Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/eggjs/egg). ## Rate-Limited The following updates are currently rate-limited. To force their creation now, click on a checkbox below. - [ ] chore(deps): update actions/checkout digest to de0fac2 - [ ] chore(deps): update dependency @langchain/core to v1.1.27 - [ ] chore(deps): update dependency @langchain/openai to v1.2.9 - [ ] chore(deps): update dependency @swc/core to v1.15.13 - [ ] chore(deps): update dependency @types/cookie-parser to v1.4.10 - [ ] chore(deps): update dependency @types/express to v5.0.6 - [ ] chore(deps): update dependency @types/koa-bodyparser to v4.3.13 - [ ] chore(deps): update dependency @types/koa-compose to v3.2.9 - [ ] chore(deps): update dependency @types/koa-range to v0.3.6 - [ ] chore(deps): update dependency @types/lodash to v4.17.24 - [ ] chore(deps): update dependency @types/node to v24.10.13 - [ ] chore(deps): update dependency @types/urijs to v1.19.26 - [ ] chore(deps): update dependency dayjs to v1.11.19 - [ ] chore(deps): update dependency esbuild to v0.27.3 - [ ] chore(deps): update dependency execa to v9.6.1 - [ ] chore(deps): update dependency langchain to v1.2.26 - [ ] chore(deps): update dependency marked to v17.0.3 - [ ] chore(deps): update dependency publint to v0.3.17 - [ ] chore(deps): update dependency raw-body to v2.5.3 - [ ] chore(deps): update dependency rimraf to v6.1.3 - [ ] chore(deps): update dependency semver to v7.7.4 - [ ] chore(deps): update node.js to v24.13.1 - [ ] chore(deps): update vitest monorepo to v4.0.18 (`@vitest/coverage-v8`, `@vitest/ui`, `vitest`) - [ ] chore(deps): update dependency @modelcontextprotocol/sdk to v1.27.0 - [ ] chore(deps): update dependency @oclif/core to v4.8.1 - [ ] chore(deps): update dependency cheerio to v1.2.0 - [ ] chore(deps): update dependency cookie to v1.1.1 - [ ] chore(deps): update dependency cpy to v12.1.0 - [ ] chore(deps): update dependency express to v4.22.1 - [ ] chore(deps): update dependency iconv-lite to ^0.7.0 - [ ] chore(deps): update dependency ioredis to v5.9.3 - [ ] chore(deps): update dependency leoric to v2.14.0 - [ ] chore(deps): update dependency mysql2 to v3.18.0 - [ ] chore(deps): update dependency oxlint-tsgolint to ^0.14.0 - [ ] chore(deps): update dependency superagent to v10.3.0 - [ ] chore(deps): update dependency type-fest to v5.4.4 - [ ] chore(deps): update dependency typebox to v1.1.1 - [ ] chore(deps): update dependency urllib to v4.9.0 - [ ] chore(deps): update dependency vitepress-plugin-llms to v1.11.0 - [ ] chore(deps): update dependency cpy to v13 - [ ] chore(deps): update dependency cpy-cli to v7 - [ ] chore(deps): update dependency eslint to v10 - [ ] chore(deps): update dependency eventsource to v4 - [ ] chore(deps): update dependency multimatch to v8 - [ ] fix(deps): update dependency raw-body to v3 - [ ] **Create all rate-limited PRs at once** ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [chore(deps): update dependency @typescript/native-preview to v7.0.0-dev.20260223.1](../pull/5773) - [ ] [chore(deps): update dependency tsdown to ^0.20.0](../pull/5766) - [ ] [chore(deps): update oxlint monorepo](../pull/5755) (`oxc-minify`, `oxfmt`, `oxlint`) - [ ] **Click on this checkbox to rebase all open PRs at once** ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] [chore(deps): update dependency lodash to v4.17.23 [security]](../pull/5777) - [ ] [chore(deps): update dependency ajv to v8.18.0 [security]](../pull/5800) - [ ] [chore(deps): update dependency glob to v11.1.0 [security]](../pull/5778) - [ ] [chore(deps): update dependency vitepress to v2.0.0-alpha.16](../pull/5784) - [ ] [chore(deps): update dependency tsx to v4.21.0](../pull/5711) - [ ] [chore(deps): update pnpm to v10.30.2](../pull/5774) - [ ] [chore(deps): update dependency @clack/prompts to v1](../pull/5782) - [ ] [chore(deps): update dependency ajv-formats to v3](../pull/5585) - [ ] [chore(deps): update dependency cron-parser to v5](../pull/5545) - [ ] [chore(deps): update dependency express to v5](../pull/5473) - [ ] [chore(deps): update dependency globby to v16](../pull/5697) - [ ] [chore(deps): update dependency matcher to v6](../pull/5554) - [ ] [chore(deps): update dependency npminstall to v8](../pull/5775) - [ ] [chore(deps): update dependency path-to-regexp to v8](../pull/5568) - [ ] [chore(deps): update dependency zod to v4](../pull/5558) ## Detected Dependencies docker-compose (1)

plugins/redis/docker-compose.yml

github-actions (5)

.github/actions/clone/action.yml (1) - `actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8` → [Updates: `v6`] .github/workflows/ci.yml (18) - `actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8` → [Updates: `v6`] - `pnpm/action-setup v4@41ff72655975bd51cab0327fa583b6e92b6d3061` - `actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238` - `actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8` → [Updates: `v6`] - `shogo82148/actions-setup-redis v1@cff708d63a30aebc0bfaa7276fb709d173f36cb6` - `shogo82148/actions-setup-mysql v1@27e74fac04c136a9f4c2dc2ed457df57331b3e0c` - `pnpm/action-setup v4@41ff72655975bd51cab0327fa583b6e92b6d3061` - `actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238` - `codecov/codecov-action v5@671740ac38dd9b0130fbe1cec585b89eea48d3de` - `actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8` → [Updates: `v6`] - `pnpm/action-setup v4@41ff72655975bd51cab0327fa583b6e92b6d3061` - `actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238` - `codecov/codecov-action v5@671740ac38dd9b0130fbe1cec585b89eea48d3de` - `actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8` → [Updates: `v6`] - `pnpm/action-setup v4@41ff72655975bd51cab0327fa583b6e92b6d3061` - `actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238` - `codecov/codecov-action v5@671740ac38dd9b0130fbe1cec585b89eea48d3de` - `node 24` .github/workflows/cleanup-cache.yml .github/workflows/e2e-test.yml (3) - `actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8` → [Updates: `v6`] - `pnpm/action-setup v4@41ff72655975bd51cab0327fa583b6e92b6d3061` - `actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238` .github/workflows/release.yml (5) - `actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8` → [Updates: `v6`] - `pnpm/action-setup v4@41ff72655975bd51cab0327fa583b6e92b6d3061` - `actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238` - `actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd` - `node 24`

nodenv (1)

.node-version (1) - `node 24.13.0` → [Updates: `24.13.1`]

npm (91)

