Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@types/dotenv

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update dependency esbuild to v0.28.2
• chore(deps): update dependency protobufjs to v8.7.2
• chore(deps): update dependency terraform to v1.15.9
• chore(deps): update supabase/edge-runtime docker tag to v1.74.3
• deps(deps): update dependencies-non-major (@ai-sdk/mcp, @ai-sdk/mistral, @hono/node-server, @langfuse/client, @langfuse/core, @langfuse/otel, @langfuse/tracing, @langfuse/vercel-ai-sdk, @mistralai/mistralai, @react-pdf/renderer, @sentry/node, @sentry/react, @supabase/supabase-js, ai, globals, hono, mammoth, tsx, typescript-eslint, unpdf, zustand)
• chore(deps): update docker/login-action action to v4.6.0
• chore(deps): update docker/setup-buildx-action action to v4.3.0
• chore(deps): update gotenberg/gotenberg docker tag to v8.36.0
• chore(deps): update npm to v11.19.0
• chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.159.0
• chore(deps): update supabase/gotrue docker tag to v2.196.0
• chore(deps): update supabase/logflare docker tag to v1.50.6
• chore(deps): update supabase/postgres docker tag to v15.14.1.164
• chore(deps): update supabase/postgres-meta docker tag to v0.98.0
• chore(deps): update supabase/realtime docker tag to v2.129.8
• chore(deps): update supabase/storage-api docker tag to v1.70.7
• chore(deps): update supabase/supavisor docker tag to v2.9.7
• chore(deps): update terraform cloudfoundry to v1.17.0
• chore(deps): update terraform stackit to ~> 0.113.0
• chore(deps): update timberio/vector docker tag to v0.57.0
• chore(deps): update actions/setup-node action to v7
• chore(deps): update darthsim/imgproxy docker tag to v4
• chore(deps): update dependency whatwg-url to v17
• chore(deps): update devdependencies-major (major) (@types/dotenv, @types/node, @types/supertest, dotenv, globals, strip-literal, tailwindcss, typescript)
• chore(deps): update kong docker tag to v3
• chore(deps): update node.js
• chore(deps): update npm to v12
• chore(deps): update supabase/postgres docker tag to v17
• chore(deps): update valkey/valkey docker tag to v9
• fix(deps): update dependency @tanstack/react-table to v9
• fix(deps): update dependency date-fns to v4
• fix(deps): update dependency dotenv to v17
• fix(deps): update dependency ioredis to v6
• fix(deps): update dependency lucide-react to v1
• fix(deps): update dependency react-dropzone to v20
• fix(deps): update dependency react-markdown to v10
• fix(deps): update dependency typescript to v7
• fix(deps): update eslint monorepo to v10 (@eslint/js, eslint)
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency playwright-core to v1.63.0
• chore(deps): update dependency zod to v4.5.4
• fix(deps): update dependency @mohtasham/md-to-docx to v4

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update devdependencies-non-major (@aws-sdk/client-s3, @axe-core/playwright, @types/node, @types/pdf-parse, @types/react, @types/react-dom, @vitejs/plugin-react, autoprefixer, date-fns, dotenv, eslint-config-turbo, globals, nodemon, postcss, shadcn, strip-literal, supabase, supertest, tailwindcss, tsx, turbo, typescript, vite, vitest)

Detected Dependencies

asdf (1)

.tool-versions (1)

• terraform 1.15.8 → [Updates: 1.15.9]

docker-compose (3)

compose.yml

infra/supabase/docker-compose.monitoring.yml (1)

• otel/opentelemetry-collector-contrib 0.119.0 → [Updates: 0.159.0]

infra/supabase/docker-compose.yml (14)

• supabase/studio 2025.10.01-sha-8460121
• kong 2.8.5 → [Updates: 3.9.3]
• supabase/gotrue v2.180.0 → [Updates: v2.196.0]
• postgrest/postgrest v13.0.8
• supabase/realtime v2.51.11 → [Updates: v2.129.8]
• supabase/storage-api v1.28.0 → [Updates: v1.70.7]
• darthsim/imgproxy v3.31.4 → [Updates: v4.0.13]
• supabase/postgres-meta v0.91.6 → [Updates: v0.98.0]
• supabase/edge-runtime v1.74.2 → [Updates: v1.74.3]
• supabase/logflare 1.22.6 → [Updates: 1.50.6]
• supabase/postgres 15.8.1.085 → [Updates: 15.14.1.164, 17.6.1.164]
• timberio/vector 0.28.1-alpine → [Updates: 0.57.0-alpine]
• supabase/supavisor 2.7.0 → [Updates: 2.9.7]
• valkey/valkey 7.2.14 → [Updates: 9.1.0]

dockerfile (4)

apps/backend/Dockerfile (1)

• node 24.18.0-slim → [Updates: 24.18.1-slim]

infra/gotenberg/Dockerfile (1)

• gotenberg/gotenberg 8.34.0 → [Updates: 8.36.0]

infra/render-log-shipper/Dockerfile (1)

• node 22-alpine → [Updates: 24-alpine]

infra/render-otel-collector/Dockerfile (1)

• otel/opentelemetry-collector-contrib 0.120.0 → [Updates: 0.159.0]

github-actions (14)

.github/actions/setup/action.yml (4)

• asdf-vm/actions v4.0.1@b7bcd026f18772e44fe1026d729e1611cc435d47
• actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• 1password/install-cli-action v4.1.0@1a3160d5e9de1ae0803eaa08a88746f5ae3daa50

.github/actions/wait-for-backend/action.yml (1)

• docker/login-action v4.5.2@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c → [Updates: v4.6.0]

.github/workflows/admin-panel-tests.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/backend-deploy-stackit-cf.yml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/backend-image-build-and-push.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/login-action v4.5.2@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c → [Updates: v4.6.0]
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c → [Updates: v4.3.0]
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a

.github/workflows/backend-tests.yml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/cleanup-mistral-orphans.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/cleanup-s3-orphans.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/frontend-tests.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/gotenberg-deploy-stackit-cf.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• 1password/install-cli-action v4.1.0@1a3160d5e9de1ae0803eaa08a88746f5ae3daa50

.github/workflows/maintenance-tests.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/prettier-eslint.yml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/supabase-migrations.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• asdf-vm/actions v4.0.1@b7bcd026f18772e44fe1026d729e1611cc435d47

.github/workflows/terraform-checks.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• asdf-vm/actions v4.0.1@b7bcd026f18772e44fe1026d729e1611cc435d47

npm (11)

apps/admin-panel/package.json (41)

• @fontsource-variable/geist 5.3.0
• @radix-ui/react-accordion 1.2.20
• @radix-ui/react-dialog 1.1.23
• @radix-ui/react-dropdown-menu 2.1.24
• @radix-ui/react-label 2.1.15
• @radix-ui/react-select 2.3.7
• @radix-ui/react-separator 1.1.15
• @radix-ui/react-slot 1.3.3
• @radix-ui/react-switch 1.3.7
• @radix-ui/react-tooltip 1.2.16
• @supabase/supabase-js 2.81.1 → [Updates: 2.112.3]
• @tanstack/react-table 8.21.3 → [Updates: 9.1.2]
• class-variance-authority 0.7.1
• clsx 2.1.1
• date-fns 4.4.0
• lucide-react 0.577.0 → [Updates: 1.33.0]
• react 19.2.8
• react-dom 19.2.8
• react-router 8.3.0 → [Updates: 8.3.1]
• recharts 3.10.1
• slugify 1.6.9
• tailwind-merge 3.6.0
• tailwindcss-animate 1.0.7
• tw-animate-css 1.4.0
• zustand 5.0.14 → [Updates: 5.0.15]
• @axe-core/playwright 4.10.2 → [Updates: 4.13.0]
• @playwright/test 1.62.1 → [Updates: 1.63.0]
• @types/dotenv 6.1.1 → [Updates: 8.2.3]
• @types/node 22.14.0 → [Updates: 22.20.1, 24.13.3]
• @types/react 19.2.3 → [Updates: 19.2.18]
• @types/react-dom 19.2.3 → [Updates: 19.2.4]
• @vitejs/plugin-react 6.0.4 → [Updates: 6.1.0]
• autoprefixer 10.4.20 → [Updates: 10.5.4]
• dotenv 16.4.7 → [Updates: 16.6.1, 17.4.2]
• globals 15.10.0 → [Updates: 15.15.0, 17.11.0]
• postcss 8.5.25 → [Updates: 8.5.26]
• shadcn 4.16.0 → [Updates: 4.19.0]
• tailwindcss 3.4.13 → [Updates: 3.4.19, 4.3.3]
• typescript 5.8.3 → [Updates: 5.9.3, 7.0.2]
• vite 8.1.5 → [Updates: 8.2.2]
• vitest 4.1.10 → [Updates: 4.1.11, 5.0.0]

apps/backend/package.json (40)

• @ai-sdk/mcp 2.0.34 → [Updates: 2.0.36]
• @ai-sdk/mistral 4.0.31 → [Updates: 4.0.32]
• @dqbd/tiktoken 1.0.22
• @hono/node-server 2.0.12 → [Updates: 2.1.1]
• @langfuse/client 5.10.0 → [Updates: 5.10.1]
• @langfuse/core 5.10.0 → [Updates: 5.10.1]
• @langfuse/otel 5.10.0 → [Updates: 5.10.1]
• @langfuse/tracing 5.10.0 → [Updates: 5.10.1]
• @langfuse/vercel-ai-sdk 5.10.0 → [Updates: 5.10.1]
• @mistralai/mistralai 2.6.3 → [Updates: 2.6.4]
• @opentelemetry/instrumentation-http 0.221.0 → [Updates: 0.222.0]
• @opentelemetry/instrumentation-undici 0.31.0 → [Updates: 0.32.0]
• @opentelemetry/sdk-node 0.221.0 → [Updates: 0.222.0]
• @opentelemetry/sdk-trace-node 2.10.0 → [Updates: 2.11.0]
• @sentry/node 10.68.0 → [Updates: 10.70.0]
• @supabase/supabase-js 2.81.1 → [Updates: 2.112.3]
• ai 7.0.73 → [Updates: 7.0.77]
• dotenv 16.6.1 → [Updates: 17.4.2]
• hono 4.13.0 → [Updates: 4.13.3]
• ioredis 5.11.1 → [Updates: 6.0.0]
• jsonwebtoken 9.0.3
• mammoth 1.12.0 → [Updates: 1.12.1]
• mistral-tokenizer-ts 2.2.1
• pdf-lib 1.17.1
• unpdf 1.8.0 → [Updates: 1.8.1]
• xlsx 0.20.3
• zod 4.4.3 → [Updates: 4.5.4]
• @aws-sdk/client-s3 3.1007.0 → [Updates: 3.1116.0]
• @types/node 22.5.0 → [Updates: 22.20.1, 24.13.3]
• @types/pdf-parse 1.1.4 → [Updates: 1.1.5]
• @types/supertest 6.0.3 → [Updates: 7.2.1]
• date-fns 4.1.0 → [Updates: 4.4.0]
• globals 15.15.0 → [Updates: 17.11.0]
• nodemon 3.1.4 → [Updates: 3.1.14]
• supertest 7.1.3 → [Updates: 7.2.2]
• tsx 4.23.1 → [Updates: 4.23.12]
• typescript 5.8.3 → [Updates: 5.9.3, 7.0.2]
• vitest 4.1.10 → [Updates: 4.1.11, 5.0.0]
• @rollup/rollup-linux-x64-gnu *
• zod 4.4.3 → [Updates: 4.5.4]

apps/frontend/package.json (38)

• @e965/xlsx 0.20.3
• @mohtasham/md-to-docx 3.0.1 → [Updates: 4.0.0]
• @react-pdf/renderer 4.5.1 → [Updates: 4.7.0]
• @sentry/react 10.68.0 → [Updates: 10.70.0]
• @supabase/supabase-js 2.81.1 → [Updates: 2.112.3]
• date-fns 3.6.0 → [Updates: 4.4.0]
• dotenv 16.6.1 → [Updates: 17.4.2]
• js-tiktoken 1.0.21
• react 19.2.8
• react-data-grid 7.0.0-beta.61
• react-dnd 16.0.1
• react-dnd-html5-backend 16.0.1
• react-dom 19.2.8
• react-dropzone 14.4.1 → [Updates: 20.1.1]
• react-markdown 9.1.0 → [Updates: 10.1.0]
• react-router 8.3.0 → [Updates: 8.3.1]
• rehype-stringify 10.0.1
• remark-gfm 4.0.1
• remark-rehype 11.1.2
• remove-markdown 0.6.4 → [Updates: 0.7.0]
• slugify 1.6.9
• zustand 5.0.14 → [Updates: 5.0.15]
• @axe-core/playwright 4.10.2 → [Updates: 4.13.0]
• @playwright/test 1.62.1 → [Updates: 1.63.0]
• @sentry/vite-plugin 5.4.0
• @types/node 22.14.0 → [Updates: 22.20.1, 24.13.3]
• @types/react 19.2.3 → [Updates: 19.2.18]
• @types/react-dom 19.2.3 → [Updates: 19.2.4]
• @vitejs/plugin-react 6.0.4 → [Updates: 6.1.0]
• autoprefixer 10.4.19 → [Updates: 10.5.4]
• globals 15.8.0 → [Updates: 15.15.0, 17.11.0]
• postcss 8.5.25 → [Updates: 8.5.26]
• strip-literal 2.1.0 → [Updates: 2.1.1, 4.0.0]
• tailwindcss 3.4.7 → [Updates: 3.4.19, 4.3.3]
• typescript 5.8.3 → [Updates: 5.9.3, 7.0.2]
• vite 8.1.5 → [Updates: 8.2.2]
• vitest 4.1.10 → [Updates: 4.1.11, 5.0.0]
• whatwg-url 14.2.0 → [Updates: 17.1.0]

apps/maintenance-mode/package.json (14)

• react 19.2.8
• react-dom 19.2.8
• @axe-core/playwright 4.10.2 → [Updates: 4.13.0]
• @playwright/test 1.62.1 → [Updates: 1.63.0]
• @types/node 22.14.0 → [Updates: 22.20.1, 24.13.3]
• @types/react 19.2.3 → [Updates: 19.2.18]
• @types/react-dom 19.2.3 → [Updates: 19.2.4]
• @vitejs/plugin-react 6.0.4 → [Updates: 6.1.0]
• autoprefixer 10.4.19 → [Updates: 10.5.4]
• globals 15.8.0 → [Updates: 15.15.0, 17.11.0]
• postcss 8.5.25 → [Updates: 8.5.26]
• tailwindcss 3.4.7 → [Updates: 3.4.19, 4.3.3]
• typescript 5.8.3 → [Updates: 5.9.3, 7.0.2]
• vite 8.1.5 → [Updates: 8.2.2]

infra/backups/scripts/prompts/package.json (3)

• @langfuse/client 5.9.1 → [Updates: 5.10.1]
• tsx 4.23.1 → [Updates: 4.23.12]
• esbuild 0.28.1 → [Updates: 0.28.2]

infra/render-log-shipper/package.json (3)

• tsx 4.23.1 → [Updates: 4.23.12]
• @types/node 22.5.0 → [Updates: 22.20.1, 24.13.3]
• typescript 5.8.3 → [Updates: 5.9.3, 7.0.2]

libs/db-schema/package.json

libs/eslint/package.json (8)

• @eslint/compat 2.1.0 → [Updates: 2.1.1]
• @eslint/js 9.39.5 → [Updates: 10.0.1]
• @technologiestiftung/eslint-config 0.4.1
• eslint 9.39.5 → [Updates: 10.9.0]
• eslint-plugin-react 7.37.5
• globals 17.8.0 → [Updates: 17.11.0]
• typescript-eslint 8.65.0 → [Updates: 8.67.0]
• eslint-config-turbo 2.9.14 → [Updates: 2.10.11]

libs/prettier/package.json (3)

• @technologiestiftung/prettier-config 1.0.0
• prettier 3.9.6
• prettier-plugin-sql 0.20.0

libs/typescript-config/package.json (1)

• typescript 5.9.3 → [Updates: 7.0.2]

package.json (9)

• supabase 2.71.0 → [Updates: 2.115.0]
• turbo 2.10.7 → [Updates: 2.10.11]
• npm 11.16.0 → [Updates: 11.19.0, 12.0.2]
• esbuild 0.28.1 → [Updates: 0.28.2]
• minimatch 10.2.6
• brace-expansion 5.0.9
• protobufjs 8.7.1 → [Updates: 8.7.2]
• tar 7.5.22
• playwright-core 1.62.1 → [Updates: 1.63.0]

nvm (2)

.nvmrc (1)

• node v24.18.0 → [Updates: 24.19.0]

infra/backups/scripts/prompts/.nvmrc (1)

• node 22.23.2 → [Updates: 24.19.0]

renovate-config (1)

.github/renovate.json

terraform (4)

infra/terraform/cloud-foundry/provider.tf

infra/terraform/cloud-foundry/versions.tf (3)

• cloudfoundry ~> 1.16 → [Updates: ~> 1.16]
• stackit ~> 0.100.0 → [Updates: ~> 0.113.0]
• hashicorp/terraform ~> 1.11

infra/terraform/observability/provider.tf

infra/terraform/observability/versions.tf (2)

• stackit ~> 0.100.0 → [Updates: ~> 0.113.0]
• hashicorp/terraform ~> 1.11

---

• Check this box to trigger a request for Renovate to run again on this repository