Dependency Dashboard #6

Open
opened 2026-10-03 04:04:38 +01:00 by renovate · 0 comments
Collaborator

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

  • ⚠️ WARN: Updating multiple npm lock files is deprecated and support will be removed in future versions.
  • ⚠️ WARN: GitHub token is required for some dependencies
  • ⚠️ WARN: Rate limit exceeded for api.github.com, as no hostRules set for this host. Please set a GITHUB_COM_TOKEN
  • ⚠️ WARN: No github.com token has been configured. Skipping release notes retrieval
  • ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

  • Update Rust crate serde_json to v1.0.154
  • Update Rust crate tracing to v0.1.44
  • Update astro monorepo (@astrojs/check, @astrojs/tailwind)
  • Update dependency @types/node to v20.19.43
  • Update dependency typescript to v5.9.3
  • Update Rust crate cc to v1.8.0
  • Update Rust crate clap to v4.6.7
  • Update Rust crate clap_complete to v4.6.11
  • Update Rust crate crossterm to 0.29.0
  • Update Rust crate ratatui to 0.30.0
  • Update Rust crate tui-input to v0.15.5
  • Update dependency @astrojs/tailwind to v6
  • Update dependency @types/node to v24
  • Update dependency tailwindcss to v4
  • Update dependency typescript to v7
  • Lock file maintenance
  • 🔐 Create all rate-limited PRs at once 🔐

⚠️ Warning

Renovate failed to look up the following dependencies: Failed to look up github-digest package actions/checkout: no-result.

Files affected: .github/workflows/Release_CLI.yml


Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

Vulnerabilities

❗ Important

25/26 CVEs have Renovate fixes.

cargo
Cargo.toml
paste

Detected Dependencies

cargo (5)
Cargo.toml (5)
  • anyhow 1.0.79 → [Updates: 1.0.79]
  • tracing 0.1.41 → [Updates: 0.1.41]
  • tracing-subscriber 0.3.19 → [Updates: 0.3.19]
  • clap 4.4.18 → [Updates: 4.4.18]
  • paste 1.0.15
cli/Cargo.toml (2)
  • clap_complete 4.4.9 → [Updates: 4.4.9]
  • cc 1.2.3 → [Updates: 1.2.3]
crates/core/Cargo.toml (3)
  • serde 1 → [Updates: 1]
  • serde_json 1 → [Updates: 1]
  • cc 1.2.3 → [Updates: 1.2.3]
daemon/Cargo.toml (1)
  • evdev 0.13
tui/Cargo.toml (3)
  • ratatui 0.29.0 → [Updates: 0.30.0]
  • crossterm 0.28.1 → [Updates: 0.29.0]
  • tui-input * → [Updates: *]
github-actions (3)
.forgejo/workflows/dependency-security.yaml
.github/workflows/Release_CLI.yml (1)
  • actions/checkout master
.github/workflows/Tests.yml
npm (1)
site/package.json (8)
  • @astrojs/check ^0.4.1 → [Updates: ^0.9.0]
  • @astrojs/tailwind ^5.1.0 → [Updates: ^5.1.0, ^6.0.0]
  • @types/node ^20.11.16 → [Updates: ^20.11.16, ^24.0.0]
  • astro ^4.2.8 → [Updates: ^7.0.0]
  • tailwindcss ^3.4.1 → [Updates: ^3.4.1, ^4.0.0]
  • typescript ^5.3.3 → [Updates: ^5.3.3, ^7.0.0]
  • @tailwindcss/typography ^0.5.10 → [Updates: ^0.5.10]
  • node ^24.0.0
This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Repository Problems Renovate tried to run on this repository, but found these problems. - ⚠️ WARN: Updating multiple npm lock files is deprecated and support will be removed in future versions. - ⚠️ WARN: GitHub token is required for some dependencies - ⚠️ WARN: Rate limit exceeded for api.github.com, as no hostRules set for this host. Please set a GITHUB_COM_TOKEN - ⚠️ WARN: No github.com token has been configured. Skipping release notes retrieval - ⚠️ WARN: Package lookup failures ## Rate-Limited The following updates are currently rate-limited. To force their creation now, click on a checkbox below. - [ ] <!-- unlimit-branch=renovate/serde_json-1.x-lockfile -->Update Rust crate serde_json to v1.0.154 - [ ] <!-- unlimit-branch=renovate/tokio-tracing-monorepo -->Update Rust crate tracing to v0.1.44 - [ ] <!-- unlimit-branch=renovate/astro-monorepo -->Update astro monorepo (`@astrojs/check`, `@astrojs/tailwind`) - [ ] <!-- unlimit-branch=renovate/node-20.x-lockfile -->Update dependency @types/node to v20.19.43 - [ ] <!-- unlimit-branch=renovate/typescript-5.x-lockfile -->Update dependency typescript to v5.9.3 - [ ] <!-- unlimit-branch=renovate/cc-1.x-lockfile -->Update Rust crate cc to v1.8.0 - [ ] <!-- unlimit-branch=renovate/clap-4.x-lockfile -->Update Rust crate clap to v4.6.7 - [ ] <!-- unlimit-branch=renovate/clap_complete-4.x-lockfile -->Update Rust crate clap_complete to v4.6.11 - [ ] <!-- unlimit-branch=renovate/crossterm-0.x -->Update Rust crate crossterm to 0.29.0 - [ ] <!-- unlimit-branch=renovate/ratatui-0.x -->Update Rust crate ratatui to 0.30.0 - [ ] <!-- unlimit-branch=renovate/tui-input-0.x-lockfile -->Update Rust crate tui-input to v0.15.5 - [ ] <!-- unlimit-branch=renovate/major-astro-monorepo -->Update dependency @astrojs/tailwind to v6 - [ ] <!-- unlimit-branch=renovate/node-24.x -->Update dependency @types/node to v24 - [ ] <!-- unlimit-branch=renovate/major-tailwindcss-monorepo -->Update dependency tailwindcss to v4 - [ ] <!-- unlimit-branch=renovate/typescript-7.x -->Update dependency typescript to v7 - [ ] <!-- unlimit-branch=renovate/lock-file-maintenance -->Lock file maintenance - [ ] <!-- create-all-rate-limited-prs -->🔐 **Create all rate-limited PRs at once** 🔐 --- > ⚠️ **Warning** > > Renovate failed to look up the following dependencies: `Failed to look up github-digest package actions/checkout: no-result`. > > Files affected: `.github/workflows/Release_CLI.yml` --- ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] <!-- rebase-branch=renovate/crate-anyhow-vulnerability -->[Update Rust crate anyhow to v1.0.103 [SECURITY]](pulls/3) - [ ] <!-- rebase-branch=renovate/crate-tracing-subscriber-vulnerability -->[Update Rust crate tracing-subscriber to v0.3.20 [SECURITY]](pulls/4) - [ ] <!-- rebase-branch=renovate/npm-astro-vulnerability -->[Update dependency astro to v7 [SECURITY]](pulls/5) - [ ] <!-- rebase-branch=renovate/tailwindcss-typography-0.x-lockfile -->[Update dependency @tailwindcss/typography to v0.5.20](pulls/7) - [ ] <!-- rebase-branch=renovate/tailwindcss-monorepo -->[Update dependency tailwindcss to v3.4.19](pulls/8) - [ ] <!-- rebase-branch=renovate/serde-monorepo -->[Update Rust crate serde to v1.0.229](pulls/9) - [ ] <!-- rebase-all-open-prs -->**Click on this checkbox to rebase all open PRs at once** ## Vulnerabilities > ❗ **Important** > > `25`/`26` CVEs have Renovate fixes. <details><summary>cargo</summary> <blockquote> <details><summary>Cargo.toml</summary> <blockquote> <details><summary>paste</summary> <blockquote> - [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) </blockquote> </details> </blockquote> </details> </blockquote> </details> ## Detected Dependencies <details><summary>cargo (5)</summary> <blockquote> <details><summary>Cargo.toml (5)</summary> - `anyhow 1.0.79` → [Updates: `1.0.79`] - `tracing 0.1.41` → [Updates: `0.1.41`] - `tracing-subscriber 0.3.19` → [Updates: `0.3.19`] - `clap 4.4.18` → [Updates: `4.4.18`] - `paste 1.0.15` </details> <details><summary>cli/Cargo.toml (2)</summary> - `clap_complete 4.4.9` → [Updates: `4.4.9`] - `cc 1.2.3` → [Updates: `1.2.3`] </details> <details><summary>crates/core/Cargo.toml (3)</summary> - `serde 1` → [Updates: `1`] - `serde_json 1` → [Updates: `1`] - `cc 1.2.3` → [Updates: `1.2.3`] </details> <details><summary>daemon/Cargo.toml (1)</summary> - `evdev 0.13` </details> <details><summary>tui/Cargo.toml (3)</summary> - `ratatui 0.29.0` → [Updates: `0.30.0`] - `crossterm 0.28.1` → [Updates: `0.29.0`] - `tui-input *` → [Updates: `*`] </details> </blockquote> </details> <details><summary>github-actions (3)</summary> <blockquote> <details><summary>.forgejo/workflows/dependency-security.yaml</summary> </details> <details><summary>.github/workflows/Release_CLI.yml (1)</summary> - `actions/checkout master` </details> <details><summary>.github/workflows/Tests.yml</summary> </details> </blockquote> </details> <details><summary>npm (1)</summary> <blockquote> <details><summary>site/package.json (8)</summary> - `@astrojs/check ^0.4.1` → [Updates: `^0.9.0`] - `@astrojs/tailwind ^5.1.0` → [Updates: `^5.1.0`, `^6.0.0`] - `@types/node ^20.11.16` → [Updates: `^20.11.16`, `^24.0.0`] - `astro ^4.2.8` → [Updates: `^7.0.0`] - `tailwindcss ^3.4.1` → [Updates: `^3.4.1`, `^4.0.0`] - `typescript ^5.3.3` → [Updates: `^5.3.3`, `^7.0.0`] - `@tailwindcss/typography ^0.5.10` → [Updates: `^0.5.10`] - `node ^24.0.0` </details> </blockquote> </details>
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
thomas/gotta-scroll-fast#6
No description provided.