Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: No releases satisfy vulnerabilityFixVersion

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	@babel/polyfill
npm	hull.js
npm	lodash.omit
npm	text-encoding
npm	xmldom

Note

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (80)

Datasource	Name	Last Updated
github-actions	dorny/paths-filter	2024-03-02
github-actions	peaceiris/actions-gh-pages	2024-04-08
npm	@microbit/microbit-universal-hex	2021-01-14
npm	@tensorflow-models/face-detection	2024-10-10
npm	@vernier/godirect	2023-06-27
npm	adm-zip	2024-08-30
npm	arraybuffer-loader	2019-10-12
npm	atob	2018-08-18
npm	balance-text	2022-03-27
npm	base64-js	2020-11-11
npm	base64-loader	2015-09-06
npm	btoa	2018-03-28
npm	buffer	2020-11-23
npm	callsite	2013-01-24
npm	canvas-toBlob	2016-12-01
npm	classnames	2023-12-29
npm	computed-style-to-inline-style	2023-08-28
npm	css-loader	2024-05-22
npm	decode-html	2017-08-28
npm	diff-match-patch	2020-05-20
npm	docdash	2023-08-30
npm	es6-object-assign	2017-03-18
npm	fastestsmallesttextencoderdecoder	2020-06-09
npm	file-loader	2020-10-27
npm	format-message	2022-02-17
npm	format-message-cli	2022-02-17
npm	get-float-time-domain-data	2015-02-08
npm	get-user-media-promise	2018-04-30
npm	grapheme-breaker	2015-11-16
npm	husky	2024-11-18
npm	ify-loader	2017-09-18
npm	in-publish	2020-03-16
npm	intl	2016-09-20
npm	jest-junit	2023-04-15
npm	js-md5	2023-10-09
npm	jszip	2022-08-02
npm	keymirror	2014-12-21
npm	linebreak	2022-05-20
npm	lodash.bindall	2016-08-13
npm	lodash.debounce	2016-08-13
npm	lodash.defaultsdeep	2019-07-10
npm	lodash.throttle	2016-08-13
npm	minilog	2017-01-05
npm	mkdirp	2023-04-24
npm	omggif	2019-07-16
npm	pngjs	2023-02-20
npm	postcss-simple-vars	2022-11-10
npm	prop-types	2022-01-05
npm	raf	2018-11-02
npm	raw-loader	2020-10-09
npm	react-ga	2022-06-16
npm	react-popover	2018-09-24
npm	react-style-proptype	2018-08-31
npm	react-visibility-sensor	2019-07-25
npm	redux	2023-12-23
npm	redux-mock-store	2024-10-21
npm	redux-throttle	2016-06-03
npm	scratch-parser	2024-11-25
npm	scratch-translate-extension-languages	2024-09-11
npm	script-loader	2017-09-29
npm	startaudiocontext	2017-05-10
npm	stream-browserify	2020-04-16
npm	style-loader	2024-04-08
npm	to-style	2015-01-22
npm	url-loader	2020-10-09
npm	wav-encoder	2017-08-11
npm	web-audio-test-api	2017-02-08
npm	xhr	2020-11-28
npm	xmldom	2021-04-17
npm	yauzl	2024-11-03

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release.
Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency terser-webpack-plugin to v5.3.15

Pending Branch Automerge

The following updates await pending status checks before automerging. To abort the branch automerge and create a PR instead, click on a checkbox below.

• chore(deps): update dependency prettier to v3.7.4
• chore(deps): update dependency vite to v7.2.10

