Renovate Dependency Updates

[matticbot]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Abandoned Dependencies

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (217)

Datasource	Name	Last Updated
composer	codeception/module-db	2025-03-03
composer	tubalmartin/cssmin	2018-01-15
npm	@automattic/babel-plugin-preserve-i18n	2021-11-05
npm	@automattic/calypso-color-schemes	2025-03-14
npm	@automattic/color-studio	2025-01-29
npm	@automattic/explat-client	2024-03-28
npm	@automattic/explat-client-react-helpers	2024-07-29
npm	@automattic/format-currency	2025-03-11
npm	@automattic/i18n-utils	2024-07-15
npm	@automattic/popup-monitor	2022-08-24
npm	@automattic/request-external-access	2025-01-17
npm	@automattic/typography	2022-06-06
npm	@automattic/viewport	2022-06-06
npm	@automattic/webpack-rtl-plugin	2022-05-13
npm	@cerner/duplicate-package-checker-webpack-plugin	2023-09-27
npm	@codemirror/lang-css	2024-11-26
npm	@gravatar-com/quick-editor	2025-03-24
npm	@microsoft/fetch-event-source	2021-04-25
npm	@octokit/webhooks-types	2024-10-03
npm	@popperjs/core	2023-05-26
npm	@rollup/plugin-json	2023-12-12
npm	@testing-library/preact	2024-05-27
npm	@testing-library/user-event	2025-01-21
npm	babel-plugin-transform-rename-properties	2020-08-09
npm	bounding-client-rect	2015-01-26
npm	camelize	2022-10-12
npm	clean-css	2023-11-30
npm	clipboard	2022-05-04
npm	clsx	2024-04-23
npm	compare-versions	2024-07-13
npm	component-uid	2014-02-20
npm	crypto-js	2023-10-24
npm	date-fns	2024-09-17
npm	daterangepicker	2020-05-24
npm	deepmerge	2023-03-16
npm	email-validator	2018-05-27
npm	enquirer	2023-07-28
npm	error	2020-05-21
npm	esbuild-plugin-babel	2021-02-23
npm	eslint-plugin-jest-dom	2024-11-17
npm	eslint-plugin-jsx-a11y	2024-10-26
npm	eslint-plugin-lodash	2024-05-12
npm	eslint-plugin-react	2025-04-03
npm	eslint-plugin-you-dont-need-lodash-underscore	2024-04-03
npm	eval	2022-03-24
npm	events	2021-02-27
npm	fast-deep-equal	2020-06-08
npm	fast-json-stable-stringify	2019-12-14
npm	font-awesome	2016-10-24
npm	fork-ts-checker-webpack-plugin	2025-04-03
npm	gridicons	2023-03-16
npm	history	2022-02-22
npm	hopscotch	2017-06-02
npm	husky	2024-11-18
npm	identity-obj-proxy	2016-08-03
npm	jmpress	2014-01-19
npm	jquery-cycle	2016-02-22
npm	jquery-modal	2019-02-25
npm	js-cookie	2023-04-24
npm	listr	2018-11-17
npm	listr-silent-renderer	2016-12-06
npm	listr-update-renderer	2018-11-17
npm	listr-verbose-renderer	2019-10-03
npm	localtunnel	2021-09-18
npm	markdown-it-footnote	2023-12-06
npm	md5-es	2017-10-08
npm	moment	2023-12-27
npm	nspell	2021-01-17
npm	path-browserify	2020-03-03
npm	path-name	2016-10-20
npm	photon	2024-10-03
npm	pluralize	2019-05-25
npm	postcss-modules	2024-11-11
npm	prettier	2023-09-25
npm	print-this	2023-09-20
npm	process	2017-04-26
npm	prompts	2021-10-07
npm	prop-types	2022-01-05
npm	push.js	2019-07-22
npm	q-flat	2018-07-27
npm	qrcode.react	2024-12-11
npm	qss	2023-02-22
npm	react-google-charts	2024-10-26
npm	react-page-visibility	2022-04-19
npm	react-popper	2022-04-28
npm	react-redux	2024-12-10
npm	react-transition-group	2022-08-01
npm	react-use-measure	2025-01-30
npm	redux	2023-12-23
npm	redux-thunk	2023-12-04
npm	refx	2018-02-17
npm	remark-gfm	2025-02-10
npm	require-from-string	2018-04-09
npm	resize-observer-polyfill	2018-12-09
npm	rollup-plugin-livereload	2021-06-29
npm	rollup-plugin-postcss	2021-11-22
npm	semantic-ui-css	2022-10-06
npm	shell-escape	2015-02-11
npm	source-map-js	2024-09-08
npm	sprintf-js	2023-09-11
npm	strip	2016-04-09
npm	svelte-preprocess	2024-09-26
npm	svgstore	2021-11-03
npm	thread-loader	2024-09-18
npm	ts-dedent	2021-08-01
npm	tslib	2024-10-31
npm	typeahead.js	2015-04-27
npm	update-notifier	2024-09-09
npm	uplot	2025-03-14
npm	wawoff2	2022-01-19
npm	xml2js	2023-07-26

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update anthropics/claude-code-action digest to 2cc1ac1
• Update babel monorepo to v7.29.3 (@babel/compat-data, @babel/preset-env)
• Update definitelyTyped (@types/jquery, @types/lodash)
• Update dependency @lezer/lr to v1.4.10
• Update dependency @mdn/browser-compat-data to v7.3.14
• Update dependency @rollup/plugin-commonjs to v26.0.3
• Update dependency @rollup/plugin-node-resolve to v15.3.1
• Update dependency @rollup/plugin-replace to v5.0.7
• Update dependency @tsconfig/strictest to v2.0.8
• Update dependency @typescript/native-preview to v7.0.0-dev.20260504.1
• Update dependency babel-plugin-polyfill-corejs3 to v0.14.2
• Update dependency chart.js to v4.5.1
• Update dependency composer/semver to v3.4.4
• Update dependency dompurify to v3.4.2
• Update dependency ignore to v7.0.5
• Update dependency lib0 to v0.2.117
• Update dependency minimatch to v10.2.5
• Update dependency playwright-ctrf-json-reporter to ^0.0.29
• Update dependency postcss to v8.5.14
• Update dependency postcss-loader to v8.2.1
• Update dependency react-redux to v7.2.9
• Update dependency react-slider to v2.0.6
• Update dependency react-use-measure to v2.1.7
• Update dependency remark-gfm to v4.0.1
• Update dependency rollup-plugin-svelte to v7.2.3
• Update dependency sass-loader to v16.0.7
• Update dependency semver to v7.7.4
• Update dependency semver to v7.7.4
• Update dependency source-map to v0.7.6
• Update dependency source-map-js to v1.2.1
• Update dependency svelte-preprocess to v6.0.3
• Update dependency swiper to v12.1.4
• Update dependency swiper to v12.1.4
• Update dependency uplot to v1.6.32
• Update dependency vite to v8.0.10
• Update dependency yaml to v2.8.4
• Update dependency yjs to v13.6.30
• Update Eslint packages (@eslint/compat, @eslint/json, eslint-plugin-es-x, eslint-plugin-jest, eslint-plugin-jsdoc, eslint-plugin-package-json, eslint-plugin-playwright, eslint-plugin-react-hooks, eslint-plugin-storybook, eslint-plugin-svelte, eslint-plugin-testing-library, typescript-eslint)
• Update GitHub API packages (@actions/core, @actions/github)
• Update JS unit testing packages to v4.1.5 (@vitest/browser-playwright, vitest)
• Update slackapi/slack-github-action action to v3.0.3
• Update storybook monorepo to v10.3.6 (@storybook/addon-a11y, @storybook/addon-docs, @storybook/addon-vitest, @storybook/react, @storybook/react-vite, storybook)
• Update CodeMirror (@codemirror/autocomplete, @codemirror/commands, @codemirror/lang-html, @codemirror/language, @codemirror/language-data, @codemirror/lint, @codemirror/search, @codemirror/state, @codemirror/view)
• Update dependency @automattic/viewport to v1.1.0
• Update dependency @cerner/duplicate-package-checker-webpack-plugin to v2.6.0
• Update dependency @lezer/common to v1.5.2
• Update dependency @preact/signals to v1.3.4
• Update dependency @rollup/plugin-babel to v6.1.0
• Update dependency @rollup/plugin-typescript to v12.3.0
• Update dependency @sentry/browser to v10.51.0
• Update dependency @tanstack/react-router to v1.169.1
• Update dependency @vercel/ncc to v0.38.4
• Update dependency autoprefixer to v10.5.0
• Update dependency axios to v1.16.0
• Update dependency babel-loader to v10.1.1
• Update dependency commander to v13.1.0
• Update dependency configstore to v7.1.0
• Update dependency cookie to v1.1.1
• Update dependency core-js to v3.49.0
• Update dependency erusev/parsedown to v1.8.0
• Update dependency esbuild to v0.28.0
• Update dependency esbuild-sass-plugin to v3.7.0
• Update dependency esbuild-sass-plugin to v3.7.0
• Update dependency execa to v7.2.0
• Update dependency focus-trap to v6.9.4
• Update dependency fork-ts-checker-webpack-plugin to v9.1.0
• Update dependency graphql to v16.13.2
• Update dependency libsodium-wrappers to v0.8.4
• Update dependency mini-css-extract-plugin to v2.10.2
• Update dependency openai to v5.23.2
• Update dependency parse-diff to v0.12.0
• Update dependency preact to v10.29.1
• Update dependency prettier-plugin-svelte to v3.5.1
• Update dependency react-refresh to v0.18.0
• Update dependency react-router to v7.14.2
• Update dependency redux-thunk to v2.4.2
• Update dependency sass-embedded to v1.99.0
• Update dependency sharp to v0.34.5
• Update dependency stylelint to v17.10.0
• Update dependency svelte to v5.55.5
• Update dependency svelte-eslint-parser to v1.6.0
• Update dependency svg2ttf to v6.1.0
