Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (3)

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>
| Datasource | Package | Last Updated |
|------------|------|-------------|
| npm | [@types/webpack-bundle-analyzer](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped) | `2024-02-07` |
| npm | [clsx](https://redirect.github.com/lukeed/clsx) | `2024-04-23` |
| npm | [vite-plugin-externals](https://redirect.github.com/crcong/vite-plugin-externals) | `2023-01-30` |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update dependency typescript to v5.9.3
- [ ] chore(deps): update dependency typescript-eslint to v8.70.0
- [ ] chore(deps): update dependency vite-bundle-analyzer to v1.3.9
- [ ] chore(deps): update dependency webpack to v5.110.3
- [ ] chore(deps): update eslint monorepo to v9.39.5 (`@eslint/js`, `eslint`)
- [ ] chore(deps): update vitest monorepo to v3.2.7 (`@vitest/coverage-v8`, `@vitest/ui`)
- [ ] chore(deps): update babel monorepo to v8 (`@babel/preset-env`, `@babel/preset-react`, `@babel/preset-typescript`)
- [ ] chore(deps): update dependency @testing-library/jest-dom to v7
- [ ] chore(deps): update dependency @vitejs/plugin-react to v6
- [ ] chore(deps): update dependency @vitejs/plugin-react-swc to v4
- [ ] chore(deps): update dependency babel-loader to v10
- [ ] chore(deps): update dependency cross-env to v10
- [ ] chore(deps): update dependency glob to v13
- [ ] chore(deps): update dependency globals to v17
- [ ] chore(deps): update dependency jsdom to v30
- [ ] chore(deps): update dependency stylelint to v17
- [ ] chore(deps): update dependency stylelint-config-standard to v40
- [ ] chore(deps): update dependency typescript to v7
- [ ] chore(deps): update dependency vite-plugin-css-injected-by-js to v5
- [ ] chore(deps): update dependency vite-plugin-dts to v5
- [ ] chore(deps): update dependency webpack-bundle-analyzer to v5
- [ ] chore(deps): update dependency webpack-cli to v7
- [ ] chore(deps): update eslint monorepo to v10 (`@eslint/js`, `eslint`)
- [ ] chore(deps): update vitest monorepo to v5 (`@vitest/coverage-v8`, `@vitest/ui`)
- [ ] fix(deps): update react monorepo (major) (`@types/react`, `@types/react-dom`, `eslint-plugin-react-hooks`, `react`, `react-dom`, `react-test-renderer`)
- [ ] chore(deps): lock file maintenance
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(security/high/): update dependency vite to v7.3.5 [security]](../pull/78)
- [ ] [fix(security/high/examples): update dependency immutable to v5.1.8 [security]](../pull/80)
- [ ] [fix(security/medium/examples): update dependency webpack-dev-server to v5.2.6 [security]](../pull/67)
- [ ] [fix(security/low/examples): update dependency @babel/core to v7.29.6 [security]](../pull/79)
- [ ] [fix(security/critical/): update dependency vitest to v4 [security]](../pull/81)
- [ ] [chore(deps): update dependency html-webpack-plugin to v5.6.8](../pull/72)
- [ ] [chore(deps): update testing-library monorepo](../pull/69) (`@testing-library/dom`, `@testing-library/react`)
- [ ] [chore(deps): update babel monorepo to v7.29.7](../pull/70) (`@babel/preset-env`, `@babel/preset-react`, `@babel/preset-typescript`)
- [ ] [chore(deps): update dependency @types/node to v22.20.2](../pull/82)
- [ ] [chore(deps): update dependency autoprefixer to v10.6.0](../pull/76)
- [ ] [chore(deps): update dependency eslint-plugin-react-refresh to v0.5.6](../pull/83)
- [ ] [chore(deps): update dependency prettier to v3.9.6](../pull/84)
- [ ] [chore(deps): update dependency sass-embedded to v1.104.1](../pull/71)
- [ ] [chore(deps): update dependency terser to v5.51.2](../pull/85)
- [ ] [chore(deps): update react monorepo](../pull/75)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [chore(deps): update dependency @vitejs/plugin-react to v4.7.0](../pull/50)
- [ ] [chore(deps): update dependency fork-ts-checker-webpack-plugin to v9.1.0](../pull/55)
- [ ] [chore(deps): update dependency globals to v16.5.0](../pull/56)
- [ ] [chore(deps): update dependency jsdom to v26.1.0](../pull/57)
- [ ] [chore(deps): update dependency stylelint to v16.26.1](../pull/60)

## Vulnerabilities

> [!IMPORTANT]
> `11`/`11` CVEs have Renovate fixes.

npm

examples/package.json

immutable

- [GHSA-v56q-mh7h-f735](https://osv.dev/vulnerability/GHSA-v56q-mh7h-f735) (fixed in >= 5.1.8)
- [GHSA-xvcm-6775-5m9r](https://osv.dev/vulnerability/GHSA-xvcm-6775-5m9r) (fixed in >= 5.1.8)

