Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	vitest-environment-miniflare

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(chrome-extension): Update dependency type-fest to v5
• chore(clerk-js): Update [DEV] major dependencies (major) (@rsdoctor/rspack-plugin, jsdom, webpack-merge)
• chore(expo-passkeys): Update dependency expo to v55
• chore(expo): Update [DEV] major dependencies to v55 (major) (@expo/config-plugins, expo-apple-authentication, expo-auth-session, expo-constants, expo-crypto, expo-local-authentication, expo-secure-store, expo-web-browser)
• chore(express): Update [DEV] major dependencies (major) (@types/express, @types/supertest, express, supertest)
• chore(nextjs): Update [DEV] major dependencies (major) (crypto-es, next)
• chore(repo): Update dependency @rspack/plugin-react-refresh to v2
• chore(repo): Update dependency typescript to v6
• chore(repo): Update dependency utf-8-validate to v6
• chore(repo): Update react monorepo to v19 (major) (@types/react, @types/react-dom, react, react-dom)
• chore(repo): Update rspack monorepo to v2 (major) (@rspack/cli, @rspack/core)
• chore(shared): Update [DEV] major dependencies (major) (@stripe/react-stripe-js, @stripe/stripe-js)
• chore(testing): Update dependency cypress to v15
• chore(ui): Update [DEV] major dependencies (major) (@rsdoctor/rspack-plugin, @svgr/webpack, webpack-merge)
• chore(upgrade): Update dependency @types/jscodeshift to v17
• chore(vue): Update dependency @vitejs/plugin-vue to v6
• fix(clerk-js): Update major dependencies (major) (@stripe/stripe-js, alien-signals)
• fix(expo): Update dependency react-native-url-polyfill to v3
• fix(shared): Update dependency std-env to v4
• fix(ui): Update dependency copy-to-clipboard to v4
• fix(upgrade): Update major dependencies (major) (ejs, index-to-position, marked, meow, read-pkg)
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(astro): Update dependency astro to ^6.2.1
• chore(react): Update dependency yaml to ^2.8.4
• chore(repo): Update dependency @tanstack/query-core to ^5.100.8
• fix(nuxt): Update minor & patch dependencies to ^4.4.4 (@nuxt/kit, @nuxt/schema)
• chore(repo): Update dependency @base-org/account to v2.5.5
• chore(repo): Update dependency core-js to v3.49.0
• chore(repo): Update dependency tsdown to v0.21.10
• chore(repo): Update dependency typescript to v5.9.3
• chore(repo): Update ESLint (@eslint/js, eslint, eslint-config-turbo, eslint-plugin-playwright, eslint-plugin-turbo, eslint-plugin-yml, typescript-eslint)
• chore(repo): Update plugin org.jetbrains.kotlin.plugin.compose to v2.3.21
• chore(shared): Update [DEV] minor & patch dependencies (@stripe/react-stripe-js, @stripe/stripe-js)
• chore(tanstack-react-start): Update [DEV] minor & patch dependencies (@tanstack/react-router, @tanstack/react-start)
• chore(vue): Update [DEV] minor & patch dependencies (unplugin-vue, vue-tsc)
• fix(clerk-js): Update minor & patch dependencies (@stripe/stripe-js, alien-signals)
• fix(msw): Update dependency msw to v2.14.2
• fix(react-router): Update dependency cookie to v1.1.1
• fix(repo): Update dependency org.jetbrains.kotlinx:kotlinx-coroutines-android to v1.10.2
• fix(testing): Update dependency dotenv to v17.4.2
• fix(ui): Update minor & patch dependencies (@emotion/cache, @emotion/react, @floating-ui/react, @formkit/auto-animate, csstype)
• chore(repo): Update Clerk monorepo (major) (@actions/core, @faker-js/faker, @octokit/rest, @vitejs/plugin-react, chalk, conventional-changelog-conventionalcommits, cpy-cli, dotenv, execa, expect-type, get-port, globals, husky, lint-staged, prettier-plugin-packagejson, statuses, uuid)
• chore(repo): Update Dependencies for Clerk Monorepo to v25
• chore(repo): Update ESLint (major) (@eslint/js, eslint, eslint-import-resolver-typescript, eslint-plugin-jsdoc, eslint-plugin-react-hooks, eslint-plugin-simple-import-sort, eslint-plugin-yml)
• 🔐 Create all awaiting schedule PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(hono): Update dependency hono to ^4.12.16
• fix(astro): Update minor & patch dependencies (nanoid, nanostores)
• fix(upgrade): Update minor & patch dependencies (chalk, execa, jscodeshift, marked, tinyglobby)
• chore(testing): Update testing (@playwright/test, @testing-library/dom, @testing-library/jest-dom, @testing-library/react, @testing-library/user-event)
• chore(repo): Update testing to v4 (major) (@vitest/coverage-v8, vitest)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(repo): Update dependency vue to v3.5.34
• chore(react-router): Update dependency react-router to v7.15.0

---

Warning

Renovate failed to look up the following dependencies: Failed to look up maven package androidx.credentials:credentials: no-result, Failed to look up maven package androidx.credentials:credentials-play-services-auth: no-result, Failed to look up maven package com.google.android.libraries.identity.googleid:googleid: no-result, Failed to look up maven package androidx.compose.ui:ui: no-result, Failed to look up maven package androidx.compose.material3:material3: no-result, Failed to look up maven package androidx.activity:activity-compose: no-result, Failed to look up maven package androidx.lifecycle:lifecycle-runtime-compose: no-result, Failed to look up maven package androidx.lifecycle:lifecycle-viewmodel-compose: no-result.

Files affected: packages/expo-passkeys/android/build.gradle, packages/expo/android/build.gradle

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(repo): Update dependency rolldown to v1.0.0-rc.18
• chore(repo): Update linting & formatting to ^20.5.3 (@commitlint/cli, @commitlint/config-conventional)
• chore(repo): Update pnpm to v10.33.2
• fix(repo): Update dependency com.clerk:clerk-android-ui to v1.0.15
• fix(shared): Update dependency std-env to ^3.10.0
• chore(backend): Update [DEV] minor & patch dependencies (cookie, msw)
• chore(clerk-js): Update [DEV] minor & patch dependencies (@emotion/react, bundlewatch, minimatch)
• chore(expo): Update [DEV] minor & patch dependencies (esbuild, expo-auth-session, expo-constants, expo-crypto, react-native)
• chore(repo): Update Clerk monorepo (@changesets/cli, @changesets/get-github-info, @vitejs/plugin-react, citty, dotenv, fs-extra, jsonwebtoken, prettier-plugin-packagejson, prettier-plugin-tailwindcss, rimraf, tinyglobby, turbo, typedoc, typedoc-plugin-markdown)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

gradle (2)

packages/expo-passkeys/android/build.gradle (3)

• androidx.credentials:credentials 1.3.0-rc01
• androidx.credentials:credentials-play-services-auth 1.3.0-rc01
• org.jetbrains.kotlinx:kotlinx-coroutines-android 1.7.3 → [Updates: 1.10.2]

packages/expo/android/build.gradle (11)

• org.jetbrains.kotlin.plugin.compose 2.1.20 → [Updates: 2.3.21]
• androidx.credentials:credentials 1.3.0
• androidx.credentials:credentials-play-services-auth 1.3.0
• com.google.android.libraries.identity.googleid:googleid 1.1.1
• org.jetbrains.kotlinx:kotlinx-coroutines-android 1.7.3 → [Updates: 1.10.2]
• com.clerk:clerk-android-ui 1.0.13 → [Updates: 1.0.15]
• androidx.compose.ui:ui 1.7.0
• androidx.compose.material3:material3 1.3.0
• androidx.activity:activity-compose 1.9.0
• androidx.lifecycle:lifecycle-runtime-compose 2.8.0
• androidx.lifecycle:lifecycle-viewmodel-compose 2.8.0

npm (61)

package.json (70)

