Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@types/uuid

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (4)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
npm	@js-temporal/polyfill	2025-03-31
npm	node-jose	2023-02-16
npm	reflect-metadata	2024-03-29
npm	x-forwarded-fetch	2024-05-18

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Lock file maintenance

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update Fedify packages to v2 (@fedify/cli, @fedify/hono, @fedify/redis)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update dependency @google-cloud/pubsub to v5.3.1
• Update dependency ioredis to v5.11.1
• Update dependency mysql2 to v3.22.5
• Update Types packages to v22.19.20

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency concurrently to v10.0.3
• Update vitest monorepo to v4.1.8 (@vitest/coverage-v8, vitest)
• Update sentry-javascript monorepo to v10.56.0
• Update dependency @cucumber/cucumber to v13
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency @fedify/fedify to v2 [SECURITY]
• Update Node.js to v24

Detected Dependencies

docker-compose (3)

docker-compose.yml (10)

• jaegertracing/all-in-one 1.76.0@sha256:ab6f1a1f0fb49ea08bcd19f6b84f6081d0d44b364b6de148e1798eb5816bacac
• mysql 8.4.9@sha256:c36050afdca850f23cef85703f84c7531a5ae155a11b5ee1c60acb09937c4084 → [Updates: 9.7.0]
• redis 7-alpine@sha256:6ab0b6e7381779332f97b8ca76193e45b0756f38d4c0dcda72dbb3c32061ab99 → [Updates: 8-alpine]
• gcr.io/google.com/cloudsdktool/google-cloud-cli 499.0.0-emulators@sha256:38606e0ec8b892ff2be6fb7238c6b98e7b0b69f60ed433fa2b196bdf4646caf9 → [Updates: 571.0.0-emulators]
• mysql 8.4.9@sha256:c36050afdca850f23cef85703f84c7531a5ae155a11b5ee1c60acb09937c4084 → [Updates: 9.7.0]
• redis 7-alpine@sha256:6ab0b6e7381779332f97b8ca76193e45b0756f38d4c0dcda72dbb3c32061ab99 → [Updates: 8-alpine]
• gcr.io/google.com/cloudsdktool/google-cloud-cli 499.0.0-emulators@sha256:38606e0ec8b892ff2be6fb7238c6b98e7b0b69f60ed433fa2b196bdf4646caf9 → [Updates: 571.0.0-emulators]
• caddy 2@sha256:cb9d71ad83182011b79355cd57692686374bd78d6fe327efe0ff8507da03ab13
• wiremock/wiremock 3.13.2-1@sha256:8bdd64a25db911ba521a38aebf1590d96767c2d29f3e941e2f496a760bbdf47d
• wiremock/wiremock 3.13.2-1@sha256:8bdd64a25db911ba521a38aebf1590d96767c2d29f3e941e2f496a760bbdf47d

jobs/__template__/docker-compose.yml (1)

• mysql 8.4.9@sha256:c36050afdca850f23cef85703f84c7531a5ae155a11b5ee1c60acb09937c4084 → [Updates: 9.7.0]

jobs/reconcile-account-topics/docker-compose.yml (1)

• mysql 8.4.9@sha256:c36050afdca850f23cef85703f84c7531a5ae155a11b5ee1c60acb09937c4084 → [Updates: 9.7.0]

dockerfile (7)

dev/fake-gcs/Dockerfile (1)

• fsouza/fake-gcs-server sha256:3730da0e31f7e5186a90ec4899dc2c336104e7599df400411392ef17e684c31f

dev/nginx/Dockerfile (1)

• nginx 1.31.1@sha256:5aca99593157f4ae539a5dec1092a0ad8762f8e2eb1789085a13a0f5622369f6

Dockerfile (1)

• node 22.22.3-alpine@sha256:968df39aedcea65eeb078fb336ed7191baf48f972b4479711397108be0966920 → [Updates: 24.16.0-alpine]

jobs/__template__/Dockerfile (1)

• oven/bun 1.3.14-alpine@sha256:5acc90a93e91ff07bf72aa90a7c9f0fa189765aec90b47bdbf2152d2196383c0

jobs/reconcile-account-topics/Dockerfile (1)

• oven/bun 1.3.14-alpine@sha256:5acc90a93e91ff07bf72aa90a7c9f0fa189765aec90b47bdbf2152d2196383c0

migrate/Dockerfile (1)

• debian bookworm-slim@sha256:0104b334637a5f19aa9c983a91b54c89887c0984081f2068983107a6f6c21eeb

migrate/gh-ost.Dockerfile (1)

• ubuntu 24.04@sha256:786a8b558f7be160c6c8c4a54f9a57274f3b4fb1491cf65146521ae77ff1dc54 → [Updates: 26.04]

github-actions (7)

.github/workflows/build.yml (26)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10
• biomejs/setup-biome v2@4c91541eaada48f67d7dbd7833600ce162b68f51
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10
• docker/setup-qemu-action v4@06116385d9baf250c9f4dcb4858b16962ea869c3
• docker/setup-buildx-action v4@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• docker/build-push-action v7@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• docker/build-push-action v7@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• docker/login-action v4@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/build-push-action v7@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• docker/build-push-action v7@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10
• dorny/paths-filter v4@fbd0ab8f3e69293af611ebaee6363fc25e6d187d
• docker/setup-buildx-action v4@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• docker/login-action v4@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/build-push-action v7@f9f3042f7e2789586610d6e8b85c8f03e5195baf

.github/workflows/cicd.yml (1)

• tryghost/actions main@f61d9df46654402efc2269f6b06a0a09f0c45810

.github/workflows/deploy-pr.yml (5)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10
• hashicorp/setup-terraform v4@dfe3c3f87815947d99a8997f908cb6525fc44e9e
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• google-github-actions/deploy-cloudrun v3@2028e2d7d30a78c6910e0632e48dd561b064884d

.github/workflows/deploy.yml (8)

• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• google-github-actions/deploy-cloudrun v3@2028e2d7d30a78c6910e0632e48dd561b064884d
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• google-github-actions/deploy-cloudrun v3@2028e2d7d30a78c6910e0632e48dd561b064884d
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• google-github-actions/deploy-cloudrun v3@2028e2d7d30a78c6910e0632e48dd561b064884d
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• google-github-actions/deploy-cloudrun v3@2028e2d7d30a78c6910e0632e48dd561b064884d

.github/workflows/ephemeral-staging-teardown.yml (6)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10
• hashicorp/setup-terraform v4@dfe3c3f87815947d99a8997f908cb6525fc44e9e
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093

.github/workflows/push.yml (7)

• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• docker/login-action v4@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/login-action v4@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/setup-buildx-action v4@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5

.github/workflows/test.yml (6)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

npm (2)

jobs/reconcile-account-topics/package.json (2)

• @fedify/fedify 1.10.11 → [Updates: 2.2.3]
• mysql2 3.22.4 → [Updates: 3.22.5]

package.json (54)

• @fedify/fedify 1.10.11 → [Updates: 2.2.3]
• @fedify/hono 1.10.11 → [Updates: 2.2.3]
• @fedify/redis 1.10.11 → [Updates: 2.2.3]
• @google-cloud/opentelemetry-cloud-trace-exporter 3.0.0
• @google-cloud/opentelemetry-cloud-trace-propagator 0.21.0
• @google-cloud/pubsub 5.3.0 → [Updates: 5.3.1]
• @google-cloud/storage 7.19.0
• @hono/node-server 2.0.4
• @js-temporal/polyfill 0.5.1
• @logtape/logtape 2.1.1
• @opentelemetry/api 1.9.1
• @opentelemetry/core 2.7.1
• @opentelemetry/exporter-trace-otlp-proto 0.218.0
• @opentelemetry/resources 2.7.1
• @opentelemetry/sdk-trace-base 2.7.1
• @sentry/node 10.55.0 → [Updates: 10.56.0]
• awilix 13.0.3
• es-toolkit 1.47.0
• hono 4.12.23
• html-to-text 10.0.0
• ioredis 5.11.0 → [Updates: 5.11.1]
• jsonwebtoken 9.0.3
• knex 3.2.10
• ky 2.0.2
• linkify-html 4.3.3
• linkifyjs 4.3.3
• mysql2 3.22.4 → [Updates: 3.22.5]
• node-html-parser 7.1.0
• node-jose 2.2.0
• reflect-metadata 0.2.2
• sanitize-html 2.17.4
• sharp 0.34.5
• uuid 14.0.0
• x-forwarded-fetch 0.2.0
• zod 4.4.3
• @biomejs/biome 2.4.16
• @cucumber/cucumber 12.9.0 → [Updates: 13.0.0]
• @faker-js/faker 10.4.0
• @fedify/cli 1.10.11 → [Updates: 2.2.3]
• @types/html-to-text 9.0.4
• @types/jsonwebtoken 9.0.10
• @types/node 22.19.19 → [Updates: 22.19.20]
• @types/node-jose 1.1.13
• @types/sanitize-html 2.16.1
• @types/sinon 21.0.1
• @types/uuid 11.0.0
• @vitest/coverage-v8 4.1.7 → [Updates: 4.1.8]
• concurrently 10.0.1 → [Updates: 10.0.3]
• esbuild 0.28.0
• nock 14.0.15
• typescript 6.0.3
• vite-tsconfig-paths 6.1.1
• vitest 4.1.7 → [Updates: 4.1.8]
• wiremock-captain 4.1.3

nvm (1)

.nvmrc (1)

• node 22.22.3 → [Updates: 24.16.0]

renovate-config (1)

.github/renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository