Dependency Dashboard

[chrisbbreuer]

This issue lists Buddy Bot updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency react-dom to 19.2.0 (react-dom, useEffectEvent, cacheSignal, resume)
• chore(deps): update dependency @types/node to 24.9.1 (@types/node)
• chore(deps): update react monorepo to v19 (major) (useEffectEvent, cacheSignal, resume, resumeAndPrerender, resumeToPipeableStream, resumeAndPrerenderToNodeStream, prerender, postponed, renderToReadableStream, ClassComponent.setState, useDeferredValue, useId, nonce, React.use, React.lazy, progressiveChunkSize, filterStackFrame, href, exports, package.json, use-sync-external-store, registerServerReference, startTransition, useActionState, action, useOptimistic, use, ref, forwardRef, useFormStatus, requestFormReset, formAction, pending, data, method, preinit, preload, prefetchDNS, preconnect, prerenderToNodeStream, renderToString, element.ref, element.props.ref, react-test-renderer, onUncaughtError, onCaughtError, createRoot, hydrateRoot, propTypes, defaultProps, contextTypes, getChildContext, contextType, React.createFactory, createFactory, react-test-renderer/shallow, react-dom/test-utils, act, ReactDOM, render, hydrate, ReactDOM.hydrateRoot, unmountComponentAtNode, findDOMNode, deferredValue, useMemo, useCallback, ReactChild, ReactFragment, ReactNodeArray, ReactText, VoidFunctionComponent, FunctionComponent, VFC, FC, prop-types, Requireable, ValidationMap, Validator, WeakValidationMap, create-react-class, ClassicComponentClass, ClassicComponent, ClassicElement, ComponentSpec, Mixin, ReactChildren, ReactHTML, ReactSVG, SFCFactory, useRef, useState, createContext, ReactElement, unknown, any, JSX, useReducer, or, and, to)
• chore(deps): update all non-major dependencies (dependencies.yaml, deps.yaml, pkgx.yaml, @1.2, @1.3.1, ci.yml, buddy-bot.yml, release.yml)
• chore(deps): update dependency bun-plugin-dtsx to 0.21.12 (bun-plugin-dtsx)
• chore(deps): update dependency actions/download-artifact to v5.0.0 (actions/download-artifact, precompile-php.yml)
• chore(deps): update dependency actions/checkout to v5.0.0 (actions/checkout, ci.yml)
• chore(deps): update dependency @types/react to 19.2.2 (@types/react)
• chore(deps): update dependency @types/express to 5.0.5 (@types/express)
• chore(deps): update dependency next to 16.0.0 (next, include, next-js)
• chore(deps): update dependency fastify to 5.6.1 (fastify)
• chore(deps): update dependency express to 5.1.0 (express, cookie)
• chore(deps): update dependency eslint-config-next to 16.0.0 (eslint-config-next, include, next-js)
• chore(deps): update dependency softprops/action-gh-release to v2.3.3 (softprops/action-gh-release, precompile-php.yml)
• chore(deps): update dependency eslint to 9.34.0 (eslint, e07820e, one-var, meta.docs.recommended, e8a6914, dc942a4, bbf23fa, d498887, f46fc6c)
• chore(deps): update node.js to v22 (node.js, bedaaa11fc, af8b5fa29d, shouldUpgradeCallback, http, https.request, Agent, a71dd592e3, ec5290fe01, f488b2ff73, aed9fd5ac4, ddbc1aa0bb, badbba2da9, e02a562ea6, b3eeb3bd13, d37f67d1bd, ca2dff63f9, d6e303d645, http.md, a33ed9bf96, d2a70571f8, c591cca15c, a0ba6884a5, e10dc7b81c, e790eb6b50, e4a4f63019, c9cde35c4d, bb6fd7c2d1, ba00875f01, ebec3ef68b, ca1942c9d5, c42c1204c7, tools/make-v8.sh, b632a1d98d, build-tarball.yml, ef005d0c9b, f88752ddb6, f2fbcc576d, bf41218ed9, path.matchesGlob, b8066611c3, cf06e74076, b7b78fd565, fc3f82d683, e95c9b2950, e4fea38b31, c5d68c4a0f, windows-2025, e430464669, e2c9cab0cd, clang, d74799d90c, d289b1d1af, e3df60f, cf5d91e2a6, eb2d85e, bd48a60a75, d7adf8be64, a1d7e4fdbf, afaa1ccb74, b95ff56102, adf98f600a, f335989942, b4a43ed83a, c923cfe898, a93a8b5eda, d302cb3bb2, d55c3e7f0b, dafd561d37, da6e8cb75b, a2329895e7, edb9248bdd, ccf29cda19, f291eda277, codecov/codecov-action, d0d357f683, c690b53d24, c66af21e55, be2a5e170d, f232bf2c11, e9a685bc3d, fd7559f8c3, f764be27dc, d30287fe12, b2bf620c7b, b3c507c8ef, b95cfdf0e5, e961060bb6, c2b22f50a8, d5b0a64598, eb311f1754, d22f113aaf, test-setproctitle, ps, fd02295da6, ff26d9b, cce938c5f9, ce9d6776c9, b1c3e4a17c, f39352b55c, fb4180e9f6, fullName)
• chore(deps): update nextjs monorepo to v16 (major) (experimental.middlewareClientMaxBodySize, @typescript-eslint/switch-exhaustiveness-check, images.qualities, ppr, dynamicIO, renderToString, d85ec5f5-20250716, next-server, headers, cookies, draftMode, dffacc7b-20250717, getExpectedRequestStore, .next/cache, e9638c33-20250721, browserslist, run-turbopack-compiler, edac0dde-20250723, exhaustive-deps, eaee5308-20250728, @next/codemod, experimental.turbo, turbopack, NextRequest, TURBOPACK, outputFileTracingRoot, turbopack.root, c260b38d-20250731, eslint-plugin-react-hooks, be11cb5c-20250804, req.url, asPath, useRouter, /_next/static/media, path, f1e70b5e-20250811, ac7820a9-20250811, image-size, componentStackFrames, skipMetadata, Map, next/dynamic, window.next.turbopack, f1222f76-20250812, a96a0f39-20250815, with-supabase, beforePageLoad, ImportedBinding, use-cache, app-static, require, experimental.strictNextHead, global-not-found, lint-eslint, hash, const, Path, PathBuf, lazy-regex)
• chore(deps): update devdependency eslint to v9 (eslint, ce40f74, complexity, e37e590, no-loss-of-precision, a1f06a3, c070e65, no-irregular-whitespace, b39e71a, cd39983, custom-formatters, nodejs-api, d17c795, c82b5ef, ff31609, ci.yml, eac71fb, nodejsScope, dbb200e, preserve-caught-error, f81eabc, no-restricted-imports, a129cce, ESLint, b950359, availableUntil, README, master, main, afe8a13, @eslint/js, abee4ca, fc9381f, e1574a2, e1ac05e, async, bb99566, jiti, eslint-all.js, Object.freeze, rules, Scope.type, rules.d.ts, b73ab12, defineConfig, c7f861b, bac82a2, c00bb37, fee751d, defaultOptions, b42c42e, type, e10cf2a, meta.defaultOptions, f9f7cb5, eslint-config-eslint, e51ffff, bfa4601, dfd11de, before, after, dabbe95, ea789c7, d265515, a355a0e, no-var, da87f2f, af2a087, tests/lib/eslint/eslint.config.js, @eslint-community/eslint-utils, d5ef939, context.parserOptions, bf26229, c36570c, f19ad94, @eslint/js@9.34.0, b48fa20, grouped-accessor-pairs, d503f19, stale.yml, e2dc67d, e07820e, one-var, meta.docs.recommended, e8a6914, dc942a4, no-plusplus, fa20b9d, ad28371, Linter.Config, ESLintRules, bbf23fa, d498887, f46fc6c, ParserOptions.ecmaFeatures, b7f7545, SourceCode, f5a35e3, e22af8c, CustomRuleDefinitionType, JSRuleDefinition, e855717, ast-utils, c565a53, a6a6325, no-loop-func, no-undef-init, init-declarations, bb370b8, no-const-assign, fef04b5, @eslint/js@9.31.0, d5054e5, e91bb87, ab7c625, dae1e5b, b035f74, @eslint/js@9.30.1, b3dbc16, basePath, allowSeparateTypeImports, no-duplicate-imports, b8a7e7a, getIndexFromLoc, null, loc, no-restricted-properties, process.version, ebfb5b4, meta.deprecated, @eslint/js@9.30.0, eaf8a41, f686fcb, using, b3d720f, dbba058, LintOptions.filterCodeBlock, language, dialects, no-use-before-define, includeIgnoreFile, a2f888d, acf2201, a806994, b647239, e392895, getLocFromIndex, b0674be, a95721f, bfd0e7a, no-shadow, no-magic-numbers, c4a6b60, b03ad17, prefer-arrow-callback, bc3c331, eea3e7e, a467de3, fd467bb, no-unassigned-vars, func-style, e9129e0, implicit, @eslint/js@9.28.0, e8a1cb8, SourceCodeTraverser, f4fa40e, d71e37f)
• chore(deps): update dependency fastify to v5 (fastify, setErrorHandler, fastify-diagnostics-channel, done, @fastify/otel)
• chore(deps): update dependency express to v5 (express, Uint8Array, setprototypeof, safe-buffer, utils-merge, methods, depd, cookie, path-is-absolute, path.isAbsolute, res.clearCookie, maxAge, expires, application/javascript, text/javascript, depth, Infinity, res.redirect, options.maxAge, options.expires, partitioned)
• chore(deps): update dependency react to 19.2.0 (react, useEffectEvent, cacheSignal, resume)
• chore(deps): update actions/checkout action to v5
• chore(deps): update all non-major dependencies (a19072f, a0dea8e, name, fs.walk, b034575, c68c07f, bcdfc04, /docs/v8.x, dca7d0f, eslint.config.mjs, eslint.config.cjs, FlatRuleTester, f4a1fe2, fd28363, ba6af85, ba87a06, f3a599d, fd0c60c, fffca5c, a6d9442, no-unused-vars, eb8950c, fe4b954, bd8911d, b29a16b, cli, de165c1, d4304b8, a7a883b, no-array-constructor, e8cf9f6, cwd, basePath, becfdd3, eb2279e, d245326, d644de9, markdownlint, b7121b5, acac16f, ba8ca7e, c0b11dd, b329ea7, no-object-constructor, ab8c60d, ba4d4d5, db06a7f, dcfe573, a58aa20, f8e5c30, b7ef2f3, ff8e4bf, fab249a, no-irregular-whitespace, no-trailing-spaces, unicode-bom, d63d4fe, f30cefe, ef650cb, f976b2f, dd79abc, eslint-disable, d2f6801, ee5be81, dbf831e, f8c7403, bc77c9a, f9082ff, no-new-object, cc4d26b, aa1b657, no-misleading-character-class, prefer-arrow-callback, bd7a71f, f8a8a2d, da09f4e, acb7df3, enforce, lines-between-class-members)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

