Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update javascript dependencies to v5.56.3
• chore(deps): update dorny/test-reporter action to v3
• chore(deps): update github artifact actions to v7
• chore(deps): update gitlab/gitlab-ce docker tag to v19
• fix(deps): update go dependencies (major) (github.com/google/go-github/v84, gitlab.com/gitlab-org/api/client-go)
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update actions/checkout action to v6.0.3
• chore(deps): update golangci/golangci-lint-action action to v9.2.1
• fix(deps): update go dependencies (github.com/oapi-codegen/oapi-codegen/v2, go.kenn.io/kit, modernc.org/sqlite)
• fix(deps): update rust dependencies (chrono, rand, serde_json, sha2)
• chore(deps): update actions/setup-go action to v6.4.0
• chore(deps): update dependency cargo:https://github.com/hughdbrown/samesame-rolling to v1.3.0
• chore(deps): update dependency golangci-lint to v2.12.2
• chore(deps): update dependency golangci/golangci-lint to v2.12.2
• chore(deps): update gitea/gitea docker tag to v1.26.2
• chore(deps): update gitlab/gitlab-ce docker tag to v18.11.4
• chore(deps): update codeberg.org/forgejo/forgejo docker tag to v15
• fix(deps): update javascript dependencies (major) (@types/node, jsdom, marked)

---

Warning

Renovate failed to look up the following dependencies: Failed to look up docker package middleman/gitlab-ce-fixture-runtime: no-result.

Files affected: scripts/e2e/gitlab/Dockerfile.prebaked

---

Detected Dependencies

bun (3)

frontend/package.json (29)

• @codemirror/autocomplete ^6.20.2
• @codemirror/commands ^6.10.3
• @codemirror/lang-markdown ^6.5.0
• @codemirror/state ^6.6.0
• @codemirror/view ^6.43.0
• @lucide/svelte 1.17.0 → [Updates: 1.18.0]
• @pierre/trees 1.0.0-beta.4
• @xterm/addon-fit ^0.11.0
• @xterm/addon-ligatures ^0.10.0
• @xterm/addon-webgl ^0.19.0
• @xterm/xterm ^6.0.0
• dompurify 3.4.8 → [Updates: 3.4.10]
• ghostty-web ^0.4.0
• js-toml ^1.0.3
• marked 17.0.6 → [Updates: 18.0.5]
• mermaid 11.15.0
• openapi-fetch ^0.17.0
• simple-icons ^16.19.0
• @playwright/test 1.60.0
• @sveltejs/vite-plugin-svelte 7.1.2
• @testing-library/svelte 5.3.1
• @tsconfig/svelte 5.0.8
• @types/node ^24.9.2 → [Updates: ^25.0.0]
• jsdom 26.1.0 → [Updates: 29.1.1]
• openapi-typescript ^7.13.0
• playwright 1.60.0
• svelte 5.56.2 → [Updates: 5.56.3]
• vite 8.0.16
• vite-plus 0.1.24

package.json (2)

• svelte-check 4.6.0
• vite-plus 0.1.24

packages/ui/package.json (23)

• @lucide/svelte 1.17.0 → [Updates: 1.18.0]
• @pierre/diffs 1.2.7 → [Updates: 1.2.10]
• @pierre/trees 1.0.0-beta.4
• @tiptap/core 3.26.0 → [Updates: 3.26.1]
• @tiptap/extension-document 3.26.0 → [Updates: 3.26.1]
• @tiptap/extension-hard-break 3.26.0 → [Updates: 3.26.1]
• @tiptap/extension-paragraph 3.26.0 → [Updates: 3.26.1]
• @tiptap/extension-placeholder 3.26.0 → [Updates: 3.26.1]
• @tiptap/extension-text 3.26.0 → [Updates: 3.26.1]
• @tiptap/pm 3.26.0 → [Updates: 3.26.1]
• @tiptap/suggestion 3.26.0 → [Updates: 3.26.1]
• dompurify 3.4.8 → [Updates: 3.4.10]
• marked 17.0.6 → [Updates: 18.0.5]
• openapi-fetch ^0.17.0
• prosemirror-state ^1.4.4
• svelte-tiptap 3.0.1
• @testing-library/svelte 5.3.1
• @tsconfig/svelte ^5.0.0
• @types/node ^24.9.2 → [Updates: ^25.0.0]
• openapi-fetch ^0.17.0
• svelte ^5.55.7
• vite-plus 0.1.24
• svelte ^5.55.7

cargo (1)

rust/pty-manager/Cargo.toml (9)

• anyhow 1.0
• base64 0.22
• chrono 0.4 → [Updates: 0.4]
• portable-pty 0.9
• rand 0.9 → [Updates: 0.10]
• serde 1.0
• serde_json 1.0 → [Updates: 1.0]
• sha2 0.10 → [Updates: 0.11]
• windows-sys 0.61

docker-compose (4)

compose.yml

scripts/e2e/forgejo/docker-compose.yml (1)

• codeberg.org/forgejo/forgejo 12 → [Updates: 15]

scripts/e2e/gitea/docker-compose.yml (1)

• gitea/gitea 1.24.6 → [Updates: 1.26.2]

scripts/e2e/gitlab/docker-compose.yml (1)

• gitlab/gitlab-ce 18.9.5-ce.0 → [Updates: 18.11.4-ce.0, 19.0.1-ce.0]

dockerfile (3)

Dockerfile.dev (1)

• golang 1.26

scripts/e2e/gitlab/Dockerfile.fixture (1)

• gitlab/gitlab-ce 18.9.5-ce.0 → [Updates: 18.11.4-ce.0, 19.0.1-ce.0]

scripts/e2e/gitlab/Dockerfile.prebaked (1)

• middleman/gitlab-ce-fixture-runtime 18.9.5-ce.0

github-actions (2)

.github/workflows/ci.yml (34)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6.4.0]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6
• golangci/golangci-lint-action v9.2.0@1e7e51e771db61008b38414a730f564565cf7c20 → [Updates: v9.2.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6.4.0]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6
• dorny/test-reporter v2.7.0@df6247429542221bc30d46a036ee47af1102c451 → [Updates: v3.0.0]
• dorny/test-reporter v2.7.0@df6247429542221bc30d46a036ee47af1102c451 → [Updates: v3.0.0]
• dorny/test-reporter v2.7.0@df6247429542221bc30d46a036ee47af1102c451 → [Updates: v3.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6.4.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6.4.0]
• dorny/test-reporter v2.7.0@df6247429542221bc30d46a036ee47af1102c451 → [Updates: v3.0.0]
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6.4.0]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6.4.0]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6.4.0]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• bun 1.3.14
• golangci/golangci-lint v2.10.1 → [Updates: v2.12.2]
• bun 1.3.14
• bun 1.3.14
• bun 1.3.14
• bun 1.3.14

.github/workflows/release.yml (13)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6.4.0]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v6.4.0]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• softprops/action-gh-release v3.0.0@b4309332981a82ec1c5618f44dd2e27cc8bfbfda
• bun 1.3.14
• bun 1.3.14

gomod (1)

go.mod (42)

• go 1.26.3
• code.gitea.io/sdk/gitea v0.25.1
• codeberg.org/mvdkleijn/forgejo-sdk/forgejo/v3 v3.0.0
• github.com/BurntSushi/toml v1.6.0
• github.com/andybalholm/brotli v1.2.1
• github.com/aymanbagabas/go-pty v0.2.3
• github.com/cenkalti/backoff/v5 v5.0.3
• github.com/coder/websocket v1.8.14 → [Updates: v1.8.15]
• github.com/creack/pty/v2 v2.0.1
• github.com/danielgtaylor/huma/v2 v2.38.0
• github.com/danielgtaylor/shorthand/v2 v2.4.0
• github.com/fsnotify/fsnotify v1.10.1
• github.com/gofrs/flock v0.13.0
• github.com/golang-migrate/migrate/v4 v4.19.1
• github.com/google/go-github/v84 v84.0.0 → [Updates: v88.0.0]
• github.com/hashicorp/golang-lru/v2 v2.0.7
• github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51@95032a82bc51
• github.com/klauspost/compress v1.18.6
• github.com/microcosm-cc/bluemonday v1.0.27
• github.com/oapi-codegen/runtime v1.4.1
• github.com/posthog/posthog-go v1.14.0 → [Updates: v1.15.0]
• github.com/sabhiram/go-gitignore v0.0.0-20210923224102-525f6e181f06@525f6e181f06
• github.com/shurcooL/githubv4 v0.0.0-20260209031235-2402fdf4a9ed@2402fdf4a9ed
• github.com/sourcegraph/go-diff v0.8.0
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/spf13/viper v1.21.0
• github.com/stretchr/testify v1.11.1
• github.com/testcontainers/testcontainers-go v0.42.0
• github.com/testcontainers/testcontainers-go/modules/compose v0.42.0
• gitlab.com/gitlab-org/api/client-go v1.46.0 → [Updates: v2.36.1]
• go.kenn.io/kit v0.1.3 → [Updates: v0.1.4]
• go.yaml.in/yaml/v3 v3.0.4
• golang.org/x/net v0.55.0 → [Updates: v0.56.0]
• golang.org/x/oauth2 v0.36.0
• golang.org/x/sync v0.21.0
• golang.org/x/sys v0.46.0
• golang.org/x/text v0.37.0 → [Updates: v0.38.0]
• golang.org/x/tools v0.45.0 → [Updates: v0.46.0]
• modernc.org/sqlite v1.51.0 → [Updates: v1.52.0]
• github.com/oapi-codegen/oapi-codegen/v2 v2.7.0 → [Updates: v2.7.1]
• gotest.tools/gotestsum v1.13.0

mise (1)

mise.toml (4)

• cargo:https://github.com/hughdbrown/samesame-rolling ff1f3b7942bd407ac3e30b21eb3dbe6085091a0f → [Updates: v1.3.0]
• golangci-lint 2.11.4 → [Updates: 2.12.2]
• node 24.16.0
• npm:vite-plus 0.1.24

regex (3)

.github/workflows/ci.yml (5)

• oven-sh/bun 1.3.14
• oven-sh/bun 1.3.14
• oven-sh/bun 1.3.14
• oven-sh/bun 1.3.14
• oven-sh/bun 1.3.14

.github/workflows/release.yml (2)

• oven-sh/bun 1.3.14
• oven-sh/bun 1.3.14

Dockerfile.dev (1)

• oven-sh/bun 1.3.14

---

• Check this box to trigger a request for Renovate to run again on this repository