Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@toss/use-overlay
npm	framer-motion

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency @types/supertest to ^7.2.1
• chore(deps): update dependency eslint to ^9.39.5
• chore(deps): update dependency postcss to ^8.5.25
• chore(deps): update dependency postcss-nesting to ^14.0.1
• chore(deps): update dependency ts-jest to ^29.4.12
• fix(deps): update dependency @nestjs/typeorm to ^11.0.3
• fix(deps): update dependency @next/eslint-plugin-next to ^16.2.12
• fix(deps): update dependency @number-flow/react to ^0.6.2
• fix(deps): update dependency dayjs to ^1.11.21
• fix(deps): update dependency fast-csv to ^5.0.7
• fix(deps): update dependency i18next to ^25.10.10
• fix(deps): update dependency immer to ^11.1.15
• fix(deps): update dependency linkify-react to ^4.3.3
• fix(deps): update dependency magic-bytes.js to ^1.13.1
• fix(deps): update dependency nestjs-cls to ^6.2.1
• fix(deps): update dependency react-day-picker to v8.10.2
• fix(deps): update dependency react-i18next to ^16.6.6
• fix(deps): update dependency react-use to ^17.6.1
• fix(deps): update dependency typeorm to ^0.3.31
• fix(deps): update dependency uuid to ^14.0.1
• fix(deps): update dependency zustand to ^5.0.14
• fix(deps): update nest monorepo (@nestjs/cli, @nestjs/common, @nestjs/config, @nestjs/core, @nestjs/platform-express, @nestjs/platform-fastify, @nestjs/schematics, @nestjs/testing)
• fix(deps): update radix-ui-primitives monorepo (@radix-ui/react-accordion, @radix-ui/react-checkbox, @radix-ui/react-dialog, @radix-ui/react-dropdown-menu, @radix-ui/react-label, @radix-ui/react-menubar, @radix-ui/react-popover, @radix-ui/react-radio-group, @radix-ui/react-scroll-area, @radix-ui/react-select, @radix-ui/react-separator, @radix-ui/react-slider, @radix-ui/react-slot, @radix-ui/react-switch, @radix-ui/react-tabs, @radix-ui/react-toast, @radix-ui/react-toggle, @radix-ui/react-toggle-group, @radix-ui/react-tooltip)
• fix(deps): update react monorepo (@types/react, @types/react-dom, react, react-dom)
• chore(deps): update dependency @playwright/test to ^1.62.1
• chore(deps): update dependency autoprefixer to ^10.5.4
• chore(deps): update dependency ts-loader to ^9.6.2
• chore(deps): update jest monorepo (jest, jest-environment-jsdom)
• chore(deps): update node.js to v24.18.1 (node, @types/node)
• chore(deps): update pnpm to v10.34.5
• chore(deps): update swc monorepo (@swc-node/jest, @swc/cli, @swc/helpers)
• fix(deps): update aws-sdk-js-v3 monorepo to ^3.1100.0 (@aws-sdk/client-s3, @aws-sdk/s3-request-presigner)
• fix(deps): update dependency @eslint/compat to ^2.1.0
• fix(deps): update dependency @faker-js/faker to ^10.5.0
• fix(deps): update dependency @fastify/static to ^9.3.0
• fix(deps): update dependency @hookform/resolvers to ^5.5.7
• fix(deps): update dependency @nestjs/event-emitter to ^3.1.0
• fix(deps): update dependency @nestjs/swagger to ^11.4.6
• fix(deps): update dependency @opensearch-project/opensearch to ^3.6.0
• fix(deps): update dependency @willsoto/nestjs-prometheus to ^6.1.0
• fix(deps): update dependency axios to ^1.19.0
• fix(deps): update dependency countries-and-timezones to ^3.9.0
• fix(deps): update dependency date-fns to ^4.4.0
• fix(deps): update dependency dotenv to ^17.4.2
• fix(deps): update dependency fastify to ^5.11.0
• fix(deps): update dependency framer-motion to ^12.43.0
• fix(deps): update dependency joi to ^18.2.3
• fix(deps): update dependency js-toml to ^1.2.1
• fix(deps): update dependency mysql2 to ^3.23.2
• fix(deps): update dependency passport-custom to ^1.2.1
• fix(deps): update dependency prettier-plugin-tailwindcss to ^0.8.1
• fix(deps): update dependency react-hook-form to ^7.83.0
• fix(deps): update dependency sharp to ^0.35.3
• fix(deps): update dependency swiper to ^12.2.0
• fix(deps): update dependency tailwind-merge to ^3.6.0
• fix(deps): update dependency yaml to ^2.9.0
• fix(deps): update dependency zod to ^4.4.3
• fix(deps): update docusaurus monorepo to v3.10.2 (@docusaurus/core, @docusaurus/module-type-aliases, @docusaurus/plugin-google-gtag, @docusaurus/preset-classic, @docusaurus/tsconfig, @docusaurus/types)
• fix(deps): update opentelemetry-js monorepo (@opentelemetry/exporter-logs-otlp-http, @opentelemetry/resources, @opentelemetry/sdk-logs, @opentelemetry/semantic-conventions)
• fix(deps): update tanstack-query monorepo to ^5.101.4 (@tanstack/react-query, @tanstack/react-query-devtools)
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-node action to v7
• chore(deps): update dependency @babel/core to v8
• chore(deps): update dependency @testing-library/jest-dom to v7
• chore(deps): update dependency typescript to v7
• chore(deps): update pnpm to v11
• chore(deps): update pnpm/action-setup action to v6
• fix(deps): update dependency @fastify/multipart to v10
• fix(deps): update dependency @fastify/static to v10
• fix(deps): update dependency commander to v15
• fix(deps): update dependency i18next to v26
• fix(deps): update dependency lucide-react to v1
• fix(deps): update dependency next-i18next to v16
• fix(deps): update dependency nodemailer to ^8.0.11 (nodemailer, @types/nodemailer)
• fix(deps): update dependency nodemailer to v9
• fix(deps): update dependency pino-opentelemetry-transport to v4
• fix(deps): update dependency react-day-picker to v10
• fix(deps): update dependency react-i18next to v17
• fix(deps): update dependency swiper to v14
• fix(deps): update dependency toml to v5
• fix(deps): update dependency typeorm to v1
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency @types/luxon to ^3.7.3

