Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency kysely to v0.29.4
• chore(deps): update dependency nanoid@<3.3.8 to v3.3.16
• chore(deps): update dependency nanoid@>=4.0.0 <5.0.9 to v5.1.16
• chore(deps): update dependency tsdown to v0.22.9
• chore(deps): update pnpm to v11.13.1
• chore(deps): update tailwindcss monorepo to v4.3.3 (@tailwindcss/vite, tailwindcss)
• fix(deps): update dependency @earendil-works/pi-ai to v0.80.10
• fix(deps): update dependency @fastify/cookie to v11.1.2
• fix(deps): update dependency immer to v11.1.15
• chore(deps): update dependency @cloudflare/workers-types to v5.20260718.1
• chore(deps): update dependency @cloudflare/workers-types to v5.20260718.1
• chore(deps): update dependency happy-dom to v20.11.0
• chore(deps): update dependency lint-staged to v17.1.0
• chore(deps): update dependency wrangler to v4.112.0
• chore(deps): update pnpm to v11.15.0
• fix(deps): update dependency katex to ^0.18.0
• fix(deps): update dependency lucide-react to v1.25.0
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-node action to v7
• chore(deps): update dependency nanoid@<3.3.8 to v6
• chore(deps): update dependency nanoid@>=4.0.0 <5.0.9 to v6
• chore(deps): update dependency typescript to v7
• chore(deps): update dependency uuid@<11.1.1 to v14
• chore(deps): update redis docker tag to v8
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency code-inspector-plugin to v2.0.3
• chore(deps): update dependency fast-xml-parser to v5.10.1
• chore(deps): update postgres docker tag to v18
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency eslint-plugin-react-compiler>zod to v4

Detected Dependencies

docker-compose (2)

docker-compose.server.yml (2)

• redis 8-alpine
• postgres 16-alpine → [Updates: 18-alpine]

docker-compose.yml (1)

• postgres 16-alpine → [Updates: 18-alpine]

dockerfile (1)

dockerfile (2)

• node 24-alpine
• node 24-alpine

github-actions (5)

.github/actions/setup-node/action.yml (2)

• actions/setup-node v6 → [Updates: v7]
• pnpm/action-setup v6

.github/workflows/admin-release.yml (2)

• actions/checkout v6 → [Updates: v7]
• actions/upload-artifact v7

.github/workflows/api-client.yml (1)

• actions/checkout v6 → [Updates: v7]

.github/workflows/ci.yml (13)

• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• docker/metadata-action v6
• docker/setup-qemu-action v4
• docker/setup-buildx-action v4
• docker/build-push-action v7
• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• postgres 16-alpine → [Updates: 18-alpine]
• postgres 17-alpine → [Updates: 18-alpine]
• redis 7-alpine → [Updates: 8-alpine]
• postgres 16-alpine → [Updates: 18-alpine]

.github/workflows/release.yml (16)

• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• softprops/action-gh-release v3
• actions/checkout v6 → [Updates: v7]
• docker/setup-qemu-action v4
• docker/metadata-action v6
• docker/setup-buildx-action v4
• docker/build-push-action v7
• docker/login-action v4
• docker/build-push-action v7
• actions/upload-artifact v7
• actions/download-artifact v8
• docker/login-action v4
• docker/setup-buildx-action v4
• docker/metadata-action v6
• postgres 16-alpine → [Updates: 18-alpine]

npm (18)

apps/admin/package.json (128)

