Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/owncast/owncast). ## Repository Problems These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/owncast/owncast). - ⚠️ WARN: Hidden Unicode characters have been discovered in file(s) in your repository. See your Renovate logs for more details. Please confirm that they are intended to be there, as they could be an attempt to "smuggle" text into your codebase, or used to confuse tools like Renovate or Large Language Models (LLMs) ## Pending Approval The following branches are pending approval. To create them, click on a checkbox below. - [ ] Update babel monorepo to v8 (`@babel/core`, `@babel/preset-react`, `@babel/traverse`) - [ ] Update dependency @testing-library/jest-dom to v7 - [ ] Update dependency cypress to v16 - [ ] Update dependency jotai to v3 - [ ] Update dependency mermaid to v12 - [ ] Update dependency msw-storybook-addon to v3 - [ ] Update dependency typescript to v7 - [ ] Update module github.com/gobwas/glob to v1 - [ ] Update module github.com/oschwald/geoip2-golang to v2 - [ ] Update module github.com/yuin/goldmark to v2 - [ ] Update module github.com/yuin/goldmark-emoji to v2 - [ ] Update npm to v12 - [ ] **Create all pending approval PRs at once** ## Rate-Limited The following updates are currently rate-limited. To force their creation now, click on a checkbox below. - [ ] Update dependency yaml to v2.9.1 - [ ] Update dependency chromatic to v18.8.1 - [ ] Update dependency jest-environment-jsdom to v30.5.1 - [ ] Update dependency mermaid to v11.17.2 - [ ] Update dependency node to v24.21.0 (`node`, `@types/node`) - [ ] Update dependency npm to v11.19.1 - [ ] Update dependency puppeteer-core to v25.11.0 - [ ] Update dependency stylelint to v17.15.0 - [ ] Update dependency video.js to v8.24.1 - [ ] Update fontsource monorepo to v5.3.0 (`@fontsource/inter`, `@fontsource/poppins`) - [ ] Update module github.com/golangci/golangci-lint/v2 to v2.13.2 - [ ] Update module github.com/oschwald/geoip2-golang/v2 to v2.4.0 - [ ] Update module github.com/pressly/goose/v3 to v3.28.0 - [ ] Update module github.com/prometheus/client_golang to v1.24.1 - [ ] Update module github.com/sirupsen/logrus to v1.10.2 - [ ] Update module github.com/stretchr/testify to v1.12.1 - [ ] Update module golang.org/x/crypto to v0.57.0 - [ ] Update module golang.org/x/time to v0.16.0 - [ ] Update module mvdan.cc/gofumpt to v0.12.0 - [ ] Update npm to v11.19.1 - [ ] Update rust Docker tag to v1.98.1 - [ ] **Create all rate-limited PRs at once** ## PR Edited (Blocked) The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below. - [ ] Update dependency sanitize-html to v2.17.7 [SECURITY] - [ ] Update dependency next to v16.3.3 [SECURITY] - [ ] Update dependency sharp to v0.35.4 [SECURITY] - [ ] Update alpine Docker tag to v3.24.2 - [ ] Update babel monorepo to v7.29.8 (`@babel/parser`, `@babel/traverse`) - [ ] Update CodeMirror (`@codemirror/lang-html`, `@codemirror/lang-markdown`) - [ ] [Update dependency @ant-design/icons to v6.3.4](../pull/5156) - [ ] Update dependency @uiw/codemirror-theme-bbedit to v4.25.11 - [ ] Update dependency @uiw/react-codemirror to v4.25.11 - [ ] Update dependency jotai to v2.20.3 - [ ] [Update dependency react-error-boundary to v6.1.5](../pull/5149) - [ ] [Update dependency react-virtuoso to v4.18.13](../pull/5150) - [ ] Update module github.com/andybalholm/cascadia to v1.3.5 - [ ] Update module github.com/mattn/go-sqlite3 to v1.14.52 - [ ] Update