Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	vitest-environment-miniflare

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(chrome-extension): Update dependency type-fest to v5
• chore(clerk-js): Update [DEV] major dependencies (major) (@rsdoctor/rspack-plugin, jsdom, webpack-merge)
• chore(expo-passkeys): Update dependency expo to v55
• chore(expo): Update [DEV] major dependencies to v55 (major) (@expo/config-plugins, expo-apple-authentication, expo-auth-session, expo-constants, expo-crypto, expo-local-authentication, expo-secure-store, expo-web-browser)
• chore(express): Update [DEV] major dependencies (major) (@types/express, @types/supertest, express, supertest)
• chore(nextjs): Update [DEV] major dependencies (major) (crypto-es, next)
• chore(repo): Update dependency @rspack/plugin-react-refresh to v2
• chore(repo): Update dependency typescript to v6
• chore(repo): Update dependency utf-8-validate to v6
• chore(repo): Update react monorepo to v19 (major) (@types/react, @types/react-dom, react, react-dom)
• chore(repo): Update rspack monorepo to v2 (major) (@rspack/cli, @rspack/core)
• chore(shared): Update [DEV] major dependencies (major) (@stripe/react-stripe-js, @stripe/stripe-js)
• chore(testing): Update dependency cypress to v15
• chore(ui): Update [DEV] major dependencies (major) (@rsdoctor/rspack-plugin, @svgr/webpack, webpack-merge)
• chore(upgrade): Update dependency @types/jscodeshift to v17
• chore(vue): Update dependency @vitejs/plugin-vue to v6
• fix(clerk-js): Update major dependencies (major) (@stripe/stripe-js, alien-signals)
• fix(expo): Update dependency react-native-url-polyfill to v3
• fix(shared): Update dependency std-env to v4
• fix(ui): Update dependency copy-to-clipboard to v4
• fix(upgrade): Update major dependencies (major) (ejs, index-to-position, marked, meow, read-pkg)
• 🔐 Create all pending approval PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(repo): Update dependency @tanstack/query-core to ^5.100.7
• fix(nuxt): Update minor & patch dependencies to ^4.4.4 (@nuxt/kit, @nuxt/schema)
• chore(repo): Update dependency @base-org/account to v2.5.5
• chore(repo): Update dependency core-js to v3.49.0
• chore(repo): Update dependency tsdown to v0.21.10
• chore(repo): Update dependency typescript to v5.9.3
• chore(repo): Update ESLint (@eslint/js, eslint, eslint-config-turbo, eslint-plugin-playwright, eslint-plugin-turbo, eslint-plugin-yml, typescript-eslint)
• chore(repo): Update plugin org.jetbrains.kotlin.plugin.compose to v2.3.21
• chore(shared): Update [DEV] minor & patch dependencies (@stripe/react-stripe-js, @stripe/stripe-js)
• chore(tanstack-react-start): Update [DEV] minor & patch dependencies (@tanstack/react-router, @tanstack/react-start)
• chore(vue): Update [DEV] minor & patch dependencies (unplugin-vue, vue-tsc)
• fix(clerk-js): Update minor & patch dependencies (@stripe/stripe-js, alien-signals)
• fix(msw): Update dependency msw to v2.14.2
• fix(react-router): Update dependency cookie to v1.1.1
• fix(repo): Update dependency org.jetbrains.kotlinx:kotlinx-coroutines-android to v1.10.2
• fix(testing): Update dependency dotenv to v17.4.2
• fix(ui): Update minor & patch dependencies (@emotion/cache, @emotion/react, @floating-ui/react, @formkit/auto-animate, csstype)
• chore(repo): Update Clerk monorepo (major) (@actions/core, @faker-js/faker, @octokit/rest, @vitejs/plugin-react, chalk, conventional-changelog-conventionalcommits, cpy-cli, dotenv, execa, expect-type, get-port, globals, husky, lint-staged, prettier-plugin-packagejson, statuses, uuid)
• chore(repo): Update Dependencies for Clerk Monorepo to v25
• chore(repo): Update ESLint (major) (@eslint/js, eslint, eslint-import-resolver-typescript, eslint-plugin-jsdoc, eslint-plugin-react-hooks, eslint-plugin-simple-import-sort, eslint-plugin-yml)
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• fix(astro): Update minor & patch dependencies (nanoid, nanostores)
• fix(upgrade): Update minor & patch dependencies (chalk, execa, jscodeshift, marked, tinyglobby)
• chore(testing): Update testing (@playwright/test, @testing-library/dom, @testing-library/jest-dom, @testing-library/react, @testing-library/user-event)
• chore(repo): Update testing to v4 (major) (@vitest/coverage-v8, vitest)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(react): Update dependency yaml to ^2.8.4

