Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• deps: lock file maintenance

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• deps: update react monorepo (@types/react, eslint-plugin-react-hooks)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• deps: update dependency @types/node to v24.12.2
• deps: update dependency react-hook-form to v7.72.1
• deps: update turbo monorepo to v2.9.4 (eslint-config-turbo, eslint-plugin-turbo, turbo)
• deps: update aws-sdk-js-v3 monorepo to v3.1024.0 (@aws-sdk/client-s3, @aws-sdk/s3-request-presigner)
• deps: update dependency eslint to v10.2.0
• deps: update dependency react-resizable-panels to v4.9.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• deps: update nextjs monorepo (@next/eslint-plugin-next, eslint-config-next, next)
• deps: update dependency eslint-plugin-react-hooks to v7
• deps: update dependency typescript to v6
• deps: update nextjs monorepo to v16 (major) (@next/eslint-plugin-next, eslint-config-next)
• deps: update prisma monorepo to v7 (major) (@prisma/client, prisma)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

docker-compose.yml (3)

• postgres 18.3
• redis 8.6
• quay.io/keycloak/keycloak 26.5.7

dockerfile (5)

API.Dockerfile (1)

• node 24.14.1

Playwright.Dockerfile (1)

• node 24.14.1

terraform/Dockerfile (1)

• hashicorp/terraform 1.14

UI.Dockerfile (1)

• node 24.14.1

Worker.Dockerfile (1)

• node 24.14.1

github-actions (7)

.github/workflows/docker.yml (11)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
• actions/cache v5.0.4@668228422ae6a00e4ad889ee87cd7109ec5666a7
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf
• docker/build-push-action v7.0.0@d08e5c354a6adb9ed34480a06d141179aa583294
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf
• docker/build-push-action v7.0.0@d08e5c354a6adb9ed34480a06d141179aa583294
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf
• docker/build-push-action v7.0.0@d08e5c354a6adb9ed34480a06d141179aa583294

.github/workflows/eslint.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f
• node 24.14.1

.github/workflows/formatting.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f
• node 24.14.1

.github/workflows/playwright.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
• node 24.14.1

.github/workflows/renovate-validation.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ubuntu 24.04

.github/workflows/reuse.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• fsfe/reuse-action v6@676e2d560c9a403aa252096d99fcab3e1132b0f5

.github/workflows/unittest.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f
• node 24.14.1

npm (12)

apps/api/package.json (50)

• @zodios/express 10.6.0
• @zodios/openapi 10.5.0
• adm-zip 0.5.17
• braces ^3.0.3
• bull 4.16.5
• compression 1.8.1
• connect-pg-simple 10.0.0
• cookie-parser 1.4.7
• cors 2.8.6
• es-toolkit 1.45.1
• express 4.22.1
• express-session 1.19.0
• glob-parent ^6.0.2
• glob-to-regexp ^0.4.1
• is-valid-path ^0.1.1
• keycloak-authorization-services ^2.0.3
• keycloak-connect ^26.0.7
• loglevel 1.9.2
• minimatch 10.2.5
• node-cache 5.1.2
• node-cron 4.2.1
• packageurl-js 2.0.1
• passport 0.7.0
• passport-local 1.0.0
• swagger-ui-express 5.0.1
• @ngneat/falso ^8.0.0
• @playwright/test 1.59.1
• @types/adm-zip 0.5.8
• @types/braces ^3.0.4
• @types/chai 5.2.3
• @types/compression 1.8.1
• @types/connect-pg-simple 7.0.3
• @types/cookie-parser 1.4.10
• @types/cors 2.8.19
• @types/express 4.17.25
• @types/express-session 1.18.2
• @types/glob-parent 5.1.3
• @types/glob-to-regexp ^0.4.4
• @types/is-valid-path 0.1.2
• @types/mocha 10.0.10
• @types/node 24.12.0 → [Updates: 24.12.2]
• @types/node-cron 3.0.11
• @types/passport 1.0.17
• @types/passport-local 1.0.38
• @types/swagger-ui-express 4.1.8
• chai 6.2.2
• dotenv-cli 11.0.0
• mocha 11.7.5
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 6.0.2]

apps/clearance_ui/package.json (67)

• @hookform/resolvers 5.1.0
• @monaco-editor/react 4.7.0
• @radix-ui/react-accordion 1.2.12
• @radix-ui/react-alert-dialog 1.1.15
• @radix-ui/react-avatar 1.1.11
• @radix-ui/react-checkbox 1.3.3
• @radix-ui/react-context-menu 2.2.16
• @radix-ui/react-dialog 1.1.15
• @radix-ui/react-dropdown-menu 2.1.16
• @radix-ui/react-label 2.1.8
• @radix-ui/react-popover 1.1.15
• @radix-ui/react-radio-group 1.3.8
• @radix-ui/react-select 2.2.6
• @radix-ui/react-separator 1.1.8
• @radix-ui/react-slot 1.2.4
• @radix-ui/react-tabs 1.1.13
• @radix-ui/react-toast 1.2.15
• @radix-ui/react-toggle 1.1.10
• @radix-ui/react-tooltip 1.2.8
• @tanstack/react-query 4.35.3
• @tanstack/react-query-devtools 4.35.3
• @tanstack/react-table 8.21.3
• @zodios/core 10.9.6
• @zodios/react 10.4.5
• axios 1.14.0
• check-password-strength 3.0.0
• class-variance-authority 0.7.1
• clsx 2.1.1
• cmdk 1.1.1
• es-toolkit 1.45.1
• generate-password 1.7.1
• js-yaml 4.1.1
• lucide-react 1.7.0
• minimatch 10.2.5
• next 16.1.7 → [Updates: 16.2.1]
• next-auth ^4.24.11
• next-themes 0.4.6
• node-cache ^5.1.2
• nuqs 2.8.9
• packageurl-js 2.0.1
• react-arborist 3.4.3
• react-copy-to-clipboard 5.1.1
• react-hook-form 7.72.0 → [Updates: 7.72.1]
• react-icons 5.6.0
• react-resizable-panels 4.8.0 → [Updates: 4.9.0]
• tailwind-merge 3.5.0
• tailwindcss-animate 1.0.7
• zod 3.22.4
• zustand 5.0.12
• @next/eslint-plugin-next 15.5.12 → [Updates: 15.5.14, 16.2.1]
• @playwright/test 1.59.1
• @tailwindcss/postcss ^4.0.0
• @testing-library/jest-dom 6.9.1
• @testing-library/react 16.3.2
• @types/js-yaml 4.0.9
• @types/node 24.12.0 → [Updates: 24.12.2]
• @types/react 19.2.0 → [Updates: 19.2.14]
• @types/react-copy-to-clipboard 5.0.7
• @types/spdx-expression-parse 3.0.5
• dotenv-cli ^11.0.0
• jest 30.3.0
• jest-environment-jsdom 30.3.0
• next-router-mock 1.0.5
• tailwindcss ^4.0.0
• ts-jest 29.4.9
• ts-node 10.9.2
• typescript 5.9.3 → [Updates: 6.0.2]

