Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/tailcallhq/forgecode). ## Repository Problems These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/tailcallhq/forgecode). - ⚠️ WARN: Detected empty commit - aborting git push ## Deprecations / Replacements > [!WARNING] The following dependencies are either deprecated or have replacements available. | Datasource | Package | Replacement PR? | |------------|------|--------------| | npm | [@types/handlebars](https://redirect.github.com/wycats/handlebars.js) |  | ## PR Edited (Blocked) The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below. - [ ] [chore(deps): update dependency @ai-sdk/google-vertex to v5.0.88](../pull/3835) - [ ] [chore(deps): update dependency ai to v7.0.107](../pull/3836) - [ ] [fix(deps): update rust crate posthog-rs to 0.26.0](../pull/3831) ## Other Branches The following updates are pending. To force the creation of a PR, click on a checkbox below. - [ ] chore(deps): update rust crate google-cloud-auth to v1.16.0 ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [chore(deps): update rust crate rmcp to v2 [security]](../pull/3881) - [ ] [chore(deps): update rust crate async-openai to 0.42.0](../pull/3909) - [ ] [chore(deps): update rust crate gh-workflow to 0.9.0](../pull/3744) - [ ] [fix(deps): update rust crate reqwest to v0.13.5](../pull/3919) - [ ] [chore(deps): update actions-rust-lang/setup-rust-toolchain action to v2](../pull/3920) - [ ] [chore(deps): update actions/checkout action to v7](../pull/3537) - [ ] [chore(deps): update actions/stale action to v11](../pull/3775) - [ ] **Click on this checkbox to rebase all open PRs at once** ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] [chore(deps): update rust crate sysinfo to 0.39.0](../pull/3293) - [ ] [chore(deps): update rust crate termimad to 0.35.0](../pull/3665) ## Detected Dependencies cargo (26)

Cargo.toml (98) - `anyhow 1.0.102` - `async-recursion 1.1.1` - `async-stream 0.3` - `async-trait 0.1.89` - `aws-config 1.8.13` - `aws-sdk-bedrockruntime 1.129.0` - `aws-credential-types 1.2.14` - `aws-smithy-types 1.4.3` - `aws-smithy-runtime-api 1.11.3` - `aws-smithy-async 1.2.11` - `aws-smithy-runtime 1.10` - `base64 0.23.0` - `bstr 1.12.1` - `bytes 1.11.1` - `chrono 0.4.44` - `clap 4.6.0` - `clap_complete 4.6.0` - `colored 3.1.1` - `console 0.16.3` - `convert_case 0.12.0` - `derive_more 2.1.1` - `enable-ansi-support 0.3.1` - `derive_setters 0.1.9` - `dirs 7.0.0` - `dissimilar 1.0.9` - `dotenvy 0.15.7` - `futures 0.3.32` - `gh-workflow 0.8.1` → [Updates: `0.9.0`] - `glob 0.3.3` - `grep-searcher 0.1.14` - `grep-regex 0.1.13` - `handlebars 6.4.0` - `html2md 0.2.15` - `http 1.2.0` - `ignore 0.4.23` - `is_ci 1.2.0` - `indexmap 2.13.0` - `infer 0.22.0` - `insta 1.47.2` - `lazy_static 1.4.0` - `machineid-rs 1.2.4` - `mockito 1.7.2` - `nom 8.0.0` - `nu-ansi-term 0.50.1` - `posthog-rs 0.22.0` → [Updates: `0.26.0`] - `pretty_assertions 1.4.1` - `proc-macro2 1.0` - `quote 1.0` - `rustyline 18.0.0` - `regex 1.12.3` - `reqwest 0.12.23` → [Updates: `0.13.0`] - `rustls 0.23` - `include_dir 0.7.4` - `schemars 1.2` - `serde 1.0.217` - `serde_json 1.0.143` - `serde_yml 0.0.13` - `sha2 0.11` - `similar 3.0` - `strip-ansi-escapes 0.2.1` - `strum 0.28.0` - `strum_macros 0.28.0` - `syn 3.0.0` - `sysinfo 0.38.3` → [Updates: `0.39.0`] - `tempfile 3.27.0` - `termimad 0.34.1` → [Updates: `0.35.0`] - `tiny_http 0.12.0` - `syntect 5` - `thiserror 2.0.18` - `toml_edit 0.25` - `tokio 1.51.0` - `tokio-stream 0.1.18` - `tokio-util 0.7` - `tonic 0.14.5` - `tracing 0.1.44` - `tracing-appender 0.2.3` - `tracing-subscriber 0.3.23` - `url 2.5.8` - `terminal_size 0.4` - `unicode-width 0.2` - `backon 1.5.2` - `eserde 0.1.7` - `uuid 1.23.0` - `whoami 2.1.0` - `fnv_rs 0.4.3` - `merge 0.2` - `hex 0.4.3` - `rmcp 1.0.0` → [Updates: `2.0.0`] - `open 5.3.2` - `nucleo 0.5.0` - `nucleo-picker 0.12.0` - `gray_matter 0.3.2` - `num-format 0.4` - `humantime 2.1.0` - `dashmap 7.0.0-rc2` - `async-openai 0.41.0` → [Updates: `0.42.0`] - `gix 0.87` - `google-cloud-auth 1.8.0` → [Updates: `1.8.0`] crates/forge_api/Cargo.toml crates/forge_app/Cargo.toml (1) - `fake 5.1.0` crates/forge_ci/Cargo.toml crates/forge_config/Cargo.toml (2) - `config 0.15` - `fake 5.1.0` crates/forge_display/Cargo.toml (2) - `terminal-colorsaurus 1.0.3` - `two-face 0.5.1` crates/forge_domain/Cargo.toml (5) - `eserde 0.1.7` - `derive-getters 0.5.0` - `lazy_static 1.5.0` - `fake 5.1.0` - `fake 5.1.0` crates/forge_embed/Cargo.toml crates/forge_eventsource_stream/Cargo.toml (8) - `futures-core 0.3` - `nom 8.0` - `pin-project-lite 0.2.8` - `futures 0.3` - `http 1.0` - `reqwest 0.11` → [Updates: `0.13`] - `tokio 1.0` - `url 2.2` crates/forge_eventsource/Cargo.toml (12) - `reqwest 0.12.0` → [Updates: `0.13.0`] - `futures-core 0.3.5` - `pin-project-lite 0.2.8` - `nom 8.0.0` - `mime 0.3.16` - `futures-timer 3.0.2` - `thiserror 2.0.0` - `futures 0.3.5` - `tokio 1` - `futures-retry 0.6` - `pin-utils 0.1` - `rocket 0.5.0` crates/forge_fs/Cargo.toml (4) - `infer 0.22.0` - `thiserror 2.0` - `tempfile 3.27.0` - `pretty_assertions 1.4.0` crates/forge_infra/Cargo.toml (9) - `diesel 2.3.7` - `libsqlite3-sys 0.38.0` - `diesel_migrations 2.2.0` - `chrono 0.4` - `cacache 13.1.0` - `oauth2 5.0` - `serde_urlencoded 0.7.1` - `serial_test 4.0` - `fake 5.1.0` crates/forge_json_repair/Cargo.toml (1) - `serde_json5 0.2.1` crates/forge_main/Cargo.toml (7) - `libc 0.2` - `update-informer 1.2.0` - `terminal_size 0.4` - `serial_test 4.0` - `fake 5.1.0` - `windows-sys 0.61` - `arboard 3.4` crates/forge_markdown_stream/Cargo.toml (7) - `streamdown-parser 0.1.4` - `streamdown-core 0.1.4` - `streamdown-ansi 0.1.4` - `streamdown-render 0.1.4` - `unicode-width 0.2` - `unicode-segmentation 1.12` - `terminal-colorsaurus 1.0.3` crates/forge_repo/Cargo.toml (9) - `chrono 0.4` - `diesel 2.3.7` - `diesel_migrations 2.2.0` - `prost 0.14.3` - `prost-types 0.14.3` - `tonic-prost 0.14.5` - `serial_test 4.0` - `fake 5.1.0` - `tonic-prost-build 0.14.5` crates/forge_select/Cargo.toml (1) - `crossterm 0.29.0` crates/forge_services/Cargo.toml (4) - `lazy_static 1.5.0` - `oauth2 5.0` - `serde_urlencoded 0.7.1` - `fake 5.1.0` crates/forge_snaps/Cargo.toml crates/forge_spinner/Cargo.toml (2) - `indicatif 0.18.4` - `rand 0.10.0` crates/forge_stream/Cargo.toml crates/forge_template/Cargo.toml (1) - `html-escape 0.2.13` crates/forge_test_kit/Cargo.toml crates/forge_tool_macros/Cargo.toml crates/forge_tracker/Cargo.toml (1) - `posthog-rs 0.22.0` → [Updates: `0.26.0`] crates/forge_walker/Cargo.toml

