Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	lodash.setwith

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (18)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
npm	@cfworker/json-schema	2025-01-31
npm	@lhci/cli	2025-06-25
npm	@svgr/cli	2023-08-15
npm	@testing-library/user-event	2025-01-21
npm	cli-progress	2023-02-19
npm	csso-cli	2023-02-28
npm	dialog-polyfill	2021-01-11
npm	husky	2024-11-18
npm	is-ci	2024-12-08
npm	jsonabc	2018-07-02
npm	postcss-cli	2025-03-12
npm	postcss-import	2025-06-17
npm	reg-publish-gcs-plugin	2024-05-02
npm	scaffdog	2024-09-16
npm	svg-sprite	2025-02-20
npm	use-callback-ref	2024-12-17
npm	yaml-lint	2022-05-13

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore: update dependency @types/node to v24.13.3
• chore: update dependency autoprefixer to v10.5.3
• chore: update dependency cssnano to v8.0.2
• chore: update dependency lint-staged to v17.0.8
• chore: update dependency npm-run-all2 to v9.0.2
• chore: update dependency postcss to v8.5.19
• chore: update dependency semver to v7.8.5
• chore: update dependency svgo to v4.0.2
• chore: update js unit test packages to v4.1.10 (@vitest/ui, vitest)
• chore: update pnpm/action-setup action to v6.0.9
• chore: update commitlint monorepo (@commitlint/cli, @commitlint/config-conventional, @commitlint/config-pnpm-scopes)
• chore: update dependency @biomejs/biome to v2.5.4
• chore: update dependency @figma/rest-api-spec to v0.41.0
• chore: update dependency @storybook/addon-mcp to v0.7.0
• chore: update dependency axios to v1.18.1
• chore: update dependency firebase-tools to v15.24.0
• chore: update dependency jscodeshift to v17.4.0
• chore: update dependency prettier to v3.9.5
• chore: update dependency puppeteer to v25.3.0
• chore: update dependency style-dictionary to v5.5.0
• chore: update dependency stylelint to v17.14.0
• chore: update dependency tsx to v4.23.1
• chore: update dependency undici to v7.28.0
• chore: update dependency undici-types to v7.28.0
• chore: update dependency webpack to v5.108.4
• chore: update firebaseextended/action-hosting-deploy action to v0.11.0
• chore: update pnpm to v11.11.0
• chore: update storybook monorepo to v10.5.0 (@storybook/addon-a11y, @storybook/addon-docs, @storybook/react, @storybook/react-webpack5, storybook)
• chore: update actions/checkout action to v7
• chore: update dependency stylelint-selector-bem-pattern to v5
• chore: update dependency superstatic to v11
• chore: update dependency typescript to v7
• chore: lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore: update actions/setup-node action to v6.5.0
• chore: update actions/setup-node action to v7

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore: update dependency @changesets/cli to v2.31.1
• chore: update dependency @figma/code-connect to v1.4.9
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore: update dependency make-dir to v5
• chore: update dependency undici to v8
• chore: update dependency undici-types to v8

Detected Dependencies

github-actions (17)

.github/workflows/build-icon.yml (4)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/build-tokens.yml (4)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/build.yml (3)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]

.github/workflows/deploy-highlightjs-styles-preview.yml (4)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• FirebaseExtended/action-hosting-deploy v0.10.0@e2eda2e106cfa35cdbcf4ac9ddaf6c4756df2c8c → [Updates: v0.11.0]

.github/workflows/deploy-highlightjs-styles.yml (4)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• FirebaseExtended/action-hosting-deploy v0.10.0@e2eda2e106cfa35cdbcf4ac9ddaf6c4756df2c8c → [Updates: v0.11.0]

.github/workflows/deploy-hooks-catalog.yml (4)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• FirebaseExtended/action-hosting-deploy v0.10.0@e2eda2e106cfa35cdbcf4ac9ddaf6c4756df2c8c → [Updates: v0.11.0]

.github/workflows/deploy-hoooks-preview.yml (4)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• FirebaseExtended/action-hosting-deploy v0.10.0@e2eda2e106cfa35cdbcf4ac9ddaf6c4756df2c8c → [Updates: v0.11.0]

.github/workflows/deploy-theme-switch-preview.yml (4)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• FirebaseExtended/action-hosting-deploy v0.10.0@e2eda2e106cfa35cdbcf4ac9ddaf6c4756df2c8c → [Updates: v0.11.0]

