Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update dependency @babel/core to v7.29.7
• Update dependency @tanstack/react-query to v5.102.8
• Update dependency @types/react-dom to v19.2.7
• Update testing-library monorepo (@testing-library/react, @testing-library/user-event)
• Update all non-major dependencies (@agentclientprotocol/sdk, @biomejs/biome, @hono/node-server, @modelcontextprotocol/ext-apps, @rive-app/react-webgl2, @tauri-apps/plugin-clipboard-manager, @tauri-apps/plugin-deep-link, @tauri-apps/plugin-dialog, @tauri-apps/plugin-notification, @tauri-apps/plugin-opener, @tauri-apps/plugin-updater, @types/node, @vitejs/plugin-react, @xyflow/react, actions/cache, ai, base64, cc, defu, docker/dockerfile, dompurify, earshot, express-rate-limit, fast-uri, flate2, flatted, hono, i18next, indexmap, infer, ip-address, log, mermaid, motion, node, ort, ort-sys, picomatch, pnpm, postcss, python, qs, react-doctor, react-hook-form, react-i18next, reqwest, rust, sha2, sherpa-onnx, sqlx, swift-rs, sysinfo, taiki-e/install-action, tokenizers, tokio-tungstenite, tsx, uuid, which, windows-sys, ws, yaml_serde, zod)
• Update dependency lucide-react to v1.40.0
• Update opentelemetry-js monorepo (@opentelemetry/api-logs, @opentelemetry/core, @opentelemetry/otlp-transformer, @opentelemetry/resources, @opentelemetry/sdk-logs)
• Update actions/cache action to v6
• Update actions/checkout action to v7
• Update actions/github-script action to v9
• Update actions/setup-node action to v7
• Update dependency @agentclientprotocol/sdk to v1
• Update dependency @asamuzakjp/css-color to v7
• Update dependency @babel/core to v8
• Update dependency @modelcontextprotocol/ext-apps to v1
• Update dependency fast-uri to v4
• Update dependency js-yaml to v5
• Update dependency jsdom to v30
• Update dependency linkify-it to v6
• Update dependency shiki to v4
• Update dependency typescript to v7
• Update dependency uuid to v14
• Update dependency vitest to v5
• Update Node.js to v24
• Update pnpm to v12
• Update Rust crate audioadapter-buffers to v5
• Update Rust crate keyring to v4
• Update Rust crate rubato to v5
• Update Rust crate zip to v8
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update doctor digest to a48711e
• Update dependency @playwright/test to v1.63.0
• Update Rust crate dirs to v7

---

Warning

Renovate failed to look up the following dependencies: Failed to look up hermit package schema-registry: no-result.

Files affected: bb-cli/bin/hermit

---

Detected Dependencies

cargo (9)

bb-cli/Cargo.toml (22)

• anyhow 1
• clap 4.5
• clap_complete 4.5
• pbjson 0.9
• pbjson-types 0.9
• prost 0.14
• prost-types 0.14
• reqwest 0.12 → [Updates: 0.13]
• serde 1
• serde_json 1
• serde_yaml 0.9
• sha2 0.10 → [Updates: 0.11]
• tiny_http 0.12
• tonic 0.14
• tonic-prost 0.14
• url 2.5
• webbrowser 1.0
• zip 4 → [Updates: 8]
• tempfile 3
• pbjson-build 0.9
• protoc-bin-vendored 3
• tonic-prost-build 0.14

crates/builderbot-auth/Cargo.toml (9)

• anyhow 1
• reqwest 0.12 → [Updates: 0.13]
• serde 1
• serde_json 1
• serde_yaml 0.9
• sha2 0.10 → [Updates: 0.11]
• url 2.5
• core-foundation 0.10
• security-framework-sys 2.14

scripts/release/updater-signature-verifier/Cargo.toml (2)

• base64 0.22 → [Updates: 0.23]
• minisign-verify 0.2.5

src-tauri/Cargo.toml (67)

• anyhow 1
• base64 0.22 → [Updates: 0.23]
• bytes 1
• chrono 0.4
• dirs 6.0.0 → [Updates: 7.0.0]
• dunce 1
• doctor 73ff9a0521dcc784c9514911a655187e5dd3b6ca → [Updates: ``]
• etcetera 0.11.0
• flate2 1 → [Updates: 1]
• tempfile 3
• hex 0.4
• ignore 0.4.25
• fern 0.7
• infer 0.19.0 → [Updates: 0.22.0]
• libc 0.2
• log 0.4.29 → [Updates: 0.4.29]
• mime_guess 2
• futures-util 0.3
• nucleo-matcher 0.3
• percent-encoding 2
• minisign-verify 0.2.5
• plist 1
• portable-pty 0.9.0
• reqwest 0.13.3
• rodio 0.22
• tar 0.4
• semver 1
• serde 1
• serde_json 1
• yaml_serde 0.10.4 → [Updates: 0.10.4]
• sha2 0.10 → [Updates: 0.11]
• sqlx 0.8 → [Updates: 0.9]
• sysinfo 0.33 → [Updates: 0.39]
• tauri 2
• toml 1.1.4 → [Updates: 1.1.4]
• tauri-plugin-clipboard-manager 2 → [Updates: 2]
• tauri-plugin-deep-link 2 → [Updates: 2]
• tauri-plugin-notification 2 → [Updates: 2]
• tauri-plugin-dialog 2 → [Updates: 2]
• tauri-plugin-log 2 → [Updates: 2]
• tauri-plugin-opener 2 → [Updates: 2]
• tauri-plugin-process 2
• tauri-plugin-shell 2 → [Updates: 2]
• tauri-plugin-single-instance 2 → [Updates: 2]
• tauri-plugin-updater 2 → [Updates: 2]
• tauri-plugin-window-state 2
• time 0.3
• tokio 1.50.0
• url 2
• uuid 1 → [Updates: 1]
• zip 2 → [Updates: 8]
• which 8 → [Updates: 8]
• tauri-build 2
• block2 0.6
• coreaudio-rs 0.14.2
• keyring 3.6.3 → [Updates: 4.0.0]
• objc2 0.6
• objc2-app-kit 0.3.2
• objc2-avf-audio 0.3.2
• objc2-core-audio 0.3.2
• objc2-foundation 0.3.2
• objc2-user-notifications 0.3.2
• rodio 0.22
• swift-rs 1.0.7 → [Updates: 1.0.7]
• keyring 3.6.3 → [Updates: 4.0.0]
• windows-sys 0.59 → [Updates: 0.61]
• keyring 3.6.3 → [Updates: 4.0.0]

src-tauri/crates/berd-monitor/Cargo.toml (4)

• clap 4
• fs2 0.4
• libc 0.2
• windows-sys 0.59 → [Updates: 0.61]

src-tauri/crates/berd-voice/Cargo.toml (29)

• audioadapter-buffers 3.0 → [Updates: 5.0]
• base64 0.22 → [Updates: 0.23]
• bzip2 0.6
• claxon 0.4.3
• earshot 1.0 → [Updates: 1.0]
• fs2 0.4
• futures-util 0.3
• hound 3.5
• libc 0.2
• ort =2.0.0-rc.12 → [Updates: =2.0.0-rc.13]
• ort-sys =2.0.0-rc.12 → [Updates: =2.0.0-rc.13]
• rand 0.10
• reqwest 0.13.3
• rubato 3.0 → [Updates: 5.0]
• rustls 0.23
• sentencepiece-model 0.1
• serde 1
• serde_json 1
• sha2 0.10 → [Updates: 0.11]
• tar 0.4
• tempfile 3
• sherpa-onnx ~1.12.40 → [Updates: ~1.13.0]
• tokenizers 0.22 → [Updates: 0.23]
• tokio 1
• tokio-tungstenite 0.27 → [Updates: 0.30]
• uuid 1 → [Updates: 1]
• coreaudio-rs 0.14.2
• cc 1 → [Updates: 1]
• swift-rs 1.0.7 → [Updates: 1.0.7]

src-tauri/crates/berdctl/Cargo.toml (5)

• clap 4
• indexmap 2 → [Updates: 2]
• serde 1
• serde_json 1
• ureq 3

src-tauri/plugins/app-test-driver/Cargo.toml (6)

• log 0.4 → [Updates: 0.4]
• serde 1
• serde_json 1
• tauri 2
• tauri-plugin 2
• objc2-app-kit 0.3.2

src-tauri/plugins/berdctl/Cargo.toml (10)

• log 0.4 → [Updates: 0.4]
• serde 1
• serde_json 1
• tauri 2
• tokio 1
• uuid 1 → [Updates: 1]
• axum 0.8
• reqwest 0.13
• tokio 1
• tauri-plugin 2

dockerfile (2)

bb-cli/docker/acceptance/Dockerfile (2)

• rust 1.91.1-bookworm → [Updates: 1.98.0-bookworm]
• python 3.12-slim-bookworm → [Updates: 3.14-slim-bookworm]

docker/linux/Dockerfile (2)

• docker/dockerfile 1.7 → [Updates: 1.27]
• node 22-bookworm → [Updates: 24-bookworm]

github-actions (6)

.github/workflows/ci.yml (15)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• cashapp/activate-hermit v1@cea9af7913204a965fd488637a8d1811bba2e616
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• cashapp/activate-hermit v1@cea9af7913204a965fd488637a8d1811bba2e616
• Swatinem/rust-cache v2.9.2@6323deb102c322ba6fcbdcafc7e3dddab59af2b6
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• taiki-e/install-action v2.85.11@7f4eb899022d8fe70b20c4f3de697aa85c309026 → [Updates: v2.87.4]
• Swatinem/rust-cache v2.9.2@6323deb102c322ba6fcbdcafc7e3dddab59af2b6
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• cashapp/activate-hermit v1@cea9af7913204a965fd488637a8d1811bba2e616
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• cashapp/activate-hermit v1@cea9af7913204a965fd488637a8d1811bba2e616
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/close-external-prs.yml (1)

• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]

.github/workflows/close-needs-info.yml (1)

• actions/stale v11.0.0@4391f3da665fdf50b6810c1a66712fb9ba21aa93

.github/workflows/public-npm-install.yml (1)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]

.github/workflows/release.yml (16)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• cashapp/activate-hermit v1@cea9af7913204a965fd488637a8d1811bba2e616
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• cashapp/activate-hermit v1@cea9af7913204a965fd488637a8d1811bba2e616
• block/apple-codesign-action v1.1.0@679535d1ab7c5a7c18e6f9afcba3464512cc3dde
• actions/attest-build-provenance v4.2.2@4d101475d8b20a2381f78447822ac1eab6504dd8
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• taiki-e/install-action v2.85.11@7f4eb899022d8fe70b20c4f3de697aa85c309026 → [Updates: v2.87.4]
• actions/setup-node v6@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7]
• actions/attest-build-provenance v4.2.2@4d101475d8b20a2381f78447822ac1eab6504dd8
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• cashapp/activate-hermit v1@cea9af7913204a965fd488637a8d1811bba2e616
• actions/attest-build-provenance v4.2.2@4d101475d8b20a2381f78447822ac1eab6504dd8
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• cashapp/activate-hermit v1@cea9af7913204a965fd488637a8d1811bba2e616
• node 24.10.0 → [Updates: 24.20.0]

.github/workflows/unsigned-desktop-build.yml (7)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• taiki-e/install-action v2.85.11@7f4eb899022d8fe70b20c4f3de697aa85c309026 → [Updates: v2.87.4]
• actions/setup-node v6@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7]
• actions/cache v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684 → [Updates: v4.3.0, v6.1.0]
• cashapp/activate-hermit v1@cea9af7913204a965fd488637a8d1811bba2e616
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• node 24.10.0 → [Updates: 24.20.0]

hermit (2)

bb-cli/bin/hermit (4)

• just 1.46.0 → [Updates: 1.58.0]
• lefthook 2.1.4 → [Updates: 2.1.12]
• rustup 1.29.0 → [Updates: 1.29.1]
• schema-registry 0.127.1

bin/hermit (6)

• cmake 4.2.3 → [Updates: 4.4.3]
• just 1.48.0 → [Updates: 1.58.0]
• lefthook 2.1.6 → [Updates: 2.1.12]
• node 24.10.0 → [Updates: 24.15.0]
• pnpm 10.33.0 → [Updates: 10.34.5, 12.3.2]
• rustup 1.28.2 → [Updates: 1.29.1]

npm (3)

package.json (121)