• Update dependency terser-webpack-plugin to v5.5.0
• Update dependency turndown to v7.2.4
• Update dependency tus-js-client to v4.3.1
• Update dependency undici to v7.25.0
• Update dependency uplot-react to v1.2.4
• Update dependency use-debounce to v10.1.1
• Update dependency webpack to v5.106.2
• Update dependency webpack to v5.106.2
• Update dependency winston to v3.19.0
• Update dependency wp-php-toolkit/reprint-exporter to ^0.7.0
• Update dependency wp-php-toolkit/reprint-importer to ^0.7.0
• Update mariadb Docker tag to v12.2
• Update mysql Docker tag to v8.3
• Update Node.js to v24.15.0
• Update playwright monorepo to v1.59.1 (@playwright/test, playwright)
• Update pnpm to v10.33.2
• Update renovatebot/github-action action to v46.1.13
• Update tanstack-query monorepo to v5.100.9 (@tanstack/eslint-plugin-query, @tanstack/react-query, @tanstack/react-query-devtools)
• Update definitelyTyped (major) (@types/jquery, @types/react, @types/react-dom)
• Update dependency @linear/sdk to v83
• Update dependency @preact/signals to v2
• Update dependency @rollup/plugin-babel to v7
• Update dependency @rollup/plugin-commonjs to v29
• Update dependency @rollup/plugin-node-resolve to v16
• Update dependency @rollup/plugin-replace to v6
• Update dependency allure-playwright to v3
• Update dependency chokidar to v5
• Update dependency commander to v14
• Update dependency configstore to v8
• Update dependency css-loader to v7
• Update dependency css-tree to v3
• Update dependency debounce to v3
• Update dependency dot-prop to v10
• Update dependency dotenv to v17
• Update dependency execa to v9
• Update dependency express to v5
• Update dependency filesize to v11
• Update dependency focus-trap to v8
• Update dependency globals to v17
• Update dependency jquery to v4
• Update dependency jsdom to v29
• Update dependency mapbox-gl to v3
• Update dependency markdown-it-footnote to v4
• Update dependency mediawiki/mediawiki-codesniffer to v51
• Update dependency openai to v6
• Update dependency p-debounce to v5
• Update dependency p-limit to v7
• Update dependency phan/phan to v6
• Update dependency postcss-custom-properties to v15
• Update dependency react-redux to v9
• Update dependency redux to v5
• Update dependency redux-thunk to v3
• Update dependency rollup to v4
• Update dependency svgicons2svgfont to v16
• Update dependency sweetalert2 to v11
• Update dependency tiny-lru to v13
• Update dependency typescript to v6
• Update dependency undici to v8
• Update dependency wait-for-expect to v4
• Update dependency webpack-cli to v7
• Update dependency zod to v4
• Update Eslint packages to v10 (major) (@eslint/js, eslint)
• Update mysql Docker tag to v9
• Update pnpm/action-setup action to v6
• Update react monorepo to v19 (major) (react, react-dom)
• Update react-spring monorepo to v10 (major) (@react-spring/core, @react-spring/web)
• Lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update wordpress monorepo (@wordpress/a11y, @wordpress/annotations, @wordpress/api-fetch, @wordpress/babel-plugin-import-jsx-pragma, @wordpress/base-styles, @wordpress/blob, @wordpress/block-editor, @wordpress/block-library, @wordpress/block-serialization-default-parser, @wordpress/blocks, @wordpress/boot, @wordpress/browserslist-config, @wordpress/commands, @wordpress/components, @wordpress/compose, @wordpress/core-data, @wordpress/data, @wordpress/data-controls, @wordpress/date, @wordpress/dependency-extraction-webpack-plugin, @wordpress/dom, @wordpress/dom-ready, @wordpress/e2e-test-utils-playwright, @wordpress/edit-post, @wordpress/editor, @wordpress/element, @wordpress/escape-html, @wordpress/eslint-plugin, @wordpress/format-library, @wordpress/hooks, @wordpress/html-entities, @wordpress/i18n, @wordpress/interactivity, @wordpress/jest-console, @wordpress/keycodes, @wordpress/lazy-editor, @wordpress/media-utils, @wordpress/notices, @wordpress/plugins, @wordpress/preferences, @wordpress/primitives, @wordpress/private-apis, @wordpress/rich-text, @wordpress/route, @wordpress/router, @wordpress/server-side-render, @wordpress/stylelint-config, @wordpress/sync, @wordpress/theme, @wordpress/token-list, @wordpress/url, @wordpress/viewport, @wordpress/widgets, @wordpress/wordcount)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update dependency @slack/web-api to v7.15.2
• Update renovate Docker tag to v43.165.1
• Update ubuntu Docker tag to v26

