Dependency Dashboard

[renovate[bot]]

This issue provides visibility into Renovate updates and their statuses. Learn more

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• [ ] Update pnpm to v7.1.3
• [ ] Update dependency @tailwindcss/line-clamp to ^0.4.0
• [ ] Update Node.js to v18
• [ ] Update actions/cache action to v3
• [ ] Update actions/checkout action to v3
• [ ] Update actions/setup-node action to v3
• [ ] Update dependency @intlify/eslint-plugin-vue-i18n to v2
• [ ] Update dependency @testing-library/user-event to v14
• [ ] Update dependency @vue/test-utils to v2
• [ ] Update dependency eslint-plugin-vue to v9
• [ ] Update dependency husky to v8
• [ ] Update dependency throttle-debounce to v5
• [ ] Update dependency vue to v3
• [ ] Update dependency vue-i18n to v9
• [ ] Update dependency webpack to v5
• [ ] Update docker/build-push-action action to v3
• [ ] Update docker/login-action action to v2
• [ ] Update docker/metadata-action action to v4
• [ ] Update docker/setup-buildx-action action to v2
• [ ] Update jest monorepo (major) (@types/jest, babel-jest, jest)

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• [x] Update dependency @pinia/testing to ^0.0.12

Detected dependencies

docker-compose

docker-compose.playwright.yml

dockerfile

Dockerfile

• node 16-alpine

Dockerfile.playwright

• undefined undefined

github-actions

.github/actions/build/action.yml

• docker/setup-buildx-action v1
• aws-actions/amazon-ecr-login v1
• docker/metadata-action v3
• docker/build-push-action v2
• docker/metadata-action v3
• docker/build-push-action v2

.github/actions/setup-node-env/action.yml

• pnpm/action-setup v2.2.1
• actions/cache v2
• actions/setup-node v2.5.1

.github/workflows/bundle_size.yml

• actions/checkout v2
• preactjs/compressed-size-action 2.5.0

.github/workflows/ci.yml

• actions/checkout v2
• actions/checkout v2
• actions/checkout v2
• actions/checkout v2
• peter-evans/find-comment v2
• actions/github-script v6
• actions/checkout v2
• actions/upload-artifact v3
• actions/checkout v2
• actions/upload-artifact v3
• peter-evans/create-or-update-comment v2
• actions/checkout v2
• actions/checkout v2
• peter-evans/find-comment v2
• peter-evans/create-or-update-comment v2
• peter-evans/create-or-update-comment v2
• actions/checkout v2
• peaceiris/actions-gh-pages v3
• peter-evans/find-comment v2
• peter-evans/create-or-update-comment v2

.github/workflows/gh-pages.yaml

• actions/checkout v2
• peaceiris/actions-gh-pages v3

.github/workflows/ghcr.yml

• actions/checkout v2
• docker/setup-buildx-action v1
• docker/login-action v1
• docker/metadata-action v3
• docker/build-push-action v2

.github/workflows/new_issues.yml

• alex-page/github-project-automation-plus v0.8.1

.github/workflows/pr_closed.yml

• actions/checkout v3

.github/workflows/push_production.yaml

• actions/checkout v2

.github/workflows/push_staging.yaml

• actions/checkout v2

npm

package.json

• @nuxt/components ^2.1.6
• @nuxt/postcss8 ^1.1.3
• @nuxt/vue-app ^2.15.8
• @nuxtjs/composition-api ^0.32.0
• @nuxtjs/i18n ^7.0.3
• @nuxtjs/redirect-module ^0.3.1
• @nuxtjs/sentry ^5.1.5
• @nuxtjs/sitemap ^2.4.0
• @nuxtjs/svg ^0.4.0
• @pinia/nuxt ^0.1.8
• @popperjs/core ^2.11.2
• @tailwindcss/line-clamp ^0.3.1
• @tailwindcss/typography ^0.5.2
• @wordpress/is-shallow-equal ^4.6.0
• axios ^0.27.0
• axios-mock-adapter ^1.20.0
• babel-core ^7.0.0-bridge.0
• build-url ^6.0.1
• case ^1.6.3
• clipboard ^2.0.8
• cookie-universal-nuxt ^2.1.5
• core-js ^3.22.1
• express-prom-bundle ^6.4.1
• express-useragent ^1.0.15
• focus-trap ^6.7.1
• focus-trap-vue 1.1.1
• focus-visible ^5.2.0
• glob ^8.0.1
• node-html-parser ^5.3.3
• nuxt ^2.15.4
• pinia ^2.0.13
• postcss-focus-visible ^6.0.4
• prom-client ^14.0.1
• reakit-utils ^0.15.2
• rfdc ^1.3.0
• seeded-rand ^2.0.1
• throttle-debounce ^4.0.1
• uuid ^8.3.2
• vue ^2.6.14
• vue-i18n ^8.26.7
• @babel/core ^7.17.10
• @babel/eslint-parser ^7.17.0
• @babel/preset-typescript ^7.16.7
• @babel/runtime-corejs3 ^7.17.9
• @intlify/eslint-plugin-vue-i18n ^1.4.0
• @nuxt/types ^2.15.4
• @nuxt/typescript-build ^2.1.0
• @nuxtjs/eslint-module ^3.0.2
• @nuxtjs/storybook ^4.3.0
• @nuxtjs/style-resources ^1.0.0
• @pinia/testing ^0.0.11
• @playwright/test ^1.20.2
• @testing-library/dom ^8.13.0
• @testing-library/jest-dom ^5.16.1
• @testing-library/user-event ^13.5.0
• @testing-library/vue ^5.8.2
• @types/express-useragent ^1.0.2
• @types/jest ^26.0.22
• @types/lodash.sortby ^4.7.7
• @types/module-alias ^2.0.1
• @types/node ^17.0.32
• @types/uuid ^8.3.4
• @typescript-eslint/eslint-plugin ^5.20.0
• @typescript-eslint/parser ^5.20.0
• @vue/runtime-dom ^3.2.31
• @vue/test-utils ^1.1.3
• autoprefixer ^10.4.0
• babel-jest ^26.6.3
• babel-loader 8.2.5
• eslint ^8.13.0
• eslint-config-prettier ^8.5.0
• eslint-import-resolver-custom-alias ^1.3.0
• eslint-plugin-eslint-comments ^3.2.0
• eslint-plugin-import ^2.26.0
• eslint-plugin-prettier ^4.0.0
• eslint-plugin-tsdoc ^0.2.16
• eslint-plugin-unicorn ^42.0.0
• eslint-plugin-vue ^8.6.0
• eslint-plugin-vuejs-accessibility ^1.1.1
• husky ^7.0.1
• jest ^26.6.3
• jest-transform-stub ^2.0.0
• lint-staged ^12.3.7
• module-alias ^2.2.2
• npm-run-all ^4.1.5
• pinia ^2.0.11
• postcss ^8.4.12
• prettier ^2.2.1
• rimraf ^3.0.2
• tailwind-config-viewer ^1.6.3
• tailwindcss ^3.0.23
• tailwindcss-rtl ^0.9.0
• talkback ^3.0.1
• ts-node ^10.7.0
• typescript ^4.6.2
• vue-i18n-extract ^2.0.0
• vue-jest ^3.0.7
• vue-template-compiler ^2.6.14
• vue-tsc ^0.34.7
• webpack ^4.46.0
• node >= 16.0.0 <17
• pnpm >= 7.1.0
• node 16.15.0
• pnpm 7.1.0

---

• [x] Check this box to trigger a request for Renovate to run again on this repository

[sarayourfriend]

I'm not sure whether we should pin dependencies in package.json as described by the renovate docs. The trade-off of shipping a bigger bundle is a bad one to me!

Maybe for development dependencies we could do so, but for runtime (and some build dependencies I'm imagining) it seems like something that would increase our bundle sizes.

At the very least, before we do that, it'd be nice to have visibility into the bundle sizes (both for this and generally). I opened #567 a while ago to explore adding automation for it in PRs. Maybe the openverse-bot would make that easier.

cc @WordPress/openverse-frontend

[zackkrida]

@sarayourfriend why would the bundle size increase, something with multiple versions of subdeps or something?

[sarayourfriend]

Yes, exactly.