Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	@types/bcryptjs
npm	@types/faker
npm	@types/mime
npm	faker
npm	lodash.get
npm	lodash.isequal
npm	lodash.omit

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• chore(deps): replace dependency faker with @faker-js/faker
• chore(deps): update dependency @tanstack/react-virtual to v3.13.12
• chore(deps): update dependency react-github-calendar to v4.5.9
• chore(deps): update dependency swr to v2.3.4
• chore(deps): update dependency ws to v8.18.3
• fix(deps): update dependency express-rate-limit to v7.5.1
• fix(deps): update dependency js-sha256 to v0.11.1
• fix(deps): update dependency mime to v4.0.7
• fix(deps): update dependency nodemailer to v6.10.1
• fix(deps): update dependency pg to v8.16.3
• fix(deps): update dependency serve-favicon to v2.5.1
• fix(deps): update dependency tldts to v7.0.10
• chore(deps): update dependency @babel/core to v7.28.0
• chore(deps): update dependency @swc/core to v1.12.9
• chore(deps): update dependency @testing-library/react to v16.3.0
• chore(deps): update dependency @types/node to v22.16.0
• chore(deps): update dependency @uiw/codemirror-theme-duotone to v4.24.0
• chore(deps): update dependency @uiw/react-codemirror to v4.24.0
• chore(deps): update dependency @vitejs/plugin-react to v4.6.0
• chore(deps): update dependency concurrently to v9.2.0
• chore(deps): update dependency countries-and-timezones to v3.8.0
• chore(deps): update dependency cypress to v14.5.1
• chore(deps): update dependency lint-staged to v15.5.2
• chore(deps): update dependency msw to v2.10.3
• chore(deps): update dependency orval to v7.10.0
• chore(deps): update dependency python to 3.13
• chore(deps): update dependency sass to v1.89.2
• chore(deps): update dependency supertest to v7.1.1
• chore(deps): update dpage/pgadmin4 docker tag to v9.5
• chore(deps): update material-ui monorepo (@mui/icons-material, @mui/lab, @mui/material, @mui/x-date-pickers)
• chore(deps): update node.js to v22.17.0 (node, @types/node)
• chore(deps): update vitest monorepo to v3.2.4 (@vitest/coverage-v8, @vitest/ui, vite-node, vitest)
• fix(deps): update dependency helmet to v8.1.0
• fix(deps): update dependency sass to v1.89.2
• fix(deps): update docusaurus monorepo to v3.8.1 (@docusaurus/core, @docusaurus/module-type-aliases, @docusaurus/plugin-client-redirects, @docusaurus/plugin-content-docs, @docusaurus/plugin-google-analytics, @docusaurus/preset-classic, @docusaurus/remark-plugin-npm2yarn, @docusaurus/theme-common, @docusaurus/theme-mermaid, @docusaurus/types, @docusaurus/utils, @docusaurus/utils-validation)
• chore(deps): update actions/setup-python action to v5
• chore(deps): update dependency @apidevtools/swagger-parser to v12
• chore(deps): update dependency @biomejs/biome to v2
• chore(deps): update dependency @cyclonedx/yarn-plugin-cyclonedx to v3
• chore(deps): update dependency @types/jest to v30
• chore(deps): update dependency brace-expansion to v4
• chore(deps): update dependency lint-staged to v16
• fix(deps): update dependency nodemailer to v7
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

These updates await pending status checks. To force their creation now, click the checkbox below.

• chore(deps): update dependency @fast-check/vitest to v0.2.2
• chore(deps): update dependency superagent to v10.2.2

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update emotion monorepo (@emotion/react, @emotion/styled)
• chore(deps): update aws-actions/configure-aws-credentials action to v4
• chore(deps): update dependency path-to-regexp to v8
• chore(deps): update dependency react-error-boundary to v6
• chore(deps): update dependency vanilla-jsoneditor to v3
• chore(deps): update dependency vite to v7
• chore(deps): update material-ui monorepo (major) (@mui/icons-material, @mui/material, @mui/x-date-pickers)
• fix(deps): update dependency date-fns to v4
• fix(deps): update dependency express to v5 (express, @types/express)
• fix(deps): update dependency json-schema-to-ts to v3
• fix(deps): update dependency normalize-url to v8
• fix(deps): update dependency prom-client to v15
• fix(deps): update dependency slug to v11
• fix(deps): update react monorepo to v19 (major) (@types/react, @types/react-dom, react, react-dom, react-test-renderer)
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• chore(deps): update dependency @types/react-test-renderer to v19
• chore(deps): update dependency @types/uuid to v10
• chore(deps): update dependency ansi-regex to v6
• chore(deps): update dependency chart.js to v4
• chore(deps): update dependency chartjs-plugin-annotation to v3
• chore(deps): update dependency date-fns-tz to v3
• chore(deps): update dependency faker to v6 (faker, @types/faker)
• chore(deps): update dependency fast-check to v4
• chore(deps): update dependency http-proxy-middleware to v3
• chore(deps): update dependency immer to v10
• chore(deps): update dependency jsdom to v26
• chore(deps): update dependency react-chartjs-2 to v5
• chore(deps): update dependency react-markdown to v10
• chore(deps): update dependency tough-cookie to v5
• chore(deps): update dependency vite-plugin-svgr to v4
• chore(deps): update dependency vite-tsconfig-paths to v5
• chore(deps): update dorny/test-reporter action to v2
• chore(deps): update google-github-actions/auth action to v2
• chore(deps): update peter-evans/create-issue-from-file action to v5
• chore(deps): update postgres docker tag to v17
• chore(deps): update toshimaru/auto-author-assign action to v2
• fix(deps): update dependency bcryptjs to v3 (bcryptjs, @types/bcryptjs)

Detected dependencies

docker-compose

.github/docker-compose.test.yml

• postgres 16

docker-compose-enterprise.yml

• postgres 15

docker-compose.yml

• postgres 15

scripts/docker-compose.yml

• dpage/pgadmin4 9.4

test-migrations/docker-compose.yml

• postgres 16

dockerfile

Dockerfile

• node 22.15.1-alpine3.21
• node 22.15.1-alpine3.21

github-actions

.github/workflows/add-to-project.yml

.github/workflows/ai-flag-cleanup-pr.yml

• actions/create-github-app-token v2
• actions/checkout v4
• actions/github-script v7
• actions/github-script v7
• actions/checkout v4
• actions/setup-python v4
• actions/github-script v7
• python 3.12

.github/workflows/auto-assign-pr-author.yaml

• toshimaru/auto-author-assign v1.6.2

.github/workflows/build.yaml

• actions/checkout v4
• actions/setup-node v4
• node 22.x

.github/workflows/build_coverage.yaml

• actions/checkout v4
• actions/setup-node v4
• coverallsapp/github-action v2
• node 22.x

.github/workflows/build_doc_prs.yaml

• actions/checkout v4

.github/workflows/build_frontend_prs.yml

• actions/checkout v4
• actions/setup-node v4
• node 22.x

.github/workflows/build_prs_jest_report.yaml

• actions/checkout v4
• actions/setup-node v4
• davelosert/vitest-coverage-report-action v2
• node 22.x

.github/workflows/check_links.yaml

• actions/checkout v4
• actions/cache v4
• lycheeverse/lychee-action v2
• micalevisk/last-issue-action v2
• peter-evans/create-issue-from-file v4

.github/workflows/codeql-analysis.yml

• actions/checkout v4
• github/codeql-action v3
• github/codeql-action v3
• github/codeql-action v3

.github/workflows/core-feature-alert.yml

• actions/github-script v7
• actions/github-script v7

.github/workflows/dependency-review.yml

• actions/checkout v4
• actions/dependency-review-action v4

.github/workflows/docker_publish.yaml

• actions/checkout v4
• actions/checkout v4
• aws-actions/configure-aws-credentials v4
• aws-actions/amazon-ecr-login v2
• docker/setup-qemu-action v3
• docker/setup-buildx-action v3
• docker/metadata-action v5
• docker/login-action v3
• docker/build-push-action v6

.github/workflows/e2e.frontend.yaml

• actions/checkout v4
• cypress-io/github-action v6

.github/workflows/flag-no-response.yaml

• lee-dohm/no-response v0.5.0

.github/workflows/gitar-duet-action.yml

• actions/checkout v4
• actions/setup-node v4
• gitarcode/gitar-duet-action v1
• node 22.x

.github/workflows/gradual-strict-null-checks.yml

• actions/checkout v4
• actions/checkout v4
• actions/setup-node v4
• node 22.x

.github/workflows/hypermod.yml

• actions/checkout v4
• hypermod-io/action v1

.github/workflows/notify_enterprise.yaml

• actions/checkout v4
• actions/setup-node v4
• actions/github-script v7
• aws-actions/configure-aws-credentials v2
• node 22.x

.github/workflows/openapi-diff.yaml

• actions/checkout v4
• actions/upload-artifact v4
• actions/checkout v4
• actions/setup-node v4
• actions/upload-artifact v4
• actions/download-artifact v4
• actions/download-artifact v4
• actions/github-script v7
• node 22.x

.github/workflows/pr_add_test_results.yaml

• dorny/test-reporter v1

.github/workflows/publish-new-version.yaml

• actions/checkout v4
• kenji-miyake/setup-git-cliff v2
• actions/setup-node v4
• actions/checkout v4
• actions/setup-node v4
• softprops/action-gh-release v2
• node 22.x

.github/workflows/release.yaml

• actions/checkout v4
• actions/setup-node v4
• aws-actions/configure-aws-credentials v2
• node 22.x

.github/workflows/reset_heroku.yml

• actions/checkout v4
• akhileshns/heroku-deploy v3.14.15

.github/workflows/update_contributors.yaml

• actions/checkout v4
• actions/setup-node v4
• aws-actions/configure-aws-credentials v2
• node 22.x

.github/workflows/update_version_for_version_checker.yml

• google-github-actions/auth v1
• Unleash/update-version-action v0

.github/workflows/validate-migrations.yaml

• actions/checkout v4
• actions/setup-node v4
• cypress-io/github-action v6
• node 22.x

mise

frontend/mise.toml

• node 22

nodenv

.node-version

• node 22.15.0

npm

frontend/package.json

• chartjs-plugin-datalabels ^2.2.0
• json-2-csv ^5.5.5
• json-diff-react ^1.0.1
• @biomejs/biome 1.9.4
• @codemirror/lang-json 6.0.2
• @emotion/react 11.11.4
• @emotion/styled 11.11.5
• @mui/icons-material 5.15.3
• @mui/lab 5.0.0-alpha.159
• @mui/material 5.15.3
• @mui/x-date-pickers ^7.0.0
• @tanstack/react-table ^8.10.7
• @tanstack/react-virtual ^3.11.3
• @testing-library/dom 10.4.0
• @testing-library/jest-dom 6.6.3
• @testing-library/react 16.2.0
• @testing-library/user-event 14.6.1
• @types/css-mediaquery ^0.1.4
• @types/debounce 1.2.4
• @types/deep-diff 1.0.5
• @types/jest 29.5.14
• @types/lodash.clonedeep 4.5.9
• @types/lodash.isequal ^4.5.8
• @types/lodash.mapvalues ^4.6.9
• @types/lodash.omit 4.5.9
• @types/node ^22.0.0
• @types/react 18.3.23
• @types/react-dom 18.3.7
• @types/react-grid-layout ^1.3.5
• @types/react-router-dom 5.3.3
• @types/react-table 7.7.20
• @types/react-test-renderer 18.3.1
• @types/semver 7.7.0
• @types/uuid ^9.0.0
• @uiw/codemirror-theme-duotone 4.23.13
• @uiw/react-codemirror 4.23.13
• @unleash/proxy-client-react ^5.0.0
• @vitejs/plugin-react 4.3.4
• cartesian ^1.0.1
• chart.js 3.9.1
• chartjs-adapter-date-fns 3.0.0
• chartjs-plugin-annotation 2.2.1
• classnames 2.5.1
• copy-to-clipboard 3.3.3
• countries-and-timezones ^3.4.0
• css-mediaquery ^0.1.2
• cypress 14.1.0
• cypress-vite ^1.4.0
• date-fns 2.30.0
• date-fns-tz ^2.0.0
• debounce 2.2.0
• deep-diff 1.0.2
• dequal 2.0.3
• fast-json-patch 3.1.1
• http-proxy-middleware 2.0.9
• immer 9.0.21
• jsdom 25.0.1
• lodash.clonedeep 4.5.0
• lodash.isequal ^4.5.0
• lodash.mapvalues ^4.6.0
• lodash.omit 4.5.0
• millify ^6.0.0
• msw 2.7.3
• orval ^7.9.0
• pkginfo 0.4.1
• plausible-tracker 0.3.9
• prop-types 15.8.1
• react 18.3.1
• react-archer 4.4.0
• react-chartjs-2 4.3.1
• react-confetti ^6.1.0
• react-dom 18.3.1
• react-dropzone 14.3.8
• react-error-boundary 3.1.4
• react-github-calendar ^4.5.1
• react-grid-layout ^1.5.2
• react-hooks-global-state 2.1.0
• react-joyride ^2.5.3
• react-markdown ^8.0.4
• react-table 7.8.0
• react-test-renderer 18.3.1
• sass 1.85.1
• semver 7.7.2
• swr 2.3.3
• tss-react 4.9.18
• typescript 5.8.3
• unleash-proxy-client ^3.7.3
• use-query-params ^2.2.1
• vanilla-jsoneditor ^0.23.0
• vite 5.4.19
• vite-plugin-env-compatible 2.0.1
• vite-plugin-svgr 3.3.0
• vite-tsconfig-paths 4.3.2
• vitest 3.0.8
• whatwg-fetch 3.6.20
• node >=18
• @codemirror/state 6.5.2
• @xmldom/xmldom ^0.9.0
• jsonpath-plus 10.3.0
• json5 ^2.2.2
• vite 5.4.19
• semver 7.7.2
• ws ^8.18.0
• @types/react 18.3.23
• yarn 4.9.2

package.json

• @slack/web-api ^7.9.1
• @wesleytodd/openapi ^1.1.0
• ajv ^8.17.1
• ajv-formats ^3.0.1
• async ^3.2.4
• bcryptjs ^2.4.3
• compression ^1.7.4
• connect-session-knex ^5.0.0
• cookie-parser ^1.4.6
• cookie-session ^2.0.0-rc.1
• cors ^2.8.5
• date-fns ^2.30.0
• db-migrate 0.11.14
• db-migrate-pg 1.5.2
• db-migrate-shared 1.2.0
• deep-object-diff ^1.1.9
• deepmerge ^4.3.1
• errorhandler ^1.5.1
• express ^4.21.2
• express-rate-limit ^7.3.1
• express-session ^1.17.3
• fast-json-patch ^3.1.0
• hash-sum ^2.0.0
• helmet ^8.0.0
• http-errors ^2.0.0
• hyperloglog-lite ^1.0.2
• ip-address ^10.0.1
• joi ^17.13.3
• js-sha256 ^0.11.0
• js-yaml ^4.1.0
• json-diff ^1.0.6
• json-schema-to-ts 2.12.0
• json2csv ^5.0.7
• knex ^3.1.0
• ky ^1.8.1
• lodash.get ^4.4.2
• lodash.groupby ^4.6.0
• lodash.sortby ^4.7.0
• log4js ^6.0.0
• memoizee ^0.4.17
• mime ^4.0.4
• murmurhash3js ^3.0.1
• mustache ^4.1.0
• nodemailer ^6.9.9
• normalize-url ^6.1.0
• openapi-types ^12.1.3
• owasp-password-strength-test ^1.3.0
• parse-database-url ^0.3.0
• pg ^8.12.0
• pg-connection-string ^2.5.0
• pkginfo ^0.4.1
• prom-client ^14.0.0
• sanitize-filename ^1.6.3
• semver ^7.6.3
• serve-favicon ^2.5.0
• slug ^9.0.0
• stoppable ^1.1.0
• tldts 7.0.6
• ts-toolbelt ^9.6.0
• type-is ^2.0.0
• ulidx ^2.4.1
• unleash-client ^6.7.0-beta.2
• uuid ^11.0.0
• @apidevtools/swagger-parser 10.1.1
• @babel/core 7.26.10
• @biomejs/biome ^1.9.4
• @cyclonedx/yarn-plugin-cyclonedx ^2.0.0
• @fast-check/vitest ^0.2.1
• @swc/core 1.11.31
• @types/bcryptjs 2.4.6
• @types/cors 2.8.19
• @types/express 4.17.23
• @types/express-session 1.18.2
• @types/faker 5.5.9
• @types/hash-sum ^1.0.0
• @types/js-yaml 4.0.9
• @types/lodash.groupby 4.6.9
• @types/lodash.isequal ^4.5.8
• @types/memoizee 0.4.12
• @types/mime 4.0.0
• @types/murmurhash3js ^3.0.7
• @types/mustache ^4.2.5
• @types/node 22.15.18
• @types/nodemailer 6.4.17
• @types/owasp-password-strength-test 1.3.2
• @types/pg 8.15.4
• @types/semver 7.7.0
• @types/slug ^5.0.8
• @types/stoppable 1.1.3
• @types/supertest 6.0.3
• @types/type-is 1.6.7
• @types/uuid 9.0.8
• @vitest/coverage-v8 ^3.1.3
• @vitest/ui ^3.1.3
• concurrently ^9.0.0
• copyfiles 2.4.1
• coveralls ^3.1.1
• del-cli 6.0.0
• faker 5.5.3
• fast-check 3.23.2
• fetch-mock ^12.0.0
• husky ^9.0.11
• lint-staged 15.4.3
• nock ^14.0.5
• openapi-enforcer 1.23.0
• proxyquire 2.1.3
• source-map-support 0.5.21
• superagent 10.2.1
• supertest 7.0.0
• ts-node 10.9.2
• tsc-watch 7.1.1
• typescript 5.8.3
• vite-node ^3.1.3
• vitest ^3.1.3
• wait-on ^8.0.0
• node >=20
• async ^3.2.4
• es5-ext 0.10.64
• node-forge ^1.0.0
• set-value ^4.0.1
• ansi-regex ^5.0.1
• ssh2 ^1.4.0
• json-schema ^0.4.0
• ip ^2.0.1
• tar 7.4.3
• semver ^7.6.2
• tough-cookie 4.1.4
• brace-expansion 2.0.2
• path-to-regexp 6.3.0
• path-to-regexp 1.9.0
• yarn 4.9.2

website/package.json

• @docusaurus/core ^3.7.0
• @docusaurus/plugin-client-redirects ^3.7.0
• @docusaurus/plugin-content-docs ^3.7.0
• @docusaurus/plugin-google-analytics ^3.7.0
• @docusaurus/preset-classic ^3.7.0
• @docusaurus/remark-plugin-npm2yarn 3.7.0
• @docusaurus/theme-common ^3.7.0
• @docusaurus/theme-mermaid ^3.7.0
• @docusaurus/utils ^3.7.0
• @docusaurus/utils-validation ^3.7.0
• @mdx-js/react ^3.1.0
• docusaurus-plugin-remote-content ^4.0.0
• docusaurus-plugin-sass ^0.2.6
• git-url-parse ^16.0.0
• prism-react-renderer ^2.4.0
• prism-svelte ^0.5.0
• react ^18.3.1
• react-dom ^18.3.1
• sass ^1.85.1
• @docusaurus/module-type-aliases ^3.7.0
• @docusaurus/types ^3.7.0
• @tsconfig/docusaurus 2.0.3
• @types/react ^18.3.12
• typescript 5.8.3
• node >=22
• http-proxy-middleware 3.0.5
• path-to-regexp 1.9.0
• yarn 4.9.2

nvm

.nvmrc

• node 22

frontend/.nvmrc

• node 22

website/.nvmrc

• node 22

---

• Check this box to trigger a request for Renovate to run again on this repository