Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
npm	@types/uuid

Abandoned Dependencies

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (6)

Datasource	Package	Last Updated
npm	@js-temporal/polyfill	2025-03-31
npm	html-to-text	2023-03-23
npm	node-jose	2023-02-16
npm	reflect-metadata	2024-03-29
npm	url-regex	2019-04-21
npm	x-forwarded-fetch	2024-05-18

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Lock file maintenance

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update dependency @biomejs/biome to v2.4.11
• Update dependency mysql2 to v3.22.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency hono to v4.12.12 [SECURITY]
• Update actions/upload-artifact digest to 043fb46
• Update docker/build-push-action digest to bcafcac
• Update dependency nock to v14.0.12
• Update nginx Docker tag to v1.29.8
• Update Node.js to v22.22.2
• Update opentelemetry-js monorepo (@opentelemetry/api, @opentelemetry/exporter-trace-otlp-proto)
• Update oven/bun Docker tag to v1.3.12
• Update Fedify packages to v1.10.8 (@fedify/cli, @fedify/fedify, @fedify/hono, @fedify/redis)
• Update dependency awilix to v13
• Update dependency ky to v2
• Update dependency typescript to v6
• Update Fedify packages to v2 (major) (@fedify/cli, @fedify/fedify, @fedify/hono, @fedify/redis)
• Update Types packages (major) (@types/node, @types/sinon, @types/uuid)
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency @google-cloud/opentelemetry-cloud-trace-propagator to v0.21.0
• Update dependency @cucumber/cucumber to v12
• Update dependency @faker-js/faker to v10
• Update dependency @google-cloud/opentelemetry-cloud-trace-exporter to v3
• Update dependency @google-cloud/pubsub to v5
• Update dependency @logtape/logtape to v2
• Update dependency @sentry/node to v10
• Update dependency uuid to v13
• Update dependency vite-tsconfig-paths to v6
• Update dependency wiremock-captain to v4
• Update Node.js to v24
• Update opentelemetry-js monorepo to v2 (major) (@opentelemetry/core, @opentelemetry/resources, @opentelemetry/sdk-trace-base)
• Update vitest monorepo to v4 (major) (@vitest/coverage-v8, vitest)

Detected Dependencies

docker-compose (3)

docker-compose.yml (10)

• jaegertracing/all-in-one 1.76.0@sha256:ab6f1a1f0fb49ea08bcd19f6b84f6081d0d44b364b6de148e1798eb5816bacac
• mysql 8.4.8@sha256:da906917ca4ace3ba55538b7c2ee97a9bc865ef14a4b6920b021f0249d603f3d → [Updates: 9.6.0]
• redis 7-alpine@sha256:8b81dd37ff027bec4e516d41acfbe9fe2460070dc6d4a4570a2ac5b9d59df065 → [Updates: 8-alpine]
• gcr.io/google.com/cloudsdktool/google-cloud-cli 499.0.0-emulators@sha256:38606e0ec8b892ff2be6fb7238c6b98e7b0b69f60ed433fa2b196bdf4646caf9 → [Updates: 564.0.0-emulators]
• mysql 8.4.8@sha256:da906917ca4ace3ba55538b7c2ee97a9bc865ef14a4b6920b021f0249d603f3d → [Updates: 9.6.0]
• redis 7-alpine@sha256:8b81dd37ff027bec4e516d41acfbe9fe2460070dc6d4a4570a2ac5b9d59df065 → [Updates: 8-alpine]
• gcr.io/google.com/cloudsdktool/google-cloud-cli 499.0.0-emulators@sha256:38606e0ec8b892ff2be6fb7238c6b98e7b0b69f60ed433fa2b196bdf4646caf9 → [Updates: 564.0.0-emulators]
• caddy 2@sha256:1e40b251ca9639ead7b5cd2cedcc8765adfbabb99450fe23f130eefabf50f4bc
• wiremock/wiremock 3.13.2-1@sha256:8bdd64a25db911ba521a38aebf1590d96767c2d29f3e941e2f496a760bbdf47d
• wiremock/wiremock 3.13.2-1@sha256:8bdd64a25db911ba521a38aebf1590d96767c2d29f3e941e2f496a760bbdf47d

jobs/__template__/docker-compose.yml (1)

• mysql 8.4.8@sha256:da906917ca4ace3ba55538b7c2ee97a9bc865ef14a4b6920b021f0249d603f3d → [Updates: 9.6.0]

jobs/reconcile-account-topics/docker-compose.yml (1)

• mysql 8.4.8@sha256:da906917ca4ace3ba55538b7c2ee97a9bc865ef14a4b6920b021f0249d603f3d → [Updates: 9.6.0]

dockerfile (7)

dev/fake-gcs/Dockerfile (1)

• fsouza/fake-gcs-server sha256:3730da0e31f7e5186a90ec4899dc2c336104e7599df400411392ef17e684c31f

dev/nginx/Dockerfile (1)

• nginx 1.29.7@sha256:1854da86e82d5dfb49a8f3d78b099adcc7e36608b207146ed95cd47937938a40 → [Updates: 1.29.8]

Dockerfile (1)

• node 22.22.1-alpine@sha256:8094c002d08262dba12645a3b4a15cd6cd627d30bc782f53229a2ec13ee22a00 → [Updates: 22.22.2-alpine, 24.14.1-alpine]

jobs/__template__/Dockerfile (1)

• oven/bun 1.3.11-alpine@sha256:7ed9f74c326d1c260abe247ac423ccbf5ac92af62bb442d515d1f92f21e8ea9b → [Updates: 1.3.12-alpine]

jobs/reconcile-account-topics/Dockerfile (1)

• oven/bun 1.3.11-alpine@sha256:7ed9f74c326d1c260abe247ac423ccbf5ac92af62bb442d515d1f92f21e8ea9b → [Updates: 1.3.12-alpine]

migrate/Dockerfile (1)

• debian bookworm-slim@sha256:4724b8cc51e33e398f0e2e15e18d5ec2851ff0c2280647e1310bc1642182655d

migrate/gh-ost.Dockerfile (1)

• ubuntu 24.04@sha256:84e77dee7d1bc93fb029a45e3c6cb9d8aa4831ccfcc7103d36e876938d28895b

github-actions (7)

.github/workflows/build.yml (22)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• biomejs/setup-biome v2@4c91541eaada48f67d7dbd7833600ce162b68f51
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6@53b83947a5a98c8d113130e565377fae1a50d02f
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-qemu-action v4@ce360397dd3f832beb865e1373c09c0e9f86d70a
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
• docker/metadata-action v6@030e881283bb7a6894de51c315a6bfe6a94e05cf
• docker/metadata-action v6@030e881283bb7a6894de51c315a6bfe6a94e05cf
• docker/metadata-action v6@030e881283bb7a6894de51c315a6bfe6a94e05cf
• docker/metadata-action v6@030e881283bb7a6894de51c315a6bfe6a94e05cf
• docker/build-push-action v7@d08e5c354a6adb9ed34480a06d141179aa583294 → [Updates: v7]
• docker/build-push-action v7@d08e5c354a6adb9ed34480a06d141179aa583294 → [Updates: v7]
• actions/upload-artifact v7@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7]
• actions/upload-artifact v7@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• dorny/paths-filter v4@fbd0ab8f3e69293af611ebaee6363fc25e6d187d
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
• docker/metadata-action v6@030e881283bb7a6894de51c315a6bfe6a94e05cf
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• docker/login-action v4@4907a6ddec9925e35a0a9e82d7399ccc52663121
• docker/build-push-action v7@d08e5c354a6adb9ed34480a06d141179aa583294 → [Updates: v7]

.github/workflows/cicd.yml (1)

• tryghost/actions main@0cbdcbeb9030f46b109d5e6e44c14933026d8ca5

.github/workflows/deploy-pr.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hashicorp/setup-terraform v4@5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• google-github-actions/deploy-cloudrun v3@2028e2d7d30a78c6910e0632e48dd561b064884d

.github/workflows/deploy.yml (8)

• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• google-github-actions/deploy-cloudrun v3@2028e2d7d30a78c6910e0632e48dd561b064884d
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• google-github-actions/deploy-cloudrun v3@2028e2d7d30a78c6910e0632e48dd561b064884d
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• google-github-actions/deploy-cloudrun v3@2028e2d7d30a78c6910e0632e48dd561b064884d
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• google-github-actions/deploy-cloudrun v3@2028e2d7d30a78c6910e0632e48dd561b064884d

.github/workflows/ephemeral-staging-teardown.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hashicorp/setup-terraform v4@5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093

.github/workflows/push.yml (5)

• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• docker/login-action v4@4907a6ddec9925e35a0a9e82d7399ccc52663121
• docker/login-action v4@4907a6ddec9925e35a0a9e82d7399ccc52663121

.github/workflows/test.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

npm (2)

jobs/reconcile-account-topics/package.json (2)

• @fedify/fedify 1.9.7 → [Updates: 1.10.8, 2.1.5]
• mysql2 3.20.0 → [Updates: 3.22.0]

package.json (56)

• @fedify/fedify 1.9.7 → [Updates: 1.10.8, 2.1.5]
• @fedify/hono 1.9.7 → [Updates: 1.10.8, 2.1.5]
• @fedify/redis 1.9.7 → [Updates: 1.10.8, 2.1.5]
• @google-cloud/opentelemetry-cloud-trace-exporter 2.4.1 → [Updates: 3.0.0]
• @google-cloud/opentelemetry-cloud-trace-propagator 0.20.0 → [Updates: 0.21.0]
• @google-cloud/profiler 6.0.4
• @google-cloud/pubsub 4.11.0 → [Updates: 5.3.0]
• @google-cloud/storage 7.19.0
• @hono/node-server 1.19.13
• @js-temporal/polyfill 0.5.1
• @logtape/logtape 0.12.3 → [Updates: 2.0.5]
• @opentelemetry/api 1.9.0 → [Updates: 1.9.1]
• @opentelemetry/core 1.30.1 → [Updates: 2.6.1]
• @opentelemetry/exporter-trace-otlp-proto 0.57.0 → [Updates: 0.214.0]
• @opentelemetry/resources 1.30.1 → [Updates: 2.6.1]
• @opentelemetry/sdk-trace-base 1.30.1 → [Updates: 2.6.1]
• @sentry/node 8.55.1 → [Updates: 10.47.0]
• awilix 12.1.1 → [Updates: 13.0.3]
• es-toolkit 1.45.1
• hono 4.10.7 → [Updates: 4.12.12]
• html-to-text 9.0.5
• ioredis 5.10.1
• jsonwebtoken 9.0.3
• knex 3.2.9
• ky 1.14.3 → [Updates: 2.0.0]
• linkify-html 4.3.2
• linkifyjs 4.3.2
• mysql2 3.20.0 → [Updates: 3.22.0]
• node-html-parser 7.1.0
• node-jose 2.2.0
• reflect-metadata 0.2.2
• sanitize-html 2.17.2
• sharp 0.34.5
• url-regex 5.0.0
• uuid 10.0.0 → [Updates: 13.0.0]
• x-forwarded-fetch 0.2.0
• zod 4.3.6
• @biomejs/biome 2.4.10 → [Updates: 2.4.11]
• @cucumber/cucumber 11.3.0 → [Updates: 12.7.0]
• @faker-js/faker 9.9.0 → [Updates: 10.4.0]
• @fedify/cli 1.9.7 → [Updates: 1.10.8, 2.1.5]
• @types/html-to-text 9.0.4
• @types/jsonwebtoken 9.0.10
• @types/node 20.19.39 → [Updates: 24.12.2]
• @types/node-jose 1.1.13
• @types/sanitize-html 2.16.1
• @types/sinon 17.0.4 → [Updates: 21.0.1]
• @types/uuid 10.0.0 → [Updates: 11.0.0]
• @vitest/coverage-v8 2.1.9 → [Updates: 4.1.3]
• concurrently 9.2.1
• esbuild 0.28.0
• nock 14.0.11 → [Updates: 14.0.12]
• typescript 5.9.3 → [Updates: 6.0.2]
• vite-tsconfig-paths 5.1.4 → [Updates: 6.1.1]
• vitest 2.1.9 → [Updates: 4.1.3]
• wiremock-captain 3.6.1 → [Updates: 4.1.3]

nvm (1)

.nvmrc (1)

• node 22.22.1 → [Updates: 22.22.2, 24.14.1]

renovate-config-presets (1)

.github/renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository