Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
bun	@starfederation/datastar

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

Detected Dependencies

Note

Detected dependencies section has been truncated

bun (2)

pkgs/id/e2e/package.json (1)

@playwright/test 1.63.0 → [Updates: 1.64.1]

pkgs/id/web/package.json (22)

@chenglou/pretext ^0.0.9 → [Updates: ^1.0.0]

@starfederation/datastar ^1.0.0-beta.11

msgpackr ^1.12.1 → [Updates: ^2.0.0]

prosemirror-collab ^1.3.1

prosemirror-commands ^1.7.2

prosemirror-example-setup ^1.2.3

prosemirror-highlight ^0.15.3 → [Updates: ^0.16.0]

prosemirror-history ^1.5.1

prosemirror-keymap ^1.2.3

prosemirror-model ^1.25.12

prosemirror-schema-basic ^1.2.5

prosemirror-schema-list ^1.5.1

prosemirror-search ^1.1.1

prosemirror-state ^1.4.4

prosemirror-view ^1.42.6

shiki ^4.5.0

@tailwindcss/cli ^4.3.3

@types/node ^20.19.43 → [Updates: ^26.0.0]

daisyui ^5.7.47

happy-dom ^21.0.0

typescript ^5.9.3 → [Updates: ^7.0.0]

vitest ^5.0.0

cargo (58)

doc/2026-10-11T03-44-33Z_design_groups_events_delegation/spikes/beekem/Cargo.toml (6)

beekem =0.4.0 → [Updates: =0.5.0]

bincode 1.3.3 → [Updates: 3.0.0]

future_form =0.3.1

futures 0.3

keyhive_crypto =0.2.1

rand 0.8.5 → [Updates: 0.9.0]

doc/2026-10-11T03-44-33Z_design_groups_events_delegation/spikes/c2-holepunch/Cargo.toml (8)

iroh 1.3.0 → [Updates: 1.3.0]

iroh-tickets 1.0.0

iroh-relay 1.3.0 → [Updates: 1.3.0]

n0-future 0.3

rustls-pki-types 1

tokio 1 → [Updates: 1]

anyhow 1

tracing-subscriber 0.3

doc/2026-10-11T03-44-33Z_design_groups_events_delegation/spikes/s10-heads/Cargo.toml (3)

p2panda-encryption 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

serde 1

serde_json 1 → [Updates: 1]

doc/2026-10-11T03-44-33Z_design_groups_events_delegation/spikes/s11-relay/Cargo.toml (9)

iroh 1.3.0 → [Updates: 1.3.0]

iroh-relay 1.3.0 → [Updates: 1.3.0]

rustls-pki-types 1.15.1

tokio 1 → [Updates: 1]

anyhow 1

libc 0.2 → [Updates: 0.2]

serde_json 1 → [Updates: 1]

tracing 0.1

tracing-subscriber 0.3

doc/2026-10-11T03-44-33Z_design_groups_events_delegation/spikes/s12-welcome/Cargo.toml (3)

p2panda-core 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

cbor-core =0.10.1

p2panda-encryption 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

doc/2026-10-11T03-44-33Z_design_groups_events_delegation/spikes/s6-index/Cargo.toml (5)

anyhow 1

blake3 1

hex 0.4

redb =4.3.0 → [Updates: =4.4.0]

rusqlite =0.40.2

doc/2026-10-11T03-44-33Z_design_groups_events_delegation/spikes/s7-range-real/Cargo.toml (8)

p2panda-core 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

iroh 1.3.0 → [Updates: 1.3.0]

redb =4.3.0 → [Updates: =4.4.0]

tokio 1 → [Updates: 1]

anyhow 1

serde 1

hex 0.4

blake3 1

doc/2026-10-11T03-44-33Z_design_groups_events_delegation/spikes/s8-tags/Cargo.toml (4)

blake3 1

cbor-core =0.10.1

anyhow 1

proptest 1

doc/2026-10-11T03-44-33Z_design_groups_events_delegation/spikes/s9-seitan/seitan-v2/Cargo.toml (11)

ed25519-dalek 3

getrandom 0.3 → [Updates: 0.4]

hmac 0.13

rmp-serde 1

scrypt 0.12

serde 1

sha2 0.11 → [Updates: 0.11]

base64 0.22 → [Updates: 0.23]

crypto_secretbox 0.1

proptest 1

serde_bytes 0.11

doc/2026-10-11T03-44-33Z_design_groups_events_delegation/spikes/s9-seitan/ticket-probe/Cargo.toml (3)

data-encoding 2

iroh-base 1.3 → [Updates: 1.3]

iroh-tickets 1.0

doc/2026-10-11T03-44-33Z_design_groups_events_delegation/spikes/shared/c1-connect/Cargo.toml (6)

iroh-dns 1.3.0 → [Updates: 1.3.0]

iroh-mainline-address-lookup 0.6.0 → [Updates: 0.6.0]

iroh-mdns-address-lookup 0.6.0 → [Updates: 0.6.0]

n0-mainline 0.7

n0-future 0.3

tracing-subscriber 0.3

doc/2026-10-11T03-44-33Z_design_groups_events_delegation/spikes/shared/Cargo.toml (22)

p2panda-core 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

p2panda-auth 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

p2panda-encryption 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

p2panda-sync 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

p2panda-store 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

p2panda-stream 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

iroh 1.3.0 → [Updates: 1.3.0]

iroh-blobs =0.103.1

iroh-tickets 1.0.0

iroh-relay 1.3.0 → [Updates: 1.3.0]

tokio 1 → [Updates: 1]

anyhow 1

serde 1

serde_json 1 → [Updates: 1]

hex 0.4

blake3 1

ed25519-dalek 2 → [Updates: 3]

cbor-core =0.10.1

dcbor =0.25.2

redb =4.3.0 → [Updates: =4.4.0]

unicode-normalization 0.1 → [Updates: 0.1]

tempfile 3

doc/2026-10-11T03-44-33Z_design_groups_events_delegation/spikes/shared/s1-transport/Cargo.toml (1)

postcard 1

doc/2026-10-11T03-44-33Z_design_groups_events_delegation/spikes/shared/s2-auth/Cargo.toml

doc/2026-10-11T03-44-33Z_design_groups_events_delegation/spikes/shared/s3-history/Cargo.toml

doc/2026-10-11T03-44-33Z_design_groups_events_delegation/spikes/shared/s4-blobs/Cargo.toml

doc/2026-10-11T03-44-33Z_design_groups_events_delegation/spikes/shared/s5-cbor/Cargo.toml

doc/2026-10-11T11-08-42Z_design_remaining_work/research-round2/crash-tests/redb-crash/Cargo.toml (1)

redb =4.3.0 → [Updates: =4.4.0]

doc/2026-10-11T11-08-42Z_design_remaining_work/research-round2/ed25519/wire/Cargo.toml (7)

ed25519-dalek-v2 =2.2.0 → [Updates: =3.0.0]

ed25519-dalek-v3 =3.0.0

curve25519-dalek-v4 =4.1.3 → [Updates: =5.0.0]

rand_core-v06 =0.6.4 → [Updates: =0.10.1]

getrandom-v04 0.4

sha2 0.10 → [Updates: 0.11]

hex 0.4

doc/2026-10-11T11-08-42Z_design_remaining_work/research-round2/iroh-allowlist/Cargo.toml (5)

iroh =1.3.0 → [Updates: =1.4.1]

tokio 1 → [Updates: 1]

anyhow 1

tracing 0.1

tracing-subscriber 0.3

doc/2026-10-11T11-08-42Z_design_remaining_work/research-round2/range-config/harness/Cargo.toml (8)

p2panda-core 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

iroh 1.3.0 → [Updates: 1.3.0]

redb =4.3.0 → [Updates: =4.4.0]

tokio 1 → [Updates: 1]

anyhow 1

serde 1

hex 0.4

blake3 1

doc/2026-10-11T11-08-42Z_design_remaining_work/research-round2/scheme-serde/Cargo.toml (5)

p2panda-core 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

cbor-core =0.10.1

serde 1.0.228

serde_bytes 0.11.19

p2panda-encryption 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

doc/2026-10-11T11-08-42Z_design_remaining_work/research-round2/store-fit/nosqlite/Cargo.toml (3)

futures-util 0.3

p2panda-core 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

p2panda-store 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

doc/2026-10-11T11-08-42Z_design_remaining_work/research-round2/store-fit/semcheck/Cargo.toml (4)

futures-util 0.3

p2panda-core 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

p2panda-store 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

tokio 1 → [Updates: 1]

doc/2026-10-11T11-08-42Z_design_remaining_work/research-round2/store-fit/sendcheck/Cargo.toml (2)

redb =4.3.0 → [Updates: =4.4.0]

tokio 1 → [Updates: 1]

doc/2026-10-11T11-08-42Z_design_remaining_work/research-round2/ticket-signing/ticket-options/Cargo.toml (6)

blake3 1.8

data-encoding 2.11

iroh-base 1.3 → [Updates: 1.3]

iroh-tickets 1.0

postcard 1.1

serde 1

doc/2026-10-11T11-08-42Z_design_remaining_work/research-round2/toolchain/dl/p2panda-p2panda-auth/Cargo.toml (1)

petgraph 0.8.3

doc/2026-10-11T11-08-42Z_design_remaining_work/research-round2/toolchain/dl/p2panda-p2panda-core/Cargo.toml (5)

arbitrary 1.4.2

cbor-core 0.10.1

ed25519-dalek 2.2.0 → [Updates: 3.0.0]

rand 0.8.5 → [Updates: 0.8.6]

serde_json 1.0.150

doc/2026-10-11T11-08-42Z_design_remaining_work/research-round2/toolchain/dl/p2panda-p2panda-encryption/Cargo.toml (11)

chacha20poly1305 0.10.1 → [Updates: 0.11.0]

curve25519-dalek 4.1.3 → [Updates: 5.0.0]

hkdf 0.12.4 → [Updates: 0.13.0]

hpke-rs 0.7.0 → [Updates: 0.8.0]

hpke-rs-crypto 0.7.0 → [Updates: 0.8.0]

hpke-rs-rust-crypto 0.7.0 → [Updates: 0.8.0]

rand_chacha 0.9.0 → [Updates: 0.10.0]

sha2 0.10.8 → [Updates: 0.11.0]

subtle 2.6.1

x25519-dalek 2.0.1 → [Updates: 3.0.0]

zeroize 1.8.1

doc/2026-10-11T11-08-42Z_design_remaining_work/research-round2/toolchain/dl/p2panda-p2panda-store/Cargo.toml (3)

async-stream 0.3.6

sqlx 0.9.0

cbor-core 0.10.1

doc/2026-10-11T11-08-42Z_design_remaining_work/research-round2/toolchain/dl/p2panda-p2panda-stream/Cargo.toml (1)

indexmap 2.14.2

doc/2026-10-11T11-08-42Z_design_remaining_work/research-round2/toolchain/dl/p2panda-p2panda-sync/Cargo.toml (1)

pin-project-lite 0.2.16

doc/2026-10-11T11-08-42Z_design_remaining_work/research-round2/turso/dep-count-default/Cargo.toml (1)

turso =0.8.2 → [Updates: =0.8.3]

doc/2026-10-11T11-08-42Z_design_remaining_work/research-round2/turso/s6-index/Cargo.toml (6)

anyhow 1

blake3 1

hex 0.4

redb =4.3.0 → [Updates: =4.4.0]

rusqlite =0.40.2

turso =0.8.2 → [Updates: =0.8.3]

doc/2026-10-11T11-08-42Z_design_remaining_work/research-round2/welcome-recent/Cargo.toml (4)

p2panda-core 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

cbor-core =0.10.1

serde 1

p2panda-encryption 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

pkgs/dht/Cargo.toml (7)

anyhow 1.0.100 → [Updates: 1.0.100]

ed25519-dalek 3.0.0-pre.1 → [Updates: 3.0.0-pre.1]

iroh 0.95 → [Updates: 0.98, 1.0]

iroh-gossip 0.95 → [Updates: 0.101]

rand 0.9.2 → [Updates: 0.10.0]

tokio 1.48.0 → [Updates: 1.48.0]

tracing-subscriber 0.3.20 → [Updates: 0.3.20]

pkgs/id/Cargo.toml (66)

anyhow 1

cbor-core =0.10.1

clap 4

libc 0.2 → [Updates: 0.2]

distributed-topic-tracker 0.3

ed25519-dalek 3

futures-lite 2

futures-util 0.3

iroh 1 → [Updates: 1]

iroh-mdns-address-lookup 0.6 → [Updates: 0.6]

iroh-mainline-address-lookup 0.6 → [Updates: 0.6]

iroh-base 1 → [Updates: 1]

iroh-tickets 1

iroh-blobs 0.103

iroh-docs 0.101

iroh-gossip 0.101

p2panda-core 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

p2panda-store 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

p2panda-auth 3e84cac48bba05c6857cce2ec433862b97f8d53c → [Updates: ``]

postcard 1

rand 0.10

redb =4.3.0 → [Updates: =4.4.0]

rustyline 18 → [Updates: 19]

serde 1

serde_json 1

tempfile 3

tokio 1 → [Updates: 1]

toml 1

thiserror 2

tracing 0.1

tracing-subscriber 0.3

unicode-normalization 0.1 → [Updates: 0.1]

unicode-segmentation 1.13

unicode-width 0.2

axum 0.8

tower 0.5

tower-http 0.7

rust-embed 8

mime_guess 2

futures 0.3.32

rmp-serde 1

comrak 0.56 → [Updates: 0.57]

urlencoding 2

aes-gcm 0.11

base64 0.22 → [Updates: 0.23]

blake3 1

qrcode 0.14.1

hkdf 0.13

sha2 0.11 → [Updates: 0.11]

hmac 0.13

scrypt 0.12

subtle 2

wasmtime =43.0.2 → [Updates: =50.0.0]

russh =0.64.1

wat =1.261.0 → [Updates: =1.262.0]

tokio-tungstenite 0.29 → [Updates: 0.30]

vt100 =0.16.2 → [Updates: =0.18.1]

rqrr 0.11.0

proptest 1.12

dcbor =0.25.2

iroh 1 → [Updates: 1]

toml 1

n0-mainline 0.7

crypto_secretbox 0.1

serde_bytes 0.11

base64 0.22 → [Updates: 0.23]

pkgs/pavex/libs/pavex_cli_client/Cargo.toml (1)

anyhow 1 → [Updates: 1]

pkgs/pavex/libs/pavex_cli/Cargo.toml (9)

clap 4 → [Updates: 4]

miette 5.3.0 → [Updates: 7.0.0]

fs-err 2.7.0 → [Updates: 2.7.0, 3.0.0]

tracing-subscriber 0.3 → [Updates: 0.3]

tracing-chrome 0.7 → [Updates: 0.7]

tracing 0.1

owo-colors 3 → [Updates: 4]

anyhow 1 → [Updates: 1]

guppy 0.15 → [Updates: 0.19]

pkgs/pavex/libs/pavex_macros/Cargo.toml (5)

proc-macro2 1.0 → [Updates: 1.0]

quote 1.0 → [Updates: 1.0]

syn 2.0 → [Updates: 2.0, 3.0]

trybuild 1.0 → [Updates: 1.0]

serde 1.0 → [Updates: 1.0]

pkgs/pavex/libs/pavex_miette/Cargo.toml (8)

owo-colors 3 → [Updates: 4]

textwrap 0.16 → [Updates: 0.16]

unicode-width 0.1 → [Updates: 0.2]

miette 5 → [Updates: 7]

supports-hyperlinks 2 → [Updates: 3]

supports-color 2 → [Updates: 2, 3]

supports-unicode 2 → [Updates: 2, 3]

terminal_size 0.2 → [Updates: 0.4]

pkgs/pavex/libs/pavex_test_runner/Cargo.toml (17)

anyhow 1.0.59 → [Updates: 1.0.59]

ahash 0.8 → [Updates: 0.8]

console 0.15.1 → [Updates: 0.16.0]

fs-err 2.7.0 → [Updates: 2.7.0, 3.0.0]

libtest-mimic 0.8.0

serde 1.0.141 → [Updates: 1.0.141]

similar 2.2.0 → [Updates: 2.2.0, 3.0.0]

textwrap 0.16.0 → [Updates: 0.16.0]

toml 0.7 → [Updates: 0.9, 1.0]

miette 5.3.0 → [Updates: 7.0.0]

walkdir 2 → [Updates: 2]

serde_json 1 → [Updates: 1]

itertools 0.10 → [Updates: 0.15]

sha2 0.10.6 → [Updates: 0.11.0]

object-pool 0.5 → [Updates: 0.6]

num_cpus 1 → [Updates: 1]

globwalk 0.9.0

pkgs/pavex/libs/pavex/Cargo.toml (22)

hyper 0.14 → [Updates: 0.14, 1.0]

bytes 1 → [Updates: 1]

http 0.2 → [Updates: 0.2, 1.0]

http-body 0.4.5 → [Updates: 0.4.5, 1.0.0]

anyhow 1 → [Updates: 1]

futures-util 0.3 → [Updates: 0.3]

mime 0.3

thiserror 1 → [Updates: 1, 2]

serde 1 → [Updates: 1]

paste 1 → [Updates: 1]

pin-project-lite 0.2

matchit 0.7 → [Updates: 0.9]

percent-encoding 2 → [Updates: 2]

serde_html_form 0.1 → [Updates: 0.4]

serde_json 1 → [Updates: 1]

serde_path_to_error 0.1 → [Updates: 0.1]

indexmap 1.9.1 → [Updates: 2.0.0]

fs-err 2.7.0 → [Updates: 2.7.0, 3.0.0]

ron 0.8 → [Updates: 0.12]

tokio 1 → [Updates: 1]

insta 1.29.0 → [Updates: 1.29.0]

tracing 0.1

pkgs/pavex/libs/pavexc/Cargo.toml (37)

syn 2 → [Updates: 2, 3]

rustdoc-types 0.22.0 → [Updates: 0.61.0]

serde 1.0.139 → [Updates: 1.0.139]

serde_json 1 → [Updates: 1]

serde_stacker 0.1 → [Updates: 0.1]

anyhow 1.0.58 → [Updates: 1.0.58]

fs-err 2.7.0 → [Updates: 2.7.0, 3.0.0]

indexmap 1.9.1 → [Updates: 2.0.0]

petgraph 0.6.2 → [Updates: 0.8.0]

bimap 0.6.2

prettyplease 0.2 → [Updates: 0.3]

quote 1.0.20 → [Updates: 1.0.20]

proc-macro2 1.0.40 → [Updates: 1.0.40]

thiserror 1.0.32 → [Updates: 1.0.32, 2.0.0]

miette 5.3 → [Updates: 7.0]

guppy 0.15.0 → [Updates: 0.19.0]

itertools 0.10.3 → [Updates: 0.15.0]

cargo-manifest 0.7 → [Updates: 0.21]

pathdiff 0.2.1 → [Updates: 0.2.1]

elsa 1.4.0 → [Updates: 1.4.0]

tracing 0.1

fixedbitset 0.4.2 → [Updates: 0.5.0]

la-arena 0.3

ahash 0.8 → [Updates: 0.8]

convert_case 0.6 → [Updates: 0.12]

textwrap 0.16.0 → [Updates: 0.16.0]

once_cell 1.17.1 → [Updates: 1.17.1]

toml_edit 0.19.8 → [Updates: 0.25.0]

semver 1.0.17 → [Updates: 1.0.17]

xdg-home 1.0.0 → [Updates: 1.0.0]

rusqlite 0.29.0 → [Updates: 0.40.0]

r2d2_sqlite 0.22.0 → [Updates: 0.35.0]

r2d2 0.8

bincode 1 → [Updates: 3]

rayon 1.7 → [Updates: 1.7]

num_cpus 1.15.0 → [Updates: 1.15.0]

vergen 8.0.0 → [Updates: 8.0.0, 10.0.0]

pkgs/pavex/libs/persist_if_changed/Cargo.toml (4)

tracing 0.1

fs-err 2.7 → [Updates: 2.7, 3.0]

sha2 0.10 → [Updates: 0.11]

anyhow 1 → [Updates: 1]

pkgs/roc/platforms/rust-basic-cli-template/crates/roc_host_bin/Cargo.toml

pkgs/roc/platforms/rust-basic-cli-template/crates/roc_host_lib/Cargo.toml

pkgs/roc/platforms/rust-basic-cli-template/crates/roc_host/Cargo.toml (1)

libc =0.2.150 → [Updates: =0.2.191]

pkgs/roc/platforms/rust-minimal-cli/Cargo.toml (13)

memchr =2.7.4 → [Updates: =2.8.3]

hyper =1.6.0 → [Updates: =1.12.0]

hyper-util =0.1.12 → [Updates: =0.1.21]

hyper-rustls =0.27.6 → [Updates: =0.27.10]

http-body-util =0.1.3 → [Updates: =0.1.5]

tokio =1.45.0 → [Updates: =1.54.1]

sys-locale =0.3.2

bytes =1.11.1 → [Updates: =1.12.1]

crossterm =0.29.0

memmap2 =0.9.4 → [Updates: =0.9.12]

libc =0.2.172 → [Updates: =0.2.191]

backtrace =0.3.75 → [Updates: =0.3.76]

thread_local =1.1.8 → [Updates: =1.1.10]

pkgs/roc/platforms/rust-minimal-cli/crates/roc_env/Cargo.toml

pkgs/roc/platforms/rust-minimal-cli/crates/roc_host_bin/Cargo.toml

pkgs/roc/platforms/rust-minimal-cli/crates/roc_host_lib/Cargo.toml

pkgs/roc/platforms/rust-minimal-cli/crates/roc_host/Cargo.toml

pkgs/roc/platforms/rust-minimal-cli/crates/roc_io_error/Cargo.toml

pkgs/roc/platforms/rust-minimal-cli/crates/roc_stdio/Cargo.toml

pkgs/web-gen-api-axum/Cargo.toml (23)

axum 0.6.4 → [Updates: 0.8.0]

console_error_panic_hook 0.1

console_log 1

cfg-if 1

leptos 0.4 → [Updates: 0.8]

leptos_axum 0.4 → [Updates: 0.8]

leptos_meta 0.4 → [Updates: 0.8]

leptos_router 0.4 → [Updates: 0.8]

log 0.4

simple_logger 4 → [Updates: 5]

tokio 1.38.2

tower 0.4.13 → [Updates: 0.5.0]

tower-http 0.4 → [Updates: 0.7]

wasm-bindgen 0.2.87

thiserror 1.0.38 → [Updates: 2.0.0]

tracing 0.1.40

http 0.2.8 → [Updates: 1.0.0]

serde 1.0.176

libsql 0.1.5 → [Updates: 0.10.0]

once_cell 1.18.0

hyper 0.14.27 → [Updates: 1.0.0]

web-sys 0.3.64

leptos_query 0.2.3 → [Updates: 0.5.0]

pkgs/web-gen-api/Cargo.toml (10)

actix-files 0.6 → [Updates: 0.7]

actix-web 4 → [Updates: 4]

console_error_panic_hook 0.1

cfg-if 1 → [Updates: 1]

http 0.2 → [Updates: 0.2, 1.0]

leptos 0.4 → [Updates: 0.8]

leptos_meta 0.4 → [Updates: 0.8]

leptos_actix 0.4 → [Updates: 0.8]

leptos_router 0.4 → [Updates: 0.8]

wasm-bindgen =0.2.87 → [Updates: =0.2.129]

pkgs/web-gen/Cargo.toml (14)

anyhow 1.0.72 → [Updates: 1.0.72]

bacon 2.12.0 → [Updates: 2.12.0, 3.0.0]

color-eyre 0.6.2 → [Updates: 0.6.2]

futures 0.3.28 → [Updates: 0.3.28]

irust 1.70.0 → [Updates: 1.70.0]

js-sys 0.3.64 → [Updates: 0.3.64]

leptos 0.4.5 → [Updates: 0.8.0]

leptos_router 0.4.5 → [Updates: 0.8.0]

rand 0.9.0 → [Updates: 0.10.0]

serde 1.0.174

sqlx 0.9.0

tracing 0.1.37 → [Updates: 0.1.37]

wasm-bindgen 0.2.87 → [Updates: 0.2.87]

web-sys 0.3.64 → [Updates: 0.3.64]

docker-compose (3)

pkgs/age/docker-compose.yaml

pkgs/identity/web/docker-compose.yml

pkgs/xen-orchestra/docker-compose.yml

dockerfile (4)

pkgs/identity/provider/Dockerfile

pkgs/identity/web/Dockerfile (1)

golang 1.21-alpine → [Updates: 1.27-alpine]

pkgs/lab-ops-hub/container/Dockerfile (1)

python 3.13-alpine → [Updates: 3.15-alpine]

pkgs/mcpx/Containerfile (3)

golang 1.27-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5

oven/bun 1-debian@sha256:93d5032fe06d163427822dc1598f420363759bb18155c9cc90eb1be05a64a19e

debian bookworm-slim@sha256:7ff6ba31527b9e336162fa061746c366c4b2032f4d2cff2078bea43f78efe3f8

github-actions (18)

.github/workflows/auto-assign.yml

.github/workflows/go-modules-build.yml (2)

actions/checkout v7

actions/setup-go v7

.github/workflows/goreleaser.yml (4)

actions/checkout v7

actions/setup-go v7

goreleaser/goreleaser-action v7

goreleaser/goreleaser v2.18.3 → [Updates: v2.19.0]

.github/workflows/id-check.yml (3)

actions/checkout v7

DeterminateSystems/nix-installer-action v23@3138316df39ed29be04236d7ffc686fa525866aa

DeterminateSystems/magic-nix-cache-action v15@84c0677f58dcedf3b91f8223ce36a9ea5b3c84b7

.github/workflows/id-e2e-nightly.yml (3)

actions/checkout v7

DeterminateSystems/nix-installer-action v23@3138316df39ed29be04236d7ffc686fa525866aa

DeterminateSystems/magic-nix-cache-action v15@84c0677f58dcedf3b91f8223ce36a9ea5b3c84b7

.github/workflows/identity-build.yml (2)

actions/checkout v7

actions/setup-go v7

.github/workflows/jules-daily-codebase-ideation.yml (2)

actions/checkout v7

google-labs-code/jules-action v1.0.0@bff7875eaa123cac6742b7cfc51005b95ba4d566

.github/workflows/jules-daily-flake-sync.yml (2)

actions/checkout v7

google-labs-code/jules-action v1.0.0@bff7875eaa123cac6742b7cfc51005b95ba4d566

.github/workflows/jules.yml (4)

google-labs-code/jules-action v1.0.0@bff7875eaa123cac6742b7cfc51005b95ba4d566

google-labs-code/jules-action v1.0.0@bff7875eaa123cac6742b7cfc51005b95ba4d566

google-labs-code/jules-action v1.0.0@bff7875eaa123cac6742b7cfc51005b95ba4d566

google-labs-code/jules-action v1.0.0@bff7875eaa123cac6742b7cfc51005b95ba4d566

.github/workflows/lab-ops-hub.yml (5)

actions/checkout v7

actions/setup-node v7

actions/setup-python v7

node 24

python 3.12 → [Updates: 3.15]

.github/workflows/map-build.yml (2)

actions/checkout v7

actions/setup-go v7

.github/workflows/mcpx-conformance.yml (14)

actions/checkout v7

actions/setup-go v7

actions/setup-node v7

actions/checkout v7

actions/upload-artifact v7

actions/upload-artifact v7

actions/checkout v7

actions/setup-go v7

actions/setup-node v7

actions/checkout v7

actions/checkout v7

actions/download-artifact v7 → [Updates: v8]

node 24

node 24

.github/workflows/mcpx-nixbuild.yml (3)

actions/checkout v7

DeterminateSystems/nix-installer-action v23@3138316df39ed29be04236d7ffc686fa525866aa

DeterminateSystems/magic-nix-cache-action v15@84c0677f58dcedf3b91f8223ce36a9ea5b3c84b7

.github/workflows/mcpx.yml (9)

actions/checkout v7

actions/setup-go v7

denoland/setup-deno v2.0.5@22d081ff2d3a40755e97629de92e3bcbfa7cf2ed

oven-sh/setup-bun v2.2.0@0c5077e51419868618aeaa5fe8019c62421857d6

actions/setup-node v7

actions/checkout v7

DeterminateSystems/nix-installer-action v23@3138316df39ed29be04236d7ffc686fa525866aa

deno v2.x

node 24

.github/workflows/mod-tidy.yml (2)

actions/checkout v7

actions/setup-go v7

.github/workflows/nix-ci.yml (4)

actions/checkout v7

DeterminateSystems/nix-installer-action v23@3138316df39ed29be04236d7ffc686fa525866aa

actions/checkout v7

DeterminateSystems/nix-installer-action v23@3138316df39ed29be04236d7ffc686fa525866aa

.github/workflows/research-workflow.yml (2)

actions/checkout v7

actions/setup-python v7

pkgs/roc/platforms/rust-basic-cli-template/.github/workflows/ci_nix.yaml (3)

actions/checkout v3 → [Updates: v7]

cachix/install-nix-action v23 → [Updates: v31]

cachix/cachix-action v12 → [Updates: v17]

gomod (6)

pkgs/chat/go.mod (7)

go 1.25.0

github.com/charmbracelet/bubbles v0.17.1 → [Updates: v0.21.1, v2.2.1]

github.com/charmbracelet/bubbletea v0.25.0 → [Updates: v0.27.1, v2.1.0]

github.com/charmbracelet/lipgloss v0.9.1 → [Updates: v0.13.1, v2.0.6]

github.com/charmbracelet/ssh v0.0.0-20230822194956-1a051f898e09@1a051f898e09 → [Updates: v0.4.3]

github.com/charmbracelet/wish v1.2.0 → [Updates: v1.4.7, v2.0.5]

github.com/muesli/termenv v0.15.2 → [Updates: v0.16.0]

pkgs/database/go.mod (4)

go 1.25.0

github.com/cockroachdb/cockroach-go/v2 v2.3.5 → [Updates: v2.4.3]

github.com/google/uuid v1.4.0 → [Updates: v1.6.0]

github.com/jackc/pgx/v5 v5.9.2 → [Updates: v5.11.0]

pkgs/graph/go.mod (4)

go 1.25.0

github.com/charmbracelet/charm v0.12.6

github.com/charmbracelet/log v0.3.1 → [Updates: v0.4.2, v2.0.1]

github.com/dgraph-io/badger/v4 v4.2.0 → [Updates: v4.9.6]

pkgs/identity/go.mod (31)

go 1.25.0

github.com/a-h/templ v0.2.598 → [Updates: v0.3.1070]

github.com/angelofallars/htmx-go v0.5.0

github.com/auth0/go-jwt-middleware/v2 v2.2.1 → [Updates: v2.3.1, v3.4.0]

github.com/centrifugal/centrifuge v0.31.0 → [Updates: v0.40.1]

github.com/centrifugal/centrifuge-go v0.10.2 → [Updates: v0.13.0]

github.com/charmbracelet/bubbles v0.18.0 → [Updates: v0.21.1, v2.2.1]

github.com/charmbracelet/bubbletea v0.25.0 → [Updates: v0.27.1, v2.1.0]

github.com/charmbracelet/charm v0.12.6

github.com/charmbracelet/lipgloss v0.10.0 → [Updates: v0.13.1, v2.0.6]

github.com/charmbracelet/log v0.3.1 → [Updates: v0.4.2, v2.0.1]

github.com/charmbracelet/melt v0.6.0 → [Updates: v0.6.2]

github.com/charmbracelet/promwish v0.7.1-0.20240301193744-83a66da07faa@83a66da07faa → [Updates: v0.8.0]

github.com/charmbracelet/ssh v0.0.0-20240301204039-e79ff702f5b3@e79ff702f5b3 → [Updates: v0.4.3]

github.com/charmbracelet/wish v1.3.2 → [Updates: v1.4.7, v2.0.5]

github.com/go-chi/chi v1.5.5 → [Updates: v5.5.0]

github.com/golang-jwt/jwt v3.2.2+incompatible

github.com/gowebly/helpers v0.3.0 → [Updates: v0.4.0]

github.com/knadh/koanf v1.5.1-0.20230129133018-38c5fe1d9b40@38c5fe1d9b40 → [Updates: v2.4.1]

github.com/knadh/koanf/parsers/kdl v0.1.1 → [Updates: v1.0.1]

github.com/muesli/reflow v0.3.0

github.com/nrednav/cuid2 v1.0.0 → [Updates: v1.1.1]

github.com/prometheus/client_golang v1.19.0 → [Updates: v1.25.0]

github.com/samber/do/v2 v2.0.0-beta.5 → [Updates: v2.1.0]

github.com/samber/go-type-to-string v1.2.0 → [Updates: v1.8.0]

github.com/spf13/cobra v1.8.0 → [Updates: v1.10.2]

github.com/treilik/bubbleboxer v0.2.0

github.com/tursodatabase/libsql-client-go v0.0.0-20260528064733-9d5d30a29a60@9d5d30a29a60

golang.org/x/crypto v0.52.0 → [Updates: v0.58.0]

gopkg.in/go-jose/go-jose.v2 v2.6.3 → [Updates: v4.1.6]

github.com/developing-today-forks/charm v0.12.7-0.20240623052414-4e00e033848b@4e00e033848b

pkgs/import/go.mod (4)

go 1.25.0

github.com/charmbracelet/log v0.3.1 → [Updates: v0.4.2, v2.0.1]

github.com/lib/pq v1.10.9 → [Updates: v1.12.3]

github.com/pressly/goose/v3 v3.17.0 → [Updates: v3.29.0]

pkgs/launcher/go.mod (6)

go 1.25.0

github.com/charmbracelet/bubbles v0.17.1 → [Updates: v0.21.1, v2.2.1]

github.com/charmbracelet/bubbletea v0.25.0 → [Updates: v0.27.1, v2.1.0]

github.com/charmbracelet/keygen v0.5.0 → [Updates: v0.5.4]

github.com/charmbracelet/log v0.3.1 → [Updates: v0.4.2, v2.0.1]

github.com/charmbracelet/ssh v0.0.0-20230822194956-1a051f898e09@1a051f898e09 → [Updates: v0.4.3]

Check this box to trigger a request for Renovate to run again on this repository

agent-note:v1
state: triaged (coverage pass)
Coverage pass 2026-11-03: reviewed in the fleet-wide per-issue pass (drift / overlap / already-handled / stale / blockers / ordering). Verdict: still live; queued in repo-health-code-pilot as triage at priority 30 (priority/none). If this is already handled at current main, the triage closes it with evidence; if it needs splitting, the triage files the split.
Found via: coverage pass 2026-11-03

@dezren39

agent-note:v1
state: triaged
task: 2005 (repo-health-code-pilot)
verified_at_main: 1e3763f (2026-11-03)

Verdict: standing bot-maintained issue — no code fix. Keep open and exempt from per-issue triage queueing.

What this is

Renovate's Dependency Dashboard (opened 2023-07-08 by app/renovate, assigned to @dezren39). It is Renovate's own control surface: rate-limit approvals, rebase checkboxes, config-migration consent. Closing it makes Renovate recreate/reopen it, and there is nothing in this repo to patch.

Fresh evidence

Issue is still OPEN at current main 1e3763faf (2026-11-03).
Renovate is alive: it created fix(deps): update rust crate russh to v0.65.0 [security] #3477 / chore(deps): update dependency vitest to v4 [security] #3478 on 2026-11-01 (both merged 2026-11-02).
renovate.json exists (config:base, p2panda grouping, flake-input exclusions); no schedule or dashboard override.

Defect found: the dashboard body is frozen

lastEditedAt = 2026-10-23T21:42:20Z — 11 days stale — while Renovate kept opening PRs.
Its Open section still lists fix(deps): update rust crate rand [security] #626 chore(deps): update p2panda-stream digest to da80c05 #636 chore(deps): update p2panda-sync digest to da80c05 #641 fix(deps): update p2panda-auth digest to da80c05 #642 fix(deps): update p2panda-core digest to da80c05 #645 fix(deps): update p2panda-encryption digest to da80c05 #646 fix(deps): update p2panda-store digest to da80c05 #649 chore(deps): update dependency prettier-plugin-toml to v2.0.6 #650 chore(deps): update dependency tailwindcss to v3.4.19 #658 fix(deps): update rust crate leptos to v0.8.22 #77 fix(deps): update rust crate leptos_router to v0.8.17 #78; every one is closed or merged (2026-10-23/24). The rate-limited list is therefore also suspect.
Body is 57,955 chars and its Detected Dependencies section is already truncated; GitHub caps issue bodies at 65,536. This matches the known failure mode where an oversized dashboard stops being updateable (GitHub error "maximum is 65536 characters" when creating Dependency Dashboard renovatebot/renovate#15850).

Fix path (scoped; no code change)

Try a refresh first: tick "Check this box to trigger a request for Renovate to run again on this repository" at the dashboard foot (or "rebase all open PRs"), then confirm the body regenerates and the Open list empties. Safe to do now; unblocks everything else.
If it stays stale (body at the size ceiling), pick one: (a) keep the dashboard and accept truncation, or (b) set "dependencyDashboard": false in renovate.json and use the Mend portal (https://developer.mend.io/github/developing-today/code) for rate-limit approvals. This is @dezren39's workflow choice, hence user/review.
Optional, independent: the dashboard offers a Config Migration PR (config:base → config:recommended). Low risk, but it is the owner's checkbox; not triggered here.

Blockers and ordering

No code blocker. Step 2 needs the owner's choice before any config change; step 1 is safe immediately.
Queue: do not re-queue Dependency Dashboard #24 as a work item — it is standing machinery. Rate-limited dependency updates surface as individual Renovate PRs when permitted and go through the normal PR flow, not this issue.

Labels

queue/queued, status/needs-triage, task/triage removed; source/creator → source/renovate; added dependencies, user/review.

Found via: repo-health-code-pilot task 2005 (coverage pass 2026-11-03)

agent-note:v1 — state: handed off — queue task 2005 launched in bound OpenCode session ses_e5e5e67311affeJm9ogReAwd1O by opencode-claimant.

Navigation Menu

Repository navigation

Dependency Dashboard #24

Config Migration Needed

Deprecations / Replacements

Rate-Limited

Open

Detected Dependencies

What this is

Fresh evidence

Defect found: the dashboard body is frozen

Fix path (scoped; no code change)

Blockers and ordering

Labels

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Dependency Dashboard #24

Description

Config Migration Needed

Deprecations / Replacements

Rate-Limited

Open

Detected Dependencies

Activity

dezren39 commented on Nov 3, 2026

dezren39 commented on Nov 3, 2026

What this is

Fresh evidence

Defect found: the dashboard body is frozen

Fix path (scoped; no code change)

Blockers and ordering

Labels

dezren39 commented on Nov 3, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions