Dependency Dashboard

[renovate[bot]]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

[!WARNING] These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
npm	moize

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• [ ] chore(deps): update dependency @types/node to v20.19.26
• [ ] chore(deps): update dependency @eslint/compat to v2
• [ ] chore(deps): update dependency @types/archiver to v7
• [ ] chore(deps): update dependency cpy-cli to v6
• [ ] chore(deps): update dependency lerna to v9
• [ ] chore(deps): update dependency node to v24 (node, @types/node)
• [ ] chore(deps): update dependency sort-on to v7
• [ ] chore(deps): update node.js to v24
• [ ] chore(deps): update vitest monorepo to v4 (major) (@vitest/coverage-v8, @vitest/ui, vitest)
• [ ] fix(deps): update dependency @sindresorhus/slugify to v3
• [ ] fix(deps): update dependency clean-stack to v6
• [ ] fix(deps): update dependency cpy to v12
• [ ] fix(deps): update dependency dot-prop to v10
• [ ] fix(deps): update dependency es-module-lexer to v2
• [ ] fix(deps): update dependency find-up to v8
• [ ] fix(deps): update dependency globby to v16
• [ ] fix(deps): update dependency locate-path to v8
• [ ] fix(deps): update dependency map-obj to v6
• [ ] fix(deps): update dependency p-event to v7
• [ ] fix(deps): update dependency p-retry to v7
• [ ] fix(deps): update dependency p-wait-for to v6
• [ ] fix(deps): update dependency parse-imports to v3
• [ ] fix(deps): update dependency ps-list to v9
• [ ] fix(deps): update dependency read-package-up to v12
• [ ] fix(deps): update dependency read-pkg to v10
• [ ] fix(deps): update dependency readdirp to v5
• [ ] fix(deps): update dependency string-width to v8
• [ ] fix(deps): update dependency terminal-link to v5
• [ ] fix(deps): update dependency uuid to v13
• [ ] fix(deps): update dependency validate-npm-package-name to v7
• [ ] fix(deps): update dependency zod to v4
• [ ] 🔐 Create all awaiting schedule PRs at once 🔐

Edited/Blocked

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• [ ] chore(deps): update dependency @types/yargs to v17.0.35

---

[!WARNING] Renovate failed to look up the following dependencies: Failed to look up orb package netlify/e2e.

Files affected: .circleci/config.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• [ ] chore(deps): update dependency @vitest/eslint-plugin to v1.5.2
• [ ] chore(deps): update dependency go to 1.25
• [ ] chore(deps): update dependency zod to v4.1.13
• [ ] chore(deps): update typescript-eslint monorepo to v8.49.0 (@typescript-eslint/eslint-plugin, typescript-eslint)
• [ ] fix(deps): update opentelemetry-js monorepo (@opentelemetry/api, @opentelemetry/core, @opentelemetry/resources, @opentelemetry/sdk-trace-base, @opentelemetry/sdk-trace-node, @opentelemetry/semantic-conventions)
• [ ] chore(deps): update commitlint monorepo to v20 (major) (@commitlint/cli, @commitlint/config-conventional)
• [ ] fix(deps): update dependency urlpattern-polyfill to v10
• [ ] Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• [ ] fix(deps): update dependency @vercel/nft to v0.30.4
• [ ] chore(deps): update dependency ava to v6
• [ ] chore(deps): update dependency get-node to v15
• [ ] chore(deps): update dependency nock to v14
• [ ] chore(deps): update dependency npm-run-all2 to v8
• [ ] fix(deps): update dependency @vercel/nft to v1
• [ ] fix(deps): update dependency better-ajv-errors to v2
• [ ] fix(deps): update dependency cron-parser to v5
• [ ] fix(deps): update dependency execa to v9
• [ ] fix(deps): update dependency keep-func-props to v7
• [ ] fix(deps): update dependency log-process-errors to v12
• [ ] fix(deps): update dependency minimatch to v10
• [ ] fix(deps): update dependency yargs to v18
• [ ] fix(deps): update dependency yargs-parser to v22
• [ ] fix(deps): update opentelemetry-js monorepo to v2 (major) (@opentelemetry/core, @opentelemetry/resources, @opentelemetry/sdk-trace-base, @opentelemetry/sdk-trace-node)

Detected Dependencies

circleci (1)

.circleci/config.yml (2)

• e2e 1
• cimg/node 18.20.8

github-actions (7)

.github/workflows/benchmark.yml (5)

• actions/checkout v6
• actions/setup-node v6
• netlify/delta-action v4
• ubuntu 24.04
• node 22

.github/workflows/conventional-commit.yml (2)

• actions/checkout v6
• JulienKode/pull-request-name-linter-action v20.1.0

.github/workflows/fossa.yml (2)

• actions/checkout v6
• ubuntu 24.04

.github/workflows/pre-release.yml (4)

• actions/checkout v6
• actions/setup-node v6
• ubuntu 24.04
• node 22

.github/workflows/stalebot.yml (2)

• actions/stale v10.1.1
• ubuntu 24.04

.github/workflows/typescript-nudge.yml (7)

• actions/checkout v6
• tj-actions/changed-files v47
• thollander/actions-comment-pull-request v3
• actions-ecosystem/action-add-labels v1
• thollander/actions-comment-pull-request v3
• actions-ecosystem/action-remove-labels v1
• ubuntu 24.04

.github/workflows/workflow.yml (17)

• actions/checkout v6
• actions/setup-node v6
• actions/upload-artifact v5
• actions/checkout v6
• actions/setup-node v6
• denoland/setup-deno v1
• actions/setup-go v6
• actions/checkout v6
• denoland/setup-deno v1
• actions/setup-node v6
• actions/setup-go v6
• codecov/codecov-action v5
• ubuntu 24.04
• node 22
• go 1.18
• deno 2.5.6
• go 1.18

npm (17)

package.json (16)

• @commitlint/cli ^19.0.0
• @commitlint/config-conventional ^19.0.0
• @eslint/compat ^1.2.9
• @eslint/js ^9.28.0
• @typescript-eslint/eslint-plugin ^8.34.0
• @vitest/eslint-plugin ^1.2.1
• eslint ^9.28.0
• eslint-config-prettier ^10.1.5
• eslint-plugin-ava ^15.0.1
• eslint-plugin-import ^2.31.0
• eslint-plugin-n ^17.19.0
• execa ^8.0.1
• lerna ^8.2.2
• prettier ^3.0.0
• typescript-eslint ^8.34.0
• node >=18.14.0

packages/build-info/package.json (19)

• @bugsnag/js ^8.0.0
• @iarna/toml ^2.2.5
• dot-prop ^9.0.0
• find-up ^7.0.0
• minimatch ^9.0.0
• read-pkg ^9.0.0
• semver ^7.3.8
• yaml ^2.8.0
• yargs ^17.6.0
• @playwright/test ^1.53.1
• @types/node ^18.19.111
• @types/semver ^7.3.13
• @vitest/ui ^3.0.0
• execa ^8.0.0
• memfs ^4.0.0
• typescript ^5.0.0
• unionfs ^4.4.0
• vitest ^3.0.0
• node >=18.14.0

packages/build/package.json (64)

• @bugsnag/js ^8.0.0
• @netlify/blobs ^10.4.3
• @netlify/plugins-list ^6.80.0
• @sindresorhus/slugify ^2.0.0
• ansi-escapes ^7.0.0
• ansis ^4.1.0
• clean-stack ^5.0.0
• execa ^8.0.0
• fdir ^6.0.1
• figures ^6.0.0
• filter-obj ^6.0.0
• hot-shots 11.4.0
• indent-string ^5.0.0
• is-plain-obj ^4.0.0
• keep-func-props ^6.0.0
• log-process-errors ^11.0.0
• memoize-one ^6.0.0
• minimatch ^9.0.4
• os-name ^6.0.0
• p-event ^6.0.0
• p-filter ^4.0.0
• p-locate ^6.0.0
• p-map ^7.0.0
• p-reduce ^3.0.0
• package-directory ^8.0.0
• path-exists ^5.0.0
• pretty-ms ^9.0.0
• ps-list ^8.0.0
• read-package-up ^11.0.0
• readdirp ^4.0.0
• resolve ^2.0.0-next.5
• rfdc ^1.3.0
• safe-json-stringify ^1.2.0
• semver ^7.3.8
• string-width ^7.0.0
• supports-color ^10.0.0
• terminal-link ^4.0.0
• ts-node ^10.9.1
• typescript ^5.0.0
• uuid ^11.0.0
• yaml ^2.8.0
• yargs ^17.6.0
• zod ^3.25.76
• @opentelemetry/api ~1.8.0
• @opentelemetry/sdk-trace-base ~1.24.0
• @types/node ^18.19.111
• atob ^2.1.2
• ava ^5.0.0
• c8 ^10.0.0
• cpy ^11.0.0
• cpy-cli ^5.0.0
• get-node ^14.2.1
• get-port ^7.0.0
• has-ansi ^6.0.0
• moize ^6.0.0
• npm-run-all2 ^6.0.0
• process-exists ^5.0.0
• tinyspy ^4.0.3
• tmp-promise ^3.0.2
• tsd ^0.33.0
• vitest ^3.0.0
• yarn ^1.22.22
• @opentelemetry/api ~1.8.0
• node >=18.14.0

packages/cache-utils/package.json (12)

• cpy ^11.0.0
• get-stream ^9.0.0
• globby ^14.0.0
• junk ^4.0.0
• locate-path ^7.0.0
• move-file ^3.0.0
• readdirp ^4.0.0
• @types/node ^18.19.111
• tmp-promise ^3.0.0
• typescript ^5.0.0
• vitest ^3.0.0
• node >=18.14.0

packages/config/package.json (30)

• @iarna/toml ^2.2.5
• chalk ^5.0.0
• cron-parser ^4.1.0
• deepmerge ^4.2.2
• dot-prop ^9.0.0
• execa ^8.0.0
• fast-safe-stringify ^2.0.7
• figures ^6.0.0
• filter-obj ^6.0.0
• find-up ^7.0.0
• indent-string ^5.0.0
• is-plain-obj ^4.0.0
• map-obj ^5.0.0
• omit.js ^2.0.2
• p-locate ^6.0.0
• path-type ^6.0.0
• read-package-up ^11.0.0
• tomlify-j0.4 ^3.0.0
• validate-npm-package-name ^5.0.0
• yaml ^2.8.0
• yargs ^17.6.0
• zod ^4.0.5
• @types/node ^18.19.111
• ava ^5.0.0
• c8 ^10.0.0
• has-ansi ^6.0.0
• is-ci ^4.0.0
• tmp-promise ^3.0.2
• typescript ^5.0.0
• node >=18.14.0

packages/edge-bundler/package.json (32)

• @import-maps/resolve ^2.0.0
• ajv ^8.11.2
• ajv-errors ^3.0.0
• better-ajv-errors ^1.2.0
• common-path-prefix ^3.0.0
• env-paths ^3.0.0
• esbuild 0.27.1
• execa ^8.0.0
• find-up ^7.0.0
• get-port ^7.0.0
• node-stream-zip ^1.15.0
• p-retry ^6.0.0
• p-wait-for ^5.0.0
• parse-imports ^2.2.1
• path-key ^4.0.0
• semver ^7.3.8
• tar ^7.4.3
• tmp-promise ^3.0.3
• urlpattern-polyfill 8.0.2
• uuid ^11.0.0
• @netlify/edge-functions-bootstrap ^3.1.0
• @types/node ^18.19.111
• @types/semver ^7.3.9
• @vitest/coverage-v8 ^3.0.0
• archiver ^7.0.0
• chalk ^5.4.0
• cpy ^11.1.0
• nock ^14.0.0
• npm-run-all2 ^6.0.0
• typescript ^5.0.0
• vitest ^3.0.0
• node >=18.14.0

packages/functions-utils/package.json (8)

• cpy ^11.0.0
• path-exists ^5.0.0
• @types/node ^18.19.111
• sort-on ^6.0.0
• tmp-promise ^3.0.0
• typescript ^5.0.0
• vitest ^3.0.0
• node >=18.14.0

packages/git-utils/package.json (8)

• execa ^8.0.0
• map-obj ^5.0.0
• micromatch ^4.0.2
• moize ^6.1.3
• @types/node ^18.19.111
• typescript ^5.0.0
• vitest ^3.0.0
• node >=18.14.0

packages/headers-parser/package.json (10)

• @iarna/toml ^2.2.5
• escape-string-regexp ^5.0.0
• fast-safe-stringify ^2.0.7
• is-plain-obj ^4.0.0
• map-obj ^5.0.0
• path-exists ^5.0.0
• @types/node ^18.19.111
• typescript ^5.0.0
• vitest ^3.0.0
• node >=18.14.0

packages/js-client/package.json (12)

• @netlify/open-api ^2.45.0
• node-fetch ^3.0.0
• picoquery ^2.5.0
• p-wait-for ^5.0.0
• @types/node ^18.19.111
• from2-string ^1.1.0
• nock ^13.0.0
• ts-node ^10.9.1
• typescript ^5.0.0
• uuid ^11.0.0
• vitest ^3.2.3
• node >=18.14.0

packages/nock-udp/package.json (4)

• @types/node ^18.19.111
• typescript ^5.0.0
• vitest ^3.0.0
• node >=18.14.0

packages/opentelemetry-sdk-setup/package.json (14)

• @honeycombio/opentelemetry-node ~0.7.1
• @opentelemetry/core ~1.24.0
• @opentelemetry/resources ~1.24.0
• @opentelemetry/semantic-conventions ~1.24.0
• read-package-up ^11.0.0
• yargs-parser ^21.1.1
• @opentelemetry/api ~1.8.0
• @opentelemetry/sdk-trace-base ~1.24.0
• @types/node ^18.19.111
• @vitest/ui ^3.0.0
• typescript ^5.0.0
• vitest ^3.0.0
• @opentelemetry/api ~1.8.0
• node >=18.14.0

packages/opentelemetry-utils/package.json (9)

• @opentelemetry/api ~1.8.0
• @opentelemetry/sdk-trace-base ~1.24.0
• @opentelemetry/sdk-trace-node ~1.24.0
• @types/node ^18.19.111
• @vitest/ui ^3.0.0
• typescript ^5.0.0
• vitest ^3.0.0
• @opentelemetry/api ~1.8.0
• node >=18.14.0

packages/redirect-parser/package.json (8)

• @iarna/toml ^2.2.5
• fast-safe-stringify ^2.1.1
• is-plain-obj ^4.0.0
• path-exists ^5.0.0
• @types/node ^18.19.111
• typescript ^5.0.0
• vitest ^3.0.0
• node >=18.14.0

packages/run-utils/package.json (6)

• execa ^8.0.0
• @types/node ^18.19.111
• semver ^7.3.8
• typescript ^5.0.0
• vitest ^3.0.0
• node >=18.14.0

packages/testing/package.json (18)

• @types/lodash-es ^4.17.6
• @types/node ^18.19.111
• ava ^5.0.0
• c8 ^10.0.0
• cpy ^11.0.0
• execa ^8.0.0
• fast-safe-stringify ^2.0.7
• figures ^6.0.0
• get-bin-path ^11.0.0
• get-port ^7.0.0
• get-stream ^9.0.0
• is-plain-obj ^4.0.0
• lodash-es ^4.17.21
• path-key ^4.0.0
• strip-ansi ^7.0.0
• tmp-promise ^3.0.2
• typescript ^5.0.0
• node >=18.14.0

packages/zip-it-and-ship-it/package.json (53)

• @babel/parser ^7.22.5
• @babel/types 7.28.5
• @netlify/binary-info ^1.0.0
• @netlify/serverless-functions-api ^2.8.1
• @vercel/nft 0.29.4
• archiver ^7.0.0
• common-path-prefix ^3.0.0
• copy-file ^11.0.0
• es-module-lexer ^1.0.0
• esbuild 0.27.1
• execa ^8.0.0
• fast-glob ^3.3.3
• filter-obj ^6.0.0
• find-up ^7.0.0
• is-path-inside ^4.0.0
• junk ^4.0.0
• locate-path ^7.0.0
• merge-options ^3.0.4
• minimatch ^9.0.0
• normalize-path ^3.0.0
• p-map ^7.0.0
• path-exists ^5.0.0
• precinct ^12.0.0
• require-package-name ^2.0.1
• resolve ^2.0.0-next.1
• semver ^7.3.8
• tmp-promise ^3.0.2
• toml ^3.0.0
• unixify ^1.0.0
• urlpattern-polyfill 8.0.2
• yargs ^17.0.0
• zod ^3.23.8
• @types/archiver 6.0.4
• @types/is-ci 3.0.4
• @types/node 20.19.25
• @types/normalize-path 3.0.2
• @types/resolve 1.20.6
• @types/semver 7.7.1
• @types/unixify 1.0.2
• @types/yargs 17.0.33
• @vitest/coverage-v8 ^3.0.0
• browserslist 4.28.1
• cardinal 2.1.1
• cpy 11.1.0
• decompress 4.2.1
• deepmerge ^4.3.1
• get-stream 9.0.1
• is-ci 4.1.0
• lambda-local 2.2.0
• source-map-support 0.5.21
• typescript 5.9.3
• vitest ^3.0.0
• node >=18.14.0

renovate-config-presets (1)

renovate.json5 (0)

---

• [ ] Check this box to trigger a request for Renovate to run again on this repository

[XhmikosR]

Could you update yargs in build and config packages? Assuming @netlify/zip-it-and-ship-it is updated to the same version, they will be then deduplicated in cli.

[ehmicky]

Note: this was resolved by @XhmikosR in https://github.com/netlify/build/pull/4037