Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (4)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/gorilla/websocket	2024-06-14
npm	class-variance-authority	2024-11-26
npm	clsx	2024-04-23

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): pin dependencies (@biomejs/biome, @types/node, postcss, turbo, typescript)
• chore(deps): pin dependencies (@types/react, @types/react-dom)
• chore(deps): update cgr.dev/chainguard/wolfi-base:latest docker digest to 2f7a5c1
• chore(deps): update zizmorcore/zizmor-action action to v0.5.7
• fix(deps): update non-major (npm) (@biomejs/biome, @tailwindcss/postcss, next, npm, postcss, tailwindcss, turbo)
• chore(deps): update actions/checkout action to v7
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Detected Dependencies

dockerfile (4)

Dockerfile (2)

• golang 1.26.4-alpine@sha256:3ad57304ad93bbec8548a0437ad9e06a455660655d9af011d58b993f6f615648
• cgr.dev/chainguard/wolfi-base latest@sha256:e161445c05b19e668cb5cc44df2f0403329fd4f0ac892794255e328e760612a1 → [Updates: latest]

Dockerfile.armv7 (2)

• golang 1.26.4-alpine@sha256:3ad57304ad93bbec8548a0437ad9e06a455660655d9af011d58b993f6f615648
• alpine 3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b

Dockerfile.dev (1)

• golang 1.26.4-alpine@sha256:3ad57304ad93bbec8548a0437ad9e06a455660655d9af011d58b993f6f615648

Dockerfile.release (2)

• cgr.dev/chainguard/wolfi-base latest@sha256:e161445c05b19e668cb5cc44df2f0403329fd4f0ac892794255e328e760612a1 → [Updates: latest]
• alpine 3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b

github-actions (11)

.github/workflows/ci.yml (35)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• qltysh/qlty-action v2.2.1@fd52dc852530a708d68c3b7342f8d33d1df4cd55
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• golangci/golangci-lint-action v9.2.1@82606bf257cbaff209d206a39f5134f0cfbfd2ee → [Updates: v9.3.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• zizmorcore/zizmor-action v0.5.6@5f14fd08f7cf1cb1609c1e344975f152c7ee938d → [Updates: v0.5.7]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• goreleaser/goreleaser-action v7.2.2@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 → [Updates: v7.2.3]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.36.3]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.36.3]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• qltysh/qlty-action v2.2.1@fd52dc852530a708d68c3b7342f8d33d1df4cd55

.github/workflows/quality-bench-monthly.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/quality-fuzz-monthly.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/quality-fuzz-nightly.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/quality-integration.yml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]

.github/workflows/quality-mutation-monthly.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/quality-soak-weekly.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/release-cut.yml (2)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]

.github/workflows/release.yml (13)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/setup-qemu-action v4.1.0@06116385d9baf250c9f4dcb4858b16962ea869c3 → [Updates: v4.2.0]
• goreleaser/goreleaser-action v7.2.2@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 → [Updates: v7.2.3]
• actions/attest-build-provenance v4.1.0@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 → [Updates: v4.1.1]
• actions/attest-build-provenance v4.1.0@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 → [Updates: v4.1.1]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6

.github/workflows/security-grype.yml (17)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c → [Updates: v6.5.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• anchore/scan-action v7.4.0@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.36.3]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• anchore/scan-action v7.4.0@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.36.3]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• securego/gosec v2.27.1@9e6a9843d7a4a6e3e9a8539b02612c8a4aa3f889
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.36.3]

.github/workflows/security-scorecard.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.36.3]

gomod (1)

go.mod (5)

• go 1.26.0
• go 1.26.4
• github.com/google/uuid v1.6.0
• github.com/gorilla/websocket v1.5.3
• golang.org/x/crypto v0.53.0

npm (3)

docs/package.json (19)

• @vercel/analytics ^2.0.1
• fumadocs-core ^16.9.3
• fumadocs-mdx ^15.0.11
• fumadocs-ui ^16.9.3
• lucide-react ^1.17.0
• next 16.2.9 → [Updates: 16.2.10]
• next-themes ^0.4.6
• react ^19.2.7
• react-dom ^19.2.7
• @tailwindcss/postcss 4.3.0 → [Updates: 4.3.2]
• @types/mdx 2.0.14
• @types/node ^25.9.2 → [Updates: 25.9.4]
• @types/react ^19.2.17 → [Updates: 19.2.17]
• @types/react-dom 19.2.3
• postcss ^8.5.15 → [Updates: 8.5.16]
• tailwindcss 4.3.0 → [Updates: 4.3.2]
• typescript ^6.0.3 → [Updates: 6.0.3]
• postcss ^8.5.15
• postcss ^8.5.15

package.json (5)

• @biomejs/biome ^2.4.16 → [Updates: 2.5.0, ^2.5.0]
• turbo ^2.9.17 → [Updates: 2.9.18, ^2.10.2]
• node >=22.0.0
• npm 11.13.0 → [Updates: 11.18.0]
• postcss ^8.5.10 → [Updates: ^8.5.10]

website/package.json (19)

• @radix-ui/react-slot ^1.2.4
• @tailwindcss/postcss ^4.3.0
• @vercel/analytics ^2.0.1
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• lucide-react ^1.17.0
• next 16.2.9 → [Updates: 16.2.10]
• next-themes ^0.4.6
• postcss ^8.5.15
• react ^19.2.7
• react-dom ^19.2.7
• tailwind-merge ^3.6.0
• tailwindcss ^4.3.0
• @types/node ^25.9.2 → [Updates: 25.9.4]
• @types/react ^19.2.17 → [Updates: 19.2.17]
• @types/react-dom ^19.2.3 → [Updates: 19.2.3]
• typescript ^6.0.3 → [Updates: 6.0.3]
• postcss ^8.5.15
• postcss ^8.5.15

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository