Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update all non-major dependencies (patch) (isomorphic-git, taiki-e/install-action)
• chore(deps): update dependency @tanstack/react-query to v5.100.14
• chore(deps): update rust crate reqwest to v0.13.4
• chore(deps): update rust crate similar to v3.1.1
• chore(deps): update tanstack-router monorepo (patch) (@tanstack/react-router, @tanstack/router-plugin)
• chore(deps): update pnpm to v11.3.0
• fix(deps): update rust crate evalexpr to v12
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update rust crate hyper to v1.10.0

---

Warning

Renovate failed to look up the following dependencies: Failed to look up maven package dev.flutter.flutter-plugin-loader:dev.flutter.flutter-plugin-loader.gradle.plugin: no-result.

Files affected: mobile/android/settings.gradle.kts

---

Detected Dependencies

cargo (26)

Cargo.toml (36)

• tokio 1
• tokio-util 0.7
• axum 0.8
• tower 0.5
• tower-http 0.6
• sqlx 0.9
• redis 1.0
• deadpool-redis 0.23
• nostr 0.44
• serde 1
• serde_json 1
• serde_yaml 0.9
• evalexpr 11 → [Updates: 12]
• cron 0.16
• tracing 0.1
• tracing-subscriber 0.3
• metrics 0.24
• metrics-exporter-prometheus 0.18
• thiserror 2
• anyhow 1
• uuid 1
• chrono 0.4
• reqwest 0.13 → [Updates: 0.13]
• sha2 0.11
• hex 0.4
• hmac 0.13
• rand 0.10
• subtle 2.6
• zeroize 1.8
• dashmap 6
• moka 0.12
• futures-util 0.3
• tokio-tungstenite 0.29
• url 2
• rmcp 1.1.0
• schemars 1

crates/git-credential-nostr/Cargo.toml (1)

• base64 0.22

crates/git-sign-nostr/Cargo.toml (2)

• base64 0.22
• libc 0.2

crates/sprig/Cargo.toml

crates/sprout-acp/Cargo.toml (5)

• rustls 0.23
• base64 0.22
• nix 0.31
• clap 4
• toml 1.0

crates/sprout-admin/Cargo.toml (1)

• clap 4

crates/sprout-agent/Cargo.toml (10)

• rmcp 1
• arc-swap 1
• getrandom 0.4
• async-trait 0.1
• base64 0.22
• urlencoding 2
• webbrowser 1
• nix 0.31
• tempfile 3
• nix 0.31

crates/sprout-audit/Cargo.toml

crates/sprout-auth/Cargo.toml

crates/sprout-cli/Cargo.toml (5)

• clap 4
• base64 0.22
• sha2 0.11
• diffy 0.5
• infer 0.19

crates/sprout-core/Cargo.toml (1)

• percent-encoding 2.3

crates/sprout-db/Cargo.toml

crates/sprout-dev-mcp/Cargo.toml (6)

• similar 3 → [Updates: 3]
• tempfile 3
• ignore 0.4.25
• base64 0.22
• image 0.25
• nix 0.31

crates/sprout-mcp/Cargo.toml (3)

• rustls 0.23
• base64 0.22
• infer 0.19

crates/sprout-media/Cargo.toml (11)

• s3 0.37
• infer 0.19
• image 0.25
• blurhash 0.2
• imagesize 0.14
• bytes 1
• mp4 0.14
• tempfile 3
• tokio-util 0.7
• futures-util 0.3
• futures-core 0.3

crates/sprout-pair-relay/Cargo.toml (8)

• parking_lot 0.12
• hyper 1 → [Updates: 1]
• hyper-util 0.1
• http-body-util 0.1
• secp256k1 0.31
• sha2 0.11
• secp256k1 0.31
• sha2 0.11

crates/sprout-pairing-cli/Cargo.toml (1)

• clap 4

crates/sprout-persona/Cargo.toml (5)

• serde 1
• serde_json 1
• serde_yaml 0.9
• thiserror 2
• tempfile 3

crates/sprout-proxy/Cargo.toml

crates/sprout-pubsub/Cargo.toml

crates/sprout-relay/Cargo.toml (5)

• base64 0.22
• s3 0.37
• tempfile 3
• bytes 1
• infer 0.19

crates/sprout-sdk/Cargo.toml

crates/sprout-search/Cargo.toml

crates/sprout-test-client/Cargo.toml (3)

• rustls 0.23
• base64 0.22
• s3 0.37

crates/sprout-workflow/Cargo.toml (2)

• evalexpr 11 → [Updates: 12]
• cron 0.16

desktop/src-tauri/Cargo.toml (47)

• atomic-write-file 0.3
• dirs 6
• tauri 2
• tauri-plugin-deep-link 2
• tauri-plugin-opener 2
• tauri-plugin-single-instance 2
• tauri-plugin-window-state 2
• tauri-plugin-websocket 2
• tauri-plugin-dialog 2
• tauri-plugin-updater 2
• tauri-plugin-process 2
• infer 0.19
• hex 0.4
• tokio 1
• tokio-tungstenite 0.29
• tokio-util 0.7
• futures-util 0.3
• opus 0.3
• neteq 0.8
• serde 1
• serde_json 1
• nostr 0.44
• zeroize 1
• reqwest 0.13
• url 2
• base64 0.22
• sha2 0.11
• tar 0.4
• bzip2 0.6
• chrono 0.4
• tauri-plugin-global-shortcut 2
• tauri-plugin-notification 2.3.3
• uuid 1
• png 0.18
• zip 8
• sherpa-onnx 1.12
• regex 1
• axum 0.8
• rodio 0.22
• earshot 1.0
• rubato 3.0
• audioadapter-buffers 3.0
• tempfile 3
• strip-ansi-escapes 0.2
• tauri-build 2
• libc 0.2
• windows-sys 0.61

cocoapods (1)

mobile/ios/Podfile

docker-compose (1)

docker-compose.yml (4)

• postgres 18-alpine
• redis 8-alpine
• typesense/typesense 30.2
• quay.io/keycloak/keycloak 26.0 → [Updates: 26.6]

dockerfile (1)

Dockerfile (2)

• rust 1.95-bookworm
• node 24-bookworm-slim

github-actions (4)

.github/workflows/auto-tag-on-release-pr-merge.yml (1)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/ci.yml (41)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• dorny/paths-filter v4.0.1@fbd0ab8f3e69293af611ebaee6363fc25e6d187d
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• taiki-e/install-action v2.79.5@6c1f7cf125e42770ff087ea443901b487cc5471a → [Updates: v2.79.8]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• subosito/flutter-action v2.23.0@1a449444c387b1966244ae4d4f8c696479add0b2
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• taiki-e/install-action v2.79.5@6c1f7cf125e42770ff087ea443901b487cc5471a → [Updates: v2.79.8]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32

.github/workflows/release.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• block/apple-codesign-action v1.1.0@679535d1ab7c5a7c18e6f9afcba3464512cc3dde
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32

.github/workflows/sprig.yml (8)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• taiki-e/install-action v2.79.5@6c1f7cf125e42770ff087ea443901b487cc5471a → [Updates: v2.79.8]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

gradle (4)

mobile/android/app/build.gradle.kts

mobile/android/build.gradle.kts

mobile/android/gradle.properties

mobile/android/settings.gradle.kts (3)

• dev.flutter.flutter-plugin-loader 1.0.0
• com.android.application 9.2.1
• org.jetbrains.kotlin.android 2.3.21

gradle-wrapper (1)

mobile/android/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 9.5.1

hermit (1)

bin/hermit (10)

• biome 2.4.7 → [Updates: 2.4.16]
• cargo-deny 0.19.0 → [Updates: 0.19.7]
• cmake 4.3.1 → [Updates: 4.3.3]
• flutter 3.41.7 → [Updates: 3.41.9, 3.44.0]
• just 1.46.0 → [Updates: 1.51.0]
• lefthook 2.1.3 → [Updates: 2.1.8]
• node 24.14.0 → [Updates: 24.14.1, 24.15.0]
• pgschema 1.7.4 → [Updates: 1.9.0]
• pnpm 11.1.3 → [Updates: 11.4.0]
• rustup 1.28.2 → [Updates: 1.29.0]

npm (4)

desktop/package.json (62)

• @emoji-mart/data ^1.2.1
• @emoji-mart/react ^1.1.1
• @radix-ui/react-alert-dialog ^1.1.15
• @radix-ui/react-avatar ^1.1.11
• @radix-ui/react-checkbox ^1.3.3
• @radix-ui/react-context-menu ^2.2.16
• @radix-ui/react-dialog ^1.1.15
• @radix-ui/react-dropdown-menu ^2.1.16
• @radix-ui/react-focus-scope ^1.1.8
• @radix-ui/react-popover ^1.1.15
• @radix-ui/react-separator ^1.1.8
• @radix-ui/react-slot ^1.2.4
• @radix-ui/react-switch ^1.2.6
• @radix-ui/react-tabs ^1.1.13
• @radix-ui/react-toggle ^1.1.10
• @radix-ui/react-tooltip ^1.2.8
• @tanstack/react-query ^5.90.21 → [Updates: ^5.90.21]
• @tanstack/react-router ^1.168.10 → [Updates: ^1.168.10]
• @tauri-apps/api ~2.11
• @tauri-apps/plugin-notification ^2.3.3
• @tauri-apps/plugin-opener ~2.5
• @tauri-apps/plugin-process ^2.3.1
• @tauri-apps/plugin-updater ^2.10.0
• @tiptap/core ^3.22.3
• @tiptap/extension-link ^3.22.3
• @tiptap/extension-placeholder ^3.22.3
• @tiptap/pm ^3.22.3
• @tiptap/react ^3.22.3
• @tiptap/starter-kit ^3.22.3
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• emoji-mart ^5.6.0
• jdenticon ^3.3.0
• lucide-react ^1.0.0
• motion ^12.38.0
• qrcode.react ^4.2.0
• react ^19.1.0
• react-diff-view ^3.3.2
• react-dom ^19.1.0
• react-markdown ^10.1.0
• remark-breaks ^4.0.0
• remark-gfm ^4.0.1
• shiki ^4.0.2
• sonner ^2.0.7
• tailwind-merge ^3.5.0
• tiptap-markdown ^0.9.0
• yaml ^2.8.3
• @noble/hashes ^2.0.1
• @playwright/test ^1.58.2
• @tanstack/router-plugin ^1.167.12 → [Updates: ^1.167.12]
• @tanstack/virtual-file-routes ^1.161.7
• @tauri-apps/cli ~2.11
• @types/react ^19.1.8
• @types/react-dom ^19.1.6
• @vitejs/plugin-react ^6.0.0
• @tailwindcss/postcss ^4.3.0
• nostr-tools ^2.23.3
• postcss ^8.5.8
• tailwindcss ^4.3.0
• tw-animate-css ^1.4.0
• typescript ~6.0.0
• vite ^8.0.0

package.json (3)

• @tailwindcss/typography ^0.5.19
• @biomejs/biome ^2.4.6 → [Updates: ^2.4.6]
• pnpm 11.2.2 → [Updates: 11.3.0]

pnpm-workspace.yaml

web/package.json (30)

• @isomorphic-git/lightning-fs ^4.6.2
• @radix-ui/react-slot ^1.2.4
• @radix-ui/react-tooltip ^1.2.8
• @tailwindcss/typography ^0.5.19
• @tanstack/react-query ^5.90.21 → [Updates: ^5.90.21]
• @tanstack/react-router ^1.168.10 → [Updates: ^1.168.10]
• buffer ^6.0.3
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• isomorphic-git ^1.37.6 → [Updates: ^1.37.6]
• lucide-react ^1.0.0
• nostr-tools ^2.23.3
• react ^19.1.0
• react-dom ^19.1.0
• react-markdown ^10.1.0
• remark-gfm ^4.0.1
• sonner ^2.0.7
• tailwind-merge ^3.5.0
• @playwright/test ^1.58.2
• @tanstack/router-plugin ^1.167.12 → [Updates: ^1.167.12]
• @tanstack/virtual-file-routes ^1.161.7
• @types/react ^19.1.8
• @types/react-dom ^19.1.6
• @vitejs/plugin-react ^6.0.0
• @tailwindcss/postcss ^4.3.0
• postcss ^8.5.8
• tailwindcss ^4.3.0
• tw-animate-css ^1.4.0
• typescript ~6.0.0
• vite ^8.0.0

pub (1)

mobile/pubspec.yaml (24)

• flutter unknown version
• hooks_riverpod ^3.0.3
• flutter_hooks ^0.21.3
• lucide_icons_flutter ^3.1.0
• http ^1.4.0
• flutter_secure_storage ^10.0.0
• mobile_scanner ^7.0.0
• shared_preferences ^2.5.5
• web_socket_channel ^3.0.1
• connectivity_plus ^7.0.0
• nostr ^2.0.0
• pointycastle ^4.0.0
• url_launcher ^6.3.2
• gpt_markdown ^1.1.6
• intl ^0.20.2
• uuid ^4.5.1
• image_picker ^1.1.2
• video_player ^2.10.1
• package_info_plus ^10.0.0
• flutter_lints ^6.0.0
• custom_lint ^0.8.0
• riverpod_lint ^3.1.0
• mocktail ^1.0.4
• dart ^3.11.4

rust-toolchain (1)

rust-toolchain.toml (1)

• rust 1.95.0

---

• Check this box to trigger a request for Renovate to run again on this repository