Skip to content

Dependency Dashboard #588

Description

@renovate

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

  • Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

  • chore(deps): update electron-forge to v7.11.2 (@electron-forge/cli, @electron-forge/maker-dmg, @electron-forge/maker-squirrel, @electron-forge/maker-zip, @electron-forge/plugin-auto-unpack-natives, @electron-forge/plugin-vite)
  • chore(deps): update eslint monorepo (@eslint/js, eslint)
  • chore(deps): update react monorepo (@types/react, @types/react-dom, react, react-dom)
  • chore(deps): update vitest monorepo to v4.1.10 (@vitest/coverage-v8, vitest)
  • fix(deps): update dependency alphatheta-connect to v0.21.9
  • fix(deps): update dependency metadata-connect to v1.1.11
  • chore(deps): update actions/checkout action to v6.1.0
  • chore(deps): update actions/setup-node action to v6.5.0
  • chore(deps): update actions/setup-python action to v6.3.0
  • chore(deps): update dependency @playwright/test to v1.62.1
  • chore(deps): update dependency @thumbmarkjs/thumbmarkjs to v1.10.1
  • chore(deps): update dependency @types/node to v25.9.5
  • chore(deps): update dependency @xmldom/xmldom to ^0.9.0
  • chore(deps): update dependency electron to v42.8.1
  • chore(deps): update dependency globals to v17.9.0
  • chore(deps): update dependency python to 3.14
  • chore(deps): update dependency tsx to v4.23.5
  • chore(deps): update dependency vite to v8.2.0
  • chore(deps): update docker/build-push-action action to v7.3.0
  • chore(deps): update docker/login-action action to v4.6.0
  • chore(deps): update docker/metadata-action action to v6.2.0
  • chore(deps): update docker/setup-buildx-action action to v4.2.0
  • chore(deps): update docker/setup-qemu-action action to v4.2.0
  • chore(deps): update github/codeql-action action to v4.37.6
  • chore(deps): update nginx docker tag to v1.31
  • chore(deps): update typescript-eslint monorepo to v8.66.0 (@typescript-eslint/eslint-plugin, @typescript-eslint/parser)
  • fix(deps): update dependency stagelinq to v3.3.1
  • chore(deps): update actions/checkout action to v7
  • chore(deps): update actions/setup-node action to v7
  • chore(deps): update actions/setup-python action to v7
  • chore(deps): update codecov/codecov-action action to v7
  • chore(deps): update dependency @babel/core to v8
  • chore(deps): update dependency @testing-library/jest-dom to v7
  • chore(deps): update dependency electron to v43
  • chore(deps): update dependency jsdom to v30
  • chore(deps): update dependency node to v24
  • chore(deps): update dependency typescript to v7
  • chore(deps): update eslint monorepo to v10 (@eslint/js, eslint)
  • chore(deps): update postgres docker tag to v18
  • chore(deps): update softprops/action-gh-release action to v3
  • 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

  • chore(deps): update node.js to aadf416
  • chore(deps): update dependency esbuild to v0.28.2

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

  • chore(deps): update dependency fast-uri to v3.1.5 [security]
  • chore(deps): update dependency postcss to v8.5.23 [security]
  • chore(deps): update dependency tar to v7.5.18 [security]
  • chore(deps): update dependency ip-address to v10.3.1 [security]
  • chore(deps): update dependency js-yaml to v4.3.1 [security]
  • chore(deps): update dependency undici to v7.29.0 [security]

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

Detected Dependencies

docker-compose (4)
deploy/dev-proxy/docker-compose.yml (1)
  • nginx 1.27-alpine@sha256:65645c7bb6a0661892a8b03b89d0743208a18dd2f3f17a54ef4b76fb8e2f2a10 → [Updates: 1.31-alpine]
deploy/docker-compose.ghcr.yml (1)
  • postgres 16-alpine@sha256:20edbde7749f822887a1a022ad526fde0a47d6b2be9a8364433605cf65099416 → [Updates: 18-alpine, 16-alpine]
deploy/docker-compose.yml (1)
  • postgres 16-alpine@sha256:20edbde7749f822887a1a022ad526fde0a47d6b2be9a8364433605cf65099416 → [Updates: 18-alpine, 16-alpine]
docker-compose.yml (1)
  • postgres 16-alpine@sha256:20edbde7749f822887a1a022ad526fde0a47d6b2be9a8364433605cf65099416 → [Updates: 18-alpine, 16-alpine]
dockerfile (3)
bridge/Dockerfile (1)
  • node 26-alpine@sha256:e71ac5e964b9201072425d59d2e876359efa25dc96bb1768cb73295728d6e4ea → [Updates: 26-alpine]
dashboard/Dockerfile (1)
  • node 26-alpine
server/Dockerfile (1)
  • python 3.11-slim → [Updates: 3.14-slim]
github-actions (6)
.github/workflows/ci.yml (21)
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6.3.0, v7.0.0]
  • codecov/codecov-action v6.0.0@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 → [Updates: v6.0.2, v7.0.0]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6.3.0, v7.0.0]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.2.0]
  • docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7.3.0]
  • docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7.3.0]
  • postgres 16 → [Updates: 18]
  • python 3.11 → [Updates: 3.14]
  • node 22 → [Updates: 24]
  • node 22 → [Updates: 24]
  • node 22 → [Updates: 24]
  • python 3.11 → [Updates: 3.14]
.github/workflows/codeql.yml (4)
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • github/codeql-action v4.35.5@9e0d7b8d25671d64c341c19c0152d693099fb5ba → [Updates: v4.37.6]
  • github/codeql-action v4.35.5@9e0d7b8d25671d64c341c19c0152d693099fb5ba → [Updates: v4.37.6]
  • github/codeql-action v4.35.5@9e0d7b8d25671d64c341c19c0152d693099fb5ba → [Updates: v4.37.6]
.github/workflows/dependency-health.yml (10)
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • node 22 → [Updates: 24]
  • node 22 → [Updates: 24]
  • node 22 → [Updates: 24]
.github/workflows/docker-publish.yml (12)
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.2.0]
  • docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.2.0]
  • docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4.6.0]
  • docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf → [Updates: v6.2.0]
  • docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7.3.0]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.2.0]
  • docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.2.0]
  • docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4.6.0]
  • docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf → [Updates: v6.2.0]
  • docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7.3.0]
.github/workflows/release.yml (11)
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • softprops/action-gh-release v2@b4309332981a82ec1c5618f44dd2e27cc8bfbfda → [Updates: v3, v2]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • node 22 → [Updates: 24]
.github/workflows/winget-scripts-test.yml (2)
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
npm (3)
bridge-app/package.json (36)
  • alphatheta-connect 0.15.0 → [Updates: 0.21.9]
  • electron-squirrel-startup ^1.0.1
  • electron-store ^11.0.2
  • stagelinq 3.0.4 → [Updates: 3.3.1]
  • @electron-forge/cli ^7.6.0 → [Updates: ^7.6.0]
  • @electron-forge/maker-dmg ^7.6.0 → [Updates: ^7.6.0]
  • @electron-forge/maker-squirrel ^7.6.0 → [Updates: ^7.6.0]
  • @electron-forge/maker-zip ^7.11.1 → [Updates: ^7.11.1]
  • @electron-forge/plugin-auto-unpack-natives ^7.6.0 → [Updates: ^7.6.0]
  • @electron-forge/plugin-vite ^7.6.0 → [Updates: ^7.6.0]
  • @reforged/maker-appimage ^5.2.0
  • @testing-library/jest-dom ^6.4.0 → [Updates: ^7.0.0]
  • @testing-library/react ^16.3.2
  • @types/react ^19.2.14 → [Updates: ^19.2.14]
  • @types/react-dom ^19.2.3 → [Updates: ^19.2.3]
  • @vitejs/plugin-react ^6.0.1 → [Updates: ^6.0.1]
  • @vitest/coverage-v8 ^4.1.6 → [Updates: ^4.1.6]
  • electron ^42.0.1 → [Updates: ^42.0.1, ^43.0.0]
  • eslint ^10.3.0 → [Updates: ^10.3.0]
  • jsdom ^29.1.1 → [Updates: ^30.0.0]
  • react ^19.2.6 → [Updates: ^19.2.6]
  • react-dom ^19.2.6 → [Updates: ^19.2.6]
  • typescript ^6.0.3 → [Updates: ^7.0.0]
  • vitest ^4.0.0 → [Updates: ^4.0.0]
  • node >=22.0.0
  • fast-uri ^3.1.2 → [Updates: ^3.1.2]
  • tar ^7.5.16 → [Updates: ^7.5.16]
  • tmp ^0.2.7
  • @tootallnate/once ^3.0.1
  • ip ^2.0.1
  • ip-address ^10.1.1 → [Updates: ^10.1.1]
  • postcss ^8.5.10 → [Updates: ^8.5.10]
  • lodash ^4.18.1
  • @xmldom/xmldom ^0.8.13 → [Updates: ^0.9.0]
  • vite ^8.0.16 → [Updates: ^8.0.16]
  • undici ^7.28.0 → [Updates: ^7.28.0]
bridge/package.json (15)
  • alphatheta-connect 0.21.1 → [Updates: 0.21.9]
  • metadata-connect 1.1.10 → [Updates: 1.1.11]
  • onelibrary-connect 1.1.1
  • stagelinq 3.0.4 → [Updates: 3.3.1]
  • @types/node ^25.7.0 → [Updates: ^25.7.0]
  • @vitest/coverage-v8 ^4.1.6 → [Updates: ^4.1.6]
  • tsx ^4.0.0 → [Updates: ^4.0.0]
  • typescript ^6.0.3 → [Updates: ^7.0.0]
  • vitest ^4.0.0 → [Updates: ^4.0.0]
  • node >=22.0.0
  • ip ^2.0.1
  • ip-address ^10.1.1 → [Updates: ^10.1.1]
  • lodash ^4.18.1
  • vite ^8.0.16 → [Updates: ^8.0.16]
  • esbuild ^0.28.1 → [Updates: ^0.28.1]
dashboard/package.json (29)
  • @thumbmarkjs/thumbmarkjs ^1.9.0 → [Updates: ^1.9.0]
  • next ^16.2.6 → [Updates: ^16.2.6]
  • qrcode.react ^4.2.0
  • react ^19.2.6 → [Updates: ^19.2.6]
  • react-dom ^19.2.6 → [Updates: ^19.2.6]
  • simple-keyboard ^3.8.141 → [Updates: ^3.8.141]
  • @eslint/js ^9.39.2 → [Updates: ^9.39.2, ^10.0.0]
  • @playwright/test ^1.60.0 → [Updates: ^1.60.0]
  • @testing-library/jest-dom ^6.4.0 → [Updates: ^7.0.0]
  • @testing-library/react ^16.3.2
  • @types/node ^25 → [Updates: ^25]
  • @types/react ^19.2.14 → [Updates: ^19.2.14]
  • @types/react-dom ^19.2.3 → [Updates: ^19.2.3]
  • @typescript-eslint/eslint-plugin ^8.59.3 → [Updates: ^8.59.3]
  • @typescript-eslint/parser ^8.54.0 → [Updates: ^8.54.0]
  • @vitest/coverage-v8 ^4.1.6 → [Updates: ^4.1.6]
  • eslint ^9.39.4 → [Updates: ^9.39.4, ^10.0.0]
  • eslint-plugin-react ^7.37.5
  • eslint-plugin-react-hooks ^7.1.1
  • globals ^17.6.0 → [Updates: ^17.6.0]
  • jsdom ^29.1.1 → [Updates: ^30.0.0]
  • openapi-typescript ^7.13.0
  • typescript ^5 → [Updates: ^7.0.0]
  • vitest ^4.0.18 → [Updates: ^4.0.18]
  • postcss ^8.5.10 → [Updates: ^8.5.10]
  • vite ^8.0.16 → [Updates: ^8.0.16]
  • js-yaml ^4.2.0 → [Updates: ^4.2.0]
  • @babel/core ^7.29.6 → [Updates: ^8.0.0]
  • undici ^7.28.0 → [Updates: ^7.28.0]
pep621 (1)
server/pyproject.toml (44)
  • python >=3.11
  • fastapi >=0.133.0
  • uvicorn >=0.27.0
  • sqlalchemy >=2.0.0
  • alembic >=1.13.0
  • psycopg >=3.1.0
  • pydantic >=2.0.0
  • pydantic-settings >=2.14.2
  • bcrypt >=4.0.0
  • httpx >=0.26.0
  • python-multipart >=0.0.31
  • spotipy >=2.23.0
  • slowapi >=0.1.9
  • tidalapi >=0.7.0
  • Pillow >=12.1.1 → [Updates: >=12.1.1]
  • cryptography >=48.0.1 → [Updates: >=48.0.1]
  • PyJWT >=2.13.0
  • aiohttp >=3.14.1 → [Updates: >=3.14.1]
  • requests >=2.33.0
  • python-dotenv >=1.2.2
  • mako >=1.3.12
  • pyasn1 >=0.6.3 → [Updates: >=0.6.3]
  • idna >=3.15
  • urllib3 >=2.7.0
  • anthropic >=0.40.0
  • resend >=2.0.0
  • better-profanity >=0.7.0
  • sse-starlette >=2.0.0
  • starlette >=1.3.1
  • python-json-logger >=3.0
  • coolname ==5.0.0
  • ruff >=0.1.0
  • pytest >=9.0.3
  • pytest-asyncio >=0.24.0
  • pytest-cov >=4.1.0
  • pytest-xdist >=3.6.0
  • bandit >=1.7.0
  • pip-audit >=2.6.0
  • freezegun >=1.2.0
  • pygments >=2.20.0
  • msgpack >=1.2.1
  • pip >=26.1.2
  • setuptools >=83.0.0
  • setuptools >=83.0.0

  • Check this box to trigger a request for Renovate to run again on this repository

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions