Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update rust crate redis to v1.2.2
• chore(deps): update rust crate reqwest to v0.13.4
• chore(deps): update rust crate similar to v3.1.1
• chore(deps): update rust crate tauri-plugin-global-shortcut to v2.3.2
• chore(deps): update rust crate uuid to v1.23.2
• chore(deps): update tanstack-router monorepo (patch) (@tanstack/react-router, @tanstack/router-plugin)
• chore(deps): update all non-major dependencies (minor) (pnpm, rust)
• chore(deps): update dependency lucide-react to v1.17.0
• chore(deps): update rust crate hyper to v1.10.1
• fix(deps): update rust crate evalexpr to v12
• 🔐 Create all awaiting schedule PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up maven package dev.flutter.flutter-plugin-loader:dev.flutter.flutter-plugin-loader.gradle.plugin: no-result.

Files affected: mobile/android/settings.gradle.kts

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update all non-major dependencies (patch) (@biomejs/biome, taiki-e/install-action)

Detected Dependencies

cargo (26)

Cargo.toml (36)

• tokio 1
• tokio-util 0.7
• axum 0.8
• tower 0.5
• tower-http 0.6
• sqlx 0.9
• redis 1.0 → [Updates: 1.0]
• deadpool-redis 0.23
• nostr 0.44
• serde 1
• serde_json 1
• serde_yaml 0.9
• evalexpr 11 → [Updates: 12]
• cron 0.16
• tracing 0.1
• tracing-subscriber 0.3
• metrics 0.24
• metrics-exporter-prometheus 0.18
• thiserror 2
• anyhow 1
• uuid 1 → [Updates: 1]
• chrono 0.4
• reqwest 0.13 → [Updates: 0.13]
• sha2 0.11
• hex 0.4
• hmac 0.13
• rand 0.10
• subtle 2.6
• zeroize 1.8
• dashmap 6
• moka 0.12
• futures-util 0.3
• tokio-tungstenite 0.29
• url 2
• rmcp 1.1.0
• schemars 1

crates/git-credential-nostr/Cargo.toml (1)

• base64 0.22

crates/git-sign-nostr/Cargo.toml (2)

• base64 0.22
• libc 0.2

crates/sprig/Cargo.toml

crates/sprout-acp/Cargo.toml (5)

• rustls 0.23
• base64 0.22
• nix 0.31
• clap 4
• toml 1.0

crates/sprout-admin/Cargo.toml (1)

• clap 4

crates/sprout-agent/Cargo.toml (10)

• rmcp 1
• arc-swap 1
• getrandom 0.4
• async-trait 0.1
• base64 0.22
• urlencoding 2
• webbrowser 1
• nix 0.31
• tempfile 3
• nix 0.31

crates/sprout-audit/Cargo.toml

crates/sprout-auth/Cargo.toml

crates/sprout-cli/Cargo.toml (5)

• clap 4
• base64 0.22
• sha2 0.11
• diffy 0.5
• infer 0.19

crates/sprout-core/Cargo.toml (1)

• percent-encoding 2.3

crates/sprout-db/Cargo.toml

crates/sprout-dev-mcp/Cargo.toml (6)

• similar 3 → [Updates: 3]
• tempfile 3
• ignore 0.4.25
• base64 0.22
• image 0.25
• nix 0.31

crates/sprout-mcp/Cargo.toml (3)

• rustls 0.23
• base64 0.22
• infer 0.19

crates/sprout-media/Cargo.toml (11)

• s3 0.37
• infer 0.19
• image 0.25
• blurhash 0.2
• imagesize 0.14
• bytes 1
• mp4 0.14
• tempfile 3
• tokio-util 0.7
• futures-util 0.3
• futures-core 0.3

crates/sprout-pair-relay/Cargo.toml (8)

• parking_lot 0.12
• hyper 1 → [Updates: 1]
• hyper-util 0.1
• http-body-util 0.1
• secp256k1 0.31
• sha2 0.11
• secp256k1 0.31
• sha2 0.11

crates/sprout-pairing-cli/Cargo.toml (1)

• clap 4

crates/sprout-persona/Cargo.toml (5)

• serde 1
• serde_json 1
• serde_yaml 0.9
• thiserror 2
• tempfile 3

crates/sprout-proxy/Cargo.toml

crates/sprout-pubsub/Cargo.toml

crates/sprout-relay/Cargo.toml (5)

• base64 0.22
• s3 0.37
• tempfile 3
• bytes 1
• infer 0.19

crates/sprout-sdk/Cargo.toml

crates/sprout-search/Cargo.toml

crates/sprout-test-client/Cargo.toml (3)

• rustls 0.23
• base64 0.22
• s3 0.37

crates/sprout-workflow/Cargo.toml (2)

• evalexpr 11 → [Updates: 12]
• cron 0.16

desktop/src-tauri/Cargo.toml (48)

• atomic-write-file 0.3
• dirs 6
• tauri 2
• tauri-plugin-deep-link 2
• tauri-plugin-opener 2
• tauri-plugin-single-instance 2
• tauri-plugin-window-state 2
• tauri-plugin-websocket 2
• tauri-plugin-dialog 2
• tauri-plugin-updater 2
• tauri-plugin-process 2
• infer 0.19
• hex 0.4
• tokio 1
• tokio-tungstenite 0.29
• tokio-util 0.7
• futures-util 0.3
• opus 0.3
• neteq 0.8
• serde 1
• serde_json 1
• nostr 0.44
• zeroize 1
• reqwest 0.13
• url 2
• base64 0.22
• sha2 0.11
• tar 0.4
• bzip2 0.6
• chrono 0.4
• tauri-plugin-global-shortcut 2 → [Updates: 2]
• tauri-plugin-notification 2.3.3
• uuid 1 → [Updates: 1]
• png 0.18
• zip 8
• sherpa-onnx 1.12
• regex 1
• axum 0.8
• rodio 0.22
• earshot 1.0
• rubato 3.0
• audioadapter-buffers 3.0
• tempfile 3
• strip-ansi-escapes 0.2
• tauri-build 2
• libc 0.2
• ctrlc 3
• windows-sys 0.61

cocoapods (1)

mobile/ios/Podfile

docker-compose (1)

docker-compose.yml (4)

• postgres 18-alpine
• redis 8-alpine
• typesense/typesense 30.2
• quay.io/keycloak/keycloak 26.0 → [Updates: 26.6]

dockerfile (1)

Dockerfile (2)

• rust 1.95-bookworm → [Updates: 1.96-bookworm]
• node 24-bookworm-slim

github-actions (4)

.github/workflows/auto-tag-on-release-pr-merge.yml (1)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/ci.yml (41)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• dorny/paths-filter v4.0.1@fbd0ab8f3e69293af611ebaee6363fc25e6d187d
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• taiki-e/install-action v2.79.5@6c1f7cf125e42770ff087ea443901b487cc5471a → [Updates: v2.79.15, v2.81.1]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• subosito/flutter-action v2.23.0@1a449444c387b1966244ae4d4f8c696479add0b2
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• taiki-e/install-action v2.79.5@6c1f7cf125e42770ff087ea443901b487cc5471a → [Updates: v2.79.15, v2.81.1]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32

.github/workflows/release.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• block/apple-codesign-action v1.1.0@679535d1ab7c5a7c18e6f9afcba3464512cc3dde
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32

.github/workflows/sprig.yml (8)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• taiki-e/install-action v2.79.5@6c1f7cf125e42770ff087ea443901b487cc5471a → [Updates: v2.79.15, v2.81.1]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

gradle (4)

mobile/android/app/build.gradle.kts

mobile/android/build.gradle.kts

mobile/android/gradle.properties

mobile/android/settings.gradle.kts (3)

• dev.flutter.flutter-plugin-loader 1.0.0
• com.android.application 9.2.1
• org.jetbrains.kotlin.android 2.3.21

gradle-wrapper (1)

mobile/android/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 9.5.1

hermit (1)

bin/hermit (10)

• biome 2.4.7 → [Updates: 2.4.16]
• cargo-deny 0.19.0 → [Updates: 0.19.8]
• cmake 4.3.1 → [Updates: 4.3.3]
• flutter 3.41.7 → [Updates: 3.41.9, 3.44.0]
• just 1.46.0 → [Updates: 1.51.0]
• lefthook 2.1.3 → [Updates: 2.1.9]
• node 24.14.0 → [Updates: 24.14.1, 24.15.0]
• pgschema 1.7.4 → [Updates: 1.10.0]
• pnpm 11.4.0 → [Updates: 11.5.0]
• rustup 1.28.2 → [Updates: 1.29.0]

npm (4)

desktop/package.json (62)

• @emoji-mart/data ^1.2.1
• @emoji-mart/react ^1.1.1
• @radix-ui/react-alert-dialog ^1.1.15
• @radix-ui/react-avatar ^1.1.11
• @radix-ui/react-checkbox ^1.3.3
• @radix-ui/react-context-menu ^2.2.16
• @radix-ui/react-dialog ^1.1.15
• @radix-ui/react-dropdown-menu ^2.1.16
• @radix-ui/react-focus-scope ^1.1.8
• @radix-ui/react-popover ^1.1.15
• @radix-ui/react-separator ^1.1.8
• @radix-ui/react-slot ^1.2.4
• @radix-ui/react-switch ^1.2.6
• @radix-ui/react-tabs ^1.1.13
• @radix-ui/react-toggle ^1.1.10
• @radix-ui/react-tooltip ^1.2.8
• @tanstack/react-query ^5.90.21
• @tanstack/react-router ^1.168.10 → [Updates: ^1.168.10]
• @tauri-apps/api ~2.11
• @tauri-apps/plugin-notification ^2.3.3
• @tauri-apps/plugin-opener ~2.5
• @tauri-apps/plugin-process ^2.3.1
• @tauri-apps/plugin-updater ^2.10.0
• @tiptap/core ^3.22.3
• @tiptap/extension-link ^3.22.3
• @tiptap/extension-placeholder ^3.22.3
• @tiptap/pm ^3.22.3
• @tiptap/react ^3.22.3
• @tiptap/starter-kit ^3.22.3
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• emoji-mart ^5.6.0
• jdenticon ^3.3.0
• lucide-react ^1.0.0 → [Updates: ^1.0.0]
• motion ^12.38.0
• qrcode.react ^4.2.0
• react ^19.1.0
• react-diff-view ^3.3.2
• react-dom ^19.1.0
• react-markdown ^10.1.0
• remark-breaks ^4.0.0
• remark-gfm ^4.0.1
• shiki ^4.0.2
• sonner ^2.0.7
• tailwind-merge ^3.5.0
• tiptap-markdown ^0.9.0
• yaml ^2.8.3
• @noble/hashes ^2.0.1
• @playwright/test ^1.58.2
• @tailwindcss/postcss ^4.3.0
• @tanstack/router-plugin ^1.167.12 → [Updates: ^1.167.12]
• @tanstack/virtual-file-routes ^1.161.7
• @tauri-apps/cli ~2.11
• @types/react ^19.1.8
• @types/react-dom ^19.1.6
• @vitejs/plugin-react ^6.0.0
• nostr-tools ^2.23.3
• postcss ^8.5.8
• tailwindcss ^4.3.0
• tw-animate-css ^1.4.0
• typescript ~6.0.0
• vite ^8.0.0 → [Updates: ^8.0.0]

package.json (3)

• @tailwindcss/typography ^0.5.19
• @biomejs/biome ^2.4.6 → [Updates: ^2.4.6]
• pnpm 11.4.0 → [Updates: 11.5.0]

pnpm-workspace.yaml

web/package.json (30)

• @isomorphic-git/lightning-fs ^4.6.2
• @radix-ui/react-slot ^1.2.4
• @radix-ui/react-tooltip ^1.2.8
• @tailwindcss/typography ^0.5.19
• @tanstack/react-query ^5.90.21
• @tanstack/react-router ^1.168.10 → [Updates: ^1.168.10]
• buffer ^6.0.3
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• isomorphic-git ^1.38.3
• lucide-react ^1.0.0 → [Updates: ^1.0.0]
• nostr-tools ^2.23.3
• react ^19.1.0
• react-dom ^19.1.0
• react-markdown ^10.1.0
• remark-gfm ^4.0.1
• sonner ^2.0.7
• tailwind-merge ^3.5.0
• @playwright/test ^1.58.2
• @tanstack/router-plugin ^1.167.12 → [Updates: ^1.167.12]
• @tanstack/virtual-file-routes ^1.161.7
• @types/react ^19.1.8
• @types/react-dom ^19.1.6
• @vitejs/plugin-react ^6.0.0
• @tailwindcss/postcss ^4.3.0
• postcss ^8.5.8
• tailwindcss ^4.3.0
• tw-animate-css ^1.4.0
• typescript ~6.0.0
• vite ^8.0.0 → [Updates: ^8.0.0]

pub (1)

mobile/pubspec.yaml (24)

• flutter unknown version
• hooks_riverpod ^3.0.3
• flutter_hooks ^0.21.3
• lucide_icons_flutter ^3.1.0
• http ^1.4.0
• flutter_secure_storage ^10.0.0
• mobile_scanner ^7.0.0
• shared_preferences ^2.5.5
• web_socket_channel ^3.0.1
• connectivity_plus ^7.0.0
• nostr ^2.0.0
• pointycastle ^4.0.0
• url_launcher ^6.3.2
• gpt_markdown ^1.1.6
• intl ^0.20.2
• uuid ^4.5.1
• image_picker ^1.1.2
• video_player ^2.10.1
• package_info_plus ^10.0.0
• flutter_lints ^6.0.0
• custom_lint ^0.8.0
• riverpod_lint ^3.1.0
• mocktail ^1.0.4
• dart ^3.11.4

rust-toolchain (1)

rust-toolchain.toml (1)

• rust 1.95.0 → [Updates: 1.96.0]

---

• Check this box to trigger a request for Renovate to run again on this repository