• @actions/core ^1.11.1 → [Updates: ^3.0.1]
• @arethetypeswrong/cli 0.18.2
• @changesets/cli ^2.29.4 → [Updates: ^2.31.0]
• @changesets/get-github-info ^0.6.0 → [Updates: ^0.8.0]
• @commitlint/cli ^20.5.0 → [Updates: ^20.5.3]
• @commitlint/config-conventional ^20.5.0 → [Updates: ^20.5.3]
• @eslint/eslintrc ^3.3.5
• @eslint/js 9.31.0 → [Updates: 9.39.4, 10.0.1]
• @faker-js/faker ^9.9.0 → [Updates: ^10.4.0]
• @octokit/rest ^20.1.2 → [Updates: ^22.0.1]
• @playwright/test ^1.56.1 → [Updates: ^1.59.1]
• @testing-library/dom ^10.1.0 → [Updates: ^10.4.1]
• @testing-library/jest-dom ^6.4.6 → [Updates: ^6.9.1]
• @testing-library/react ^16.0.0 → [Updates: ^16.3.2]
• @testing-library/user-event ^14.5.2 → [Updates: ^14.6.1]
• @types/cross-spawn ^6.0.6
• @types/node ^22.19.17 → [Updates: ^25.6.0]
• @vitejs/plugin-react ^4.5.2 → [Updates: ^4.7.0, ^6.0.1]
• @vitest/coverage-v8 3.2.4 → [Updates: 4.1.5]
• chalk 4.1.2 → [Updates: 5.6.2]
• citty ^0.1.6 → [Updates: ^0.2.2]
• conventional-changelog-conventionalcommits ^4.6.3 → [Updates: ^9.3.1]
• cpy-cli ^5.0.0 → [Updates: ^7.0.0]
• cross-spawn ^7.0.6
• dotenv ^16.5.0 → [Updates: ^16.6.1, ^17.4.2]
• eslint 9.31.0 → [Updates: 9.39.4, 10.3.0]
• eslint-config-prettier 10.1.8
• eslint-config-turbo 2.5.5 → [Updates: 2.9.8]
• eslint-import-resolver-typescript 3.10.1 → [Updates: 4.4.4]
• eslint-plugin-import 2.32.0
• eslint-plugin-jsdoc 50.8.0 → [Updates: 62.9.0]
• eslint-plugin-jsx-a11y 6.10.2
• eslint-plugin-playwright 2.10.1 → [Updates: 2.10.2]
• eslint-plugin-react 7.37.5
• eslint-plugin-react-hooks 5.2.0 → [Updates: 7.1.1]
• eslint-plugin-simple-import-sort 12.1.1 → [Updates: 13.0.0]
• eslint-plugin-turbo 2.5.5 → [Updates: 2.9.8]
• eslint-plugin-unused-imports 4.4.1
• eslint-plugin-yml 1.18.0 → [Updates: 1.19.1, 3.3.2]
• execa ^5.1.1 → [Updates: ^9.6.1]
• expect-type ^0.20.0 → [Updates: ^1.3.0]
• fs-extra ^11.3.0 → [Updates: ^11.3.4]
• get-port ^5.1.1 → [Updates: ^7.2.0]
• globals ^15.15.0 → [Updates: ^17.6.0]
• http-proxy ^1.18.1
• http-server ^14.1.1
• husky ^8.0.3 → [Updates: ^9.1.7]
• json5 2.2.3
• jsonwebtoken 9.0.2 → [Updates: 9.0.3]
• lint-staged ^14.0.1 → [Updates: ^16.4.0]
• pkglab 0.17.1
• prettier ^3.8.3
• prettier-plugin-astro ^0.14.1
• prettier-plugin-packagejson ^2.5.15 → [Updates: ^2.5.22, ^3.0.2]
• prettier-plugin-tailwindcss ^0.6.12 → [Updates: ^0.8.0]
• publint ^0.3.18 → [Updates: ^0.3.19]
• rimraf 6.0.1 → [Updates: 6.1.3]
• statuses ^1.5.0 → [Updates: ^2.0.2]
• tinyglobby ^0.2.15 → [Updates: ^0.2.16]
• tree-kill ^1.2.2
• turbo ^2.5.4 → [Updates: ^2.9.8]
• typedoc 0.28.5 → [Updates: 0.28.19]
• typedoc-plugin-markdown 4.6.4 → [Updates: 4.11.0]
• typedoc-plugin-replace-text 4.2.0
• typescript-eslint 8.58.0 → [Updates: 8.59.1]
• uuid 8.3.2 → [Updates: 14.0.0]
• vitest 3.2.4 → [Updates: 4.1.5]
• pnpm >=10.33.0 → [Updates: >=10.33.2]
• pnpm 10.33.0+sha512.10568bb4a6afb58c9eb3630da90cc9516417abebd3fabbe6739f0ae795728da1491e9db5a544c76ad8eb7570f5c4bb3d6c637b2cb41bfdcdb47fa823c8649319 → [Updates: 10.33.2]
• utf-8-validate 5.0.10 → [Updates: 6.0.6]