• @agentclientprotocol/sdk ^0.19.0 → [Updates: ^0.29.0, ^1.0.0]
• @daypicker/react ^10.0.1
• @mcp-ui/client 7.1.1
• @opentelemetry/api ^1.9.1
• @opentelemetry/api-logs 0.221.0 → [Updates: 0.222.0]
• @opentelemetry/core 2.10.0 → [Updates: 2.11.0]
• @opentelemetry/otlp-transformer 0.221.0 → [Updates: 0.222.0]
• @opentelemetry/resources 2.10.0 → [Updates: 2.11.0]
• @opentelemetry/sdk-logs 0.221.0 → [Updates: 0.222.0]
• @opentelemetry/semantic-conventions ^1.43.0
• @radix-ui/react-accordion ^1.2.20
• @radix-ui/react-alert-dialog ^1.1.23
• @radix-ui/react-aspect-ratio ^1.1.15
• @radix-ui/react-avatar ^1.2.6
• @radix-ui/react-checkbox ^1.3.11
• @radix-ui/react-collapsible ^1.1.20
• @radix-ui/react-context-menu ^2.3.7
• @radix-ui/react-dialog ^1.1.23
• @radix-ui/react-dropdown-menu ^2.1.24
• @radix-ui/react-focus-scope 1.1.16
• @radix-ui/react-hover-card ^1.1.23
• @radix-ui/react-label ^2.1.15
• @radix-ui/react-menubar ^1.1.24
• @radix-ui/react-navigation-menu ^1.2.22
• @radix-ui/react-popover ^1.1.23
• @radix-ui/react-progress ^1.1.16
• @radix-ui/react-radio-group ^1.4.7
• @radix-ui/react-scroll-area ^1.2.18
• @radix-ui/react-select ^2.3.7
• @radix-ui/react-separator ^1.1.15
• @radix-ui/react-slider ^1.4.7
• @radix-ui/react-slot ^1.3.3
• @radix-ui/react-switch ^1.3.7
• @radix-ui/react-tabs ^1.1.21
• @radix-ui/react-toggle ^1.1.18
• @radix-ui/react-toggle-group ^1.1.19
• @radix-ui/react-tooltip ^1.2.16
• @radix-ui/react-use-controllable-state ^1.2.6
• @react-three/drei ^10.7.8
• @react-three/fiber ^9.7.0
• @rive-app/react-webgl2 ^4.32.1 → [Updates: ^4.32.1]
• @streamdown/cjk ^1.0.3
• @streamdown/code ^1.1.1
• @streamdown/math ^1.0.2
• @streamdown/mermaid ^1.0.2
• @tabler/icons-react ^3.46.0
• @tailwindcss/typography ^0.5.20
• @tanstack/react-query ^5.102.3 → [Updates: ^5.102.3]
• @tanstack/react-virtual ^3.14.10
• @tauri-apps/api ^2.11.1
• @tauri-apps/plugin-clipboard-manager ^2.3.2 → [Updates: ^2.3.2]
• @tauri-apps/plugin-deep-link ^2.4.9 → [Updates: ^2.4.9]
• @tauri-apps/plugin-dialog ~2.7.2 → [Updates: ~2.7.2]
• @tauri-apps/plugin-notification ^2.3.3 → [Updates: ^2.3.3]
• @tauri-apps/plugin-opener ^2.5.4 → [Updates: ^2.5.4]
• @tauri-apps/plugin-process ^2.3.1
• @tauri-apps/plugin-updater ^2.10.1 → [Updates: ^2.10.1]
• @xterm/addon-fit ^0.11.0
• @xterm/addon-web-links ^0.12.0
• @xterm/xterm ^6.0.0
• @xyflow/react ^12.11.3 → [Updates: ^12.11.3]
• ai ^7.0.78 → [Updates: ^7.0.78]
• ansi-to-react ^6.2.6
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• cmdk ^1.1.1
• embla-carousel-react ^8.6.0
• fflate ^0.8.3
• fzf ^0.5.2
• i18next ^26.4.0 → [Updates: ^26.4.0]
• i18next-resources-to-backend ^1.2.3
• input-otp ^1.5.0
• lucide-react ^1.34.0 → [Updates: ^1.34.0]
• matter-js ^0.20.0
• media-chrome ^4.19.2
• motion ^13.1.1 → [Updates: ^13.1.1]
• react ^19.2.8
• react-dom ^19.2.8
• react-hook-form ^7.86.0 → [Updates: ^7.86.0]
• react-i18next ^17.0.12 → [Updates: ^17.0.12]
• react-jsx-parser ^2.4.1
• react-markdown ^10.1.0
• react-resizable-panels ^4.12.3
• recharts ^3.10.1
• remark-breaks ^4.0.0
• remark-gfm ^4.0.1
• shiki ^3.23.0 → [Updates: ^4.0.0]
• sonner ^2.0.8
• streamdown ^2.6.0
• tailwind-merge ^3.6.0
• three ^0.185.1
• tokenlens ^1.3.1
• tw-animate-css ^1.4.0
• use-stick-to-bottom ^1.1.6
• vaul ^1.1.2
• yaml 2.9.0
• zod ^4.4.3 → [Updates: ^4.4.3]
• zustand ^5.0.15
• @asamuzakjp/css-color 3.2.0 → [Updates: 7.0.0]
• @biomejs/biome 2.4.9 → [Updates: 2.5.12]
• @playwright/test ^1.62.1 → [Updates: ^1.62.1]
• @tailwindcss/postcss ^4.3.3
• @tauri-apps/cli ^2.11.4
• @testing-library/jest-dom ^7.0.1
• @testing-library/react ^16.3.2 → [Updates: ^16.3.2]
• @testing-library/user-event ^14.6.6 → [Updates: ^14.6.6]
• @types/matter-js ^0.20.2
• @types/node 26.3.0 → [Updates: 26.4.1]
• @types/react ^19.2.18
• @types/react-dom ^19.2.5 → [Updates: ^19.2.5]
• @types/three 0.185.4
• @vitejs/plugin-react ^6.1.0 → [Updates: ^6.1.0]
• jsdom ^26.1.0 → [Updates: ^30.0.0]
• postcss ^8.5.26 → [Updates: ^8.5.26]
• react-doctor ^0.9.12 → [Updates: ^0.9.12]
• tailwindcss ^4.3.3
• tsx ^4.23.12 → [Updates: ^4.23.12]
• typescript ~5.9.3 → [Updates: ~7.0.0]
• vite ^8.2.2
• vitest ^4.1.11 → [Updates: ^5.0.0]
• pnpm 10.33.0 → [Updates: 10.34.5, 12.3.1]

pnpm-workspace.yaml (19)

• @babel/core 7.29.6 → [Updates: 7.29.7, 8.0.1]
• dompurify 3.4.13 → [Updates: 3.4.14]
• uuid >=11.1.1 <12.0.0 → [Updates: >=11.1.1 <15.0.0]
• hono 4.12.34 → [Updates: 4.13.5]
• @hono/node-server 2.0.12 → [Updates: 2.1.1]
• js-yaml 4.3.2 → [Updates: 5.4.1]
• path-to-regexp >=8.4.0
• mermaid 11.16.1 → [Updates: 11.17.2]
• fast-uri 3.1.5 → [Updates: 3.1.7, 4.1.4]
• body-parser 2.3.0
• brace-expansion 5.0.9
• linkify-it 5.0.2 → [Updates: 6.1.0]
• qs 6.15.2 → [Updates: 6.16.0]
• express-rate-limit 8.5.2 → [Updates: 8.7.0]
• ip-address 10.3.1 → [Updates: 10.7.0]
• defu 6.1.5 → [Updates: 6.1.7]
• flatted 3.4.2 → [Updates: 3.4.4]
• picomatch 4.0.4 → [Updates: 4.0.7]
• ws 8.21.0 → [Updates: 8.21.3]

sdk/package.json (10)

• @modelcontextprotocol/ext-apps ^0.3.1 → [Updates: ^0.4.0, ^1.0.0]
• @modelcontextprotocol/sdk ^1.30.0
• zod ^4.4.3 → [Updates: ^4.4.3]
• @agentclientprotocol/sdk ^0.19.0 → [Updates: ^0.29.0, ^1.0.0]
• @hey-api/openapi-ts ^0.99.0
• @types/node ^26.3.0 → [Updates: ^26.3.0]
• prettier ^3.9.6
• tsx ^4.23.12 → [Updates: ^4.23.12]
• typescript ~5.9.3 → [Updates: ~7.0.0]
• @agentclientprotocol/sdk ^0.19.0 → [Updates: ^0.19.0 || ^0.29.0, ^0.19.0 || ^1.0.0]

rust-toolchain (2)

bb-cli/rust-toolchain.toml (1)

• rust 1.91.1 → [Updates: 1.98.1]

rust-toolchain.toml (1)

• rust 1.94.1 → [Updates: 1.98.1]

---

• Check this box to trigger a request for Renovate to run again on this repository