Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): lock file maintenance

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] fix(deps): update dependency zod to v4

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(security/high/): update pnpm to v11.11.0 [security]](../pull/34)
- [ ] [fix(security/low/): update dependency tsup to v8.3.5 [security]](../pull/28)
- [ ] [chore(deps): update dependency size-limit to v8.2.6](../pull/44)
- [ ] [chore(deps): update dependency @types/node to v20.19.43](../pull/19)
- [ ] [chore(deps): update dependency prettier to v3.9.6](../pull/38)
- [ ] [chore(deps): update dependency tslib to v2.8.1](../pull/21)
- [ ] [chore(deps): update dependency zod to v3.25.76](../pull/23)
- [ ] [chore(deps): update actions/cache action to v6](../pull/35)
- [ ] [chore(deps): update actions/checkout action to v7](../pull/39)
- [ ] [chore(deps): update dependency @types/node to v22](../pull/47)
- [ ] [chore(deps): update dependency husky to v9](../pull/48)
- [ ] [chore(deps): update dependency typescript to v7](../pull/49)
- [ ] [chore(deps): update size-limit monorepo to v13](../pull/51) (`@size-limit/preset-small-lib`, `size-limit`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Vulnerabilities

> [!IMPORTANT]
> `19`/`19` CVEs have Renovate fixes.

npm

package.json

tsup

- [GHSA-3mv9-4h5g-vhg3](https://osv.dev/vulnerability/GHSA-3mv9-4h5g-vhg3) (fixed in > 8.3.4)

pnpm

- [GHSA-3qhv-2rgh-x77r](https://osv.dev/vulnerability/GHSA-3qhv-2rgh-x77r) (fixed in >= 11.5.3)
- [GHSA-4gxm-v5v7-fqc4](https://osv.dev/vulnerability/GHSA-4gxm-v5v7-fqc4) (fixed in >= 11.5.3)
- [GHSA-54hh-g5mx-jqcp](https://osv.dev/vulnerability/GHSA-54hh-g5mx-jqcp) (fixed in >= 11.4.0)
- [GHSA-5wx6-mg75-v57r](https://osv.dev/vulnerability/GHSA-5wx6-mg75-v57r) (fixed in >= 11.5.3)
- [GHSA-72r4-9c5j-mj57](https://osv.dev/vulnerability/GHSA-72r4-9c5j-mj57) (fixed in >= 11.7.0)
- [GHSA-c59q-g84q-2gj5](https://osv.dev/vulnerability/GHSA-c59q-g84q-2gj5) (fixed in >= 11.11.0)
- [GHSA-cjhr-43r9-cfmw](https://osv.dev/vulnerability/GHSA-cjhr-43r9-cfmw) (fixed in >= 11.4.0)
- [GHSA-fr4h-3cph-29xv](https://osv.dev/vulnerability/GHSA-fr4h-3cph-29xv) (fixed in >= 11.7.0)
- [GHSA-gj8w-mvpf-x27x](https://osv.dev/vulnerability/GHSA-gj8w-mvpf-x27x) (fixed in >= 11.5.3)
- [GHSA-hwx4-2j3j-g496](https://osv.dev/vulnerability/GHSA-hwx4-2j3j-g496) (fixed in >= 11.4.0)
- [GHSA-p4xf-rf54-rj3x](https://osv.dev/vulnerability/GHSA-p4xf-rf54-rj3x) (fixed in >= 11.4.0)
- [GHSA-q6j5-fjx5-2mc3](https://osv.dev/vulnerability/GHSA-q6j5-fjx5-2mc3) (fixed in >= 11.4.0)
- [GHSA-qrv3-253h-g69c](https://osv.dev/vulnerability/GHSA-qrv3-253h-g69c) (fixed in >= 11.8.0)
- [GHSA-rxhj-4m44-96r4](https://osv.dev/vulnerability/GHSA-rxhj-4m44-96r4) (fixed in >= 11.4.0)
- [GHSA-v23m-ccfg-pq9h](https://osv.dev/vulnerability/GHSA-v23m-ccfg-pq9h) (fixed in >= 11.5.3)
- [GHSA-vq4v-j7r6-jq4m](https://osv.dev/vulnerability/GHSA-vq4v-j7r6-jq4m) (fixed in >= 11.11.0)
- [GHSA-vx52-2968-3vc6](https://osv.dev/vulnerability/GHSA-vx52-2968-3vc6) (fixed in >= 11.11.0)
- [GHSA-w466-c33r-3gjp](https://osv.dev/vulnerability/GHSA-w466-c33r-3gjp) (fixed in >= 11.5.3)

## Detected Dependencies

github-actions (1)

.github/workflows/main.yml (4)

- `actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262` → [Updates: `v7.0.1`]
- `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020`
- `actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830` → [Updates: `v6.1.0`]
- `node ${{ matrix.node }}`

npm (1)

package.json (11)

- `zod ^3.23` → [Updates: `^3.23`, `^4.0.0`]
- `@size-limit/preset-small-lib 8.2.6` → [Updates: `13.1.1`]
- `@types/node 20.14.2` → [Updates: `20.19.43`, `22.20.2`]
- `husky 8.0.3` → [Updates: `9.1.7`]
- `prettier 3.0.3` → [Updates: `3.9.6`]
- `size-limit 8.2.4` → [Updates: `8.2.6`, `13.1.1`]
- `tslib 2.5.2` → [Updates: `2.8.1`]
- `tsup ^8.0.2` → [Updates: `^8.0.2`]
- `typescript 5.9.3` → [Updates: `7.0.2`]
- `node >=20`
- `pnpm 11.3.0` → [Updates: `11.11.0`]

---
## Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.