Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	tslint

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency @eslint/eslintrc to ^3.3.6
• chore(deps): update dependency postcss to >=8.5.20
• chore(deps): update dependency tar@<=7.5.10 to ~7.5.20
• chore(deps): update dependency ws@>=8.0.0 <8.17.1 to >=8.21.1
• chore(deps): update eslint monorepo to ^9.39.5 (@eslint/js, eslint)
• chore(deps): update typescript-eslint monorepo to ^8.64.0 (@typescript-eslint/eslint-plugin, @typescript-eslint/parser)
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency brace-expansion to >=5.0.8
• chore(deps): update dependency brace-expansion@>=5.0.2 <5.0.6 to >=5.0.8
• chore(deps): update dependency flatted to ^3.4.3
• chore(deps): update dependency js-yaml to >=5.2.2
• fix(deps): update nextjs monorepo to v16.2.12 (create-next-app, eslint-config-next, next)
• fix(deps): update react monorepo to v19.2.8 (react, react-dom)
• chore(deps): update dependency ip-address@<=10.1.0 to >=10.3.1
• fix(deps): update dependency sass to ^1.102.0

---

Warning

Renovate failed to look up the following dependencies: Failed to look up npm package @devexpress/sbom-toolkit: no-result.

Files affected: tools/make-sbom/package.json

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency tar@<=7.5.15 to ^7.5.20
• chore(deps): update pnpm to v11.15.0
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

packages/devextreme-cli/testing/docker/Dockerfile

mise (1)

.mise.toml (2)

• node 24.18.0
• pnpm 11.10.0 → [Updates: 11.15.0]

nodenv (1)

.node-version (1)

• node 24.18.0

npm (15)

apps/nextjs-testing/js-nosrc-app/package.json (9)

• next ^16.2.11 → [Updates: ^16.2.12]
• react 19.2.7 → [Updates: 19.2.8]
• react-dom 19.2.7 → [Updates: 19.2.8]
• eslint ^9.39.4 → [Updates: ^9.39.5, ^10.8.0]
• eslint-config-next ^16.2.11 → [Updates: ^16.2.12]
• @babel/core >=8.0.1
• brace-expansion >=5.0.7 → [Updates: >=5.0.8]
• js-yaml >=5.2.1 → [Updates: >=5.2.2]
• postcss >=8.5.16 → [Updates: >=8.5.20]

apps/nextjs-testing/js-nosrc-pages/package.json (9)

• next ^16.2.11 → [Updates: ^16.2.12]
• react 19.2.7 → [Updates: 19.2.8]
• react-dom 19.2.7 → [Updates: 19.2.8]
• eslint ^9.39.4 → [Updates: ^9.39.5, ^10.8.0]
• eslint-config-next ^16.2.11 → [Updates: ^16.2.12]
• @babel/core >=8.0.1
• brace-expansion >=5.0.7 → [Updates: >=5.0.8]
• js-yaml >=5.2.1 → [Updates: >=5.2.2]
• postcss >=8.5.16 → [Updates: >=8.5.20]

apps/nextjs-testing/js-src-app/package.json (9)

• next ^16.2.11 → [Updates: ^16.2.12]
• react 19.2.7 → [Updates: 19.2.8]
• react-dom 19.2.7 → [Updates: 19.2.8]
• eslint ^9.39.4 → [Updates: ^9.39.5, ^10.8.0]
• eslint-config-next ^16.2.11 → [Updates: ^16.2.12]
• @babel/core >=8.0.1
• brace-expansion >=5.0.7 → [Updates: >=5.0.8]
• js-yaml >=5.2.1 → [Updates: >=5.2.2]
• postcss >=8.5.16 → [Updates: >=8.5.20]

apps/nextjs-testing/js-src-pages/package.json (9)

• next ^16.2.11 → [Updates: ^16.2.12]
• react 19.2.7 → [Updates: 19.2.8]
• react-dom 19.2.7 → [Updates: 19.2.8]
• eslint ^9.39.4 → [Updates: ^9.39.5, ^10.8.0]
• eslint-config-next ^16.2.11 → [Updates: ^16.2.12]
• @babel/core >=8.0.1
• brace-expansion >=5.0.7 → [Updates: >=5.0.8]
• js-yaml >=5.2.1 → [Updates: >=5.2.2]
• postcss >=8.5.16 → [Updates: >=8.5.20]

apps/nextjs-testing/ts-nosrc-app/package.json (13)

• next ^16.2.11 → [Updates: ^16.2.12]
• react 19.2.7 → [Updates: 19.2.8]
• react-dom 19.2.7 → [Updates: 19.2.8]
• @types/node ^20.19.43 → [Updates: ^24.13.3]
• @types/react ^19.2.17
• @types/react-dom ^19.2.3
• eslint ^9.39.4 → [Updates: ^9.39.5, ^10.8.0]
• eslint-config-next ^16.2.11 → [Updates: ^16.2.12]
• typescript ^5.9.3 → [Updates: ^7.0.2]
• @babel/core >=8.0.1
• brace-expansion >=5.0.7 → [Updates: >=5.0.8]
• js-yaml >=5.2.1 → [Updates: >=5.2.2]
• postcss >=8.5.16 → [Updates: >=8.5.20]

apps/nextjs-testing/ts-nosrc-pages/package.json (13)

• next ^16.2.11 → [Updates: ^16.2.12]
• react 19.2.7 → [Updates: 19.2.8]
• react-dom 19.2.7 → [Updates: 19.2.8]
• @types/node ^20.19.43 → [Updates: ^24.13.3]
• @types/react ^19.2.17
• @types/react-dom ^19.2.3
• eslint ^9.39.4 → [Updates: ^9.39.5, ^10.8.0]
• eslint-config-next ^16.2.11 → [Updates: ^16.2.12]
• typescript ^5.9.3 → [Updates: ^7.0.2]
• @babel/core >=8.0.1
• brace-expansion >=5.0.7 → [Updates: >=5.0.8]
• js-yaml >=5.2.1 → [Updates: >=5.2.2]
• postcss >=8.5.16 → [Updates: >=8.5.20]

apps/nextjs-testing/ts-src-app/package.json (13)

• next ^16.2.11 → [Updates: ^16.2.12]
• react 19.2.7 → [Updates: 19.2.8]
• react-dom 19.2.7 → [Updates: 19.2.8]
• @types/node ^20.19.43 → [Updates: ^24.13.3]
• @types/react ^19.2.17
• @types/react-dom ^19.2.3
• eslint ^9.39.4 → [Updates: ^9.39.5, ^10.8.0]
• eslint-config-next ^16.2.11 → [Updates: ^16.2.12]
• typescript ^5.9.3 → [Updates: ^7.0.2]
• @babel/core >=8.0.1
• brace-expansion >=5.0.7 → [Updates: >=5.0.8]
• js-yaml >=5.2.1 → [Updates: >=5.2.2]
• postcss >=8.5.16 → [Updates: >=8.5.20]

apps/nextjs-testing/ts-src-pages/package.json (13)

• next ^16.2.11 → [Updates: ^16.2.12]
• react 19.2.7 → [Updates: 19.2.8]
• react-dom 19.2.7 → [Updates: 19.2.8]
• @types/node ^20.19.43 → [Updates: ^24.13.3]
• @types/react ^19.2.17
• @types/react-dom ^19.2.3
• eslint ^9.39.4 → [Updates: ^9.39.5, ^10.8.0]
• eslint-config-next ^16.2.11 → [Updates: ^16.2.12]
• typescript ^5.9.3 → [Updates: ^7.0.2]
• @babel/core >=8.0.1
• brace-expansion >=5.0.7 → [Updates: >=5.0.8]
• js-yaml >=5.2.1 → [Updates: >=5.2.2]
• postcss >=8.5.16 → [Updates: >=8.5.20]

package.json (7)

• @angular-eslint/schematics 0.2.0-beta.1 → [Updates: 22.1.0]
• @devexpress/eslint-plugin-dx-security ^0.2.6
• @typescript-eslint/parser ^8.63.0 → [Updates: ^8.64.0]
• eslint ^9.39.4 → [Updates: ^9.39.5, ^10.8.0]
• pre-commit ^1.2.2 → [Updates: ^2.0.0]
• puppeteer ^24.43.1 → [Updates: ^25.3.0]
• pnpm 11.10.0+sha512.0b7f8b98060031904c017e3a41eb187a16d40eeb829b95c4f8cb03681761fc4ab53dd219115b9b447f4dce1a05a214764461e7d3703392a9f32f9511ce8c86c8 → [Updates: 11.15.0]

packages/devextreme-cli/package.json (38)

