set-shas, pnpm/action-setup)
• ci(deps): update marocchino/sticky-pull-request-comment action to v3
• style(deps): update dependency eslint to v10
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency @anolilab/eslint-config to v23
• chore(deps): update dependency @anolilab/eslint-config to v24
• chore(deps): update dependency @anolilab/eslint-config to v25
• chore(deps): update dependency @anolilab/lint-staged-config to v7
• chore(deps): update dependency @anolilab/lint-staged-config to v8
• chore(deps): update dependency @anolilab/lint-staged-config to v9

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• fix(deps): update github-actions (actions/checkout, actions/dependency-review-action, actions/setup-node, anolilab/workflows, dorny/paths-filter, github/codeql-action, lewagon/wait-on-check-action, node, nrwl/nx-set-shas, pnpm/action-setup, step-security/harden-runner, tj-actions/changed-files)
• chore(deps): lock file maintenance

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency yaml to v2.8.3 [security]
• fix(deps): update commitlint monorepo to v20.4.4 (patch) (@commitlint/cli, @commitlint/config-conventional)
• fix(deps): update dependency @visulima/packem to v2.0.0-alpha.60
• fix(deps): update dependency textlint to v15.5.2
• fix(deps): update nx monorepo to v22.4.5 (patch) (@nx/workspace, nx)
• fix(deps): update patch updates (patch) (@anolilab/prettier-config, @anolilab/textlint-config, @ckeditor/typedoc-plugins, cosmiconfig, dockerode, esbuild, pkg-pr-new, publint, rimraf, semver)
• fix(deps): update type dependencies (patch) (@types/debug, @types/node, type-fest)
• fix(deps): update minor updates (minor) (@anolilab/commitlint-config, @anolilab/semantic-release-clean-package-json, @ckeditor/typedoc-plugins, @sebbo2002/semantic-release-jsr, lint-staged, pnpm, taze, tempy, typedoc-plugin-markdown)
• chore(deps): update dependency @anolilab/semantic-release-pnpm to v5
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update node.js to 22.22
• chore(deps): update dependency semantic-release to v25
• chore(deps): update node.js to v24
• ci(deps): update actions/upload-artifact action to v6
• ci(deps): update dependency node to v24

Detected Dependencies

github-actions (16)

.github/workflows/allo-allo.yaml (1)

• anolilab/workflows main → [Updates: main]

.github/workflows/cache-clear.yml (1)

• anolilab/workflows main → [Updates: main]

.github/workflows/codeql.yml (5)

• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• github/codeql-action v4.31.2@0499de31b99561a6d14a36a5f662c2a54f91beee → [Updates: v4.34.1]
• github/codeql-action v4.31.2@0499de31b99561a6d14a36a5f662c2a54f91beee → [Updates: v4.34.1]
• github/codeql-action v4.31.2@0499de31b99561a6d14a36a5f662c2a54f91beee → [Updates: v4.34.1]

.github/workflows/comment-issue.yml (3)

• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• actions/dependency-review-action v4.8.1@40c09b7dc99638e5ddb0bfd91c1673effc064d8a → [Updates: v4.9.0]

.github/workflows/labeler.yml (1)

• actions/labeler v6.0.1@634933edcd8ababfe52f92936142cc22ac488b1b

.github/workflows/lint.yml (31)

• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36 → [Updates: v3.0.3, v4.0.1]
• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• nrwl/nx-set-shas v4@826660b82addbef3abff5fa871492ebad618c9e1 → [Updates: v5, v4]
• anolilab/workflows main → [Updates: main]
• tj-actions/changed-files v47.0.0@24d32ffd492484c1d75e0c0b894501ddb9d30d62 → [Updates: v47.0.5]
• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• nrwl/nx-set-shas v4@826660b82addbef3abff5fa871492ebad618c9e1 → [Updates: v5, v4]
• anolilab/workflows main → [Updates: main]
• tj-actions/changed-files v47.0.0@24d32ffd492484c1d75e0c0b894501ddb9d30d62 → [Updates: v47.0.5]
• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• nrwl/nx-set-shas v4@826660b82addbef3abff5fa871492ebad618c9e1 → [Updates: v5, v4]
• anolilab/workflows main → [Updates: main]
• tj-actions/changed-files v47.0.0@24d32ffd492484c1d75e0c0b894501ddb9d30d62 → [Updates: v47.0.5]
• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• ibiqlik/action-yamllint v3.1.1@2576378a8e339169678f9939646ee3ee325e845c
• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• pnpm/action-setup v4.2.0@41ff72655975bd51cab0327fa583b6e92b6d3061 → [Updates: v4.4.0, v5.0.0]
• actions/setup-node v6.0.0@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 → [Updates: v6.3.0]
• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• ubuntu 24.04
• node 22.x → [Updates: 22.22.2, 24.14.1]
• ubuntu 24.04

.github/workflows/lock-file-maintenance.yml (1)

• anolilab/workflows main → [Updates: main]

.github/workflows/lock-issues.yaml (1)

• anolilab/workflows main → [Updates: main]

.github/workflows/preview-release.yaml (5)

• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• nrwl/nx-set-shas v4@826660b82addbef3abff5fa871492ebad618c9e1 → [Updates: v5, v4]
• anolilab/workflows main → [Updates: main]
• tj-actions/changed-files v47.0.0@24d32ffd492484c1d75e0c0b894501ddb9d30d62 → [Updates: v47.0.5]

.github/workflows/require-allow-edits.yml (2)

• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• ljharb/require-allow-edits main@13f90bc8cc5de000f2b44a0e2c3a11d108e8cd9f

.github/workflows/scorecards.yml (5)

• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v5.0.0@330a01c490aca151604b8cf639adc76d48f6c5d4 → [Updates: v6.0.0, v7.0.0]
• github/codeql-action v4.31.2@0499de31b99561a6d14a36a5f662c2a54f91beee → [Updates: v4.34.1]

.github/workflows/semantic-pull-request.yml (4)

• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50
• marocchino/sticky-pull-request-comment v2.9.4@773744901bac0e8cbb5a0dc842800d45e9b2b405 → [Updates: v3.0.2]
• marocchino/sticky-pull-request-comment v2.9.4@773744901bac0e8cbb5a0dc842800d45e9b2b405 → [Updates: v3.0.2]

.github/workflows/semantic-release.yml (5)

• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• lewagon/wait-on-check-action v1.4.1@3603e826ee561ea102b58accb5ea55a1a7482343 → [Updates: v1.5.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• anolilab/workflows main → [Updates: main]
• anolilab/workflows main → [Updates: main]

.github/workflows/stale-issues.yml (1)

• anolilab/workflows main → [Updates: main]

.github/workflows/test.yml (16)

• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36 → [Updates: v3.0.3, v4.0.1]
• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• nrwl/nx-set-shas v4@826660b82addbef3abff5fa871492ebad618c9e1 → [Updates: v5, v4]
• anolilab/workflows main → [Updates: main]
• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.2]
• nrwl/nx-set-shas v4@826660b82addbef3abff5fa871492ebad618c9e1 → [Updates: v5, v4]
• anolilab/workflows main → [Updates: main]
• tj-actions/changed-files v47.0.0@24d32ffd492484c1d75e0c0b894501ddb9d30d62 → [Updates: v47.0.5]
• anolilab/workflows main → [Updates: main]
• step-security/harden-runner v2.13.2@95d9a5deda9de15063e7595e9719c11c38c90ae2 → [Updates: v2.16.0]
• ubuntu 24.04
• ubuntu 24.04

npm (7)

package.json (1)

• pnpm 10.27.0 → [Updates: 10.33.0]

packages/multi-semantic-release/package.json (1)

• semantic-release >=24 → [Updates: >=24.2.9, >=25.0.3]

packages/rc/package.json

packages/semantic-release-clean-package-json/package.json

packages/semantic-release-pnpm/package.json

packages/semantic-release-preset/package.json

pnpm-workspace.yaml (102)

• esbuild 0.27.2 → [Updates: 0.27.4]
• @anolilab/semantic-release-clean-package-json 5.1.0 → [Updates: 5.2.0]
• @anolilab/semantic-release-pnpm 4.1.0 → [Updates: 5.0.0]
• @sebbo2002/semantic-release-jsr 3.1.1 → [Updates: 3.2.1]
• @semantic-release/changelog ^6.0.3
• @semantic-release/commit-analyzer 13.0.1
• @semantic-release/error ^4.0.0
• @semantic-release/exec ^7.1.0
• @semantic-release/git ^10.0.1
• @semantic-release/github 12.0.3 → [Updates: 12.0.6]
• @semantic-release/npm 13.1.3 → [Updates: 13.1.5]
• @semantic-release/release-notes-generator 14.1.0
• commitizen ^4.3.1
• semantic-release 25.0.3
• semantic-release-yarn ^3.0.2
• taze ^19.9.2 → [Updates: ^19.10.0]
• @arethetypeswrong/cli ^0.18.2
• @ckeditor/typedoc-plugins 54.3.2 → [Updates: 54.3.4, 54.6.1, 55.2.0]
• @visulima/packem 2.0.0-alpha.49 → [Updates: 2.0.0-alpha.60]
• conventional-changelog-conventionalcommits 9.1.0 → [Updates: 9.3.0]
• dockerode 4.0.9 → [Updates: 4.0.10]
• file-url ^4.0.0
• get-stream 9.0.1
• got 14.6.6
• left-pad ^1.3.0
• p-retry 7.1.1 → [Updates: 8.0.0]
• stream-buffers ^3.0.3
• tempy 3.1.2 → [Updates: 3.2.0]
• type-fest 5.4.3 → [Updates: 5.4.4, 5.5.0]
• typedoc 0.28.16 → [Updates: 0.28.18]
• typedoc-plugin-rename-defaults 0.7.3
• cosmiconfig ^9.0.0 → [Updates: ^9.0.1]
• @anolilab/commitlint-config 9.0.0 → [Updates: 9.1.1]
• @anolilab/eslint-config 21.0.0 → [Updates: 22.0.2, 23.0.0, 24.0.0, 25.0.0]
• @anolilab/lint-staged-config 5.1.0 → [Updates: 6.0.1, 7.0.0, 8.0.0, 9.0.0]
• @anolilab/prettier-config 9.1.0 → [Updates: 9.1.1]
• @anolilab/textlint-config 12.1.0 → [Updates: 12.1.2]
• @commitlint/cli 20.4.0 → [Updates: 20.4.4, 20.5.0]
• @commitlint/config-conventional 20.4.0 → [Updates: 20.4.4, 20.5.0]
• @secretlint/secretlint-rule-preset-recommend 11.3.1 → [Updates: 11.4.0]
• eslint 9.39.2 → [Updates: 9.39.4, 10.1.0]
• eslint-plugin-you-dont-need-lodash-underscore 6.14.0
• husky ^9.1.7
• lint-staged ^16.2.7 → [Updates: ^16.4.0]
• prettier 3.8.1
• publint 0.3.17 → [Updates: 0.3.18]
• secretlint 11.3.1 → [Updates: 11.4.0]
• textlint 15.5.1 → [Updates: 15.5.2]
• typedoc-plugin-markdown 4.9.0 → [Updates: 4.11.0]
• @nx/workspace 22.4.4 → [Updates: 22.4.5, 22.6.1]
• nx 22.4.4 → [Updates: 22.4.5, 22.6.1]
• browserslist-config-anolilab 8.0.0
• @visulima/path ^2.0.5
• cross-env ^10.1.0
• execa ^9.6.1
• pkg-pr-new ^0.0.62 → [Updates: ^0.0.66]
• resolve-from ^5.0.0
• rimraf ^6.1.2 → [Updates: ^6.1.3]
• left-pad ^1.3.0
• @actions/core 3.0.0
• @anolilab/rc 4.0.0
• @babel/core 7.29.0
• @semrel-extra/topo ^1.14.1
• @visulima/fs ^4.1.0
• @visulima/package ^4.1.7
• audit-ci ^7.1.0
• blork ^9.3.0
• conventional-changelog-conventionalcommits 9.1.0 → [Updates: 9.3.0]
• debug ^4.4.3
• detect-indent ^7.0.2
• detect-newline ^4.0.1
• env-ci ^11.2.0
• git-log-parser ^1.2.1
• ini ^6.0.0
• is-ci ^4.1.0
• normalize-url 8.1.1 → [Updates: 9.0.0]
• plop 4.0.5
• registry-auth-token 5.1.1
• signale ^1.4.0
• sort-package-json 3.6.1
• stream-buffers ^3.0.3
• yaml ^2.8.2 → [Updates: ^2.8.2]
• yargs 18.0.0
• @vitest/coverage-v8 4.0.18 → [Updates: 4.1.2]
• @vitest/ui 4.0.18 → [Updates: 4.1.2]
• vitest 4.0.18 → [Updates: 4.1.2]
• typescript ^5.9.3 → [Updates: ^6.0.2]
• @types/debug 4.1.12 → [Updates: 4.1.13]
• @types/dockerode 4.0.1
• @types/env-ci 3.1.4
• @types/git-log-parser 1.2.3
• @types/ini ^4.1.1
• @types/lodash-es 4.17.12
• @types/node 24.10.9 → [Updates: 24.10.15, 24.12.0]
• @types/semantic-release__error 3.0.3
• @types/semver 7.7.1
• @types/signale 1.4.7
• @types/stream-buffers 3.0.8
• @types/yargs 17.0.35
• lodash-es 4.17.23
• semver ^7.7.3 → [Updates: ^7.7.4]
• ts-deepmerge ^7.0.3

nvm (1)

.nvmrc (1)

• node 22.21 → [Updates: 22.22, 24.14]

renovate-config-presets (1)

.github/renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository

[github-actions]

Awesome! Thank you for taking the time to create your first issue! Please review the guidelines

[github-actions]

This issue has been automatically marked as stale because it has been open for 21 days with no activity. It will be closed in 7 days if no further activity (Remove label or comment) occurs.
If we missed this issue please reply to keep it active.
Thanks for being a part of this project. 🙏

[github-actions]

This issue has been automatically marked as stale because it has been open for 21 days with no activity. It will be closed in 7 days if no further activity (Remove label or comment) occurs.
If we missed this issue please reply to keep it active.
Thanks for being a part of this project. 🙏

[github-actions]

This issue has been automatically marked as stale because it has been open for 21 days with no activity. It will be closed in 7 days if no further activity (Remove label or comment) occurs.
If we missed this issue please reply to keep it active.
Thanks for being a part of this project. 🙏