🔄 Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update github/codeql-action digest to 54f647b
• chore(deps): update github/codeql-action action to v4.36.3
• chore(deps): update vitest monorepo to v4.1.9 (@vitest/coverage-v8, vitest)
• chore(deps): update actions/cache action to v5.1.0
• chore(deps): update dependency @types/vscode to v1.125.0
• chore(deps): update dependency @vitejs/plugin-react to v5.2.0
• chore(deps): update dependency @vscode/vsce to v3.9.2
• chore(deps): update dependency autoprefixer to v10.5.0
• chore(deps): update dependency eslint to v10.5.0
• chore(deps): update dependency eslint>ajv to v6.15.0
• chore(deps): update dependency fast-check to v4.8.0
• chore(deps): update dependency globals to v17.6.0
• chore(deps): update dependency pnpm to v10.34.4
• chore(deps): update dependency ts-loader to v9.6.1
• chore(deps): update dependency typescript-eslint to v8.61.1
• chore(deps): update dependency webpack to v5.107.2
• chore(deps): update node.js to v24.18.0 (node, @types/node)
• chore(deps): update tailwindcss monorepo to v4.3.1 (@tailwindcss/postcss, tailwindcss)
• fix(deps): update dependency @xyflow/react to v12.11.0
• fix(deps): update dependency react-icons to v5.6.0
• fix(deps): update dependency yaml to v2.9.0
• chore(deps): update actions/cache action to v6
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/dependency-review-action action to v5
• chore(deps): update codecov/codecov-action action to v7
• chore(deps): update dependency @vitejs/plugin-react to v6
• chore(deps): update dependency @vscode/test-electron to v3
• chore(deps): update dependency anymatch>picomatch to v4
• chore(deps): update dependency eslint>ajv to v8
• chore(deps): update dependency pnpm to v11
• chore(deps): update dependency readdirp>picomatch to v4
• chore(deps): update dependency typescript to v6
• chore(deps): update dependency vite to v8
• chore(deps): update dependency webpack-cli to v7
• chore(deps): update dorny/paths-filter action to v4
• chore(deps): update pnpm/action-setup action to v6
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency micromatch>picomatch to v4.0.5
• chore(deps): update dependency postcss to v8.5.16
• chore(deps): update dependency tinyglobby>picomatch to v4.0.5
• chore(deps): update dependency vite to v7.3.6
• chore(deps): update dependency vite>picomatch to v4.0.5
• chore(deps): update dependency vitest>picomatch to v4.0.5

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/attest-build-provenance action to v4.1.1
• chore(deps): update dependency eslint-plugin-react-refresh to v0.5.3
• fix(deps): update codemirror (@codemirror/commands, @codemirror/language, @codemirror/legacy-modes, @codemirror/state, @codemirror/view)
• fix(deps): update dependency @actions/workflow-parser to v0.3.58
• fix(deps): update react monorepo (@types/react, eslint-plugin-react-hooks, react, react-dom)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (6)

.github/workflows/codeql-analysis.yml (9)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.36.3]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• pnpm/action-setup v4.4.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.9]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.36.3]
• node 24.15.0 → [Updates: 24.18.0]
• pnpm 10.30.3 → [Updates: 10.34.4, 11.8.0]

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/dependency-review-action v4.9.0@2031cfc080254a8a887f58cffee85186f0e49e48 → [Updates: v5.0.0]

.github/workflows/publish.yml (8)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• pnpm/action-setup v4.4.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.9]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• pnpm 10.30.3 → [Updates: 10.34.4, 11.8.0]

.github/workflows/pull-request.yml (15)

• dorny/paths-filter v3.0.3@d1c1ffe0248fe513906c8e24db8ea791d46f8590 → [Updates: v4.0.2]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• pnpm/action-setup v4.4.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.9]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• codecov/codecov-action v5.5.5@0fb7174895f61a3b6b78fc075e0cd60383518dac → [Updates: v7.0.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• pnpm/action-setup v4.4.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.9]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• pnpm 10.30.3 → [Updates: 10.34.4, 11.8.0]
• pnpm 10.30.3 → [Updates: 10.34.4, 11.8.0]

.github/workflows/release.yml (16)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• pnpm/action-setup v4.4.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.9]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• codecov/codecov-action v5.5.5@0fb7174895f61a3b6b78fc075e0cd60383518dac → [Updates: v7.0.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• pnpm/action-setup v4.4.0@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 → [Updates: v6.0.9]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• cycjimmy/semantic-release-action v6.0.0@b12c8f6015dc215fe37bc154d4ad456dd3833c90
• actions/attest-build-provenance v4.1.0@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 → [Updates: v4.1.1]
• pnpm 10.30.3 → [Updates: 10.34.4, 11.8.0]
• pnpm 10.30.3 → [Updates: 10.34.4, 11.8.0]

