This issue lists Buddy Bot updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
[!CAUTION] 4 known vulnerabilities affect 1 dependency in this repository.
| Severity | Package | Current | Advisory | Fixed in |
|---|---|---|---|---|
| 🟠 High | postcss | ^8.5.6 | GHSA-6g55-p6wh-862q | 8.5.12 |
| 🟠 High | postcss | ^8.5.6 | GHSA-r28c-9q8g-f849 | 8.5.18 |
| 🟡 Moderate | postcss | ^8.5.6 | GHSA-fxqj-rqcc-2cmp | 8.5.23 |
| 🟡 Moderate | postcss | ^8.5.6 | GHSA-qx2v-qp2m-jg93 | 8.5.10 |
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
- chore(deps): update dependency @types/css-tree to v3 (
@types/css-tree) - chore(deps): update actions/checkout action to v7 (
allow-unsafe-pr-checkout) - chore(deps): update dependency tailwindcss to 4.3.4 (
tailwindcss,@tailwindcss/turbopack,tailwindlabs/tailwindcss#20367,@source,tailwindlabs/tailwindcss#20356,@scope,tailwindlabs/tailwindcss#20369,tailwindlabs/tailwindcss#20373,in,and,auto-rows-12,auto-cols-16,tailwindlabs/tailwindcss#20229,@tailwindcss/cli,tailwindlabs/tailwindcss#20242,@tailwindcss/vite,context.parentURL,tailwindlabs/tailwindcss#20245,tailwindlabs/tailwindcss#20246,@variant,tailwindlabs/tailwindcss#20247,tailwindlabs/tailwindcss#20259,font-size,color) - chore(deps): update dependency @types/css-tree to 3.2.0 (
@types/css-tree) - chore(deps): update all non-major dependencies (
@tailwindcss/cli,tailwindlabs/tailwindcss#20297,bg-white,tailwindlabs/tailwindcss#20298,tailwindlabs/tailwindcss#20292,tailwindlabs/tailwindcss#20299,shadow-sm/12.5,text-shadow-sm/12.5,drop-shadow-sm/12.5,inset-shadow-sm/12.5,tailwindlabs/tailwindcss#20302,tailwindlabs/tailwindcss#20303,and,in,tailwindlabs/tailwindcss#20100,tailwindlabs/tailwindcss#20028,tailwindlabs/tailwindcss#20052,@apply,tailwindlabs/tailwindcss#19427,@container,tailwindlabs/tailwindcss#20059,tailwindlabs/tailwindcss#20080,@tailwindcss/vite,tailwindlabs/tailwindcss#20103,@tailwindcss/webpack,auto-rows-12,auto-cols-16,tailwindlabs/tailwindcss#20229,@source,tailwindlabs/tailwindcss#20242,context.parentURL,tailwindlabs/tailwindcss#20245,tailwindlabs/tailwindcss#20246,@variant,tailwindlabs/tailwindcss#20247,tailwindlabs/tailwindcss#20259,font-size,color,to,babel-parser,babel/babel#18218,babel/babel#18215,babel/babel#18063,babel-plugin-transform-destructuring) - fix(deps): update vulnerable dependencies (
postcss,from,opts.from,start,Promise,</style>) - chore(deps): update actions/cache action to v6 (
@actions/cache,@actions/core,actions/cache@v5) - chore(deps): update all non-major dependencies (
babel-helper-module-transforms,babel-helper-transform-fixture-test-runner,babel-helpers,babel-plugin-proposal-bytes-modules,babel-plugin-proposal-filtered-namespaces,babel-plugin-proposal-import-wasm-source,babel-plugin-proposal-text-modules,babel-plugin-transform-dynamic-import,babel-plugin-transform-json-modules,babel-runtime-corejs3,babel-runtime,babel-standalone,babel-generator,babel-helper-import-to-platform-api,babel-parser,babel-plugin-transform-export-namespace-from,babel-plugin-transform-modules-amd,babel-plugin-transform-modules-commonjs,babel-plugin-transform-modules-systemjs,babel-plugin-transform-modules-umd,babel-traverse,babel-types,babel/no-empty,babel-cli,babel-core,babel-plugin-transform-classes,noUninitializedThis,noClassPrototypeAssign,noConstructorPrimitiveReturn,yield,in,isUnparsedContextual,babel-helper-skip-transparent-expression-wrappers,babel-plugin-transform-optional-chaining,importDeferProxy,startNodeAt,babel-plugin-transform-block-scoping,babel-helper-create-class-features-plugin,babel-plugin-proposal-decorators,ObjectPattern,babel-build-external-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-class-properties,babel-plugin-transform-regenerator,@babel/core,babel-helper-create-regexp-features-plugin,babel-plugin-transform-dotall-regex,babel-plugin-transform-unicode-sets-regex,babel-preset-env,babel-plugin-transform-for-of,transform-for-of,asyncIterator,@@toPrimitive,babel-plugin-transform-private-property-in-object,path.evaluate,interopRequireWildcard,babel-helper-validator-identifier,babel-helper-string-parser,babel-code-frame,babel-plugin-bugfix-safari-rest-destructuring-rhs-array,babel-plugin-proposal-destructuring-private,babel-plugin-proposal-discard-binding,babel-plugin-transform-typescript,babel-helper-compilation-targets,babel-helper-globals,babel-node,babel-plugin-transform-runtime,babel-register,lru-cache,flru,babel-plugin-transform-destructuring,enum,namespace,@babel/standalone,babel-helper-fixtures,semver,verkit,@babel/parser,enableDebugClassNames,defineConsts,min-width,max-width,unplugin,content,@tailwindcss/turbopack,@source,@scope,@tailwindcss/vite,bundledDev,@tailwindcss/oxide,@utility,boxalphabetic,/*,!/…,DEFAULT,unset,rounded-sm/[5],shadow-sm/foo,stroke-2/50,and,or,not,bg-red-500/50/,group-hover/foo//bar:flex,\*/,loadModule,loadStylesheet,Set.prototype.intersection,theme(colors.red.500/.12345),text-red-500/[12.345%],text-red-500/[12.345],theme(colors.red.500/50%),text-red-500/[50%],@property,dvmin,svi,cap,rex,font-size,color,input(pattern=/"/.source),text-primary,text-card-checked-border,my-card,my-4,@tailwindcss/postcss,@import,sr-only,@tailwindcss/webpack,mt-4,link,@tailwindcss/cli,bg-white,shadow-sm/12.5,text-shadow-sm/12.5,drop-shadow-sm/12.5,inset-shadow-sm/12.5,@tailwindcss/browser,oklch,@parcel/watcher,system-ui,ui-sans-serif,lang,@tailwindcss/upgrade,auto-rows-12,auto-cols-16,context.parentURL,@variant,@position-try,@apply,@container,webpack,left-24999.75,addBase,inset-shadow-none,**/*,w-[calc(100%/3.5)],m-0,left-0,m-1,left-1,@container-size) - Click on this checkbox to rebase all open PRs at once
Capped dependencies
The following packages are held below their latest version by a range declared elsewhere in the dependency tree. Updating this repository cannot move them — the constraint has to be widened where it is declared.
| Package | Installed | Reachable | Latest | Capped by |
|---|---|---|---|---|
entities | 8.1.0 | 8.1.0 | 9.0.0 | dom-serializer (^8.0.0) |
undici-types | 8.12.1 | 8.9.0 | 8.12.3 | @types/node (~8.9.0) |
data-uri-to-buffer | 6.0.2 | 6.0.2 | 8.0.0 | ts-gif (^6.0.2) |
@typescript/typescript-linux-x64 | 7.0.2 | 7.0.2 | 7.1.0-dev.20261102.1 | typescript (7.0.2) |
kleur | 3.0.3 | 3.0.3 | 4.1.5 | prompts (^3.0.3) |
@types/css-tree | 2.3.11 | 2.3.11 | 3.2.0 | @types/csso (^2) |
mdn-data | 2.27.1 | 2.27.1 | 2.37.2 | css-tree (2.27.1) |
sisteransi | 1.0.5 | 1.0.5 | 2.0.0 | prompts (^1.0.5) |
bun-types | 1.4.3 | 1.4.3 | 1.4.4 | @types/bun (1.4.3) |
@stacksjs/desktop | 0.2.518 | 0.2.518 | 0.70.232 | @stacksjs/stx (0.2.518) |
@stacksjs/dtsx | 0.11.19 | 0.11.19 | 0.11.25 | bun-plugin-dtsx (0.11.19) |
@stacksjs/stx | 0.2.518 | 0.2.518 | 0.2.789 | bun-plugin-stx (0.2.518) |
bun-plugin-stx | 0.2.518 | 0.2.518 | 0.2.789 | @stacksjs/stx (0.2.518) |
stx-router | 0.2.518 | 0.2.518 | 0.2.789 | @stacksjs/stx (0.2.518), bun-plugin-stx (0.2.518) |
@stacksjs/sanitizer | 0.2.518 | 0.2.518 | 0.2.789 | @stacksjs/stx (0.2.518) |
Detected dependencies
npm
package.json
@stacksjs/logsmith ^0.2.14better-dx ^0.2.15package.json
@stacksjs/clapp ^0.2.0bunfig ^0.15.17@types/bun latest@types/css-tree ^2.3.11@types/csso ^5.0.4better-dx ^0.2.15css-select ^7.0.0css-tree ^3.2.1css-what ^8.0.0csso ^5.0.5mitata ^1.0.34package.json
package.json
@unocss/core ^66.6.7@unocss/preset-wind ^66.6.7@babel/core ^8.0.1@stylexjs/babel-plugin ^0.19.0@stylexjs/stylex ^0.19.0@tailwindcss/node ^4.1.14@tailwindcss/postcss ^4.1@tailwindcss/vite ^4.1mitata ^1.0.34postcss ^8.5.6tailwindcss ^3tailwindcss-v4 npm:tailwindcss@^4
github-actions
.github/workflows/buddy-bot.yml
actions/checkout v6oven-sh/setup-bun v2shivammathur/setup-php v2.github/workflows/release.yml
actions/checkout v6home-lang/pantry/packages/action main.github/workflows/ci.yml
actions/checkout v6oven-sh/setup-bun v2actions/cache v5home-lang/pantry/packages/action main
dependency-files
deps.yaml
bun.sh ^1.4.1packages/toolkit/deps.yaml
bun.sh ^1.3.14packages/toolkit/pantry.lock
bun.sh 0.0.0bun.sh 1.3.9pantry.lock
@stacksjs/clapp 0.2.10better-dx 0.2.19bun.sh 1.3.14bunfig 0.15.15
- Check this box to trigger a request for Buddy Bot to run again on this repository