Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/block/builderbot).

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): update dependency vitest to v4.1.11
- [ ] chore(deps): update dependency @playwright/test to v1.63.0
- [ ] chore(deps): update dependency react-router-dom to v7.18.3
- [ ] chore(deps): update dependency shiki to v4.4.3
- [ ] chore(deps): update react monorepo to v19.3.0 (`@types/react`, `@types/react-dom`, `react`, `react-dom`)
- [ ] chore(deps): update tailwindcss monorepo to v4.3.3 (`@tailwindcss/postcss`, `@tailwindcss/vite`, `tailwindcss`)
- [ ] chore(deps): update actions/create-github-app-token action to v3
- [ ] chore(deps): update dependency @sveltejs/vite-plugin-svelte to v7
- [ ] chore(deps): update dependency vite to v8
- [ ] 🔐 **Create all awaiting schedule PRs at once** 🔐

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update swatinem/rust-cache digest to 6323deb
- [ ] chore(deps): update dependency @internationalized/date to v3.12.4
- [ ] chore(deps): update dependency @testing-library/react to v16.3.3
- [ ] chore(deps): update rust crate futures to v0.3.34
- [ ] chore(deps): update rust crate serde to v1.0.229
- [ ] fix(deps): update axum monorepo (`axum`, `axum-extra`)
- [ ] chore(deps): update dependency @fontsource-variable/inter to v5.3.0
- [ ] chore(deps): update dependency @lucide/svelte to v1.45.0
- [ ] chore(deps): update dependency eslint to v10.10.0
- [ ] chore(deps): update tauri monorepo (`tauri`, `tauri-build`)
- [ ] chore(deps): update actions/checkout action to v7
- [ ] chore(deps): update dependency @testing-library/jest-dom to v7
- [ ] chore(deps): update dependency @vitejs/plugin-react to v6
- [ ] chore(deps): update dependency jsdom to v30
- [ ] chore(deps): update dependency prettier-plugin-svelte to v4
- [ ] chore(deps): update dependency typescript to v7
- [ ] chore(deps): update dependency vitest to v5
- [ ] chore(deps): update github artifact actions (major) (`actions/download-artifact`, `actions/upload-artifact`)
- [ ] chore(deps): update pnpm to v12
- [ ] fix(deps): update dependency marked to v18
- [ ] fix(deps): update dependency mermaid to v12
- [ ] fix(deps): update dependency shiki to v4
- [ ] fix(deps): update module github.com/yuin/goldmark to v2
- [ ] fix(deps): update rust crate agent-client-protocol to v2
- [ ] fix(deps): update rust crate core-text to v22
- [ ] fix(deps): update rust crate dirs to v7
- [ ] fix(deps): update rust crate rmcp to v3
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(deps): update all non-major dependencies](../pull/913) (`@sveltejs/vite-plugin-svelte`, `@tailwindcss/typography`, `@tauri-apps/plugin-clipboard-manager`, `@tauri-apps/plugin-dialog`, `@tauri-apps/plugin-log`, `@tauri-apps/plugin-shell`, `@tauri-apps/plugin-store`, `@tauri-apps/plugin-updater`, `@types/hast`, `@types/node`, `@types/sanitize-html`, `@vitejs/plugin-react`, `actions/checkout`, `ajv`, `anyhow`, `async-trait`, `base64`, `bits-ui`, `chrono`, `clap`, `dialoguer`, `flate2`, `git2`, `github.com/fsnotify/fsnotify`, `github.com/modelcontextprotocol/go-sdk`, `github.com/yuin/goldmark`, `idb-keyval`, `ignore`, `jsdom`, `libc`, `log`, `marked`, `mermaid`, `nanoid`, `nix`, `opener`, `pnpm`, `postcss`, `prettier`, `prettier-plugin-svelte`, `rand`, `reqwest`, `resvg`, `rusqlite`, `rusqlite_migration`, `rust`, `rustls`, `sanitize-html`, `serde_json`, `shadcn-svelte`, `svelte`, `svelte-check`, `svelte-sonner`, `tailwind-variants`, `tauri-plugin-clipboard-manager`, `tauri-plugin-dialog`, `tauri-plugin-log`, `tauri-plugin-opener`, `tauri-plugin-shell`, `tauri-plugin-store`, `tauri-plugin-updater`, `thiserror`, `tokio`, `tokio-rustls`, `tokio-util`, `tower-http`, `usvg`, `uuid`, `vite`)

## Detected Dependencies

cargo (10)

apps/differ/src-tauri/Cargo.toml (7)

- `serde 1.0` → [Updates: `1.0`]
- `serde_json 1.0` → [Updates: `1.0`]
- `tauri 2.10.2` → [Updates: `2.10.2`]
- `tauri-plugin-store 2` → [Updates: `2`]
- `dirs 5.0` → [Updates: `7.0`]
- `tauri-build 2.5.5` → [Updates: `2.5.5`]
- `core-text 20` → [Updates: `22`]

apps/penpal/frontend/src-tauri/Cargo.toml (6)

- `tauri 2` → [Updates: `2`]
- `tauri-plugin-shell 2` → [Updates: `2`]
- `serde 1` → [Updates: `1`]
- `serde_json 1` → [Updates: `1`]
- `tauri-plugin-decorum 1`
- `tauri-build 2` → [Updates: `2`]

apps/staged/src-tauri/Cargo.toml (49)

- `serde_json 1.0`
- `serde 1.0`
- `log 0.4` → [Updates: `0.4`]
- `libc 0.2`
- `tauri 2.10.2`
- `tauri-plugin-log 2.8.0` → [Updates: `2.8.0`]
- `thiserror 2.0`
- `anyhow 1.0`
- `base64 0.22` → [Updates: `0.23`]
- `tempfile 3`
- `sha2 0.11`
- `rusqlite 0.39` → [Updates: `0.40`]
- `rusqlite_migration 2.5.0` → [Updates: `2.5.0`]
- `include_dir 0.7.4`
- `uuid 1.0` → [Updates: `1.0`]
- `dirs 6.0` → [Updates: `7.0`]
- `tauri-plugin-clipboard-manager 2.3.2` → [Updates: `2.3.2`]
- `tauri-plugin-window-state 2.4.1`
- `reqwest 0.13.1` → [Updates: `0.13.1`]
- `tokio 1.50.0`
- `tauri-plugin-opener 2` → [Updates: `2`]
- `tauri-plugin-dialog 2` → [Updates: `2`]
- `tauri-plugin-process 2`
- `tauri-plugin-updater 2` → [Updates: `2`]
- `agent-client-protocol 0.15.1` → [Updates: `2.0.0`]
- `regex 1`
- `strip-ansi-escapes 0.2`
- `async-trait 0.1`
- `tokio-util 0.7`
- `tauri-plugin-store 2.4.2`
- `rmcp 0.17` → [Updates: `3.0`]
- `axum 0.8`
- `axum-extra 0.10` → [Updates: `0.12`]
- `tower-http 0.6` → [Updates: `0.7`]
- `rustls 0.23` → [Updates: `0.23`]
- `tokio-rustls 0.26` → [Updates: `0.26`]
- `rand 0.9` → [Updates: `0.10`]
- `hex 0.4`
- `subtle 2.6`
- `time 0.3`
- `pikchr 0.1.4`
- `resvg 0.47` → [Updates: `0.48`]
- `usvg 0.47` → [Updates: `0.48`]
- `tiny-skia 0.12`
- `tar 0.4`
- `flate2 1` → [Updates: `1`]
- `tokio 1.50.0`
- `tauri 2.10.2`
- `tauri-build 2.5.5`

crates/acp-client/Cargo.toml (9)

- `agent-client-protocol 0.15.1` → [Updates: `2.0.0`]
- `tokio 1` → [Updates: `1`]
- `tokio-util 0.7` → [Updates: `0.7`]
- `serde 1` → [Updates: `1`]
- `serde_json 1` → [Updates: `1`]
- `anyhow 1` → [Updates: `1`]
- `async-trait 0.1` → [Updates: `0.1`]
- `log 0.4` → [Updates: `0.4`]
- `nix 0.31` → [Updates: `0.31`]

crates/blox-cli/Cargo.toml (5)

- `log 0.4` → [Updates: `0.4`]
- `serde 1` → [Updates: `1`]
- `serde_json 1` → [Updates: `1`]
- `thiserror 2` → [Updates: `2`]
- `wait-timeout 0.2`

crates/builderbot-actions/Cargo.toml (7)

- `tokio 1.50` → [Updates: `1.50`]
- `serde 1.0` → [Updates: `1.0`]
- `serde_json 1.0` → [Updates: `1.0`]
- `uuid 1.0` → [Updates: `1.0`]
- `anyhow 1.0` → [Updates: `1.0`]
- `async-trait 0.1` → [Updates: `0.1`]
- `libc 0.2` → [Updates: `0.2`]

crates/doctor/Cargo.toml (8)

- `serde 1.0` → [Updates: `1.0`]
- `serde_json 1` → [Updates: `1`]
- `tokio 1.0` → [Updates: `1.0`]
- `futures 0.3` → [Updates: `0.3`]
- `reqwest 0.13` → [Updates: `0.13`]
- `dirs 6` → [Updates: `7`]
- `wait-timeout 0.2`
- `nix 0.31` → [Updates: `0.31`]

crates/git-diff/Cargo.toml (6)

- `serde 1.0` → [Updates: `1.0`]
- `thiserror 2.0` → [Updates: `2.0`]
- `git2 0.20` → [Updates: `0.21`]
- `base64 0.22` → [Updates: `0.23`]
- `log 0.4` → [Updates: `0.4`]
- `tempfile 3.0`

crates/pm/Cargo.toml (9)

- `clap 4` → [Updates: `4`]
- `serde 1` → [Updates: `1`]
- `serde_json 1` → [Updates: `1`]
- `chrono 0.4` → [Updates: `0.4`]
- `anyhow 1` → [Updates: `1`]
- `dirs 6` → [Updates: `7`]
- `colored 3`
- `dialoguer 0.11` → [Updates: `0.12`]
- `tempfile 3`

crates/summarize/Cargo.toml (17)

- `anyhow 1` → [Updates: `1`]
- `clap 4` → [Updates: `4`]
- `ignore 0.4` → [Updates: `0.4`]
- `reqwest 0.13` → [Updates: `0.13`]
- `serde 1` → [Updates: `1`]
- `serde_json 1` → [Updates: `1`]
- `serde_urlencoded 0.7`
- `sha2 0.11`
- `base64 0.22` → [Updates: `0.23`]
- `chrono 0.4` → [Updates: `0.4`]
- `tokio 1` → [Updates: `1`]
- `url 2`
- `nanoid 0.4` → [Updates: `0.5`]
- `axum 0.8` → [Updates: `0.8`]
- `opener 0.8` → [Updates: `0.8`]
- `dirs 6` → [Updates: `7`]
- `tempfile 3`

github-actions (6)

.github/workflows/crates-ci.yml (3)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `cashapp/activate-hermit v1.1.5@cea9af7913204a965fd488637a8d1811bba2e616`
- `Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32` → [Updates: `v2`]

.github/workflows/differ-ci.yml (3)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `cashapp/activate-hermit v1.1.5@cea9af7913204a965fd488637a8d1811bba2e616`
- `Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32` → [Updates: `v2`]

.github/workflows/penpal-ci.yml (3)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `cashapp/activate-hermit v1.1.5@cea9af7913204a965fd488637a8d1811bba2e616`
- `Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32` → [Updates: `v2`]

.github/workflows/penpal-release.yml (7)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `cashapp/activate-hermit v1.1.5@cea9af7913204a965fd488637a8d1811bba2e616`
- `Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32` → [Updates: `v2`]
- `actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02` → [Updates: `v7`]
- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093` → [Updates: `v8`]
- `actions/create-github-app-token v1@d72941d797fd3113feb6b93fd0dec494b13a2547` → [Updates: `v3`]

.github/workflows/staged-ci.yml (3)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `cashapp/activate-hermit v1.1.5@cea9af7913204a965fd488637a8d1811bba2e616`
- `Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32` → [Updates: `v2`]

.github/workflows/staged-release.yml (4)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `cashapp/activate-hermit v1.1.5@cea9af7913204a965fd488637a8d1811bba2e616`
- `Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32` → [Updates: `v2`]
- `block/apple-codesign-action v1.1.0@679535d1ab7c5a7c18e6f9afcba3464512cc3dde`

gomod (1)

apps/penpal/go.mod (5)

- `go 1.25.0`
- `github.com/fsnotify/fsnotify v1.9.0` → [Updates: `v1.10.1`]
- `github.com/modelcontextprotocol/go-sdk v1.4.1` → [Updates: `v1.7.0`]
- `github.com/yuin/goldmark v1.8.2` → [Updates: `v1.8.6`, `v2.0.2`]
- `github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc@37449abec8cc`

hermit (1)

bin/hermit (6)

- `go 1.26.4` → [Updates: `1.27.1`]
- `just 1.54.0` → [Updates: `1.58.0`]
- `lefthook 2.1.9` → [Updates: `2.1.12`]
- `node 24.15.0`
- `pnpm 10.33.0` → [Updates: `10.34.5`, `12.4.1`]
- `rustup 1.28.2` → [Updates: `1.29.1`]

npm (7)

apps/differ/package.json (17)

- `@tauri-apps/api ^2.10.0`
- `@lucide/svelte ^1.22.0` → [Updates: `^1.22.0`]
- `@tauri-apps/plugin-store ^2.2.0` → [Updates: `^2.2.0`]
- `marked ^17.0.1` → [Updates: `^17.0.1`, `^18.0.0`]
- `sanitize-html ^2.17.0` → [Updates: `^2.17.0`]
- `shiki ^3.20.0` → [Updates: `^4.0.0`]
- `@sveltejs/vite-plugin-svelte ^6.2.1` → [Updates: `^7.0.0`]
- `@tauri-apps/cli ^2.10.0`
- `@tsconfig/svelte ^5.0.6`
- `@types/node ^24.10.1` → [Updates: `^24.10.1`]
- `@types/sanitize-html ^2.13.0` → [Updates: `^2.13.0`]
- `prettier ^3.7.4` → [Updates: `^3.7.4`]
- `prettier-plugin-svelte ^3.4.1` → [Updates: `^3.4.1`, `^4.0.0`]
- `svelte ^5.46.4` → [Updates: `^5.46.4`]
- `svelte-check ^4.3.4` → [Updates: `^4.3.4`]
- `typescript ~5.9.3` → [Updates: `~7.0.0`]
- `vite ^7.2.4` → [Updates: `^7.2.4`, `^8.0.0`]

apps/penpal/e2e/package.json (1)

- `@playwright/test ^1.58.2` → [Updates: `^1.58.2`]

apps/penpal/frontend/package.json (31)

- `@tauri-apps/api ^2.2.0`
- `@tauri-apps/plugin-shell ^2.3.5` → [Updates: `^2.3.5`]
- `@types/react-syntax-highlighter ^15.5.13`
- `mermaid ^11.12.3` → [Updates: `^11.12.3`, `^12.0.0`]
- `react ^19.0.0` → [Updates: `^19.0.0`]
- `react-dom ^19.0.0` → [Updates: `^19.0.0`]
- `react-markdown ^10.1.0`
- `react-router-dom ^7.1.1` → [Updates: `^7.1.1`]
- `react-syntax-highlighter ^16.1.0`
- `rehype-raw ^7.0.0`
- `remark-gfm ^4.0.1`
- `@tailwindcss/postcss ^4.2.1` → [Updates: `^4.2.1`]
- `@tailwindcss/typography ^0.5.0` → [Updates: `^0.5.0`]
- `@tauri-apps/cli ^2.2.0`
- `@testing-library/jest-dom ^6.0.0` → [Updates: `^7.0.0`]
- `@testing-library/react ^16.0.0` → [Updates: `^16.0.0`]
- `@types/hast ^3.0.4` → [Updates: `^3.0.4`]
- `@types/mdast ^4.0.4`
- `@types/node ^24.11.0` → [Updates: `^24.11.0`]
- `@types/react ^19.0.0` → [Updates: `^19.0.0`]
- `@types/react-dom ^19.0.0` → [Updates: `^19.0.0`]
- `@types/unist ^3.0.3`
- `@vitejs/plugin-react ^5.0.0` → [Updates: `^5.0.0`, `^6.0.0`]
- `eslint ^10.0.0` → [Updates: `^10.0.0`]
- `jsdom ^29.0.0` → [Updates: `^29.0.0`, `^30.0.0`]
- `postcss ^8.4.0` → [Updates: `^8.4.0`]
- `tailwindcss ^4.0.0` → [Updates: `^4.0.0`]
- `typescript ~5.9.0` → [Updates: `~7.0.0`]
- `unist-util-visit ^5.1.0`
- `vite ^7.0.0` → [Updates: `^7.0.0`, `^8.0.0`]
- `vitest ^4.0.0` → [Updates: `^4.0.0`, `^5.0.0`]

apps/staged/package.json (44)

