Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@types/cookie

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency @types/node to v24.13.6
• chore(deps): update dependency devalue to v5.9.4
• chore(deps): update dependency hono to v4.13.9
• chore(deps): update dependency yaml to v2.9.1
• chore(deps): update dependency @inquirer/prompts to v8.7.2
• chore(deps): update dependency playwright to v1.63.0
• chore(deps): update dependency xstate to v5.33.2
• chore(deps): update dependency yargs to v18.2.0
• chore(deps): update changesets/action action to v2
• chore(deps): update dependency @changesets/cli to v3
• chore(deps): update dependency typescript to v7
• chore(deps): update dependency vitest to v5
• chore(deps): update pnpm to v12
• chore(deps): update pnpm/action-setup action to v6
• fix(deps): update dependency @hono/node-server to v2
• fix(deps): update dependency devalue to v6
• fix(deps): update dependency dotenv to v18
• fix(deps): update dependency es-module-lexer to v3
• fix(deps): update dependency magic-string to v1
• fix(deps): update dependency magic-string-stack to v2
• fix(deps): update dependency node-html-parser to v9
• fix(deps): update dependency tslog to v5
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency vitest to v4.1.11 [security]
• fix(deps): update dependency svelte to v5 [security]
• chore(deps): update dependency picomatch to v4.0.7 (picomatch, @types/picomatch)
• fix(deps): update dependency @hono/vite-dev-server to ^0.26.0
• fix(deps): update dependency @jamx/logger to ^0.3.0
• fix(deps): update dependency stack54 to ^0.15.0
• chore(deps): update actions/cache action to v6
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-node action to v7
• chore(deps): update dependency @sveltejs/vite-plugin-svelte to v7
• fix(deps): update dependency vite to v8
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency @types/cookie to v1
• fix(deps): update dependency zod to v4

Detected Dependencies

github-actions (2)

.github/workflows/check.yml (5)

• actions/checkout v6 → [Updates: v7]
• actions/setup-node v6 → [Updates: v7]
• pnpm/action-setup v4 → [Updates: v6]
• node 24
• pnpm 10 → [Updates: 12]

.github/workflows/release.yml (7)

• actions/checkout v6 → [Updates: v7]
• actions/setup-node v6 → [Updates: v7]
• pnpm/action-setup v4 → [Updates: v6]
• actions/cache v5 → [Updates: v6]
• changesets/action v1 → [Updates: v2.1.2]
• node 24
• pnpm 10 → [Updates: 12]

npm (15)

integrations/express/package.json (7)

• glob ^13.0.0
• @types/express ^5.0.0
• @types/node ^24.0.0 → [Updates: ^24.0.0]
• express ^5.0.0
• typescript ^5.3.3 → [Updates: ^7.0.0]
• vite ^7.0.0 → [Updates: ^8.0.0]
• express ^4.19.2 || ^5.0.0

integrations/hono/package.json (9)

• @remix-run/node ^2.7.2
• glob ^13.0.0
• set-cookie-parser ^3.0.0
• @types/node ^24.0.0 → [Updates: ^24.0.0]
• @types/set-cookie-parser ^2.4.7
• hono ^4.6.10 → [Updates: ^4.6.10]
• typescript ^5.3.3 → [Updates: ^7.0.0]
• vite ^7.0.0 → [Updates: ^8.0.0]
• hono ^4.10.3

integrations/island/package.json (7)

• magic-string ^0.30.5 → [Updates: ^1.0.0]
• magic-string-stack ^1.0.0 → [Updates: ^2.0.0]
• svelte ^4.2.8 → [Updates: ^5.0.0]
• ts-dedent ^2.2.0
• vite ^7.0.0 → [Updates: ^8.0.0]
• @types/node ^24.0.0 → [Updates: ^24.0.0]
• typescript ^5.3.3 → [Updates: ^7.0.0]

integrations/service-worker/package.json (7)

• glob ^13.0.0
• kleur ^4.1.5
• ts-dedent ^2.2.0
• vite ^7.0.0 → [Updates: ^8.0.0]
• zod ^3.23.8 → [Updates: ^4.0.0]
• @types/node ^24.0.0 → [Updates: ^24.0.0]
• typescript ^5.3.3 → [Updates: ^7.0.0]

integrations/streaming/package.json (8)

• magic-string ^0.30.21 → [Updates: ^1.0.0]
• ts-dedent ^2.2.0
• vite ^7.0.0 → [Updates: ^8.0.0]
• @types/node ^24.0.0 → [Updates: ^24.0.0]
• svelte 4.2.20 → [Updates: 5.55.7]
• typescript ^5.3.3 → [Updates: ^7.0.0]
• vitest ^4.0.17 → [Updates: ^4.0.17]
• svelte 4.2.20 → [Updates: 5.55.7]

integrations/test-utils/package.json (2)

• get-port ^7.1.0
• pnpm 10.34.5 → [Updates: 12.6.0]

package.json (3)

• @changesets/cli ^2.27.1 → [Updates: ^3.0.0]
• playwright ^1.41.1 → [Updates: ^1.41.1]
• typescript ^5.3.3 → [Updates: ^7.0.0]

packages/core/package.json (30)

• @jamx/logger ^0.1.0 → [Updates: ^0.3.0]
• @tsconfig/svelte ^5.0.2
• cheerio ^1.0.0
• devalue ^5.0.0 → [Updates: ^5.0.0, ^6.0.0]
• effection ^4.0.0
• es-module-lexer ^2.0.0 → [Updates: ^3.0.0]
• figlet ^1.10.0
• glob ^13.0.0
• kleur ^4.1.5
• magic-string ^0.30.5 → [Updates: ^1.0.0]
• node-html-parser ^7.0.0 → [Updates: ^9.0.0]
• picomatch ^4.0.2 → [Updates: ^4.0.2]
• sade ^1.8.1
• ts-dedent ^2.2.0
• tslog ^4.10.2 → [Updates: ^5.0.0]
• xstate ^5.28.0 → [Updates: ^5.28.0]
• zod ^3.22.4 → [Updates: ^4.0.0]
• @changesets/cli ^2.27.1 → [Updates: ^3.0.0]
• @sveltejs/vite-plugin-svelte ^3.0.1 → [Updates: ^7.0.0]
• @types/cookie ^0.6.0 → [Updates: ^1.0.0]
• @types/fs-extra ^11.0.4
• @types/node ^24.0.0 → [Updates: ^24.0.0]
• @types/picomatch ^4.0.0 → [Updates: ^4.0.0]
• svelte ^4.2.8 → [Updates: ^5.0.0]
• typescript ^5.3.3 → [Updates: ^7.0.0]
• vite ^7.0.0 → [Updates: ^8.0.0]
• vitest ^4.0.16 → [Updates: ^4.0.16]
• @sveltejs/vite-plugin-svelte ^3.0.1 → [Updates: ^3.0.1 || ^7.0.0]
• svelte ^4.2.8 → [Updates: ^4.2.8 || ^5.0.0]
• vite ^5.3.5 || ^7.0.0 → [Updates: ^5.3.5 || ^7.0.0 || ^8.0.0]

packages/create/package.json (11)

• @inquirer/prompts ^8.0.0 → [Updates: ^8.0.0]
• @octokit/core ^7.0.0
• giget ^3.0.0
• kleur ^4.1.5
• ora ^9.0.0
• yaml ^2.8.0 → [Updates: ^2.8.0]
• yargs ^18.0.0 → [Updates: ^18.0.0]
• @changesets/cli ^2.27.1 → [Updates: ^3.0.0]
• @types/node ^24.0.0 → [Updates: ^24.0.0]
• @types/yargs ^17.0.33
• typescript ^5.3.3 → [Updates: ^7.0.0]

pnpm-workspace.yaml

templates/express/package.json (21)

• @stack54/express ^1.0.9
• body-parser ^2.0.0
• compression ^1.7.4
• express ^5.0.0
• express-session ^1.18.0
• method-override ^3.0.0
• morgan ^1.10.0
• stack54 ^0.14.0 → [Updates: ^0.15.0]
• svelte ^4.2.8 → [Updates: ^5.0.0]
• @playwright/test ^1.46.1
• @sveltejs/vite-plugin-svelte ^3.0.1 → [Updates: ^7.0.0]
• @tsconfig/svelte ^5.0.2
• @types/body-parser ^1.19.5
• @types/compression ^1.7.5
• @types/express ^5.0.0
• @types/express-session ^1.18.0
• @types/method-override ^3.0.0
• @types/morgan ^1.9.9
• typescript ^5.3.3 → [Updates: ^7.0.0]
• vite ^7.0.0 → [Updates: ^8.0.0]
• vitest ^4.0.0 → [Updates: ^5.0.0]

templates/hono/package.json (12)

• @hono/node-server ^1.19.6 → [Updates: ^2.0.0]
• @hono/vite-dev-server ^0.24.0 → [Updates: ^0.26.0]
• hono ^4.10.6
• stack54 ^0.14.0 → [Updates: ^0.15.0]
• svelte ^4.2.8 → [Updates: ^5.0.0]
• @sveltejs/vite-plugin-svelte ^3.0.1 → [Updates: ^7.0.0]
• @tsconfig/svelte ^5.0.2
• autoprefixer ^10.4.20
• postcss ^8.4.41
• tailwindcss ^4.0.0
• typescript ^5.3.3 → [Updates: ^7.0.0]
• vite ^7.0.0 → [Updates: ^8.0.0]

templates/htmx/package.json (24)

• @stack54/express ^1.0.9
• @tailwindcss/vite ^4.1.11
• body-parser ^2.0.0
• compression ^1.7.4
• express ^5.0.0
• express-session ^1.18.0
• method-override ^3.0.0
• morgan ^1.10.0
• stack54 ^0.14.0 → [Updates: ^0.15.0]
• svelte ^4.2.8 → [Updates: ^5.0.0]
• typed-htmx ^0.3.1
• @playwright/test ^1.46.1
• @sveltejs/vite-plugin-svelte ^3.0.1 → [Updates: ^7.0.0]
• @tsconfig/svelte ^5.0.2
• @types/body-parser ^1.19.5
• @types/compression ^1.7.5
• @types/express ^5.0.0
• @types/express-session ^1.18.0
• @types/method-override ^3.0.0
• @types/morgan ^1.9.9
• htmx.org ^2.0.8
• typescript ^5.3.3 → [Updates: ^7.0.0]
• vite ^7.0.0 → [Updates: ^8.0.0]
• vitest ^4.0.0 → [Updates: ^5.0.0]

templates/standalone/package.json (26)

• @stack54/express ^1.0.9
• @tailwindcss/postcss ^4.1.11
• @tailwindcss/vite ^4.1.11
• body-parser ^2.0.0
• compression ^1.7.4
• dotenv ^17.2.2 → [Updates: ^18.0.0]
• express ^5.0.0
• express-session ^1.18.0
• method-override ^3.0.0
• morgan ^1.10.0
• postcss ^8.5.6
• stack54 ^0.14.0 → [Updates: ^0.15.0]
• svelte ^4.2.8 → [Updates: ^5.0.0]
• tailwindcss ^4.1.11
• @sveltejs/vite-plugin-svelte ^3.0.1 → [Updates: ^7.0.0]
• @tsconfig/svelte ^5.0.2
• @types/body-parser ^1.19.5
• @types/compression ^1.7.5
• @types/express ^5.0.0
• @types/express-session ^1.18.0
• @types/method-override ^3.0.0
• @types/morgan ^1.9.9
• nodemon ^3.1.10
• tsx ^4.20.5
• typescript ^5.3.3 → [Updates: ^7.0.0]
• vite ^7.0.0 → [Updates: ^8.0.0]

templates/tailwindcss/package.json (22)

• @stack54/express ^1.0.9
• @tailwindcss/vite ^4.1.11
• body-parser ^2.0.0
• compression ^1.7.4
• express ^5.0.0
• express-session ^1.18.0
• method-override ^3.0.0
• morgan ^1.10.0
• stack54 ^0.14.0 → [Updates: ^0.15.0]
• svelte ^4.2.8 → [Updates: ^5.0.0]
• @playwright/test ^1.46.1
• @sveltejs/vite-plugin-svelte ^3.0.1 → [Updates: ^7.0.0]
• @tsconfig/svelte ^5.0.2
• @types/body-parser ^1.19.5
• @types/compression ^1.7.5
• @types/express ^5.0.0
• @types/express-session ^1.18.0
• @types/method-override ^3.0.0
• @types/morgan ^1.9.9
• typescript ^5.3.3 → [Updates: ^7.0.0]
• vite ^7.0.0 → [Updates: ^8.0.0]
• vitest ^4.0.0 → [Updates: ^5.0.0]

---

• Check this box to trigger a request for Renovate to run again on this repository