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency xmldom to v0.5.0 [security]
• fix(deps): update dependency cookie to v0.7.0 [security]
• chore(deps): update dependency gh-pages to v5 [security]
• chore(deps): update actions/checkout digest to 93cb6ef
• chore(deps): update actions/setup-node digest to 395ad32
• chore(deps): update dependency adm-zip to v0.5.16
• chore(deps): update dependency js-md5 to v0.8.3
• fix(deps): update dependency isomorphic-dompurify to v2.33.0
• fix(deps): update dependency web-worker to v1.5.0
• chore(deps): update actions/checkout action to v6
• chore(deps): update commitlint monorepo to v20 (major) (@commitlint/cli, @commitlint/config-conventional)
• chore(deps): update dependency babel-loader to v10
• chore(deps): update dependency cross-env to v10
• chore(deps): update dependency docdash to v2
• chore(deps): update dependency expose-loader to v5
• chore(deps): update dependency husky to v9
• chore(deps): update dependency jest-junit to v16
• chore(deps): update dependency jsdoc to v4
• chore(deps): update dependency jsdom to v27
• chore(deps): update dependency mkdirp to v3
• chore(deps): update dependency npm to v11
• chore(deps): update dependency pngjs to v7
• chore(deps): update dependency redux to v5
• chore(deps): update dependency rimraf to v6
• chore(deps): update dependency selenium-webdriver to v4
• chore(deps): update dependency semantic-release to v25
• chore(deps): update dependency webpack-cli to v6
• chore(deps): update jest monorepo to v30 (major) (@types/jest, jest, jest-environment-jsdom)
• chore(deps): update node.js to v22
• chore(deps): update node.js to v24
• chore(deps): update react monorepo to v19 (major) (react, react-dom, react-test-renderer)
• chore(deps): update testing-library monorepo (major) (@testing-library/jest-dom, @testing-library/react)
• fix(deps): update dependency autoprefixer to v10
• fix(deps): update dependency bowser to v2
• fix(deps): update dependency computed-style-to-inline-style to v4
• fix(deps): update dependency copy-webpack-plugin to v13
• fix(deps): update dependency core-js to v3
• fix(deps): update dependency css-loader to v7
• fix(deps): update dependency css-tree to v3
• fix(deps): update dependency htmlparser2 to v10
• fix(deps): update dependency immutable to v5
• fix(deps): update dependency js-base64 to v3
• fix(deps): update dependency linebreak to v1
• fix(deps): update dependency postcss-import to v16
• fix(deps): update dependency postcss-loader to v8
• fix(deps): update dependency postcss-simple-vars to v7
• fix(deps): update dependency query-string to v9
• fix(deps): update dependency raw-loader to v4
• fix(deps): update dependency react-draggable to v4
• fix(deps): update dependency react-intl to v7
• fix(deps): update dependency react-redux to v9
• fix(deps): update dependency react-responsive to v10
• fix(deps): update dependency react-tabs to v6
• fix(deps): update dependency react-tooltip to v5
• fix(deps): update dependency transformation-matrix to v3
• fix(deps): update dependency twgl.js to v7
• fix(deps): update dependency uuid to v13
• fix(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

github-actions

.github/actions/install-dependencies/action.yml

• actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830
• actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830

.github/actions/test-package/action.yml

• EnricoMi/publish-unit-test-result-action v2@34d7c956a59aed1bfebf31df77b8de55db9bbaaf
• actions/upload-artifact v5@330a01c490aca151604b8cf639adc76d48f6c5d4

.github/workflows/ci.yml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-node v6@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
• dorny/paths-filter v3@de90cc6fb38fc0963ad72b210f1f284cd68cea36
• actions/upload-artifact v5@330a01c490aca151604b8cf639adc76d48f6c5d4
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-node v6@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
• actions/download-artifact v6@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
• actions/download-artifact v6@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
• peaceiris/actions-gh-pages v4@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e

.github/workflows/commitlint.yml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• wagoid/commitlint-github-action v6@b948419dd99f3fd78a6548d48f94e3df7f6bf3ed

.github/workflows/gha-debug.yml

.github/workflows/ghpages-cleanup.yml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8

.github/workflows/publish.yml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-node v6@2028fbc5c25fe9cf00d9f06a71cc4710d4507903

.github/workflows/signature-assistant.yml

• scratchfoundation/scratch-agreements main
• contributor-assistant/github-action v2.6.1@ca4a40a7d1004f18d9960b404b97e5f30a505a08

.github/workflows/update-i18n.yml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-node v6@2028fbc5c25fe9cf00d9f06a71cc4710d4507903

npm

package.json

• @commitlint/cli 17.8.1
• @commitlint/config-conventional 17.8.1
• cross-env 7.0.3
• globals 16.5.0
• husky 8.0.3
• npm 10.9.4
• ts-node 10.9.2

packages/scratch-gui/package.json

• @mediapipe/face_detection 0.4.1646425229
• @microbit/microbit-universal-hex 0.2.2
• @radix-ui/react-context-menu 2.2.16
• @tensorflow-models/face-detection 1.0.3
• @tensorflow/tfjs 4.22.0
• @testing-library/user-event 14.6.1
• arraybuffer-loader 1.0.8
• autoprefixer 9.8.8
• balance-text 3.3.1
• base64-loader 1.0.0
• bowser 1.9.4
• classnames 2.5.1
• computed-style-to-inline-style 3.0.0
• cookie 0.6.0
• copy-webpack-plugin 6.4.1
• core-js 2.6.12
• css-loader 5.2.7
• dapjs 2.3.0
• driver.js 1.4.0
• es6-object-assign 1.1.0
• fastestsmallesttextencoderdecoder 1.0.22
• get-float-time-domain-data 0.1.0
• get-user-media-promise 1.1.4
• immutable 3.8.2
• intl 1.2.5
• js-base64 2.6.4
• keymirror 0.1.1
• lodash.bindall 4.4.0
• lodash.debounce 4.0.8
• lodash.defaultsdeep 4.6.1
• lodash.omit 4.5.0
• lodash.throttle 4.1.1
• minilog 3.1.0
• omggif 1.0.10
• papaparse 5.5.3
• postcss-import 12.0.1
• postcss-loader 4.3.0
• postcss-simple-vars 5.0.2
• prop-types 15.8.1
• query-string 5.1.1
• raw-loader 4.0.2
• react-draggable 3.3.2
• react-ga 3.3.1
• react-intl 6.8.9
• react-modal 3.16.3
• react-popover 0.5.10
• react-redux 8.1.3
• react-responsive 9.0.2
• react-style-proptype 3.2.2
• react-tabs 5.2.0
• react-tooltip 4.5.1
• react-virtualized 9.22.6
• react-visibility-sensor 5.1.1
• redux-throttle 0.1.1
• scratch-audio 2.0.268
• scratch-blocks 1.3.0
• scratch-l10n 6.1.35
• scratch-paint 4.1.27
• scratch-render-fonts 1.0.252
• scratch-storage 5.0.10
• startaudiocontext 1.2.1
• style-loader 4.0.0
• text-encoding 0.7.0
• to-style 1.3.3
• wav-encoder 1.3.0
• xhr 2.6.0
• @babel/cli 7.28.3
• @babel/core 7.28.5
• @babel/preset-env 7.28.5
• @babel/preset-react 7.28.5
• @testing-library/jest-dom 5.17.0
• @testing-library/react 14.3.1
• @types/jest 25.2.3
• @types/prop-types 15.7.15
• @types/react-modal 3.16.3
• babel-core 7.0.0-bridge.0
• babel-loader 9.2.1
• buffer 6.0.3
• cheerio 1.1.2
• cross-env 7.0.3
• eslint 9.39.1
• eslint-config-scratch 12.0.38
• eslint-import-resolver-webpack 0.13.10
• eslint-plugin-import 2.32.0
• eslint-plugin-react 7.37.5
• file-loader 6.2.0
• gh-pages 3.2.3
• html-webpack-plugin 5.6.5
• jest 29.7.0
• jest-environment-jsdom 29.7.0
• jest-junit 7.0.0
• mkdirp 1.0.4
• raf 3.4.1
• react-test-renderer 18.3.1
• redux-mock-store 1.5.5
• rimraf 2.7.1
• scratch-semantic-release-config 4.0.0
• scratch-webpack-configuration 3.1.0
• selenium-webdriver 3.6.0
• semantic-release 19.0.5
• stream-browserify 3.0.0
• ts-jest 29.4.6
• ts-loader 9.5.4
• url-loader 4.1.1
• web-audio-test-api 0.5.2
• webpack 5.103.0
• webpack-cli 5.1.4
• webpack-dev-server 5.2.2
• yauzl 3.2.0
• react ^18.0.0
• react-dom ^18.0.0
• react-redux ^8.0.0
• redux ^4.0.0

packages/scratch-render/package.json

• grapheme-breaker 0.3.2
• hull.js 0.2.10
• ify-loader 1.1.0
• linebreak 0.3.0
• minilog 3.1.0
• raw-loader 0.5.1
• twgl.js 4.24.0
• @babel/core 7.28.5
• @babel/polyfill 7.12.1
• @babel/preset-env 7.28.5
• babel-loader 9.2.1
• copy-webpack-plugin 6.4.1
• docdash 0.4.0
• eslint 9.39.1
• eslint-config-scratch 12.0.38
• gh-pages 1.2.0
• globals 16.5.0
• html-webpack-plugin 5.6.5
• jsdoc 3.6.11
• playwright-chromium 1.57.0
• scratch-render-fonts 1.0.252
• scratch-semantic-release-config 4.0.0
• scratch-storage 5.0.10
• scratch-webpack-configuration 3.1.0
• semantic-release 19.0.5
• tap 21.5.0
• terser-webpack-plugin 5.3.14
• webpack 5.103.0
• webpack-cli 5.1.4
• webpack-dev-server 5.2.2
• scratch-render-fonts ^1.0.0

packages/scratch-svg-renderer/package.json

• base64-js 1.5.1
• base64-loader 1.0.0
• css-tree 1.1.3
• fastestsmallesttextencoderdecoder 1.0.22
• isomorphic-dompurify 2.26.0
• minilog 3.1.0
• transformation-matrix 1.15.3
• @babel/core 7.28.5
• @babel/preset-env 7.28.5
• babel-loader 9.2.1
• copy-webpack-plugin 6.4.1
• eslint 9.39.1
• eslint-config-scratch 12.0.38
• globals 16.5.0
• jsdom 13.2.0
• mkdirp 2.1.6
• rimraf 3.0.2
• scratch-render-fonts 1.0.252
• scratch-semantic-release-config 4.0.0
• scratch-webpack-configuration 3.1.0
• semantic-release 19.0.5
• tap 21.5.0
• webpack 5.103.0
• webpack-cli 5.1.4
• webpack-dev-server 5.2.2
• xmldom 0.1.31
• scratch-render-fonts ^1.0.0

packages/scratch-vm/package.json

• @vernier/godirect 1.8.3
• arraybuffer-loader 1.0.8
• atob 2.1.2
• btoa 1.2.1
• canvas-toBlob 1.0.0
• decode-html 2.0.0
• diff-match-patch 1.0.5
• format-message 6.2.4
• htmlparser2 3.10.1
• immutable 3.8.2
• jszip 3.10.1
• minilog 3.1.0
• scratch-audio 2.0.268
• scratch-parser 6.0.0
• scratch-sb1-converter 2.0.279
• scratch-storage 5.0.10
• scratch-translate-extension-languages 1.0.7
• text-encoding 0.7.0
• uuid 8.3.2
• web-worker 1.3.0
• @babel/core 7.28.5
• @babel/preset-env 7.28.5
• adm-zip 0.4.11
• babel-loader 9.2.1
• callsite 1.0.0
• copy-webpack-plugin 6.4.1
• docdash 1.2.0
• eslint 9.39.1
• eslint-config-scratch 12.0.38
• expose-loader 1.0.3
• file-loader 6.2.0
• format-message-cli 6.2.4
• globals 16.5.0
• in-publish 2.0.1
• js-md5 0.7.3
• jsdoc 3.6.11
• pngjs 3.4.0
• scratch-blocks 1.3.0
• scratch-l10n 6.1.35
• scratch-render-fonts 1.0.252
• scratch-semantic-release-config 4.0.0
• scratch-webpack-configuration 3.1.0
• script-loader 0.7.2
• semantic-release 19.0.5
• stats.js 0.17.0
• tap 21.5.0
• webpack 5.103.0
• webpack-cli 4.10.0
• webpack-dev-server 5.2.2

packages/task-herder/package.json

• p-limit 7.2.0
• @vitest/coverage-v8 4.0.15
• eslint 9.39.1
• eslint-config-scratch 12.0.38
• prettier 3.7.3
• typescript 5.9.3
• unplugin-dts 1.0.0-beta.6
• vite 7.2.9
• vitest 4.0.15
• vite 7.2.9

nvm

.nvmrc

• node 20.19.6

packages/scratch-gui/.nvmrc

• node 20.19.6

packages/scratch-render/.nvmrc

• node 20.19.6

packages/scratch-svg-renderer/.nvmrc

• node 20.19.6

packages/scratch-vm/.nvmrc

• node 20.19.6

renovate-config-presets

renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository

[ampelectrecuted]

there is a dependency dashboard on this repo now?

[supervoidcoder]

there is a dependency dashboard on this repo now?

well I guess they gotta upgrade their dependencies, every time I run npm run build in my scratch mod, there's literally like 20 warns about deprecated packages!
It doesn't seem to affect performance or usability, but I guess it is a good idea to always upgrade.

[cwillisf]

We use a tool called Renovate to help our small team keep up with the constant dependency updates that come with the Node/NPM ecosystem. It's currently configured to automatically merge minor and patch updates if tests pass, so the ones listed here are generally major updates or ones where the tests didn't pass. Every once in a while, I'll go through and check if any of these are either a) easy to update or b) important enough to update even though it's not easy. If something in category (b) is important to you, I'm happy to consider a pull request. Thank you!