aws-sdk-go-v2 monorepo (`github.com/aws/aws-sdk-go-v2`, `github.com/aws/aws-sdk-go-v2/credentials`, `github.com/aws/aws-sdk-go-v2/service/s3`) - [ ] Update dependency antd to v6.6.4 - [ ] Update dependency autoprefixer to v10.6.1 - [ ] Update dependency go to v1.27.1 - [ ] Update dependency knip to v6.35.1 - [ ] Update dependency msw to v2.15.0 - [ ] [Update dependency next-export-i18n to v2.4.3](../pull/4932) - [ ] Update dependency sass to v1.104.1 - [ ] [Update dependency xstate to v5.33.1](../pull/5153) - [ ] Update module github.com/go-chi/chi/v5 to v5.3.2 - [ ] Update module github.com/oapi-codegen/runtime to v1.7.0 - [ ] Update module github.com/shirou/gopsutil/v4 to v4.26.8 - [ ] Update module github.com/yuin/goldmark to v1.8.6 - [ ] Update module golang.org/x/mod to v0.41.0 - [ ] Update module golang.org/x/net to v0.59.0 - [ ] Update nextjs monorepo to v16.3.5 (`@next/bundle-analyzer`, `eslint-config-next`) - [ ] [Update actions/setup-go action to v7](../pull/5064) ## Pending Status Checks The following updates await pending status checks. To force their creation now, click on a checkbox below. - [ ] Update dependency prettier to v3.9.8 - [ ] Update dependency style-dictionary to v5.5.4 ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [Update react monorepo to v19](../pull/4629) (`@types/react`, `react`, `react-dom`) - [ ] [Lock file maintenance](../pull/5178) - [ ] **Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies dockerfile (2)

Dockerfile (1) - `alpine 3.24.0` → [Updates: `3.24.2`] Earthfile (3) - `alpine 3.24.0` → [Updates: `3.24.2`] - `alpine 3.24.0` → [Updates: `3.24.2`] - `rust 1.97.1-alpine` → [Updates: `1.98.1-alpine`]

github-actions (28)

.github/workflows/actions-lint.yml (2) - `actions/checkout v7` - `actions/checkout v7` .github/workflows/activitypub-tests.yaml (24) - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `actions/setup-go v6` → [Updates: `v7`] - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `actions/setup-go v6` → [Updates: `v7`] - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `actions/setup-go v6` → [Updates: `v7`] - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `actions/setup-go v6` → [Updates: `v7`] - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `actions/setup-go v6` → [Updates: `v7`] - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `actions/setup-go v6` → [Updates: `v7`] - `go 1.26.5` → [Updates: `1.27.1`] - `go 1.26.5` → [Updates: `1.27.1`] - `go 1.26.5` → [Updates: `1.27.1`] - `go 1.26.5` → [Updates: `1.27.1`] - `go 1.26.5` → [Updates: `1.27.1`] - `go 1.26.5` → [Updates: `1.27.1`] .github/workflows/add-default-web-localizations.yml (3) - `actions/checkout v7` - `actions/setup-node v7` - `node 24` .github/workflows/auth-tests.yml (13) - `actions/checkout v7` - `actions/checkout v7` - `tj-actions/changed-files v47` - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `actions/checkout v7` - `actions/setup-go v6` → [Updates: `v7`] - `actions/setup-node v7` - `actions/cache v6` - `nick-fields/retry v4` - `actions/upload-artifact v7` - `go 1.26.5` → [Updates: `1.27.1`] - `node 24` .github/workflows/auto-comment-on-label.yaml .github/workflows/automated-end-to-end-api.yaml (10) - `actions/checkout v7` - `actions/checkout v7` - `tj-actions/changed-files v47` - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `actions/checkout v7` - `earthly/actions-setup v1` - `docker/setup-qemu-action v4` - `nick-fields/retry v4` - `actions/upload-artifact v7` .github/workflows/browser-testing.yml (14) - `actions/checkout v7` - `actions/checkout v7` - `tj-actions/changed-files v47` - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `actions/checkout v7` - `actions/setup-node v7` - `actions/cache v6` - `actions/setup-go v6` → [Updates: `v7`] - `nick-fields/retry v4` - `actions/upload-artifact v7` - `actions/upload-artifact v7` - `node 24.12.0` → [Updates: `24.21.0`] - `go 1.26.5` → [Updates: `1.27.1`] .github/workflows/build-storybook.yml (6) - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `actions/checkout v7` - `actions/cache v6` - `EndBug/add-and-commit v11` - `peter-evans/repository-dispatch v4` .github/workflows/chromatic.yml (5) - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `actions/checkout v7` - `tj-actions/changed-files v47` - `chromaui/action v18` .github/workflows/codeql-analysis.yml (7) - `actions/checkout v7` - `actions/checkout v7` - `actions/setup-go v6` → [Updates: `v7`] - `github/codeql-action v4` - `github/codeql-action v4` - `github/codeql-action v4` - `go 1.26.5` → [Updates: `1.27.1`] .github/workflows/container-lint.yml (2) - `actions/checkout v7` - `actions/checkout v7` .github/workflows/container.yaml (5) - `earthly/actions-setup v1` - `docker/setup-qemu-action v4` - `actions/checkout v7` - `actions/checkout v7` - `nick-fields/retry v4` .github/workflows/copilot-setup-steps.yml (5) - `actions/checkout v7` - `actions/setup-go v6` → [Updates: `v7`] - `actions/setup-node v7` - `go 1.26.5` → [Updates: `1.27.1`] - `node 24.12.0` → [Updates: `24.21.0`] .github/workflows/css-lint.yaml (5) - `actions/checkout v7` - `actions/checkout v7` - `tj-actions/changed-files v47` - `actions/setup-node v7` - `node 24.12.0` → [Updates: `24.21.0`] .github/workflows/generate-api-documentation.yaml (3) - `actions/checkout v7` - `actions/checkout v7` - `EndBug/add-and-commit v11` .github/workflows/go-lint.yml (7) - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `actions/setup-go v6` → [Updates: `v7`] - `actions/checkout v7` - `golangci/golangci-lint-action v9` - `go 1.26.5` → [Updates: `1.27.1`] - `golangci/golangci-lint v2.13.2` .github/workflows/go-tests.yaml (11) - `actions/checkout v7` - `tj-actions/changed-files v47` - `actions/checkout v7` - `actions/cache v6` - `actions/setup-go v6` → [Updates: `v7`] - `actions/upload-artifact v7` - `actions/checkout v7` - `vmactions/freebsd-vm v1` - `actions/checkout v7` - `vmactions/openbsd-vm v1` - `go 1.26.5` → [Updates: `1.27.1`] .github/workflows/hacktoberfest-reminder.yml (1) - `dacbd/create-issue-action v2` .github/workflows/hls-tests.yml (12) - `actions/checkout v7` - `actions/checkout v7` - `tj-actions/changed-files v47` - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `actions/checkout v7` - `actions/setup-go v6` → [Updates: `v7`] - `actions/cache v6` - `nick-fields/retry v4` - `nick-fields/retry v4` - `actions/upload-artifact v7` - `go 1.26.5` → [Updates: `1.27.1`] .github/workflows/javascript-format-test-build.yml (27) - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `actions/setup-node v7` - `actions/checkout v7` - `tj-actions/changed-files v47` - `actions/cache v6` - `EndBug/add-and-commit v11` - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `actions/checkout v7` - `actions/setup-node v7` - `actions/cache v6` - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `actions/checkout v7` - `actions/setup-node v7` - `actions/cache v6` - `fkirc/skip-duplicate-actions