Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update happy-dom monorepo to v20.10.3
• chore(deps): update tailwindcss monorepo to v4.3.1 (@tailwindcss/vite, tailwindcss)
• chore(deps): update testcontainers-node monorepo to v12.0.2 (@testcontainers/postgresql, testcontainers)
• fix(deps): update better-auth monorepo to v1.6.18 (@better-auth/api-key, @better-auth/passkey, better-auth)
• fix(deps): update dependency @earendil-works/pi-ai to v0.79.3
• fix(deps): update dependency @pierre/diffs to v1.2.10
• fix(deps): update dependency es-toolkit to v1.47.1
• fix(deps): update dependency form-data to v4.0.6
• fix(deps): update dependency typebox to v1.2.10
• chore(deps): update dependency @cloudflare/workers-types to v4.20260613.1
• chore(deps): update dependency @cloudflare/workers-types to v4.20260613.1
• chore(deps): update dependency axios to v1.18.0
• chore(deps): update dependency code-inspector-plugin to v1.6.0
• chore(deps): update dependency kysely to v0.29.2
• chore(deps): update dependency rollup to v4.62.0
• chore(deps): update dependency sharp to v0.35.1
• chore(deps): update dependency wrangler to v4.100.0
• chore(deps): update eslint monorepo to v10.5.0
• chore(deps): update pnpm to v11.6.0
• fix(deps): update lucide monorepo to v1.18.0
• chore(deps): update dependency nanoid@<3.3.8 to v5
• chore(deps): update dependency uuid@<11.1.1 to v14
• fix(deps): update dependency nodemailer to v9
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up npm package tmp: no-result.

Files affected: pnpm-workspace.yaml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency es-toolkit to v1.47.1
• chore(deps): update dependency rolldown to v1.1.1
• chore(deps): update postgres docker tag to v18
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency eslint-plugin-react-compiler>zod to v4

Detected Dependencies

docker-compose (2)

docker-compose.server.yml (2)

• redis 8-alpine
• postgres 16-alpine → [Updates: 18-alpine]

docker-compose.yml (1)

• postgres 16-alpine → [Updates: 18-alpine]

dockerfile (1)

dockerfile (2)

• node 24-alpine
• node 24-alpine

github-actions (5)

.github/actions/setup-node/action.yml (2)

• actions/setup-node v6
• pnpm/action-setup v6

.github/workflows/admin-release.yml (2)

• actions/checkout v6
• actions/upload-artifact v7

.github/workflows/api-client.yml (1)

• actions/checkout v6

.github/workflows/ci.yml (10)

• actions/checkout v6
• actions/checkout v6
• docker/metadata-action v6
• docker/setup-qemu-action v4
• docker/setup-buildx-action v4
• docker/build-push-action v7
• actions/checkout v6
• actions/checkout v6
• postgres 16-alpine → [Updates: 18-alpine]
• postgres 16-alpine → [Updates: 18-alpine]

.github/workflows/release.yml (16)

• actions/checkout v6
• actions/checkout v6
• softprops/action-gh-release v3
• actions/checkout v6
• docker/setup-qemu-action v4
• docker/metadata-action v6
• docker/setup-buildx-action v4
• docker/build-push-action v7
• docker/login-action v4
• docker/build-push-action v7
• actions/upload-artifact v7
• actions/download-artifact v8
• docker/login-action v4
• docker/setup-buildx-action v4
• docker/metadata-action v6
• postgres 16-alpine → [Updates: 18-alpine]

npm (17)

apps/admin/package.json (126)