npm

package.json

• @stacksjs/docs ^0.70.23
• @stacksjs/eslint-config ^4.14.0-beta.3
• better-dx ^0.2.0

package.json

• bun-types latest

package.json

• express ^4.18.0
• @types/express ^4.17.0
• eslint 8

package.json

• next ^14.0.0
• react ^18.0.0
• react-dom ^18.0.0
• @types/node ^20.0.0
• @types/react ^18.0.0
• eslint ^8.0.0
• eslint-config-next ^14.0.0
• prettier ^3.0.0
• typescript ^5.0.0

package.json

• lodash ^4.17.0
• typescript ^5.0.0

package.json

• lodash ^4.17.0
• eslint ^8.0.0

package.json

• fastify ^4.0.0
• @types/node ^20.0.0
• eslint ^8.0.0

package.json

• @actions/core ^1.11.1
• @actions/exec ^1.1.1
• @actions/github ^6.0.1
• @actions/io ^1.1.3
• bun-plugin-dtsx ^0.9.5
• typescript ^5.8.3

github-actions

.github/workflows/ci.yml

• actions/checkout v4
• oven-sh/setup-bun v2
• actions/cache v4

.github/workflows/release.yml

• actions/checkout v4
• oven-sh/setup-bun v2
• actions/cache v4
• stacksjs/action-releaser v1.1.0

.github/workflows/launchpad-install.yml

• actions/checkout v4
• oven-sh/setup-bun v2

.github/workflows/buddy-bot.yml

• actions/checkout v4
• oven-sh/setup-bun v2
• shivammathur/setup-php v2

dependency-files

packages/zig/test-envs/test-isolation/deps.yaml

• fake.com ^1.0.0
• nonexistent.org ^2.0.0

packages/zig/test-envs/laravel/deps.yaml

• bun ^1.2.18
• php ^8.4.0
• node ^24.0.0
• redis ^8.0.0
• postgres ^17.0.0
• composer ^2.8.10
• gnu.org/bison ^3
• gnu.org/m4 @1
• re2c.org ^3
• apache.org/apr ^1
• apache.org/apr-util ^1
• bcrypt.sourceforge.net ^1
• zlib.net ^1.2.11
• gnu.org/autoconf ^2
• perl.org *
• curl.se ^8
• openssl.org @1.1
• curl.se/ca-certs *
• gnu.org/gettext ^0
• gnome.org/libxml2 ~2.13 # 2.14 changes the API
• tukaani.org/xz ^5 # autopoint needs this to unpack archives
• gnu.org/gmp ^6
• libsodium.org <1.0.19
• libzip.org ~1.9
• facebook.com/zstd >=1.5.0
• lz4.org ^1
• sourceware.org/bzip2 >=1.0.8
• github.com/kkos/oniguruma ^6
• pcre.org/v2 >=10.30
• sqlite.org ^3
• gnu.org/readline @8
• invisible-island.net/ncurses ^6
• unicode.org ^71
• gnu.org/libiconv ^1
• gnu.org/gcc/libstdcxx @14
• gnu.org/binutils *
• gnu.org/mpfr >=2.4.0
• gnu.org/mpc >=0.8.0
• kerberos.org ^1
• thrysoee.dk/editline ^3
• sourceware.org/libffi >=3.4.7
• gnome.org/libxslt >=1.1.0<1.1.43
• libpng.org ^1
• google.com/webp ^1
• giflib.sourceforge.io ^5
• libjpeg-turbo.org ^2
• simplesystems.org/libtiff ^4
• ijg.org ^9
• gnu.org/sed ^4 # phpize requires this
• openldap.org ^2 # since 8.1.31, 8.2.26, 8.3.14, 8.4.0
• github.com/util-linux/util-linux *
• npmjs.com *
• nodejs.org *
• php.net *

packages/zig/test-envs/dummy/deps.yaml

packages/zig/test-envs/bun-test/deps.yaml

• bun.sh @1.0.0

packages/zig/test-envs/rails/deps.yaml

• ruby ^3.3.0
• node ^24.0.0
• redis ^8.0.0
• postgres ^17.0.0
• rubygems.org ^3.6.0 # Provides bundler, gem commands
• openssl.org @1.1
• curl.se/ca-certs *
• pyyaml.org ^0.2
• zlib.net ^1
• ruby-lang.org >=2.3
• unicode.org ^71
• gnu.org/gcc/libstdcxx *
• gnu.org/binutils *
• gnu.org/gmp >=4.2
• gnu.org/mpfr >=2.4.0
• gnu.org/mpc >=0.8.0
• npmjs.com *
• nodejs.org *

packages/zig/test-envs/python-focused/deps.yml

• python.org ~3.12
• postgresql.org ~16.1
• redis.io ~7.2
• zlib.net @1
• sourceware.org/bzip2 @1
• openssl.org ^1.1
• curl.se/ca-certs *
• sourceware.org/libffi @3
• libexpat.github.io @2
• bytereef.org/mpdecimal @2
• tukaani.org/xz @5
• sqlite.org @3
• gnu.org/readline @8
• invisible-island.net/ncurses ^6
• tcl-lang.org =8.6.16 # 9.0.2 introduced a build issue on darwin
• freetype.org ^2
• libpng.org @1
• freedesktop.org/pkg-config ^0.29
• x.org/x11 ^1
• x.org/xcb ^1
• x.org/xau ^1
• x.org/util-macros *
• x.org/protocol *
• x.org/xdmcp ^1
• x.org/exts ^1
• pip.pypa.io *
• pkgx.sh ^1
• lz4.org *
• gnome.org/libxml2 ~2.13 # abi changed in 2.14
• gnome.org/libxslt *
• unicode.org ^73

packages/zig/test-envs/simple-global-string/dependencies.yaml

packages/zig/test-envs/override-scenarios/dependencies.yaml

• node@22 @22.1.0
• python@3.12 @3.12.1
• version @8.50.0
• jest@29.0 @29.7.0
• prettier@3.0 @3.0.0

packages/zig/test-envs/fullstack-mixed/dependencies.yaml

• version @29.7.0
• eslint@8.50 @8.50.0
• prettier@3.0 @3.0.0
• husky@8.0 @8.0.0

packages/zig/test-envs/working-test/dependencies.yaml

• python.org ~3.12
• curl.se ^8.5
• cmake.org ^3.28
• stedolan.github.io/jq ^1.7
• zlib.net @1
• sourceware.org/bzip2 @1
• openssl.org ^1.1
• curl.se/ca-certs *
• sourceware.org/libffi @3
• libexpat.github.io @2
• bytereef.org/mpdecimal @2
• tukaani.org/xz @5
• sqlite.org @3
• gnu.org/readline @8
• invisible-island.net/ncurses ^6
• tcl-lang.org =8.6.16 # 9.0.2 introduced a build issue on darwin
• freetype.org ^2
• libpng.org @1
• freedesktop.org/pkg-config ^0.29
• x.org/x11 ^1
• x.org/xcb ^1
• x.org/xau ^1
• x.org/util-macros *
• x.org/protocol *
• x.org/xdmcp ^1
• x.org/exts ^1
• pip.pypa.io *
• pkgx.sh ^1
• github.com/kkos/oniguruma @6

packages/zig/test-envs/test-fail/dependencies.yaml

• nonexistent-package @1.0.0

packages/zig/test-envs/mixed-global-local/dependencies.yaml

• bun.sh @1.2.3
• version ^3.11
• node@22 @22.1.0
• git@2.42 @2.42.0

packages/zig/test-envs/test-with-deps/dependencies.yaml

• bun.sh @0.5.9

packages/zig/test-envs/bun-package-manager-with-deps/dependencies.yaml

packages/zig/test-envs/bun-with-nodejs/dependencies.yaml

• - bun.sh ^1.2.0
• - nodejs.org ^20.0.0
• - npmjs.com ^10.0.0
• unicode.org ^71
• openssl.org @1.1
• curl.se/ca-certs *
• zlib.net @1
• gnu.org/gcc/libstdcxx *
• gnu.org/binutils *
• gnu.org/gmp >=4.2
• gnu.org/mpfr >=2.4.0
• gnu.org/mpc >=0.8.0
• npmjs.com *
• nodejs.org *

packages/zig/test-envs/dev-machine-setup/dependencies.yaml

packages/zig/test-envs/test-simple/dependencies.yaml

• bun @1.1.0

packages/zig/test-envs/stacks-config/dependencies.yaml

• aws/cli ^2.22.26
• bun ^1.2.13
• gh ^2.69.0
• zip ^3.0
• unzip ^6.0
• sqlite3 ^3.47.2
• node ^22.12.0 # only temporarily needed until bun & vue-tsc issue is resolved
• sourceware.org/bzip2 *
• zlib.net @1
• gnu.org/readline @8
• invisible-island.net/ncurses ^6
• unicode.org ^71
• openssl.org @1.1
• curl.se/ca-certs *
• gnu.org/gcc/libstdcxx *
• gnu.org/binutils *
• gnu.org/gmp >=4.2
• gnu.org/mpfr >=2.4.0
• gnu.org/mpc >=0.8.0
• npmjs.com *
• nodejs.org *

packages/zig/test-envs/team-standard/dependencies.yaml

• version @29.7.0
• prettier@3.0 @3.0.0
• husky@8.0 @8.0.0

packages/zig/test-envs/global-all/dependencies.yaml

packages/zig/test-envs/individual-global-flags/dependencies.yaml

• version @22.1.0
• eslint@8.50 @8.50.0
• jest@29.0 @29.7.0

packages/zig/test-envs/global-false-override/dependencies.yaml

• node@22 @22.1.0
• typescript@5.0 @5.0.4
• version @8.50.0

packages/zig/test-envs/deeply-nested/level1/level2/level3/level4/level5/level6/level7/level8/level9/level10/final-project/dependencies.yaml

• zlib.net @1.2
• curl.se ^8.5.0
• openssl.org ^1.1
• curl.se/ca-certs *

packages/zig/test-envs/no-global-flag/dependencies.yaml

• node@22 @22.1.0
• python@3.12 @3.12.1
• typescript@5.0 @5.0.4

packages/zig/test-envs/complex-deps/dependencies.yaml

• nodejs.org @20.11.0
• python.org @3.11.9
• stedolan.github.io/jq ^1.7.0
• curl.se ^8.5.0
• gnu.org/wget ^1.25.0
• cmake.org ^3.28.0
• unicode.org ^71
• openssl.org @1.1
• curl.se/ca-certs *
• zlib.net @1
• gnu.org/gcc/libstdcxx *
• gnu.org/binutils *
• gnu.org/gmp >=4.2
• gnu.org/mpfr >=2.4.0
• gnu.org/mpc >=0.8.0
• npmjs.com *
• sourceware.org/bzip2 @1
• sourceware.org/libffi @3
• libexpat.github.io @2
• bytereef.org/mpdecimal @2
• tukaani.org/xz @5
• sqlite.org @3
• gnu.org/readline @8
• invisible-island.net/ncurses ^6
• tcl-lang.org =8.6.16 # 9.0.2 introduced a build issue on darwin
• freetype.org ^2
• libpng.org @1
• freedesktop.org/pkg-config ^0.29
• x.org/x11 ^1
• x.org/xcb ^1
• x.org/xau ^1
• x.org/util-macros *
• x.org/protocol *
• x.org/xdmcp ^1
• x.org/exts ^1
• pip.pypa.io *
• pkgx.sh ^1
• github.com/kkos/oniguruma @6

packages/zig/test-envs/minimal/pkgx.yaml

• gnu.org/wget ^1.21
• openssl.org ^1.1
• curl.se/ca-certs *

---

• Check this box to trigger a request for Buddy Bot to run again on this repository