Dependency Dashboard

[github-actions]

This issue lists Buddy Bot updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/cache action to v6 (@actions/cache, @actions/core, actions/cache@v5)
• chore(deps): update actions/checkout action to v7
• chore(deps): update shivammathur/setup-php action to v2.37.1 [security] (shivammathur/setup-php, setup-php, composer.lock, platform-overrides.php, composer.json, config.platform.php, php-version, shivammathur/setup-php@v2, CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L, CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N, phalcon, gearman, PhpManager, VcRedist, master, php-src, ioncube, shivammathur/homebrew-extensions, sqlsrv, swow, xhprof, brew, downloads.php.net, ICU, couchbase, shivammathur/cache-extensions, @actions/core, and, extensions.)
• chore(deps): update all non-major dependencies (deps.yaml)
• chore(deps): update all non-major dependencies (oven-sh/setup-bun, actions/checkout@v6.0.2, autofix.ci, form-data, no-cache)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

npm

package.json

• @stacksjs/clapp ^0.2.0
• ts-videos github:stacksjs/ts-videos
• @ts-videos/mp4 github:stacksjs/ts-videos
• @stacksjs/clapp ^0.2.0
• better-dx ^0.2.15
• bun-git-hooks ^0.3.1

github-actions

.github/workflows/ci.yml

• actions/checkout v6
• oven-sh/setup-bun v2.0.2
• actions/cache v5
• home-lang/pantry/packages/action main

.github/workflows/buddy-bot.yml

• actions/checkout v6
• oven-sh/setup-bun v2.0.2
• shivammathur/setup-php 2.35.5

.github/workflows/release.yml

• actions/checkout v6
• oven-sh/setup-bun v2.0.2
• actions/cache v5
• stacksjs/action-releaser v1.2.6

dependency-files

deps.yaml

• bun.sh ^1.3.14
• ffmpeg.org ^7.1.1
• lame.sourceforge.io >=3.98.3
• libsdl.org ^2
• freetype.org ^2
• harfbuzz.org ^8
• videolan.org/x264 ^0.164
• videolan.org/x265 ^3
• webmproject.org/libvpx ~1.14 # libvpx abi changes in 1.15
• opus-codec.org ^1
• google.com/webp ^1
• alsa-project.org/alsa-lib >=1.0.11
• x.org/x11 ^1
• x.org/xcursor *
• x.org/xi *
• x.org/xrandr *
• x.org/xfixes *
• x.org/xrender *
• x.org/xscrnsaver *
• x.org/exts ^1
• x.org/xcb ^1
• x.org/protocol *
• x.org/xau ^1
• x.org/xdmcp ^1
• x.org/util-macros *
• libpng.org @1
• zlib.net @1
• sourceware.org/bzip2 @1
• cairographics.org @1
• gnome.org/glib @2
• graphite.sil.org *
• unicode.org ^71
• pixman.org ^0.40.0
• freedesktop.org/fontconfig @2
• oberhumer.com/lzo *
• gnome.org/libxml2 @2
• libexpat.github.io @2
• gnu.org/gettext ^0.21
• sourceware.org/libffi @3
• pcre.org @8
• pcre.org/v2 @10
• python.org ^3 # several of the bins are scripts
• tukaani.org/xz ^5 # autopoint needs this to unpack archives
• openssl.org ^1.1
• bytereef.org/mpdecimal @2
• sqlite.org @3
• gnu.org/readline @8
• invisible-island.net/ncurses @6
• facebook.com/zstd >=1.5
• tcl-lang.org =8.6.16 # 9.0.2 introduced a build issue on darwin
• curl.se/ca-certs *
• freedesktop.org/pkg-config ^0.29
• giflib.sourceforge.io ^5
• libjpeg-turbo.org ^2
• simplesystems.org/libtiff ^4
• lz4.org ^1

pantry.lock

• tcl-lang.org 8.6.16
• bun.sh 1.3.14
• x.org/xcb 1.17.0
• libjpeg-turbo.org 2.1.5.1
• zlib.net 1.3.2
• freetype.org 2.14.3
• google.com/webp 1.6.0
• tukaani.org/xz 5.8.2
• opus-codec.org 1.6.1
• oberhumer.com/lzo 2.10.0
• lame.sourceforge.io 3.100.0
• x.org/protocol 2025.1.0
• x.org/xdmcp 1.1.5
• bytereef.org/mpdecimal 2.5.1
• sqlite.org 3.53.2
• gnu.org/readline 8.3.0
• gnome.org/glib 2.88.0
• lz4.org 1.10.0
• x.org/util-macros 1.20.2
• simplesystems.org/libtiff 4.7.1
• unicode.org 71.1.0
• pixman.org 0.40.0
• x.org/x11 1.8.13
• pcre.org 8.45.0
• x.org/exts 1.3.7
• freedesktop.org/fontconfig 2.17.1
• invisible-island.net/ncurses 6.6.0
• facebook.com/zstd 1.5.7
• curl.se/ca-certs 2026.3.19
• giflib.sourceforge.io 5.2.2
• x.org/xrender 0.9.12
• videolan.org/x264 0.164.3095
• webmproject.org/libvpx 1.14.1
• pcre.org/v2 10.47.0
• freedesktop.org/pkg-config 0.29.2
• libsdl.org 2.32.10
• sourceware.org/bzip2 1.0.8
• libexpat.github.io 2.7.5
• libpng.org 1.6.55
• ffmpeg.org 7.1.3
• sourceware.org/libffi 3.6.0
• graphite.sil.org 1.3.15
• gnu.org/gettext 0.21.1
• gnome.org/libxml2 2.15.3
• x.org/xau 1.0.12
• videolan.org/x265 3.2.1
• cairographics.org 1.18.4

---

• Check this box to trigger a request for Buddy Bot to run again on this repository