- `@milkdown/crepe ^7.22.1`
- `@milkdown/kit ^7.22.1`
- `@tauri-apps/api ^2.11.1`
- `@tauri-apps/plugin-clipboard-manager ^2.3.2` → [Updates: `^2.3.2`]
- `@tauri-apps/plugin-dialog ^2.7.1` → [Updates: `^2.7.1`]
- `@tauri-apps/plugin-log ^2.9.0` → [Updates: `^2.9.0`]
- `@tauri-apps/plugin-process ^2.3.1`
- `@tauri-apps/plugin-store ^2.4.3` → [Updates: `^2.4.3`]
- `@tauri-apps/plugin-updater ^2.10.1` → [Updates: `^2.10.1`]
- `ansi-to-html ^0.7.2`
- `d3-selection 3.0.0`
- `d3-zoom 3.0.0`
- `idb-keyval ^6.2.6` → [Updates: `^6.2.6`]
- `marked ^18.0.5` → [Updates: `^18.0.5`]
- `pikchr-js 0.1.4`
- `sanitize-html ^2.17.5` → [Updates: `^2.17.5`]
- `shiki ^4.3.0` → [Updates: `^4.3.0`]
- `@fontsource-variable/inter ^5.2.8` → [Updates: `^5.2.8`]
- `@internationalized/date ^3.12.2` → [Updates: `^3.12.2`]
- `@lucide/svelte ^1.22.0` → [Updates: `^1.22.0`]
- `@sveltejs/vite-plugin-svelte ^7.1.2` → [Updates: `^7.1.2`]
- `@tailwindcss/vite ^4.3.2` → [Updates: `^4.3.2`]
- `@tauri-apps/cli ^2.11.4`
- `@tsconfig/svelte ^5.0.8`
- `@types/d3-selection 3.0.11`
- `@types/d3-zoom 3.0.8`
- `@types/node ^24.11.0` → [Updates: `^24.11.0`]
- `bits-ui ^2.18.1` → [Updates: `^2.18.1`]
- `clsx ^2.1.1`
- `fake-indexeddb ^6.2.5`
- `prettier ^3.9.4` → [Updates: `^3.9.4`]
- `prettier-plugin-svelte ^4.1.1`
- `shadcn-svelte ^1.3.0` → [Updates: `^1.3.0`]
- `svelte ^5.56.4` → [Updates: `^5.56.4`]
- `svelte-check ^4.7.1` → [Updates: `^4.7.1`]
- `svelte-sonner ^1.1.1` → [Updates: `^1.1.1`]
- `tailwind-merge ^3.6.0` → [Updates: `^3.6.0`]
- `tailwind-variants ^3.2.2` → [Updates: `^3.2.2`]
- `tailwindcss ^4.3.2` → [Updates: `^4.3.2`]
- `tw-animate-css ^1.4.0`
- `typescript ~6.0.3` → [Updates: `~7.0.0`]
- `vite ^8.1.0` → [Updates: `^8.1.0`]
- `vitest ^4.1.9` → [Updates: `^4.1.9`, `^5.0.0`]
- `ajv 8.18.0` → [Updates: `8.20.0`]

package.json (1)

- `pnpm 10.33.0` → [Updates: `10.34.5`, `12.4.1`]

packages/diff-viewer/package.json (7)

- `svelte ^5.56.4` → [Updates: `^5.56.4`]
- `typescript ~5.9.3` → [Updates: `~7.0.0`]
- `@lucide/svelte >=1.0.0`
- `marked >=12.0.0`
- `sanitize-html >=2.0.0`
- `shiki >=1.0.0`
- `svelte ^5.0.0`

pnpm-workspace.yaml

rust-toolchain (1)

rust-toolchain.toml (1)

- `rust 1.96.1` → [Updates: `1.98.1`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository