Dependency Dashboard

[github-actions]

This issue lists Buddy Bot updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/checkout action to v7
• chore(deps): update shivammathur/setup-php action to v2.37.1 [security] (shivammathur/setup-php, setup-php, composer.lock, platform-overrides.php, composer.json, config.platform.php, php-version, shivammathur/setup-php@v2, CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L, CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N, phalcon, gearman, PhpManager, VcRedist, master, php-src, ioncube, shivammathur/homebrew-extensions, sqlsrv, swow, xhprof, brew, downloads.php.net, ICU, couchbase, shivammathur/cache-extensions, @actions/core, and, extensions.)
• chore(deps): update all non-major dependencies (deps.yaml)
• chore(deps): update all non-major dependencies (oven-sh/setup-bun, actions/checkout@v6.0.2, autofix.ci, form-data, no-cache)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

npm

package.json

• @stacksjs/clapp ^0.2.0
• ts-videos github:stacksjs/ts-videos
• @ts-videos/mp4 github:stacksjs/ts-videos
• @stacksjs/clapp ^0.2.0
• better-dx ^0.2.15
• bun-git-hooks ^0.3.1

github-actions

.github/workflows/buddy-bot.yml

• actions/checkout v6
• oven-sh/setup-bun v2.0.2
• shivammathur/setup-php 2.35.5

.github/workflows/release.yml

• actions/checkout v6
• oven-sh/setup-bun v2.0.2
• actions/cache v5
• stacksjs/action-releaser v1.2.6

.github/workflows/ci.yml

• actions/checkout v6
• oven-sh/setup-bun v2.0.2
• actions/cache v5
• home-lang/pantry/packages/action main

dependency-files

deps.yaml

• bun.sh ^1.3.11
• ffmpeg.org ^7.1.1
• lame.sourceforge.io >=3.98.3
• libsdl.org ^2
• freetype.org ^2
• harfbuzz.org ^8
• videolan.org/x264 ^0.164
• videolan.org/x265 ^3
• webmproject.org/libvpx ~1.14 # libvpx abi changes in 1.15
• opus-codec.org ^1
• google.com/webp ^1
• alsa-project.org/alsa-lib >=1.0.11
• x.org/x11 ^1
• x.org/xcursor *
• x.org/xi *
• x.org/xrandr *
• x.org/xfixes *
• x.org/xrender *
• x.org/xscrnsaver *
• x.org/exts ^1
• x.org/xcb ^1
• x.org/protocol *
• x.org/xau ^1
• x.org/xdmcp ^1
• x.org/util-macros *
• libpng.org @1
• zlib.net @1
• sourceware.org/bzip2 @1
• cairographics.org @1
• gnome.org/glib @2
• graphite.sil.org *
• unicode.org ^71
• pixman.org ^0.40.0
• freedesktop.org/fontconfig @2
• oberhumer.com/lzo *
• gnome.org/libxml2 @2
• libexpat.github.io @2
• gnu.org/gettext ^0.21
• sourceware.org/libffi @3
• pcre.org @8
• pcre.org/v2 @10
• python.org ^3 # several of the bins are scripts
• tukaani.org/xz ^5 # autopoint needs this to unpack archives
• openssl.org ^1.1
• bytereef.org/mpdecimal @2
• sqlite.org @3
• gnu.org/readline @8
• invisible-island.net/ncurses @6
• facebook.com/zstd >=1.5
• tcl-lang.org =8.6.16 # 9.0.2 introduced a build issue on darwin
• curl.se/ca-certs *
• freedesktop.org/pkg-config ^0.29
• giflib.sourceforge.io ^5
• libjpeg-turbo.org ^2
• simplesystems.org/libtiff ^4
• lz4.org ^1

---

• Check this box to trigger a request for Buddy Bot to run again on this repository