• @6over3/zeroperl-ts ^1.0.10
• @antv/g2 ^5.4.8
• @base-ui/react 1.5.0
• @better-auth/passkey 1.6.16 → [Updates: 1.6.18]
• @codemirror/commands 6.10.3
• @codemirror/lang-markdown 6.5.0
• @codemirror/language 6.12.3
• @codemirror/language-data 6.5.2
• @codemirror/search 6.7.0
• @codemirror/state 6.6.0
• @codemirror/theme-one-dark 6.1.3
• @codemirror/view 6.43.1
• @ddietr/codemirror-themes 1.5.2
• @excalidraw/excalidraw ^0.18.1
• @haklex/rich-agent-core 0.27.0
• @haklex/rich-compose 0.27.0
• @haklex/rich-diff 0.27.0
• @haklex/rich-editor 0.27.0
• @haklex/rich-editor-ui 0.27.0
• @haklex/rich-ext-ai-agent 0.27.0
• @haklex/rich-ext-chat 0.27.0
• @haklex/rich-ext-code-snippet 0.27.0
• @haklex/rich-ext-dynamic 0.27.0
• @haklex/rich-ext-embed 0.27.0
• @haklex/rich-ext-excalidraw 0.27.0
• @haklex/rich-ext-gallery 0.27.0
• @haklex/rich-ext-nested-doc 0.27.0
• @haklex/rich-plugin-block-handle 0.27.0
• @haklex/rich-plugin-floating-toolbar 0.27.0
• @haklex/rich-plugin-link-edit 0.27.0
• @haklex/rich-plugin-litexml-paste 0.27.0
• @haklex/rich-plugin-mention 0.27.0
• @haklex/rich-plugin-slash-menu 0.27.0
• @haklex/rich-plugin-table 0.27.0
• @haklex/rich-plugin-toolbar 0.27.0
• @haklex/rich-renderer-alert 0.27.0
• @haklex/rich-renderer-banner 0.27.0
• @haklex/rich-renderer-codeblock 0.27.0
• @haklex/rich-renderer-image 0.27.0
• @haklex/rich-renderer-katex 0.27.0
• @haklex/rich-renderer-linkcard 0.27.0
• @haklex/rich-renderer-mention 0.27.0
• @haklex/rich-renderer-mermaid 0.27.0
• @haklex/rich-renderer-ruby 0.27.0
• @haklex/rich-renderer-video 0.27.0
• @lexical/markdown ^0.45.0
• @lexical/react ^0.45.0
• @lexical/rich-text ^0.45.0
• @lezer/highlight 1.2.3
• @monaco-editor/react 4.7.0
• @pierre/diffs 1.2.9 → [Updates: 1.2.10]
• @rehookify/datepicker 6.6.8
• @simplewebauthn/browser 13.3.0
• @tanstack/query-async-storage-persister 5.101.0
• @tanstack/query-persist-client-core 5.101.0
• @tanstack/react-query 5.101.0
• @types/canvas-confetti 1.9.0
• @uswriting/exiftool ^1.0.9
• @xterm/addon-fit 0.11.0
• @xterm/xterm 6.0.0
• better-auth 1.6.16 → [Updates: 1.6.18]
• buffer 6.0.3
• canvas-confetti 1.9.4
• clsx ^2.1.1
• date-fns 4.4.0
• ejs 6.0.1
• es-toolkit 1.47.0 → [Updates: 1.47.1]
• event-source-polyfill 1.0.31
• exifr ^7.1.3
• fuse.js 7.4.2
• jotai 2.20.1
• js-cookie 3.0.8
• js-yaml 4.2.0
• json5 2.2.3
• katex ^0.17.0
• lexical ^0.45.0
• lit 3.3.3
• lodash.transform 4.6.0
• lucide-react 1.17.0 → [Updates: 1.18.0]
• maplibre-gl 5.24.0
• marked 18.0.5
• monaco-editor 0.55.1
• motion 12.40.0
• ofetch 1.5.1
• os-browserify 0.3.0
• path-browserify 1.0.1
• qier-progress 1.0.4
• qs 6.15.2
• react 19.2.7
• react-dom 19.2.7
• react-resizable-panels 4.11.2
• react-router 7.17.0
• recharts 3.8.1
• shiki 4.2.0
• socket.io-client 4.8.3
• sonner 2.0.7
• streamdown ^2.5.0
• tailwind-merge ^3.6.0
• thumbhash 0.1.1
• tinykeys 4.0.0
• validator 13.15.35
• xss 1.0.15
• zod 4.4.3
• zustand 5.0.14
• @babel/core 7.29.7
• @babel/parser ^7.29.7
• @babel/types ^7.29.7
• @rolldown/plugin-babel 0.2.3
• @tailwindcss/vite ^4.3.0 → [Updates: ^4.3.0]
• @types/babel__core 7.20.5
• @types/event-source-polyfill 1.0.5
• @types/js-yaml 4.0.9
• @types/qs 6.15.1
• @types/react 19.2.17
• @types/react-dom 19.2.3
• @types/validator 13.15.10
• @vitejs/plugin-react 6.0.2
• babel-plugin-react-compiler 1.0.0
• code-inspector-plugin 1.5.4 → [Updates: 1.6.0]
• cors 2.8.6
• happy-dom ^20.10.2 → [Updates: ^20.10.2]
• rollup ^4.61.1 → [Updates: ^4.61.1]
• tailwindcss ^4.3.0 → [Updates: ^4.3.0]
• typescript 6.0.3
• vite-plugin-checker 0.14.1
• vite-plugin-mkcert 2.1.0