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update Bundled @wordpress/* monorepo (@wordpress/admin-ui, @wordpress/dataviews, @wordpress/icons, @wordpress/interface, @wordpress/ui, @wordpress/views)

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency @automattic/format-currency to v2

Detected Dependencies

Note

Detected dependencies section has been truncated

composer (103)

.github/actions/tool-setup/composer-plugin/composer.json (1)

• composer/composer ^2.2

.github/files/coverage-munger/composer.json (2)

• yoast/phpunit-polyfills ^4.0.0
• phpunit/phpcov *

composer.json (10)

• dealerdirect/phpcodesniffer-composer-installer ^1.0.0
• phan/phan 5.5.2 → [Updates: 5.5.2 || 6.0.5]
• php-parallel-lint/php-parallel-lint ^1.4.0
• php-stubs/woocommerce-stubs >=7.0
• php-stubs/wordpress-stubs >=6.8
• php-stubs/wordpress-tests-stubs >=6.8
• php-stubs/wp-cli-stubs ^2.10
• phpcompatibility/phpcompatibility-wp ^2.1
• sirbrillig/phpcs-changed ^2.11.5
• squizlabs/php_codesniffer ^3.6.2 || ^4.0.0

projects/packages/a8c-mc-stats/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/account-protection/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/activity-log/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/admin-ui/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/analyzer/composer.json (3)

• php >=7.2
• nikic/php-parser ^4.19
• php ^7.4 || ^8.0

projects/packages/assets/composer.json (4)

• php >=7.2
• brain/monkey ^2.6.2
• yoast/phpunit-polyfills ^4.0.0
• wikimedia/testing-access-wrapper ^1.0 || ^2.0 || ^3.0 || ^4.0

projects/packages/autoloader/composer.json (3)

• php >=7.2
• composer/composer ^2.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/backup-helper-script-manager/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/backup/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/blaze/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/block-delimiter/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/blocks/composer.json (3)

• php >=7.2
• brain/monkey ^2.6.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/boost-core/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/boost-speed-score/composer.json (3)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0
• brain/monkey ^2.6

projects/packages/changelogger/composer.json (5)

• php >=7.2.5
• symfony/console ^5.4 || ^6.4 || ^7.1
• symfony/process ^5.4 || ^6.4 || ^7.1
• yoast/phpunit-polyfills ^4.0.0
• wikimedia/testing-access-wrapper ^1.0 || ^2.0 || ^3.0 || ^4.0

projects/packages/chatbot/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/classic-theme-helper/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/codesniffer/composer.json (9)

• php >=8.2
• dealerdirect/phpcodesniffer-composer-installer ^1.0
• mediawiki/mediawiki-codesniffer ^50.0 → [Updates: ^51.0]
• phpcompatibility/phpcompatibility-wp ^2.1
• sirbrillig/phpcs-variable-analysis ^2.10
• wp-coding-standards/wpcs ^3.0
• automattic/vipwpcs ^3.0
• phpcsstandards/phpcsutils ^1.0
• yoast/phpunit-polyfills ^4.0.0

projects/packages/compat/composer.json (1)

• php >=7.2

projects/packages/composer-plugin/composer.json (3)

• php >=7.2
• composer/composer ^2.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/config/composer.json (1)

• php >=7.2

projects/packages/connection/composer.json (3)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0
• brain/monkey ^2.6.2

projects/packages/constants/composer.json (3)

• php >=7.2
• brain/monkey ^2.6.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/device-detection/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/error/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/explat/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/external-connections/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/external-media/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/forms/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/google-analytics/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/ignorefile/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/image-cdn/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/import/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/ip/composer.json (3)

• php >=7.2
• brain/monkey ^2.6.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/jetpack-mu-wpcom/composer.json (5)

• php >=8.1
• scssphp/scssphp 2.1.0
• symfony/filesystem ^6.0.0
• yoast/phpunit-polyfills ^4.0.0
• brain/monkey ^2.6.2

projects/packages/jitm/composer.json (3)

• php >=7.2
• brain/monkey ^2.6.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/jwt/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/licensing/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/logo/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/masterbar/composer.json (3)

• php >=7.2
• brain/monkey ^2.6.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/my-jetpack/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/newsletter/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/password-checker/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/patchwork-redefine-exit/composer.json (3)

• php >=7.2
• antecedent/patchwork ^2.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/paypal-payments/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/phan-plugins/composer.json (3)

• phan/phan 5.5.2 → [Updates: 6.0.5]
• php >=8.0
• yoast/phpunit-polyfills ^4.0.0

projects/packages/phpcs-filter/composer.json (3)

• php >=7.2
• squizlabs/php_codesniffer ^3.6.1 || ^4.0.0
• yoast/phpunit-polyfills ^4.0.0

projects/packages/phpunit-select-config/composer.json (4)

• php >=5.4
• phpunit/phpunit *
• yoast/phpunit-polyfills ^4.0.0
• antecedent/patchwork ^2.2

projects/packages/plans/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/plugin-deactivation/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/plugins-installer/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/post-list/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/post-media/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/premium-analytics/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/protect-models/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/protect-status/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/publicize/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/redirect/composer.json (3)

• php >=7.2
• brain/monkey ^2.6.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/roles/composer.json (3)

• php >=7.2
• brain/monkey ^2.6.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/rtc/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/scan/composer.json (1)

• php >=7.2

projects/packages/scheduled-updates/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/schema/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/search/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/stats-admin/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/stats/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/status/composer.json (3)

• php >=7.2
• brain/monkey ^2.6.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/stub-generator/composer.json (6)

• php >=7.4
• composer/xdebug-handler ^3.0.4
• nikic/php-parser ^5.3
• phpstan/phpdoc-parser ^2.0
• symfony/console ^5.4 || ^6.4 || ^7.1
• yoast/phpunit-polyfills ^4.0.0

projects/packages/subscribers-dashboard/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/sync/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/test-environment/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/transport-helper/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/videopress/composer.json (3)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0
• brain/monkey ^2.6.2

projects/packages/waf/composer.json (3)

• php >=7.2
• wikimedia/aho-corasick ^1.0
• yoast/phpunit-polyfills ^4.0.0

projects/packages/wp-abilities/composer.json (3)

• php >=7.2
• brain/monkey ^2.6.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/wp-build-polyfills/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/wp-js-data-sync/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/packages/yoast-promo/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

projects/plugins/automattic-for-agencies-client/composer.json (1)

• yoast/phpunit-polyfills ^4.0.0

projects/plugins/backup/composer.json (1)

• yoast/phpunit-polyfills ^4.0.0

projects/plugins/beta/composer.json (2)

• composer/semver 3.4.3 → [Updates: 3.4.4]
• erusev/parsedown 1.7.4 → [Updates: 1.8.0]

projects/plugins/boost/composer.json (3)

• matthiasmullie/minify ^1.3
• brain/monkey ^2.6.2
• yoast/phpunit-polyfills ^4.0.0

projects/plugins/classic-theme-helper-plugin/composer.json

projects/plugins/crm/composer.json (12)

• php >=7.4
• automattic/woocommerce ^3.1
• dompdf/dompdf ^3.1
• thecodingmachine/safe ^1.3
• codeception/codeception ^4.1 || ^5.0
• codeception/module-asserts ^2.0 || ^3.0
• codeception/module-phpbrowser ^2.0 || ^3.0 || ^4.0
• codeception/module-webdriver ^2.0 || ^3.0 || ^4.0
• codeception/module-db ^2.0 || 3.1.0 || ^3.1.2
• codeception/module-filesystem ^2.0 || ^3.0
• codeception/util-universalframework ^1.0 || ^2.0
• yoast/phpunit-polyfills ^4.0.0

projects/plugins/inspect/composer.json (2)

• php >=7.4
• yoast/phpunit-polyfills ^4.0.0

projects/plugins/jetpack/composer.json (3)

• automattic/woocommerce-analytics ^0.16
• antecedent/patchwork ^2.2
• yoast/phpunit-polyfills ^4.0.0

projects/plugins/mu-wpcom-plugin/composer.json (2)

• php >=8.1
• yoast/phpunit-polyfills ^4.0.0

projects/plugins/paypal-payment-buttons/composer.json (1)

• yoast/phpunit-polyfills ^4.0.0

projects/plugins/premium-analytics/composer.json (1)

• yoast/phpunit-polyfills ^4.0.0

projects/plugins/protect/composer.json (1)

• yoast/phpunit-polyfills ^4.0.0

projects/plugins/search/composer.json (1)

• yoast/phpunit-polyfills ^4.0.0

projects/plugins/social/composer.json (2)

• yoast/phpunit-polyfills ^4.0.0
• brain/monkey ^2.6.2

projects/plugins/starter-plugin/composer.json (1)

• yoast/phpunit-polyfills ^4.0.0

projects/plugins/vaultpress/composer.json (1)

• yoast/phpunit-polyfills ^4.0.0

projects/plugins/videopress/composer.json

projects/plugins/wpcloud-sso/composer.json

projects/plugins/wpcomsh/composer.json (10)

• php >=8.1
• automattic/at-pressable-podcasting ^2.0.7
• automattic/custom-fonts ^3.0
• automattic/custom-fonts-typekit ^2.0
• automattic/text-media-widget-styles ^2.0
• automattic/wc-calypso-bridge ^2.11.6
• tubalmartin/cssmin ^4.1
• wp-php-toolkit/reprint-exporter ^0.1.47 → [Updates: ^0.7.0]
• wp-php-toolkit/reprint-importer ^0.1.47 → [Updates: ^0.7.0]
• yoast/phpunit-polyfills ^4.0.0

tools/cli/helpers/doc-parser/composer.json (3)

• php >=8.2
• nikic/php-parser ^5.4.0
• phpstan/phpdoc-parser ^2.0

tools/cli/skeletons/common/composer.json (1)

• yoast/phpunit-polyfills ^4.0.0

tools/php-test-env/composer.json (2)

• php >=7.2
• yoast/phpunit-polyfills ^4.0.0

docker-compose (3)

tools/docker/docker-compose-ngrok.yml

tools/docker/docker-compose.yml

tools/performance/docker/docker-compose.yml (2)

• mysql 8.0 → [Updates: 8.3, 9.6]
• wordpress 6.9-php8.2-apache

dockerfile (2)

tools/docker/Dockerfile (1)

• ubuntu 24.04 → [Updates: 26.04]

tools/docker/Dockerfile.monorepo (1)

• ubuntu 24.04 → [Updates: 26.04]

github-actions (29)

.github/actions/tool-setup/action.yml (3)

• shivammathur/setup-php v2
• pnpm/action-setup v5.0.0 → [Updates: v6.0.5]
• actions/setup-node v6

.github/files/gh-autorelease/workflows/autorelease.yml (1)

• actions/checkout v6

.github/files/gh-autotagger/workflows/autotagger.yml (1)

• actions/checkout v6

.github/files/gh-e2e/workflows/e2e-tests.yml (1)

• peter-evans/repository-dispatch v4

.github/files/gh-npmjs-autopublisher/workflows/npmjs-autopublisher.yml (2)

