Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | `@types/react-native` |  |

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (1)

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>
| Datasource | Package | Last Updated |
|------------|------|-------------|
| npm | [madge](https://redirect.github.com/pahen/madge) | `2024-08-05` |

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): update dependency eslint to v9
- [ ] chore(deps): update dependency eslint-plugin-jsdoc to v62
- [ ] chore(deps): update dependency eslint-plugin-jsdoc to v63
- [ ] chore(deps): update dependency eslint-plugin-jsdoc to v64
- [ ] chore(deps): update dependency lint-staged to v17
- [ ] 🔐 **Create all awaiting schedule PRs at once** 🔐

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update dependency cocoapods to v1.17.0
- [ ] chore(deps): update dependency react-native-dotenv to v4
- [ ] chore(deps): update dependency typescript to v6
- [ ] chore(deps): update github-actions to v7 (`actions/checkout`, `actions/setup-node`)
- [ ] chore(deps): update gradle to v9
- [ ] chore(deps): update npm-dependencies to v10 (`@grafana/eslint-config`, `eslint`, `lerna`)
- [ ] fix(deps): update dependency @react-native-async-storage/async-storage to v2
- [ ] fix(deps): update dependency com.android.tools.build:gradle to v8
- [ ] fix(deps): update dependency com.android.tools.build:gradle to v9
- [ ] fix(deps): update dependency org.jetbrains.kotlin:kotlin-stdlib to v2
- [ ] fix(deps): update dependency react-native-device-info to v13
- [ ] fix(deps): update dependency react-native-device-info to v14
- [ ] fix(deps): update dependency react-native-device-info to v15
- [ ] fix(deps): update npm-dependencies to v3 (`@react-native-async-storage/async-storage`, `prettier`)
- [ ] fix(deps): update npm-dependencies to v7 (`@react-navigation/native`, `@react-navigation/native-stack`, `typescript`)
- [ ] fix(deps): update npm-dependencies to v8 (`@babel/core`, `@babel/preset-env`, `@babel/runtime`)
- [ ] fix(deps): update npm-dependencies to v12 (`@react-native-community/netinfo`, `react-native-device-info`)
- [ ] fix(deps): update protobuf monorepo to v4 (`com.google.protobuf:protobuf-javalite`, `com.google.protobuf:protoc`)
- [ ] chore(deps): lock file maintenance
- [ ] chore(deps): lock file maintenance
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update dependency concurrent-ruby to '>= 1.3.7', '< 1.3.9'
- [ ] chore(deps): update dependency json to v2.21.2
- [ ] chore(deps): update dependency bigdecimal to v4
- [ ] chore(deps): update dependency json to v3
- [ ] chore(deps): update grafana/shared-workflows/create-github-app-token action to v1.0

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(security/high/): update dependency js-yaml to v4.3.2 [security]](../pull/193)
- [ ] [fix(security/high/): update dependency smol-toml to v1.7.1 [security]](../pull/194)
- [ ] [fix(security/medium/packages/react-native/android): update dependency org.jetbrains.kotlin:kotlin-gradle-plugin to v2 [security]](../pull/192)
- [ ] [chore(deps): update patch updates](../pull/167) (`minimatch`, `npm-run-all2`, `react-native-dotenv`, `tar`, `ts-jest`)
- [ ] [chore(deps): update dependency xcodeproj to '< 1.28.2'](../pull/168)
- [ ] [chore(deps): update github-actions](../pull/170) (`actions/setup-node`, `github/codeql-action`)
- [ ] [fix(deps): update dependency androidx.test:core to v1.7.0](../pull/171)
- [ ] [fix(deps): update dependency com.google.protobuf:protobuf-gradle-plugin to v0.10.0](../pull/172)
- [ ] [fix(deps): update dependency org.jetbrains.kotlin:kotlin-stdlib to v1.9.25](../pull/174)
- [ ] [fix(deps): update dependency org.robolectric:robolectric to v4.17](../pull/173)
- [ ] [fix(deps): update npm-dependencies](../pull/175) (`@grafana/faro-core`, `@opentelemetry/core`, `@opentelemetry/instrumentation`, `@opentelemetry/instrumentation-fetch`, `@opentelemetry/instrumentation-xml-http-request`, `@opentelemetry/otlp-transformer`, `@opentelemetry/resources`, `@opentelemetry/sdk-trace-base`, `@opentelemetry/sdk-trace-web`, `@react-native-community/cli`, `@react-native-community/cli-platform-android`, `@react-native-community/cli-platform-ios`, `@react-native/babel-preset`, `@react-native/codegen`, `@react-native/eslint-config`, `@react-native/gradle-plugin`, `@react-native/jest-preset`, `@react-native/metro-config`, `@react-native/new-app-screen`, `@react-native/typescript-config`, `@types/node`, `@types/react`, `@types/react-test-renderer`, `@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`, `@ungap/structured-clone`, `axios`, `jest`, `jest-environment-jsdom`, `markdownlint`, `prettier`, `react`, `react-native`, `react-native-nitro-modules`, `react-native-safe-area-context`, `react-native-screens`, `react-test-renderer`, `yarn`)
- [ ] [chore(deps): update actions/dependency-review-action action to v5](../pull/176)
- [ ] [chore(deps): update dependency activesupport to v8](../pull/178)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Vulnerabilities

