Dependency Dashboard

[chrisbbreuer]

This issue lists Buddy Bot updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Caution

4 known vulnerabilities affect 1 dependency in this repository.

Severity	Package	Current	Advisory	Fixed in
🟠 High	postcss	^8.5.6	GHSA-6g55-p6wh-862q	8.5.12
🟠 High	postcss	^8.5.6	GHSA-r28c-9q8g-f849	8.5.18
🟡 Moderate	postcss	^8.5.6	GHSA-fxqj-rqcc-2cmp	8.5.23
🟡 Moderate	postcss	^8.5.6	GHSA-qx2v-qp2m-jg93	8.5.10

Capped dependencies

The following packages are held below their latest version by a range declared elsewhere in the dependency tree. Updating this repository cannot move them — the constraint has to be widened where it is declared.

Package	Installed	Reachable	Latest	Capped by
undici-types	8.3.0	8.3.0	8.10.2	@types/node (~8.3.0)
data-uri-to-buffer	6.0.2	6.0.2	8.0.0	ts-gif (^6.0.2)
typescript	7.0.2	7.0.2	7.1.0-dev.20260904.1	better-dx (^7.0.2)
@typescript/typescript-linux-x64	7.0.2	7.0.2	7.1.0-dev.20260904.1	typescript (7.0.2)
kleur	3.0.3	3.0.3	4.1.5	prompts (^3.0.3)
@types/css-tree	2.3.11	2.3.11	3.2.0	@types/csso (^2)
mdn-data	2.27.1	2.27.1	2.35.0	css-tree (2.27.1)
sisteransi	1.0.5	1.0.5	2.0.0	prompts (^1.0.5)
bun-types	1.4.0	1.4.0	1.4.1	@types/bun (1.4.0)
@stacksjs/desktop	0.2.249	0.2.249	0.70.232	@stacksjs/stx (0.2.249)
bun-plugin-dtsx	0.11.10	0.11.10	0.21.17	better-dx (^0.11.1)
@stacksjs/ts-svg	0.1.3	0.1.3	0.5.1	ts-images (^0.1.1)
@stacksjs/sanitizer	0.2.249	0.2.249	0.2.274	@stacksjs/stx (0.2.249)
bun-plugin-stx	0.2.249	0.2.249	0.2.274	@stacksjs/stx (0.2.249)
stx-router	0.2.249	0.2.249	0.2.274	@stacksjs/stx (0.2.249)
ts-broadcasting	0.0.9	0.0.9	0.0.10	@stacksjs/stx (^0.0.9)

Detected dependencies

npm

package.json

• @unocss/core ^66.6.7
• @unocss/preset-wind ^66.6.7
• @babel/core ^8.0.1
• @stylexjs/babel-plugin ^0.19.0
• @stylexjs/stylex ^0.19.0
• @tailwindcss/node ^4.1.14
• @tailwindcss/postcss ^4.1
• @tailwindcss/vite ^4.1
• mitata ^1.0.34
• postcss ^8.5.6
• tailwindcss ^3
• tailwindcss-v4 npm:tailwindcss@^4

package.json

• better-dx ^0.2.15

package.json

• @stacksjs/clapp ^0.2.0
• @stacksjs/ts-css workspace:*
• bunfig ^0.15.17

package.json

• bunfig ^0.15.6
• @types/bun latest
• @types/css-tree ^2.3.11
• @types/csso ^5.0.4
• better-dx ^0.2.15
• css-select ^7.0.0
• css-tree ^3.2.1
• css-what ^8.0.0
• csso ^5.0.5
• mitata ^1.0.34

package.json

github-actions

.github/workflows/release.yml

• actions/checkout v6
• home-lang/pantry/packages/action main

.github/workflows/buddy-bot.yml

• actions/checkout v6
• oven-sh/setup-bun v2
• shivammathur/setup-php v2

.github/workflows/ci.yml

• actions/checkout v6
• oven-sh/setup-bun v2
• actions/cache v5
• home-lang/pantry/packages/action main

dependency-files

packages/toolkit/deps.yaml

• bun.sh ^1.3.14

deps.yaml

• bun.sh ^1.3.14

pantry.lock

• @stacksjs/clapp 0.2.10
• better-dx 0.2.19
• bun.sh 1.3.14
• bunfig 0.15.15

packages/toolkit/pantry.lock

• bun.sh 0.0.0
• bun.sh 1.3.9

---

• Check this box to trigger a request for Buddy Bot to run again on this repository