Dependency Dashboard

[chrisbbreuer]

This issue lists Buddy Bot updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency react-dom to 19.1.1 (react-dom, startTransition)
• chore(deps): update all non-major dependencies (pkgx.yml, ci.yml, precompile-php.yml, buddy-bot.yml, launchpad-install.yml, bun-v1.2.22)
• chore(deps): update dependency bunfig to 0.15.0 (bunfig, ~/.<name>.*, doctor)
• chore(deps): update dependency bun-plugin-dtsx to 0.21.12 (bun-plugin-dtsx)
• chore(deps): update dependency actions/download-artifact to v5.0.0 (actions/download-artifact, precompile-php.yml)
• chore(deps): update dependency actions/checkout to v5.0.0 (actions/checkout, launchpad-install.yml)
• chore(deps): update dependency @types/react to 19.1.13 (@types/react)
• chore(deps): update dependency @types/node to 24.5.2 (@types/node)
• chore(deps): update dependency @types/express to 5.0.3 (@types/express)
• chore(deps): update dependency next to 15.5.3 (next, liveness, this)
• chore(deps): update dependency lint-staged to 16.1.5 (lint-staged, types, package.json)
• chore(deps): update dependency fastify to 5.6.1 (fastify)
• chore(deps): update dependency express to 5.1.0 (express, cookie)
• chore(deps): update dependency eslint-config-next to 15.5.3 (eslint-config-next, liveness, this)
• chore(deps): update dependency softprops/action-gh-release to v2.3.3 (softprops/action-gh-release, precompile-php.yml)
• chore(deps): update dependency eslint to 9.34.0 (eslint, e07820e, one-var, meta.docs.recommended, e8a6914, dc942a4, bbf23fa, d498887, f46fc6c)
• chore(deps): update npm to v11 (npm, bdcc10d, dd4cee9, @npmcli/arborist@9.1.4, @npmcli/config@10.4.0, d4e56b2, before, ef3529e, b7758d7, d4e8a8a, e1b37b2, daea981, a789f33, @npmcli/metavuln-calculator@9.0.1, cf023d7, @npmcli/template-oss@4.24.4, @npmcli/template-oss@4.24.3, @npmcli/arborist@9.1.3, @npmcli/config@10.3.1, f2d6947, e758dd7, fb7a498, e1a3b23, e691ba0, @sigstore/protobuf-specs@0.4.3, @npmcli/redact@3.2.2, dda6f87, @npmcli/package-json@6.2.0, bc08ac7, @npmcli/arborist@9.1.2, @npmcli/arborist@9.1.1, a0e60fb, b5173d1, fdc3413, time, db8f5da, d2498df, CHANGELOG, overrides, c97ef8a, f48613d, @sigstore/verify@2.1.1, a4c5e74, b9156d2, @sigstore/tuf@3.1.1, @sigstore/protobuf-specs@0.4.1, @npmcli/query@4.0.1, c263626, e80e38e, c561a33, @npmcli/arborist@9.1.0, @npmcli/config@10.3.0, b306d25, node-gyp, e57f112, c7a7527, @npmcli/run-script@9.1.0, d679a1a, @npmcli/arborist@9.0.2, @npmcli/config@10.2.0, d369c77, a598b7b, aabf345, ecd7190, a07f4e0, @npmcli/template-oss@4.23.6, @npmcli/arborist@9.0.0, @npmcli/config@10.0.0, e510f14, c38ec84, e9cf30e, a795ee0, cc7dcfc, b59097f, a1dbb0b, fd26776, dbb23ab, b327bc2, a5eb5dd, @npmcli/git@6.0.3)
• chore(deps): update node.js to v22 (node.js, new, IncomingMessage, ServerResponse, shell, stream.priority, dirent.parentPath, node:readline/promises, readable.readableAborted, readable.readableDidRead, writable.writableAborted, fs.FileHandle.readableWebStream, autoClose, fs.Dir, Symbol.asyncDispose, http2, http2.server.stream.finish, fdf7612735, ffe7e1ace0, dee8cb5bcb, e840fd5b85, b9a16e97e0, d56a5e40af, cff8006792, ChildProcess, d6aa02889c, e0cd138e52, e9092b1, f84998d40b, d49fd29859, e397980a1a, a28c33645c, process.md, options.shell, e19496dfc1, @@​wellknown, b22bb03167, a5a686a3ae, be492a1708, c8500a2c4a, http.md, outgoingMessage.setTimeout, faedee59d2, a71b9fc2ff, b9586bf898, URL, fs.glob, cwd, cpSync, Dir, cff62e3265, cb39e4ca1f, cff440e0fa, e8a0f5b063, d3d662ae47, dec6c9af8c, b99d131a61, b0644330f5, d7d8599f7c, aabafbc28f, af7baef75a, a1a7024831, a379988ef6, f6a46c87f2, d97616ac6e, f4065074cf, e6d1224e54, fecd841c93, name, length, eb143e902b, aa00f5946f, checkMessagePort, shouldRetryAsESM, a793706db0, cab242334b, a5df778150, bd6743b434, d822632d91, b3e0cf1b15, b11b9cdad8, optparse, argparse, cccb15df7e, f18041ae8e, ca8d66c1fc, console.log, tmpDir.path, test-http2-debug, a3877c53b1, /tools/eslint, b7feda97b0, deps/, benchmark/, e4373be766, b7d7ffe793, FixedSizeBlobCopyJob, revokeDataObject, TypedArray, ef66357637, MessagePort, b3cd847528, c3ceaebb7a, c8ceaaf397, e21b37d9df, c510391d2f, node.config.json, e1d3a9e192, dda6ca9172, Float16Array, f689f98344, filename, dirname, e7e8256d35, d7d8e8e994, f37633e85a, e5bf67fe77, out/Makefile, SharedArrayBuffer, ArrayBuffer, f606352b63, f915fa4)
