Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update dependency tailwindcss to v3.4.19
• fix(deps): update all non-major dependencies (@biomejs/biome, cron, deadpool-redis, imagesize, infer, just, lefthook, mysql, nostr, pnpm, quay.io/keycloak/keycloak, rand, redis, reqwest, rustup, s3, tokio-tungstenite, toml, typescript, windows-sys)
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/upload-artifact action to v7
• chore(deps): update dependency @vitejs/plugin-react to v6
• chore(deps): update dependency tailwindcss to v4
• chore(deps): update dependency vite to v8
• chore(deps): update mysql docker tag to v9
• chore(deps): update redis docker tag to v8
• chore(deps): update rust crate jsonwebtoken to v10
• chore(deps): update rust crate redis to v1
• chore(deps): update typesense/typesense docker tag to v30
• fix(deps): update rust crate evalexpr to v13
• fix(deps): update rust crate toml to v1
• 🔐 Create all awaiting schedule PRs at once 🔐

Detected Dependencies

cargo (17)

Cargo.toml (33)

• tokio 1
• tokio-util 0.7
• axum 0.8
• tower 0.5
• tower-http 0.6
• sqlx 0.8
• redis 0.27 → [Updates: 0.32, 1.0]
• deadpool-redis 0.18 → [Updates: 0.23]
• nostr 0.36 → [Updates: 0.44]
• serde 1
• serde_json 1
• serde_yaml 0.9
• evalexpr 11 → [Updates: 13]
• cron 0.12 → [Updates: 0.15]
• tracing 0.1
• tracing-subscriber 0.3
• thiserror 2
• anyhow 1
• uuid 1
• chrono 0.4
• reqwest 0.12 → [Updates: 0.13]
• sha2 0.10
• hex 0.4
• hmac 0.12
• rand 0.8 → [Updates: 0.10]
• dashmap 6
• moka 0.12
• jsonwebtoken 9 → [Updates: 10]
• futures-util 0.3
• tokio-tungstenite 0.26 → [Updates: 0.28]
• url 2
• rmcp 1.1.0
• schemars 1

crates/sprout-acp/Cargo.toml (2)

• clap 4
• toml 0.8 → [Updates: 0.9, 1.0]

crates/sprout-admin/Cargo.toml (1)

• clap 4

crates/sprout-audit/Cargo.toml

crates/sprout-auth/Cargo.toml (1)

• subtle 2

crates/sprout-core/Cargo.toml

crates/sprout-db/Cargo.toml

crates/sprout-huddle/Cargo.toml

crates/sprout-mcp/Cargo.toml

crates/sprout-media/Cargo.toml (6)

• s3 0.35 → [Updates: 0.37]
• infer 0.16 → [Updates: 0.19]
• image 0.25
• blurhash 0.2
• imagesize 0.13 → [Updates: 0.14]
• bytes 1

crates/sprout-proxy/Cargo.toml

crates/sprout-pubsub/Cargo.toml

crates/sprout-relay/Cargo.toml (3)

• base64 0.22
• bytes 1
• infer 0.16 → [Updates: 0.19]

crates/sprout-search/Cargo.toml

crates/sprout-test-client/Cargo.toml (1)

• base64 0.22

crates/sprout-workflow/Cargo.toml (2)

• evalexpr 11 → [Updates: 13]
• cron 0.12 → [Updates: 0.15]

desktop/src-tauri/Cargo.toml (19)

• tauri 2
• tauri-plugin-opener 2
• tauri-plugin-window-state 2
• tauri-plugin-websocket 2
• tauri-plugin-dialog 2
• infer 0.16 → [Updates: 0.19]
• hex 0.4
• tokio 1
• serde 1
• serde_json 1
• nostr 0.37 → [Updates: 0.44]
• reqwest 0.12 → [Updates: 0.13]
• url 2
• base64 0.22
• sha2 0.10
• chrono 0.4
• tauri-build 2
• libc 0.2
• windows-sys 0.59 → [Updates: 0.61]

docker-compose (1)

docker-compose.yml (4)

• mysql 8.0 → [Updates: 8.4, 9.6]
• redis 7-alpine → [Updates: 8-alpine]
• typesense/typesense 27.1 → [Updates: 30.1]
• quay.io/keycloak/keycloak 26.0 → [Updates: 26.5]

github-actions (1)

.github/workflows/ci.yml (16)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• cashapp/activate-hermit v1@e49f5cb4dd64ff0b0b659d1d8df499595451155a

hermit (1)

bin/hermit (6)

• cargo-deny 0.19.0
• just 1.46.0 → [Updates: 1.47.1]
• lefthook 2.1.3 → [Updates: 2.1.4]
• node 24.14.0
• pnpm 10.31.0 → [Updates: 10.32.1]
• rustup 1.28.2 → [Updates: 1.29.0]

npm (1)

desktop/package.json (34)

• @radix-ui/react-dialog ^1.1.15
• @radix-ui/react-dropdown-menu ^2.1.16
• @radix-ui/react-popover ^1.1.15
• @radix-ui/react-separator ^1.1.8
• @radix-ui/react-slot ^1.2.4
• @radix-ui/react-tooltip ^1.2.8
• @tanstack/react-query ^5.90.21
• @tauri-apps/api ^2
• @tauri-apps/plugin-opener ^2
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• lucide-react ^0.577.0
• react ^19.1.0
• react-diff-view ^3.3.2
• react-dom ^19.1.0
• react-markdown ^10.1.0
• remark-breaks ^4.0.0
• remark-gfm ^4.0.1
• tailwind-merge ^3.5.0
• @biomejs/biome ^2.4.6 → [Updates: ^2.4.6]
• @noble/hashes ^2.0.1
• @playwright/test ^1.58.2
• @tauri-apps/cli ^2
• @types/react ^19.1.8
• @types/react-dom ^19.1.6
• @vitejs/plugin-react ^4.6.0 → [Updates: ^6.0.0]
• autoprefixer ^10.4.27
• nostr-tools ^2.23.3
• postcss ^8.5.8
• tailwindcss ^3.4.17 → [Updates: ^3.4.17, ^4.0.0]
• tailwindcss-animate ^1.0.7
• typescript ~5.8.3 → [Updates: ~5.9.0]
• vite ^7.0.4 → [Updates: ^8.0.0]
• pnpm 10.12.1 → [Updates: 10.32.1]

---

• Check this box to trigger a request for Renovate to run again on this repository