Dependency Dashboard

[rigelbuild-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update cachix/install-nix-action digest to 13d8dd5
• fix(deps): update typescript dependencies (@happy-dom/global-registrator, @opentelemetry/exporter-metrics-otlp-proto, @opentelemetry/exporter-trace-otlp-proto, @opentelemetry/sdk-logs, @shikijs/langs, @shikijs/themes, @testing-library/jest-dom, @wailsio/runtime, happy-dom, renovate, shiki)
• chore(deps): update dependency go to v1.27.0
• chore(deps): update node.js to v24.19.0
• fix(deps): update go dependencies (github.com/cachix/secretspec/secretspec-go, github.com/minio/minio-go/v7, github.com/wailsapp/wails/v3, go.yaml.in/yaml/v3, google.golang.org/protobuf)
• fix(deps): update dependency @oh-my-pi/pi-agent-core to v17
• fix(deps): update dependency @oh-my-pi/pi-ai to v17
• fix(deps): update dependency @oh-my-pi/pi-coding-agent to v17
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update module golang.org/x/net to v0.56.0 [security]
• chore(deps): update cachix/devenv-nixpkgs digest to ee3d58d
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

bun (32)

apps/eng-docs/package.json

apps/ui/package.json (28)

• @braintree/sanitize-url 7.1.2
• @bufbuild/protobuf ^2.12.1
• @connectrpc/connect-query-core ^2.2.0
• @kobalte/core 2.0.0-alpha.0
• @shikijs/langs 4.4.1 → [Updates: 4.4.3]
• @shikijs/themes 4.4.1 → [Updates: 4.4.3]
• @solidjs/router ^2.0.0-next.17
• @solidjs/web ^2.0.0-rc.1
• @tanstack/solid-query ^6.0.0-rc.0
• @rigelbuild/solid-virtual 3.0.0-rc.0
• @wailsio/runtime 3.0.0-beta.0 → [Updates: 3.0.0-beta.9]
• diff ^9.0.0
• remark-gfm ^4.0.1
• shiki 4.4.1 → [Updates: 4.4.3]
• solid-js ^2.0.0-rc.1
• @rigelbuild/solid-markdown 3.0.0-rc.0
• @babel/core 8.0.1
• @babel/preset-typescript 8.0.1
• @babel/plugin-syntax-jsx 8.0.1
• @playwright/test 1.62.1
• @happy-dom/global-registrator 20.11.1 → [Updates: 20.11.2]
• babel-preset-solid ^2.0.0-rc.1
• @solidjs/testing-library 1.0.0-beta.2
• @testing-library/jest-dom 7.0.0 → [Updates: 7.0.1]
• @types/hast 3.0.5
• happy-dom 20.11.1 → [Updates: 20.11.2]
• vite ^8.2.0
• vite-plugin-solid ^3.0.0-next.27

forks/oh-my-pi/package.json

forks/oh-my-pi/packages/agent/package.json

forks/oh-my-pi/packages/ai/package.json

forks/oh-my-pi/packages/catalog/package.json

forks/oh-my-pi/packages/coding-agent/package.json

forks/oh-my-pi/packages/collab-web/package.json

forks/oh-my-pi/packages/hashline/package.json

forks/oh-my-pi/packages/metaharness/package.json

forks/oh-my-pi/packages/mnemopi/package.json

forks/oh-my-pi/packages/natives/package.json

forks/oh-my-pi/packages/snapcompact/package.json

forks/oh-my-pi/packages/stats/package.json

forks/oh-my-pi/packages/swarm-extension/package.json

forks/oh-my-pi/packages/tui/package.json

forks/oh-my-pi/packages/typescript-edit-benchmark/package.json

forks/oh-my-pi/packages/utils/package.json

forks/oh-my-pi/packages/wire/package.json

forks/oh-my-pi/python/robomp/web/package.json

package.json (2)

• @tanstack/virtual-core 3.17.8
• @tanstack/query-core 5.101.4 → [Updates: 5.102.2]

packages/compass-agent/package.json (7)

• @bufbuild/protobuf ^2.12.1
• @connectrpc/connect ^2.1.0
• @connectrpc/connect-node ^2.1.0
• @oh-my-pi/pi-agent-core ^16.4.8 → [Updates: ^17.0.0]
• @oh-my-pi/pi-ai ^16.4.8 → [Updates: ^17.0.0]
• @oh-my-pi/pi-coding-agent ^16.4.8 → [Updates: ^17.0.0]
• arktype 2.2.3

packages/compass-client/package.json (3)

• @bufbuild/protobuf ^2.12.1
• @connectrpc/connect ^2.1.0
• @connectrpc/connect-web ^2.1.0

tools/agent-image-env-gate/package.json

tools/cx-token-gate/package.json

tools/design-ledger-gate/package.json

tools/forge-linear-token/package.json

tools/orion-ref-gate/package.json

tools/renovate-preflight/package.json

tools/renovate/package.json

tools/stamp-gate/package.json

tools/toolchain/package.json

github-actions (10)

.github/workflows/ci.yml (8)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31@630ae543ea3a38a9a4166f03376c02c50f408342 → [Updates: v31]
• appthrust/moon-ci-retrospect v2.1.0@631a1e667f96e8ca893eab69f03e425f7fbfdc2b
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31@630ae543ea3a38a9a4166f03376c02c50f408342 → [Updates: v31]
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1
• quay.io/podman/stable sha256:663e0dbf407987b7db3f20d3588c283a8228db17b282d2029a482d4d47e36964 → [Updates: undefined]

.github/workflows/eng-docs-deploy.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31@630ae543ea3a38a9a4166f03376c02c50f408342 → [Updates: v31]

.github/workflows/publish-agent-image.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31@630ae543ea3a38a9a4166f03376c02c50f408342 → [Updates: v31]

.github/workflows/renovate.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31@630ae543ea3a38a9a4166f03376c02c50f408342 → [Updates: v31]
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1

forks/oh-my-pi/.github/actions/bazel-cache/action.yml

forks/oh-my-pi/.github/actions/bazel-natives/action.yml

forks/oh-my-pi/.github/actions/bun-install/action.yml

forks/oh-my-pi/.github/actions/native-artifacts/action.yml

forks/oh-my-pi/.github/workflows/bazel-cache-warm.yml

forks/oh-my-pi/.github/workflows/ci.yml

gomod (1)

go/go.mod (20)

• connectrpc.com/connect v1.20.0
• connectrpc.com/cors v0.1.0
• github.com/BurntSushi/toml v1.6.0
• github.com/cachix/secretspec/secretspec-go v0.15.0 → [Updates: v0.19.1]
• github.com/hashicorp/golang-lru/v2 v2.0.7
• github.com/insomniacslk/dhcp v0.0.0-20260728151720-c308df0fdcef@c308df0fdcef
• github.com/jackc/pgx/v5 v5.10.0
• github.com/mdlayher/vsock v1.3.0
• github.com/minio/minio-go/v7 v7.2.1 → [Updates: v7.3.0]
• github.com/rs/cors v1.11.1
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/spf13/viper v1.21.0
• github.com/vishvananda/netlink v1.3.1
• github.com/wailsapp/wails/v3 v3.0.0-beta.0 → [Updates: v3.0.0-beta.9]
• github.com/zalando/go-keyring v0.2.8
• go.yaml.in/yaml/v3 v3.0.4 → [Updates: v3.0.5]
• golang.org/x/net v0.55.0 → [Updates: v0.56.0]
• golang.org/x/sync v0.22.0
• google.golang.org/protobuf v1.36.11 → [Updates: v1.36.12]

regex (7)

.github/workflows/renovate.yml (1)

• renovate 44.33.1 → [Updates: 44.33.2]

devenv.lock (1)

• cachix/devenv-nixpkgs rolling@c946ff36bf193309589932c371bd5ae6653c912e → [Updates: rolling]

package.json (21)

• @astrojs/check ^0.9.10
• @astrojs/starlight ^0.41.5
• @effect/opentelemetry 0.64.0
• @effect/platform ^0.97.0
• @opentelemetry/api ^1.9.1
• @opentelemetry/exporter-metrics-otlp-proto ^0.220.0 → [Updates: ^0.221.0]
• @opentelemetry/exporter-trace-otlp-proto ^0.220.0 → [Updates: ^0.221.0]
• @opentelemetry/resources ^2.0.0
• @opentelemetry/sdk-logs ^0.220.0 → [Updates: ^0.221.0]
• @opentelemetry/sdk-metrics ^2.0.0
• @opentelemetry/sdk-trace-base ^2.0.0
• @opentelemetry/sdk-trace-node ^2.0.0
• @opentelemetry/sdk-trace-web ^2.0.0
• @opentelemetry/semantic-conventions ^1.33.0
• @types/bun ^1.4.0
• astro ^7.1.6
• effect ^3.22.1
• github-slugger ^2.0.0
• sharp ^0.35.0
• stylelint ^17.14.1
• typescript ^6.0.3

tools/toolchain/versions/bun.nix (1)

• oven-sh/bun 1.4.0

tools/toolchain/versions/go.nix (1)

• go 1.26.6 → [Updates: 1.27.0]

tools/toolchain/versions/moon.nix (1)

• moonrepo/moon 2.5.3

tools/toolchain/versions/node.nix (1)

• node 24.18.0 → [Updates: 24.19.0]