Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/carbon-design-system/carbon). ## Deprecations / Replacements > [!WARNING] The following dependencies are either deprecated or have replacements available. | Datasource | Package | Replacement PR? | |------------|------|--------------| | npm | [node-sass](https://redirect.github.com/sass/node-sass) |  | ## Rate-Limited The following updates are currently rate-limited. To force their creation now, click on a checkbox below. - [ ] chore(deps): update react monorepo to ~19.3.0 (`@types/react`, `react`, `react-dom`, `react-is`) - [ ] chore(deps): update dependency java-jdk to v25 - [ ] chore(deps): update dependency vite to v8 - [ ] fix(deps): update dependency yargs to v18 - [ ] fix(deps): update octokit monorepo (major) (`@octokit/plugin-retry`, `@octokit/plugin-throttling`) - [ ] fix(deps): update typescript-eslint monorepo to v8 (`@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`) - [ ] **Create all rate-limited PRs at once** ## PR Edited (Blocked) The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below. - [ ] [chore(deps): update dependency @web/test-runner to v1](../pull/22790) - [ ] [fix(deps): update dependency eslint-plugin-react-hooks to v7](../pull/23010) - [ ] [fix(deps): update dependency stylelint-config-standard to v40](../pull/23118) - [ ] [fix(deps): update dependency stylelint-config-standard-scss to v17](../pull/23119) - [ ] [fix(deps): update dependency typescript to v7](../pull/23203) --- > [!WARNING] > Renovate failed to look up the following dependencies: `Could not determine new digest for update (github-tags package actions/upload-artifact)`, `Could not determine new digest for update (github-tags package jgehrcke/github-repo-stats)`. > > Files affected: `.github/workflows/ci.yml`, `.github/workflows/metrics-repo-stats.yml`, `.github/workflows/release.yml` --- ## Other Branches The following updates are pending. To force the creation of a PR, click on a checkbox below. - [ ] chore(deps): update yarn to v4.18.0 ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [chore(deps): update dependency @figma/code-connect to ^2.0.1](../pull/23347) - [ ] [chore(deps): update github/codeql-action action to v4.38.1](../pull/23385) - [ ] [chore(deps): update node.js to v24.21.0](../pull/23386) - [ ] [fix(deps): update dependency color to v5](../pull/22969) - [ ] **Click on this checkbox to rebase all open PRs at once** ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] [chore(deps): update eslint monorepo to v10](../pull/22094) (`@eslint/js`, `eslint`) ## Detected Dependencies docker-compose (1)

packages/cli/docker-compose.yml (1) - `verdaccio/verdaccio 6`

dockerfile (4)

actions/issues/Dockerfile (1) - `node 24-slim` actions/promote/Dockerfile actions/release-notifications/Dockerfile (1) - `node 24-slim` actions/wait-for-it/Dockerfile

github-actions (31)

