Dependency Dashboard #8

Open
opened 2026-10-03 04:03:51 +01:00 by renovate · 0 comments
Collaborator

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

  • ⚠️ WARN: No github.com token has been configured. Skipping release notes retrieval

Deprecations / Replacements

⚠️ Warning

The following dependencies are either deprecated or have replacements available.

Datasource Package Replacement PR?
npm @types/adm-zip Unavailable

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

  • Update dependency @earendil-works/pi-coding-agent to v0.99.2
  • Update dependency @earendil-works/pi-tui to v0.99.2
  • Update dependency @types/adm-zip to ^0.6.0
  • Update dependency @types/node to v22.20.5
  • Update dependency @types/node to v25.9.9
  • Update dependency cheerio to v1.2.0
  • Update dependency jsdom to v27.4.0
  • Update dependency linkedom to ^0.18.0
  • Update dependency puppeteer to v24.43.1
  • Update dependency tsx to v4.23.15
  • Update dependency typebox to v1.4.2
  • Update dependency unpdf to v1.9.0
  • Update dependency vscode-languageserver-protocol to v3.18.4
  • Update dependency @earendil-works/pi-ai to v1
  • Update dependency @earendil-works/pi-coding-agent to v1
  • Update dependency @earendil-works/pi-tui to v1
  • Update dependency @linear/sdk to v98
  • Update dependency @types/node to v24
  • Update dependency jsdom to v30
  • Update dependency p-limit to v7
  • Update dependency typescript to v7
  • Update dependency youtube-transcript-plus to v2
  • Update Puppeteer to v25 (puppeteer, puppeteer-core)
  • Lock file maintenance
  • 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

Vulnerabilities

❗ Important

60/60 CVEs have Renovate fixes.

Detected Dependencies

github-actions (1)
.forgejo/workflows/dependency-security.yaml
npm (6)
pi/files/agent/extensions/package.json (16)
  • @anthropic-ai/sdk ^0.52.0 → [Updates: ^0.135.0]
  • @mozilla/readability ^0.5.0 → [Updates: ^0.6.0]
  • jiti ^2.7.0
  • linkedom ^0.16.0 → [Updates: ^0.18.0]
  • p-limit ^6.1.0 → [Updates: ^7.0.0]
  • turndown ^7.2.0 → [Updates: ^7.2.0]
  • typebox ^1.1.38 → [Updates: ^1.1.38]
  • unpdf ^1.4.0 → [Updates: ^1.4.0]
  • vscode-languageserver-protocol ^3.17.5 → [Updates: ^3.17.5]
  • @earendil-works/pi-ai 0.75.3 → [Updates: 0.99.2, 1.3.0]
  • @earendil-works/pi-coding-agent 0.84.2 → [Updates: 0.99.2, 1.3.0]
  • @earendil-works/pi-tui 0.75.3 → [Updates: 0.99.2, 1.3.0]
  • @types/node ^25.3.3 → [Updates: ^25.3.3]
  • @types/turndown ^5.0.6
  • typescript ^5.7.0 → [Updates: ^7.0.0]
  • pnpm 10.28.2+sha512.41872f037ad22f7348e3b1debbaf7e867cfd448f2726d9cf74c08f19507c31d2c8e7a11525b983febc2df640b5438dee6023ebb1f84ed43cc2d654d2bc326264 → [Updates: 10.34.5]
pi/files/agent/extensions/pi-wakatime/package.json (6)
  • adm-zip ^0.5.17 → [Updates: ^0.6.0]
  • @earendil-works/pi-coding-agent ^0.75.5 → [Updates: ^0.79.0]
  • @types/adm-zip ^0.5.8 → [Updates: ^0.6.0]
  • tsx ^4.22.3 → [Updates: ^4.22.3]
  • typescript ^6.0.3 → [Updates: ^7.0.0]
  • node >=16.0.0
pi/files/agent/skills/browser-tools/package.json (9)
  • @mozilla/readability ^0.6.0
  • cheerio ^1.1.2 → [Updates: ^1.1.2]
  • jsdom ^27.0.1 → [Updates: ^27.0.1, ^30.0.0]
  • puppeteer ^24.31.0 → [Updates: ^24.31.0, ^25.0.0]
  • puppeteer-core ^23.11.1 → [Updates: ^25.0.0]
  • puppeteer-extra ^3.3.6
  • puppeteer-extra-plugin-stealth ^2.11.2
  • turndown ^7.2.2 → [Updates: ^7.2.2]
  • turndown-plugin-gfm ^1.0.2
pi/files/agent/skills/figma-tools/package.json (5)
  • js-yaml ^4.1.0 → [Updates: ^4.1.0]
  • @types/js-yaml ^4.0.9
  • @types/node ^22.0.0 → [Updates: ^22.0.0, ^24.0.0]
  • typescript ^5.7.0 → [Updates: ^7.0.0]
  • pnpm 10.0.0 → [Updates: 10.34.5]
pi/files/agent/skills/linear/package.json (1)
  • @linear/sdk ^37.0.0 → [Updates: ^98.0.0]
pi/files/agent/skills/youtube-transcript/package.json (1)
  • youtube-transcript-plus ^1.0.4 → [Updates: ^2.0.0]
This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Repository Problems Renovate tried to run on this repository, but found these problems. - ⚠️ WARN: No github.com token has been configured. Skipping release notes retrieval ## Deprecations / Replacements > ⚠️ **Warning** > The following dependencies are either deprecated or have replacements available. | Datasource | Package | Replacement PR? | |------------|------|--------------| | npm | `@types/adm-zip` | ![Unavailable](https://img.shields.io/badge/unavailable-orange?style=flat-square) | ## Rate-Limited The following updates are currently rate-limited. To force their creation now, click on a checkbox below. - [ ] <!-- unlimit-branch=renovate/earendil-works-pi-coding-agent-0.x -->Update dependency @earendil-works/pi-coding-agent to v0.99.2 - [ ] <!-- unlimit-branch=renovate/earendil-works-pi-tui-0.x -->Update dependency @earendil-works/pi-tui to v0.99.2 - [ ] <!-- unlimit-branch=renovate/adm-zip-0.x -->Update dependency @types/adm-zip to ^0.6.0 - [ ] <!-- unlimit-branch=renovate/node-22.x-lockfile -->Update dependency @types/node to v22.20.5 - [ ] <!-- unlimit-branch=renovate/node-25.x-lockfile -->Update dependency @types/node to v25.9.9 - [ ] <!-- unlimit-branch=renovate/cheerio-1.x-lockfile -->Update dependency cheerio to v1.2.0 - [ ] <!-- unlimit-branch=renovate/jsdom-27.x-lockfile -->Update dependency jsdom to v27.4.0 - [ ] <!-- unlimit-branch=renovate/linkedom-0.x -->Update dependency linkedom to ^0.18.0 - [ ] <!-- unlimit-branch=renovate/puppeteer -->Update dependency puppeteer to v24.43.1 - [ ] <!-- unlimit-branch=renovate/tsx-4.x-lockfile -->Update dependency tsx to v4.23.15 - [ ] <!-- unlimit-branch=renovate/typebox-1.x-lockfile -->Update dependency typebox to v1.4.2 - [ ] <!-- unlimit-branch=renovate/unpdf-1.x-lockfile -->Update dependency unpdf to v1.9.0 - [ ] <!-- unlimit-branch=renovate/vscode-languageserver-protocol-3.x-lockfile -->Update dependency vscode-languageserver-protocol to v3.18.4 - [ ] <!-- unlimit-branch=renovate/earendil-works-pi-ai-1.x -->Update dependency @earendil-works/pi-ai to v1 - [ ] <!-- unlimit-branch=renovate/earendil-works-pi-coding-agent-1.x -->Update dependency @earendil-works/pi-coding-agent to v1 - [ ] <!-- unlimit-branch=renovate/earendil-works-pi-tui-1.x -->Update dependency @earendil-works/pi-tui to v1 - [ ] <!-- unlimit-branch=renovate/linear-sdk-98.x -->Update dependency @linear/sdk to v98 - [ ] <!