#2 · stacks/ts-whatsapp

This issue lists Buddy Bot updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

[!CAUTION] 4 known vulnerabilities affect 1 dependency in this repository.

Severity	Package	Current	Advisory	Fixed in
🟠 High	`protobufjs`	`^7.5.6`	GHSA-wcpc-wj8m-hjx6	`7.6.1`
🟡 Moderate	`protobufjs`	`^7.5.6`	GHSA-f38q-mgvj-vph7	`7.6.3`
🟡 Moderate	`protobufjs`	`^7.5.6`	GHSA-j3f2-48v5-ccww	`7.6.5`
🟡 Moderate	`protobufjs`	`^7.5.6`	GHSA-jggg-4jg4-v7c6	`7.5.8`

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

chore(deps): update all non-major dependencies
chore(deps): update dependency protobufjs to 8.8.1 (protobufjs)
chore: Configure Renovate (renovate.json, package.json, .github/workflows/buddy-bot.yml, .github/workflows/ci.yml, .github/workflows/release.yml, fix, chore, vendor, renovate/stacksjs-action-releaser-1.x, main, renovate/actions-cache-5.x, renovate/actions-checkout-6.x, renovate/actions-cache-6.x, renovate/actions-checkout-7.x, renovate/protobufjs-8.x, sha512-d9e9179bjXSJdpJ3+R9fP8hzXsnKLyxTjHLG1dUzje8a27pPyXCe6PrcRtgx2rjoM3IZzHd2vAs+6J/BsO1k7Q==, prHourlyLimit)
Click on this checkbox to rebase all open PRs at once

Capped dependencies

The following packages are held below their latest version by a range declared elsewhere in the dependency tree. Updating this repository cannot move them — the constraint has to be widened where it is declared.

Package	Installed	Reachable	Latest	Capped by
`undici-types`	`8.9.0`	`8.9.0`	`8.12.3`	`@types/node` (`~8.9.0`)
`protobufjs`	`7.6.6`	`7.6.6`	`8.8.1`	`libsignal` (`^7.5.5`)
`data-uri-to-buffer`	`6.0.2`	`6.0.2`	`8.0.0`	`ts-gif` (`^6.0.2`)
`typescript`	`7.0.2`	`7.0.2`	`7.1.0-dev.20261102.1`	`better-dx` (`^7.0.2`)
`@typescript/typescript-linux-x64`	`7.0.2`	`7.0.2`	`7.1.0-dev.20261102.1`	`typescript` (`7.0.2`)
`kleur`	`3.0.3`	`3.0.3`	`4.1.5`	`prompts` (`^3.0.3`)
`sisteransi`	`1.0.5`	`1.0.5`	`2.0.0`	`prompts` (`^1.0.5`)
`bun-types`	`1.4.2`	`1.4.2`	`1.4.4`	`@types/bun` (`1.4.2`)
`@stacksjs/desktop`	`0.2.372`	`0.2.372`	`0.70.232`	`@stacksjs/stx` (`0.2.372`)
`@stacksjs/dtsx`	`0.11.17`	`0.11.17`	`0.11.25`	`bun-plugin-dtsx` (`0.11.17`)
`@stacksjs/stx`	`0.2.372`	`0.2.372`	`0.2.789`	`bun-plugin-stx` (`0.2.372`)
`@stacksjs/sanitizer`	`0.2.372`	`0.2.372`	`0.2.789`	`@stacksjs/stx` (`0.2.372`)
`bun-plugin-stx`	`0.2.372`	`0.2.372`	`0.2.789`	`@stacksjs/stx` (`0.2.372`)
`stx-router`	`0.2.372`	`0.2.372`	`0.2.789`	`@stacksjs/stx` (`0.2.372`), `bun-plugin-stx` (`0.2.372`)
`ts-broadcasting`	`0.0.10`	`0.0.10`	`0.0.11`	`@stacksjs/stx` (`^0.0.10`)

Detected dependencies

npm

package.json

@types/bun latest
better-dx ^0.2.15
curve25519-js ^0.0.4
libsignal ^6.0.0
protobufjs ^7.5.6

github-actions

.github/workflows/buddy-bot.yml

actions/checkout v6
oven-sh/setup-bun v2
shivammathur/setup-php v2

.github/workflows/release.yml

actions/checkout v6.0.1
home-lang/pantry/packages/action main
stacksjs/action-releaser v1.2.9

.github/workflows/ci.yml

actions/checkout v6
oven-sh/setup-bun v2.2.0
actions/cache v5.0.4
home-lang/pantry/packages/action main

dependency-files

deps.yaml

bun.sh ^1.3.13

Check this box to trigger a request for Buddy Bot to run again on this repository