Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/Kong/spec-renderer).

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>

View abandoned dependencies (11)

| Datasource | Package | Last Updated |
|------------|------|-------------|
| npm | [@asyncapi/avro-schema-parser](https://redirect.github.com/asyncapi/avro-schema-parser) | `2024-06-12` |
| npm | [@digitalroute/cz-conventional-changelog-for-jira](https://redirect.github.com/digitalroute/cz-conventional-changelog-for-jira) | `2023-05-05` |
| npm | [@semantic-release/exec](https://redirect.github.com/semantic-release/exec) | `2025-05-09` |
| npm | [@stoplight/json](https://redirect.github.com/stoplightio/json) | `2024-09-02` |
| npm | [@stoplight/yaml](https://redirect.github.com/stoplightio/yaml) | `2024-03-04` |
| npm | [cz-conventional-changelog](https://redirect.github.com/commitizen/cz-conventional-changelog) | `2020-08-26` |
| npm | [elliptic@<=6.6.0](https://redirect.github.com/indutny/elliptic) | `2024-11-13` |
| npm | [picocolors](https://redirect.github.com/alexeyraspopov/picocolors) | `2024-10-16` |
| npm | [sha.js@<=2.4.11](https://redirect.github.com/crypto-browserify/sha.js) | `2025-07-01` |
| npm | [tslib](https://redirect.github.com/Microsoft/tslib) | `2024-10-31` |
| npm | [vite-plugin-replace](https://redirect.github.com/leanupjs/leanup) | `2021-04-02` |

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): update dependency undici@<6.24.0 to v8
- [ ] chore(deps): update dependency undici@>=7.0.0 <7.24.0 to v8
- [ ] chore(deps): update dependency vue-router to v5
- [ ] chore(deps): update github actions (major) (`actions/cache`, `actions/checkout`, `actions/download-artifact`, `actions/setup-node`, `actions/upload-artifact`, `marocchino/sticky-pull-request-comment`)
- [ ] chore(deps): update linters to v2 (`stylelint-config-html`, `stylelint-config-recommended-vue`)
- [ ] chore(deps): update pnpm to v12
- [ ] chore(deps): update semantic-release monorepo (major) (`@semantic-release/changelog`, `@semantic-release/exec`, `@semantic-release/git`)
- [ ] chore(deps): update vite packages to v8 (`vite`, `vite@>=7.0.0 <=7.3.1`)
- [ ] chore(deps): update vitest monorepo to v5 (`@vitest/ui`, `vitest`)
- [ ] fix(deps): update dependency @floating-ui/vue to v2
- [ ] fix(deps): update dependency markdown-it to v15
- [ ] fix(deps): update dependency shiki to v4
- [ ] chore(deps): lock file maintenance
- [ ] 🔐 **Create all awaiting schedule PRs at once** 🔐

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] fix(deps): update all non-major dependencies with stable versions (patch) (`@babel/helpers@<7.26.10`, `@babel/types`, `@evilmartians/lefthook`, `@types/node`, `@vitejs/plugin-vue`, `@vue/test-utils`, `autoprefixer`, `brace-expansion@>=1.0.0 <=1.1.11`, `brace-expansion@>=2.0.0 <=2.0.1`, `fast-uri@<3.1.6`, `js-yaml@>=4.0.0 <4.1.1`, `markdown-it`, `markdown-it@>=13.0.0 <14.1.1`, `open`, `rollup@>=4.0.0 <4.59.0`, `sass`, `sass-embedded`, `tsc-alias`, `vue`, `yaml`, `yaml@>=2.0.0 <2.8.3`)
- [ ] chore(deps): update all non-major dependencies with stable versions (minor) (`autoprefixer`, `fast-uri@<3.1.6`, `jsdom`, `node`, `pnpm`)
- [ ] fix(deps): update dependency @vueuse/core to v15

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update actions/checkout action to v6.1.0](../pull/961)
- [ ] [chore(deps): update dependency stylelint to ^17.15.0](../pull/1005)
- [ ] [chore(deps): update dependency typescript to v7](../pull/1006)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [chore(deps): update dependency ajv@<6.14.0 to v8](../pull/822)
- [ ] [chore(deps): update dependency diff@>=4.0.0 <4.0.4 to v9](../pull/853)
- [ ] [chore(deps): update dependency picomatch@<2.3.2 to v4](../pull/861)
- [ ] [chore(deps): update dependency rollup-plugin-visualizer to v7](../pull/862)

## Detected Dependencies

github-actions (7)

.github/actions/setup-pnpm-with-dependencies/action.yaml (2)

- `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`]
- `actions/cache v5.1.0@caa296126883cff596d87d8935842f9db880ef25` → [Updates: `v6.1.0`]

.github/workflows/CI.yaml (7)

- `marocchino/sticky-pull-request-comment v2.9.4@773744901bac0e8cbb5a0dc842800d45e9b2b405` → [Updates: `v3.0.5`]
- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131` → [Updates: `v8.0.1`]
- `marocchino/sticky-pull-request-comment v2.9.4@773744901bac0e8cbb5a0dc842800d45e9b2b405` → [Updates: `v3.0.5`]
- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131` → [Updates: `v8.0.1`]
- `cycjimmy/semantic-release-action v6.0.0@b12c8f6015dc215fe37bc154d4ad456dd3833c90`

.github/workflows/commitlint.yaml (2)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `wagoid/commitlint-github-action v6.2.1@b948419dd99f3fd78a6548d48f94e3df7f6bf3ed`

.github/workflows/ksai.yml (3)

- `Kong/ksai-public v3.88.0@05f9791b98dbc153dd78afcc5642f11b1d4f0b79` → [Updates: `v3.94.0`]
- `Kong/ksai-public v3.88.0@05f9791b98dbc153dd78afcc5642f11b1d4f0b79` → [Updates: `v3.94.0`]
- `Kong/ksai-public v3.88.0@05f9791b98dbc153dd78afcc5642f11b1d4f0b79` → [Updates: `v3.94.0`]

.github/workflows/pr-audit.yaml (1)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]

.github/workflows/pr-closed.yaml (2)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `marocchino/sticky-pull-request-comment v2.9.4@773744901bac0e8cbb5a0dc842800d45e9b2b405` → [Updates: `v3.0.5`]

.github/workflows/test.yaml (2)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f` → [Updates: `v7.0.1`]

npm (2)

package.json (83)

- `@asyncapi/avro-schema-parser ^3.0.24`
- `@asyncapi/openapi-schema-parser ^3.1.0`
- `@asyncapi/parser ^3.6.3`
- `@floating-ui/vue ^1.1.11` → [Updates: `^2.0.1`]
- `@kong/icons ^1.62.1`
- `@stoplight/http-spec ^7.1.0`
- `@stoplight/json ^3.21.7`
- `@stoplight/types ^14.1.1`
- `@stoplight/yaml ^4.3.0`
- `@vueuse/core ^14.4.0` → [Updates: `^15.0.0`]
- `allof-merge ^0.6.8`
- `chokidar ^5.0.0`
- `commander ^15.0.0`
- `flatted ^3.4.4`
- `form-urlencoded ^6.1.7`
- `httpsnippet ^3.0.10`
- `lodash-es ^4.18.1`
- `markdown-it ^14.3.1` → [Updates: `^14.3.2`, `^15.0.1`]
- `open ^11.0.2` → [Updates: `^11.0.4`]
- `picocolors ^1.1.1`
- `sanitize-html ^2.17.7`
- `shiki ^3.23.0` → [Updates: `^4.4.3`]
- `ws ^8.21.3`
- `@babel/types ^8.0.4` → [Updates: `^8.0.6`]
- `@commitlint/cli ^21.2.2`
- `@commitlint/config-conventional ^21.2.2`
- `@digitalroute/cz-conventional-changelog-for-jira ^8.0.1`
- `@evilmartians/lefthook ^2.1.12` → [Updates: `^2.1.14`]
- `@kong/design-tokens 3.3.1`
- `@kong/eslint-config-kong-ui 1.8.0`
- `@kong/stylelint-plugin-design-tokens 2.0.0`
- `@semantic-release/changelog ^6.0.3` → [Updates: `^7.0.0`]
- `@semantic-release/exec ^6.0.3` → [Updates: `^7.1.0`]
- `@semantic-release/git ^10.0.1` → [Updates: `^11.0.1`]
- `@stylistic/stylelint-plugin ^5.3.0`
- `@types/jsdom ^30.0.0`
- `@types/json-schema ^7.0.15`
- `@types/markdown-it ^14.2.0`
- `@types/node ^24.13.3` → [Updates: `^24.13.5`]
- `@types/sanitize-html ^2.16.1`
- `@types/ws ^8.18.1`
- `@vitejs/plugin-vue ^6.0.8` → [Updates: `^6.0.9`]
- `@vitest/ui ^4.1.11` → [Updates: `^5.0.0`]
- `@vue/test-utils ^2.5.0` → [Updates: `^2.5.1`]
- `@vue/tsconfig ^0.9.1`
- `autoprefixer ^10.5.5` → [Updates: `^10.5.6`, `^10.6.1`]
- `c8 ^12.0.0`
- `commitizen ^4.3.2`
- `cross-env ^10.1.0`
- `cz-conventional-changelog ^3.3.0`
- `eslint ^10.10.0`
- `jsdom ^30.0.1` → [Updates: `^30.1.0`]
- `openapi3-ts 4.6.1`
- `postcss ^8.5.28`
- `postcss-html ^2.0.0`
- `rimraf ^6.1.3`
- `rollup-plugin-visualizer ^6.0.11` → [Updates: `^7.1.1`]
- `sass ^1.104.0` → [Updates: `^1.104.1`]
- `sass-embedded ^1.104.0` → [Updates: `^1.104.1`]
- `semantic-release ^25.0.9`
- `stylelint ^17.14.1` → [Updates: `^17.15.0`]
- `stylelint-config-html ^1.1.0` → [Updates: `^2.0.0`]
- `stylelint-config-recommended-scss ^17.0.1`
- `stylelint-config-recommended-vue ^1.6.1` → [Updates: `^2.0.0`]
- `stylelint-order ^8.1.1`
- `ts-node ^10.9.2`
- `tsc-alias ^1.9.4` → [Updates: `^1.9.5`]
- `tslib ^2.8.1`
- `typescript ^5.9.3` → [Updates: `^7.0.2`]
- `vite ^7.3.6` → [Updates: `^8.2.2`]
- `vite-plugin-node-polyfills ^0.28.0`
- `vite-plugin-replace ^0.1.1`
- `vite-plugin-vue-devtools ^8.2.1`
- `vitest 4.1.11` → [Updates: `5.0.0`]
- `vue ^3.5.42` → [Updates: `^3.5.43`]
- `vue-router ^4.6.4` → [Updates: `^5.3.1`]
- `vue-tsc ^3.3.11`
- `yaml ^2.9.0` → [Updates: `^2.9.1`]
- `vue >= 3.3.13 < 4`
- `node 24.20.0` → [Updates: `24.21.0`]
- `pnpm 11.25.0` → [Updates: `11.27.0`, `12.3.4`]
- `openapi3-ts 4.6.1`
- `pnpm 11.25.0` → [Updates: `11.27.0`, `12.3.4`]

pnpm-workspace.yaml (37)

- `openapi3-ts 4.6.1`
- `jsonpath-plus@<10.3.0 >=10.4.0`
- `elliptic@<=6.6.0 >=6.6.1`
- `@babel/helpers@<7.26.10 >=8.0.0` → [Updates: `>=8.0.5`]
- `cross-spawn@>=7.0.0 <7.0.5 >=7.0.6`
- `brace-expansion@>=1.0.0 <=1.1.11 >=5.0.9` → [Updates: `>=5.0.12`]
- `brace-expansion@>=2.0.0 <=2.0.1 >=5.0.9` → [Updates: `>=5.0.12`]
- `pbkdf2@<=3.1.2 >=3.1.6`
- `sha.js@<=2.4.11 >=2.4.12`
- `cipher-base@<=1.0.4 >=1.0.7`
- `tmp@<=0.2.3 >=0.2.7`
- `js-yaml@>=4.0.0 <4.1.1 >=5.4.1` → [Updates: `>=5.4.2`]
- `glob@>=10.2.0 <10.5.0 >=13.0.6`
- `diff@>=4.0.0 <4.0.4 >=4.0.4` → [Updates: `>=9.0.0`]
- `@isaacs/brace-expansion@<=5.0.0 >=5.0.1`
- `mdast-util-to-hast@>=13.0.0 <13.2.1 >=13.2.1`
- `qs@>=6.7.0 <=6.14.1 >=6.16.0`
- `markdown-it@>=13.0.0 <14.1.1 >=15.0.1` → [Updates: `>=15.0.2`]
- `bn.js@>=5.0.0 <5.2.3 >=5.2.5`
- `bn.js@<4.12.3 >=5.2.5`
- `rollup@>=4.0.0 <4.59.0 >=4.63.1` → [Updates: `>=4.63.3`]
- `minimatch@<10.2.3 >=10.2.6`
- `ajv@<6.14.0 ^6.15.0` → [Updates: `^8.20.0`]
- `immutable@>=5.0.0 <5.1.5 >=5.1.9`
- `flatted@<=3.4.1 >=3.4.4`
- `undici@<6.24.0 >=6.28.1` → [Updates: `>=8.10.2`]
- `undici@>=7.0.0 <7.24.0 >=7.29.1` → [Updates: `>=8.10.2`]
- `handlebars@>=4.0.0 <4.7.9 >=4.7.9`
- `picomatch@>=4.0.0 <4.0.4 >=4.0.7`
- `picomatch@<2.3.2 >=2.3.2` → [Updates: `>=4.0.7`]
- `lodash-es@<=4.17.23 >=4.18.0`
- `lodash@<=4.17.23 >=4.18.0`
- `yaml@>=2.0.0 <2.8.3 >=2.9.0` → [Updates: `>=2.9.1`]
- `vite@>=7.0.0 <=7.3.1 >=7.3.6` → [Updates: `>=8.2.2`]
- `form-data@>=4.0.0 <4.0.6 ^4.0.6`
- `@faker-js/faker@<=10.4.0 ^10.6.0`
- `fast-uri@<3.1.6 ^4.1.4` → [Updates: `^4.1.5`, `^4.2.1`]

nvm (1)

.nvmrc (1)

- `node 24.20.0` → [Updates: `24.21.0`]

renovate-config (1)

renovate.json

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

This is an autogenerated Renovate dashboard covering package.json, pnpm-workspace.yaml, and multiple files under .github/workflows. Start by reviewing the listed pending and blocked dependency updates and their linked pull requests. Done would require selecting a defined subset of updates, validating compatibility, and confirming the relevant checks pass, but the issue does not define that subset.

Written by the indexing model from the issue text.