Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
npm	@nordeck/element-web-guest-module
npm	@nordeck/element-web-opendesk-module
npm	@nordeck/element-web-widget-lifecycle-module
npm	@nordeck/element-web-widget-toggles-module
npm	framer-motion

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Pin gcr.io/distroless/base-nossl-debian12 Docker tag to c843055
• Replace dependency framer-motion with motion
• Update actions/download-artifact digest to 3e5f45b
• Update actions/setup-node digest to 53b8394
• Update gcr.io/distroless/base-nossl-debian12:debug Docker digest to eacaa3a
• Update ghcr.io/element-hq/element-web:latest Docker digest to 5107e63
• Update guibranco/github-status-action-v2 digest to 9bfa877
• Update Node.js to 0174333
• Update dependency @vector-im/compound-design-tokens to v6.10.2
• Update npm non-major dependencies (@microsoft/api-extractor, @stylistic/eslint-plugin, @testcontainers/postgresql, @types/node, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, framer-motion, knip, lint-staged, styled-components, testcontainers, yaml)
• Update dependency typescript to v5.9.3
• Update docker (docker/bake-action, docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action)
• Update setup-cfg non-major dependencies (black, isort, mypy, pydantic)
• Update sigstore/cosign-installer action to v4.1.1
• Update vite (@vitejs/plugin-react, @vitest/coverage-v8, vitest)
• Update actions/cache action to v5
• Update actions/checkout action to v6
• Update dependency @vector-im/compound-design-tokens to v8
• Update dependency black to v26
• Update dependency isort to v8
• Update dependency knip to v6
• Update dependency typescript to v6
• Update docker (major) (docker/bake-action, docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action)
• Update eslint (major) (eslint, eslint-plugin-unicorn)
• Update vite (major) (@vitejs/plugin-react, vite, vitest-sonar-reporter)
• 🔐 Create all pending approval PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency matrix-web-i18n to v3.6.0
• Update dependency flake8 to v7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (3)

modules/restricted-guests/synapse/Dockerfile (2)

• gcr.io/distroless/base-nossl-debian12 debug@sha256:12dbb4f46c5f712fe3da1c7a441602ee91eb87a5d46b0e725b4440b852000538 → [Updates: debug]
• gcr.io/distroless/base-nossl-debian12 unknown version → [Updates: undefined]

packages/element-web-module-api/Dockerfile (2)

• node lts-alpine@sha256:7fddd9ddeae8196abf4a3ef2de34e11f7b1a722119f91f28ddf1e99dcafdf114 → [Updates: lts-alpine]
• ghcr.io/element-hq/element-web latest@sha256:a84f294ce46e4327ebacecb78bfc94cf6a45c7ffa5104a28f06b5ac69d0b2548 → [Updates: latest]

packages/element-web-playwright-common/Dockerfile

github-actions (8)

.github/workflows/publish-release-element-module.yml (7)

• docker/metadata-action v5@318604b99e75e41977312d83839a89be02ca4893 → [Updates: v6, v5]
• docker/login-action v3@5e57cd118135c172c3672efd75eb46360885c0ef → [Updates: v4, v3]
• docker/login-action v3@5e57cd118135c172c3672efd75eb46360885c0ef → [Updates: v4, v3]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad → [Updates: v4.1.1]
• docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435 → [Updates: v4, v3]
• docker/bake-action v6.9.0@3acf805d94d93a86cce4ca44798a76464a75b88c → [Updates: v6.10.0, v7.0.0]
• docker/bake-action v6.9.0@3acf805d94d93a86cce4ca44798a76464a75b88c → [Updates: v6.10.0, v7.0.0]

.github/workflows/publish-release-npm-package.yml (2)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6]

.github/workflows/publish-release-synapse-module.yml (6)

• docker/metadata-action v5@318604b99e75e41977312d83839a89be02ca4893 → [Updates: v6, v5]
• docker/metadata-action v5@318604b99e75e41977312d83839a89be02ca4893 → [Updates: v6, v5]
• docker/login-action v3@5e57cd118135c172c3672efd75eb46360885c0ef → [Updates: v4, v3]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad → [Updates: v4.1.1]
• docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435 → [Updates: v4, v3]
• docker/build-push-action v6@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v7, v6]

.github/workflows/reusable-playwright-tests.yml (8)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6]
• actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v5]
• actions/download-artifact v8@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 → [Updates: v8]
• Eun/http-server-action v1@f71cec1321f665652a46c40b6852f8e5a68bfcd4
• actions/upload-artifact v7@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
• ubuntu 24.04-arm
• node lts/*

.github/workflows/sonarqube.yml (6)

• guibranco/github-status-action-v2 119b3320db3f04d89e91df840844b92d57ce3468 → [Updates: undefined]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/download-artifact v8@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 → [Updates: v8]
• matrix-org/sonarcloud-workflow-action v4.0@820f7c2e9e94ba9e35add0f739691e5c7e23fa25
• guibranco/github-status-action-v2 119b3320db3f04d89e91df840844b92d57ce3468 → [Updates: undefined]
• ubuntu 24.04

.github/workflows/static-analysis.yaml (6)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6]
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405
• ubuntu 24.04-arm
• node lts/*
• python 3.11

.github/workflows/synapse-module.yml (5)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• docker/login-action v3@5e57cd118135c172c3672efd75eb46360885c0ef → [Updates: v4, v3]
• docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435 → [Updates: v4, v3]
• docker/metadata-action v5@318604b99e75e41977312d83839a89be02ca4893 → [Updates: v6, v5]
• docker/build-push-action v6@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v7, v6]

.github/workflows/tests.yml (7)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6]
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405
• actions/upload-artifact v7@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
• ubuntu 24.04-arm
• node lts/*
• python 3.11

npm (8)

modules/banner/element-web/package.json (16)

• @radix-ui/react-dialog ^1.1.6
• @vector-im/compound-design-tokens ^6.0.0 → [Updates: ^6.0.0, ^8.0.0]
• @vector-im/compound-web ^8.0.0
• framer-motion ^12.4.10 → [Updates: ^12.4.10]
• styled-components ^6.1.18 → [Updates: ^6.1.18]
• zod ^4.0.0
• @arcmantle/vite-plugin-import-css-sheet ^1.0.12
• @types/node ^22.10.7 → [Updates: ^22.10.7, ^24.0.0]
• @types/react ^19
• @vitejs/plugin-react ^5.0.0 → [Updates: ^5.0.0, ^6.0.0]
• react 19.2.4
• rollup-plugin-external-globals ^0.13.0
• typescript ^5.7.3 → [Updates: ^6.0.0]
• vite ^7.1.11 → [Updates: ^8.0.0]
• vite-plugin-node-polyfills ^0.25.0 → [Updates: ^0.26.0]
• vite-plugin-svgr ^4.3.0 → [Updates: ^5.0.0]

modules/opendesk/element-web/package.json (13)

• @nordeck/element-web-guest-module ^2.0.0
• @nordeck/element-web-opendesk-module ^0.5.0
• @nordeck/element-web-widget-lifecycle-module ^1.0.1
• @nordeck/element-web-widget-toggles-module ^0.1.0
• @types/node ^22.10.7 → [Updates: ^22.10.7, ^24.0.0]
• @types/react ^19
• @vitejs/plugin-react ^5.0.0 → [Updates: ^5.0.0, ^6.0.0]
• react 19.2.4
• react-dom 19.2.4
• rollup-plugin-external-globals ^0.13.0
• typescript ^5.7.3 → [Updates: ^6.0.0]
• vite ^7.1.11 → [Updates: ^8.0.0]
• vite-plugin-node-polyfills ^0.25.0 → [Updates: ^0.26.0]

modules/restricted-guests/element-web/package.json (13)

• @vector-im/compound-design-tokens ^6.0.0 → [Updates: ^6.0.0, ^8.0.0]
• @vector-im/compound-web ^8.0.0
• styled-components ^6.1.18 → [Updates: ^6.1.18]
• zod ^4.0.0
• @arcmantle/vite-plugin-import-css-sheet ^1.0.12
• @types/node ^22.10.7 → [Updates: ^22.10.7, ^24.0.0]
• @types/react ^19
• @vitejs/plugin-react ^5.0.0 → [Updates: ^5.0.0, ^6.0.0]
• react 19.2.4
• rollup-plugin-external-globals ^0.13.0
• typescript ^5.7.3 → [Updates: ^6.0.0]
• vite ^7.1.11 → [Updates: ^8.0.0]
• vite-plugin-node-polyfills ^0.25.0 → [Updates: ^0.26.0]

modules/restricted-guests/synapse/package.json

modules/widget-lifecycle/element-web/package.json (7)

