Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
npm	keygrip

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/checkout digest to de0fac2
• chore(deps): update dependency @swc/core to v1.15.11
• chore(deps): update dependency @types/cookie-parser to v1.4.10
• chore(deps): update dependency @types/express to v5.0.6
• chore(deps): update dependency @types/koa-bodyparser to v4.3.13
• chore(deps): update dependency @types/koa-compose to v3.2.9
• chore(deps): update dependency @types/koa-range to v0.3.6
• chore(deps): update dependency @types/lodash to v4.17.23
• chore(deps): update dependency @types/node to v24.10.11
• chore(deps): update dependency @types/urijs to v1.19.26
• chore(deps): update dependency dayjs to v1.11.19
• chore(deps): update dependency esbuild to v0.27.3
• chore(deps): update dependency execa to v9.6.1
• chore(deps): update dependency http-errors to v2.0.1
• chore(deps): update dependency marked to v17.0.1
• chore(deps): update dependency oxlint-tsgolint to v0.11.4
• chore(deps): update dependency publint to v0.3.17
• chore(deps): update dependency semver to v7.7.4
• chore(deps): update dependency typebox to v1.0.81
• chore(deps): update vitest monorepo to v4.0.18 (@vitest/coverage-v8, @vitest/ui, vitest)
• chore(deps): update dependency @eggjs/rds to v1.5.0
• chore(deps): update dependency @oclif/core to v4.8.0
• chore(deps): update dependency cheerio to v1.2.0
• chore(deps): update dependency cookie to v1.1.1
• chore(deps): update dependency cpy to v12.1.0
• chore(deps): update dependency express to v4.22.1
• chore(deps): update dependency ioredis to v5.9.2
• chore(deps): update dependency leoric to v2.14.0
• chore(deps): update dependency mysql2 to v3.16.3
• chore(deps): update dependency superagent to v10.3.0
• chore(deps): update dependency type-fest to v5.4.3
• chore(deps): update dependency urllib to v4.9.0
• chore(deps): update dependency vitepress-plugin-llms to v1.11.0
• chore(deps): update dependency cpy to v13
• chore(deps): update dependency cpy-cli to v7
• chore(deps): update dependency eslint to v10
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency body-parser to v2.2.1 [security]
• chore(deps): update dependency lodash to v4.17.23 [security]
• chore(deps): update dependency glob to v11.1.0 [security]
• chore(deps): update dependency @typescript/native-preview to v7.0.0-dev.20260207.1
• chore(deps): update dependency vitepress to v2.0.0-alpha.16
• chore(deps): update pnpm to v10.28.2
• chore(deps): update dependency tsdown to ^0.20.0
• chore(deps): update oxlint monorepo (oxc-minify, oxfmt, oxlint)
• chore(deps): update dependency @clack/prompts to v1
• chore(deps): update dependency npminstall to v8
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency tsx to v4.21.0
• chore(deps): update dependency ajv-formats to v3
• chore(deps): update dependency cron-parser to v5
• chore(deps): update dependency express to v5
• chore(deps): update dependency globby to v16
• chore(deps): update dependency matcher to v6
• chore(deps): update dependency path-to-regexp to v8
• chore(deps): update dependency zod to v4

Detected Dependencies

docker-compose (1)

plugins/redis/docker-compose.yml

github-actions (5)

.github/actions/clone/action.yml (1)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6]

.github/workflows/ci.yml (18)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6]
• pnpm/action-setup v4@41ff72655975bd51cab0327fa583b6e92b6d3061
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238
• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6]
• shogo82148/actions-setup-redis v1@cff708d63a30aebc0bfaa7276fb709d173f36cb6
• shogo82148/actions-setup-mysql v1@27e74fac04c136a9f4c2dc2ed457df57331b3e0c
• pnpm/action-setup v4@41ff72655975bd51cab0327fa583b6e92b6d3061
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238
• codecov/codecov-action v5@671740ac38dd9b0130fbe1cec585b89eea48d3de
• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6]
• pnpm/action-setup v4@41ff72655975bd51cab0327fa583b6e92b6d3061
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238
• codecov/codecov-action v5@671740ac38dd9b0130fbe1cec585b89eea48d3de
• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6]
• pnpm/action-setup v4@41ff72655975bd51cab0327fa583b6e92b6d3061
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238
• codecov/codecov-action v5@671740ac38dd9b0130fbe1cec585b89eea48d3de
• node 24

.github/workflows/cleanup-cache.yml

.github/workflows/e2e-test.yml (3)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6]
• pnpm/action-setup v4@41ff72655975bd51cab0327fa583b6e92b6d3061
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238

.github/workflows/release.yml (5)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6]
• pnpm/action-setup v4@41ff72655975bd51cab0327fa583b6e92b6d3061
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd
• node 24

nodenv (1)

.node-version (1)

• node 24.13.0

npm (84)

package.json (2)

• node >=22.18.0
• pnpm 10.28.0 → [Updates: 10.28.2]

packages/cluster/package.json (1)

• node >=22.18.0

packages/cookies/package.json (1)

• node >=22.18.0

packages/core/benchmark/middleware/package.json

packages/core/package.json (1)

• node >=22.18.0

packages/egg/package.json (1)

• node >=22.18.0

packages/errors/package.json (1)

• node >= 22.18.0

packages/extend2/package.json (1)

• node >=22.18.0

packages/koa-static-cache/package.json (5)

• @eggjs/compressible ^3.0.0
• fs-readdir-recursive ^1.1.0
• mime-types ^3.0.0
• ylru ^2.0.0
• node >=22.18.0

packages/koa/example/cjs/package.json

packages/koa/example/esm/package.json

packages/koa/package.json (1)

• node >=22.18.0

packages/path-matching/package.json (2)

• path-to-regexp-v8 ^8.3.0
• node >=22.18.0

packages/router/package.json (1)

• node >=22.18.0

packages/supertest/package.json (1)

• node >=22.18.0

packages/tsconfig/package.json (1)

• node >=22.18.0

packages/utils/package.json (1)

• node >=22.18.0

plugins/development/package.json (1)

• node >=22.18.0

plugins/i18n/package.json (1)

• node >= 22.18.0

plugins/jsonp/package.json (1)

• node >=22.18.0

plugins/logrotator/package.json (1)

• node >= 22.18.0

plugins/mock/package.json (1)

• node >=22.18.0

plugins/multipart/package.json (1)

• node >= 22.18.0

plugins/onerror/package.json (1)

• node >=22.18.0

plugins/redis/package.json (2)

• detect-port ^2.1.0
• node >= 22.18.0

plugins/schedule/package.json (1)

• node >=22.18.0

plugins/security/package.json (1)

• node >= 22.18.0

plugins/session/package.json (1)

• node >= 22.18.0

plugins/static/package.json (1)

• node >=22.18.0

plugins/tracer/package.json (1)

• node >=22.18.0

plugins/typebox-validate/package.json (1)

• node >= 22.18.0

plugins/view-nunjucks/package.json (1)

• node >=22.18.0

plugins/view/package.json (1)

• node >=22.18.0

plugins/watcher/package.json (1)

• node >=22.18.0

pnpm-workspace.yaml (208)

• @clack/prompts ^0.11.0 → [Updates: ^1.0.0]
• @eggjs/compressible ^3.0.0
• @eggjs/cookies ^3.1.0
• @eggjs/ip ^2.1.0
• @eggjs/rds ^1.3.0 → [Updates: ^1.3.0]
• @eggjs/redis ^3.0.0
• @eggjs/scripts ^4.0.0
• @fengmk2/ps-tree ^2.0.1
• @oclif/core ^4.2.0 → [Updates: ^4.2.0]
• @oxc-node/core ^0.0.35
• typebox ^1.0.65 → [Updates: ^1.0.65]
• @swc-node/register ^1.11.1
• @swc/core ^1.15.1 → [Updates: ^1.15.1]
• @types/accepts ^1.3.7
• @types/body-parser ^1.19.5
• @types/bytes ^3.1.5
• @types/common-tags ^1.8.4
• @types/content-disposition ^0.5.8
• @types/content-type ^1.1.8
• @types/cookie-parser ^1.4.8 → [Updates: ^1.4.8]
• @types/cookies ^0.9.0
• @types/cross-spawn ^6.0.6
• @types/destroy ^1.0.3
• @types/encodeurl ^1.0.2
• @types/escape-html ^1.0.4
• @types/express ^5.0.0 → [Updates: ^5.0.0]
• @types/extend ^3.0.4
• @types/fresh ^0.5.2
• @types/fs-readdir-recursive ^1.1.3
• @types/http-errors ^2.0.4
• @types/ini ^4.1.1
• @types/js-beautify ^1.14.3
• @types/js-yaml ^4.0.9
• @types/koa-bodyparser ^4.3.12 → [Updates: ^4.3.12]
• @types/koa-compose ^3.2.8 → [Updates: ^3.2.8]
• @types/koa-range ^0.3.5 → [Updates: ^0.3.5]
• @types/lodash ^4.17.20 → [Updates: ^4.17.20]
• @types/lodash.snakecase ^4.1.9
• @types/methods ^1.1.4
• @types/mime-types ^3.0.0
• @types/mocha ^10.0.10
• @types/mustache ^4.2.5
• @types/node ^24.10.2 → [Updates: ^24.10.2]
• @types/nunjucks ^3.2.6
• @types/on-finished ^2.3.4
• @types/parseurl ^1.3.3
• @types/pluralize ^0.0.33
• @types/safe-timers ^1.1.2
• @types/sqlstring ^2.3.2
• @types/stack-trace ^0.0.33
• @types/statuses ^2.0.5
• @types/superagent ^8.1.9
• @types/type-is ^1.6.6
• @types/urijs ^1.19.25 → [Updates: ^1.19.25]
• @types/vary ^1.1.3
• @typescript/native-preview 7.0.0-dev.20260117.1 → [Updates: 7.0.0-dev.20260207.1]
• @vitest/coverage-v8 ^4.0.15 → [Updates: ^4.0.15]
• @vitest/ui ^4.0.15 → [Updates: ^4.0.15]
• accepts ^1.3.8
• address 2
• ajv ^8.8.2
• ajv-formats ^2.1.1 → [Updates: ^3.0.0]
• ajv-keywords ^5.1.0
• assert-file 1
• await-event 2
• await-first ^1.0.0
• beautify-benchmark ^0.2.4
• benchmark ^2.1.4
• body-parser ^2.0.0 → [Updates: ^2.0.0]
• bytes ^3.1.2
• c8 ^10.1.3
• cache-content-type ^2.0.0
• camelcase ^9.0.0
• cfork ^2.0.0
• cheerio ^1.0.0 → [Updates: ^1.0.0]
• ci-parallel-vars ^1.0.1
• circular-json-for-egg ^1.0.0
• cluster-client ^3.7.0
• cluster-reload ^2.0.0
• co-busboy ^2.0.1
• coffee 5
• common-tags ^1.8.2
• content-disposition ~1.0.0
• content-type ^1.0.5
• cookie ^1.0.2 → [Updates: ^1.0.2]
• cookie-parser ^1.4.6
• cookies ^0.9.1
• cpy ^12.0.0 → [Updates: ^12.0.0, ^13.0.0]
• cpy-cli ^6.0.0 → [Updates: ^7.0.0]
• cron-parser ^4.9.0 → [Updates: ^5.0.0]
• cross-env ^10.0.0
• cross-spawn ^7.0.6
• csrf ^3.1.0
• dayjs ^1.11.13 → [Updates: ^1.11.13]
• debounce ^3.0.0
• destroy ^1.0.4
• detect-port ^2.1.0
• egg-errors ^2.3.0
• egg-logger ^3.5.0
• egg-plugin-puml ^2.4.0
• egg-view-nunjucks ^2.3.0
• encodeurl ^2.0.0
• esbuild ^0.27.0 → [Updates: ^0.27.0]
• esbuild-register ^3.6.0
• escape-html ^1.0.3
• execa ^9.6.0 → [Updates: ^9.6.0]
• express ^4.21.2 → [Updates: ^4.21.2, ^5.0.0]
• extend ^3.0.2
• extend2 ^4.0.0
• formstream ^1.5.1
• fresh ~0.5.2
• fs-readdir-recursive ^1.1.0
• gals 1
• get-ready ^3.1.0
• glob ^11.0.0 → [Updates: ^11.0.0]
• globby ^11.0.2 → [Updates: ^16.0.0]
• graceful ^2.0.0
• graceful-process ^2.0.0
• http-errors ^2.0.0 → [Updates: ^2.0.0]
• humanize-ms ^2.0.0
• husky ^9.1.7
• inflection ^3.0.0
• ini ^6.0.0
• ioredis ^5.4.2 → [Updates: ^5.4.2]
• is-type-of ^2.2.0
• jest-changed-files ^30.0.0
• js-beautify ^1.15.3
• js-yaml ^4.1.1
• jsonp-body ^2.0.0
• keygrip ^1.0.2
• koa-bodyparser ^4.4.1
• koa-compose ^4.1.0
• koa-onerror ^5.0.1
• koa-override ^4.0.0
• koa-range ^0.3.0
• koa-session ^7.0.2
• koa-static ^5.0.0
• leoric ^2.12.2 → [Updates: ^2.12.2]
• lint-staged ^16.2.7
• lodash ^4.17.21 → [Updates: ^4.17.21]
• lodash.snakecase ^4.1.1
• marked ^17.0.0 → [Updates: ^17.0.0]
• matcher ^4.0.0 → [Updates: ^6.0.0]
• merge-descriptors ^2.0.0
• methods ^1.1.2
• mime-types ^3.0.0
• mm ^4.0.2
• mocha ^11.7.5
• moment ^2.30.1
• mri ^1.2.0
• multimatch ^7.0.0
• mustache ^4.2.0
• mysql2 ^3.12.0 → [Updates: ^3.12.0]
• mz ^2.7.0
• mz-modules ^2.1.0
• nanoid ^5.0.0
• node-homedir ^2.0.0
• npminstall ^7.12.0 → [Updates: ^8.0.0]
• nunjucks ^3.2.4
• nunjucks-markdown ^2.0.1
• on-finished ^2.4.1
• onelogger ^1.0.1
• oxc-minify ^0.105.0 → [Updates: ^0.112.0]
• oxfmt ^0.20.0 → [Updates: ^0.28.0]
• oxlint ^1.32.0 → [Updates: ^1.32.0]
• oxlint-tsgolint ^0.11.0 → [Updates: ^0.11.0]
• parseurl ^1.3.3
• path-to-regexp ^6.3.0 → [Updates: ^8.0.0]
• performance-ms ^1.1.0
• picocolors ^1.1.1
• pluralize ^8.0.0
• publint ^0.3.16 → [Updates: ^0.3.16]
• ready-callback ^4.0.0
• reflect-metadata ^0.2.2
• rimraf ^6.1.2
• runscript ^2.0.1
• safe-timers ^1.1.0
• sdk-base ^5.0.1
• semver ^7.7.3 → [Updates: ^7.7.3]
• sendmessage ^3.0.1
• should-send-same-site-none ^2.0.5
• source-map-support ^0.5.21
• spy ^1.0.0
• sqlstring ^2.3.3
• stack-trace ^0.0.10
• statuses ^2.0.1
• stream-wormhole ^2.0.1
• superagent ^10.0.0 → [Updates: ^10.0.0]
• terminal-link ^5.0.0
• ts-node ^10.9.2
• tsconfig-paths ^4.2.0
• tsdown ^0.18.2 → [Updates: ^0.20.0]
• tsx 4.20.6 → [Updates: 4.21.0]
• type-fest ^5.0.1 → [Updates: ^5.0.1]
• type-is ^2.0.0
• typescript ^5.9.3
• unplugin-unused ^0.5.4
• urijs ^1.19.11
• urllib ^4.8.2 → [Updates: ^4.8.2]
• utility ^2.5.0
• vary ^1.1.2
• vitepress 2.0.0-alpha.15 → [Updates: 2.0.0-alpha.16]
• vitepress-plugin-llms ^1.10.0 → [Updates: ^1.10.0]
• vitest ^4.0.15 → [Updates: ^4.0.15]
• xss ^1.0.15
• ylru ^2.0.0
• zod ^3.24.1 → [Updates: ^4.0.0]
• path-to-regexp ^1.9.0 → [Updates: ^8.0.0]

site/package.json (1)

• node >=22.18.0

tegg/benchmark/http/package.json (2)

• @types/node 24
• typescript 5

tegg/core/ajv-decorator/package.json (1)

• node >=22.18.0

tegg/core/aop-decorator/package.json (1)

• node >=22.18.0

tegg/core/aop-runtime/package.json (1)

• node >=22.18.0

tegg/core/background-task/package.json (1)

• node >=22.18.0

tegg/core/common-util/package.json (1)

• node >=22.18.0

tegg/core/controller-decorator/package.json (1)

• node >=22.18.0

tegg/core/core-decorator/package.json (1)

• node >=22.18.0

tegg/core/dal-decorator/package.json (1)

• node >=22.18.0

tegg/core/dal-runtime/package.json (1)

• node >=22.18.0

tegg/core/dynamic-inject-runtime/package.json (1)

• node >=22.18.0

tegg/core/dynamic-inject/package.json (1)

• node >=22.18.0

tegg/core/eventbus-decorator/package.json (1)

• node >=22.18.0

tegg/core/eventbus-runtime/package.json (1)

• node >=22.18.0

tegg/core/lifecycle/package.json (1)

• node >=22.18.0

tegg/core/loader/package.json (1)

• node >=22.18.0

tegg/core/metadata/package.json (1)

• node >=22.18.0

tegg/core/orm-decorator/package.json (1)

• node >=22.18.0

tegg/core/runtime/package.json (1)

• node >=22.18.0

tegg/core/schedule-decorator/package.json (1)

• node >=22.18.0

tegg/core/standalone-decorator/package.json (1)

• node >=22.18.0

tegg/core/tegg/package.json (1)

• node >=22.18.0

tegg/core/test-util/package.json (1)

• node >=22.18.0

tegg/core/transaction-decorator/package.json (1)

• node >=22.18.0

tegg/core/types/package.json (1)

• node >=22.18.0

tegg/plugin/ajv/package.json (3)

• @eggjs/ajv-formats ^3.0.1
• @eggjs/ajv-keywords ^5.1.0
• node >=22.18.0

tegg/plugin/aop/package.json (1)

• node >=22.18.0

tegg/plugin/common/package.json (1)

• node >=22.18.0

tegg/plugin/config/package.json (1)

• node >=22.18.0

tegg/plugin/controller/package.json (1)

• node >=22.18.0

tegg/plugin/dal/package.json (1)

• node >=22.18.0

tegg/plugin/eventbus/package.json (1)

• node >=22.18.0

tegg/plugin/orm/package.json (1)

• node >=22.18.0

tegg/plugin/schedule/package.json (1)

• node >=22.18.0

tegg/plugin/tegg/package.json (1)

• node >=22.18.0

tegg/standalone/standalone/package.json (1)

• node >=22.18.0

tools/create-egg/package.json (1)

• node >=20.19.0

tools/create-egg/src/templates/egg3-simple-js/package.json (7)

• egg ^3.17.5
• egg-scripts 3
• egg-bin 6
• egg-mock 5
• eslint 8 → [Updates: 10]
• eslint-config-egg 14
• node >=22.18.0

tools/create-egg/src/templates/egg3-simple-ts/package.json (11)

• egg ^3.31.0
• egg-scripts 3
• @eggjs/tsconfig 3
• @types/mocha 10
• @types/node 24
• egg-bin 6
• egg-mock 5
• eslint 8 → [Updates: 10]
• eslint-config-egg 14
• typescript 5
• node >=22.18.0

tools/create-egg/src/templates/egg3-tegg/app/module/bar/package.json

tools/create-egg/src/templates/egg3-tegg/app/module/foo/package.json

tools/create-egg/src/templates/egg3-tegg/package.json (19)

• @eggjs/tegg ^3.5.2
• @eggjs/tegg-aop-plugin ^3.5.2
• @eggjs/tegg-config ^3.5.2
• @eggjs/tegg-controller-plugin ^3.5.2
• @eggjs/tegg-eventbus-plugin ^3.5.2
• @eggjs/tegg-plugin ^3.5.2
• @eggjs/tegg-schedule-plugin ^3.5.2
• egg ^3.31.0
• egg-scripts ^3.0.0
• egg-tracer ^2.0.0
• @eggjs/tsconfig 3
• @types/mocha 10
• @types/node 24
• egg-bin ^6.13.0
• egg-mock ^5.15.2
• oxlint 1
• oxlint-tsgolint ^0.11.0
• typescript 5
• node >=22.18.0

tools/create-egg/src/templates/simple-ts/package.json (6)

• @eggjs/scripts ^4.0.0
• @types/node 24
• oxlint 1
• oxlint-tsgolint ^0.11.0
• typescript 5
• node >=22.18.0

tools/create-egg/src/templates/tegg/app/module/bar/package.json

tools/create-egg/src/templates/tegg/app/module/foo/package.json

tools/create-egg/src/templates/tegg/package.json (9)

• @oxc-node/core ^0.0.35
• @types/node 24
• @vitest/coverage-v8 4
• cross-env 10
• oxlint 1
• oxlint-tsgolint ^0.11.0
• typescript 5
• vitest 4
• node >=22.18.0

tools/egg-bin/package.json (1)

• node >=22.18.0

tools/scripts/package.json (1)

• node >= 22.18.0

---

• Check this box to trigger a request for Renovate to run again on this repository