• actions/checkout v6
• actions/setup-node v6

.github/files/gh-wp-svn-autopublish/workflows/wp-svn-autopublish.yml (1)

• actions/checkout v6

.github/files/mirror-.github/workflows/readonly.yml (1)

• dessant/repo-lockdown v5

.github/workflows/autotagger.yml (1)

• actions/checkout v6

.github/workflows/build-docker-monorepo.yml (13)

• actions/checkout v6
• actions/checkout v6
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/login-action v4
• docker/metadata-action v6
• docker/build-push-action v7
• actions/upload-artifact v7
• actions/download-artifact v8
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/login-action v4
• docker/metadata-action v6

.github/workflows/build-docker.yml (13)

• actions/checkout v6
• actions/checkout v6
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/login-action v4
• docker/metadata-action v6
• docker/build-push-action v7
• actions/upload-artifact v7
• actions/download-artifact v8
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/login-action v4
• docker/metadata-action v6

.github/workflows/build.yml (13)

• actions/checkout v6
• actions/github-script v9
• actions/checkout v6
• actions/upload-artifact v7
• actions/checkout v6
• actions/download-artifact v8
• actions/upload-artifact v7
• actions/upload-artifact v7
• actions/upload-artifact v7
• actions/upload-artifact v7
• actions/github-script v9
• actions/checkout v6
• actions/download-artifact v8

.github/workflows/check-actions-rate-limit.yml

.github/workflows/claude.yml (2)

• actions/checkout v6
• anthropics/claude-code-action v1@ef50f123a3a9be95b60040d042717517407c7256 → [Updates: v1]

.github/workflows/coverage-check.yml (1)

• actions/checkout v6

.github/workflows/delete-mirror-branches.yml (1)

• actions/checkout v6

.github/workflows/e2e-tests.yml (12)

• actions/checkout v6
• actions/checkout v6
• actions/upload-artifact v7
• actions/checkout v6
• actions/download-artifact v8
• actions/checkout v6
• actions/checkout v6
• actions/upload-artifact v7
• peter-evans/repository-dispatch v4
• actions/github-script v9
• actions/checkout v6
• actions/download-artifact v8

.github/workflows/gardening.yml (2)

• actions/checkout v6
• actions/checkout v6

.github/workflows/linting.yml (21)

• actions/checkout v6
• dorny/paths-filter v4
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6

.github/workflows/phpcompatibility-dev.yml (2)

• dorny/paths-filter v4
• actions/checkout v6

.github/workflows/post-build.yml (13)

• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/download-artifact v8
• actions/checkout v6
• actions/checkout v6
• actions/download-artifact v8
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/download-artifact v8

.github/workflows/pr-is-up-to-date.yml (2)

• actions/checkout v6
• actions/checkout v6

.github/workflows/renovate.yml (2)

• actions/checkout v6
• renovatebot/github-action v46.0.2 → [Updates: v46.1.13]

.github/workflows/slack-branch-existence-notification.yml (2)

• actions/checkout v6
• slackapi/slack-github-action v3.0.1 → [Updates: v3.0.3]

.github/workflows/slack-workflow-failed.yml (3)

• actions/checkout v6
• slackapi/slack-github-action v3.0.1 → [Updates: v3.0.3]
• slackapi/slack-github-action v3.0.1 → [Updates: v3.0.3]

.github/workflows/stale.yml (1)

• actions/stale v10

.github/workflows/tests.yml (8)

• actions/checkout v6
• actions/checkout v6
• actions/upload-artifact v7
• actions/checkout v6
• actions/download-artifact v8
• actions/checkout v6
• actions/checkout v6
• mariadb 12.0 → [Updates: 12.2]

.github/workflows/update-jetpack-staging-sites.yml (6)

• actions/checkout v6
• actions/checkout v6
• grafana/setup-k6-action v1
• grafana/run-k6-action v1
• grafana/run-k6-action v1
• actions/checkout v6

.github/workflows/update-phan-stubs.yml (1)

• actions/checkout v6

.github/workflows/wpcloud.yml (3)

• actions/checkout v6
• actions/upload-artifact v7
• actions/download-artifact v8

npm (14)

.github/files/coverage-munger/package.json (1)

• nyc ^18.0.0

package.json (4)

• husky 9.1.7
• node ^24.14.0
• pnpm ^10.28.2
• pnpm 10.28.2 → [Updates: 10.33.2]

pnpm-workspace.yaml

projects/github-actions/repo-gardening/package.json (18)

• @actions/core 3.0.0 → [Updates: 3.0.1]
• @actions/github 9.0.0 → [Updates: 9.1.1]
• @linear/sdk 75.0.0 → [Updates: 83.0.0]
• @slack/web-api 7.15.1 → [Updates: 7.15.2]
• compare-versions 6.1.1
• glob 13.0.6
• graphql 16.12.0 → [Updates: 16.13.2]
• moment 2.30.1
• openai 5.3.0 → [Updates: 5.23.2, 6.35.0]
• @babel/core ^7.29.0
• @babel/preset-typescript 7.28.5
• @octokit/webhooks-types 7.6.1
• @types/node ^24.12.0
• @typescript/native-preview 7.0.0-dev.20260225.1 → [Updates: 7.0.0-dev.20260504.1]
• @vercel/ncc 0.36.1 → [Updates: 0.38.4]
• babel-jest 30.3.0
• jest 30.3.0
• typescript 5.9.3 → [Updates: 6.0.3]

projects/github-actions/required-review/package.json (7)