-- unlimit-branch=renovate/node-24.x -->Update dependency @types/node to v24 - [ ] <!-- unlimit-branch=renovate/jsdom-30.x -->Update dependency jsdom to v30 - [ ] <!-- unlimit-branch=renovate/p-limit-7.x -->Update dependency p-limit to v7 - [ ] <!-- unlimit-branch=renovate/typescript-7.x -->Update dependency typescript to v7 - [ ] <!-- unlimit-branch=renovate/youtube-transcript-plus-2.x -->Update dependency youtube-transcript-plus to v2 - [ ] <!-- unlimit-branch=renovate/major-puppeteer -->Update Puppeteer to v25 (`puppeteer`, `puppeteer-core`) - [ ] <!-- unlimit-branch=renovate/lock-file-maintenance -->Lock file maintenance - [ ] <!-- create-all-rate-limited-prs -->🔐 **Create all rate-limited PRs at once** 🔐 ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] <!-- rebase-branch=renovate/npm-earendil-works-pi-coding-agent-vulnerability -->[Update dependency @earendil-works/pi-coding-agent to ^0.79.0 [SECURITY]](pulls/3) - [ ] <!-- rebase-branch=renovate/npm-mozilla-readability-vulnerability -->[Update dependency @mozilla/readability to ^0.6.0 [SECURITY]](pulls/4) - [ ] <!-- rebase-branch=renovate/npm-adm-zip-vulnerability -->[Update dependency adm-zip to ^0.6.0 [SECURITY]](pulls/5) - [ ] <!-- rebase-branch=renovate/npm-js-yaml-vulnerability -->[Update dependency js-yaml to v4.3.2 [SECURITY]](pulls/6) - [ ] <!-- rebase-branch=renovate/npm-pnpm-vulnerability -->[Update pnpm to v10.34.5 [SECURITY]](pulls/7) - [ ] <!-- rebase-branch=renovate/turndown-7.x-lockfile -->[Update dependency turndown to v7.2.4](pulls/9) - [ ] <!-- rebase-branch=renovate/anthropic-ai-sdk-0.x -->[Update dependency @anthropic-ai/sdk to ^0.135.0](pulls/10) - [ ] <!-- rebase-branch=renovate/earendil-works-pi-ai-0.x -->[Update dependency @earendil-works/pi-ai to v0.99.2](pulls/11) - [ ] <!-- rebase-all-open-prs -->**Click on this checkbox to rebase all open PRs at once** ## Vulnerabilities > ❗ **Important** > > `60`/`60` CVEs have Renovate fixes. ## Detected Dependencies <details><summary>github-actions (1)</summary> <blockquote> <details><summary>.forgejo/workflows/dependency-security.yaml</summary> </details> </blockquote> </details> <details><summary>npm (6)</summary> <blockquote> <details><summary>pi/files/agent/extensions/package.json (16)</summary> - `@anthropic-ai/sdk ^0.52.0` → [Updates: `^0.135.0`] - `@mozilla/readability ^0.5.0` → [Updates: `^0.6.0`] - `jiti ^2.7.0` - `linkedom ^0.16.0` → [Updates: `^0.18.0`] - `p-limit ^6.1.0` → [Updates: `^7.0.0`] - `turndown ^7.2.0` → [Updates: `^7.2.0`] - `typebox ^1.1.38` → [Updates: `^1.1.38`] - `unpdf ^1.4.0` → [Updates: `^1.4.0`] - `vscode-languageserver-protocol ^3.17.5` → [Updates: `^3.17.5`] - `@earendil-works/pi-ai 0.75.3` → [Updates: `0.99.2`, `1.3.0`] - `@earendil-works/pi-coding-agent 0.84.2` → [Updates: `0.99.2`, `1.3.0`] - `@earendil-works/pi-tui 0.75.3` → [Updates: `0.99.2`, `1.3.0`] - `@types/node ^25.3.3` → [Updates: `^25.3.3`] - `@types/turndown ^5.0.6` - `typescript ^5.7.0` → [Updates: `^7.0.0`] - `pnpm 10.28.2+sha512.41872f037ad22f7348e3b1debbaf7e867cfd448f2726d9cf74c08f19507c31d2c8e7a11525b983febc2df640b5438dee6023ebb1f84ed43cc2d654d2bc326264` → [Updates: `10.34.5`] </details> <details><summary>pi/files/agent/extensions/pi-wakatime/package.json (6)</summary> - `adm-zip ^0.5.17` → [Updates: `^0.6.0`] - `@earendil-works/pi-coding-agent ^0.75.5` → [Updates: `^0.79.0`] - `@types/adm-zip ^0.5.8` → [Updates: `^0.6.0`] - `tsx ^4.22.3` → [Updates: `^4.22.3`] - `typescript ^6.0.3` → [Updates: `^7.0.0`] - `node >=16.0.0` </details> <details><summary>pi/files/agent/skills/browser-tools/package.json (9)</summary> - `@mozilla/readability ^0.6.0` - `cheerio ^1.1.2` → [Updates: `^1.1.2`] - `jsdom ^27.0.1` → [Updates: `^27.0.1`, `^30.0.0`] - `puppeteer ^24.31.0` → [Updates: `^24.31.0`, `^25.0.0`] - `puppeteer-core ^23.11.1` → [Updates: `^25.0.0`] - `puppeteer-extra ^3.3.6` - `puppeteer-extra-plugin-stealth ^2.11.2` - `turndown ^7.2.2` → [Updates: `^7.2.2`] - `turndown-plugin-gfm ^1.0.2` </details> <details><summary>pi/files/agent/skills/figma-tools/package.json (5)</summary> - `js-yaml ^4.1.0` → [Updates: `^4.1.0`] - `@types/js-yaml ^4.0.9` - `@types/node ^22.0.0` → [Updates: `^22.0.0`, `^24.0.0`] - `typescript ^5.7.0` → [Updates: `^7.0.0`] - `pnpm 10.0.0` → [Updates: `10.34.5`] </details> <details><summary>pi/files/agent/skills/linear/package.json (1)</summary> - `@linear/sdk ^37.0.0` → [Updates: `^98.0.0`] </details> <details><summary>pi/files/agent/skills/youtube-transcript/package.json (1)</summary> - `youtube-transcript-plus ^1.0.4` → [Updates: `^2.0.0`] </details> </blockquote> </details>
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
thomas/dotfiles#8
No description provided.