apps/admin/polyfills/packages/path/package.json

apps/core/external/pino/package.json

apps/core/external/request/package.json

apps/core/package.json (127)

• @antfu/install-pkg 1.1.0
• @babel/core 7.29.7
• @babel/plugin-transform-modules-commonjs 7.29.7
• @babel/plugin-transform-typescript 7.29.7
• @babel/types ^7.29.7
• @better-auth/api-key ^1.6.16 → [Updates: ^1.6.16]
• @better-auth/passkey ^1.6.16 → [Updates: ^1.6.16]
• @earendil-works/pi-ai 0.79.1 → [Updates: 0.79.3]
• @fastify/cookie 11.0.2
• @fastify/multipart 10.0.0
• @fastify/static 9.1.3
• @haklex/rich-headless 0.27.0
• @innei/next-async 0.4.0
• @innei/pretty-logger-nestjs 0.4.2
• @keyv/redis 5.1.6
• @lexical/code-core ^0.45.0
• @lexical/extension ^0.45.0
• @lexical/headless ^0.45.0
• @lexical/link ^0.45.0
• @lexical/list ^0.45.0
• @lexical/rich-text ^0.45.0
• @lexical/table ^0.45.0
• @nestjs/cache-manager 3.1.3
• @nestjs/common 11.1.26
• @nestjs/core 11.1.26
• @nestjs/event-emitter 3.1.0
• @nestjs/mapped-types ^2.1.1
• @nestjs/platform-fastify 11.1.26
• @nestjs/platform-socket.io 11.1.26
• @nestjs/schedule 6.1.3
• @nestjs/throttler 6.5.0
• @nestjs/websockets 11.1.26
• @socket.io/redis-adapter 8.3.0
• @socket.io/redis-emitter 5.1.0
• @types/jsonwebtoken 9.0.10
• axios ^1.17.0 → [Updates: ^1.17.0]
• axios-retry 4.5.0
• bcryptjs ^3.0.3
• better-auth ^1.6.16 → [Updates: ^1.6.16]
• cache-manager 7.2.8
• commander 15.0.0
• dayjs 1.11.21
• diff-match-patch ^1.0.5
• dotenv ^17.4.2
• dotenv-expand ^13.0.0
• drizzle-orm ^0.45.2
• ejs 6.0.1
• es-toolkit ^1.47.0 → [Updates: ^1.47.0]
• file-type ^22.0.1
• form-data 4.0.5 → [Updates: 4.0.6]
• inquirer ^14.0.2
• isbot 5.1.42
• js-yaml ^4.2.0
• json5 2.2.3
• jsondiffpatch ^0.7.6
• jsonrepair ^3.14.0
• jsonwebtoken 9.0.3
• jszip 3.10.1
• keyv 5.6.0
• lexical ^0.45.0
• linkedom 0.18.12
• lru-cache 11.5.1
• marked 18.0.5
• mime-types ^3.0.2
• mkdirp ^3.0.1
• nanoid 5.1.11
• nestjs-zod ^5.4.0
• node-machine-id 1.1.12
• nodemailer 8.0.11 → [Updates: 9.0.0]
• object-scan ^20.0.4
• octokit ^5.0.5
• p-limit ^7.3.0
• pg ^8.21.0
• picocolors ^1.1.1
• pluralize ^8.0.0
• qs 6.15.2
• rebuild ^0.1.2
• reflect-metadata 0.2.2
• remove-markdown 0.6.4
• remove-md-codeblock 0.0.4
• resend ^6.12.4
• rxjs 7.8.2
• semver 7.8.4
• slugify 1.6.9
• source-map-support ^0.5.21
• thumbhash 0.1.1
• typebox 1.2.8 → [Updates: 1.2.10]
• ua-parser-js 2.0.10
• wildcard-match 5.1.4
• xss 1.0.15
• zod 4.4.3
• @nestjs/cli 11.0.23
• @nestjs/schematics 11.1.0
• @nestjs/testing 11.1.26
• @swc/cli ^0.8.1
• @swc/core 1.15.41
• @testcontainers/postgresql ^12.0.1 → [Updates: ^12.0.1]
• @types/babel__core 7.20.5
• @types/diff-match-patch ^1.0.36
• @types/ejs 3.1.5
• @types/get-image-colors 4.0.5
• @types/js-yaml 4.0.9
• @types/mime-types 3.0.1
• @types/node 25.9.3
• @types/nodemailer 8.0.1
• @types/pg ^8.20.0
• @types/qs 6.15.1
• @types/remove-markdown 0.3.4
• @types/semver 7.7.1
• @types/ua-parser-js 0.7.39
• @types/validator 13.15.10
• @vitest/coverage-v8 ^4.1.8
• drizzle-kit ^0.31.10
• ioredis 5.11.1
• mongodb ~7.3.0
• nodemon ^3.1.14
• redis-memory-server ^0.16.1
• rimraf 6.1.3
• sharp 0.34.5 → [Updates: 0.35.1]
• socket.io ^4.8.3
• testcontainers ^12.0.1 → [Updates: ^12.0.1]
• tsx ^4.22.4
• typescript 6.0.3
• unplugin-swc 1.5.9
• vite-node ^6.0.0
• vite-tsconfig-paths 6.1.1
• node >=22

apps/telemetry/package.json (3)

• rebuild ^0.1.2
• @cloudflare/workers-types ^4.20260611.1 → [Updates: ^4.20260611.1]
• wrangler ^4.99.0 → [Updates: ^4.99.0]

external/pino/package.json

external/request/package.json

package.json (24)

• @ianvs/prettier-plugin-sort-imports 4.7.1
• @lobehub/eslint-config ^2.1.5
• @types/node 25.9.3
• cross-env 10.1.0
• eslint ^10.4.1 → [Updates: ^10.4.1]
• lint-staged 17.0.7
• prettier 3.8.4
• prettier-package-json 2.8.0
• prettier-plugin-ember-template-tag 2.1.6
• redis-memory-server 0.16.1
• rimraf 6.1.3
• rolldown 1.1.0 → [Updates: 1.1.1]
• simple-git-hooks 2.13.1
• ts-node 10.9.2
• tsconfig-paths 4.2.0
• typescript 6.0.3
• vite-tsconfig-paths 6.1.1
• node >=22
• rolldown 1.1.0 → [Updates: 1.1.1]
• semver 7.8.4
• typescript 6.0.3
• whatwg-url 16.0.1
• zod 4.4.3
• pnpm 11.5.3 → [Updates: 11.6.0]

packages/ai/package.json (3)

• typebox 1.2.8 → [Updates: 1.2.10]
• tsdown 0.22.2
• typescript 6.0.3

packages/api-client/package.json (12)

• @types/cors 2.8.19
• @types/express 5.0.6
• abort-controller 3.0.0
• axios ^1.17.0 → [Updates: ^1.17.0]
• camelcase-keys ^10.0.2
• cors 2.8.6
• es-toolkit 1.47.0 → [Updates: 1.47.1]
• express 5.2.1
• form-data 4.0.5 → [Updates: 4.0.6]
• tsdown 0.22.2
• umi-request 1.4.0
• node >=22

packages/cli/package.json (23)

• @clack/prompts ^1.5.1
• @effect/cli 0.75.2
• @effect/platform 0.96.1
• @effect/platform-node 0.107.0
• @haklex/rich-headless 0.27.0
• @haklex/rich-litexml 0.27.0
• @haklex/rich-litexml-cli 0.27.0
• @lexical/headless ^0.45.0
• better-auth ^1.6.16 → [Updates: ^1.6.16]
• effect 3.21.3
• fast-xml-parser 5.8.0
• get-east-asian-width ^1.6.0
• lexical ^0.45.0
• minisearch ^7.2.0
• open ^11.0.0
• semver 7.8.4
• @effect/vitest 0.29.0
• @types/node 25.9.3
• @types/semver 7.7.1
• tsdown 0.22.2
• tsx ^4.22.4
• typescript 6.0.3
• node >=22

packages/db-schema/package.json (6)

• drizzle-orm ^0.45.2
• zod 4.4.3
• @cloudflare/workers-types 4.20260611.1 → [Updates: 4.20260613.1]
• @types/node 25.9.3
• tsdown 0.22.2
• typescript 6.0.3

packages/editor/package.json (6)

• @haklex/rich-headless 0.27.0
• @haklex/rich-litexml 0.27.0
• @lexical/headless ^0.45.0
• lexical ^0.45.0
• tsdown 0.22.2
• typescript 6.0.3

packages/mongo-pg-cli/package.json (9)

• @cloudflare/workers-types 4.20260611.1 → [Updates: 4.20260613.1]
• @types/pg ^8.20.0
• drizzle-orm ^0.45.2
• mongodb ~7.3.0
• pg ^8.21.0
• tsdown 0.22.2
• tsx ^4.22.4
• typescript 6.0.3
• node >=22

packages/webhook/package.json (4)

• rebuild ^0.1.2
• express 5.2.1
• tsdown 0.22.2
• node >=22

pnpm-workspace.yaml (18)

• eslint-plugin-react-compiler>zod 3.25.76 → [Updates: 4.4.3]
• kysely 0.28.17 → [Updates: 0.29.2]
• mongodb ~7.3.0
• rolldown 1.1.0 → [Updates: 1.1.1]
• semver 7.8.4
• typescript 6.0.3
• whatwg-url 16.0.1
• zod 4.4.3
• lodash-es@<4.18.0 4.18.1
• nanoid@<3.3.8 3.3.12 → [Updates: 5.1.11]
• nanoid@>=4.0.0 <5.0.9 5.1.11
• tmp@<0.2.6 0.2.7
• uuid@<11.1.1 11.1.1 → [Updates: 14.0.0]
• lucide-react 1.17.0 → [Updates: 1.18.0]
• @codemirror/state 6.6.0
• @codemirror/view 6.43.1
• @codemirror/commands 6.10.3
• @codemirror/language 6.12.3

nvm (1)

.nvmrc (1)

• node 24

---

• Check this box to trigger a request for Renovate to run again on this repository