v5` - `actions/setup-node v7` - `actions/cache v6` - `actions/checkout v7` - `actions/checkout v7` - `EndBug/add-and-commit v11` - `node 24.12.0` → [Updates: `24.21.0`] - `node 24.12.0` → [Updates: `24.21.0`] - `node 24.12.0` → [Updates: `24.21.0`] - `node 24.12.0` → [Updates: `24.21.0`] .github/workflows/plugin-tests.yaml (10) - `actions/checkout v7` - `actions/checkout v7` - `tj-actions/changed-files v47` - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `actions/checkout v7` - `earthly/actions-setup v1` - `docker/setup-qemu-action v4` - `nick-fields/retry v4` - `actions/upload-artifact v7` .github/workflows/pr-checklist.yml (3) - `actions/github-script v9` - `actions/github-script v9` - `actions/github-script v9` .github/workflows/shellcheck.yml (4) - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `actions/checkout v7` - `docker.io/ubuntu 26.04` .github/workflows/stale.yml (1) - `actions/stale v11` .github/workflows/storybook-screenshots.yml (6) - `fkirc/skip-duplicate-actions v5` - `actions/checkout v7` - `tj-actions/changed-files v47` - `actions/setup-node v7` - `actions/cache v6` - `node 24.12.0` → [Updates: `24.21.0`] .github/workflows/third-party-licenses.yml (5) - `actions/checkout v7` - `actions/setup-go v6` → [Updates: `v7`] - `actions/setup-node v7` - `go 1.26.5` → [Updates: `1.27.1`] - `node 24.12.0` → [Updates: `24.21.0`] .github/workflows/translations.yml (4) - `actions/checkout v7` - `crowdin/github-action v3` - `crowdin/github-action v3` - `peter-evans/create-pull-request v8` .github/workflows/upgrade-tests.yml (4) - `actions/checkout v7` - `actions/setup-go v6` → [Updates: `v7`] - `actions/upload-artifact v7` - `go 1.26.5` → [Updates: `1.27.1`]

gomod (2)

go.mod (43) - `code.superseriousbusiness.org/activity v1.19.0` - `github.com/CAFxX/httpcompression v0.0.9` - `github.com/SherClockHolmes/webpush-go v1.4.0` - `github.com/TwiN/go-away v1.8.1` - `github.com/andybalholm/cascadia v1.3.4` → [Updates: `v1.3.5`] - `github.com/aws/aws-sdk-go-v2 v1.42.0` → [Updates: `v1.47.0`] - `github.com/aws/aws-sdk-go-v2/credentials v1.19.24` → [Updates: `v1.20.5`] - `github.com/aws/aws-sdk-go-v2/service/s3 v1.103.3` → [Updates: `v1.113.1`] - `github.com/extism/go-sdk v1.7.1` - `github.com/go-chi/chi/v5 v5.2.4` → [Updates: `v5.3.2`] - `github.com/go-fed/httpsig v1.1.0` - `github.com/gobwas/glob v0.2.3` → [Updates: `v1.0.0`] - `github.com/gorilla/websocket v1.5.3` - `github.com/grafov/m3u8 v0.12.1` - `github.com/hashicorp/go-retryablehttp v0.7.8` - `github.com/jellydator/ttlcache/v3 v3.4.1` - `github.com/lestrrat-go/file-rotatelogs v2.4.0+incompatible` - `github.com/mattn/go-sqlite3 v1.14.47` → [Updates: `v1.14.52`] - `github.com/microcosm-cc/bluemonday v1.0.27` - `github.com/mssola/user_agent v0.6.0` - `github.com/nakabonne/tstorage v0.3.6` - `github.com/nareix/joy5 v0.0.0-20210317075623-2c912ca30590@2c912ca30590` - `github.com/oapi-codegen/runtime v1.5.0` → [Updates: `v1.7.0`] - `github.com/oschwald/geoip2-golang v1.13.0` → [Updates: `v2.4.0`] - `github.com/oschwald/geoip2-golang/v2 v2.2.0` → [Updates: `v2.4.0`] - `github.com/pkg/errors v0.9.1` - `github.com/pressly/goose/v3 v3.27.2` → [Updates: `v3.28.0`] - `github.com/prometheus/client_golang v1.23.2` → [Updates: `v1.24.1`] - `github.com/rifflock/lfshook v0.0.0-20180920164130-b9218ef580f5@b9218ef580f5` - `github.com/schollz/sqlite3dump v1.3.1` - `github.com/shirou/gopsutil/v4 v4.25.8` → [Updates: `v4.26.8`] - `github.com/sirupsen/logrus v1.9.4` → [U