.github/workflows/deploy-theme-switch.yml (4)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• FirebaseExtended/action-hosting-deploy v0.10.0@e2eda2e106cfa35cdbcf4ac9ddaf6c4756df2c8c → [Updates: v0.11.0]

.github/workflows/deploy-ui-catalog.yml (4)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• FirebaseExtended/action-hosting-deploy v0.10.0@e2eda2e106cfa35cdbcf4ac9ddaf6c4756df2c8c → [Updates: v0.11.0]

.github/workflows/deploy-ui-preview.yml (4)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• FirebaseExtended/action-hosting-deploy v0.10.0@e2eda2e106cfa35cdbcf4ac9ddaf6c4756df2c8c → [Updates: v0.11.0]

.github/workflows/figma-code-connect.yml (3)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]

.github/workflows/lint-commit-message.yml (3)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]

.github/workflows/release-changesets.yml (7)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• changesets/action v1.9.0@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]

.github/workflows/sync-mcp-release.yml (1)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]

.github/workflows/test.yml (3)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]

.github/workflows/visual-regression-test.yml (3)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• pnpm/action-setup v6.0.8@0e279bb959325dab635dd2c09392533439d90093 → [Updates: v6.0.9]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]

npm (10)

package.json (24)

• @biomejs/biome 2.4.16 → [Updates: 2.5.4]
• @changesets/changelog-github 0.7.0
• @changesets/cli 2.31.0 → [Updates: 2.31.1]
• @commitlint/cli 21.0.2 → [Updates: 21.2.1]
• @commitlint/config-conventional 21.0.2 → [Updates: 21.2.0]
• @commitlint/config-pnpm-scopes 21.0.2 → [Updates: 21.2.0]
• husky 9.1.7
• is-ci 4.1.0
• jscodeshift 17.3.0 → [Updates: 17.4.0]
• lint-staged 17.0.7 → [Updates: 17.0.8]
• npm-run-all2 9.0.1 → [Updates: 9.0.2]
• pnpm 11.5.2 → [Updates: 11.11.0]
• prettier 3.8.3 → [Updates: 3.9.5]
• stylelint 17.13.0 → [Updates: 17.14.0]
• stylelint-config-standard 40.0.0
• stylelint-order 8.1.1
• stylelint-selector-bem-pattern 4.0.1 → [Updates: 5.0.0]
• textlint 15.7.1
• textlint-rule-preset-ameba v0.5.1
• typescript 6.0.3 → [Updates: 7.0.2]
• vitest 4.1.8 → [Updates: 4.1.10]
• yaml-lint 1.7.0
• node >=22
• pnpm 11.5.2 → [Updates: 11.11.0]

packages/spindle-hooks/package.json (22)

• @storybook/addon-a11y 10.4.2 → [Updates: 10.5.0]
• @storybook/addon-docs 10.4.2 → [Updates: 10.5.0]
• @storybook/addon-mcp 0.6.0 → [Updates: 0.7.0]
• @storybook/addon-webpack5-compiler-swc 4.0.3
• @storybook/react 10.4.2 → [Updates: 10.5.0]
• @storybook/react-webpack5 10.4.2 → [Updates: 10.5.0]
• @testing-library/dom 10.4.1
• @testing-library/jest-dom 6.9.1
• @testing-library/react 16.3.2
• @testing-library/user-event 14.6.1
• @types/react 19.2.17
• @types/react-dom 19.2.3
• @vitest/ui 4.1.8 → [Updates: 4.1.10]
• bundlewatch 0.4.2
• jsdom 29.1.1
• react 19.2.7
• react-dom 19.2.7
• storybook 10.4.2 → [Updates: 10.5.0]
• vitest 4.1.8 → [Updates: 4.1.10]
• webpack 5.107.2 → [Updates: 5.108.4]
• @types/react ^16.8.6 || ^17.0.0 || ^18.0.0|| ^19.0.0
• react ^16.8.0 || ^17.0.0 || ^18.0.0|| ^19.0.0

packages/spindle-icons/package.json (8)

• @types/cli-progress 3.11.6
• axios 1.17.0 → [Updates: 1.18.1]
• cli-progress 3.12.0
• figma-api 1.12.0
• npm-run-all2 9.0.1 → [Updates: 9.0.2]
• svg-sprite 2.0.4
• svgo 4.0.1 → [Updates: 4.0.2]
• ts-node 10.9.2

packages/spindle-mcp-server/package.json (6)