• @yarnpkg/lockfile ^1.1.0
• import-cwd ^3.0.0
• less 3.13.1 → [Updates: 4.8.0]
• minimist ^1.2.8
• mustache ^3.2.1 → [Updates: ^4.2.0]
• prompts ^2.4.2
• sass ^1.101.0 → [Updates: ^1.102.0]
• semver ^5.7.2 → [Updates: ^7.8.5]
• strip-bom ^4.0.0 → [Updates: ^5.0.0]
• @eslint/compat ^1.4.1 → [Updates: ^2.1.0]
• @eslint/eslintrc ^3.3.5 → [Updates: ^3.3.6]
• @eslint/js ^9.39.4 → [Updates: ^9.39.5, ^10.0.1]
• @types/node 20.19.43 → [Updates: 24.13.3]
• @typescript-eslint/eslint-plugin ^8.63.0 → [Updates: ^8.64.0]
• @typescript-eslint/parser ^8.63.0 → [Updates: ^8.64.0]
• create-vite 7.1.3 → [Updates: 9.1.1]
• cross-env ^5.2.1 → [Updates: ^10.1.0]
• eslint ^9.39.4 → [Updates: ^9.39.5, ^10.8.0]
• eslint-config-angular ^0.5.0
• eslint-config-prettier ^10.1.8
• eslint-plugin-angular ^4.1.0 → [Updates: ^5.0.0]
• eslint-plugin-jest ^28.14.0 → [Updates: ^29.16.0]
• eslint-plugin-react ^7.37.5
• eslint-plugin-react-hooks ^5.2.0 → [Updates: ^7.1.1]
• eslint-plugin-unused-imports ^4.4.1
• eslint-plugin-vue ^9.33.0 → [Updates: ^10.10.0]
• globals ^15.15.0 → [Updates: ^17.8.0]
• jest ^29.7.0 → [Updates: ^30.4.2]
• jest-image-snapshot ^6.5.2
• prettier ^2.8.8 → [Updates: ^3.9.6]
• rimraf ^2.7.1 → [Updates: ^6.1.3]
• tree-kill ^1.2.2
• tree-kill-promise ^1.0.12 → [Updates: ^5.0.0]
• typescript ^4.9.5 → [Updates: ^7.0.2]
• wait-on 8.0.5 → [Updates: 9.1.0]
• node >20.19.0
• npm >9.6.0
• yarn >1.21

packages/devextreme-schematics/package.json (14)

• @angular-devkit/core ^19.2.27 → [Updates: ^22.0.8]
• @angular-devkit/schematics ^19.2.27 → [Updates: ^22.0.8]
• @schematics/angular ^19.2.27 → [Updates: ^22.0.8]
• parse5 ^7.3.0 → [Updates: ^8.0.1]
• picomatch ^4.0.5
• semver ^7.8.5
• @types/jasmine ~3.10.19 → [Updates: ~6.0.0]
• @types/node 20.19.43 → [Updates: 24.13.3]
• @types/picomatch ^4.0.3
• @types/semver ^7.7.1
• jasmine ^2.99.0 → [Updates: ^6.3.0]
• rxjs ^7.8.2
• tslint ^5.20.1 → [Updates: ^6.1.3]
• typescript ~5.6.3 → [Updates: ~5.9.3, ~7.0.2]

pnpm-workspace.yaml (17)

• @babel/core@<=7.29.0 >=7.29.7 → [Updates: >=8.0.1]
• @babel/traverse@<7.23.2 >=7.29.7 → [Updates: >=8.0.4]
• basic-ftp@<=5.3.0 >=5.3.1 → [Updates: >=6.0.2]
• brace-expansion@>=5.0.2 <5.0.6 >=5.0.7 → [Updates: >=5.0.8]
• braces@<3.0.3 >=3.0.3
• cross-spawn 7.0.6
• flatted ^3.4.2 → [Updates: ^3.4.3]
• form-data@>=4.0.0 <4.0.4 >=4.0.6
• ip-address@<=10.1.0 >=10.2.0 → [Updates: >=10.3.1]
• js-yaml@<=4.1.1 ^4.3.0 → [Updates: ^5.2.2]
• minimatch@<3.1.5 3.1.5 → [Updates: 10.2.5]
• picomatch@<2.3.2 ^2.3.2 → [Updates: ^4.0.5]
• picomatch@>4.0.0 ^4.0.5
• semver@>=2.0.0-alpha <5.7.2 >=5.7.2 → [Updates: >=7.8.5]
• tar@<=7.5.10 ~7.5.19 → [Updates: ~7.5.20]
• tar-fs@>=3.0.0 <3.1.1 >=3.1.3
• ws@>=8.0.0 <8.17.1 >=8.21.0 → [Updates: >=8.21.1]

scripts/regenerate-nextjs-apps/package.json (1)

• create-next-app 16.2.10 → [Updates: 16.2.12]

tools/make-sbom/package.json (2)

• @devexpress/sbom-toolkit 0.11.2
• pnpm 11.10.0+sha512.0b7f8b98060031904c017e3a41eb187a16d40eeb829b95c4f8cb03681761fc4ab53dd219115b9b447f4dce1a05a214764461e7d3703392a9f32f9511ce8c86c8 → [Updates: 11.15.0]

tools/make-sbom/pnpm-workspace.yaml (2)

• tar@<=7.5.15 ^7.5.16 → [Updates: ^7.5.20]
• body-parser@>=2.0.0 <2.3.0 ^2.3.0

---

• Check this box to trigger a request for Renovate to run again on this repository