> [!IMPORTANT]
> `3`/`3` CVEs have Renovate fixes.

gradle

packages/react-native/android/build.gradle

org.jetbrains.kotlin:kotlin-gradle-plugin

- [GHSA-r937-wjx7-w2jp](https://osv.dev/vulnerability/GHSA-r937-wjx7-w2jp) (fixed in [2.4.20-Beta1,))

npm

package.json

js-yaml

- [GHSA-2883-xcg3-v3hh](https://osv.dev/vulnerability/GHSA-2883-xcg3-v3hh) (fixed in >= 4.3.2)

smol-toml

- [GHSA-7w5x-hrqm-74c2](https://osv.dev/vulnerability/GHSA-7w5x-hrqm-74c2) (fixed in >= 1.7.1)

## Detected Dependencies

bundler (1)

demo/Gemfile (10)

- `ruby >= 2.7`
- `cocoapods '>= 1.13', '!= 1.15.0'` → [Updates: `'>= 1.13', '!= 1.15.0'`]
- `activesupport '>= 6.1.7.5', '!= 7.1.0'` → [Updates: `'>= 6.1.7.5', '!= 7.1.0'`]
- `xcodeproj '< 1.27.1'` → [Updates: `'< 1.28.2'`]
- `concurrent-ruby '>= 1.3.7', '< 1.3.8'` → [Updates: `'>= 1.3.7', '< 1.3.9'`]
- `json '2.19.9'` → [Updates: `'2.21.2'`, `'3.0.2'`]
- `bigdecimal lock file @ 3.3.1` → [Updates: `undefined`]
- `logger lock file @ 1.7.0`
- `benchmark lock file @ 0.5.0`
- `mutex_m lock file @ 0.3.0`

cocoapods (1)

demo/ios/Podfile

github-actions (4)

.github/workflows/codeql.yml (3)

- `actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7.0.1`]
- `github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa` → [Updates: `v4.38.0`]
- `github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa` → [Updates: `v4.38.0`]

.github/workflows/dependency-review.yml (2)

- `actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7.0.1`]
- `actions/dependency-review-action v4.9.0@2031cfc080254a8a887f58cffee85186f0e49e48` → [Updates: `v5.0.0`]

.github/workflows/pull-request.yml (2)

- `actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7.0.1`]
- `actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e` → [Updates: `v6.5.0`, `v7.0.0`]

.github/workflows/release-please.yml (8)

- `grafana/shared-workflows create-github-app-token/v0.3.1@46f48da11e78ebdba7a8747ae456b11062fac83e` → [Updates: `create-github-app-token/v1.0`]
- `grafana/shared-workflows create-github-app-token/v0.3.1@46f48da11e78ebdba7a8747ae456b11062fac83e` → [Updates: `create-github-app-token/v1.0`]
- `actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7.0.1`]
- `actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e` → [Updates: `v6.5.0`, `v7.0.0`]
- `actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7.0.1`]
- `actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e` → [Updates: `v6.5.0`, `v7.0.0`]
- `actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7.0.1`]
- `actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e` → [Updates: `v6.5.0`, `v7.0.0`]

gradle (5)

demo/android/app/build.gradle (1)

- `io.github.react-native-community:jsc-android 2026004.+`

demo/android/build.gradle

demo/android/gradle.properties

demo/android/settings.gradle

packages/react-native/android/build.gradle (9)

- `com.android.tools.build:gradle 7.4.2` → [Updates: `8.13.2`, `9.4.0`]
- `org.jetbrains.kotlin:kotlin-gradle-plugin 1.8.0` → [Updates: `2.4.20`]
- `com.google.protobuf:protobuf-gradle-plugin 0.9.4` → [Updates: `0.10.0`]
- `com.google.protobuf:protoc 3.25.9` → [Updates: `4.36.1`]
- `org.jetbrains.kotlin:kotlin-stdlib 1.8.0` → [Updates: `1.9.25`, `2.4.20`]
- `com.google.protobuf:protobuf-javalite 3.25.9` → [Updates: `4.36.1`]
- `junit:junit 4.13.2`
- `org.robolectric:robolectric 4.11.1` → [Updates: `4.17`]
- `androidx.test:core 1.5.0` → [Updates: `1.7.0`]

gradle-wrapper (1)

demo/android/gradle/wrapper/gradle-wrapper.properties (1)

- `gradle 8.14.5` → [Updates: `9.7.1`]

npm (5)

demo/package.json (32)

- `@babel/runtime ^7.28.4` → [Updates: `^8.0.0`]
- `@react-native-async-storage/async-storage ^1.21.0` → [Updates: `^2.0.0`, `^3.0.0`]
- `@react-native-community/netinfo ^11.4.1` → [Updates: `^12.0.0`]
- `@react-native/new-app-screen 0.85.3` → [Updates: `0.87.1`]
- `@react-navigation/native ^6.1.18` → [Updates: `^7.0.0`]
- `@react-navigation/native-stack ^6.11.0` → [Updates: `^7.0.0`]
- `react 19.2.3` → [Updates: `19.3.0`]
- `react-native 0.85.3` → [Updates: `0.87.1`]
- `react-native-device-info ^11.1.0` → [Updates: `^12.0.0`, `^13.0.0`, `^14.0.0`, `^15.0.0`]
- `react-native-mmkv 4.3.2`
- `react-native-nitro-modules 0.36.1` → [Updates: `0.37.1`]
- `react-native-safe-area-context ^5.5.2` → [Updates: `^5.5.2`]
- `react-native-screens ^4.19.0` → [Updates: `^4.19.0`]
- `@babel/core 7.29.7` → [Updates: `8.0.5`]
- `@babel/preset-env 7.29.7` → [Updates: `8.0.5`]
- `@react-native-community/cli 20.1.3` → [Updates: `20.2.0`]
- `@react-native-community/cli-platform-android 20.1.3` → [Updates: `20.2.0`]
- `@react-native-community/cli-platform-ios 20.1.3` → [Updates: `20.2.0`]
- `@react-native/babel-preset 0.85.3` → [Updates: `0.87.1`]
- `@react-native/codegen 0.85.3` → [Updates: `0.87.1`]
- `@react-native/eslint-config 0.85.3` → [Updates: `0.87.1`]
- `@react-native/gradle-plugin 0.85.3` → [Updates: `0.87.1`]
- `@react-native/metro-config 0.85.3` → [Updates: `0.87.1`]
- `@react-native/typescript-config 0.85.3` → [Updates: `0.87.1`]
- `@types/react 19.2.18` → [Updates: `19.3.0`]
- `@types/react-test-renderer 19.1.0` → [Updates: `19.3.0`]
- `eslint 8.57.1` → [Updates: `9.39.5`, `10.10.0`]
- `prettier 2.8.8` → [Updates: `3.9.6`]
- `react-native-dotenv 3.4.11` → [Updates: `3.4.12`, `4.1.1`]
- `react-test-renderer 19.2.3` → [Updates: `19.3.0`]
- `typescript 5.9.3` → [Updates: `6.0.3`, `7.0.2`]
- `node >=20.19.4`

package.json (46)

- `@grafana/eslint-config 9.0.0` → [Updates: `10.0.0`]
- `@react-native/jest-preset 0.85.3` → [Updates: `0.87.1`]
- `@stylistic/eslint-plugin-ts 4.4.1`
- `@types/jest 30.0.0`
- `@typescript-eslint/eslint-plugin 8.63.0` → [Updates: `8.70.0`]
- `@typescript-eslint/parser 8.63.0` → [Updates: `8.70.0`]
- `eslint 9.39.5` → [Updates: `10.10.0`]
- `eslint-config-prettier 10.1.8`
- `eslint-plugin-import 2.32.0`
- `eslint-plugin-jsdoc 61.7.1` → [Updates: `62.9.0`, `63.3.3`, `64.3.10`]
- `eslint-plugin-no-only-tests 3.4.0`
- `eslint-plugin-prettier 5.5.6`
- `eslint-plugin-react 7.37.5`
- `eslint-plugin-react-hooks 7.1.1`
- `husky 9.1.7`
- `jest 30.4.2` → [Updates: `30.5.1`]
- `jest-environment-jsdom 30.4.1` → [Updates: `30.5.1`]
- `lerna 9.0.7` → [Updates: `10.0.1`]
- `lint-staged 16.4.0` → [Updates: `17.5.1`]
- `madge 8.0.0`
- `markdownlint 0.40.0` → [Updates: `0.41.1`]
- `markdownlint-cli 0.49.1`
- `npm-run-all2 9.0.2` → [Updates: `9.0.3`]
- `prettier 3.7.4` → [Updates: `3.9.6`]
- `react-native 0.85.3` → [Updates: `0.87.1`]
- `rimraf 6.1.3`
- `ts-jest 29.4.11` → [Updates: `29.4.12`]
- `ts-node 10.9.2`
- `typescript 5.9.3` → [Updates: `6.0.3`, `7.0.2`]
- `node >=24.5.0`
- `@react-native/babel-preset 0.85.3` → [Updates: `0.87.1`]
- `@react-native/codegen 0.85.3` → [Updates: `0.87.1`]
- `@react-native/eslint-config 0.85.3` → [Updates: `0.87.1`]
- `@react-native/gradle-plugin 0.85.3` → [Updates: `0.87.1`]
- `@react-native/jest-preset 0.85.3` → [Updates: `0.87.1`]
- `@react-native/metro-config 0.85.3` → [Updates: `0.87.1`]
- `@react-native/typescript-config 0.85.3` → [Updates: `0.87.1`]
- `react 19.2.3` → [Updates: `19.3.0`]
- `react-test-renderer 19.2.3` → [Updates: `19.3.0`]
- `axios 1.18.0` → [Updates: `1.20.0`]
- `@ungap/structured-clone 1.3.3` → [Updates: `1.4.0`]
- `js-yaml 4.3.1` → [Updates: `4.3.2`]
- `tar 7.5.21` → [Updates: `7.5.22`]
- `minimatch 10.2.5` → [Updates: `10.2.6`]
- `smol-toml 1.6.1` → [Updates: `1.7.1`]
- `yarn 4.14.1` → [Updates: `4.18.0`]

packages/react-native-tracing/package.json (14)

- `@grafana/faro-core ^2.8.2` → [Updates: `^2.8.2`]
- `@opentelemetry/api ^1.9.0`
- `@opentelemetry/core ^2.9.0` → [Updates: `^2.9.0`]
- `@opentelemetry/instrumentation ^0.220.0` → [Updates: `^0.222.0`]
- `@opentelemetry/instrumentation-fetch ^0.220.0` → [Updates: `^0.222.0`]
- `@opentelemetry/instrumentation-xml-http-request ^0.220.0` → [Updates: `^0.222.0`]
- `@opentelemetry/otlp-transformer ^0.220.0` → [Updates: `^0.222.0`]
- `@opentelemetry/resources ^2.9.0` → [Updates: `^2.9.0`]
- `@opentelemetry/sdk-trace-base ^2.9.0` → [Updates: `^2.9.0`]
- `@opentelemetry/sdk-trace-web ^2.9.0` → [Updates: `^2.9.0`]
- `@opentelemetry/semantic-conventions ^1.43.0`
- `@types/node 24.12.4` → [Updates: `24.13.4`]
- `@types/react-native 0.73.0`
- `react-native >=0.70.0`

packages/react-native/package.json (14)

- `@grafana/faro-core ^2.8.2` → [Updates: `^2.8.2`]
- `@react-native-async-storage/async-storage ^1.21.0` → [Updates: `^2.0.0`, `^3.0.0`]
- `react-native-device-info ^11.1.0` → [Updates: `^12.0.0`, `^13.0.0`, `^14.0.0`, `^15.0.0`]
- `@types/node 24.12.4` → [Updates: `24.13.4`]
- `@types/react 19.2.18` → [Updates: `19.3.0`]
- `@types/react-native 0.73.0`
- `@types/react-test-renderer 19.1.0` → [Updates: `19.3.0`]
- `react-native-mmkv 4.3.2`
- `react-native-nitro-modules 0.36.1` → [Updates: `0.37.1`]
- `react-test-renderer 19.2.3` → [Updates: `19.3.0`]
- `@react-navigation/native >=6.0.0`
- `react >=18.0.0`
- `react-native >=0.70.0`
- `react-native-mmkv >=2.0.0`

packages/test-utils/package.json (1)

- `@grafana/faro-core ^2.8.2` → [Updates: `^2.8.2`]

nvm (1)

.nvmrc (1)

- `node 24`

---
## Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.