Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
npm	@cloudflare/next-on-pages

Abandoned Dependencies

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (15)

Datasource	Package	Last Updated
github-actions	dorny/paths-filter	2024-03-02
github-actions	ibiqlik/action-yamllint	2022-10-14
github-actions	pre-commit/action	2024-02-07
npm	@semantic-release/changelog	2023-03-23
npm	@semantic-release/git	2021-10-30
npm	class-variance-authority	2024-11-26
npm	clsx	2024-04-23
npm	commitizen	2024-09-27
npm	semantic-release-major-tag	2023-05-29
npm	tailwindcss-animate	2023-08-28
pep621	docker	2024-05-23
pep621	irc	2024-07-14
pep621	irc-toolkit	2024-11-27
pep621	pytest-github-actions-annotate-failures	2025-01-17

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): pin dependencies (@commitlint/cli, @commitlint/config-conventional, @commitlint/cz-commitlint, @semantic-release/changelog, @semantic-release/exec, @semantic-release/git, @tailwindcss/postcss, commitizen, inquirer, markdownlint-cli, next-validate-link, postcss, semantic-release, semantic-release-major-tag, tailwindcss, tsx, typescript, wrangler)
• chore(deps): update docker (alpine, amir20/dozzle, composer, coturn/coturn, debian, nginx, node, trafex/php-nginx)
• chore(deps): update patch (eslint-config-next, tailwind-merge)
• chore(deps): update minor (@biomejs/biome, pnpm, ultracite)
• fix(deps): update dependency lucide-react to ^0.575.0
• chore(deps): update amir20/dozzle docker tag to v9
• chore(deps): update dependency eslint to v9
• chore(deps): update dependency eslint to v10
• chore(deps): update dependency eslint-config-next to v15
• chore(deps): update dependency eslint-config-next to v16
• chore(deps): update dependency tailwind-merge to v3
• chore(deps): update dependency tailwindcss to v4
• chore(deps): update github-actions to v5 (major) (actions/checkout, actions/setup-node)
• chore(deps): update github-actions to v6 (major) (actions/checkout, actions/setup-node, actions/setup-python)
• chore(deps): update major to v19 (major) (react, react-dom)
• chore(deps): update node.js to v24
• chore(deps): update pnpm/action-setup to v4
• chore(deps): lock file maintenance
• chore(deps): update dev to v1.38.1 (basedpyright, ruff)
• chore(deps): pin dependencies (@cloudflare/workers-types, @types/node, @types/react, @types/react-dom)
• chore(deps): update dependency @types/node to v22
• chore(deps): update dependency @types/node to v24
• chore(deps): update types to v19 (major) (@types/react, @types/react-dom)
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update amir20/dozzle docker tag to v10
• chore(deps): update astral-sh/setup-uv to v7

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package pnpm/action-setup).

Files affected: .github/workflows/ci.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency esbuild to ^0.25.0 [security]
• chore(deps): update dependency next to v15 [security]
• chore(deps): update pnpm to v10 [security]
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

29/29 CVEs have Renovate fixes.

Detected Dependencies

docker-compose (2)

compose.yaml (1)

• amir20/dozzle v8 → [Updates: v9, v10, v8]

infra/turn-standalone/compose.yaml (1)

• coturn/coturn latest → [Updates: latest]

dockerfile (7)

apps/atheme/Containerfile (2)

• alpine 3.23@sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375 → [Updates: 3.23]
• alpine 3.23@sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375 → [Updates: 3.23]

apps/bridge/Containerfile (2)

• python 3.12-slim → [Updates: 3.14-slim, 3.12-slim]
• ghcr.io/astral-sh/uv 0.9.18 → [Updates: 0.10.7, 0.9.18]

apps/gamja/Containerfile (1)

• node 22-alpine3.21 → [Updates: 24-alpine3.21, 22-alpine3.21]

apps/prosody/Containerfile (2)

• debian bookworm-slim → [Updates: bookworm-slim]
• debian bookworm-slim → [Updates: bookworm-slim]

apps/unrealircd/Containerfile (2)

• alpine 3.23@sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375 → [Updates: 3.23]
• alpine 3.23@sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375 → [Updates: 3.23]

apps/webpanel/Containerfile (2)

• composer 2 → [Updates: 2]
• trafex/php-nginx 3.10.0 → [Updates: 3.10.0]

infra/nginx/Dockerfile (1)

• nginx 1.27-alpine → [Updates: 1.29-alpine, 1.27-alpine]

github-actions (7)

.github/workflows/bridge-docker.yml (12)

• actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6]
• tj-actions/changed-files v47@24d32ffd492484c1d75e0c0b894501ddb9d30d62
• actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6]
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9
• docker/metadata-action v5@c299e40c65443455700f0fdfc63efafe5b349051
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8
• actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6]
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9
• docker/metadata-action v5@c299e40c65443455700f0fdfc63efafe5b349051
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8

.github/workflows/ci.yml (22)

• actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6]
• dorny/paths-filter v3@de90cc6fb38fc0963ad72b210f1f284cd68cea36
• actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6]
• astral-sh/setup-uv v6@d0cc045d04ccac9d8b7881df0226f9e82c39688e → [Updates: v7]
• actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6]
• astral-sh/setup-uv v6@d0cc045d04ccac9d8b7881df0226f9e82c39688e → [Updates: v7]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v5, v6]
• pnpm/action-setup v3@a3252b78c470c02df07e9d59298aecedc3ccdd6d → [Updates: v4]
• actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v5, v6]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v5, v6]
• pnpm/action-setup v3@a3252b78c470c02df07e9d59298aecedc3ccdd6d → [Updates: v4]
• actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v5, v6]
• actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6]
• pnpm/action-setup v3@a3252b78c470c02df07e9d59298aecedc3ccdd6d → [Updates: v4]
• actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v5, v6]
• astral-sh/setup-uv v6@d0cc045d04ccac9d8b7881df0226f9e82c39688e → [Updates: v7]
• pnpm 9 → [Updates: 10.28.2]
• node 20
• pnpm 9 → [Updates: 10.28.2]
• node 20
• pnpm 10
• node 22

.github/workflows/docker.yml (2)

• actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6]
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f

.github/workflows/lint.yml (7)

• actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6]
• actions/setup-python v5@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v6]
• pre-commit/action v3.0.1@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd
• pre-commit/action v3.0.1@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd
• lunarmodules/luacheck v1@cc089e3f65acdd1ef8716cc73a3eca24a6b845e4
• ibiqlik/action-yamllint v3@2576378a8e339169678f9939646ee3ee325e845c
• python 3.11

.github/workflows/maintenance.yml (2)

• actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6]
• alstr/todo-to-issue-action v5.1.14@64aca8fda7023259aada83ba44ad988c4c443657

.github/workflows/pr-title.yml (1)

• amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50

.github/workflows/security.yml (2)

• actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6]
• gitleaks/gitleaks-action v2@ff98106e4c7b2bc287b24eaf42907196329070c7

npm (4)

apps/docs/package.json (19)

• @types/mdx ^2.0.13
• lucide-react ^0.564.0 → [Updates: ^0.575.0]
• mermaid ^11.12.3
• next 16.1.6
• next-themes ^0.4.6
• react ^19.2.4
• react-dom ^19.2.4
• tailwind-merge ^3.4.1
• @cloudflare/workers-types ^4.20260305.0 → [Updates: 4.20260305.0]
• @tailwindcss/postcss ^4.1.18 → [Updates: 4.2.1]
• @types/node ^25.2.3 → [Updates: 25.3.2, ^25.3.2]
• @types/react ^19.2.14 → [Updates: 19.2.14]
• @types/react-dom ^19.2.3 → [Updates: 19.2.3]
• next-validate-link ^1.6.4 → [Updates: 1.6.4]
• postcss ^8.5.6 → [Updates: 8.5.6]
• tailwindcss ^4.1.18 → [Updates: 4.2.1]
• tsx ^4 → [Updates: 4.21.0]
• typescript ^5.9.3 → [Updates: 5.9.3]
• wrangler ^4.69.0 → [Updates: 4.69.0]

apps/web/package.json (2)

• @biomejs/biome 2.3.13 → [Updates: 2.4.4]
• ultracite 7.1.3 → [Updates: 7.2.3]

package.json (13)

• @commitlint/cli ^20.4.2 → [Updates: 20.4.2]
• @commitlint/config-conventional ^20.4.2 → [Updates: 20.4.2]
• @commitlint/cz-commitlint ^20.4.1 → [Updates: 20.4.1]
• @semantic-release/changelog ^6.0.3 → [Updates: 6.0.3]
• @semantic-release/exec ^7.0.0 → [Updates: 7.1.0]
• @semantic-release/git ^10.0.1 → [Updates: 10.0.1]
• commitizen ^4.3.1 → [Updates: 4.3.1]
• inquirer ^13.3.0 → [Updates: 13.3.0]
• markdownlint-cli ^0.47.0 → [Updates: 0.47.0]
• semantic-release ^25.0.2 → [Updates: 25.0.3]
• semantic-release-major-tag ^0.3.2 → [Updates: 0.3.2]
• pnpm 10.28.2 → [Updates: 10.30.1]
• esbuild ^0.24.0 → [Updates: ^0.25.0]

pnpm-workspace.yaml (18)

• next 14.2.16 → [Updates: 15.5.10]
• react ^18 → [Updates: ^19.0.0]
• react-dom ^18 → [Updates: ^19.0.0]
• typescript ^5
• tailwindcss ^3.4.1 → [Updates: ^4.0.0]
• postcss ^8
• eslint ^8 → [Updates: ^9.0.0, ^10.0.0]
• eslint-config-next 14.2.16 → [Updates: 14.2.35, 15.5.12, 16.1.6]
• @types/node ^20 → [Updates: ^20, ^22.0.0, ^24.0.0]
• @types/react ^18 → [Updates: ^18, ^19.0.0]
• @types/react-dom ^18 → [Updates: ^19.0.0]
• lucide-react ^0.461.0 → [Updates: ^0.575.0]
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• tailwind-merge ^2.5.5 → [Updates: ^2.5.5, ^3.0.0]
• tailwindcss-animate ^1.0.7
• @radix-ui/react-slot ^1.1.0
• @cloudflare/next-on-pages ^1.13.5

pep621 (2)

apps/bridge/pyproject.toml (3)

• python >=3.10
• pydle >=1.1.0
• uvloop >=0.22.1

pyproject.toml (26)

• python >=3.11
• docker >=7.1.0
• pyyaml >=6.0.2
• requests >=2.32.5
• psutil >=5.9.0
• irc >=20.5.0
• irc-toolkit >=0.2.0
• pydle >=1.1.0
• unrealircd-rpc-py >=2.0.0
• websocket-client >=1.0.0
• validate-pyproject >=0.25
• yamlfix >=1.19.0
• pytest >=8.0.0
• pytest-mock >=3.12.0
• pytest-asyncio >=0.23.0
• pytest-xdist >=3.0.0
• pytest-html >=4.0.0
• pytest-timeout >=2.4.0
• pytest-sugar >=1.1.1
• pytest-docker >=3.0.0
• pytest-docker-tools >=3.1.0
• pytest-github-actions-annotate-failures >=0.3.0
• ruff >=0.6.0 → [Updates: >=0.6.0]
• basedpyright >=0.6.0 → [Updates: >=0.6.0]
• pre-commit >=3.0.0
• hypothesis >=6.151.9

---

• Check this box to trigger a request for Renovate to run again on this repository