Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update dependency undici to v8
• chore(deps): update dependency vite to v8
• chore(node-dev): update node build and test dependencies (major) (@vscode/test-electron, ovsx)
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update docker/dockerfile docker tag to v1.25
• chore(deps): update pnpm to v11.7.0
• chore(vscode-extension): update vscode extension npm dependencies to v11.7.0
• chore(root-tooling): update root workspace tooling (mocha>serialize-javascript, pnpm)
• chore(deps): pin dependencies (docker/dockerfile, node, pnpm, vscode)
• chore(deps): update mcr.microsoft.com/devcontainers/python:3.13-bookworm docker digest to c629663
• chore(deps): lock file maintenance
• chore(node-dev): update node build and test dependencies (@types/node, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, prettier, ts-loader)
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency js-yaml to v5
• chore(github-actions): update github actions (astral-sh/uv, node)
• chore(deps): update mcr.microsoft.com/devcontainers/python docker tag to v3.14
• fix(node-runtime): update node runtime dependencies (@oaslananka/kicad-protocol-schemas, semver)

Detected Dependencies

dockerfile (1)

.devcontainer/Dockerfile (2)

• docker/dockerfile 1.14 → [Updates: 1.25, 1.14]
• mcr.microsoft.com/devcontainers/python 3.13-bookworm@sha256:bf253e8b9200ad2c159015e87b63dc68a7d185e89cd5a9a1fa9d0d4f4ba6ad76 → [Updates: 3.14-bookworm, 3.13-bookworm]

github-actions (14)

.github/workflows/ci.yml (8)

• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/codeql.yml (1)

• ubuntu 24.04

.github/workflows/cross-repo-compatibility.yml (2)

• ubuntu 24.04
• astral-sh/uv 0.11.21 → [Updates: 0.11.23]

.github/workflows/docs.yml (2)

• ubuntu 24.04
• node 24.16.0 → [Updates: 24.17.0]

.github/workflows/gitleaks.yml (1)

• ubuntu 24.04

.github/workflows/mutation.yml (1)

• ubuntu 24.04

.github/workflows/publish-extension.yml (3)

• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/release-please.yml (1)

• ubuntu 24.04

.github/workflows/scorecard.yml (1)

• ubuntu 24.04

.github/workflows/security.yml (3)

• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/stale.yml (1)

• ubuntu 24.04

.github/workflows/sync-labels.yml (1)

• ubuntu 24.04

.github/workflows/vscode-canary.yml (1)

• ubuntu 24.04

.github/workflows/vsix-build.yml (1)

• ubuntu 24.04

npm (5)

apps/vscode-extension/package.json (41)

• @oaslananka/kicad-protocol-schemas 1.1.1 → [Updates: 1.2.0]
• exceljs 4.4.0
• semver 7.8.4 → [Updates: 7.8.5]
• @commitlint/cli 21.0.2
• @commitlint/config-conventional 21.0.2
• @eslint/js 10.0.1
• @go-task/cli 3.51.1
• @playwright/test 1.61.0
• @stryker-mutator/core 9.6.1
• @stryker-mutator/jest-runner 9.6.1
• @types/jest 30.0.0
• @types/mocha 10.0.10
• @types/node 24.12.3 → [Updates: 24.13.2]
• @types/vscode 1.101.0
• @typescript-eslint/eslint-plugin 8.61.0 → [Updates: 8.61.1]
• @typescript-eslint/parser 8.61.0 → [Updates: 8.61.1]
• @vscode/test-electron 2.5.2 → [Updates: 3.0.0]
• @vscode/vsce 3.9.2
• actionlint 2.0.6
• ajv 8.20.0
• axe-core 4.12.1
• c8 11.0.0
• eslint 10.5.0
• fast-check 4.8.0
• husky 9.1.7
• jest 30.4.2
• jest-util 30.4.1
• lint-staged 17.0.7 → [Updates: 17.0.8]
• mocha 11.7.6
• ovsx 0.10.12 → [Updates: 1.0.1]
• pngjs 7.0.0
• prettier 3.8.4
• release-please 17.9.0
• ts-jest 29.4.11
• ts-loader 9.6.0 → [Updates: 9.6.1]
• typescript 6.0.3
• webpack 5.107.2
• webpack-cli 7.0.3
• vscode ^1.101.0 → [Updates: 1.125.0]
• node 24.x → [Updates: v24.17.0]
• pnpm 11.6.0 → [Updates: 11.7.0]

package.json (11)

• @commitlint/cli 21.0.2
• @commitlint/config-conventional 21.0.2
• @oaslananka/kicad-protocol-schemas 1.1.1 → [Updates: 1.2.0]
• husky 9.1.7
• prettier 3.8.4
• typescript 6.0.3
• vitepress 1.6.4
• yaml 2.9.0
• node >=24.11.0 <25 → [Updates: v24.17.0]
• pnpm >=11.0.0 <12 → [Updates: 11.8.0]
• pnpm 11.6.0 → [Updates: 11.7.0]

packages/kicad-fixtures/package.json (6)

• @types/node 24.12.3 → [Updates: 24.13.2]
• prettier 3.8.3 → [Updates: 3.8.4]
• typescript 6.0.3
• node >=24.11.0 <25 → [Updates: v24.17.0]
• pnpm >=11.0.0 <12 → [Updates: 11.8.0]
• pnpm 11.6.0 → [Updates: 11.7.0]

packages/test-harness/package.json (6)

• @types/node 24.12.3 → [Updates: 24.13.2]
• prettier 3.8.3 → [Updates: 3.8.4]
• typescript 6.0.3
• node >=24.11.0 <25 → [Updates: v24.17.0]
• pnpm >=11.0.0 <12 → [Updates: 11.8.0]
• pnpm 11.6.0 → [Updates: 11.7.0]

pnpm-workspace.yaml (17)

• encoding-sniffer 1.0.2
• js-yaml 4.2.0 → [Updates: 5.0.0]
• exceljs>archiver 8.0.0
• exceljs>fast-csv 5.0.7
• exceljs>unzipper 0.12.3
• diff 9.0.0
• esbuild 0.28.1
• glob 13.0.6
• mocha>serialize-javascript 7.0.5 → [Updates: 7.0.6]
• qs 6.15.2
• tar 7.5.16
• test-exclude 8.0.0
• form-data 4.0.6
• tmp 0.2.7
• uuid 14.0.0 → [Updates: 14.0.1]
• vite 6.4.3 → [Updates: 8.0.16]
• undici 7.28.0 → [Updates: 8.5.0]

---

• Check this box to trigger a request for Renovate to run again on this repository

[oaslananka]

Dependency Dashboard Audit — 2026-05-30

Status: Informational dashboard — no urgent action required.

Open Dependency PRs

None. All previous Dependabot PRs (14) have been merged. No Renovate PRs are currently open.

Config

Renovate is the primary dependency lifecycle tool. Config is healthy:

• Dashboard enabled; major, GitHub Actions, container, and protocol/runtime updates require explicit approval
• Patch devDependencies auto-merge after checks pass
• Vulnerability alerts bypass approval and create PRs immediately
• Weekly schedule (Monday before 6am TR)
• Lockfile maintenance auto-merged weekly

Dashboard Items Summary

Section	Count	Action
Abandoned Dependencies	10	Informational only — no action needed
Pending Approval	8	Major/risky updates gated by design — human approval required before PR creation
Awaiting Schedule	3	Scheduled weekly window — will auto-create at next schedule
Pending Status Checks	2	Pnpm updates awaiting prerequisite checks

Conclusion

No issues found. Renovate is operating as intended. Dashboard remains open as the canonical Renovate tracking issue.