.github/workflows/ci.yml (41) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `codecov/codecov-action v7.1.1@303a32d7a59b442fa8d48b6a1cc6825c09c847a5` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `codecov/codecov-action v7.1.1@303a32d7a59b442fa8d48b6a1cc6825c09c847a5` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `dorny/paths-filter v4.0.3@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/upload-artifact 7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/download-artifact v8` - `actions/upload-artifact 7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/download-artifact v8` - `actions/upload-artifact 7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `chromaui/action v18.9.4@bb3b582719a93c1828c5e520e62992b2937d7889` .github/workflows/code-connect.yml (3) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` .github/workflows/codeql-analysis.yml (3) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63` → [Updates: `v4.38.1`] - `github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63` → [Updates: `v4.38.1`] .github/workflows/dco.yml (1) - `cla-assistant/github-action v2.6.1@ca4a40a7d1004f18d9960b404b97e5f30a505a08` .github/workflows/deploy-packages.yml (8) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1` .github/workflows/deploy-react-storybook.yml (5) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/configure-pages v6.0.0@45bfe0192ca1faeb007ade9deae92b16b8254a0d` - `actions/upload-pages-artifact v5.0.0@fc324d3547104276b827a68afc52ff2a11cc49c9` - `actions/deploy-pages v5.0.1@368f82528645a54fb793d4d04e342629a3f51346` .github/workflows/deploy-v12-storybooks.yml (3) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `cpina/github-action-push-to-another-repository v1.7.3@55306faa4ed53b815ae49e564af8cfb359d32ae2` .github/workflows/deploy-web-components-storybook.yml (3) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `cpina/github-action-push-to-another-repository v1.7.3@55306faa4ed53b815ae49e564af8cfb359d32ae2` .github/workflows/issue-triage.yml (6) - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `github/issue-labeler v3.5@ccca1e16fcb66762200e616fc29b57b940c1cb67` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `carbon-design-system/carbon main` .github/workflows/mend-scan.yml (4) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/setup-java v6.0.1@de7274f081f381c8f8158605e0321c36c376e2e6` - `java-jdk 17` → [Updates: `25`] .github/workflows/metrics-merge-rate.yml (2) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `slackapi/slack-github-action v4.0.0@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d` .github/workflows/metrics-repo-stats.yml (1) - `jgehrcke/github-repo-stats 1.4.2@306db38ad131cab2aa5f2cd3062bf6f8aa78c1aa` .github/workflows/nightly-release.yml (2) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` .github/workflows/promote.yml (1) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` .github/workflows/publish-web-components-cdn.yml (5) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `martinbeentjes/npm-get-version-action v1.3.1` - `jakejarvis/s3-sync-action master` - `jakejarvis/s3-sync-action master` - `jakejarvis/s3-sync-action master` .github/workflows/pull-request-closed.yml (1) - `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3` .github/workflows/pull-request-template.yml (1) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` .github/workflows/release-notifications.yml (2) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` .github/workflows/release.yml (6) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/upload-artifact 7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `peter-evans/repository-dispatch v4` .github/workflows/slack-announcement.yml (1) - `slackapi/slack-github-action v4.0.0@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d` .github/workflows/slack-build-notifications.yml (2) - `slackapi/slack-github-action v4.0.0@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d` - `slackapi/slack-github-action v4.0.0@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d` .github/workflows/slack-office-hours-design.yml (1) - `slackapi/slack-github-action v4.0.0@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d` .github/workflows/slack-office-hours-dev.yml (3) - `slackapi/slack-github-action v4.0.0@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d` - `slackapi/slack-github-action v4.0.0@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d` - `slackapi/slack-github-action v4.0.0@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d` .github/workflows/stale.yml (1) - `actions/stale v11.0.0@4391f3da665fdf50b6810c1a66712fb9ba21aa93` .github/workflows/v10-ci.yml (13) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `dorny/paths-filter v4.0.3@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d` .github/workflows/v10-deploy-react-storybook.yml (3) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `cpina/github-action-push-to-another-repository v1.7.3@55306faa4ed53b815ae49e564af8cfb359d32ae2` .github/workflows/v10-release.yml (5) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3` - `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3` - `actions/upload-release-asset v1.0.2@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5` .github/workflows/v10-version.yml (6) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/github-script v9.0.0` - `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1` .github/workflows/version-patch.yml (3) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` .github/workflows/version.yml (5) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1` - `peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1` actions/validate-pr-template/action.yml (3) - `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3` - `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3` - `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3`

npm (39)

actions/issues/package.json (2) - `@actions/core ^3.0.0` - `@actions/github 9.1.1` actions/promote/package.json (5) - `@actions/core ^3.0.0` - `execa ^10.0.0` - `fast-glob ^3.3.3` - `fs-extra ^11.0.0` - `got ^16.0.0` actions/release-notifications/package.json (2) - `@actions/core ^3.0.0` - `@actions/github 9.1.1` actions/wait-for-it/package.json (2) - `@actions/core ^3.0.0` - `got ^16.0.0` config/babel-preset-carbon/package.json (9) - `@babel/core ^8.0.0` - `@babel/plugin-proposal-export-default-from ^8.0.0` - `@babel/plugin-transform-class-properties ^8.0.0` - `@babel/plugin-transform-export-namespace-from ^8.0.0` - `@babel/plugin-transform-react-constant-elements ^8.0.0` - `@babel/preset-env ^8.0.0` - `@babel/preset-react ^8.0.0` - `@babel/preset-typescript ^8.0.0` - `babel-plugin-dev-expression ^0.2.3` config/browserslist-config-carbon/package.json config/eslint-config-carbon/package.json (19) - `@babel/eslint-parser ^8.0.0` - `@typescript-eslint/eslint-plugin ^5.59.6` → [Updates: `^8.0.0`] - `@typescript-eslint/parser ^5.59.6` → [Updates: `^8.0.0`] - `eslint-config-airbnb ^19.0.4` - `eslint-config-airbnb-base ^15.0.0` - `eslint-config-prettier ^10.0.0` - `eslint-plugin-import ^2.31.0` - `eslint-plugin-jest ^29.0.0` - `eslint-plugin-jest-dom ^5.0.0` - `eslint-plugin-jsdoc ^64.0.0` - `eslint-plugin-jsx-a11y ^6.7.1` - `eslint-plugin-prettier ^5.0.0` - `eslint-plugin-react ^7.32.2` - `eslint-plugin-react-hooks ^5.1.0` → [Updates: `^7.0.0`] - `eslint-plugin-storybook ^10.0.0` - `eslint-plugin-testing-library ^7.0.0` - `eslint-restricted-globals ^0.2.0` - `prettier ^3.3.3` - `eslint ^9.0.0` → [Updates: `^10.0.0`] config/jest-config-carbon/package.json (18) - `@babel/core ^8.0.0` - `@babel/plugin-proposal-export-default-from ^8.0.0` - `@babel/plugin-transform-class-properties ^8.0.0` - `@babel/plugin-