#13 · stacks/bunpress

This issue lists Buddy Bot updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

[!CAUTION] 4 known vulnerabilities affect 2 dependencies in this repository.

Severity	Package	Current	Advisory	Fixed in
🟡 Moderate	`markdown-it`	`^14.1.1`	GHSA-6v5v-wf23-fmfq	`14.2.0`
🟡 Moderate	`showdown`	`^2.1.0`	GHSA-22g5-r2x5-97cx	`n/a`
🟡 Moderate	`showdown`	`^2.1.0`	GHSA-cr32-g25g-vxjj	`n/a`
🟡 Moderate	`showdown`	`^2.1.0`	GHSA-rmmh-p597-ppvv	`n/a`

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

fix(deps): update vulnerable dependencies (markdown-it)
chore(deps): update dependency markdown-it to v15 (markdown-it, markdownit, @types/markdown-it, markdown-it/browser, argparse, linkify-it, dist/, dist/browser/, entities, validateLink, normalizeLink, normalizeLinkText, markdown-it/lib/*, markdown-it-deflist, isPunctCharCode, lheading)
chore(deps): update dependency markdown-it to 15.0.0 (markdown-it)
chore(deps): update actions/checkout action to v7
chore(deps): update dependency marked to 18.0.11 (marked, markedjs/marked#4051, markedjs/marked#4040, markedjs/marked#4059, markedjs/marked#4044, markedjs/marked#4039, markedjs/marked#4046, markedjs/marked#4045, markedjs/marked#4008, markedjs/marked#4030, markedjs/marked#3999)
chore(deps): update dependency marked to v18 (marked)
chore(deps): update all non-major dependencies (stacksjs/stacks#2375, stacksjs/stacks#2322, stacksjs/stacks#2391, stacksjs/stacks#2394, stacksjs/stacks#2224, stacksjs/stacks#2385, stacksjs/stacks#2403)
chore(deps): update dependency typescript to 7.0.2 (typescript)
chore(deps): update all non-major dependencies (next)
Click on this checkbox to rebase all open PRs at once

Capped dependencies

The following packages are held below their latest version by a range declared elsewhere in the dependency tree. Updating this repository cannot move them — the constraint has to be widened where it is declared.

Package	Installed	Reachable	Latest	Capped by
`undici-types`	`8.3.0`	`8.3.0`	`8.10.1`	`@types/node` (`~8.3.0`)
`data-uri-to-buffer`	`6.0.2`	`6.0.2`	`8.0.0`	`ts-gif` (`^6.0.2`)
`@typescript/typescript-linux-x64`	`7.0.2`	`7.0.2`	`7.1.0-dev.20260902.1`	`typescript` (`7.0.2`)
`@stacksjs/desktop`	`0.2.173`	`0.2.173`	`0.70.232`	`@stacksjs/stx` (`0.2.173`)
`stx-router`	`0.2.173`	`0.2.173`	`0.2.265`	`@stacksjs/stx` (`0.2.173`)
`@stacksjs/sanitizer`	`0.2.173`	`0.2.173`	`0.2.265`	`@stacksjs/stx` (`0.2.173`)
`bun-plugin-stx`	`0.2.173`	`0.2.173`	`0.2.265`	`@stacksjs/stx` (`0.2.173`)
`ts-images`	`0.1.11`	`0.1.11`	`0.2.14`	`@stacksjs/stx` (`^0.1.9`)
`ts-broadcasting`	`0.0.9`	`0.0.9`	`0.0.10`	`@stacksjs/stx` (`^0.0.9`)

Detected dependencies

npm

package.json

commonmark ^0.31.2
marked ^17.0.4
markdown-it ^14.1.1
micromark ^4.0.2
micromark-extension-gfm ^3.0.0
showdown ^2.1.0
unified ^11.0.5
remark-parse ^11.0.0
remark-gfm ^4.0.1
remark-rehype ^11.1.2
rehype-stringify ^10.0.1
mitata ^1.0.34
@types/commonmark ^0.27.10
@types/markdown-it ^14.1.2
@types/showdown ^2.0.6
markdown-it-task-lists ^2.1.1

package.json

@stacksjs/bumpx ^0.2.4
@stacksjs/env ^0.70.371
@stacksjs/gitlint ^0.1.5
@stacksjs/logsmith ^0.2.1
bun-git-hooks ^0.3.1
bun-plugin-dtsx ^0.11.10
bun-types ^1.3.11
pickier ^0.1.55
typescript ^7.0.2

package.json

bun-plugin-dtsx ^0.10.4
typescript ^7.0.2

package.json

@cwcss/crosswind ^0.2.16
@stacksjs/clapp ^0.2.0
@stacksjs/stx ^0.2.171
@stacksjs/ts-i18n ^0.1.11
bunfig ^0.15.17
ts-syntax-highlighter ^0.2.14
bun-plugin-dtsx ^0.10.4
typescript ^7.0.2
@stacksjs/ts-cloud ^0.7.51

github-actions

.github/workflows/ci.yml

actions/checkout v6
pantry-pm/pantry/packages/action 9f797da1ed073df7839cb6a9a7db6181ba33f0b7
aws-actions/configure-aws-credentials e6de054238d6b7531b4efff3b6587d9aade6a06c

.github/workflows/release.yml

actions/checkout v6
pantry-pm/pantry/packages/action 9f797da1ed073df7839cb6a9a7db6181ba33f0b7
stacksjs/action-releaser v1.2.9

.github/workflows/buddy-bot.yml

actions/checkout v4
oven-sh/setup-bun v2
shivammathur/setup-php v2

dependency-files

deps.yaml

bun.sh @1.3.14

pantry.lock

@cwcss/crosswind 0.2.16
@stacksjs/bumpx 0.2.6
@stacksjs/clapp 0.2.12
@stacksjs/gitlint 0.1.6
@stacksjs/logsmith 0.2.3
@stacksjs/stx 0.2.173
@stacksjs/ts-i18n 0.1.11
bun-git-hooks 0.3.2
bun-plugin-dtsx 0.10.9
bun-types 1.3.14-canary.20260425T142013
bun.sh 1.3.14
bunfig 0.15.17
ts-syntax-highlighter 0.2.14
typescript 7.0.2

Check this box to trigger a request for Buddy Bot to run again on this repository