• chore(deps): update nextjs monorepo to v15 (major) (req.url, /_next/static/media, vary, size, useLightningcss, styled-jsx, useErrorOverlayReducer, c69a5fc5-20250318, db7dfe05-20250319, expireTags, getExpiration, nodejs, isrFlushToDisk, images.remotePatterns, useLayoutEffect, TurbopackInternalError, sideEffects, issueCount, errors, refreshTags, searchParams, getSourceFile, fileExists, next/*, canary, react-refresh, StyleSheet, rayon, chili, launch.json, bun, Upgrade, Examples, Guides, Vc, instrumentation-client, styled-components, hygiene)
• chore(deps): update devdependency eslint to v9 (eslint, db5340d, d8ffdd4, c5561ea, var, let, const, f67d5e8, dd7d930, a8c9a9f, @eslint/eslintrc, @eslint/js, Rule.ReportDescriptor, e497aa7, dab5478, ebfe2eb, RuleContext, fe3ccb2, b476a93, ccb60c0, e89a54a, fa25c7a, db1b9a6, consistent-this, arrow-body-style, b7012c8, sourceType, no-eval, d4c47c3, aae6717, cfea9ab, e39d3f2, e0cf53f, f92a680, b04b84b, e84e6e2, no-console, no-shadow-restricted-names, da768d4, overrideConfigFile, d9c23c5, f3aeefb, c038257, eqeqeq, no-eq-null, db574c4, no-void, default-case-last, no-else-return, df409d8, a559009, ce0b9ff, e255cc9, eec01f0, languageOptions, b36ca0a, d122c8a, sort-imports, border-radius, eff7c57, no-loop-func, ac8b3c4, bbb9b46, f76d05d, c5f3d7d, c52be85, @eslint/js@9.18.0, name, package.json, eed91d1, no-unused-vars, message.fix, c618707, yoda, Yoda, yoda.md, e0a2203, no-sequences, bf2a4f6, func-style, ba098bd, prefer-spread, b607ae6, no-param-reassign, prefer-destructuring, no-unneeded-ternary, b75b32c, no-new-func, a7700bc, id-length, e2bb429, complexity.md, id-denylist, c743ba6, no-restricted-syntax, b950c1b, prefer-object-spread, description, require-unicode-regexp, cbab228, f2257ce, no-script-url, e6b84f5, c88708e, for-direction, a76f233, db19502, cc243c9, @eslint/js@9.17.0, flags.js, eslint-config-eslint, ee8c220, integration-tutorial-code, cca801d, ignoreComputedKeys, sort-keys, use-isnan, no-unreachable, no-async-promise-executor, no-compare-neg-zero, caseSensitive, migration-guide.md, debug.md, nodejs-api, feb703b, @eslint/js@9.16.0, df9bf95, f831893, repository.directory, d460594, bdec50e, no-useless-computed-key, meta, fd33f13, no-restricted-imports, bd35098, no-lonely-if, d927920, indent, quotes, semi, b441bee, cceccc7, trunk-io/trunk-action, text-table, trimEnd, b0faee3, b442067, d474443, context.languageOptions.parser, dc34f94, f16e846, ee0a77e, @wdio/*, f36cb16, f48a2a0, no-invalid-regexp, check-emfile-handling.js)
• chore(deps): update dependency fastify to v5 (fastify, setErrorHandler, fastify-diagnostics-channel, done, @fastify/otel)
• chore(deps): update dependency express to v5 (express, Uint8Array, setprototypeof, safe-buffer, utils-merge, methods, depd, cookie, path-is-absolute, path.isAbsolute, res.clearCookie, maxAge, expires, application/javascript, text/javascript, depth, Infinity, res.redirect, options.maxAge, options.expires, partitioned)
• chore(deps): update dependency react to 19.1.1 (react, startTransition)
• chore(deps): update actions/checkout action to v5
• chore(deps): update actions/download-artifact action to v5
• chore(deps): update softprops/action-gh-release action to v2
• chore(deps): update all non-major dependencies (a19072f, a0dea8e, name, fs.walk, b034575, c68c07f, bcdfc04, /docs/v8.x, dca7d0f, eslint.config.mjs, eslint.config.cjs, FlatRuleTester, f4a1fe2, fd28363, ba6af85, ba87a06, f3a599d, fd0c60c, fffca5c, a6d9442, no-unused-vars, eb8950c, fe4b954, bd8911d, b29a16b, cli, de165c1, d4304b8, a7a883b, no-array-constructor, e8cf9f6, cwd, basePath, becfdd3, eb2279e, d245326, d644de9, markdownlint, b7121b5, acac16f, ba8ca7e, c0b11dd, b329ea7, no-object-constructor, ab8c60d, ba4d4d5, db06a7f, dcfe573, a58aa20, f8e5c30, b7ef2f3, ff8e4bf, fab249a, no-irregular-whitespace, no-trailing-spaces, unicode-bom, d63d4fe, f30cefe, ef650cb, f976b2f, dd79abc, eslint-disable, d2f6801, ee5be81, dbf831e, f8c7403, bc77c9a, f9082ff, no-new-object, cc4d26b, aa1b657, no-misleading-character-class, prefer-arrow-callback, bd7a71f, f8a8a2d, da09f4e, acb7df3, enforce, lines-between-class-members)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

npm

package.json

• @stacksjs/bumpx ^0.1.84
• @stacksjs/docs ^0.70.23
• @stacksjs/eslint-config ^4.14.0-beta.3
• @stacksjs/gitlint ^0.1.5
• @stacksjs/launchpad workspace:*
• @stacksjs/logsmith ^0.1.18
• @types/bun ^1.2.22
• buddy-bot ^0.9.7
• bun-git-hooks ^0.2.19
• bun-plugin-dtsx 0.9.5
• typescript ^5.9.2

package.json

• @actions/core ^1.11.1
• @actions/exec ^1.1.1
• @actions/github ^6.0.1
• @actions/io ^1.1.3
• bun-plugin-dtsx ^0.9.5
• typescript ^5.8.3

package.json

• bunfig ^0.15.0
• cac ^6.7.14
• ts-pkgx ^0.4.72
• bun-plugin-dtsx 0.9.5

package.json

package.json

package.json

package.json

package.json

package.json

package.json

• bun-types latest

github-actions

.github/workflows/launchpad-install.yml

• actions/checkout v4
• oven-sh/setup-bun v2

.github/workflows/buddy-bot.yml

• actions/checkout v4
• oven-sh/setup-bun v2
• shivammathur/setup-php v2

.github/workflows/precompile-php.yml

• actions/checkout v4
• oven-sh/setup-bun v2
• actions/upload-artifact v4
• actions/download-artifact v4
• softprops/action-gh-release v1

.github/workflows/ci.yml

• actions/checkout v4
• oven-sh/setup-bun v2
• actions/cache v4

.github/workflows/release.yml

• actions/checkout v4
• oven-sh/setup-bun v2
• actions/cache v4
• stacksjs/action-releaser v1.1.0

dependency-files

deps.yaml

• bun.com @1.2.19

packages/launchpad/test/tmp-hooks/deps.yaml

packages/launchpad/test/fixtures/pkgx.yml

• zlib.net ^1.2
• python.org *
• sourceware.org/bzip2 @1
• openssl.org ^1.1
• curl.se/ca-certs *
• sourceware.org/libffi @3
• libexpat.github.io @2
• bytereef.org/mpdecimal @2
• tukaani.org/xz @5
• sqlite.org @3
• gnu.org/readline @8
• invisible-island.net/ncurses ^6
• tcl-lang.org @8
• freetype.org ^2
• libpng.org @1
• freedesktop.org/pkg-config ^0.29
• x.org/x11 ^1
• x.org/xcb ^1
• x.org/xau ^1
• x.org/util-macros *
• x.org/protocol *
• x.org/xdmcp ^1
• x.org/exts ^1
• pip.pypa.io *
• pkgx.sh ^1

packages/launchpad/test/fixtures/bun.lockb

packages/launchpad/test/fixtures/yarn.lock

---

• Check this box to trigger a request for Buddy Bot to run again on this repository