Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@types/diff

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (22)

Datasource	Package	Last Updated
npm	@mdi/js	2023-12-27
npm	class-transformer	2021-11-22
npm	deepmerge	2023-03-16
npm	front-matter	2020-05-29
npm	graph-data-structure	2025-03-05
npm	node-emoji	2024-12-03
npm	remark-gfm	2025-02-10
npm	remark-parse	2023-09-18
npm	remark-stringify	2023-09-18
npm	svelte-turnstile	2025-04-26
npm	unified	2024-06-19

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update docker.io/valkey/valkey:9 docker digest to 418652c
• chore(deps): update dependency terragrunt to v1.1.6
• chore(deps): update node
• chore(deps): update dependency svelte-highlight to v7.22.0
• chore(deps): update typescript-projects (@aws-sdk/client-s3, @cloudflare/workers-types, @sveltejs/vite-plugin-svelte, bits-ui, eslint, exifreader, marked, mediabunny, p-limit, pnpm, prettier, simple-icons, svelte, tsx, typescript-eslint, vite-plugin-dts, wrangler)
• chore(deps): update dependency dotenv to v18
• chore(deps): update dependency eslint-plugin-unicorn to v76
• fix(deps): update dependency kysely-postgres-js to v5
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency sharp to v0.35.5

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update terraform cloudflare to v5
• chore(deps): update vitest monorepo to v5 (@vitest/browser, vitest)

Detected Dependencies

github-actions (9)

.github/workflows/build.yml (14)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• immich-app/devtools create-workflow-token-action-v3.0.1@df46d635b905e618b88fc4c95baa920aeb30b309
• immich-app/devtools use-mise-action-v3.2.1@06a9ef925332c91be647d6256642b86b398592c8
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• immich-app/devtools create-workflow-token-action-v3.0.1@df46d635b905e618b88fc4c95baa920aeb30b309
• immich-app/devtools use-mise-action-v3.2.1@06a9ef925332c91be647d6256642b86b398592c8
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• 1password/install-cli-action v4.1.0@1a3160d5e9de1ae0803eaa08a88746f5ae3daa50
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• immich-app/devtools sticky-comment-action-v1.0.0@0135acd12ad9f3369b94a2aa3c0ae8c835a4e926

.github/workflows/cleanup-bucket.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• immich-app/devtools create-workflow-token-action-v3.0.1@df46d635b905e618b88fc4c95baa920aeb30b309
• immich-app/devtools use-mise-action-v3.2.1@06a9ef925332c91be647d6256642b86b398592c8
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

.github/workflows/destroy.yml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• immich-app/devtools create-workflow-token-action-v3.0.1@df46d635b905e618b88fc4c95baa920aeb30b309
• immich-app/devtools use-mise-action-v3.2.1@06a9ef925332c91be647d6256642b86b398592c8
• 1password/install-cli-action v4.1.0@1a3160d5e9de1ae0803eaa08a88746f5ae3daa50
• immich-app/devtools sticky-comment-action-v1.0.0@0135acd12ad9f3369b94a2aa3c0ae8c835a4e926

.github/workflows/import-post.yml (5)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• immich-app/devtools use-mise-action-v3.2.1@06a9ef925332c91be647d6256642b86b398592c8
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/org-pr-require-conventional-commit.yml

.github/workflows/org-zizmor.yml

.github/workflows/publish.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• immich-app/devtools create-workflow-token-action-v3.0.1@df46d635b905e618b88fc4c95baa920aeb30b309
• immich-app/devtools use-mise-action-v3.2.1@06a9ef925332c91be647d6256642b86b398592c8
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

.github/workflows/release-please.yml (2)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• googleapis/release-please-action v5.0.0@45996ed1f6d02564a971a2fa1b5860e934307cf7

.github/workflows/test.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• immich-app/devtools create-workflow-token-action-v3.0.1@df46d635b905e618b88fc4c95baa920aeb30b309
• immich-app/devtools use-mise-action-v3.2.1@06a9ef925332c91be647d6256642b86b398592c8
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

mise (1)

.mise/config.toml (5)

• opentofu 1.12.6
• terragrunt 1.1.5 → [Updates: 1.1.6]
• node 24.21.0
• pnpm 12.4.2 → [Updates: 12.6.0]
• wrangler 4.134.0 → [Updates: 4.137.0]

npm (16)

apps/api.immich.app/package.json (21)