---

Warning

Renovate failed to look up the following dependencies: Failed to look up maven package androidx.credentials:credentials: no-result, Failed to look up maven package androidx.credentials:credentials-play-services-auth: no-result, Failed to look up maven package com.google.android.libraries.identity.googleid:googleid: no-result, Failed to look up maven package androidx.compose.ui:ui: no-result, Failed to look up maven package androidx.compose.material3:material3: no-result, Failed to look up maven package androidx.activity:activity-compose: no-result, Failed to look up maven package androidx.lifecycle:lifecycle-runtime-compose: no-result, Failed to look up maven package androidx.lifecycle:lifecycle-viewmodel-compose: no-result.

Files affected: packages/expo-passkeys/android/build.gradle, packages/expo/android/build.gradle

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(astro): Update dependency astro to v6 [SECURITY]
• chore(hono): Update dependency hono to ^4.12.16
• chore(nuxt): Update dependency nuxt to ^4.4.4
• chore(repo): Update dependency rolldown to v1.0.0-rc.18
• chore(repo): Update linting & formatting to ^20.5.3 (@commitlint/cli, @commitlint/config-conventional)
• chore(repo): Update pnpm to v10.33.2
• fix(repo): Update dependency com.clerk:clerk-android-ui to v1.0.15
• fix(shared): Update dependency std-env to ^3.10.0
• chore(backend): Update [DEV] minor & patch dependencies (cookie, msw)
• chore(clerk-js): Update [DEV] minor & patch dependencies (@emotion/react, bundlewatch, minimatch)
• chore(expo): Update [DEV] minor & patch dependencies (esbuild, expo-auth-session, expo-constants, expo-crypto, react-native)
• chore(react-router): Update dependency react-router to v7.14.2
• chore(repo): Update Clerk monorepo (@changesets/cli, @changesets/get-github-info, @vitejs/plugin-react, citty, dotenv, fs-extra, jsonwebtoken, prettier-plugin-packagejson, prettier-plugin-tailwindcss, rimraf, tinyglobby, turbo, typedoc, typedoc-plugin-markdown)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

gradle (2)

packages/expo-passkeys/android/build.gradle (3)

• androidx.credentials:credentials 1.3.0-rc01
• androidx.credentials:credentials-play-services-auth 1.3.0-rc01
• org.jetbrains.kotlinx:kotlinx-coroutines-android 1.7.3 → [Updates: 1.10.2]

packages/expo/android/build.gradle (11)

• org.jetbrains.kotlin.plugin.compose 2.1.20 → [Updates: 2.3.21]
• androidx.credentials:credentials 1.3.0
• androidx.credentials:credentials-play-services-auth 1.3.0
• com.google.android.libraries.identity.googleid:googleid 1.1.1
• org.jetbrains.kotlinx:kotlinx-coroutines-android 1.7.3 → [Updates: 1.10.2]
• com.clerk:clerk-android-ui 1.0.13 → [Updates: 1.0.15]
• androidx.compose.ui:ui 1.7.0
• androidx.compose.material3:material3 1.3.0
• androidx.activity:activity-compose 1.9.0
• androidx.lifecycle:lifecycle-runtime-compose 2.8.0
• androidx.lifecycle:lifecycle-viewmodel-compose 2.8.0

npm (61)

package.json (70)

• @actions/core ^1.11.1 → [Updates: ^3.0.1]
• @arethetypeswrong/cli 0.18.2
• @changesets/cli ^2.29.4 → [Updates: ^2.31.0]
• @changesets/get-github-info ^0.6.0 → [Updates: ^0.8.0]
• @commitlint/cli ^20.5.0 → [Updates: ^20.5.3]
• @commitlint/config-conventional ^20.5.0 → [Updates: ^20.5.3]
• @eslint/eslintrc ^3.3.5
• @eslint/js 9.31.0 → [Updates: 9.39.4, 10.0.1]
• @faker-js/faker ^9.9.0 → [Updates: ^10.4.0]
• @octokit/rest ^20.1.2 → [Updates: ^22.0.1]
• @playwright/test ^1.56.1 → [Updates: ^1.59.1]
• @testing-library/dom ^10.1.0 → [Updates: ^10.4.1]
• @testing-library/jest-dom ^6.4.6 → [Updates: ^6.9.1]
• @testing-library/react ^16.0.0 → [Updates: ^16.3.2]
• @testing-library/user-event ^14.5.2 → [Updates: ^14.6.1]
• @types/cross-spawn ^6.0.6
• @types/node ^22.19.17 → [Updates: ^25.6.0]
• @vitejs/plugin-react ^4.5.2 → [Updates: ^4.7.0, ^6.0.1]
• @vitest/coverage-v8 3.2.4 → [Updates: 4.1.5]
• chalk 4.1.2 → [Updates: 5.6.2]
• citty ^0.1.6 → [Updates: ^0.2.2]
• conventional-changelog-conventionalcommits ^4.6.3 → [Updates: ^9.3.1]
• cpy-cli ^5.0.0 → [Updates: ^7.0.0]
• cross-spawn ^7.0.6
• dotenv ^16.5.0 → [Updates: ^16.6.1, ^17.4.2]
• eslint 9.31.0 → [Updates: 9.39.4, 10.3.0]
• eslint-config-prettier 10.1.8
• eslint-config-turbo 2.5.5 → [Updates: 2.9.7]
• eslint-import-resolver-typescript 3.10.1 → [Updates: 4.4.4]
• eslint-plugin-import 2.32.0
• eslint-plugin-jsdoc 50.8.0 → [Updates: 62.9.0]
• eslint-plugin-jsx-a11y 6.10.2
• eslint-plugin-playwright 2.10.1 → [Updates: 2.10.2]
• eslint-plugin-react 7.37.5
• eslint-plugin-react-hooks 5.2.0 → [Updates: 7.1.1]
• eslint-plugin-simple-import-sort 12.1.1 → [Updates: 13.0.0]
• eslint-plugin-turbo 2.5.5 → [Updates: 2.9.7]
• eslint-plugin-unused-imports 4.4.1
• eslint-plugin-yml 1.18.0 → [Updates: 1.19.1, 3.3.2]
• execa ^5.1.1 → [Updates: ^9.6.1]
• expect-type ^0.20.0 → [Updates: ^1.3.0]
• fs-extra ^11.3.0 → [Updates: ^11.3.4]
• get-port ^5.1.1 → [Updates: ^7.2.0]
• globals ^15.15.0 → [Updates: ^17.6.0]
• http-proxy ^1.18.1
• http-server ^14.1.1
• husky ^8.0.3 → [Updates: ^9.1.7]
• json5 2.2.3
• jsonwebtoken 9.0.2 → [Updates: 9.0.3]
• lint-staged ^14.0.1 → [Updates: ^16.4.0]
• pkglab 0.17.1
• prettier ^3.8.3
• prettier-plugin-astro ^0.14.1
• prettier-plugin-packagejson ^2.5.15 → [Updates: ^2.5.22, ^3.0.2]
• prettier-plugin-tailwindcss ^0.6.12 → [Updates: ^0.8.0]
• publint ^0.3.18
• rimraf 6.0.1 → [Updates: 6.1.3]
• statuses ^1.5.0 → [Updates: ^2.0.2]
• tinyglobby ^0.2.15 → [Updates: ^0.2.16]
• tree-kill ^1.2.2
• turbo ^2.5.4 → [Updates: ^2.9.7]
• typedoc 0.28.5 → [Updates: 0.28.19]
• typedoc-plugin-markdown 4.6.4 → [Updates: 4.11.0]
• typedoc-plugin-replace-text 4.2.0
• typescript-eslint 8.58.0 → [Updates: 8.59.1]
• uuid 8.3.2 → [Updates: 14.0.0]
• vitest 3.2.4 → [Updates: 4.1.5]
• pnpm >=10.33.0 → [Updates: >=10.33.2]
• pnpm 10.33.0+sha512.10568bb4a6afb58c9eb3630da90cc9516417abebd3fabbe6739f0ae795728da1491e9db5a544c76ad8eb7570f5c4bb3d6c637b2cb41bfdcdb47fa823c8649319 → [Updates: 10.33.2]
• utf-8-validate 5.0.10 → [Updates: 6.0.6]

packages/astro/client/package.json

packages/astro/internal/package.json

packages/astro/package.json (3)

• nanoid 5.1.6 → [Updates: 5.1.11]
• nanostores 1.0.1 → [Updates: 1.3.0]
• astro ^5.18.1 → [Updates: ^6.0.0]

packages/astro/react/package.json

packages/astro/server/package.json

packages/astro/webhooks/package.json

packages/backend/errors/package.json

packages/backend/internal/package.json

packages/backend/jwt/package.json

packages/backend/package.json (7)

• standardwebhooks ^1.0.0
• @edge-runtime/vm 5.0.0
• cookie 1.0.2 → [Updates: 1.1.1]
• msw 2.11.6 → [Updates: 2.14.2]
• npm-run-all ^4.1.5
• snakecase-keys 9.0.2
• vitest-environment-miniflare 2.14.4

packages/backend/proxy/package.json

packages/backend/webhooks/package.json

packages/chrome-extension/background/package.json

packages/chrome-extension/client/package.json

packages/chrome-extension/internal/package.json

packages/chrome-extension/package.json (5)

• webextension-polyfill ~0.12.0
• @types/chrome ^0.1.40
• @types/webextension-polyfill ^0.12.5
• type-fest ^4.41.0 → [Updates: ^5.6.0]
• vitest-chrome ^0.1.0

packages/chrome-extension/react/package.json

packages/chrome-extension/types/package.json

packages/clerk-js/package.json (13)

• @stripe/stripe-js 5.6.0 → [Updates: 5.10.0, 9.4.0]
• alien-signals 2.0.6 → [Updates: 2.0.8, 3.1.2]
• browser-tabs-lock 1.3.0
• crypto-js ^4.2.0
• dequal 2.0.3
• @emotion/react 11.11.1 → [Updates: 11.14.0]
• @rsdoctor/rspack-plugin ^0.4.13 → [Updates: ^1.5.9]
• @types/cloudflare-turnstile ^0.2.2
• @types/webpack-env ^1.18.8
• bundlewatch ^0.4.1 → [Updates: ^0.4.2]
• jsdom 26.1.0 → [Updates: 29.1.1]
• minimatch ^10.0.3 → [Updates: ^10.2.5]
• webpack-merge ^5.10.0 → [Updates: ^6.0.1]

packages/dev-cli/package.json (5)

• commander ^14.0.3
• concurrently ^9.2.1
• dotenv ^17.4.2
• jscodeshift ^17.3.0
• tinyglobby ^0.2.16

packages/expo-passkeys/package.json (1)

• expo ~52.0.49 → [Updates: ~55.0.19]

packages/expo/apple/package.json

packages/expo/experimental/package.json

packages/expo/google/package.json

packages/expo/legacy/package.json

packages/expo/local-credentials/package.json

packages/expo/native/package.json

packages/expo/package.json (13)

• base-64 ^1.0.0
• react-native-url-polyfill 2.0.0 → [Updates: 3.0.0]
• @expo/config-plugins ^54.0.4 → [Updates: ^55.0.8]
• @types/base-64 ^1.0.2
• esbuild ^0.25.0 → [Updates: ^0.28.0]
• expo-apple-authentication ^7.2.4 → [Updates: ^55.0.13]
• expo-auth-session ^5.4.0 → [Updates: ^5.5.2, ^55.0.15]
• expo-constants ^18.0.0 → [Updates: ^18.0.13, ^55.0.15]
• expo-crypto ^15.0.7 → [Updates: ^15.0.9, ^55.0.14]
• expo-local-authentication ^13.8.0 → [Updates: ^55.0.13]
• expo-secure-store ^12.8.1 → [Updates: ^55.0.13]
• expo-web-browser ^12.8.2 → [Updates: ^55.0.14]
• react-native ^0.81.4 → [Updates: ^0.85.2]

packages/expo/passkeys/package.json

packages/expo/resource-cache/package.json

packages/expo/secure-store/package.json

packages/expo/token-cache/package.json

packages/expo/web/package.json

packages/express/package.json (4)

• @types/express ^4.17.25 → [Updates: ^5.0.6]
• @types/supertest ^6.0.3 → [Updates: ^7.2.0]
• express ^4.22.1 → [Updates: ^5.2.1]
• supertest ^6.3.4 → [Updates: ^7.2.2]

packages/express/webhooks/package.json

packages/fastify/package.json (3)

• cookies 0.9.1
• fastify-plugin ^5.1.0
• fastify ^5.8.5

packages/fastify/webhooks/package.json

packages/hono/package.json (1)

• hono ^4.12.14 → [Updates: ^4.12.16]

packages/localizations/package.json

packages/msw/package.json (1)

• msw 2.13.6 → [Updates: 2.14.2]

packages/nextjs/errors/package.json

packages/nextjs/internal/package.json

packages/nextjs/package.json (3)

• server-only 0.0.1
• crypto-es ^2.1.0 → [Updates: ^3.1.3]
• next 15.5.15 → [Updates: 16.2.4]

packages/nextjs/server/package.json

packages/nextjs/webhooks/package.json

packages/nuxt/package.json (4)

• @nuxt/kit ^4.1.3 → [Updates: ^4.4.4]
• @nuxt/schema ^4.1.3 → [Updates: ^4.4.4]
• h3 ^1.15.4
• nuxt ^4.1.2 → [Updates: ^4.4.4]

packages/react-router/package.json (3)

• cookie 1.0.2 → [Updates: 1.1.1]
• esbuild-plugin-file-path-extensions ^2.1.4
• react-router 7.12.0 → [Updates: 7.14.2]

packages/react/package.json (3)

• @types/semver ^7.7.1
• semver ^7.7.4
• yaml ^2.8.3 → [Updates: ^2.8.4]

packages/shared/package.json (9)

• dequal 2.0.3
• glob-to-regexp 0.4.1
• js-cookie 3.0.5
• std-env ^3.9.0 → [Updates: ^3.10.0, ^4.1.0]
• @stripe/react-stripe-js 3.1.1 → [Updates: 3.10.0, 6.3.0]
• @stripe/stripe-js 5.6.0 → [Updates: 5.10.0, 9.4.0]
• @types/glob-to-regexp 0.4.4
• @types/js-cookie 3.0.6
• cross-fetch ^4.1.0

packages/tanstack-react-start/errors/package.json

packages/tanstack-react-start/package.json (3)

• @tanstack/react-router 1.157.16 → [Updates: 1.169.1]
• @tanstack/react-start 1.157.16 → [Updates: 1.167.59]
• esbuild-plugin-file-path-extensions ^2.1.4

packages/tanstack-react-start/server/package.json

packages/tanstack-react-start/webhooks/package.json

packages/testing/cypress/package.json

packages/testing/package.json (3)

• dotenv 17.2.2 → [Updates: 17.4.2]
• @playwright/test ^1.56.1 → [Updates: ^1.59.1]
• cypress ^14.5.4 → [Updates: ^15.14.2]

packages/testing/playwright/package.json

packages/ui/package.json (18)

• @emotion/cache 11.11.0 → [Updates: 11.14.0]
• @emotion/react 11.11.1 → [Updates: 11.14.0]
• @floating-ui/react 0.27.12 → [Updates: 0.27.19]
• @formkit/auto-animate ^0.8.2 → [Updates: ^0.9.0]
• copy-to-clipboard 3.3.3 → [Updates: 4.0.2]
• csstype 3.1.3 → [Updates: 3.2.3]
• dequal 2.0.3
• input-otp 1.4.2
• qrcode.react 4.2.0
• @floating-ui/react-dom ^2.1.8
• @rsdoctor/rspack-plugin ^0.4.13 → [Updates: ^1.5.9]
• @svgr/rollup ^8.1.0
• @svgr/webpack ^6.5.1 → [Updates: ^8.1.0]
• @types/webpack-env ^1.18.8
• bundlewatch ^0.4.2
• cross-fetch ^4.1.0
• minimatch ^10.2.5
• webpack-merge ^5.10.0 → [Updates: ^6.0.1]

packages/upgrade/package.json (15)

• chalk ^5.3.0 → [Updates: ^5.6.2]
• ejs 3.1.10 → [Updates: 5.0.2]
• execa 9.4.1 → [Updates: 9.6.1]
• gray-matter ^4.0.3
• index-to-position ^0.1.2 → [Updates: ^1.2.0]
• jscodeshift ^17.0.0 → [Updates: ^17.3.0]
• marked ^11.1.1 → [Updates: ^11.2.0, ^18.0.3]
• meow ^11.0.0 → [Updates: ^14.1.0]
• read-pkg ^9.0.1 → [Updates: ^10.1.0]
• semver-regex ^4.0.5
• temp-dir ^3.0.0
• tinyglobby ^0.2.15 → [Updates: ^0.2.16]
• @babel/cli ^7.28.6
• @babel/preset-react ^7.28.5
• @types/jscodeshift ^0.12.0 → [Updates: ^17.3.0]

packages/vue/package.json (5)

• @testing-library/vue ^8.1.0
• @vitejs/plugin-vue ^5.2.4 → [Updates: ^6.0.6]
• @vue.ts/tsx-auto-props ^0.6.0
• unplugin-vue 7.0.8 → [Updates: 7.2.0]
• vue-tsc ^3.2.4 → [Updates: ^3.2.7]

pnpm-workspace.yaml (27)

• react ^18.0.0 || ~19.0.3 || ~19.1.4 || ~19.2.3 || ~19.3.0-0
• react-dom ^18.0.0 || ~19.0.3 || ~19.1.4 || ~19.2.3 || ~19.3.0-0
• @types/react 18.3.28 → [Updates: 19.2.14]
• @types/react-dom 18.3.7 → [Updates: 19.2.3]
• react 18.3.1 → [Updates: 19.2.5]
• react-dom 18.3.1 → [Updates: 19.2.5]
• @swc/helpers 0.5.21
• @tanstack/query-core ^5.100.6 → [Updates: ^5.100.7]
• core-js 3.47.0 → [Updates: 3.49.0]
• rolldown 1.0.0-beta.47 → [Updates: 1.0.0-rc.18]
• tsdown 0.15.7 → [Updates: 0.21.10]
• tslib 2.8.1
• tsup 8.5.1
• typescript 5.8.3 → [Updates: 5.9.3, 6.0.3]
• vue 3.5.33
• zx 8.8.5
• @rspack/cli 1.7.11 → [Updates: 2.0.1]
• @rspack/core 1.7.11 → [Updates: 2.0.1]
• @rspack/plugin-react-refresh 1.6.2 → [Updates: 2.0.0]
• @base-org/account 2.0.1 → [Updates: 2.5.5]
• @coinbase/wallet-sdk 4.3.7
• @solana/wallet-adapter-base 0.9.27
• @solana/wallet-adapter-react 0.15.39
• @solana/wallet-standard 1.1.4
• @wallet-standard/core 1.1.1
• @zxcvbn-ts/core 3.0.4
• @zxcvbn-ts/language-common 3.0.4

---

• Check this box to trigger a request for Renovate to run again on this repository