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): replace dependency framer-motion with motion ^12.38.0
• chore(deps): update dependency prettier to ^3.9.6
• fix(deps): update dependency @nestjs-modules/mailer to ^2.3.7
• fix(deps): update dependency @nestjs/schedule to ^6.1.3
• fix(deps): update dependency cron to ^4.4.0
• fix(deps): update dependency recharts to ^3.10.1
• fix(deps): update turbo monorepo to ^2.10.7 (eslint-plugin-turbo, turbo)
• fix(deps): update typescript-eslint monorepo to ^8.65.0 (@typescript-eslint/parser, typescript-eslint)
• chore(deps): update dependency eslint to v10
• fix(deps): update dependency eslint-plugin-react-hooks to v7
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency jiti to v2
• chore(deps): update dependency tailwindcss to v4

Detected Dependencies

docker-compose (5)

docker/docker-compose.apps.yml

docker/docker-compose.e2e.yml

docker/docker-compose.infra.yml

docker/docker-compose.otel-test.yml

docker/docker-compose.yml

dockerfile (3)

docker/api.dockerfile (1)

• node 24.14.1-alpine → [Updates: 24.18.1-alpine]

docker/docs.dockerfile (1)

• node 24.14.1-alpine → [Updates: 24.18.1-alpine]

docker/web.dockerfile (1)

• node 24.14.1-alpine → [Updates: 24.18.1-alpine]

github-actions (4)

.github/workflows/ci.yaml (4)

• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]

.github/workflows/docker-dev-image.yml (6)

• actions/checkout v6 → [Updates: v7]
• docker/setup-buildx-action v4
• docker/metadata-action v6
• docker/metadata-action v6
• docker/login-action v4
• docker/bake-action v7

.github/workflows/docker-prod-image.yml (6)

• actions/checkout v6 → [Updates: v7]
• docker/setup-buildx-action v4
• docker/metadata-action v6
• docker/metadata-action v6
• docker/login-action v4
• docker/bake-action v7

tooling/github/setup/action.yml (2)

• pnpm/action-setup v5 → [Updates: v6]
• actions/setup-node v6 → [Updates: v7]

npm (15)

apps/api/package.json (82)

• @aws-sdk/client-s3 ^3.1015.0 → [Updates: ^3.1100.0]
• @aws-sdk/s3-request-presigner ^3.1015.0 → [Updates: ^3.1100.0]
• @fastify/multipart ^9.4.0 → [Updates: ^10.1.0]
• @fastify/static ^9.0.0 → [Updates: ^9.3.0, ^10.1.2]
• @nestjs-modules/mailer ^2.0.2 → [Updates: ^2.3.7]
• @nestjs/axios ^4.0.1
• @nestjs/common ^11.1.17 → [Updates: ^11.1.28]
• @nestjs/config ^4.0.3 → [Updates: ^4.0.4]
• @nestjs/core ^11.1.17 → [Updates: ^11.1.28]
• @nestjs/event-emitter ^3.0.1 → [Updates: ^3.1.0]
• @nestjs/jwt ^11.0.2
• @nestjs/passport ^11.0.5
• @nestjs/platform-express ^11.1.17 → [Updates: ^11.1.28]
• @nestjs/platform-fastify ^11.1.17 → [Updates: ^11.1.28]
• @nestjs/schedule ^6.0.1 → [Updates: ^6.1.3]
• @nestjs/swagger ^11.2.6 → [Updates: ^11.4.6]
• @nestjs/terminus ^11.1.1
• @nestjs/typeorm ^11.0.0 → [Updates: ^11.0.3]
• @opensearch-project/opensearch ^3.5.1 → [Updates: ^3.6.0]
• @opentelemetry/exporter-logs-otlp-http ^0.213.0 → [Updates: ^0.221.0]
• @opentelemetry/resources ^2.6.0 → [Updates: ^2.10.0]
• @opentelemetry/sdk-logs ^0.213.0 → [Updates: ^0.221.0]
• @opentelemetry/semantic-conventions ^1.40.0 → [Updates: ^1.43.0]
• @types/passport-jwt ^4.0.1
• @types/passport-local ^1.0.38
• @willsoto/nestjs-prometheus ^6.0.2 → [Updates: ^6.1.0]
• axios ^1.13.6 → [Updates: ^1.19.0]
• bcrypt ^6.0.0
• class-transformer ^0.5.1
• class-validator ^0.15.1
• cron ^4.3.3 → [Updates: ^4.4.0]
• dotenv ^17.3.1 → [Updates: ^17.4.2]
• exceljs ^4.4.0
• fast-csv ^5.0.5 → [Updates: ^5.0.7]
• fastify ^5.8.4 → [Updates: ^5.11.0]
• joi ^18.1.1 → [Updates: ^18.2.3]
• luxon ^3.7.2
• magic-bytes.js ^1.13.0 → [Updates: ^1.13.1]
• mysql2 ^3.20.0 → [Updates: ^3.23.2]
• nestjs-cls ^6.2.0 → [Updates: ^6.2.1]
• nestjs-pino ^4.6.1
• nestjs-typeorm-paginate ^4.1.0
• nodemailer ^8.0.3 → [Updates: ^8.0.11, ^9.0.3]
• passport ^0.7.0
• passport-custom ^1.1.1 → [Updates: ^1.2.1]
• passport-jwt ^4.0.1
• passport-local ^1.0.0
• pino-http ^11.0.0
• pino-opentelemetry-transport ^3.0.0 → [Updates: ^4.0.2]
• pino-pretty ^13.1.3
• prom-client ^15.1.3
• reflect-metadata ^0.2.2
• rxjs ^7.8.2
• source-map-support ^0.5.21
• typeorm ^0.3.28 → [Updates: ^0.3.31, ^1.1.0]
• typeorm-naming-strategies ^4.1.0
• typeorm-transactional ^0.5.0
• uuid ^14.0.0 → [Updates: ^14.0.1]
• @faker-js/faker ^10.4.0 → [Updates: ^10.5.0]
• @nestjs/cli ^11.0.16 → [Updates: ^11.0.24]
• @nestjs/schematics ^11.0.9 → [Updates: ^11.1.0]
• @nestjs/testing ^11.1.17 → [Updates: ^11.1.28]
• @swc-node/jest ^1.9.1 → [Updates: ^1.10.1]
• @swc/cli 0.8.0 → [Updates: 0.8.1]
• @swc/core 1.13.5
• @swc/helpers ^0.5.19 → [Updates: ^0.5.23]
• @types/bcrypt ^6.0.0
• @types/express ^5.0.6
• @types/jest ^30.0.0
• @types/luxon ^3.7.2 → [Updates: ^3.7.3]
• @types/node 24.12.0 → [Updates: 24.13.3]
• @types/nodemailer ^7.0.12 → [Updates: ^8.0.1]
• @types/passport-jwt *
• @types/supertest ^7.2.0 → [Updates: ^7.2.1]
• @typescript-eslint/parser ^8.46.0 → [Updates: ^8.65.0]
• jest ^30.3.0 → [Updates: ^30.4.2]
• mockdate ^3.0.5
• supertest ^7.2.2
• ts-jest ^29.4.6 → [Updates: ^29.4.12]
• ts-loader ^9.5.4 → [Updates: ^9.6.2]
• ts-node ^10.9.2
• tsconfig-paths ^4.2.0

apps/cli/package.json (9)

• @types/prompts ^2.4.9
• child_process ^1.0.2
• commander ^14.0.3 → [Updates: ^15.0.0]
• js-toml ^1.0.3 → [Updates: ^1.2.1]
• toml ^3.0.0 → [Updates: ^5.0.0]
• yaml ^2.8.3 → [Updates: ^2.9.0]
• zod ^4.3.6 → [Updates: ^4.4.3]
• @types/node 24.12.0 → [Updates: 24.13.3]
• ts-node ^10.9.2

apps/docs/package.json (12)

• @docusaurus/core 3.9.2 → [Updates: 3.10.2]
• @docusaurus/plugin-google-gtag ^3.9.2 → [Updates: ^3.10.2]
• @docusaurus/preset-classic 3.9.2 → [Updates: 3.10.2]
• @mdx-js/react ^3.1.1
• clsx ^2.1.1
• prism-react-renderer ^2.4.1
• react ^19.2.4 → [Updates: ^19.2.8]
• react-dom ^19.2.4 → [Updates: ^19.2.8]
• @docusaurus/module-type-aliases 3.9.2 → [Updates: 3.10.2]
• @docusaurus/tsconfig 3.9.2 → [Updates: 3.10.2]
• @docusaurus/types 3.9.2 → [Updates: 3.10.2]
• dotenv ^17.3.1 → [Updates: ^17.4.2]

apps/e2e/package.json (4)

• @opensearch-project/opensearch ^3.5.1 → [Updates: ^3.6.0]
• @playwright/test ^1.58.2 → [Updates: ^1.62.1]
• axios ^1.13.6 → [Updates: ^1.19.0]
• mysql2 ^3.20.0 → [Updates: ^3.23.2]

apps/web/package.json (68)

• @dnd-kit/core ^6.3.1
• @dnd-kit/modifiers ^9.0.0
• @dnd-kit/sortable ^10.0.0
• @dnd-kit/utilities ^3.2.2
• @faker-js/faker ^10.4.0 → [Updates: ^10.5.0]
• @hookform/resolvers ^5.2.2 → [Updates: ^5.5.7]
• @number-flow/react ^0.6.0 → [Updates: ^0.6.2]
• @radix-ui/react-slider ^1.3.6 → [Updates: ^1.4.7]
• @t3-oss/env-nextjs ^0.13.11
• @tanstack/react-query ^5.95.2 → [Updates: ^5.101.4]
• @tanstack/react-query-devtools ^5.95.2 → [Updates: ^5.101.4]
• @tanstack/react-table ^8.21.3
• @toss/use-overlay ^1.4.2
• axios ^1.13.6 → [Updates: ^1.19.0]
• axios-auth-refresh ^5.0.2
• classnames ^2.5.1
• clsx ^2.1.1
• cookies-next ^6.1.1
• countries-and-timezones ^3.8.0 → [Updates: ^3.9.0]
• date-fns ^4.1.0 → [Updates: ^4.4.0]
• dayjs ^1.11.20 → [Updates: ^1.11.21]
• framer-motion ^12.38.0 → [Updates: ^12.43.0, ^12.38.0]
• i18next ^25.10.5 → [Updates: ^25.10.10, ^26.3.6]
• immer ^11.1.4 → [Updates: ^11.1.15]
• jwt-decode ^4.0.0
• linkify ^0.2.1
• linkify-react ^4.3.2 → [Updates: ^4.3.3]
• next ^16.1.3
• next-i18next ^15.4.3 → [Updates: ^16.0.8]
• next-themes ^0.4.6
• nuqs 2.4.3
• pino ^10.3.1
• react ^19.2.4 → [Updates: ^19.2.8]
• react-content-loader ^7.1.2
• react-dom ^19.2.4 → [Updates: ^19.2.8]
• react-hook-form ^7.72.0 → [Updates: ^7.83.0]
• react-i18next ^16.6.2 → [Updates: ^16.6.6, ^17.0.11]
• react-select ^5.10.2
• react-use ^17.6.0 → [Updates: ^17.6.1]
• recharts ^3.5.0 → [Updates: ^3.10.1]
• sharp ^0.34.5 → [Updates: ^0.35.3]
• swiper ^12.1.2 → [Updates: ^12.2.0, ^14.0.7]
• tailwind-merge ^3.5.0 → [Updates: ^3.6.0]
• tailwind-scrollbar-hide ^4.0.0
• zod ^4.3.6 → [Updates: ^4.4.3]
• zustand ^5.0.12 → [Updates: ^5.0.14]
• @babel/core ^7.29.7 → [Updates: ^8.0.1]
• @rollup/plugin-commonjs ^29.0.3
• @svgr/webpack ^8.1.0
• @swc/core 1.13.5
• @swc/jest ^0.2.39
• @testing-library/jest-dom ^6.9.1 → [Updates: ^7.0.0]
• @testing-library/react ^16.3.2
• @testing-library/user-event ^14.6.1
• @types/jest ^30.0.0
• @types/node 24.12.0 → [Updates: 24.13.3]
• @types/react ^19.2.14 → [Updates: ^19.2.18]
• @types/react-dom ^19.2.3 → [Updates: ^19.2.4]
• autoprefixer ^10.4.27 → [Updates: ^10.5.4]
• jest ^30.3.0 → [Updates: ^30.4.2]
• jest-environment-jsdom ^30.3.0 → [Updates: ^30.4.1]
• jest-fixed-jsdom ^0.0.11
• jiti 1.21.7 → [Updates: 2.7.0]
• next-router-mock ^1.0.5
• openapi-typescript ^7.13.0
• postcss ^8.5.8 → [Updates: ^8.5.25]
• tailwindcss ^3.4.19 → [Updates: ^4.3.3]
• ts-toolbelt ^9.6.0

package.json (4)

• turbo ^2.8.3 → [Updates: ^2.10.7]
• node >=24.14.1 → [Updates: >=24.18.1]
• pnpm ^10.32.1 → [Updates: ^10.34.5, ^11.18.0]
• pnpm 10.32.1 → [Updates: 10.34.5, 11.18.0]

packages/ufb-react/package.json (31)

• @radix-ui/react-accordion ^1.2.12 → [Updates: ^1.2.20]
• @radix-ui/react-checkbox ^1.3.3 → [Updates: ^1.3.11]
• @radix-ui/react-dialog ^1.1.15 → [Updates: ^1.1.23]
• @radix-ui/react-dropdown-menu ^2.1.16 → [Updates: ^2.1.24]
• @radix-ui/react-label ^2.1.8 → [Updates: ^2.1.15]
• @radix-ui/react-menubar ^1.1.16 → [Updates: ^1.1.24]
• @radix-ui/react-popover ^1.1.15 → [Updates: ^1.1.23]
• @radix-ui/react-radio-group ^1.3.8 → [Updates: ^1.4.7]
• @radix-ui/react-scroll-area ^1.2.10 → [Updates: ^1.2.18]
• @radix-ui/react-select ^2.2.6 → [Updates: ^2.3.7]
• @radix-ui/react-separator ^1.1.8 → [Updates: ^1.1.15]
• @radix-ui/react-slot ^1.2.4 → [Updates: ^1.3.3]
• @radix-ui/react-switch ^1.2.6 → [Updates: ^1.3.7]
• @radix-ui/react-tabs ^1.1.13 → [Updates: ^1.1.21]
• @radix-ui/react-toast ^1.2.15 → [Updates: ^1.2.23]
• @radix-ui/react-toggle ^1.1.10 → [Updates: ^1.1.18]
• @radix-ui/react-toggle-group ^1.1.11 → [Updates: ^1.1.19]
• @radix-ui/react-tooltip ^1.2.8 → [Updates: ^1.2.16]
• @remixicon/react ^4.9.0
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• cmdk ^1.1.1
• date-fns ^4.1.0 → [Updates: ^4.4.0]
• lucide-react ^0.577.0 → [Updates: ^1.28.0]
• react-day-picker 8.10.1 → [Updates: 8.10.2, 10.0.1]
• react-hook-form ^7.72.0 → [Updates: ^7.83.0]
• sonner ^2.0.7
• tailwind-merge ^3.5.0 → [Updates: ^3.6.0]
• @types/react ^19.2.14 → [Updates: ^19.2.18]
• @types/react-dom ^19.2.3 → [Updates: ^19.2.4]
• react ^19.2.4 → [Updates: ^19.2.8]

packages/ufb-shared/package.json (2)

• react ^19.2.4 → [Updates: ^19.2.8]
• tsup ^8.5.1

packages/ufb-tailwindcss/package.json (6)

• autoprefixer ^10.4.27 → [Updates: ^10.5.4]
• glob ^13.0.6
• postcss ^8.5.8 → [Updates: ^8.5.25]
• postcss-import ^16.1.1
• postcss-js ^5.1.0
• postcss-nesting ^14.0.0 → [Updates: ^14.0.1]

pnpm-workspace.yaml (4)

• eslint ^9.39.4 → [Updates: ^9.39.5, ^10.8.0]
• prettier ^3.5.3 → [Updates: ^3.9.6]
• tailwindcss ^3.4.19 → [Updates: ^4.3.3]
• typescript ^5.9.3 → [Updates: ^7.0.2]

tooling/eslint-plugin-header/package.json

tooling/eslint/package.json (8)

• @eslint/compat ^2.0.3 → [Updates: ^2.1.0]
• @next/eslint-plugin-next ^16.2.1 → [Updates: ^16.2.12]
• eslint-plugin-import ^2.32.0
• eslint-plugin-jsx-a11y ^6.10.2
• eslint-plugin-react ^7.37.5
• eslint-plugin-react-hooks ^6.1.1 → [Updates: ^7.1.1]
• eslint-plugin-turbo ^2.8.3 → [Updates: ^2.10.7]
• typescript-eslint ^8.46.0 → [Updates: ^8.65.0]

tooling/github/package.json

tooling/prettier/package.json (3)

• @ianvs/prettier-plugin-sort-imports ^4.7.1
• prettier-plugin-tailwindcss ^0.7.2 → [Updates: ^0.8.1]
• @types/node 24.12.0 → [Updates: 24.13.3]

tooling/typescript/package.json

nvm (1)

.nvmrc (1)

• node 24.14.1 → [Updates: 24.18.1]

---

• Check this box to trigger a request for Renovate to run again on this repository