apps/scanner_worker/package.json (5)

• bull 4.16.5
• @types/node 24.12.0 → [Updates: 24.12.2]
• dotenv-cli 11.0.0
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 6.0.2]

package.json (8)

• @ianvs/prettier-plugin-sort-imports 4.7.1
• dotenv-cli 11.0.0
• prettier 3.8.1
• prettier-plugin-tailwindcss 0.7.2
• rimraf 6.1.3
• tsx 4.21.0
• turbo 2.9.3 → [Updates: 2.9.4]
• npm 11.12.1

packages/common-helpers/package.json (9)

• pako 2.1.0
• @types/chai 5.2.3
• @types/mocha 10.0.10
• @types/node 24.12.0 → [Updates: 24.12.2]
• @types/pako 2.0.4
• chai 6.2.2
• mocha 11.7.5
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 6.0.2]

packages/database/package.json (9)

• @keycloak/keycloak-admin-client ^26.5.0
• @prisma/client 6.19.3 → [Updates: 7.6.0]
• adm-zip 0.5.17
• @types/adm-zip 0.5.8
• @types/node 24.12.0 → [Updates: 24.12.2]
• prisma 6.19.3 → [Updates: 7.6.0]
• ts-node 10.9.2
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 6.0.2]

packages/eslint-config-custom-server/package.json (5)

• @typescript-eslint/eslint-plugin 8.58.0
• @typescript-eslint/parser 8.58.0
• eslint 10.1.0 → [Updates: 10.2.0]
• eslint-config-turbo 2.9.3 → [Updates: 2.9.4]
• eslint-plugin-turbo 2.9.3 → [Updates: 2.9.4]

packages/eslint-config-custom/package.json (13)

• @next/eslint-plugin-next 15.5.12 → [Updates: 15.5.14, 16.2.1]
• @typescript-eslint/eslint-plugin 8.58.0
• @vercel/style-guide 6.0.0
• eslint 10.1.0 → [Updates: 10.2.0]
• eslint-config-next 15.5.12 → [Updates: 15.5.14, 16.2.1]
• eslint-config-prettier 10.1.8
• eslint-config-turbo 2.9.3 → [Updates: 2.9.4]
• eslint-plugin-jest-dom 5.5.0
• eslint-plugin-playwright 2.10.1
• eslint-plugin-react 7.37.5
• eslint-plugin-react-hooks 6.1.0 → [Updates: 6.1.1, 7.0.1]
• eslint-plugin-testing-library 7.16.2
• eslint-plugin-turbo 2.9.3 → [Updates: 2.9.4]

packages/s3-helpers/package.json (11)

• @aws-sdk/client-s3 3.1020.0 → [Updates: 3.1024.0]
• @aws-sdk/s3-request-presigner 3.1020.0 → [Updates: 3.1024.0]
• @smithy/node-http-handler ^4.0.0
• stream 0.0.3
• @types/chai 5.2.3
• @types/mocha 10.0.10
• @types/node 24.12.0 → [Updates: 24.12.2]
• chai 6.2.2
• mocha 11.7.5
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 6.0.2]

packages/spdx-validation/package.json (7)

• spdx-exceptions ^2.5.0
• spdx-license-ids ^3.0.20
• @types/jest 30.0.0
• @types/node 24.12.0 → [Updates: 24.12.2]
• jest ^30.0.0
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 6.0.2]

packages/tsconfig/package.json

packages/validation-helpers/package.json (11)

• @zodios/express 10.6.0
• check-password-strength 3.0.0
• is-glob 4.0.3
• packageurl-js 2.0.1
• zod 3.22.4
• @types/is-glob 4.0.4
• @types/jest ^30.0.0
• jest ^30.0.0
• ts-jest ^29.2.5
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 6.0.2]

pip_requirements (1)

requirements.txt (1)

• scancode-toolkit ==32.5.0

regex (4)

.github/workflows/eslint.yml (1)

• node 24.14.1

.github/workflows/formatting.yml (1)

• node 24.14.1

.github/workflows/playwright.yml (1)

• node 24.14.1

.github/workflows/unittest.yml (1)

• node 24.14.1

renovate-config-presets (1)

renovate.json

terraform (1)

terraform/keycloak.tf (1)

• keycloak 5.7.0

---

• Check this box to trigger a request for Renovate to run again on this repository