Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update docs (@microsoft/api-documenter, @microsoft/api-extractor)
• Update development dependencies (major) (actions/cache, peter-evans/create-pull-request)
• Lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update buf (@bufbuild/protobuf, @bufbuild/protoc-gen-es, @bufbuild/protovalidate)
• Update development dependencies (@eslint/js, @testing-library/react, @types/node, @vitest/eslint-plugin, eslint, pnpm, ts-proto, typescript-eslint, vitest, zod)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

private/test/servers/docker-compose.yaml (2)

• ruby 3.4-alpine
• jaegertracing/all-in-one 1.60

github-actions (5)

.github/actions/setup-node/action.yaml (4)

• actions/setup-node v6.1.0@395ad3262231945c25e8478fd5baf05154b1d79f
• pnpm/action-setup v4.2.0@41ff72655975bd51cab0327fa583b6e92b6d3061
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830

.github/workflows/cache.yaml (1)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8

.github/workflows/ci.yaml (4)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8

.github/workflows/publish.yaml (1)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8

.github/workflows/update-protos.yaml (3)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf
• peter-evans/create-pull-request v7.0.11@22a9089034f40e5a961c8808d113e2c98fb63676

nodenv (1)

.node-version (1)

• node 25.2.1

npm (18)

package.json (19)

• @arethetypeswrong/cli 0.18.2
• @bufbuild/buf 1.61.0
• @bufbuild/protoc-gen-es 2.10.1
• @microsoft/api-documenter 7.28.1
• @microsoft/api-extractor 7.55.1
• @tsconfig/node20 20.1.8
• @tsconfig/strictest 2.0.8
• @types/node 20.19.26
• concurrently 9.2.1
• depcheck 1.4.7
• eslint 9.39.1
• prettier 3.7.4
• prettier-plugin-pkg 0.21.2
• ts-proto 2.8.3
• tsx 4.21.0
• typescript 5.9.3
• node 25.2.1
• pnpm 10.25.0
• pnpm 10.25.0

packages/api/package.json (2)

• @bufbuild/protobuf ^2.10.1
• node >= 20

packages/core/~internal/package.json

packages/core/package.json (4)

• @cerbos/api ^0.4.0
• uuid ^13.0.0
• @bufbuild/protobuf ^2.10.1
• node >= 20

packages/embedded-client/package.json (8)

• @bufbuild/protovalidate ^1.0.0
• @cerbos/core ^0.26.0
• @cerbos/hub ^0.4.0
• ulid ^3.0.2
• @bufbuild/protobuf ^2.10.1
• @cerbos/api ^0.4.0
• @cerbos/embedded-server ^0.2.0
• node >= 20

packages/embedded/package.json (5)

• @cerbos/core ^0.26.0
• ulid ^3.0.2
• @bufbuild/protobuf ^2.10.1
• @cerbos/api ^0.4.0
• node >= 20

packages/files/package.json (5)

• @cerbos/core ^0.26.0
• yaml ^2.8.2
• @bufbuild/protobuf ^2.10.1
• @cerbos/api ^0.4.0
• node >= 20

packages/grpc/package.json (5)

• @cerbos/core ^0.26.0
• @grpc/grpc-js ^1.14.3
• @bufbuild/protobuf ^2.10.1
• @cerbos/api ^0.4.0
• node >= 20

packages/http/package.json (6)

• @cerbos/core ^0.26.0
• qs ^6.14.0
• @types/qs 6.14.0
• @bufbuild/protobuf ^2.10.1
• @cerbos/api ^0.4.0
• node >= 20

packages/hub/~internal/package.json

packages/hub/package.json (9)

• @cerbos/core ^0.26.0
• @connectrpc/connect ^2.1.1
• @connectrpc/connect-node ^2.1.1
• @connectrpc/connect-web ^2.1.1
• @connectrpc/validate ^0.2.0
• opossum ^9.0.0
• @types/opossum 8.1.9
• @bufbuild/protobuf ^2.10.1
• node >= 20

packages/hub/src/transport/package.json

packages/opentelemetry/package.json (7)

• @opentelemetry/api ^1.9.0
• @opentelemetry/instrumentation ^0.208.0
• @opentelemetry/semantic-conventions ^1.38.0
• @bufbuild/protobuf ^2.10.1
• @cerbos/api ^0.4.0
• @cerbos/core ^0.26.0
• node >= 20

packages/react/package.json (5)

• use-deep-compare-effect ^1.8.1
• @types/react 19.2.7
• @cerbos/core ^0.26.0
• react >=18.0.0
• node >= 20

pnpm-workspace.yaml

private/eslint/package.json (7)

• @eslint/js 9.39.1
• @stylistic/eslint-plugin 5.6.1
• @vitest/eslint-plugin 1.5.2
• eslint-plugin-import 2.32.0
• eslint-plugin-react-hooks 7.0.1
• eslint-plugin-tsdoc 0.5.0
• typescript-eslint 8.49.0

private/scripts/package.json (7)

• @types/semver 7.7.1
• date-fns 4.1.0
• execa 9.6.1
• prettier 3.7.4
• semver 7.7.3
• yaml 2.8.2
• zod 4.1.13

private/test/package.json (23)

• @bufbuild/protobuf 2.10.1
• @cerbos/embedded-server 0.2.0
• @connectrpc/connect 2.1.1
• @connectrpc/connect-node 2.1.1
• @grpc/grpc-js 1.14.3
• @opentelemetry/api 1.9.0
• @opentelemetry/sdk-metrics 2.2.0
• @opentelemetry/sdk-trace-base 2.2.0
• @opentelemetry/sdk-trace-node 2.2.0
• @opentelemetry/semantic-conventions 1.38.0
• @testing-library/react 16.3.0
• @testing-library/user-event 14.6.1
• @types/adm-zip 0.5.7
• @types/react 19.2.7
• @types/semver 7.7.1
• @ungap/with-resolvers 0.1.0
• adm-zip 0.5.16
• jose 6.1.3
• jsdom 27.3.0
• react 19.2.3
• react-dom 19.2.3
• semver 7.7.3
• vitest 4.0.15

renovate-config-presets (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository