Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@react-email/components

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update docker/login-action digest to 650006c
• chore(deps): update docker/setup-buildx-action digest to d7f5e7f
• chore(deps): update @ai-sdk/openai from 3.0.53 to 3.0.65
• chore(deps): update @ai-sdk/react from 3.0.170 to 3.0.193
• chore(deps): update @formatjs/intl-localematcher from 0.8.3 to 0.8.8
• chore(deps): update @marsidev/react-turnstile from 1.5.0 to 1.5.2
• chore(deps): update @polar-sh/nextjs from 0.9.5 to 0.9.6
• chore(deps): update @react-email/render from 2.0.7 to 2.0.8
• chore(deps): update @scalar/nextjs-api-reference from 0.10.9 to 0.10.19
• chore(deps): update @supabase/ssr from 0.10.2 to 0.10.3
• chore(deps): update @vitejs/plugin-react-swc from 4.3.0 to 4.3.1
• chore(deps): update ai from 6.0.168 to 6.0.191
• chore(deps): update commitlint monorepo from 20.5.0 to 20.5.3 (@commitlint/cli, @commitlint/config-conventional)
• chore(deps): update eslint-config-next from 16.2.3 to 16.2.6
• chore(deps): update pnpm from 10.33.0 to 10.33.4
• chore(deps): update react monorepo (@types/react, react, react-dom)
• chore(deps): update resend from 6.12.2 to 6.12.3
• chore(deps): update semantic-release monorepo (@semantic-release/github, @semantic-release/release-notes-generator)
• chore(deps): update vite from 7.3.2 to 7.3.3
• chore(deps): update vitest from 4.1.5 to 4.1.7
• chore(deps): update @base-ui/react from 1.4.1 to 1.5.0
• chore(deps): update @supabase/postgrest-js from 2.104.0 to 2.106.1
• chore(deps): update @supabase/supabase-js from 2.104.0 to 2.106.1
• chore(deps): update @types/node from 25.6.0 to 25.9.1
• chore(deps): update @upstash/redis from 1.37.0 to 1.38.0
• chore(deps): update @vercel/firewall from 1.1.2 to 1.2.1
• chore(deps): update aquasecurity/trivy-action action from 0.35.0 to v0.36.0
• chore(deps): update date-fns from 4.1.0 to 4.3.0
• chore(deps): update esbuild from 0.27.7 to 0.28.0
• chore(deps): update jsdom from 29.0.2 to 29.1.1
• chore(deps): update lucide-react from 1.8.0 to 1.16.0
• chore(deps): update pg from 8.20.0 to 8.21.0
• chore(deps): update react-resizable-panels from 4.10.0 to 4.11.2
• chore(deps): update semver from 7.7.4 to 7.8.1
• chore(deps): update storybook monorepo from 10.3.3 to 10.4.1 (@storybook/nextjs-vite, eslint-plugin-storybook, storybook)
• chore(deps): update stripe from 22.0.2 to 22.1.1
• chore(deps): update tailwind-merge from 3.5.0 to 3.6.0
• chore(deps): update tailwindcss monorepo from 4.2.3 to 4.3.0 (@tailwindcss/postcss, tailwindcss)
• chore(deps): update tsx from 4.21.0 to 4.22.3
• chore(deps): update zod from 4.3.6 to 4.4.3
• chore(deps): update actions/download-artifact action from v7 to v8.0.1
• chore(deps): update commitlint monorepo from 20.5.0 to 21.0.1 (@commitlint/cli, @commitlint/config-conventional)
• chore(deps): update dotenv from 16.6.1 to 17.4.2
• chore(deps): update pnpm from 10.33.0 to 11.3.0
• chore(deps): update react-day-picker from 9.14.0 to 10.0.1
• chore(deps): update vite from 7.3.2 to 8.0.14
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update next from 16.2.3 to 16.2.6 [SECURITY]
• chore(deps): update mermaid from 11.14.0 to 11.15.0 [SECURITY]
• chore(deps): update actions/setup-node digest to 48b55a0
• chore(deps): update actions/upload-artifact digest to 043fb46
• chore(deps): update docker/build-push-action digest to f9f3042
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (1)

Dockerfile (3)

• node 24-alpine
• node 24-alpine
• node 24-alpine

github-actions (2)

.github/workflows/ci.yml (22)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4]
• docker/login-action v4@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4]
• docker/build-push-action v7@d08e5c354a6adb9ed34480a06d141179aa583294 → [Updates: v7]
• actions/upload-artifact v7@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4]
• docker/login-action v4@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4]
• docker/build-push-action v7@d08e5c354a6adb9ed34480a06d141179aa583294 → [Updates: v7]
• actions/upload-artifact v7@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7]
• actions/download-artifact v7@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8]
• docker/login-action v4@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4]
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4]
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 → [Updates: v0.36.0]
• github/codeql-action v4
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/login-action v4@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4]
• ubuntu 24.04-arm

.github/workflows/codeql.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• github/codeql-action v4
• github/codeql-action v4

npm (3)

bootstrap/package.json (2)

• pg ^8.11.3
• dotenv ^16.4.5 → [Updates: ^17.0.0]

package.json (107)

• @ai-sdk/openai ^3.0.53 → [Updates: ^3.0.53]
• @ai-sdk/react ^3.0.170 → [Updates: ^3.0.170]
• @base-ui/react ^1.4.1 → [Updates: ^1.4.1]
• @formatjs/intl-localematcher ^0.8.3 → [Updates: ^0.8.3]
• @marsidev/react-turnstile ^1.5.0 → [Updates: ^1.5.0]
• @polar-sh/nextjs ^0.9.5 → [Updates: ^0.9.5]
• @radix-ui/colors ^3.0.0
• @react-email/components ^1.0.12
• @scalar/nextjs-api-reference ^0.10.9 → [Updates: ^0.10.9]
• @supabase/postgrest-js ^2.104.0 → [Updates: ^2.104.0]
• @supabase/ssr ^0.10.2 → [Updates: ^0.10.2]
• @supabase/supabase-js ^2.104.0 → [Updates: ^2.104.0]
• @tailwindcss/typography ^0.5.19
• @upstash/ratelimit ^2.0.8
• @upstash/redis ^1.37.0 → [Updates: ^1.37.0]
• @vercel/analytics ^2.0.1
• @vercel/edge-config ^1.4.3
• @vercel/firewall ^1.1.2 → [Updates: ^1.1.2]
• @vercel/speed-insights ^2.0.0
• ai ^6.0.168 → [Updates: ^6.0.168]
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• cmdk ^1.1.1
• date-fns ^4.1.0 → [Updates: ^4.1.0]
• dotenv ^17.4.2
• embla-carousel-autoplay ^8.6.0
• embla-carousel-react ^8.6.0
• iceberg-js ^0.8.1
• input-otp ^1.4.2
• lucide-react ^1.8.0 → [Updates: ^1.8.0]
• mermaid ^11.14.0 → [Updates: ^11.14.0]
• negotiator ^1.0.0
• next 16.2.3 → [Updates: 16.2.6]
• next-themes ^0.4.6
• pg ^8.20.0 → [Updates: ^8.20.0]
• react 19.2.4 → [Updates: 19.2.6]
• react-day-picker ^9.14.0 → [Updates: ^10.0.0]
• react-dom 19.2.4 → [Updates: 19.2.6]
• react-dropzone ^15.0.0
• react-markdown ^10.1.0
• react-resizable-panels ^4.10.0 → [Updates: ^4.10.0]
• recharts ^3.8.1
• resend ^6.12.2 → [Updates: ^6.12.2]
• schema-dts ^2.0.0
• semver ^7.7.4 → [Updates: ^7.7.4]
• sharp ^0.34.5
• sonner ^2.0.7
• stripe ^22.0.2 → [Updates: ^22.0.2]
• tailwind-merge ^3.5.0 → [Updates: ^3.5.0]
• tsx ^4.21.0 → [Updates: ^4.21.0]
• tw-animate-css ^1.4.0
• vaul ^1.1.2
• zod ^4.3.6 → [Updates: ^4.3.6]
• zx ^8.8.5
• @commitlint/cli ^20.5.0 → [Updates: ^20.5.0, ^21.0.0]
• @commitlint/config-conventional ^20.5.0 → [Updates: ^20.5.0, ^21.0.0]
• @react-email/render ^2.0.7 → [Updates: ^2.0.7]
• @semantic-release/changelog ^6.0.3
• @semantic-release/commit-analyzer ^13.0.1
• @semantic-release/git ^10.0.1
• @semantic-release/github ^12.0.6 → [Updates: ^12.0.6]
• @semantic-release/npm ^13.1.5
• @semantic-release/release-notes-generator ^14.1.0 → [Updates: ^14.1.0]
• @storybook/nextjs-vite 10.3.3 → [Updates: 10.4.1]
• @tailwindcss/postcss ^4.2.3 → [Updates: ^4.2.3]
• @testing-library/dom ^10.4.1
• @testing-library/jest-dom ^6.9.1
• @testing-library/react ^16.3.2
• @testing-library/user-event ^14.6.1
• @total-typescript/ts-reset ^0.6.1
• @types/jsonld ^1.5.15
• @types/negotiator ^0.6.4
• @types/node ^25.6.0 → [Updates: ^25.6.0]
• @types/pg ^8.20.0
• @types/react 19.2.14 → [Updates: 19.2.15]
• @types/react-dom 19.2.3
• @vitejs/plugin-react-swc ^4.3.0 → [Updates: ^4.3.0]
• conventional-changelog-conventionalcommits ^9.3.1
• esbuild ^0.27.7 → [Updates: ^0.28.0]
• esbuild-plugin-tsconfig-paths ^1.0.2
• eslint ^9.39.4
• eslint-config-next 16.2.3 → [Updates: 16.2.6]
• eslint-config-prettier ^10.1.8
• eslint-plugin-react ^7.37.5
• eslint-plugin-storybook 10.3.3 → [Updates: 10.4.1]
• glob ^13.0.6
• husky ^9.1.7
• jsdom ^29.0.2 → [Updates: ^29.0.2]
• jsonld ^9.0.0
• prettier ^3.8.3
• semantic-release ^25.0.3
• server-only ^0.0.1
• storybook ^10.3.5 → [Updates: ^10.3.5]
• tailwindcss ^4.2.3 → [Updates: ^4.2.3]
• tsconfck ^3.1.6
• tsconfig-paths ^4.2.0
• tsx ^4.21.0
• typescript ^6.0.3
• vite-tsconfig-paths ^6.1.1
• vitest ^4.1.5 → [Updates: ^4.1.5]
• pnpm 10.33.0 → [Updates: 10.33.4, 11.3.0]
• tar >=7.5.11
• minimatch >=10.2.4
• @types/react 19.2.14 → [Updates: 19.2.15]
• @types/react-dom 19.2.3
• lodash-es >=4.18.0
• vite 7.3.2 → [Updates: 7.3.3, 8.0.14]

pnpm-workspace.yaml

---

• Check this box to trigger a request for Renovate to run again on this repository