Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@types/csrf

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency @vitejs/plugin-react to v6.1.0
• chore(deps): update dependency eslint-plugin-react-hooks to v7.1.1
• chore(deps): update dependency lucide-react to v1.33.0
• chore(deps): update dependency typescript to v7
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update pnpm/action-setup action to v6

Detected Dependencies

docker-compose (1)

docker/docker-compose.yml (2)

• postgres 18-alpine
• redis 8-alpine

dockerfile (2)

docker/Dockerfile.backend (2)

• node 26-alpine
• node 26-alpine

docker/Dockerfile.frontend (2)

• node 26-alpine
• nginx 1.31.3-alpine → [Updates: 1.31.4-alpine]

github-actions (3)

.github/workflows/ci.yml (12)

• actions/checkout v7.0.1
• pnpm/action-setup v5 → [Updates: v6]
• actions/setup-node v7
• actions/upload-artifact v7
• actions/checkout v7.0.1
• pnpm/action-setup v5 → [Updates: v6]
• actions/setup-node v7
• actions/upload-artifact v7
• pnpm 11
• node 24
• pnpm 11
• node 24

.github/workflows/lockfile-update.yml (5)

• actions/checkout v7.0.1
• pnpm/action-setup v5 → [Updates: v6]
• actions/setup-node v7
• pnpm 11
• node 24

.github/workflows/security.yml (27)

• actions/checkout v7.0.1
• github/codeql-action v4
• pnpm/action-setup v5 → [Updates: v6]
• actions/setup-node v7
• github/codeql-action v4
• actions/checkout v7.0.1
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4
• actions/checkout v7.0.1
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4
• actions/checkout v7.0.1
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4
• actions/checkout v7.0.1
• actions/dependency-review-action v5.0.0
• actions/checkout v7.0.1
• pnpm/action-setup v5 → [Updates: v6]
• actions/setup-node v7
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• gitleaks/gitleaks-action v3
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• azure/setup-helm v5
• pnpm 11
• node 24
• pnpm 11
• node 24

helm-values (1)

helm/renovate-dashboard/values.yaml (2)

• postgres 18-alpine
• redis 8-alpine

npm (6)

backend/package.json (36)

• @octokit/rest ^22.0.1
• @prisma/adapter-pg ^7.8.0
• @prisma/client ^7.8.0
• @socket.io/redis-adapter ^8.3.0
• connect-redis ^10.0.0
• cookie-parser ^1.4.7
• cors ^2.8.6
• csrf ^3.1.0
• dotenv ^17.3.1 → [Updates: ^17.3.1]
• express ^5.2.1
• express-rate-limit ^8.6.2
• express-session ^1.19.0
• helmet ^8.3.0
• morgan ^1.11.0
• node-cron ^4.6.0
• pg ^8.22.0
• redis ^6.0.0
• socket.io ^4.8.3
• zod ^4.3.6 → [Updates: ^4.3.6]
• @eslint/js ^10.0.1
• @types/cookie-parser ^1.4.10
• @types/cors ^2.8.19
• @types/csrf ^3.1.3
• @types/express ^5.0.6
• @types/express-session ^1.18.2
• @types/morgan ^1.9.10
• @types/node ^26.2.0
• @typescript-eslint/eslint-plugin ^8.58.1
• @typescript-eslint/parser ^8.58.1
• @vitest/coverage-v8 ^4.1.10 → [Updates: ^4.1.10]
• eslint ^10.8.1
• prisma ^7.8.0
• tsx ^4.23.11 → [Updates: ^4.23.11]
• typescript ^6.0.0 → [Updates: ^7.0.0]
• typescript-eslint ^8.58.1
• vitest ^4.1.10 → [Updates: ^4.1.10]

frontend/.vite/deps/package.json

frontend/package.json (28)

• @hashicorp/design-system-tokens ^5.0.0
• @tanstack/react-query ^5.95.2
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• lucide-react ^1.30.0 → [Updates: ^1.30.0]
• react ^19.2.7
• react-dom ^19.2.7
• react-router-dom ^7.18.2
• recharts ^3.10.1
• socket.io-client ^4.8.3
• tailwind-merge ^3.6.0
• @eslint/js ^10.0.1
• @tailwindcss/vite ^4.2.2
• @types/react ^19.2.17
• @types/react-dom ^19.2.3 → [Updates: ^19.2.3]
• @typescript-eslint/eslint-plugin ^8.58.1
• @typescript-eslint/parser ^8.58.1
• @vitejs/plugin-react ^6.0.1 → [Updates: ^6.0.1]
• @vitest/coverage-v8 ^4.1.10 → [Updates: ^4.1.10]
• autoprefixer ^10.4.27 → [Updates: ^10.4.27]
• eslint ^10.8.1
• eslint-plugin-react-hooks ^7.0.1 → [Updates: ^7.0.1]
• postcss ^8.5.18
• tailwindcss ^4.2.4
• typescript ^6.0.0 → [Updates: ^7.0.0]
• typescript-eslint ^8.58.1
• vite ^8.0.16 → [Updates: ^8.0.16]
• vitest ^4.1.10 → [Updates: ^4.1.10]

mcp/package.json (7)

• @modelcontextprotocol/sdk ^1.25.0
• express ^5.2.1
• zod ^4.0.0 → [Updates: ^4.0.0]
• @types/express ^5.0.6
• @types/node ^26.2.0
• typescript ^5.9.3 → [Updates: ^7.0.0]
• node >=20

package.json (2)

• concurrently ^10.0.0 → [Updates: ^10.0.0]
• node >=24.0.0

pnpm-workspace.yaml (18)

• defu >=6.1.5
• picomatch >=4.0.4
• hono >=4.12.25
• @hono/node-server >=1.19.13
• postcss >=8.5.18
• shell-quote >=1.8.4
• fast-uri >=3.1.2
• ws >=8.21.0
• qs >=6.15.2
• brace-expansion >=5.0.9
• engine.io >=6.6.7
• socket.io-parser >=4.2.7
• ip-address >=10.3.1
• nanoid@^3 >=3.3.18
• vite >=8.0.16
• esbuild 0.28.1 → [Updates: 0.28.2]
• pg 8.23.0
• pg-protocol 1.16.0

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository