Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	mathjax-full

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• fix(deps): update dependency @mdit/plugin-katex to v0.25.2
• fix(deps): update dependency @mdit/plugin-mathjax to v0.26.2
• fix(deps): update dependency @mdit/plugin-sub to v0.24.2
• fix(deps): update dependency @mdit/plugin-sup to v0.24.2
• chore(deps): update babel monorepo to v8 (@babel/core, @babel/plugin-transform-runtime, @babel/preset-env, @babel/preset-react, @babel/runtime)
• 🔐 Create all awaiting schedule PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update lockfile

---

Warning

Renovate failed to look up the following dependencies: Failed to look up github-tags package actions-cool/issues-helper: no-result.

Files affected: .github/workflows/issue-labeled.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency dompurify to v3.4.9 [security]
• chore(deps): update dependency form-data to v4.0.6 [security]
• chore(deps): update dependency vite to v8.0.16 [security]
• chore(deps): update dependency i18next to v26.3.1
• chore(deps): update dependency marked to v18.0.5
• chore(deps): update dependency tsdown to v0.22.3
• chore(deps): update dependency unrun to v0.3.1
• chore(deps): update react monorepo to v19.2.7 (react, react-dom)
• chore(deps): update vitest monorepo to v4.1.9
• chore(deps): update vue monorepo to v3.5.38
• chore(deps): update dependency @cloudbase/node-sdk>axios to ^0.33.0
• chore(deps): update dependency @types/node to v24.13.2
• chore(deps): update dependency oxfmt to v0.55.0
• chore(deps): update dependency stylelint to v17.13.0
• chore(deps): update dependency vidstack to v1.15.6
• chore(deps): update oxlint monorepo to v1.70.0
• chore(deps): update react-router monorepo to v7.18.0
• chore(deps): update dependency @cloudbase/node-sdk>axios to v1
• fix(deps): update dependency nodemailer to v9
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update dependency think-model-postgresql to v1.1.8
• fix(deps): update dependency jsdom to v29

Detected Dependencies

docker-compose (1)

packages/server/docker-compose.yml

dockerfile (3)

packages/server/Dockerfile

packages/server/Dockerfile.alpine

packages/server/Dockerfile.source-build-alpine

github-actions (11)

.github/workflows/codeql-analysis.yml (4)

• actions/checkout v6
• github/codeql-action v4
• github/codeql-action v4
• github/codeql-action v4

.github/workflows/docker-test.yml (6)

• actions/checkout v6
• docker/setup-qemu-action v4
• docker/setup-buildx-action v4
• actions/cache v5
• docker/build-push-action v7
• docker/build-push-action v7

.github/workflows/docs-deploy.yml (5)

• actions/checkout v6
• pnpm/action-setup v6
• actions/setup-node v6
• JamesIves/github-pages-deploy-action v4
• node 24

.github/workflows/issue-check-inactive.yml (1)

• actions-cool/issues-helper-backup v3

.github/workflows/issue-labeled.yml (1)

• actions-cool/issues-helper v3

.github/workflows/release-admin.yml (4)

• actions/checkout v6
• pnpm/action-setup v6
• actions/setup-node v6
• node 24

.github/workflows/release-api.yml (4)

• actions/checkout v6
• pnpm/action-setup v6
• actions/setup-node v6
• node 24

.github/workflows/release-client.yml (4)

• actions/checkout v6
• pnpm/action-setup v6
• actions/setup-node v6
• node 24

.github/workflows/release-server.yml (10)

• actions/checkout v6
• pnpm/action-setup v6
• actions/setup-node v6
• actions/checkout v6
• docker/setup-qemu-action v4
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/build-push-action v7
• docker/build-push-action v7
• node 24

.github/workflows/test.yml (3)

• actions/checkout v6
• pnpm/action-setup v6
• actions/setup-node v6

.github/workflows/translator.yml (2)

• actions/checkout v6
• lizheming/github-translate-action main

npm (10)

docs/package.json (13)

• @fancyapps/ui 6.1.14
• @mathjax/src 4.1.2
• @vuepress/bundler-vite 2.0.0-rc.30
• @vuepress/helper 2.0.0-rc.130
• @vuepress/plugin-comment 2.0.0-rc.130
• @vuepress/plugin-docsearch 2.0.0-rc.130
• marked 18.0.4 → [Updates: 18.0.5]
• sass-embedded 1.100.0
• vidstack 1.12.13 → [Updates: 1.15.6]
• vue 3.5.34 → [Updates: 3.5.38]
• vuepress 2.0.0-rc.30
• vuepress-shared 2.0.0-rc.107
• vuepress-theme-hope 2.0.0-rc.107

example/package.json

package.json (32)

• @babel/core 7.29.7 → [Updates: 8.0.0]
• @babel/plugin-transform-runtime 7.29.7 → [Updates: 8.0.0]
• @babel/preset-env 7.29.7 → [Updates: 8.0.0]
• @babel/preset-react 7.29.7 → [Updates: 8.0.0]
• @babel/runtime 7.29.7 → [Updates: 8.0.0]
• @mr-hope/tsconfig 0.0.4
• @types/node 24.12.4 → [Updates: 24.13.2]
• @vitejs/plugin-react 6.0.2
• apidoc 1.2.0
• cross-env 10.1.0
• husky 9.1.7
• markdownlint-cli2 0.22.1
• nano-staged 1.0.2
• oxc-config-hope 0.3.6
• oxfmt 0.52.0 → [Updates: 0.55.0]
• oxlint 1.67.0 → [Updates: 1.70.0]
• oxlint-tsgolint 0.23.0
• picocolors 1.1.1
• postcss 8.5.15
• publint 0.3.21
• rimraf 6.1.3
• sass-embedded 1.100.0
• stylelint 17.12.0 → [Updates: 17.13.0]
• stylelint-config-hope 11.0.0
• tsdown 0.22.0 → [Updates: 0.22.3]
• typescript 6.0.3
• unrun 0.3.0 → [Updates: 0.3.1]
• vercel 54.14.0
• vite 8.0.14 → [Updates: 8.0.16]
• vite-plugin-css-injected-by-js 5.0.1
• vite-plugin-svgr 5.2.0
• vitest 4.1.7 → [Updates: 4.1.9]

packages/admin/package.json (16)

• @rematch/core 2.2.0
• base-icon 2.3.2
• classnames 2.5.1
• i18next 26.3.0 → [Updates: 26.3.1]
• i18next-browser-languagedetector 8.2.1
• md5 2.3.0
• qrcode.react 4.2.0
• react 19.2.6 → [Updates: 19.2.7]
• react-dom 19.2.6 → [Updates: 19.2.7]
• react-i18next 17.0.8
• react-redux 9.3.0
• react-router 7.15.1 → [Updates: 7.18.0]
• redux 5.0.1
• typescript 6.0.3
• vite 8.0.14 → [Updates: 8.0.16]
• node >=20

packages/api/package.json (1)

• node >=22

packages/client/package.json (13)

• @vueuse/core ^14.3.0
• autosize ^6.0.1
• marked ^18.0.4
• marked-highlight ^2.2.4
• recaptcha-v3 ^1.11.3
• vue ^3.5.34
• @babel/core 7.29.7 → [Updates: 8.0.0]
• @babel/preset-env 7.29.7 → [Updates: 8.0.0]
• @giphy/js-types 5.1.0
• @types/autosize 4.0.3
• @vitejs/plugin-vue 6.0.7
• vite 8.0.14 → [Updates: 8.0.16]
• node >=22

packages/cloudbase/package.json (1)

• thinkjs 4.0.0

packages/hexo-next/package.json (1)

• @next-theme/utils ^1.3.0

packages/server/package.json (38)

• @cloudbase/node-sdk ^3.18.1
• @koa/cors ^5.0.0
• @mdit/plugin-katex 0.23.4-cjs.0 → [Updates: 0.25.2]
• @mdit/plugin-mathjax 0.23.4-cjs.0 → [Updates: 0.26.2]
• @mdit/plugin-sub 0.22.5-cjs.0 → [Updates: 0.24.2]
• @mdit/plugin-sup 0.22.5-cjs.0 → [Updates: 0.24.2]
• akismet ^2.0.7
• dompurify ^3.4.6 → [Updates: ^3.4.6]
• fast-csv ^5.0.7
• form-data ^4.0.5 → [Updates: ^4.0.5]
• ip2region ^2.3.0
• jsdom ^19.0.0 → [Updates: ^29.0.0]
• jsonwebtoken ^9.0.3
• koa-compose ^4.1.0
• leancloud-storage ^4.15.2
• markdown-it ^14.2.0
• markdown-it-emoji ^3.0.0
• mathjax-full ^3.2.2
• nodemailer ^8.0.9 → [Updates: ^9.0.0]
• nunjucks ^3.2.4
• phpass ^0.1.1
• prismjs ^1.30.0
• rss ^1.2.2
• speakeasy ^2.0.0
• think-helper ^1.1.4
• think-logger3 ^1.4.0
• think-model ^1.5.4
• think-model-mysql ^1.1.7
• think-model-mysql2 ^2.0.0
• think-model-postgresql 1.1.7 → [Updates: 1.1.8]
• think-model-sqlite ^2.0.1
• think-mongo ^2.2.1
• think-router-rest ^1.0.5
• thinkjs 4.0.0
• ua-parser-js ^2.0.10
• dotenv 17.4.2
• think-watcher 3.0.4
• node >=20

pnpm-workspace.yaml (5)

• @cloudbase/database>lodash.unset ^4.18.0
• @cloudbase/node-sdk>axios ^0.32.0 → [Updates: ^0.33.0, ^1.0.0]
• @next-theme/utils>js-yaml ^4.1.1
• @xmldom/xmldom ^0.9.10
• apidoc>esbuild-loader ^4.4.3

---

• Check this box to trigger a request for Renovate to run again on this repository