#3 · stacks/browser

This issue lists Buddy updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

[!CAUTION] 2 known vulnerabilities affect 1 dependency in this repository.

Severity	Package	Current	Advisory	Fixed in
🟠 High	`bun`	`@1.4.4`	GHSA-4j66-8f4r-3pjx	`n/a`
🟡 Moderate	`bun`	`@1.4.4`	GHSA-v9mx-4pqq-h232	`n/a`

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

chore(deps): update all non-major dependencies (deps.yaml)
chore(deps): update github actions (cdb82193cb344c2b881a88ea79f88243f5522e0f, cdb0.11.157, buddy-bot.yml, release.yml)
Click on this checkbox to rebase all open PRs at once

Capped dependencies

The following packages are held below their latest version by a range declared elsewhere in the dependency tree. Updating this repository cannot move them — the constraint has to be widened where it is declared.

Package	Installed	Reachable	Latest	Capped by
`undici-types`	`8.12.3`	`8.9.0`	`8.12.3`	`@types/node` (`~8.9.0`)
`data-uri-to-buffer`	`6.0.2`	`6.0.2`	`8.0.0`	`ts-gif` (`^6.0.2`)
`typescript`	`7.1.0-dev.20261011.1`	`7.1.0-dev.20261011.1`	`7.1.0-dev.20261102.1`	`better-dx` (`7.1.0-dev.20261011.1`)
`@typescript/typescript-linux-x64`	`7.1.0-dev.20261011.1`	`7.1.0-dev.20261011.1`	`7.1.0-dev.20261102.1`	`typescript` (`7.1.0-dev.20261011.1`)
`@xterm/xterm`	`6.0.0`	`6.0.0`	`6.1.0-beta.336`	`@stacksjs/defaults` (`^6.0.0`)
`fast-uri`	`3.1.9`	`3.1.9`	`4.2.3`	`ajv` (`^3.0.1`)
`kleur`	`3.0.3`	`3.0.3`	`4.1.5`	`prompts` (`^3.0.3`)
`sisteransi`	`1.0.5`	`1.0.5`	`2.0.0`	`prompts` (`^1.0.5`)
`@stacksjs/desktop`	`0.2.784`	`0.2.784`	`0.70.232`	`@stacksjs/stx` (`0.2.784`), `stacks` (`0.2.784`)
`@stacksjs/components`	`0.2.784`	`0.2.784`	`0.70.23`	`@stacksjs/actions` (`0.2.784`), `@stacksjs/ui` (`0.2.784`)
`bun-plugin-dtsx`	`0.11.23`	`0.11.23`	`0.21.17`	`better-dx` (`^0.11.10`), `@stacksjs/build` (`^0.11.21`)
`@xterm/addon-fit`	`0.11.0`	`0.11.0`	`0.12.0-beta.332`	`@stacksjs/defaults` (`^0.11.0`)
`@stacksjs/ts-svg`	`0.1.7`	`0.1.7`	`0.5.1`	`@stacksjs/image` (`^0.1.5`), `ts-images` (`^0.1.1`)
`localtunnels`	`0.2.13`	`0.2.13`	`0.3.1`	`@stacksjs/tunnel` (`^0.2.13`)

Detected dependencies

npm

package.json

@stacksjs/stx 0.2.784
stacks ^0.75.422
@stacksjs/env ^0.75.422
@stacksjs/path ^0.75.422
@stacksjs/actions ^0.75.422
@stacksjs/desktop-build ^0.75.422
very-good-adblock ^0.3.6
@stacksjs/components 0.2.784
better-dx ^0.2.37
craft-native ^0.0.424
bun-plugin-stx 0.2.784

package.json

@stacksjs/logging ^0.75.397
@stacksjs/queue ^0.75.397
@stacksjs/router ^0.75.397
@stacksjs/storage ^0.75.397
@stacksjs/utils ^0.75.397

package.json

@stacksjs/config ^0.75.397
@stacksjs/dns ^0.75.397
@stacksjs/logging ^0.75.397
@stacksjs/path ^0.75.397
@stacksjs/queue ^0.75.397
@stacksjs/router ^0.75.397
@stacksjs/storage ^0.75.397
@stacksjs/utils ^0.75.397
@stacksjs/validation ^0.75.397
@stacksjs/cli ^0.75.397
better-dx ^0.2.37
@stacksjs/env ^0.75.397

package.json

@stacksjs/bun-router ^0.1.24
@stacksjs/cache ^0.75.397
@stacksjs/database ^0.75.397
@stacksjs/error-handling ^0.75.397
better-dx ^0.2.24

package.json

stacks ^0.75.397

package.json

package.json

better-dx ^0.2.24
@stacksjs/logging ^0.75.397
@stacksjs/path ^0.75.397
@stacksjs/router ^0.75.397
@stacksjs/storage ^0.75.397
@stacksjs/utils ^0.75.397

github-actions

.github/workflows/buddy-bot.yml

actions/checkout v4
pantry-pm/pantry/packages/action cdb82193cb344c2b881a88ea79f88243f5522e0f

.github/workflows/labeler.yml

actions/labeler v6

.github/workflows/release.yml

actions/checkout v6
pantry-pm/pantry/packages/action cdb82193cb344c2b881a88ea79f88243f5522e0f
actions/cache v5
stacksjs/action-releaser v1.2.9

.github/workflows/ci.yml

actions/checkout v4
pantry-pm/pantry/packages/action cdb82193cb344c2b881a88ea79f88243f5522e0f
actions/cache v4

.github/workflows/deploy.yml

actions/checkout v6
oven-sh/setup-bun v2
pantry-pm/pantry/packages/action cdb82193cb344c2b881a88ea79f88243f5522e0f
webfactory/ssh-agent v0.9.0

.github/workflows/preview.yml

actions/checkout v6
oven-sh/setup-bun v2
pantry-pm/pantry/packages/action cdb82193cb344c2b881a88ea79f88243f5522e0f

dependency-files

deps.yaml

bun @1.4.4
curl ^8.22.0
git ^2.47.0
sqlite ^3.47.2
github.com/mail-os/mail ^0.3.2
openssl.org ^3
curl.se/ca-certs *
zlib.net ^1.2.11
nghttp2.org *
curl.se >=5
perl.org *
libexpat.github.io ~2
gnu.org/gettext ^0.21
gnu.org/libiconv *
gnome.org/libxml2 ~2.13 # 2.14 changes the API
tukaani.org/xz ^5 # autopoint needs this to unpack archives
gnu.org/gcc/libstdcxx @14
gnu.org/binutils *
gnu.org/gmp >=4.2
gnu.org/mpfr >=2.4.0
gnu.org/mpc >=0.8.0
darwin/x86-64 ^# since 15.1.0
gnu.org/readline @8
invisible-island.net/ncurses ^6

cloud/Dockerfile

storage/framework/Dockerfile

storage/framework/server/Dockerfile

pantry.lock

bun.sh 1.4.4
curl.se/ca-certs 2026.3.19
curl.se 8.23.0
facebook.com/zstd 1.5.7
git-scm.org 2.53.0
github.com/google/brotli 1.2.0
github.com/mail-os/mail 0.3.26
gnome.org/libxml2 2.13.9
gnu.org/gettext 0.21.1
gnu.org/libidn2 2.3.8
gnu.org/readline 8.3.0
invisible-island.net/ncurses 6.6.0
libexpat.github.io 2.9.0
lz4.org 1.10.0
nghttp2.org 1.70.0
openssl.org 3.6.5
perl.org 5.44.0
sqlite.org 3.54.1
tukaani.org/xz 5.8.2
zlib.net 1.3.2

Check this box to trigger a request for Buddy to run again on this repository