Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• deps: update typescript-eslint monorepo to v8.62.1 (@typescript-eslint/eslint-plugin, @typescript-eslint/parser)
• deps: update dependency prettier to v3.9.3
• deps: update dependency react-arborist to v3.12.0
• deps: update dependency react-resizable-panels to v4.12.0
• deps: update npm to v11.18.0
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• deps: update dependency eslint-plugin-playwright to v2.10.5
• deps: update dependency js-yaml to v5.2.1
• deps: update dependency pako to v3.0.1
• deps: update radix-ui-primitives monorepo (@radix-ui/react-accordion, @radix-ui/react-alert-dialog, @radix-ui/react-avatar, @radix-ui/react-checkbox, @radix-ui/react-context-menu, @radix-ui/react-dialog, @radix-ui/react-dropdown-menu, @radix-ui/react-label, @radix-ui/react-popover, @radix-ui/react-radio-group, @radix-ui/react-select, @radix-ui/react-separator, @radix-ui/react-tabs, @radix-ui/react-toast, @radix-ui/react-toggle, @radix-ui/react-tooltip)
• deps: update turbo monorepo to v2.10.4 (eslint-config-turbo, eslint-plugin-turbo, turbo)
• deps: update dependency lucide-react to v1.23.0
• deps: update dependency node-cron to v4.6.0
• deps: update dependency nuqs to v2.9.0
• deps: update dependency react-hook-form to v7.81.0
• deps: update dependency react-icons to v5.7.0
• deps: update dependency tsx to v4.23.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• deps: update nextjs monorepo (@next/eslint-plugin-next, eslint-config-next, next)
• deps: update aws-sdk-js-v3 monorepo to v3.1076.0 (@aws-sdk/client-s3, @aws-sdk/s3-request-presigner)
• deps: update dependency typescript to v6
• deps: update nextjs monorepo to v16 (@next/eslint-plugin-next, eslint-config-next)
• deps: update prisma monorepo to v7 (@prisma/client, prisma)
• deps: lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

docker-compose.yml (3)

• postgres 18.4
• redis 8.8
• quay.io/keycloak/keycloak 26.6.4

dockerfile (5)

API.Dockerfile (1)

• node 24.18.0

Playwright.Dockerfile (1)

• node 24.18.0

terraform/Dockerfile (1)

• hashicorp/terraform 1.15

UI.Dockerfile (1)

• node 24.18.0

Worker.Dockerfile (1)

• node 24.18.0

github-actions (7)

.github/workflows/docker.yml (11)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• docker/login-action v4.4.0@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• docker/login-action v4.4.0@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a

.github/workflows/eslint.yml (3)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• node 24.18.0

.github/workflows/formatting.yml (3)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• node 24.18.0

.github/workflows/playwright.yml (4)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• node 24.18.0

.github/workflows/renovate-validation.yml (2)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• ubuntu 24.04

.github/workflows/reuse.yml (2)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• fsfe/reuse-action v6@676e2d560c9a403aa252096d99fcab3e1132b0f5

.github/workflows/unittest.yml (3)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• node 24.18.0

npm (12)

apps/api/package.json (50)

• @zodios/express 10.6.0
• @zodios/openapi 10.5.0
• adm-zip 0.5.18
• braces ^3.0.3
• bull 4.16.5
• compression 1.8.1
• connect-pg-simple 10.0.0
• cookie-parser 1.4.7
• cors 2.8.6
• es-toolkit 1.49.0
• express 4.22.2
• express-session 1.19.0
• glob-parent ^6.0.2
• glob-to-regexp ^0.4.1
• is-valid-path ^0.1.1
• keycloak-authorization-services ^2.0.3
• keycloak-connect ^26.0.7
• loglevel 1.9.2
• minimatch 10.2.5
• node-cache 5.1.2
• node-cron 4.5.0 → [Updates: 4.6.0]
• packageurl-js 2.0.1
• passport 0.7.0
• passport-local 1.0.0
• swagger-ui-express 5.0.1
• @ngneat/falso ^8.0.0
• @playwright/test 1.61.1
• @types/adm-zip 0.5.8
• @types/braces ^3.0.4
• @types/chai 5.2.3
• @types/compression 1.8.1
• @types/connect-pg-simple 7.0.3
• @types/cookie-parser 1.4.10
• @types/cors 2.8.19
• @types/express 4.17.25
• @types/express-session 1.19.0
• @types/glob-parent 5.1.3
• @types/glob-to-regexp ^0.4.4
• @types/is-valid-path 0.1.2
• @types/mocha 10.0.10
• @types/node 24.13.2
• @types/node-cron 3.0.11
• @types/passport 1.0.17
• @types/passport-local 1.0.38
• @types/swagger-ui-express 4.1.8
• chai 6.2.2
• dotenv-cli 11.0.0
• mocha 11.7.6
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 6.0.3]

apps/clearance_ui/package.json (67)

• @hookform/resolvers 5.1.0
• @monaco-editor/react 4.7.0
• @radix-ui/react-accordion 1.2.14 → [Updates: 1.2.15]
• @radix-ui/react-alert-dialog 1.1.17 → [Updates: 1.1.18]
• @radix-ui/react-avatar 1.2.0 → [Updates: 1.2.1]
• @radix-ui/react-checkbox 1.3.5 → [Updates: 1.3.6]
• @radix-ui/react-context-menu 2.3.1 → [Updates: 2.3.2]
• @radix-ui/react-dialog 1.1.17 → [Updates: 1.1.18]
• @radix-ui/react-dropdown-menu 2.1.18 → [Updates: 2.1.19]
• @radix-ui/react-label 2.1.10 → [Updates: 2.1.11]
• @radix-ui/react-popover 1.1.17 → [Updates: 1.1.18]
• @radix-ui/react-radio-group 1.4.1 → [Updates: 1.4.2]
• @radix-ui/react-select 2.3.1 → [Updates: 2.3.2]
• @radix-ui/react-separator 1.1.10 → [Updates: 1.1.11]
• @radix-ui/react-slot 1.3.0
• @radix-ui/react-tabs 1.1.15 → [Updates: 1.1.16]
• @radix-ui/react-toast 1.2.17 → [Updates: 1.2.18]
• @radix-ui/react-toggle 1.1.12 → [Updates: 1.1.13]
• @radix-ui/react-tooltip 1.2.10 → [Updates: 1.2.11]
• @tanstack/react-query 4.35.3
• @tanstack/react-query-devtools 4.35.3
• @tanstack/react-table 8.21.3
• @zodios/core 10.9.6
• @zodios/react 10.4.5
• axios 1.18.1
• check-password-strength 3.0.0
• class-variance-authority 0.7.1
• clsx 2.1.1
• cmdk 1.1.1
• es-toolkit 1.49.0
• generate-password 1.7.1
• js-yaml 5.2.0 → [Updates: 5.2.1]
• lucide-react 1.22.0 → [Updates: 1.23.0]
• minimatch 10.2.5
• next 16.2.6 → [Updates: 16.2.9]
• next-auth ^4.24.11
• next-themes 0.4.6
• node-cache ^5.1.2
• nuqs 2.8.9 → [Updates: 2.9.0]
• packageurl-js 2.0.1
• react-arborist 3.10.5 → [Updates: 3.12.0]
• react-copy-to-clipboard 5.1.1
• react-hook-form 7.80.0 → [Updates: 7.81.0]
• react-icons 5.6.0 → [Updates: 5.7.0]
• react-resizable-panels 4.11.2 → [Updates: 4.12.0]
• tailwind-merge 3.6.0
• tailwindcss-animate 1.0.7
• zod 3.22.4
• zustand 5.0.14
• @next/eslint-plugin-next 15.5.12 → [Updates: 15.5.19, 16.2.9]
• @playwright/test 1.61.1
• @tailwindcss/postcss ^4.0.0
• @testing-library/jest-dom 6.9.1
• @testing-library/react 16.3.2
• @types/js-yaml 4.0.9
• @types/node 24.13.2
• @types/react 19.2.17
• @types/react-copy-to-clipboard 5.0.7
• @types/spdx-expression-parse 4.0.0
• dotenv-cli ^11.0.0
• jest 30.4.2
• jest-environment-jsdom 30.4.1
• next-router-mock 1.0.5
• tailwindcss ^4.0.0
• ts-jest 29.4.11
• ts-node 10.9.2
• typescript 5.9.3 → [Updates: 6.0.3]

apps/scanner_worker/package.json (5)

• bull 4.16.5
• @types/node 24.13.2
• dotenv-cli 11.0.0
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 6.0.3]

package.json (8)

• @ianvs/prettier-plugin-sort-imports 4.7.1
• dotenv-cli 11.0.0
• prettier 3.8.5 → [Updates: 3.9.3]
• prettier-plugin-tailwindcss 0.8.0
• rimraf 6.1.3
• tsx 4.22.4 → [Updates: 4.23.0]
• turbo 2.10.0 → [Updates: 2.10.4]
• npm 11.17.0 → [Updates: 11.18.0]

packages/common-helpers/package.json (9)

• pako 3.0.0 → [Updates: 3.0.1]
• @types/chai 5.2.3
• @types/mocha 10.0.10
• @types/node 24.13.2
• @types/pako 2.0.4
• chai 6.2.2
• mocha 11.7.6
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 6.0.3]

packages/database/package.json (9)

• @keycloak/keycloak-admin-client ^26.5.0
• @prisma/client 6.19.3 → [Updates: 7.8.0]
• adm-zip 0.5.18
• @types/adm-zip 0.5.8
• @types/node 24.13.2
• prisma 6.19.3 → [Updates: 7.8.0]
• ts-node 10.9.2
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 6.0.3]

packages/eslint-config-custom-server/package.json (5)

• @typescript-eslint/eslint-plugin 8.62.0 → [Updates: 8.62.1]
• @typescript-eslint/parser 8.62.0 → [Updates: 8.62.1]
• eslint 10.6.0
• eslint-config-turbo 2.10.0 → [Updates: 2.10.4]
• eslint-plugin-turbo 2.10.0 → [Updates: 2.10.4]

packages/eslint-config-custom/package.json (13)

• @next/eslint-plugin-next 15.5.12 → [Updates: 15.5.19, 16.2.9]
• @typescript-eslint/eslint-plugin 8.62.0 → [Updates: 8.62.1]
• @vercel/style-guide 6.0.0
• eslint 10.6.0
• eslint-config-next 15.5.12 → [Updates: 15.5.19, 16.2.9]
• eslint-config-prettier 10.1.8
• eslint-config-turbo 2.10.0 → [Updates: 2.10.4]
• eslint-plugin-jest-dom 5.5.0
• eslint-plugin-playwright 2.10.4 → [Updates: 2.10.5]
• eslint-plugin-react 7.37.5
• eslint-plugin-react-hooks 7.1.1
• eslint-plugin-testing-library 7.16.2
• eslint-plugin-turbo 2.10.0 → [Updates: 2.10.4]

packages/s3-helpers/package.json (11)

• @aws-sdk/client-s3 3.1075.0 → [Updates: 3.1076.0]
• @aws-sdk/s3-request-presigner 3.1075.0 → [Updates: 3.1076.0]
• @smithy/node-http-handler ^4.0.0
• stream 0.0.3
• @types/chai 5.2.3
• @types/mocha 10.0.10
• @types/node 24.13.2
• chai 6.2.2
• mocha 11.7.6
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 6.0.3]

packages/spdx-validation/package.json (7)

• spdx-exceptions ^2.5.0
• spdx-license-ids ^3.0.20
• @types/jest 30.0.0
• @types/node 24.13.2
• jest ^30.0.0
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 6.0.3]

packages/tsconfig/package.json

packages/validation-helpers/package.json (11)

• @zodios/express 10.6.0
• check-password-strength 3.0.0
• is-glob 4.0.3
• packageurl-js 2.0.1
• zod 3.22.4
• @types/is-glob 4.0.4
• @types/jest ^30.0.0
• jest ^30.0.0
• ts-jest ^29.2.5
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 6.0.3]

pip_requirements (1)

requirements.txt (1)

• scancode-toolkit ==32.5.0

regex (4)

.github/workflows/eslint.yml (1)

• node 24.18.0

.github/workflows/formatting.yml (1)

• node 24.18.0

.github/workflows/playwright.yml (1)

• node 24.18.0

.github/workflows/unittest.yml (1)

• node 24.18.0

renovate-config (1)

renovate.json

terraform (1)

terraform/keycloak.tf (1)

• keycloak 5.8.0

---

• Check this box to trigger a request for Renovate to run again on this repository