ReviewOS

stacks/ts-css

Dependency Dashboard

#6
Open chris opened this 9 days ago ·
9 days ago

This issue lists Buddy Bot updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

[!CAUTION] 4 known vulnerabilities affect 1 dependency in this repository.

SeverityPackageCurrentAdvisoryFixed in
🟠 Highpostcss^8.5.6GHSA-6g55-p6wh-862q8.5.12
🟠 Highpostcss^8.5.6GHSA-r28c-9q8g-f8498.5.18
🟡 Moderatepostcss^8.5.6GHSA-fxqj-rqcc-2cmp8.5.23
🟡 Moderatepostcss^8.5.6GHSA-qx2v-qp2m-jg938.5.10

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

  • chore(deps): update dependency @types/css-tree to v3 (@types/css-tree)
  • chore(deps): update actions/checkout action to v7 (allow-unsafe-pr-checkout)
  • chore(deps): update dependency tailwindcss to 4.3.4 (tailwindcss, @tailwindcss/turbopack, tailwindlabs/tailwindcss#20367, @source, tailwindlabs/tailwindcss#20356, @scope, tailwindlabs/tailwindcss#20369, tailwindlabs/tailwindcss#20373, in, and, auto-rows-12, auto-cols-16, tailwindlabs/tailwindcss#20229, @tailwindcss/cli, tailwindlabs/tailwindcss#20242, @tailwindcss/vite, context.parentURL, tailwindlabs/tailwindcss#20245, tailwindlabs/tailwindcss#20246, @variant, tailwindlabs/tailwindcss#20247, tailwindlabs/tailwindcss#20259, font-size, color)
  • chore(deps): update dependency @types/css-tree to 3.2.0 (@types/css-tree)
  • chore(deps): update all non-major dependencies (@tailwindcss/cli, tailwindlabs/tailwindcss#20297, bg-white, tailwindlabs/tailwindcss#20298, tailwindlabs/tailwindcss#20292, tailwindlabs/tailwindcss#20299, shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, inset-shadow-sm/12.5, tailwindlabs/tailwindcss#20302, tailwindlabs/tailwindcss#20303, and, in, tailwindlabs/tailwindcss#20100, tailwindlabs/tailwindcss#20028, tailwindlabs/tailwindcss#20052, @apply, tailwindlabs/tailwindcss#19427, @container, tailwindlabs/tailwindcss#20059, tailwindlabs/tailwindcss#20080, @tailwindcss/vite, tailwindlabs/tailwindcss#20103, @tailwindcss/webpack, auto-rows-12, auto-cols-16, tailwindlabs/tailwindcss#20229, @source, tailwindlabs/tailwindcss#20242, context.parentURL, tailwindlabs/tailwindcss#20245, tailwindlabs/tailwindcss#20246, @variant, tailwindlabs/tailwindcss#20247, tailwindlabs/tailwindcss#20259, font-size, color, to, babel-parser, babel/babel#18218, babel/babel#18215, babel/babel#18063, babel-plugin-transform-destructuring)
  • fix(deps): update vulnerable dependencies (postcss, from, opts.from, start, Promise, </style>)
  • chore(deps): update actions/cache action to v6 (@actions/cache, @actions/core, actions/cache@v5)
  • chore(deps): update all non-major dependencies (babel-helper-module-transforms, babel-helper-transform-fixture-test-runner, babel-helpers, babel-plugin-proposal-bytes-modules, babel-plugin-proposal-filtered-namespaces, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-text-modules, babel-plugin-transform-dynamic-import, babel-plugin-transform-json-modules, babel-runtime-corejs3, babel-runtime, babel-standalone, babel-generator, babel-helper-import-to-platform-api, babel-parser, babel-plugin-transform-export-namespace-from, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-traverse, babel-types, babel/no-empty, babel-cli, babel-core, babel-plugin-transform-classes, noUninitializedThis, noClassPrototypeAssign, noConstructorPrimitiveReturn, yield, in, isUnparsedContextual, babel-helper-skip-transparent-expression-wrappers, babel-plugin-transform-optional-chaining, importDeferProxy, startNodeAt, babel-plugin-transform-block-scoping, babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, ObjectPattern, babel-build-external-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-properties, babel-plugin-transform-regenerator, @babel/core, babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-plugin-transform-for-of, transform-for-of, asyncIterator, @@toPrimitive, babel-plugin-transform-private-property-in-object, path.evaluate, interopRequireWildcard, babel-helper-validator-identifier, babel-helper-string-parser, babel-code-frame, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-typescript, babel-helper-compilation-targets, babel-helper-globals, babel-node, babel-plugin-transform-runtime, babel-register, lru-cache, flru, babel-plugin-transform-destructuring, enum, namespace, @babel/standalone, babel-helper-fixtures, semver, verkit, @babel/parser, enableDebugClassNames, defineConsts, min-width, max-width, unplugin, content, @tailwindcss/turbopack, @source, @scope, @tailwindcss/vite, bundledDev, @tailwindcss/oxide, @utility, boxalphabetic, /*, !/…, DEFAULT, unset, rounded-sm/[5], shadow-sm/foo, stroke-2/50, and, or, not, bg-red-500/50/, group-hover/foo//bar:flex, \*/, loadModule, loadStylesheet, Set.prototype.intersection, theme(colors.red.500/.12345), text-red-500/[12.345%], text-red-500/[12.345], theme(colors.red.500/50%), text-red-500/[50%], @property, dvmin, svi, cap, rex, font-size, color, input(pattern=/"/.source), text-primary, text-card-checked-border, my-card, my-4, @tailwindcss/postcss, @import, sr-only, @tailwindcss/webpack, mt-4, link, @tailwindcss/cli, bg-white, shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, inset-shadow-sm/12.5, @tailwindcss/browser, oklch, @parcel/watcher, system-ui, ui-sans-serif, lang, @tailwindcss/upgrade, auto-rows-12, auto-cols-16, context.parentURL, @variant, @position-try, @apply, @container, webpack, left-24999.75, addBase, inset-shadow-none, **/*, w-[calc(100%/3.5)], m-0, left-0, m-1, left-1, @container-size)
  • Click on this checkbox to rebase all open PRs at once

Capped dependencies

The following packages are held below their latest version by a range declared elsewhere in the dependency tree. Updating this repository cannot move them — the constraint has to be widened where it is declared.

PackageInstalledReachableLatestCapped by
entities8.1.08.1.09.0.0dom-serializer (^8.0.0)
undici-types8.12.18.9.08.12.3@types/node (~8.9.0)
data-uri-to-buffer6.0.26.0.28.0.0ts-gif (^6.0.2)
@typescript/typescript-linux-x647.0.27.0.27.1.0-dev.20261102.1typescript (7.0.2)
kleur3.0.33.0.34.1.5prompts (^3.0.3)
@types/css-tree2.3.112.3.113.2.0@types/csso (^2)
mdn-data2.27.12.27.12.37.2css-tree (2.27.1)
sisteransi1.0.51.0.52.0.0prompts (^1.0.5)
bun-types1.4.31.4.31.4.4@types/bun (1.4.3)
@stacksjs/desktop0.2.5180.2.5180.70.232@stacksjs/stx (0.2.518)
@stacksjs/dtsx0.11.190.11.190.11.25bun-plugin-dtsx (0.11.19)
@stacksjs/stx0.2.5180.2.5180.2.789bun-plugin-stx (0.2.518)
bun-plugin-stx0.2.5180.2.5180.2.789@stacksjs/stx (0.2.518)
stx-router0.2.5180.2.5180.2.789@stacksjs/stx (0.2.518), bun-plugin-stx (0.2.518)
@stacksjs/sanitizer0.2.5180.2.5180.2.789@stacksjs/stx (0.2.518)

Detected dependencies

npm
package.json
  • @stacksjs/logsmith ^0.2.14
  • better-dx ^0.2.15
package.json
  • @stacksjs/clapp ^0.2.0
  • bunfig ^0.15.17
  • @types/bun latest
  • @types/css-tree ^2.3.11
  • @types/csso ^5.0.4
  • better-dx ^0.2.15
  • css-select ^7.0.0
  • css-tree ^3.2.1
  • css-what ^8.0.0
  • csso ^5.0.5
  • mitata ^1.0.34
package.json
package.json
  • @unocss/core ^66.6.7
  • @unocss/preset-wind ^66.6.7
  • @babel/core ^8.0.1
  • @stylexjs/babel-plugin ^0.19.0
  • @stylexjs/stylex ^0.19.0
  • @tailwindcss/node ^4.1.14
  • @tailwindcss/postcss ^4.1
  • @tailwindcss/vite ^4.1
  • mitata ^1.0.34
  • postcss ^8.5.6
  • tailwindcss ^3
  • tailwindcss-v4 npm:tailwindcss@^4
github-actions
.github/workflows/buddy-bot.yml
  • actions/checkout v6
  • oven-sh/setup-bun v2
  • shivammathur/setup-php v2
.github/workflows/release.yml
  • actions/checkout v6
  • home-lang/pantry/packages/action main
.github/workflows/ci.yml
  • actions/checkout v6
  • oven-sh/setup-bun v2
  • actions/cache v5
  • home-lang/pantry/packages/action main
dependency-files
deps.yaml
  • bun.sh ^1.4.1
packages/toolkit/deps.yaml
  • bun.sh ^1.3.14
packages/toolkit/pantry.lock
  • bun.sh 0.0.0
  • bun.sh 1.3.9
pantry.lock
  • @stacksjs/clapp 0.2.10
  • better-dx 0.2.19
  • bun.sh 1.3.14
  • bunfig 0.15.15

  • Check this box to trigger a request for Buddy Bot to run again on this repository

Sign in to comment on this issue.