devcontainer (1)

.devcontainer/devcontainer.json (5) - `mcr.microsoft.com/devcontainers/rust 2-1-bullseye` - `ghcr.io/devcontainers/features/node 2` - `ghcr.io/devcontainers/features/github-cli 1` - `ghcr.io/devcontainers/features/git 1` - `ghcr.io/devcontainers/features/common-utils 2`

github-actions (7)

.github/workflows/autofix.yml (4) - `actions/checkout v6` → [Updates: `v7`] - `arduino/setup-protoc v3` - `actions-rust-lang/setup-rust-toolchain v1` → [Updates: `v2`] - `rust nightly` .github/workflows/bounty.yml (2) - `actions/checkout v6` → [Updates: `v7`] - `actions/checkout v6` → [Updates: `v7`] .github/workflows/ci.yml (20) - `actions/checkout v6` → [Updates: `v7`] - `arduino/setup-protoc v3` - `actions-rust-lang/setup-rust-toolchain v1` → [Updates: `v2`] - `actions/checkout v6` → [Updates: `v7`] - `arduino/setup-protoc v3` - `actions-rust-lang/setup-rust-toolchain v1` → [Updates: `v2`] - `actions/checkout v6` → [Updates: `v7`] - `release-drafter/release-drafter v7` - `actions/checkout v6` → [Updates: `v7`] - `actions/checkout v6` → [Updates: `v7`] - `arduino/setup-protoc v3` - `taiki-e/setup-cross-toolchain-action v1` - `ClementTsang/cargo-action v0.0.7` - `xresloader/upload-to-github-release v1` - `actions/checkout v6` → [Updates: `v7`] - `arduino/setup-protoc v3` - `taiki-e/setup-cross-toolchain-action v1` - `ClementTsang/cargo-action v0.0.7` - `rust stable` - `rust stable` .github/workflows/labels.yml (1) - `actions/checkout v6` → [Updates: `v7`] .github/workflows/release-drafter.yml (2) - `release-drafter/release-drafter v7` - `release-drafter/release-drafter v7` .github/workflows/release.yml (7) - `actions/checkout v6` → [Updates: `v7`] - `arduino/setup-protoc v3` - `taiki-e/setup-cross-toolchain-action v1` - `ClementTsang/cargo-action v0.0.7` - `xresloader/upload-to-github-release v1` - `actions/checkout v6` → [Updates: `v7`] - `actions/checkout v6` → [Updates: `v7`] .github/workflows/stale.yml (1) - `actions/stale v10` → [Updates: `v11`]

npm (1)

package.json (19) - `@ai-sdk/google-vertex ^5.0.0` → [Updates: `^5.0.0`] - `@types/handlebars ^4.0.40` - `@types/node ^24.10.1` - `@types/tmp ^0.2.6` - `@types/yargs ^17.0.35` - `ai ^7.0.0` → [Updates: `^7.0.0`] - `chalk ^6.0.0` - `csv-parse ^7.0.0` - `handlebars ^4.7.9` - `p-limit ^7.2.0` - `pino ^10.1.0` - `pino-pretty ^13.1.2` - `strip-ansi ^7.1.2` - `tmp ^0.2.5` - `tsx ^4.20.6` - `typescript ^7.0.0` - `yaml ^2.8.3` - `yargs ^18.0.0` - `zod ^4.0.0`

rust-toolchain (1)

rust-toolchain.toml (1) - `rust 1.98`

--- - [ ] Check this box to trigger a request for Renovate to run again on this repository