.github/workflows/scorecard.yml (5)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4]

npm (2)

package.json (44)

• @actions/workflow-parser 0.3.57 → [Updates: 0.3.58]
• @codemirror/commands 6.10.2 → [Updates: 6.10.3]
• @codemirror/language 6.12.1 → [Updates: 6.12.3]
• @codemirror/legacy-modes 6.5.2 → [Updates: 6.5.3]
• @codemirror/state 6.5.4 → [Updates: 6.6.0]
• @codemirror/theme-one-dark 6.1.3
• @codemirror/view 6.39.15 → [Updates: 6.43.1]
• @xyflow/react 12.10.1 → [Updates: 12.11.0]
• react 19.2.4 → [Updates: 19.2.7]
• react-dom 19.2.4 → [Updates: 19.2.7]
• react-icons 5.5.0 → [Updates: 5.6.0]
• yaml 2.8.3 → [Updates: 2.9.0]
• @eslint/js 10.0.1
• @tailwindcss/postcss 4.2.0 → [Updates: 4.3.1]
• @types/mocha 10.0.10
• @types/node 24.12.2 → [Updates: 24.13.2]
• @types/react 19.2.14 → [Updates: 19.2.17]
• @types/react-dom 19.2.3
• @types/vscode 1.80.0 → [Updates: 1.125.0]
• @vitejs/plugin-react 5.1.4 → [Updates: 5.2.0, 6.0.2]
• @vitest/coverage-v8 ^4.1.8 → [Updates: ^4.1.8]
• @vscode/test-electron 2.5.2 → [Updates: 3.0.0]
• @vscode/vsce 3.7.1 → [Updates: 3.9.2]
• autoprefixer 10.4.27 → [Updates: 10.5.0]
• css-loader 7.1.4
• eslint 10.4.1 → [Updates: 10.5.0]
• eslint-plugin-react-hooks 7.0.1 → [Updates: 7.1.1]
• eslint-plugin-react-refresh 0.5.2 → [Updates: 0.5.3]
• fast-check 4.6.0 → [Updates: 4.8.0]
• globals 17.3.0 → [Updates: 17.6.0]
• mini-css-extract-plugin 2.10.2
• mocha ^11.7.5
• postcss 8.5.15 → [Updates: 8.5.16]
• postcss-loader 8.2.1
• tailwindcss 4.2.0 → [Updates: 4.3.1]
• ts-loader 9.5.7 → [Updates: 9.6.1]
• typescript 5.9.3 → [Updates: 6.0.3]
• typescript-eslint 8.56.0 → [Updates: 8.61.1]
• vite 7.3.5 → [Updates: 7.3.6, 8.0.16]
• vitest ^4.1.8 → [Updates: ^4.1.8]
• webpack 5.106.2 → [Updates: 5.107.2]
• webpack-cli 6.0.1 → [Updates: 7.0.3]
• vscode ^1.80.0
• node >=24

pnpm-workspace.yaml (27)

• underscore >=1.13.8
• markdown-it >=14.2.0
• test-exclude>minimatch >=10.2.1
• qs >=6.15.2
• rollup >=4.59.0
• @typescript-eslint/typescript-estree>minimatch >=9.0.7
• minimatch>brace-expansion >=5.0.6
• postcss >=8.5.10
• uuid >=11.1.1
• serialize-javascript >=7.0.5
• eslint>ajv 6.14.0 → [Updates: 6.15.0, 8.20.0]
• flatted >=3.4.2
• anymatch>picomatch 2.3.2 → [Updates: 4.0.4]
• readdirp>picomatch 2.3.2 → [Updates: 4.0.4]
• micromatch>picomatch 4.0.4 → [Updates: 4.0.5]
• tinyglobby>picomatch 4.0.4 → [Updates: 4.0.5]
• vite>picomatch 4.0.4 → [Updates: 4.0.5]
• vitest>picomatch 4.0.4 → [Updates: 4.0.5]
• mocha>diff >=8.0.3
• @textlint/linter-formatter>lodash >=4.18.0
• undici >=8.5.0
• fast-uri >=3.1.2
• tmp >=0.2.6
• esbuild >=0.28.1
• form-data >=4.0.6
• js-yaml >=4.2.0
• @babel/core >=7.29.6

nvm (1)

.nvmrc (1)

• node 24.15.0 → [Updates: 24.18.0]

---

• Check this box to trigger a request for Renovate to run again on this repository