Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	faker

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update dependency next-intl to v4.13.5
• fix(deps): update dependency nanoid to v3.3.17
• fix(deps): update dependency @oclif/core to v4.13.3
• fix(deps): update dependency argon2 to v0.45.1
• fix(deps): update dependency knex to v3.3.0
• fix(deps): update dependency mysql2 to v3.23.2
• fix(deps): update dependency react-hook-form to v7.84.0
• fix(deps): update dependency react-icons to v5.7.0
• fix(deps): update dependency swr to v2.5.0
• chore(deps): update actions/cache action to v6
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-node action to v7
• chore(deps): update dependency @babel/eslint-parser to v8
• chore(deps): update dependency coveralls-next to v6
• chore(deps): update dependency eslint-plugin-cypress to v6
• chore(deps): update dependency jest to v30
• chore(deps): update dependency typescript to v7
• chore(deps): update dependency uuid to v14
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/metadata-action action to v6
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): update mysql docker tag to v26
• chore(deps): update nextjs monorepo to v16 (@next/bundle-analyzer, @next/eslint-plugin-next)
• fix(deps): update dependency @apollo/server-plugin-response-cache to v5
• fix(deps): update dependency @as-integrations/koa to v2
• fix(deps): update dependency @graphql-tools/utils to v11
• fix(deps): update dependency @koa/router to v15
• fix(deps): update dependency chalk to v6
• fix(deps): update dependency dotenv to v17
• fix(deps): update dependency graphql to v17
• fix(deps): update dependency inquirer to v14
• fix(deps): update dependency js-yaml to v5
• fix(deps): update dependency koa to v3
• fix(deps): update dependency koa-etag to v5
• fix(deps): update dependency koa-pino-logger to v5
• fix(deps): update dependency koa-session to v7
• fix(deps): update dependency nanoid to v6
• fix(deps): update dependency next-seo to v7
• fix(deps): update dependency opentype.js to v2
• fix(deps): update dependency pino to v10
• fix(deps): update dependency rate-limiter-flexible to v11
• fix(deps): update dependency require-environment-variables to v2
• fix(deps): update dependency tailwindcss to v4
• fix(deps): update react monorepo to v19 (react, react-dom)
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Branch Automerge

The following updates await pending status checks before automerging. To abort the branch automerge and create a PR instead, click on a checkbox below.

• fix(deps): update dependency js-yaml to v4.3.1
• chore(deps): update dependency cypress to v15.19.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency next to v15 [security]
• chore(deps): replace dependency faker with @faker-js/faker
• fix(deps): update dependency @oclif/plugin-help to v6.2.56
• chore(deps): update cypress-io/github-action action to v7
• chore(deps): update dependency standard to v17
• fix(deps): update dependency graphql-request to v7
• fix(deps): update dependency hibp to v15
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency faker to v6

Detected Dependencies

docker-compose (4)

docker-compose.e2e-overlay.yml

docker-compose.prod-no-db.yml

docker-compose.prod.yml (1)

• mysql 8.4 → [Updates: 26.7]

docker-compose.yml (1)

• mysql 8.4 → [Updates: 26.7]

dockerfile (1)

Dockerfile (4)

• docker/dockerfile 1
• node 24-alpine
• node 24-alpine
• node 24-alpine

github-actions (2)

.github/workflows/build.yaml (19)

• actions/checkout v6 → [Updates: v7]
• actions/setup-node v4 → [Updates: v7]
• actions/cache v5 → [Updates: v6]
• cypress-io/github-action v6.10.9@f790eee7a50d9505912f50c2095510be7de06aa7 → [Updates: v7.4.1]
• coverallsapp/github-action master
• actions/checkout v6 → [Updates: v7]
• actions/setup-node v4 → [Updates: v7]
• actions/cache v5 → [Updates: v6]
• cypress-io/github-action v6.10.9@f790eee7a50d9505912f50c2095510be7de06aa7 → [Updates: v7.4.1]
• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• docker/setup-buildx-action v3 → [Updates: v4]
• docker/build-push-action v6 → [Updates: v7]
• actions/setup-node v4 → [Updates: v7]
• actions/cache v5 → [Updates: v6]
• cypress-io/github-action v6.10.9@f790eee7a50d9505912f50c2095510be7de06aa7 → [Updates: v7.4.1]
• coverallsapp/github-action master
• node 24.x
• node 24.x

.github/workflows/deploy_docker.yaml (10)

• actions/checkout v6 → [Updates: v7]
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.2.0]
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.6.0]
• docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051 → [Updates: v6.2.0]
• docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7.3.0]
• actions/upload-artifact v4 → [Updates: v7]
• actions/download-artifact v4 → [Updates: v8]
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.2.0]
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.6.0]
• docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051 → [Updates: v6.2.0]

npm (2)

package.json (110)

• @acusti/react-code-input 3.11.0
• @apollo/server ^5.0.0
• @apollo/server-plugin-response-cache ^4.1.3 → [Updates: ^5.0.0]
• @as-integrations/koa ^1.1.1 → [Updates: ^2.0.0]
• @confuser/db-migrate-mysql 2.4.0
• @graphql-tools/schema 10.0.38
• @graphql-tools/utils 10.11.0 → [Updates: 11.2.2]
• @headlessui/react 2.2.10
• @koa/cors ^5.0.0
• @koa/multer ^4.0.0
• @koa/router 13.1.1 → [Updates: 15.7.0]
• @leichtgewicht/ip-codec 2.0.5
• @nateradebaugh/react-datetime 4.6.0
• @nivo/core 0.99.0
• @nivo/line 0.99.0
• @nivo/pie 0.99.0
• @oclif/core 4.11.11 → [Updates: 4.13.3]
• @oclif/plugin-help 6.2.55 → [Updates: 6.2.56]
• @odiffey/discord-markdown ^3.3.0
• @rpldy/upload-button ^1.13.0
• @rpldy/upload-drop-zone ^1.13.0
• @rpldy/upload-paste ^1.13.0
• @rpldy/upload-preview ^1.13.0
• @rpldy/uploady ^1.13.0
• @universemc/react-palette 1.0.3
• argon2 0.44.0 → [Updates: 0.45.1]
• chalk 4.1.2 → [Updates: 6.0.0]
• clsx 2.1.1
• dataloader 2.2.3
• date-fns 4.4.0
• db-migrate 1.0.0-beta.35
• dotenv 16.6.1 → [Updates: 17.4.2]
• edit-dotenv 1.0.4
• es6-dynamic-template 2.0.0
• filesize-parser ^1.5.1
• graphql 16.14.2 → [Updates: 17.0.2]
• graphql-constraint-directive 6.0.0
• graphql-depth-limit 1.1.0
• graphql-parse-resolve-info 4.14.1
• graphql-request 6.1.0 → [Updates: 7.4.0]
• graphql-tag ^2.12.6
• graphql-type-json 0.3.2
• hibp 14.1.3 → [Updates: 15.2.1]
• inquirer 8.2.7 → [Updates: 14.0.2]
• js-yaml 4.3.0 → [Updates: 4.3.1, 5.2.3]
• knex 3.2.10 → [Updates: 3.3.0]
• knex-on-duplicate-update 2.3.3
• koa 2.16.4 → [Updates: 3.2.1]
• koa-bodyparser 4.4.1
• koa-conditional-get 3.0.0
• koa-etag 4.0.0 → [Updates: 5.0.0]
• koa-pino-logger 4.0.0 → [Updates: 5.0.0]
• koa-send 5.0.1
• koa-session 6.4.0 → [Updates: 7.0.2]
• lodash-es 4.18.1
• memoizee 0.4.17
• multer ^2.0.2
• mysql2 3.22.5 → [Updates: 3.23.2]
• nanoid 3.3.16 → [Updates: 3.3.17, 6.0.1]
• next 14.2.35 → [Updates: 15.5.21]
• next-absolute-url 1.2.2
• next-intl ^4.9.1 → [Updates: ^4.9.1]
• next-seo 6.8.0 → [Updates: 7.3.0]
• nextjs-url 1.0.4
• opentype.js 1.3.4 → [Updates: 2.0.0]
• pino 9.14.0 → [Updates: 10.3.1]
• points 3.2.0
• rate-limiter-flexible 5.0.5 → [Updates: 11.2.0]
• react 18.3.1 → [Updates: 19.2.8]
• react-dom 18.3.1 → [Updates: 19.2.8]
• react-favicon 2.0.7
• react-hook-form 7.80.0 → [Updates: 7.84.0]
• react-icons 5.6.0 → [Updates: 5.7.0]
• react-remove-scroll 2.7.2
• react-select 5.10.2
• request-ip 3.3.0
• require-environment-variables 1.2.0 → [Updates: 2.0.0]
• semver 7.8.5
• sharp 0.35.3
• svg-points 6.0.1
• swr 2.4.2 → [Updates: 2.5.0]
• tailwindcss 3.4.19 → [Updates: 4.3.3]
• uuid-parse 1.1.0
• validator 13.15.35
• web-push 3.6.7
• @babel/eslint-parser 7.29.7 → [Updates: 8.0.1]
• @next/bundle-analyzer 14.2.35 → [Updates: 16.3.0]
• @next/eslint-plugin-next 14.2.35 → [Updates: 16.3.0]
• @oclif/test 4.1.21
• autoprefixer 10.5.4
• coveralls-next 4.2.2 → [Updates: 6.0.2]
• cypress 15.17.0 → [Updates: 15.19.0]
• eslint-plugin-cypress 4.3.0 → [Updates: 6.4.3]
• eslint-plugin-react 7.37.5
• faker 5.5.3 → [Updates: 6.6.6, 5.5.3]
• git-revision-webpack-plugin 5.0.0
• jest 29.7.0 → [Updates: 30.4.2]
• json-to-graphql-query 2.3.0
• mockdate 3.0.5
• nixt 0.5.1
• nock ^14.0.0-beta.6
• nodemon 3.1.14
• postcss 8.5.25
• standard 16.0.4 → [Updates: 17.1.2]
• standardx 7.0.0
• supertest 7.2.2
• typescript ^5.7.2 → [Updates: ^7.0.0]
• url-loader 4.1.1
• uuid 11.1.1 → [Updates: 14.0.1]
• node 22 || 24

server/data/migrations/package.json

---

• Check this box to trigger a request for Renovate to run again on this repository