• @actions/core 3.0.0 → [Updates: 3.0.1]
• @actions/github 9.0.0 → [Updates: 9.1.1]
• error 10.4.0
• js-yaml 4.1.1
• picomatch 4.0.4
• @vercel/ncc 0.36.1 → [Updates: 0.38.4]
• jest 30.3.0

projects/github-actions/test-results-to-slack/package.json (8)

• @actions/core 3.0.0 → [Updates: 3.0.1]
• @actions/github 9.0.0 → [Updates: 9.1.1]
• @slack/web-api 7.15.1 → [Updates: 7.15.2]
• glob 13.0.6
• minimatch 10.2.4 → [Updates: 10.2.5]
• @vercel/ncc 0.36.1 → [Updates: 0.38.4]
• jest 30.3.0
• undici 7.24.0 → [Updates: 7.25.0, 8.2.0]

projects/js-packages/ai-client/package.json (33)

• @microsoft/fetch-event-source 2.0.1
• @types/jest 30.0.0
• @types/react 18.3.28 → [Updates: 19.2.14]
• @types/wordpress__block-editor 15.0.6
• @wordpress/api-fetch 7.44.0 → [Updates: 7.45.0]
• @wordpress/base-styles 6.20.0 → [Updates: 7.0.0]
• @wordpress/blob 4.44.0 → [Updates: 4.45.0]
• @wordpress/block-editor 15.17.0 → [Updates: 15.18.0]
• @wordpress/blocks 15.17.0 → [Updates: 15.18.0]
• @wordpress/components 32.6.0 → [Updates: 33.0.0]
• @wordpress/compose 7.44.0 → [Updates: 7.45.0]
• @wordpress/data 10.44.0 → [Updates: 10.45.0]
• @wordpress/editor 14.44.0 → [Updates: 14.45.0]
• @wordpress/element 6.44.0 → [Updates: 6.45.0]
• @wordpress/i18n 6.17.0 → [Updates: 6.18.0]
• @wordpress/icons 12.2.0 → [Updates: 13.0.0]
• @wordpress/primitives 4.44.0 → [Updates: 4.45.0]
• @wordpress/url 4.44.0 → [Updates: 4.45.0]
• clsx 2.1.1
• debug 4.4.3
• markdown-it 14.1.1
• react 18.3.1 → [Updates: 19.2.5]
• react-dom 18.3.1 → [Updates: 19.2.5]
• turndown 7.1.2 → [Updates: 7.2.4]
• @storybook/addon-docs 10.3.5 → [Updates: 10.3.6]
• @storybook/react 10.3.5 → [Updates: 10.3.6]
• @testing-library/dom 10.4.1
• @types/markdown-it 14.1.2
• @types/turndown 5.0.6
• @typescript/native-preview 7.0.0-dev.20260225.1 → [Updates: 7.0.0-dev.20260504.1]
• jest 30.3.0
• storybook 10.3.5 → [Updates: 10.3.6]
• typescript 5.9.3 → [Updates: 6.0.3]

projects/js-packages/analytics/package.json (2)

• debug 4.4.3
• jest 30.3.0

projects/js-packages/api/package.json (2)

• @wordpress/url 4.44.0 → [Updates: 4.45.0]
• jest 30.3.0

projects/js-packages/babel-plugin-replace-textdomain/package.json (4)

• debug ^4.3.2
• @babel/core 7.29.0
• babel-plugin-tester ^12.0.0
• jest 30.3.0

projects/js-packages/base-styles/package.json (1)

• @wordpress/base-styles 6.20.0 → [Updates: 7.0.0]

projects/js-packages/boost-score-api/package.json (6)

• @wordpress/i18n 6.17.0 → [Updates: 6.18.0]
• zod 3.25.76 → [Updates: 4.4.3]
• @typescript/native-preview 7.0.0-dev.20260225.1 → [Updates: 7.0.0-dev.20260504.1]
• jest 30.3.0
• webpack 5.105.2 → [Updates: 5.106.2]
• webpack-cli 6.0.1 → [Updates: 7.0.2]

projects/js-packages/charts/package.json (65)

• @babel/runtime 7.29.2
• @react-spring/web 9.7.5 → [Updates: 10.0.3]
• @visx/annotation ^3.12.0
• @visx/axis ^3.12.0
• @visx/curve ^3.12.0
• @visx/event ^3.12.0
• @visx/gradient ^3.12.0
• @visx/grid ^3.12.0
• @visx/group ^3.12.0
• @visx/legend ^3.12.0
• @visx/pattern ^3.12.0
• @visx/responsive ^3.12.0
• @visx/scale ^3.12.0
• @visx/shape ^3.12.0
• @visx/text ^3.12.0
• @visx/tooltip ^3.12.0
• @visx/vendor ^3.12.0
• @visx/xychart ^3.12.0
• @wordpress/i18n ^6.0.0 → [Updates: ^6.0.0]
• @wordpress/icons ^12.0.0 → [Updates: ^13.0.0]
• @wordpress/theme 0.11.0 → [Updates: 0.12.0]
• @wordpress/ui 0.11.0 → [Updates: 0.12.0]
• clsx 2.1.1
• date-fns ^4.1.0
• deepmerge 4.3.1
• dompurify ^3.3.3 → [Updates: ^3.3.3]
• fast-deep-equal 3.1.3
• react-google-charts ^5.2.1
• tslib 2.8.1
• @babel/core 7.29.0
• @babel/preset-react 7.28.5
• @babel/preset-typescript 7.28.5
• @storybook/addon-docs 10.3.5 → [Updates: 10.3.6]
• @storybook/react 10.3.5 → [Updates: 10.3.6]
• @testing-library/dom ^10.0.0
• @testing-library/jest-dom ^6.0.0
• @testing-library/react ^16.0.0
• @testing-library/user-event ^14.4.3
• @types/jest ^30.0.0
• @types/react 18.3.28 → [Updates: 19.2.14]
• @types/react-dom 18.3.7 → [Updates: 19.2.3]
• @typescript/native-preview 7.0.0-dev.20260225.1 → [Updates: 7.0.0-dev.20260504.1]
• @visx/glyph 3.12.0
• @wordpress/components 32.6.0 → [Updates: 33.0.0]
• @wordpress/element 6.44.0 → [Updates: 6.45.0]
• @wordpress/private-apis 1.44.0 → [Updates: 1.45.0]
• babel-jest 30.3.0
• babel-plugin-react-remove-properties ^0.3.1
• esbuild 0.27.4 → [Updates: 0.28.0]
• esbuild-plugin-babel ^0.2.3
• esbuild-sass-plugin ^3.1.0 → [Updates: ^3.1.0]
• identity-obj-proxy ^3.0.0
• jest 30.3.0
• jest-extended 7.0.0
• postcss 8.5.10 → [Updates: 8.5.14]
• postcss-modules 6.0.1
• react 18.3.1 → [Updates: 19.2.5]
• react-dom 18.3.1 → [Updates: 19.2.5]
• sass-embedded 1.97.3 → [Updates: 1.99.0]
• storybook 10.3.5 → [Updates: 10.3.6]
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 6.0.3]
• react ^17.0.0 || ^18.0.0 → [Updates: ^17.0.0 || ^18.0.0 || ^19.0.0]
• react-dom ^17.0.0 || ^18.0.0 → [Updates: ^17.0.0 || ^18.0.0 || ^19.0.0]
• node >=20.11.0

projects/js-packages/components/package.json (44)

• @automattic/format-currency 1.0.1 → [Updates: 2.1.0]
• @babel/runtime ^7
• @wordpress/admin-ui 1.12.0 → [Updates: 2.0.0]
• @wordpress/browserslist-config 6.44.0 → [Updates: 6.45.0]
• @wordpress/components 32.6.0 → [Updates: 33.0.0]
• @wordpress/compose 7.44.0 → [Updates: 7.45.0]
• @wordpress/data 10.44.0 → [Updates: 10.45.0]
• @wordpress/date 5.44.0 → [Updates: 5.45.0]
• @wordpress/element 6.44.0 → [Updates: 6.45.0]
• @wordpress/i18n 6.17.0 → [Updates: 6.18.0]
• @wordpress/icons 12.2.0 → [Updates: 13.0.0]
• @wordpress/notices 5.44.0 → [Updates: 5.45.0]
• @wordpress/theme 0.11.0 → [Updates: 0.12.0]
• @wordpress/ui 0.11.0 → [Updates: 0.12.0]
• clsx 2.1.1
• prop-types ^15.7.2
• qrcode.react 4.2.0
• react-slider 2.0.5 → [Updates: 2.0.6]
• uplot 1.6.31 → [Updates: 1.6.32]
• uplot-react 1.1.4 → [Updates: 1.2.4]
• @babel/core 7.29.0
• @babel/preset-react 7.28.5
• @jest/globals 30.3.0
• @storybook/addon-docs 10.3.5 → [Updates: 10.3.6]
• @storybook/react 10.3.5 → [Updates: 10.3.6]
• @testing-library/dom 10.4.1
• @testing-library/react 16.3.2
• @testing-library/user-event 14.6.1
• @types/jest 30.0.0
• @types/react 18.3.28 → [Updates: 19.2.14]
• @types/react-dom 18.3.7 → [Updates: 19.2.3]
• @types/react-slider 1.3.6
• @typescript/native-preview 7.0.0-dev.20260225.1 → [Updates: 7.0.0-dev.20260504.1]
• jest 30.3.0
• react 18.3.1 → [Updates: 19.2.5]
• react-dom 18.3.1 → [Updates: 19.2.5]
• require-from-string 2.0.2
• storybook 10.3.5 → [Updates: 10.3.6]
• ts-dedent 2.2.0
• typescript 5.9.3 → [Updates: 6.0.3]
• webpack 5.105.2 → [Updates: 5.106.2]
• webpack-cli 6.0.1 → [Updates: 7.0.2]
• react ^18.0.0 → [Updates: ^18.0.0 || ^19.0.0]
• react-dom ^18.0.0 → [Updates: ^18.0.0 || ^19.0.0]

---

The bot runs every two hours, and may be monitored or triggered ahead of schedule here.