Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update dependency @biomejs/biome to v2.4.16
• chore(deps): update frontend test packages to v4.1.7 (@vitest/coverage-v8, @vitest/ui, vitest)
• chore(deps): update dependency fluentassertions to 8.10.0
• chore(deps): update dependency i18next to v26.3.0
• chore(deps): update tanstack packages (@tanstack/react-form, @tanstack/react-query, @tanstack/react-query-devtools, @tanstack/react-router, @tanstack/router-plugin)
• chore(deps): update actions/upload-pages-artifact action to v5
• chore(deps): update dependency coverlet.collector to v10
• chore(deps): update dependency globals to v17
• chore(deps): update dependency jsdom to v29
• chore(deps): update dependency microsoft.net.test.sdk to v18
• chore(deps): update dependency node to v24 (node, @types/node)
• chore(deps): update dependency npgsql.entityframeworkcore.postgresql to v10
• chore(deps): update dependency serilog.aspnetcore to v10
• chore(deps): update dependency serilog.extensions.hosting to v10
• chore(deps): update dependency sixlabors.imagesharp to v4
• chore(deps): update dependency typescript to v6
• chore(deps): update dotnet monorepo to v10 (Microsoft.AspNetCore.OpenApi, Microsoft.AspNetCore.SpaProxy, Microsoft.AspNetCore.SpaServices.Extensions, Microsoft.EntityFrameworkCore, Microsoft.EntityFrameworkCore.Design, mcr.microsoft.com/dotnet/aspnet, mcr.microsoft.com/dotnet/sdk)
• chore(deps): update eslint monorepo to v10 (@eslint/js, eslint)
• chore(deps): update pnpm to v11
• chore(deps): update pnpm/action-setup action to v6
• chore(deps): update postgres docker tag to v18
• chore(deps): update softprops/action-gh-release action to v3
• fix(deps): update react monorepo to v19 (@types/react, @types/react-dom, react, react-dom)
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update all non-major dependencies (@internationalized/date, @sentry/react, @types/react, Sentry.AspNetCore, date-fns, lucide-react, pnpm, react-aria-components, react-error-boundary, typescript-eslint, zustand)

Detected Dependencies

bicep (1)

infra/security-scan.bicep (4)

• Microsoft.OperationalInsights/workspaces 2023-09-01
• Microsoft.App/managedEnvironments 2024-03-01
• Microsoft.App/containerApps 2024-03-01
• Microsoft.App/containerApps 2024-03-01

docker-compose (3)

docker-compose.build.yml (1)

• postgres 16 → [Updates: 18]

docker-compose.yml (1)

• postgres 16 → [Updates: 18]

infra/docker-compose.security.yml (1)

• postgres 16 → [Updates: 18]

dockerfile (1)

Dockerfile (3)

• node 22-alpine → [Updates: 24-alpine]
• mcr.microsoft.com/dotnet/sdk 8.0-alpine → [Updates: 10.0-alpine]
• mcr.microsoft.com/dotnet/aspnet 8.0-alpine → [Updates: 10.0-alpine]

github-actions (9)

.github/workflows/ci.yml (16)

• step-security/harden-runner v2
• actions/checkout v6
• PaulHatch/semantic-version v6.0.2
• step-security/harden-runner v2
• actions/checkout v6
• actions/setup-java v5
• actions/setup-dotnet v5
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v6
• actions/cache v5
• actions/cache v5
• EnricoMi/publish-unit-test-result-action v2
• actions/upload-artifact v7
• danielpalme/ReportGenerator-GitHub-Action v5.5.10
• marocchino/sticky-pull-request-comment v3
• node 20.x → [Updates: 24.x]

.github/workflows/codeql.yml (4)

• step-security/harden-runner v2
• actions/checkout v6
• github/codeql-action v4
• github/codeql-action v4

.github/workflows/docs.yml (9)

• step-security/harden-runner v2
• actions/checkout v6
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v6
• actions/configure-pages v6
• actions/upload-pages-artifact v4 → [Updates: v5]
• step-security/harden-runner v2
• actions/deploy-pages v5
• node 22 → [Updates: 24]

.github/workflows/pr.yml (6)

• step-security/harden-runner v2
• actions/checkout v6
• actions/labeler v6
• codelytv/pr-size-labeler v1
• step-security/harden-runner v2
• amannn/action-semantic-pull-request v6

.github/workflows/publish-container.yml (36)

• step-security/harden-runner v2
• actions/checkout v6
• PaulHatch/semantic-version v6.0.2
• step-security/harden-runner v2
• actions/checkout v6
• actions/setup-java v5
• actions/setup-dotnet v5
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v6
• actions/cache v5
• actions/cache v5
• actions/upload-artifact v7
• danielpalme/ReportGenerator-GitHub-Action v5.5.10
• step-security/harden-runner v2
• actions/checkout v6
• pnpm/action-setup v4 → [Updates: v6]
• docker/setup-qemu-action v4
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/metadata-action v6
• docker/metadata-action v6
• docker/build-push-action v7
• step-security/harden-runner v2
• actions/checkout v6
• docker/setup-buildx-action v4
• docker/build-push-action v7
• aquasecurity/trivy-action master
• github/codeql-action v4
• aquasecurity/trivy-action master
• aquasecurity/trivy-action master
• actions/upload-artifact v7
• step-security/harden-runner v2
• actions/checkout v6
• softprops/action-gh-release v2 → [Updates: v3]
• step-security/harden-runner v2
• node 20.x → [Updates: 24.x]

.github/workflows/security-full-scan.yml (9)

• step-security/harden-runner v2
• actions/checkout v6
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/build-push-action v7
• azure/login v3
• zaproxy/action-full-scan v0.13.0
• github/codeql-action v4
• actions/upload-artifact v7

.github/workflows/security.yml (23)

• step-security/harden-runner v2
• actions/checkout v6
• actions/setup-dotnet v5
• step-security/harden-runner v2
• actions/checkout v6
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v6
• step-security/harden-runner v2
• actions/checkout v6
• gitleaks/gitleaks-action v2
• step-security/harden-runner v2
• actions/checkout v6
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/build-push-action v7
• docker/scout-action v1
• github/codeql-action v4
• step-security/harden-runner v2
• actions/checkout v6
• docker/setup-buildx-action v4
• docker/build-push-action v7
• zaproxy/action-api-scan v0.10.0
• node 20.x → [Updates: 24.x]

.github/workflows/stale.yml (2)

• step-security/harden-runner v2
• actions/stale v10

.github/workflows/welcome.yml (2)

• step-security/harden-runner v2
• actions/first-interaction v3

npm (2)

boardgametracker.client/package.json (54)

• @internationalized/date ^3.12.1 → [Updates: ^3.12.1]
• @nivo/bar ^0.99.0
• @nivo/pie ^0.99.0
• @radix-ui/react-checkbox ^1.3.2
• @radix-ui/react-popover ^1.1.15
• @radix-ui/react-select ^2.1.1
• @radix-ui/react-switch ^1.1.0
• @radix-ui/react-tooltip ^1.2.7
• @radix-ui/themes ^3.0.3
• @sentry/react ^10.42.0 → [Updates: ^10.42.0]
• @sentry/vite-plugin ^5.1.1
• @tanstack/react-form ^1.27.7 → [Updates: ^1.27.7]
• @tanstack/react-query ^5.24.1 → [Updates: ^5.24.1]
• @tanstack/react-query-devtools ^5.81.2 → [Updates: ^5.81.2]
• @tanstack/react-router ^1.121.34 → [Updates: ^1.121.34]
• @tanstack/react-router-devtools ^1.121.34
• @tanstack/react-table ^8.15.3
• axios ^1.15.2
• class-variance-authority ^0.7.0
• date-fns ^4.0.0 → [Updates: ^4.0.0]
• i18next ^26.0.0 → [Updates: ^26.0.0]
• i18next-browser-languagedetector ^8.0.0
• i18next-http-backend ^4.0.0
• react ^18.2.0 → [Updates: ^19.0.0]
• react-aria-components ^1.17.0 → [Updates: ^1.17.0]
• react-dom ^18.2.0 → [Updates: ^19.0.0]
• react-error-boundary ^6.0.2 → [Updates: ^6.0.2]
• react-i18next ^17.0.0
• react-loading-icons ^1.1.0
• sonner ^2.0.5
• zod ^4.0.0
• zustand ^5.0.11 → [Updates: ^5.0.11]
• @biomejs/biome ^2.4.1 → [Updates: ^2.4.1]
• @tailwindcss/postcss ^4.1.17
• @tanstack/router-plugin ^1.121.34 → [Updates: ^1.121.34]
• @testing-library/jest-dom ^6.9.1
• @testing-library/react ^16.3.0
• @testing-library/user-event ^14.6.1
• @types/node ^20.11.20 → [Updates: ^24.0.0]
• @types/react ^18.2.56 → [Updates: ^18.2.56, ^19.0.0]
• @types/react-dom ^18.2.19 → [Updates: ^19.0.0]
• @vitejs/plugin-react ^6.0.1
• @vitest/coverage-v8 ^4.0.18 → [Updates: ^4.0.18]
• @vitest/ui ^4.0.18 → [Updates: ^4.0.18]
• jsdom ^27.1.0 → [Updates: ^29.0.0]
• postcss ^8.4.35
• tailwindcss ^4.1.17
• typescript ^5.2.2 → [Updates: ^6.0.0]
• vite ^8.0.0
• vite-plugin-svgr ^5.0.0
• vitest ^4.0.18 → [Updates: ^4.0.18]
• vitest-sonar-reporter ^3.0.0
• @rollup/rollup-linux-x64-gnu ^4.12.0
• pnpm 10.33.4 → [Updates: 10.34.1, 11.5.0]

docs/package.json (28)

• @tailwindcss/vite ^4.2.1
• @tanstack/react-router ^1.163.3 → [Updates: ^1.163.3]
• class-variance-authority ^0.7.1
• i18next ^26.0.0 → [Updates: ^26.0.0]
• i18next-browser-languagedetector ^8.2.1
• i18next-http-backend ^4.0.0
• lucide-react ^1.0.0 → [Updates: ^1.0.0]
• react ^19.2.0
• react-dom ^19.2.0
• react-i18next ^17.0.0
• react-loading-icons ^1.1.0
• tailwindcss ^4.2.1
• vite-plugin-svgr ^5.0.0
• @eslint/js ^9.39.1 → [Updates: ^10.0.0]
• @tanstack/router-plugin ^1.164.0 → [Updates: ^1.164.0]
• @types/node ^24.10.1
• @types/react ^19.2.7 → [Updates: ^19.2.7]
• @types/react-dom ^19.2.3
• @vitejs/plugin-react ^6.0.0
• eslint ^9.39.1 → [Updates: ^10.0.0]
• eslint-plugin-react-hooks ^7.0.1
• eslint-plugin-react-refresh ^0.5.0
• globals ^16.5.0 → [Updates: ^17.0.0]
• typescript ~5.9.3 → [Updates: ~6.0.0]
• typescript-eslint ^8.48.0 → [Updates: ^8.48.0]
• vite ^8.0.0
• vite-tsconfig-paths ^6.1.1
• pnpm 10.33.4 → [Updates: 10.34.1, 11.5.0]

nuget (4)

BoardGameTracker.Common/BoardGameTracker.Common.csproj (7)

• Serilog.Sinks.Console 6.1.1
• Serilog.AspNetCore 9.0.0 → [Updates: 10.0.0]
• Sentry.AspNetCore 6.5.0 → [Updates: 6.6.0]
• Microsoft.Extensions.Identity.Stores 8.0.*
• BoardGamer.BoardGameGeek 0.10.0
• Microsoft.EntityFrameworkCore 9.0.16 → [Updates: 10.0.8]
• Ardalis.GuardClauses 5.0.0

BoardGameTracker.Core/BoardGameTracker.Core.csproj (9)

• System.IdentityModel.Tokens.Jwt 8.18.0
• SixLabors.ImageSharp 3.1.12 → [Updates: 4.0.0]
• Refit 10.1.6
• Npgsql.EntityFrameworkCore.PostgreSQL 9.0.4 → [Updates: 10.0.2]
• Newtonsoft.Json 13.0.4
• Microsoft.EntityFrameworkCore 9.0.16 → [Updates: 10.0.8]
• Microsoft.AspNetCore.Identity.EntityFrameworkCore 8.0.*
• HtmlAgilityPack 1.12.4
• BoardGamer.BoardGameGeek 0.10.0

BoardGameTracker.Host/BoardGameTracker.Host.csproj (14)

• Microsoft.VisualStudio.Azure.Containers.Tools.Targets 1.23.0
• Swashbuckle.AspNetCore 10.1.7
• Serilog.Sinks.File 7.0.0
• Serilog.Sinks.Console 6.1.1
• Serilog.Extensions.Hosting 9.0.0 → [Updates: 10.0.0]
• Serilog.AspNetCore 9.0.0 → [Updates: 10.0.0]
• Refit.HttpClientFactory 10.1.6
• Refit 10.1.6
• Microsoft.EntityFrameworkCore.Design 9.0.16 → [Updates: 10.0.8]
• Microsoft.EntityFrameworkCore 9.0.16 → [Updates: 10.0.8]
• Microsoft.AspNetCore.OpenApi 8.0.27 → [Updates: 10.0.8]
• Microsoft.AspNetCore.SpaServices.Extensions 8.0.27 → [Updates: 10.0.8]
• Microsoft.AspNetCore.SpaProxy 8.0.27 → [Updates: 10.0.8]
• Microsoft.AspNetCore.Authentication.JwtBearer 8.0.*

BoardGameTracker.Tests/BoardGameTracker.Tests.csproj (10)

• xunit.v3 3.2.2
• xunit.runner.visualstudio 3.1.5
• Newtonsoft.Json 13.0.4
• Moq 4.20.72
• Microsoft.NET.Test.Sdk 17.14.1 → [Updates: 18.6.0]
• Microsoft.EntityFrameworkCore.InMemory 9.0.*
• Microsoft.AspNetCore.Identity.EntityFrameworkCore 8.0.*
• FluentAssertions 8.9.0 → [Updates: 8.10.0]
• coverlet.collector 8.0.1 → [Updates: 10.0.1]
• BoardGamer.BoardGameGeek 0.10.0

---

• Check this box to trigger a request for Renovate to run again on this repository

[github-actions]

Hey @renovate[bot], thanks for opening your first issue on BoardGameTracker!

To help us triage this as quickly as possible, please make sure you've included:

• Your BoardGameTracker version (Settings in the app)
• Your deployment method (Docker Compose / Docker / bare metal)
• Steps to reproduce the problem
• Any relevant container logs (docker compose logs boardgametracker --tail=100)

I'll take a look as soon as I can. Thanks for taking the time to report!