packages/astro/client/package.json

packages/astro/internal/package.json

packages/astro/package.json (3)

• nanoid 5.1.6 → [Updates: 5.1.11]
• nanostores 1.0.1 → [Updates: 1.3.0]
• astro ^6.0.0 → [Updates: ^6.2.1]

packages/astro/react/package.json

packages/astro/server/package.json

packages/astro/webhooks/package.json

packages/backend/errors/package.json

packages/backend/internal/package.json

packages/backend/jwt/package.json

packages/backend/package.json (7)

• standardwebhooks ^1.0.0
• @edge-runtime/vm 5.0.0
• cookie 1.0.2 → [Updates: 1.1.1]
• msw 2.11.6 → [Updates: 2.14.2]
• npm-run-all ^4.1.5
• snakecase-keys 9.0.2
• vitest-environment-miniflare 2.14.4

packages/backend/proxy/package.json

packages/backend/webhooks/package.json

packages/chrome-extension/background/package.json

packages/chrome-extension/client/package.json

packages/chrome-extension/internal/package.json

packages/chrome-extension/package.json (5)

• webextension-polyfill ~0.12.0
• @types/chrome ^0.1.40
• @types/webextension-polyfill ^0.12.5
• type-fest ^4.41.0 → [Updates: ^5.6.0]
• vitest-chrome ^0.1.0

packages/chrome-extension/react/package.json

packages/chrome-extension/types/package.json

packages/clerk-js/package.json (13)

• @stripe/stripe-js 5.6.0 → [Updates: 5.10.0, 9.4.0]
• alien-signals 2.0.6 → [Updates: 2.0.8, 3.1.2]
• browser-tabs-lock 1.3.0
• crypto-js ^4.2.0
• dequal 2.0.3
• @emotion/react 11.11.1 → [Updates: 11.14.0]
• @rsdoctor/rspack-plugin ^0.4.13 → [Updates: ^1.5.9]
• @types/cloudflare-turnstile ^0.2.2
• @types/webpack-env ^1.18.8
• bundlewatch ^0.4.1 → [Updates: ^0.4.2]
• jsdom 26.1.0 → [Updates: 29.1.1]
• minimatch ^10.0.3 → [Updates: ^10.2.5]
• webpack-merge ^5.10.0 → [Updates: ^6.0.1]

packages/dev-cli/package.json (5)

• commander ^14.0.3
• concurrently ^9.2.1
• dotenv ^17.4.2
• jscodeshift ^17.3.0
• tinyglobby ^0.2.16

packages/expo-passkeys/package.json (1)

• expo ~52.0.49 → [Updates: ~55.0.19]

packages/expo/apple/package.json

packages/expo/experimental/package.json

packages/expo/google/package.json

packages/expo/legacy/package.json

packages/expo/local-credentials/package.json

packages/expo/native/package.json

packages/expo/package.json (13)

• base-64 ^1.0.0
• react-native-url-polyfill 2.0.0 → [Updates: 3.0.0]
• @expo/config-plugins ^54.0.4 → [Updates: ^55.0.8]
• @types/base-64 ^1.0.2
• esbuild ^0.25.0 → [Updates: ^0.28.0]
• expo-apple-authentication ^7.2.4 → [Updates: ^55.0.13]
• expo-auth-session ^5.4.0 → [Updates: ^5.5.2, ^55.0.15]
• expo-constants ^18.0.0 → [Updates: ^18.0.13, ^55.0.15]
• expo-crypto ^15.0.7 → [Updates: ^15.0.9, ^55.0.14]
• expo-local-authentication ^13.8.0 → [Updates: ^55.0.13]
• expo-secure-store ^12.8.1 → [Updates: ^55.0.13]
• expo-web-browser ^12.8.2 → [Updates: ^55.0.14]
• react-native ^0.81.4 → [Updates: ^0.85.2]

packages/expo/passkeys/package.json

packages/expo/resource-cache/package.json

packages/expo/secure-store/package.json

packages/expo/token-cache/package.json

packages/expo/web/package.json

packages/express/package.json (4)

• @types/express ^4.17.25 → [Updates: ^5.0.6]
• @types/supertest ^6.0.3 → [Updates: ^7.2.0]
• express ^4.22.1 → [Updates: ^5.2.1]
• supertest ^6.3.4 → [Updates: ^7.2.2]

packages/express/webhooks/package.json

packages/fastify/package.json (3)

• cookies 0.9.1
• fastify-plugin ^5.1.0
• fastify ^5.8.5

packages/fastify/webhooks/package.json

packages/hono/package.json (1)

• hono ^4.12.14 → [Updates: ^4.12.16]

packages/localizations/package.json

packages/msw/package.json (1)

• msw 2.13.6 → [Updates: 2.14.2]

packages/nextjs/errors/package.json

packages/nextjs/internal/package.json

packages/nextjs/package.json (3)

• server-only 0.0.1
• crypto-es ^2.1.0 → [Updates: ^3.1.3]
• next 15.5.15 → [Updates: 16.2.4]

packages/nextjs/server/package.json

packages/nextjs/webhooks/package.json

packages/nuxt/package.json (4)

• @nuxt/kit ^4.1.3 → [Updates: ^4.4.4]
• @nuxt/schema ^4.1.3 → [Updates: ^4.4.4]
• h3 ^1.15.4
• nuxt ^4.4.4

packages/react-router/package.json (3)

• cookie 1.0.2 → [Updates: 1.1.1]
• esbuild-plugin-file-path-extensions ^2.1.4
• react-router 7.14.2 → [Updates: 7.15.0]

packages/react/package.json (3)

• @types/semver ^7.7.1
• semver ^7.7.4
• yaml ^2.8.3 → [Updates: ^2.8.4]

packages/shared/package.json (9)

• dequal 2.0.3
• glob-to-regexp 0.4.1
• js-cookie 3.0.5
• std-env ^3.9.0 → [Updates: ^3.10.0, ^4.1.0]
• @stripe/react-stripe-js 3.1.1 → [Updates: 3.10.0, 6.3.0]
• @stripe/stripe-js 5.6.0 → [Updates: 5.10.0, 9.4.0]
• @types/glob-to-regexp 0.4.4
• @types/js-cookie 3.0.6
• cross-fetch ^4.1.0

packages/tanstack-react-start/errors/package.json

packages/tanstack-react-start/package.json (3)

• @tanstack/react-router 1.157.16 → [Updates: 1.169.1]
• @tanstack/react-start 1.157.16 → [Updates: 1.167.61]
• esbuild-plugin-file-path-extensions ^2.1.4

packages/tanstack-react-start/server/package.json

packages/tanstack-react-start/webhooks/package.json

packages/testing/cypress/package.json

packages/testing/package.json (3)

• dotenv 17.2.2 → [Updates: 17.4.2]
• @playwright/test ^1.56.1 → [Updates: ^1.59.1]
• cypress ^14.5.4 → [Updates: ^15.14.2]

packages/testing/playwright/package.json

packages/ui/package.json (18)

• @emotion/cache 11.11.0 → [Updates: 11.14.0]
• @emotion/react 11.11.1 → [Updates: 11.14.0]
• @floating-ui/react 0.27.12 → [Updates: 0.27.19]
• @formkit/auto-animate ^0.8.2 → [Updates: ^0.9.0]
• copy-to-clipboard 3.3.3 → [Updates: 4.0.2]
• csstype 3.1.3 → [Updates: 3.2.3]
• dequal 2.0.3
• input-otp 1.4.2
• qrcode.react 4.2.0
• @floating-ui/react-dom ^2.1.8
• @rsdoctor/rspack-plugin ^0.4.13 → [Updates: ^1.5.9]
• @svgr/rollup ^8.1.0
• @svgr/webpack ^6.5.1 → [Updates: ^8.1.0]
• @types/webpack-env ^1.18.8
• bundlewatch ^0.4.2
• cross-fetch ^4.1.0
• minimatch ^10.2.5
• webpack-merge ^5.10.0 → [Updates: ^6.0.1]

packages/upgrade/package.json (15)

• chalk ^5.3.0 → [Updates: ^5.6.2]
• ejs 3.1.10 → [Updates: 5.0.2]
• execa 9.4.1 → [Updates: 9.6.1]
• gray-matter ^4.0.3
• index-to-position ^0.1.2 → [Updates: ^1.2.0]
• jscodeshift ^17.0.0 → [Updates: ^17.3.0]
• marked ^11.1.1 → [Updates: ^11.2.0, ^18.0.3]
• meow ^11.0.0 → [Updates: ^14.1.0]
• read-pkg ^9.0.1 → [Updates: ^10.1.0]
• semver-regex ^4.0.5
• temp-dir ^3.0.0
• tinyglobby ^0.2.15 → [Updates: ^0.2.16]
• @babel/cli ^7.28.6
• @babel/preset-react ^7.28.5
• @types/jscodeshift ^0.12.0 → [Updates: ^17.3.0]

packages/vue/package.json (5)

• @testing-library/vue ^8.1.0
• @vitejs/plugin-vue ^5.2.4 → [Updates: ^6.0.6]
• @vue.ts/tsx-auto-props ^0.6.0
• unplugin-vue 7.0.8 → [Updates: 7.2.0]
• vue-tsc ^3.2.4 → [Updates: ^3.2.7]

pnpm-workspace.yaml (27)

• react ^18.0.0 || ~19.0.3 || ~19.1.4 || ~19.2.3 || ~19.3.0-0
• react-dom ^18.0.0 || ~19.0.3 || ~19.1.4 || ~19.2.3 || ~19.3.0-0
• @types/react 18.3.28 → [Updates: 19.2.14]
• @types/react-dom 18.3.7 → [Updates: 19.2.3]
• react 18.3.1 → [Updates: 19.2.5]
• react-dom 18.3.1 → [Updates: 19.2.5]
• @swc/helpers 0.5.21
• @tanstack/query-core ^5.100.6 → [Updates: ^5.100.8]
• core-js 3.47.0 → [Updates: 3.49.0]
• rolldown 1.0.0-beta.47 → [Updates: 1.0.0-rc.18]
• tsdown 0.15.7 → [Updates: 0.21.10]
• tslib 2.8.1
• tsup 8.5.1
• typescript 5.8.3 → [Updates: 5.9.3, 6.0.3]
• vue 3.5.33 → [Updates: 3.5.34]
• zx 8.8.5
• @rspack/cli 1.7.11 → [Updates: 2.0.1]
• @rspack/core 1.7.11 → [Updates: 2.0.1]
• @rspack/plugin-react-refresh 1.6.2 → [Updates: 2.0.0]
• @base-org/account 2.0.1 → [Updates: 2.5.5]
• @coinbase/wallet-sdk 4.3.7
• @solana/wallet-adapter-base 0.9.27
• @solana/wallet-adapter-react 0.15.39
• @solana/wallet-standard 1.1.4
• @wallet-standard/core 1.1.1
• @zxcvbn-ts/core 3.0.4
• @zxcvbn-ts/language-common 3.0.4

---

• Check this box to trigger a request for Renovate to run again on this repository