Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

See Config Migration PR: #1693.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
npm	faker

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): replace dependency faker with @faker-js/faker
• fix(deps): update nextjs monorepo to v14.2.35 (@next/bundle-analyzer, @next/eslint-plugin-next)
• chore(deps): update dependency @apollo/server to v4.12.2
• chore(deps): update dependency @babel/eslint-parser to v7.28.5
• chore(deps): update dependency eslint-plugin-cypress to v4.3.0
• chore(deps): update dependency typescript to v5.9.3
• chore(deps): update mysql docker tag to v8.4
• fix(deps): update dependency @oclif/core to v4.8.0
• fix(deps): update dependency dotenv to v16.6.1
• fix(deps): update dependency graphql to v16.12.0
• fix(deps): update dependency graphql-parse-resolve-info to v4.14.1
• fix(deps): update dependency mysql2 to v3.16.0
• fix(deps): update dependency next-seo to v6.8.0
• fix(deps): update dependency pino to v9.14.0
• fix(deps): update dependency react-hook-form to v7.69.0
• fix(deps): update dependency react-remove-scroll to v2.7.2
• fix(deps): update dependency sharp to v0.34.5
• fix(deps): update nivo monorepo to v0.99.0 (@nivo/core, @nivo/line, @nivo/pie)
• chore(deps): update actions/cache action to v5
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-node action to v6
• chore(deps): update dependency coveralls-next to v6
• chore(deps): update dependency eslint-plugin-cypress to v5
• chore(deps): update dependency jest to v30
• chore(deps): update dependency uuid to v13
• chore(deps): update mysql docker tag to v9
• chore(deps): update node.js to v24
• fix(deps): update apollo graphql packages to v5 (major) (@apollo/server, @apollo/server-plugin-response-cache)
• fix(deps): update dependency @koa/router to v15
• fix(deps): update dependency dotenv to v17
• fix(deps): update dependency inquirer to v13
• fix(deps): update dependency koa to v3
• fix(deps): update dependency koa-etag to v5
• fix(deps): update dependency koa-pino-logger to v5
• fix(deps): update dependency koa-session to v7
• fix(deps): update dependency next-seo to v7
• fix(deps): update dependency pino to v10
• fix(deps): update dependency rate-limiter-flexible to v9
• fix(deps): update dependency require-environment-variables to v2
• fix(deps): update dependency tailwindcss to v4
• fix(deps): update nextjs monorepo to v16 (major) (@next/bundle-analyzer, @next/eslint-plugin-next, next)
• fix(deps): update react monorepo to v19 (major) (react, react-dom)
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency validator to v13.15.26
• fix(deps): update graphql-tools monorepo (@graphql-tools/schema, @graphql-tools/utils)
• chore(deps): update dependency standard to v17
• fix(deps): update dependency chalk to v5
• fix(deps): update dependency graphql-request to v7
• fix(deps): update dependency hibp to v15
• fix(deps): update dependency nanoid to v5
• fix(deps): update dependency react-icons to v5
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency faker to v6

Detected Dependencies

docker-compose (1)

docker-compose.yml (1)

• mysql 8.0 → [Updates: 8.4, 9.5]

dockerfile (1)

Dockerfile (3)

• node 22-alpine → [Updates: 24-alpine]
• node 22-alpine → [Updates: 24-alpine]
• node 22-alpine → [Updates: 24-alpine]

github-actions (2)

.github/workflows/build.yaml (5)

• actions/checkout v4 → [Updates: v6]
• actions/setup-node v4 → [Updates: v6]
• actions/cache v4 → [Updates: v5]
• cypress-io/github-action v6
• actions/checkout v4 → [Updates: v6]

.github/workflows/deploy_docker.yaml (4)

• actions/checkout v4 → [Updates: v6]
• docker/login-action v3
• docker/metadata-action v5
• docker/build-push-action v6

npm (2)

package.json (109)

• @acusti/react-code-input 3.11.0
• @apollo/server ^4.10.4 → [Updates: ^4.10.4, ^5.0.0]
• @apollo/server-plugin-response-cache ^4.1.3 → [Updates: ^5.0.0]
• @as-integrations/koa ^1.1.1
• @confuser/db-migrate-mysql 2.4.0
• @graphql-tools/schema 10.0.23 → [Updates: 10.0.30]
• @graphql-tools/utils 10.8.6 → [Updates: 10.11.0]
• @headlessui/react 2.2.9
• @koa/cors ^5.0.0
• @koa/multer ^4.0.0
• @koa/router 13.1.1 → [Updates: 15.1.1]
• @leichtgewicht/ip-codec 2.0.5
• @nateradebaugh/react-datetime 4.6.0
• @next/bundle-analyzer 14.2.26 → [Updates: 14.2.35, 16.1.1]
• @nivo/core 0.88.0 → [Updates: 0.99.0]
• @nivo/line 0.88.0 → [Updates: 0.99.0]
• @nivo/pie 0.88.0 → [Updates: 0.99.0]
• @oclif/core 4.2.10 → [Updates: 4.8.0]
• @oclif/plugin-help 6.2.36
• @odiffey/discord-markdown ^3.3.0
• @rpldy/upload-button ^1.13.0
• @rpldy/upload-drop-zone ^1.13.0
• @rpldy/upload-paste ^1.13.0
• @rpldy/upload-preview ^1.13.0
• @rpldy/uploady ^1.13.0
• @universemc/react-palette 1.0.3
• argon2 0.44.0
• autoprefixer 10.4.23
• chalk 4.1.2 → [Updates: 5.6.2]
• clsx 2.1.1
• dataloader 2.2.3
• date-fns 4.1.0
• db-migrate 1.0.0-beta.35
• dotenv 16.4.7 → [Updates: 16.6.1, 17.2.3]
• edit-dotenv 1.0.4
• es6-dynamic-template 2.0.0
• filesize-parser ^1.5.1
• git-revision-webpack-plugin 5.0.0
• graphql 16.10.0 → [Updates: 16.12.0]
• graphql-constraint-directive 6.0.0
• graphql-depth-limit 1.1.0
• graphql-parse-resolve-info 4.13.0 → [Updates: 4.14.1]
• graphql-request 6.1.0 → [Updates: 7.4.0]
• graphql-tag ^2.12.6
• graphql-type-json 0.3.2
• hibp 14.1.3 → [Updates: 15.2.0]
• inquirer 8.2.7 → [Updates: 13.1.0]
• js-yaml 4.1.1
• knex 3.1.0
• knex-on-duplicate-update 2.3.3
• koa 2.16.3 → [Updates: 3.1.1]
• koa-bodyparser 4.4.1
• koa-conditional-get 3.0.0
• koa-etag 4.0.0 → [Updates: 5.0.0]
• koa-pino-logger 4.0.0 → [Updates: 5.0.0]
• koa-send 5.0.1
• koa-session 6.4.0 → [Updates: 7.0.2]
• lodash-es 4.17.22
• memoizee 0.4.17
• multer ^2.0.2
• mysql2 3.14.0 → [Updates: 3.16.0]
• nanoid 3.3.11 → [Updates: 5.1.6]
• next 14.2.35 → [Updates: 16.1.1]
• next-absolute-url 1.2.2
• next-seo 6.6.0 → [Updates: 6.8.0, 7.0.1]
• nextjs-url 1.0.4
• opentype.js 1.3.4
• pino 9.6.0 → [Updates: 9.14.0, 10.1.0]
• points 3.2.0
• postcss 8.5.6
• rate-limiter-flexible 5.0.5 → [Updates: 9.0.1]
• react 18.3.1 → [Updates: 19.2.3]
• react-dom 18.3.1 → [Updates: 19.2.3]
• react-favicon 2.0.7
• react-hook-form 7.55.0 → [Updates: 7.69.0]
• react-icons 4.12.0 → [Updates: 5.5.0]
• react-remove-scroll 2.6.3 → [Updates: 2.7.2]
• react-select 5.10.2
• request-ip 3.3.0
• require-environment-variables 1.2.0 → [Updates: 2.0.0]
• semver 7.7.3
• sharp 0.33.5 → [Updates: 0.34.5]
• svg-points 6.0.1
• swr 2.3.8
• tailwindcss 3.4.19 → [Updates: 4.1.18]
• typescript ^5.7.2 → [Updates: ^5.7.2]
• url-loader 4.1.1
• uuid-parse 1.1.0
• validator 13.15.22 → [Updates: 13.15.26]
• web-push 3.6.7
• @babel/eslint-parser 7.27.0 → [Updates: 7.28.5]
• @next/eslint-plugin-next 14.2.26 → [Updates: 14.2.35, 16.1.1]
• @oclif/test 4.1.15
• coveralls-next 4.2.2 → [Updates: 6.0.1]
• cypress 15.8.1
• eslint-plugin-cypress 4.2.0 → [Updates: 4.3.0, 5.2.0]
• eslint-plugin-react 7.37.5
• faker 5.5.3 → [Updates: 6.6.6, 5.5.3]
• jest 29.7.0 → [Updates: 30.2.0]
• json-to-graphql-query 2.3.0
• mockdate 3.0.5
• nixt 0.5.1
• nock ^14.0.0-beta.6
• nodemon 3.1.11
• standard 16.0.4 → [Updates: 17.1.2]
• standardx 7.0.0
• supertest 7.1.4
• uuid 11.1.0 → [Updates: 13.0.0]
• node 20 || 22 → [Updates: 20 || 22 || 24]

server/data/migrations/package.json

---

• Check this box to trigger a request for Renovate to run again on this repository