• @mdi/js ^7.4.47
• simple-icons ^16.0.0 → [Updates: ^16.0.0]
• svelte-highlight ^7.8.4 → [Updates: ^7.8.4]
• tailwind-variants ^3.1.1
• @sveltejs/adapter-static ^3.0.9
• @sveltejs/kit ^2.55.0
• @sveltejs/vite-plugin-svelte ^7.0.0 → [Updates: ^7.0.0]
• @tailwindcss/vite ^4.2.2
• @types/node ^24.13.5 → [Updates: ^24.13.6]
• @vitest/browser ^4.1.0 → [Updates: ^5.0.0]
• dotenv ^17.2.3 → [Updates: ^18.0.0]
• globals ^17.0.0
• playwright ^1.55.1
• svelte ^5.39.5 → [Updates: ^5.39.5]
• svelte-check ^4.3.2
• tailwindcss ^4.2.2
• @typescript/native ^7.0.2
• typescript ^6.0.2
• vite ^8.0.0 → [Updates: ^8.0.0]
• vitest ^4.1.0 → [Updates: ^5.0.0]
• vitest-browser-svelte ^3.0.0

apps/awesome.immich.app/package.json (26)

• @mdi/js ^7.4.47
• lodash-es ^4.18.1
• zod ^4.4.3
• @sveltejs/adapter-static ^3.0.9
• @sveltejs/kit ^2.55.0
• @sveltejs/vite-plugin-svelte ^7.0.0 → [Updates: ^7.0.0]
• @tailwindcss/vite ^4.2.2
• @types/lodash-es ^4.17.12
• @types/luxon ^3.7.1
• @types/node ^24.13.5 → [Updates: ^24.13.6]
• @typescript/native ^7.0.2
• @vitest/browser ^4.1.0 → [Updates: ^5.0.0]
• dotenv ^17.2.3 → [Updates: ^18.0.0]
• front-matter ^4.0.2
• globals ^17.0.0
• luxon ^3.7.2
• marked ^18.0.0 → [Updates: ^18.0.0]
• playwright ^1.55.1
• simple-icons ^16.0.0 → [Updates: ^16.0.0]
• svelte ^5.39.5 → [Updates: ^5.39.5]
• svelte-check ^4.3.2
• tailwindcss ^4.2.2
• typescript ^6.0.2
• vite ^8.0.0 → [Updates: ^8.0.0]
• vitest ^4.0.12 → [Updates: ^5.0.0]
• vitest-browser-svelte ^3.0.0

apps/buy.immich.app/package.json (20)

• @mdi/js ^7.4.47
• simple-icons ^16.0.0 → [Updates: ^16.0.0]
• svelte-highlight ^7.8.4 → [Updates: ^7.8.4]
• @sveltejs/adapter-static ^3.0.9
• @sveltejs/kit ^2.55.0
• @sveltejs/vite-plugin-svelte ^7.0.0 → [Updates: ^7.0.0]
• @tailwindcss/vite ^4.2.2
• @types/node ^24.13.5 → [Updates: ^24.13.6]
• @vitest/browser ^4.1.0 → [Updates: ^5.0.0]
• dotenv ^17.2.3 → [Updates: ^18.0.0]
• globals ^17.0.0
• playwright ^1.55.1
• svelte ^5.39.5 → [Updates: ^5.39.5]
• svelte-check ^4.3.2
• tailwindcss ^4.2.2
• @typescript/native ^7.0.2
• typescript ^6.0.2
• vite ^8.0.0 → [Updates: ^8.0.0]
• vitest ^4.1.0 → [Updates: ^5.0.0]
• vitest-browser-svelte ^3.0.0

apps/datasets.immich.app/backend/package.json (12)

• @tsndr/cloudflare-worker-jwt ^3.2.0
• class-transformer ^0.5.1
• class-validator ^0.15.0
• itty-router ^5.0.18
• luxon ^3.6.1
• simple-icons ^16.0.0 → [Updates: ^16.0.0]
• @cloudflare/vitest-pool-workers ^0.22.0
• @types/luxon ^3.6.2
• @typescript/native ^7.0.2
• typescript ^6.0.2
• vitest ^4.1.0 → [Updates: ^5.0.0]
• wrangler ^4.75.0 → [Updates: ^4.75.0]

apps/datasets.immich.app/package.json (24)

• @mdi/js ^7.4.47
• exifreader ^4.32.0 → [Updates: ^4.32.0]
• mediabunny ^1.31.0 → [Updates: ^1.31.0]
• p-limit ^7.1.1 → [Updates: ^7.1.1]
• simple-icons ^16.0.0 → [Updates: ^16.0.0]
• svelte-highlight ^7.8.4 → [Updates: ^7.8.4]
• svelte-turnstile ^0.11.0
• @sveltejs/adapter-static ^3.0.9
• @sveltejs/kit ^2.55.0
• @sveltejs/vite-plugin-svelte ^7.0.0 → [Updates: ^7.0.0]
• @tailwindcss/vite ^4.2.2
• @types/node ^24.13.5 → [Updates: ^24.13.6]
• @vitest/browser ^4.1.0 → [Updates: ^5.0.0]
• dotenv ^17.2.3 → [Updates: ^18.0.0]
• globals ^17.0.0
• playwright ^1.55.1
• svelte ^5.39.5 → [Updates: ^5.39.5]
• svelte-check ^4.3.2
• tailwindcss ^4.2.2
• @typescript/native ^7.0.2
• typescript ^6.0.2
• vite ^8.0.0 → [Updates: ^8.0.0]
• vitest ^4.1.0 → [Updates: ^5.0.0]
• vitest-browser-svelte ^3.0.0

apps/get.immich.app/package.json (20)

• @mdi/js ^7.4.47
• simple-icons ^16.0.0 → [Updates: ^16.0.0]
• svelte-highlight ^7.8.4 → [Updates: ^7.8.4]
• @sveltejs/adapter-static ^3.0.9
• @sveltejs/kit ^2.55.0
• @sveltejs/vite-plugin-svelte ^7.0.0 → [Updates: ^7.0.0]
• @tailwindcss/vite ^4.2.2
• @types/node ^24.13.5 → [Updates: ^24.13.6]
• @vitest/browser ^4.1.0 → [Updates: ^5.0.0]
• dotenv ^17.2.3 → [Updates: ^18.0.0]
• globals ^17.0.0
• playwright ^1.55.1
• svelte ^5.39.5 → [Updates: ^5.39.5]
• svelte-check ^4.3.2
• tailwindcss ^4.2.2
• @typescript/native ^7.0.2
• typescript ^6.0.2
• vite ^8.0.0 → [Updates: ^8.0.0]
• vitest ^4.1.0 → [Updates: ^5.0.0]
• vitest-browser-svelte ^3.0.0

apps/my.immich.app/package.json (20)

• @mdi/js ^7.4.47
• simple-icons ^16.0.0 → [Updates: ^16.0.0]
• svelte-highlight ^7.8.4 → [Updates: ^7.8.4]
• @sveltejs/adapter-static ^3.0.9
• @sveltejs/kit ^2.55.0
• @sveltejs/vite-plugin-svelte ^7.0.0 → [Updates: ^7.0.0]
• @tailwindcss/vite ^4.2.2
• @types/node ^24.13.5 → [Updates: ^24.13.6]
• @vitest/browser ^4.1.0 → [Updates: ^5.0.0]
• dotenv ^17.2.3 → [Updates: ^18.0.0]
• globals ^17.0.0
• playwright ^1.55.1
• svelte ^5.39.5 → [Updates: ^5.39.5]
• svelte-check ^4.3.2
• tailwindcss ^4.2.2
• @typescript/native ^7.0.2
• typescript ^6.0.2
• vite ^8.0.0 → [Updates: ^8.0.0]
• vitest ^4.1.0 → [Updates: ^5.0.0]
• vitest-browser-svelte ^3.0.0

apps/root.immich.app/package.json (35)

• @mdi/js ^7.4.47
• deepmerge ^4.3.1
• diff ^9.0.0
• feed ^6.0.0
• front-matter ^4.0.2
• lodash-es ^4.18.1
• node-emoji ^2.2.0
• svelte-highlight ^7.8.4 → [Updates: ^7.8.4]
• tailwind-variants ^3.2.2
• yaml ^2.9.0
• zod ^4.4.3
• @json-types/compose ^0.11.0
• @sveltejs/adapter-static ^3.0.9
• @sveltejs/kit ^2.55.0
• @sveltejs/vite-plugin-svelte ^7.0.0 → [Updates: ^7.0.0]
• @tailwindcss/vite ^4.2.2
• @types/diff ^8.0.0
• @types/lodash-es ^4.17.12
• @types/luxon ^3.7.1
• @types/node ^24.13.5 → [Updates: ^24.13.6]
• @typescript/native ^7.0.2
• @vitest/browser ^4.1.0 → [Updates: ^5.0.0]
• dotenv ^17.2.3 → [Updates: ^18.0.0]
• globals ^17.0.0
• luxon ^3.7.2
• marked ^18.0.0 → [Updates: ^18.0.0]
• playwright ^1.55.1
• simple-icons ^16.0.0 → [Updates: ^16.0.0]
• svelte ^5.39.5 → [Updates: ^5.39.5]
• svelte-check ^4.3.2
• tailwindcss ^4.2.2
• typescript ^6.0.2
• vite ^8.0.0 → [Updates: ^8.0.0]
• vitest ^4.1.0 → [Updates: ^5.0.0]
• vitest-browser-svelte ^3.0.0

apps/ui.immich.app/package.json (27)

• @internationalized/date ^3.10.0
• @mdi/js ^7.4.47
• bits-ui ^2.15.7 → [Updates: ^2.15.7]
• luxon ^3.7.2
• simple-icons ^16.0.0 → [Updates: ^16.0.0]
• svelte ^5.39.5 → [Updates: ^5.39.5]
• svelte-check ^4.3.2
• svelte-highlight ^7.8.4 → [Updates: ^7.8.4]
• tailwind-merge ^3.0.0
• tailwind-variants ^3.0.0
• @sveltejs/adapter-static ^3.0.6
• @sveltejs/kit ^2.13.0
• @sveltejs/package ^2.0.0
• @sveltejs/vite-plugin-svelte ^7.0.0 → [Updates: ^7.0.0]
• @tailwindcss/postcss ^4.2.2
• @tailwindcss/vite ^4.2.2
• @types/luxon ^3.7.1
• autoprefixer ^10.4.20
• globals ^17.0.0
• svelte ^5.37.0
• svelte-check ^4.0.0
• tailwindcss ^4.2.2
• @typescript/native ^7.0.2
• typescript ^6.0.2
• vite ^8.0.0 → [Updates: ^8.0.0]
• vitest ^4.1.0 → [Updates: ^5.0.0]
• node 24.21.0

package.json (21)

• @eslint/js ^10.0.1
• @sveltejs/eslint-config ^10.0.0
• @types/node ^25.9.7 → [Updates: ^25.9.8]
• eslint ^10.0.0 → [Updates: ^10.0.0]
• eslint-config-prettier ^10.1.8
• eslint-plugin-better-tailwindcss ^4.5.0
• eslint-plugin-svelte ^3.12.5
• eslint-plugin-unicorn ^74.0.0 → [Updates: ^76.0.0]
• globals ^17.3.0
• jiti ^2.6.1
• prettier ^3.6.2 → [Updates: ^3.6.2]
• prettier-plugin-svelte ^4.0.0
• svelte ^5.42.3 → [Updates: ^5.42.3]
• @typescript/native ^7.0.2
• typescript ^6.0.2
• typescript-eslint ^8.56.0 → [Updates: ^8.56.0]
• vite ^8.0.0 → [Updates: ^8.0.0]
• vite-plugin-dts ^5.0.0 → [Updates: ^5.0.0]
• vitest ^4.1.0 → [Updates: ^5.0.0]
• pnpm >=10.0.0
• pnpm 12.4.2 → [Updates: 12.6.0]

packages/import-post/package.json (14)

• @aws-sdk/client-s3 ^3.738.0 → [Updates: ^3.738.0]
• remark-gfm ^4.0.1
• remark-parse ^11.0.0
• remark-stringify ^11.0.0
• sharp ^0.35.0 → [Updates: ^0.35.0]
• unified ^11.0.5
• unist-util-visit ^5.0.0
• yaml ^2.7.0
• @types/mdast ^4.0.4
• @types/node ^25.9.7 → [Updates: ^25.9.8]
• tsx ^4.20.0 → [Updates: ^4.20.0]
• @typescript/native ^7.0.2
• typescript ^6.0.2
• vitest ^4.1.0 → [Updates: ^5.0.0]

packages/kysely-adapter-cloudflare/package.json (5)

• @cloudflare/workers-types ^5.0.0 → [Updates: ^5.0.0]
• kysely ^0.29.0
• publint ^0.3.0
• vitest ^4.1.0 → [Updates: ^5.0.0]
• kysely ^0.28.14 || ^0.29.0

packages/sql-tools/package.json (8)

• commander ^15.0.0
• graph-data-structure ^4.5.0
• kysely ^0.29.0
• kysely-postgres-js ^4.0.0 → [Updates: ^5.0.0]
• pg-connection-string ^2.11.0
• postgres ^3.4.8
• publint ^0.3.0
• testcontainers ^12.0.0

packages/svelte-markdown-preprocess/package.json (8)

• front-matter ^4.0.2
• marked ^18.0.0 → [Updates: ^18.0.0]
• node-emoji ^2.2.0
• @types/node ^24.13.5 → [Updates: ^24.13.6]
• vite ^8.0.0 → [Updates: ^8.0.0]
• vitest ^4.0.5 → [Updates: ^5.0.0]
• svelte ^5.0.0
• node 24.21.0

packages/ui/package.json (29)

• @internationalized/date ^3.10.0
• @mdi/js ^7.4.47
• bits-ui ^2.15.7 → [Updates: ^2.15.7]
• fuse.js ^7.4.2
• luxon ^3.7.2
• simple-icons ^16.0.0 → [Updates: ^16.0.0]
• svelte-highlight ^7.8.4 → [Updates: ^7.8.4]
• tailwind-merge ^3.0.0
• tailwind-variants ^3.0.0
• @sveltejs/adapter-static ^3.0.6
• @sveltejs/kit ^2.13.0
• @sveltejs/package ^2.0.0
• @sveltejs/vite-plugin-svelte ^7.0.0 → [Updates: ^7.0.0]
• @tailwindcss/postcss ^4.2.2
• @tailwindcss/vite ^4.2.2
• @types/luxon ^3.7.1
• autoprefixer ^10.4.20
• globals ^17.0.0
• publint ^0.3.0
• svelte ^5.37.0 → [Updates: ^5.37.0]
• svelte-check ^4.0.0
• tailwindcss ^4.2.2
• @typescript/native ^7.0.2
• typescript ^6.0.2
• vite ^8.0.0 → [Updates: ^8.0.0]
• vitest ^4.1.0 → [Updates: ^5.0.0]
• @sveltejs/kit ^2.13.0
• svelte ^5.0.0
• node 24.21.0

pnpm-workspace.yaml (1)

• svelte-highlight 7.14.1 → [Updates: 7.22.0]

regex (1)

apps/root.immich.app/src/lib/compose/images.ts (2)

• docker.io/valkey/valkey 9@sha256:4963247afc4cd33c7d3b2d2816b9f7f8eeebab148d29056c2ca4d7cbc966f2d9 → [Updates: 9]
• ghcr.io/immich-app/postgres 14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23 → [Updates: 16-vectorchord0.4.3-pgvectors0.2.0]

renovate-config (1)

renovate.json

terraform (7)

deployment/modules/cloudflare/pages-project/config.tf (2)

• cloudflare 4.52.9 → [Updates: 5.25.0]
• hashicorp/terraform ~> 1.7

deployment/modules/cloudflare/pages-project/pages.tf

deployment/modules/cloudflare/static-pages/config.tf (2)

• cloudflare 4.52.9 → [Updates: 5.25.0]
• hashicorp/terraform ~> 1.7

deployment/modules/cloudflare/static-pages/pages.tf

deployment/modules/cloudflare/workers/datasets/config.tf (2)

• cloudflare 4.52.9 → [Updates: 5.25.0]
• hashicorp/terraform ~> 1.7

deployment/modules/cloudflare/workers/datasets/providers.tf

deployment/modules/cloudflare/workers/datasets/worker.tf

terragrunt (3)

deployment/modules/cloudflare/pages-project/terragrunt.hcl

deployment/modules/cloudflare/static-pages/terragrunt.hcl

deployment/modules/cloudflare/workers/datasets/terragrunt.hcl

---

• Check this box to trigger a request for Renovate to run again on this repository