@babel/core

- [GHSA-4x5r-pxfx-6jf8](https://osv.dev/vulnerability/GHSA-4x5r-pxfx-6jf8) (fixed in >= 7.29.6)

webpack-dev-server

- [GHSA-79cf-xcqc-c78w](https://osv.dev/vulnerability/GHSA-79cf-xcqc-c78w) (fixed in >= 5.2.4)
- [GHSA-f5vj-f2hx-8m93](https://osv.dev/vulnerability/GHSA-f5vj-f2hx-8m93) (fixed in >= 5.2.6)
- [GHSA-m28w-2pqf-7qgj](https://osv.dev/vulnerability/GHSA-m28w-2pqf-7qgj) (fixed in >= 5.2.6)
- [GHSA-mx8g-39q3-5c79](https://osv.dev/vulnerability/GHSA-mx8g-39q3-5c79) (fixed in >= 5.2.5)

package.json

vite

- [GHSA-fx2h-pf6j-xcff](https://osv.dev/vulnerability/GHSA-fx2h-pf6j-xcff) (fixed in >= 7.3.5)
- [GHSA-v6wh-96g9-6wx3](https://osv.dev/vulnerability/GHSA-v6wh-96g9-6wx3) (fixed in >= 7.3.5)

vitest

- [GHSA-5xrq-8626-4rwp](https://osv.dev/vulnerability/GHSA-5xrq-8626-4rwp) (fixed in >= 3.2.6)
- [GHSA-82fw-gwwq-j7x9](https://osv.dev/vulnerability/GHSA-82fw-gwwq-j7x9) (fixed in >= 4.1.11)

## Detected Dependencies

npm (2)

examples/package.json (21)

- `immutable ^5.0.0` → [Updates: `^5.0.0`]
- `react ^18.3.1` → [Updates: `^19.0.0`]
- `react-dom ^18.3.1` → [Updates: `^19.0.0`]
- `@babel/core 7.28.5` → [Updates: `7.29.6`]
- `@babel/preset-env 7.28.5` → [Updates: `7.29.7`, `8.0.5`]
- `@babel/preset-react 7.28.5` → [Updates: `7.29.7`, `8.0.1`]
- `@babel/preset-typescript 7.28.5` → [Updates: `7.29.7`, `8.0.1`]
- `@types/node 22.13.9` → [Updates: `22.20.2`]
- `@types/react 18.3.27` → [Updates: `18.3.31`, `19.3.0`]
- `@types/react-dom 18.3.7` → [Updates: `19.3.0`]
- `@types/webpack-bundle-analyzer 4.7.0`
- `babel-loader 9.2.1` → [Updates: `10.1.1`]
- `cross-env 7.0.3` → [Updates: `10.1.0`]
- `fork-ts-checker-webpack-plugin 9.0.2` → [Updates: `9.1.0`]
- `html-webpack-plugin 5.6.5` → [Updates: `5.6.8`]
- `ts-node 10.9.2`
- `typescript 5.7.3` → [Updates: `5.9.3`, `7.0.2`]
- `webpack 5.104.1` → [Updates: `5.110.3`]
- `webpack-bundle-analyzer 4.10.2` → [Updates: `5.3.3`]
- `webpack-cli 6.0.1` → [Updates: `7.2.3`]
- `webpack-dev-server 5.2.2` → [Updates: `5.2.6`]

package.json (40)

- `@eslint/js 9.21.0` → [Updates: `9.39.5`, `10.0.1`]
- `@mdx-js/rollup 3.1.1`
- `@testing-library/dom 10.4.1` → [Updates: `10.4.2`]
- `@testing-library/jest-dom 6.9.1` → [Updates: `7.0.1`]
- `@testing-library/react 16.3.1` → [Updates: `16.3.3`]
- `@types/node 22.13.8` → [Updates: `22.20.2`]
- `@types/react 19.2.8` → [Updates: `19.3.0`]
- `@vitejs/plugin-react 4.3.4` → [Updates: `4.7.0`, `6.1.1`]
- `@vitejs/plugin-react-swc 3.11.0` → [Updates: `4.3.3`]
- `@vitest/coverage-v8 3.0.7` → [Updates: `3.2.7`, `5.0.0`]
- `@vitest/ui 3.0.7` → [Updates: `3.2.7`, `5.0.0`]
- `autoprefixer 10.4.23` → [Updates: `10.6.0`]
- `clsx 2.1.1`
- `eslint 9.26.0` → [Updates: `9.39.5`, `10.10.0`]
- `eslint-config-prettier 10.1.8`
- `eslint-plugin-react-hooks 5.2.0` → [Updates: `7.1.1`]
- `eslint-plugin-react-refresh 0.4.19` → [Updates: `0.5.6`]
- `glob 11.1.0` → [Updates: `13.0.6`]
- `globals 16.0.0` → [Updates: `16.5.0`, `17.12.0`]
- `husky 9.1.7`
- `jsdom 26.0.0` → [Updates: `26.1.0`, `30.0.1`]
- `prettier 3.5.2` → [Updates: `3.9.6`]
- `react 18.3.1` → [Updates: `19.3.0`]
- `react-dom 18.3.1` → [Updates: `19.3.0`]
- `react-test-renderer 18.3.1` → [Updates: `19.3.0`]
- `sass-embedded 1.85.1` → [Updates: `1.104.1`]
- `stylelint 16.15.0` → [Updates: `16.26.1`, `17.15.0`]
- `stylelint-config-standard 37.0.0` → [Updates: `40.0.0`]
- `terser 5.39.0` → [Updates: `5.51.2`]
- `typescript 5.7.3` → [Updates: `5.9.3`, `7.0.2`]
- `typescript-eslint 8.25.0` → [Updates: `8.70.0`]
- `vite 7.3.2` → [Updates: `7.3.5`]
- `vite-bundle-analyzer 1.2.3` → [Updates: `1.3.9`]
- `vite-plugin-css-injected-by-js 3.5.2` → [Updates: `5.0.2`]
- `vite-plugin-dts 4.5.4` → [Updates: `5.1.0`]
- `vite-plugin-externals 0.6.2`
- `vite-plugin-lib-inject-css 2.2.2`
- `vitest 3.0.7` → [Updates: `4.1.11`]
- `react ^19.2.4`
- `react-dom ^19.2.4`

---
## Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.