package.json (2) - `node >=22.18.0` - `pnpm 10.28.0` → [Updates: `10.30.2`] packages/cluster/package.json (1) - `node >=22.18.0` packages/cookies/package.json (1) - `node >=22.18.0` packages/core/benchmark/middleware/package.json packages/core/package.json (1) - `node >=22.18.0` packages/egg/package.json (1) - `node >=22.18.0` packages/errors/package.json (1) - `node >= 22.18.0` packages/extend2/package.json (1) - `node >=22.18.0` packages/koa-static-cache/package.json (5) - `@eggjs/compressible ^3.0.0` - `fs-readdir-recursive ^1.1.0` - `mime-types ^3.0.0` - `ylru ^2.0.0` - `node >=22.18.0` packages/koa/example/cjs/package.json packages/koa/example/esm/package.json packages/koa/package.json (1) - `node >=22.18.0` packages/logger/package.json (1) - `node >= 22.18.0` packages/path-matching/package.json (2) - `path-to-regexp-v8 ^8.3.0` - `node >=22.18.0` packages/router/package.json (1) - `node >=22.18.0` packages/supertest/package.json (1) - `node >=22.18.0` packages/tsconfig/package.json (1) - `node >=22.18.0` packages/utils/package.json (1) - `node >=22.18.0` plugins/development/package.json (1) - `node >=22.18.0` plugins/i18n/package.json (1) - `node >= 22.18.0` plugins/jsonp/package.json (1) - `node >=22.18.0` plugins/logrotator/package.json (1) - `node >= 22.18.0` plugins/mock/package.json (1) - `node >=22.18.0` plugins/multipart/package.json (1) - `node >= 22.18.0` plugins/onerror/package.json (1) - `node >=22.18.0` plugins/redis/package.json (2) - `detect-port ^2.1.0` - `node >= 22.18.0` plugins/schedule/package.json (1) - `node >=22.18.0` plugins/security/package.json (1) - `node >= 22.18.0` plugins/session/package.json (1) - `node >= 22.18.0` plugins/static/package.json (1) - `node >=22.18.0` plugins/tracer/package.json (1) - `node >=22.18.0` plugins/typebox-validate/package.json (1) - `node >= 22.18.0` plugins/view-nunjucks/package.json (1) - `node >=22.18.0` plugins/view/package.json (1) - `node >=22.18.0` plugins/watcher/package.json (1) - `node >=22.18.0` pnpm-workspace.yaml (210) - `@clack/prompts ^0.11.0` → [Updates: `^1.0.0`] - `@eggjs/compressible ^3.0.0` - `@eggjs/cookies ^3.1.0` - `@eggjs/ip ^2.1.0` - `@eggjs/rds ^1.5.0` - `@eggjs/redis ^3.0.0` - `@eggjs/scripts ^4.0.0` - `@fengmk2/ps-tree ^2.0.1` - `@oclif/core ^4.2.0` → [Updates: `^4.2.0`] - `@oxc-node/core ^0.0.35` - `typebox ^1.0.65` → [Updates: `^1.0.65`] - `@swc-node/register ^1.11.1` - `@swc/core ^1.15.1` → [Updates: `^1.15.1`] - `@types/accepts ^1.3.7` - `@types/body-parser ^1.19.5` - `@types/bytes ^3.1.5` - `@types/common-tags ^1.8.4` - `@types/content-disposition ^0.5.8` - `@types/content-type ^1.1.8` - `@types/cookie-parser ^1.4.8` → [Updates: `^1.4.8`] - `@types/cookies ^0.9.0` - `@types/cross-spawn ^6.0.6` - `@types/destroy ^1.0.3` - `@types/encodeurl ^1.0.2` - `@types/escape-html ^1.0.4` - `@types/express ^5.0.0` → [Updates: `^5.0.0`] - `@types/extend ^3.0.4` - `@types/fresh ^0.5.2` - `@types/fs-readdir-recursive ^1.1.3` - `@types/http-errors ^2.0.4` - `@types/ini ^4.1.1` - `@types/js-beautify ^1.14.3` - `@types/js-yaml ^4.0.9` - `@types/koa-bodyparser ^4.3.12` → [Updates: `^4.3.12`] - `@types/koa-compose ^3.2.8` → [Updates: `^3.2.8`] - `@types/koa-range ^0.3.5` → [Updates: `^0.3.5`] - `@types/lodash ^4.17.20` → [Updates: `^4.17.20`] - `@types/lodash.snakecase ^4.1.9` - `@types/methods ^1.1.4` - `@types/mime-types ^3.0.0` - `@types/mocha ^10.0.10` - `@types/mustache ^4.2.5` - `@types/node ^24.10.2` → [Updates: `^24.10.2`] - `@types/nunjucks ^3.2.6` - `@types/on-finished ^2.3.4` - `@types/parseurl ^1.3.3` - `@types/pluralize ^0.0.33` - `@types/safe-timers ^1.1.2` - `@types/sqlstring ^2.3.2` - `@types/stack-trace ^0.0.33` - `@types/statuses ^2.0.5` - `@types/superagent ^8.1.9` - `@types/type-is ^1.6.6` - `@types/urijs ^1.19.25` → [Updates: `^1.19.25`] - `@types/vary ^1.1.3` - `@typescript/native-preview 7.0.0-dev.20260117.1` → [Updates: `7.0.0-dev.20260223.1`] - `@vitest/coverage-v8 ^4.0.15` → [Updates: `^4.0.15`] - `@vitest/ui ^4.0.15` → [Updates: `^4.0.15`] - `accepts ^1.3.8` - `address 2` - `ajv ^8.8.2` → [Updates: `^8.8.2`] - `ajv-formats ^2.1.1` → [Updates: `^3.0.0`] - `ajv-keywords ^5.1.0` - `assert-file 1` - `await-event 2` - `await-first ^1.0.0` - `beautify-benchmark ^0.2.4` - `benchmark ^2.1.4` - `body-parser ^2.0.0` - `bytes ^3.1.2` - `c8 ^10.1.3` - `cache-content-type ^2.0.0` - `camelcase ^9.0.0` - `cfork ^2.0.0` - `chalk ^5.4.1` - `cheerio ^1.0.0` → [Updates: `^1.0.0`] - `ci-parallel-vars ^1.0.1` - `circular-json-for-egg ^1.0.0` - `cluster-client ^3.7.0` - `cluster-reload ^2.0.0` - `co-busboy ^2.0.1` - `coffee 5` - `common-tags ^1.8.2` - `content-disposition ~1.0.0` - `content-type ^1.0.5` - `cookie ^1.0.2` → [Updates: `^1.0.2`] - `cookie-parser ^1.4.6` - `cookies ^0.9.1` - `cpy ^12.0.0` → [Updates: `^12.0.0`, `^13.0.0`] - `cpy-cli ^6.0.0` → [Updates: `^7.0.0`] - `cron-parser ^4.9.0` → [Updates: `^5.0.0`] - `cross-env ^10.0.0` - `cross-spawn ^7.0.6` - `csrf ^3.1.0` - `dayjs ^1.11.13` → [Updates: `^1.11.13`] - `debounce ^3.0.0` - `destroy ^1.0.4` - `detect-port ^2.1.0` - `egg-errors ^2.3.0` - `egg-logger ^3.5.0` - `egg-plugin-puml ^2.4.0` - `egg-view-nunjucks ^2.3.0` - `encodeurl ^2.0.0` - `esbuild ^0.27.0` → [Updates: `^0.27.0`] - `esbuild-register ^3.6.0` - `escape-html ^1.0.3` - `execa ^9.6.0` → [Updates: `^9.6.0`] - `express ^4.21.2` → [Updates: `^4.21.2`, `^5.0.0`] - `extend ^3.0.2` - `extend2 ^4.0.0` - `formstream ^1.5.1` - `fresh ~0.5.2` - `fs-readdir-recursive ^1.1.0` - `gals 1` - `get-ready ^3.1.0` - `glob ^11.0.0` → [Updates: `^11.0.0`] - `globby ^11.0.2` → [Updates: `^16.0.0`] - `graceful ^2.0.0` - `graceful-process ^2.0.0` - `http-errors ^2.0.0` - `humanize-ms ^2.0.0` - `husky ^9.1.7` - `inflection ^3.0.0` - `ini ^6.0.0` - `iconv-lite ^0.6.3` → [Updates: `^0.7.0`] - `ioredis ^5.4.2` → [Updates: `^5.4.2`] - `is-type-of ^2.2.0` - `jest-changed-files ^30.0.0` - `js-beautify ^1.15.3` - `js-yaml ^4.1.1` - `jsonp-body ^2.0.0` - `keygrip ^1.0.2` - `koa-bodyparser ^4.4.1` - `koa-compose ^4.1.0` - `koa-onerror ^5.0.1` - `koa-override ^4.0.0` - `koa-range ^0.3.0` - `koa-session ^7.0.2` - `koa-static ^5.0.0` - `leoric ^2.12.2` → [Updates: `^2.12.2`] - `lint-staged ^16.2.7` - `lodash ^4.17.21` → [Updates: `^4.17.21`] - `lodash.snakecase ^4.1.1` - `marked ^17.0.0` → [Updates: `^17.0.0`] - `matcher ^4.0.0` → [Updates: `^6.0.0`] - `merge-descriptors ^2.0.0` - `methods ^1.1.2` - `mime-types ^3.0.0` - `mm ^4.0.2` - `mocha ^11.7.5` - `moment ^2.30.1` - `mri ^1.2.0` - `multimatch ^7.0.0` → [Updates: `^8.0.0`] - `mustache ^4.2.0` - `mysql2 ^3.12.0` → [Updates: `^3.12.0`] - `mz ^2.7.0` - `mz-modules ^2.1.0` - `nanoid ^5.0.0` - `node-homedir ^2.0.0` - `npminstall ^7.12.0` → [Updates: `^8.0.0`] - `nunjucks ^3.2.4` - `nunjucks-markdown ^2.0.1` - `on-finished ^2.4.1` - `onelogger ^1.0.1` - `oxc-minify ^0.105.0` → [Updates: `^0.115.0`] - `oxfmt ^0.20.0` → [Updates: `^0.35.0`] - `oxlint ^1.32.0` → [Updates: `^1.32.0`] - `oxlint-tsgolint ^0.11.0` → [Updates: `^0.14.0`] - `parseurl ^1.3.3` - `path-to-regexp ^6.3.0` → [Updates: `^8.0.0`] - `performance-ms ^1.1.0` - `picocolors ^1.1.1` - `pluralize ^8.0.0` - `publint ^0.3.16` → [Updates: `^0.3.16`] - `ready-callback ^4.0.0` - `reflect-metadata ^0.2.2` - `rimraf ^6.1.2` → [Updates: `^6.1.2`] - `runscript ^2.0.1` - `safe-timers ^1.1.0` - `sdk-base ^5.0.1` - `semver ^7.7.3` → [Updates: `^7.7.3`] - `sendmessage ^3.0.1` - `should-send-sa