• @modelcontextprotocol/sdk ^1.25.1
• zod ^4.1.9
• @cfworker/json-schema 4.1.1
• @types/node 24.13.1 → [Updates: 24.13.3]
• cpx2 9.0.0
• vitest 4.1.8 → [Updates: 4.1.10]

packages/spindle-site/package.json

packages/spindle-syntax-themes/package.json (4)

• @lhci/cli 0.15.1
• csso-cli 4.0.2
• firebase-tools 15.19.1 → [Updates: 15.24.0]
• puppeteer 25.1.0 → [Updates: 25.3.0]

packages/spindle-theme-switch/package.json (2)

• dark-mode-toggle ^0.18.0
• firebase-tools 15.19.1 → [Updates: 15.24.0]

packages/spindle-tokens/package.json (12)

• @figma/rest-api-spec 0.40.0 → [Updates: 0.41.0]
• @types/lodash.setwith 4.3.9
• @types/node 24.13.1 → [Updates: 24.13.3]
• @vitest/ui 4.1.8 → [Updates: 4.1.10]
• jsonabc 2.3.1
• lodash.setwith 4.3.2
• make-dir 4.0.0 → [Updates: 5.1.0]
• style-dictionary 5.4.4 → [Updates: 5.5.0]
• stylelint 17.13.0 → [Updates: 17.14.0]
• stylelint-config-standard 40.0.0
• tsx 4.22.4 → [Updates: 4.23.1]
• vitest 4.1.8 → [Updates: 4.1.10]

packages/spindle-ui/package.json (44)

• ameba-color-palette.css ^4.17.0
• use-callback-ref ^1.3.3
• @figma/code-connect 1.4.8 → [Updates: 1.4.9]
• @storybook/addon-a11y 10.4.2 → [Updates: 10.5.0]
• @storybook/addon-docs 10.4.2 → [Updates: 10.5.0]
• @storybook/addon-mcp 0.6.0 → [Updates: 0.7.0]
• @storybook/addon-webpack5-compiler-swc 4.0.3
• @storybook/react 10.4.2 → [Updates: 10.5.0]
• @storybook/react-webpack5 10.4.2 → [Updates: 10.5.0]
• @svgr/cli 8.1.0
• @testing-library/dom 10.4.1
• @testing-library/jest-dom 6.9.1
• @testing-library/react 16.3.2
• @testing-library/user-event 14.6.1
• @types/react 19.2.17
• @vitest/ui 4.1.8 → [Updates: 4.1.10]
• @vscode/web-custom-data 0.6.3
• autoprefixer 10.5.0 → [Updates: 10.5.3]
• bundlewatch 0.4.2
• cssnano 8.0.1 → [Updates: 8.0.2]
• dialog-polyfill 0.5.6
• dotenv 17.4.2
• figma-api 1.12.0
• firebase-tools 15.19.1 → [Updates: 15.24.0]
• jsdom 29.1.1
• postcss 8.5.15 → [Updates: 8.5.19]
• postcss-cli 11.0.1
• postcss-import 16.1.1
• react 19.2.7
• react-dom 19.2.7
• reg-keygen-git-hash-plugin 0.14.5
• reg-notify-github-plugin 0.14.5
• reg-publish-gcs-plugin 0.14.4
• reg-suit 0.14.5
• scaffdog 4.1.0
• storybook 10.4.2 → [Updates: 10.5.0]
• stylelint 17.13.0 → [Updates: 17.14.0]
• stylelint-config-standard 40.0.0
• stylelint-order 8.1.1
• stylelint-selector-bem-pattern 4.0.1 → [Updates: 5.0.0]
• tsx 4.22.4 → [Updates: 4.23.1]
• vitest 4.1.8 → [Updates: 4.1.10]
• @types/react ^16.8.6 || ^17.0.0 || ^18.0.0 || ^19.0.0
• react ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0

pnpm-workspace.yaml (6)

• superstatic 10.0.0 → [Updates: 11.0.0]
• axios 1.17.0 → [Updates: 1.18.1]
• undici 7.27.2 → [Updates: 7.28.0, 8.7.0]
• undici-types 7.27.2 → [Updates: 7.28.0, 8.7.0]
• semver 7.8.3 → [Updates: 7.8.5]
• chokidar 5.0.0

renovate-config (1)

.renovaterc.json

---

• Check this box to trigger a request for Renovate to run again on this repository