• zod ^4.0.0
• @types/node ^22.10.7 → [Updates: ^22.10.7, ^24.0.0]
• @vitest/coverage-v8 ^4.0.0 → [Updates: ^4.0.0]
• typescript ^5.7.3 → [Updates: ^6.0.0]
• vite ^7.1.11 → [Updates: ^8.0.0]
• vitest ^4.0.0 → [Updates: ^4.0.0]
• vitest-sonar-reporter ^2.0.0 → [Updates: ^3.0.0]

package.json (26)

• @action-validator/cli ^0.6.0
• @action-validator/core ^0.6.0
• @playwright/test ^1.52.0
• @stylistic/eslint-plugin ^5.0.0 → [Updates: ^5.0.0]
• @types/node ^22.12.0 → [Updates: ^22.12.0, ^24.0.0]
• @typescript-eslint/eslint-plugin ^8.22.0 → [Updates: ^8.22.0]
• @typescript-eslint/parser ^8.22.0 → [Updates: ^8.22.0]
• eslint ^8.26.0 → [Updates: ^10.0.0]
• eslint-config-google ^0.14.0
• eslint-config-prettier ^10.0.0
• eslint-plugin-deprecate ^0.9.0
• eslint-plugin-import ^2.25.4
• eslint-plugin-jsx-a11y ^6.10.2
• eslint-plugin-matrix-org ^3.0.0
• eslint-plugin-react ^7.37.4
• eslint-plugin-react-compiler ^19.0.0-beta-27714ef-20250124
• eslint-plugin-react-hooks ^7.0.0
• eslint-plugin-unicorn ^56.0.0 → [Updates: ^63.0.0]
• husky ^9.1.7
• knip ^5.43.5 → [Updates: ^5.43.5, ^6.0.0]
• lint-staged ^16.0.0 → [Updates: ^16.0.0]
• patch-package ^8.0.1
• prettier ^3.4.2
• typescript ^5.7.3 → [Updates: ^6.0.0]
• node >=20.0.0
• yarn 1.22.22

packages/element-web-module-api/package.json (22)

• @matrix-org/react-sdk-module-api ^2.5.0
• @microsoft/api-extractor ^7.49.1 → [Updates: ^7.49.1]
• @types/node ^22.10.7 → [Updates: ^22.10.7, ^24.0.0]
• @types/react ^19
• @types/react-dom ^19.0.4
• @types/semver ^7.5.8
• @vitest/coverage-v8 ^4.0.0 → [Updates: ^4.0.0]
• matrix-web-i18n ^3.3.0 → [Updates: ^3.3.0]
• matrix-widget-api ^1.17.0
• rollup-plugin-external-globals ^0.13.0
• semver ^7.6.3
• typescript ^5.7.3 → [Updates: ^6.0.0]
• vite ^7.1.11 → [Updates: ^8.0.0]
• vite-plugin-dts ^4.5.0
• vitest ^4.0.0 → [Updates: ^4.0.0]
• vitest-sonar-reporter ^3.0.0
• @matrix-org/react-sdk-module-api *
• @types/react *
• @types/react-dom *
• matrix-web-i18n *
• react ^19
• node >=20.0.0

packages/element-web-playwright-common/package.json (13)

• @axe-core/playwright ^4.10.1
• @testcontainers/postgresql ^11.0.0 → [Updates: ^11.0.0]
• glob ^13.0.5
• lodash-es ^4.17.23
• mailpit-api ^1.2.0
• strip-ansi ^7.1.0
• testcontainers ^11.0.0 → [Updates: ^11.0.0]
• yaml ^2.7.0 → [Updates: ^2.7.0]
• @types/lodash-es ^4.17.12
• typescript ^5.8.2 → [Updates: ^5.8.2, ^6.0.0]
• @playwright/test ^1.52.0
• playwright-core ^1.52.0
• node >=20.0.0

pep621 (1)

modules/restricted-guests/synapse/pyproject.toml

renovate-config-presets (1)

.github/renovate.json

setup-cfg (1)

modules/restricted-guests/synapse/setup.cfg (5)

• mypy == 1.10.0 → [Updates: ==1.19.1]
• pydantic == 2.4.2 → [Updates: ==2.12.5]
• black == 22.3.0 → [Updates: ==22.12.0, ==26.3.1]
• flake8 == 4.0.1 → [Updates: ==7.3.0]
• isort == 5.9.3 → [Updates: ==5.13.2, ==8.0.1]

---

• Check this box to trigger a request for Renovate to run again on this repository