#6 · stacks/ts-cloud

This issue lists Buddy Bot updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

[!CAUTION] 5 known vulnerabilities affect 1 dependency in this repository.

Severity	Package	Current	Advisory	Fixed in
🟠 High	`fast-xml-parser`	`^5.3.5`	GHSA-8gc5-j5rx-235r	`5.5.6`
🟠 High	`fast-xml-parser`	`^5.3.5`	GHSA-jmr7-xgp7-cmfj	`4.5.4`
🟡 Moderate	`fast-xml-parser`	`^5.3.5`	GHSA-gh4j-gqv2-49f6	`5.7.0`
🟡 Moderate	`fast-xml-parser`	`^5.3.5`	GHSA-jp2q-39xq-3w4g	`4.5.5`
⚪ Low	`fast-xml-parser`	`^5.3.5`	GHSA-fj3w-jwp8-x2g3	`5.3.8`

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

chore(deps): update illuminate packages to v13
chore(deps): update all non-major dependencies
chore(deps): update all non-major dependencies (props, loop)
Click on this checkbox to rebase all open PRs at once

Capped dependencies

The following packages are held below their latest version by a range declared elsewhere in the dependency tree. Updating this repository cannot move them — the constraint has to be widened where it is declared.

Package	Installed	Reachable	Latest	Capped by
`undici-types`	`8.3.0`	`8.3.0`	`8.10.1`	`@types/node` (`~8.3.0`)
`data-uri-to-buffer`	`6.0.2`	`6.0.2`	`8.0.0`	`ts-gif` (`^6.0.2`)
`@typescript/typescript-linux-x64`	`7.0.2`	`7.0.2`	`7.1.0-dev.20260902.1`	`typescript` (`7.0.2`)
`kleur`	`3.0.3`	`3.0.3`	`4.1.5`	`prompts` (`^3.0.3`)
`sisteransi`	`1.0.5`	`1.0.5`	`2.0.0`	`prompts` (`^1.0.5`)
`bun-types`	`1.3.14`	`1.3.14`	`1.4.1-canary.20260902T141424`	`@types/bun` (`1.3.14`)
`@stacksjs/desktop`	`0.2.230`	`0.2.230`	`0.70.232`	`@stacksjs/stx` (`0.2.230`)
`bun-plugin-dtsx`	`0.11.10`	`0.11.10`	`0.21.17`	`better-dx` (`^0.11.1`)
`@stacksjs/ts-cloud`	`0.12.11`	`0.7.127`	`0.12.11`	`@stacksjs/bunpress` (`^0.7.51`)
`bun-plugin-stx`	`0.2.230`	`0.2.230`	`0.2.265`	`@stacksjs/stx` (`0.2.230`)
`@stacksjs/sanitizer`	`0.2.230`	`0.2.230`	`0.2.265`	`@stacksjs/stx` (`0.2.230`)
`stx-router`	`0.2.230`	`0.2.230`	`0.2.265`	`@stacksjs/stx` (`0.2.230`)
`ts-broadcasting`	`0.0.9`	`0.0.9`	`0.0.10`	`@stacksjs/stx` (`^0.0.9`)

Detected dependencies

npm

package.json

better-dx ^0.2.25

package.json

@ts-charts/charts ^0.2.7
@ts-charts/graph ^0.2.7
@stacksjs/stx ^0.2.230

package.json

@ts-cloud/aws-types workspace:*
typescript ^7.0.2

package.json

typescript ^7.0.2

package.json

@stacksjs/ts-xml ^0.1.2
@ts-cloud/aws-types workspace:*
@ts-cloud/core workspace:*
hash-wasm ^4.12.0
better-dx ^0.2.25
bunfig ^0.15.19

github-actions

.github/workflows/upstream-drift.yml

actions/checkout v6
oven-sh/setup-bun v2
actions/github-script v7

.github/workflows/release.yml

actions/checkout v6.1.0
home-lang/pantry/packages/action main

.github/workflows/buddy-bot.yml

actions/checkout v4
oven-sh/setup-bun v2
shivammathur/setup-php v2

.github/workflows/ci.yml

actions/checkout v6
oven-sh/setup-bun v2.2.0
actions/cache v5.1.0
home-lang/pantry/packages/action main

dependency-files

deps.yaml

bun.sh ^1.3.14

packages/core/src/serverless-php/dockerfile.ts

packages/ts-cloud/src/deploy/fixtures/container/Dockerfile

pantry.lock

typescript ^5.9.3
fast-xml-parser ^5.3.5
better-dx ^0.2.5
bunfig ^0.15.6

packages/serverless-php-bridge/composer.json

illuminate/support 10.49.0
illuminate/queue 10.49.0
illuminate/console 10.49.0

Check this box to trigger a request for Buddy Bot to run again on this repository