• @6over3/zeroperl-ts ^1.0.10
• @antv/g2 ^5.4.8
• @base-ui/react 1.6.0
• @better-auth/passkey 1.6.23
• @codemirror/commands 6.10.4
• @codemirror/lang-markdown 6.5.1
• @codemirror/language 6.12.4
• @codemirror/language-data 6.5.2
• @codemirror/search 6.7.1
• @codemirror/state 6.7.1
• @codemirror/theme-one-dark 6.1.3
• @codemirror/view 6.43.6
• @ddietr/codemirror-themes 1.5.2
• @excalidraw/excalidraw ^0.18.1
• @haklex/rich-agent-core 0.31.1
• @haklex/rich-compose 0.31.1
• @haklex/rich-diff 0.31.1
• @haklex/rich-editor 0.31.1
• @haklex/rich-editor-ui 0.31.1
• @haklex/rich-ext-ai-agent 0.31.1
• @haklex/rich-ext-chat 0.31.1
• @haklex/rich-ext-code-snippet 0.31.1
• @haklex/rich-ext-dynamic 0.31.1
• @haklex/rich-ext-embed 0.31.1
• @haklex/rich-ext-excalidraw 0.31.1
• @haklex/rich-ext-gallery 0.31.1
• @haklex/rich-ext-nested-doc 0.31.1
• @haklex/rich-plugin-block-handle 0.31.1
• @haklex/rich-plugin-floating-toolbar 0.31.1
• @haklex/rich-plugin-link-edit 0.31.1
• @haklex/rich-plugin-litexml-paste 0.31.1
• @haklex/rich-plugin-mention 0.31.1
• @haklex/rich-plugin-slash-menu 0.31.1
• @haklex/rich-plugin-table 0.31.1
• @haklex/rich-plugin-toolbar 0.31.1
• @haklex/rich-renderer-alert 0.31.1
• @haklex/rich-renderer-banner 0.31.1
• @haklex/rich-renderer-codeblock 0.31.1
• @haklex/rich-renderer-image 0.31.1
• @haklex/rich-renderer-katex 0.31.1
• @haklex/rich-renderer-linkcard 0.31.1
• @haklex/rich-renderer-mention 0.31.1
• @haklex/rich-renderer-mermaid 0.31.1
• @haklex/rich-renderer-ruby 0.31.1
• @haklex/rich-renderer-video 0.31.1
• @lexical/markdown ^0.48.0
• @lexical/react ^0.48.0
• @lexical/rich-text ^0.48.0
• @lezer/highlight 1.2.3
• @monaco-editor/react 4.7.0
• @pierre/diffs 1.2.12
• @rehookify/datepicker 6.6.8
• @simplewebauthn/browser 13.3.0
• @tanstack/query-async-storage-persister 5.101.2
• @tanstack/query-persist-client-core 5.101.2
• @tanstack/react-query 5.101.2
• @types/canvas-confetti 1.9.0
• @uswriting/exiftool ^1.0.9
• @xterm/addon-fit 0.11.0
• @xterm/xterm 6.0.0
• better-auth 1.6.23
• buffer 6.0.3
• canvas-confetti 1.9.4
• clsx ^2.1.1
• date-fns 4.4.0
• ejs 6.0.1
• es-toolkit 1.49.0
• event-source-polyfill 1.0.31
• exifr ^7.1.3
• fuse.js 7.5.0
• immer 11.1.11 → [Updates: 11.1.15]
• jotai 2.20.2
• js-cookie 3.0.8
• js-yaml 5.2.1
• json5 2.2.3
• katex ^0.17.0 → [Updates: ^0.18.0]
• klinecharts 10.0.0
• lexical ^0.48.0
• lit 3.3.3
• lodash.transform 4.6.0
• lucide-react 1.24.0 → [Updates: 1.25.0]
• maplibre-gl 5.24.0
• marked 18.0.6
• monaco-editor 0.55.1
• motion 12.42.2
• ofetch 1.5.1
• os-browserify 0.3.0
• path-browserify 1.0.1
• qier-progress 1.0.4
• qs 6.15.3
• react 19.2.7
• react-dom 19.2.7
• react-resizable-panels 4.12.2
• react-router 8.2.0
• recharts 3.9.2
• shiki 4.3.1
• socket.io-client 4.8.3
• sonner 2.0.7
• streamdown ^2.5.0
• tailwind-merge ^3.6.0
• thumbhash 0.1.1
• tinykeys 4.0.0
• validator 13.15.35
• xss 1.0.15
• zod 4.4.3
• zustand 5.0.14
• @babel/core 8.0.1
• @babel/parser ^8.0.4
• @babel/types ^8.0.4
• @rolldown/plugin-babel 0.2.3
• @tailwindcss/vite ^4.3.2 → [Updates: ^4.3.2]
• @types/babel__core 7.20.5
• @types/event-source-polyfill 1.0.5
• @types/js-yaml 4.0.9
• @types/qs 6.15.1
• @types/react 19.2.17
• @types/react-dom 19.2.3
• @types/validator 13.15.10
• @vitejs/plugin-react 6.0.3
• babel-plugin-react-compiler 1.0.0
• code-inspector-plugin 2.0.1 → [Updates: 2.0.3]
• cors 2.8.6
• happy-dom ^20.10.6 → [Updates: ^20.10.6]
• rollup ^4.62.2
• tailwindcss ^4.3.2 → [Updates: ^4.3.2]
• typescript 6.0.3 → [Updates: 7.0.2]
• vite-plugin-checker 0.14.4
• vite-plugin-mkcert 2.1.0

apps/admin/polyfills/packages/path/package.json

apps/core/external/pino/package.json

apps/core/external/request/package.json

apps/core/package.json (127)

• @antfu/install-pkg 1.1.0
• @babel/core 8.0.1
• @babel/plugin-transform-modules-commonjs 8.0.1
• @babel/plugin-transform-typescript 8.0.1
• @babel/types ^8.0.4
• @better-auth/api-key ^1.6.23
• @better-auth/passkey ^1.6.23
• @earendil-works/pi-ai 0.80.7 → [Updates: 0.80.10]
• @fastify/cookie 11.1.1 → [Updates: 11.1.2]
• @fastify/multipart 10.1.0
• @fastify/static 10.1.0
• @haklex/rich-headless 0.31.1
• @innei/next-async 0.4.0
• @innei/pretty-logger-nestjs 0.4.2
• @keyv/redis 5.1.6
• @lexical/code-core ^0.48.0
• @lexical/extension ^0.48.0
• @lexical/headless ^0.48.0
• @lexical/link ^0.48.0
• @lexical/list ^0.48.0
• @lexical/rich-text ^0.48.0
• @lexical/table ^0.48.0
• @nestjs/cache-manager 3.1.3
• @nestjs/common 11.1.28
• @nestjs/core 11.1.28
• @nestjs/event-emitter 3.1.0
• @nestjs/mapped-types ^2.1.1
• @nestjs/platform-fastify 11.1.28
• @nestjs/platform-socket.io 11.1.28
• @nestjs/schedule 6.1.3
• @nestjs/throttler 6.5.0
• @nestjs/websockets 11.1.28
• @socket.io/redis-adapter 8.3.0
• @socket.io/redis-emitter 5.1.0
• @types/jsonwebtoken 9.0.10
• bcryptjs ^3.0.3
• better-auth ^1.6.23
• cache-manager 7.2.9
• commander 15.0.0
• dayjs 1.11.21
• diff-match-patch ^1.0.5
• dotenv ^17.4.2
• dotenv-expand ^13.0.0
• drizzle-orm ^0.45.2
• ejs 6.0.1
• es-toolkit ^1.49.0
• file-type ^22.0.1
• form-data 4.0.6
• inquirer ^14.0.2
• isbot 5.2.1
• js-yaml ^5.2.1
• json5 2.2.3
• jsondiffpatch ^0.7.6
• jsonrepair ^3.15.0
• jsonwebtoken 9.0.3
• jszip 3.10.1
• keyv 5.6.0
• lexical ^0.48.0
• linkedom 0.18.13
• lru-cache 11.5.2
• marked 18.0.6
• mime-types ^3.0.2
• mkdirp ^3.0.1
• nanoid 6.0.0
• nestjs-zod ^5.4.0
• node-machine-id 1.1.12
• nodemailer 9.0.3
• object-scan ^20.0.4
• octokit ^5.0.5
• ofetch 1.5.1
• p-limit ^7.3.0
• pg ^8.22.0
• picocolors ^1.1.1
• pluralize ^8.0.0
• qs 6.15.3
• rebuild ^0.1.2
• reflect-metadata 0.2.2
• remove-markdown 0.6.4
• remove-md-codeblock 0.0.4
• resend ^6.17.2
• rxjs 7.8.2
• semver 7.8.5
• slugify 1.6.9
• source-map-support ^0.5.21
• thumbhash 0.1.1
• typebox 1.3.6
• ua-parser-js 2.0.10
• undici ^8.7.0
• wildcard-match 5.1.4
• xss 1.0.15
• zod 4.4.3
• @nestjs/cli 11.0.24
• @nestjs/schematics 11.1.0
• @nestjs/testing 11.1.28
• @swc/cli ^0.8.1
• @swc/core 1.15.43
• @testcontainers/postgresql ^12.0.4
• @types/babel__core 7.20.5
• @types/diff-match-patch ^1.0.36
• @types/ejs 3.1.5
• @types/get-image-colors 4.0.5
• @types/js-yaml 4.0.9
• @types/mime-types 3.0.1
• @types/node 26.1.1
• @types/nodemailer 8.0.1
• @types/pg ^8.20.0
• @types/qs 6.15.1
• @types/remove-markdown 0.3.4
• @types/semver 7.7.1
• @types/ua-parser-js 0.7.39
• @types/validator 13.15.10
• @vitest/coverage-v8 ^4.1.10
• drizzle-kit ^0.31.10
• ioredis 5.11.1
• mongodb ~7.5.0
• nodemon ^3.1.14
• redis-memory-server ^0.17.0
• rimraf 6.1.3
• sharp 0.35.3
• socket.io ^4.8.3
• testcontainers ^12.0.4
• tsx ^4.23.1
• typescript 6.0.3 → [Updates: 7.0.2]
• unplugin-swc 1.5.9
• vite-node ^6.0.0
• vite-tsconfig-paths 6.1.1
• node >=22

apps/telemetry/package.json (3)

• rebuild ^0.1.2
• @cloudflare/workers-types ^5.20260715.1 → [Updates: ^5.20260715.1]
• wrangler ^4.111.0 → [Updates: ^4.111.0]

external/pino/package.json

external/request/package.json

package.json (25)

• @ianvs/prettier-plugin-sort-imports 4.7.1
• @lobehub/eslint-config ^2.1.5
• @types/node 26.1.1
• cross-env 10.1.0
• eslint ^10.7.0
• lint-staged 17.0.8 → [Updates: 17.1.0]
• prettier 3.9.5
• prettier-package-json 2.8.0
• prettier-plugin-ember-template-tag 2.1.7
• redis-memory-server 0.17.0
• rimraf 6.1.3
• rolldown 1.2.0
• simple-git-hooks 2.13.1
• ts-node 10.9.2
• tsconfig-paths 4.2.0
• typescript 6.0.3 → [Updates: 7.0.2]
• vite-tsconfig-paths 6.1.1
• node >=22
• rolldown 1.2.0
• semver 7.8.5
• typescript 6.0.3 → [Updates: 7.0.2]
• undici ^8.7.0
• whatwg-url 17.1.0
• zod 4.4.3
• pnpm 11.13.0 → [Updates: 11.13.1, 11.15.0]

packages/ai/package.json (3)

• typebox 1.3.6
• tsdown 0.22.8 → [Updates: 0.22.9]
• typescript 6.0.3 → [Updates: 7.0.2]

packages/api-client/package.json (13)

• @types/cors 2.8.19
• @types/express 5.0.6
• abort-controller 3.0.0
• axios ^1.18.1
• camelcase-keys ^10.0.2
• cors 2.8.6
• es-toolkit 1.49.0
• express 5.2.1
• form-data 4.0.6
• tsdown 0.22.8 → [Updates: 0.22.9]
• typescript 6.0.3 → [Updates: 7.0.2]
• umi-request 1.4.0
• node >=22

packages/cli/package.json (24)

• @clack/prompts ^1.7.0
• @effect/cli 0.76.0
• @effect/platform 0.97.0
• @effect/platform-node 0.108.0
• @effect/vitest 0.30.0
• @haklex/rich-compose 0.31.1
• @haklex/rich-headless 0.31.1
• @haklex/rich-litexml 0.31.1
• @haklex/rich-litexml-cli 0.31.1
• @lexical/headless ^0.48.0
• @types/node 26.1.1
• @types/semver 7.7.1
• better-auth ^1.6.23
• effect 3.22.0
• fast-xml-parser 5.10.0 → [Updates: 5.10.1]
• get-east-asian-width ^1.6.0
• lexical ^0.48.0
• minisearch ^7.2.0
• open ^11.0.0
• semver 7.8.5
• tsdown 0.22.8 → [Updates: 0.22.9]
• tsx ^4.23.1
• typescript 6.0.3 → [Updates: 7.0.2]
• node >=22

packages/db-schema/package.json (6)

• drizzle-orm ^0.45.2
• zod 4.4.3
• @cloudflare/workers-types 5.20260715.1 → [Updates: 5.20260718.1]
• @types/node 26.1.1
• tsdown 0.22.8 → [Updates: 0.22.9]
• typescript 6.0.3 → [Updates: 7.0.2]

packages/e2e/package.json (13)

• @nestjs/testing 11.1.28
• @swc/core 1.15.43
• @testcontainers/postgresql ^12.0.4
• @types/node 26.1.1
• @types/pg ^8.20.0
• better-auth ^1.6.23
• drizzle-orm ^0.45.2
• pg ^8.22.0
• testcontainers ^12.0.4
• tsx ^4.23.1
• typescript 6.0.3 → [Updates: 7.0.2]
• unplugin-swc 1.5.9
• vite-tsconfig-paths 6.1.1

packages/editor/package.json (6)

• @haklex/rich-headless 0.31.1
• @haklex/rich-litexml 0.31.1
• @lexical/headless ^0.48.0
• lexical ^0.48.0
• tsdown 0.22.8 → [Updates: 0.22.9]
• typescript 6.0.3 → [Updates: 7.0.2]

packages/mongo-pg-cli/package.json (9)

• @cloudflare/workers-types 5.20260715.1 → [Updates: 5.20260718.1]
• @types/pg ^8.20.0
• drizzle-orm ^0.45.2
• mongodb ~7.5.0
• pg ^8.22.0
• tsdown 0.22.8 → [Updates: 0.22.9]
• tsx ^4.23.1
• typescript 6.0.3 → [Updates: 7.0.2]
• node >=22

packages/webhook/package.json (6)

• rebuild ^0.1.2
• @types/node 26.1.1
• express 5.2.1
• tsdown 0.22.8 → [Updates: 0.22.9]
• typescript 6.0.3 → [Updates: 7.0.2]
• node >=22

pnpm-workspace.yaml (45)

• eslint-plugin-react-compiler>zod 3.25.76 → [Updates: 4.4.3]
• kysely 0.29.3 → [Updates: 0.29.4]
• mongodb ~7.5.0
• rolldown 1.2.0
• semver 7.8.5
• typescript 6.0.3 → [Updates: 7.0.2]
• undici ^8.7.0
• whatwg-url 17.1.0
• zod 4.4.3
• lodash-es@<4.18.0 4.18.1
• nanoid@<3.3.8 3.3.12 → [Updates: 3.3.16, 6.0.0]
• nanoid@>=4.0.0 <5.0.9 5.1.11 → [Updates: 5.1.16, 6.0.0]
• tmp@<0.2.6 0.2.7
• uuid@<11.1.1 11.1.1 → [Updates: 14.0.1]
• lucide-react 1.24.0 → [Updates: 1.25.0]
• @codemirror/state 6.7.1
• @codemirror/view 6.43.6
• @codemirror/commands 6.10.4
• @codemirror/language 6.12.4
• shiki ^4.3.1
• lexical 0.48.0
• @lexical/a11y 0.48.0
• @lexical/clipboard 0.48.0
• @lexical/code-core 0.48.0
• @lexical/devtools-core 0.48.0
• @lexical/dragon 0.48.0
• @lexical/extension 0.48.0
• @lexical/hashtag 0.48.0
• @lexical/headless 0.48.0
• @lexical/history 0.48.0
• @lexical/html 0.48.0
• @lexical/internal 0.48.0
• @lexical/link 0.48.0
• @lexical/list 0.48.0
• @lexical/mark 0.48.0
• @lexical/markdown 0.48.0
• @lexical/overflow 0.48.0
• @lexical/plain-text 0.48.0
• @lexical/react 0.48.0
• @lexical/rich-text 0.48.0
• @lexical/selection 0.48.0
• @lexical/table 0.48.0
• @lexical/text 0.48.0
• @lexical/utils 0.48.0
• @lexical/yjs 0.48.0

nvm (1)

.nvmrc (1)

• node 24

---

• Check this box to trigger a request for Renovate to run again on this repository