Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• deps: update aws-sdk-js-v3 monorepo to v3.1093.0 (@aws-sdk/client-s3, @aws-sdk/s3-request-presigner)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• deps: update dependency minimatch to v10.2.6
• deps: update dependency nuqs to v2.9.3
• deps: update npm to v12.0.2
• deps: update dependency @playwright/test to v1.62.0
• deps: update dependency axios to v1.19.0
• deps: update dependency es-toolkit to v1.50.0
• deps: update dependency eslint to v10.8.0
• deps: update dependency eslint-plugin-jest-dom to v5.6.0
• deps: update dependency eslint-plugin-playwright to v2.11.0
• deps: update dependency react-arborist to v3.16.0
• deps: update dependency react-hook-form to v7.83.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• deps: update nextjs monorepo to v15.5.21 (@next/eslint-plugin-next, eslint-config-next)
• deps: update node.js to v24.18.1
• deps: update radix-ui-primitives monorepo (@radix-ui/react-accordion, @radix-ui/react-alert-dialog, @radix-ui/react-avatar, @radix-ui/react-checkbox, @radix-ui/react-context-menu, @radix-ui/react-dialog, @radix-ui/react-dropdown-menu, @radix-ui/react-label, @radix-ui/react-popover, @radix-ui/react-radio-group, @radix-ui/react-select, @radix-ui/react-separator, @radix-ui/react-slot, @radix-ui/react-tabs, @radix-ui/react-toast, @radix-ui/react-toggle, @radix-ui/react-tooltip)
• deps: update turbo monorepo to v2.10.6 (eslint-config-turbo, eslint-plugin-turbo, turbo)
• deps: update dependency lucide-react to v1.26.0
• deps: update dependency typescript to v7
• deps: update nextjs monorepo to v16 (@next/eslint-plugin-next, eslint-config-next)
• deps: update prisma monorepo to v7 (@prisma/client, prisma)
• deps: lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

docker-compose.yml (3)

• postgres 18.4
• redis 8.8
• quay.io/keycloak/keycloak 26.7.0

dockerfile (5)

API.Dockerfile (1)

• node 24.18.0

Playwright.Dockerfile (1)

• node 24.18.0

terraform/Dockerfile (1)

• hashicorp/terraform 1.15

UI.Dockerfile (1)

• node 24.18.0

Worker.Dockerfile (1)

• node 24.18.0

github-actions (7)

.github/workflows/docker.yml (11)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a

.github/workflows/eslint.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• node 24.18.0 → [Updates: 24.18.1]

.github/workflows/formatting.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• node 24.18.0 → [Updates: 24.18.1]

.github/workflows/playwright.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• node 24.18.0 → [Updates: 24.18.1]

.github/workflows/renovate-validation.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ubuntu 24.04

.github/workflows/reuse.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• fsfe/reuse-action v6@676e2d560c9a403aa252096d99fcab3e1132b0f5

.github/workflows/unittest.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• node 24.18.0 → [Updates: 24.18.1]

npm (12)

apps/api/package.json (50)

• @zodios/express 10.6.0
• @zodios/openapi 10.5.0
• adm-zip 0.6.0
• braces ^3.0.3
• bull 4.16.5
• compression 1.8.1
• connect-pg-simple 10.0.0
• cookie-parser 1.4.7
• cors 2.8.6
• es-toolkit 1.49.0 → [Updates: 1.50.0]
• express 4.22.2
• express-session 1.19.0
• glob-parent ^6.0.2
• glob-to-regexp ^0.4.1
• is-valid-path ^0.1.1
• keycloak-authorization-services ^2.0.3
• keycloak-connect ^26.0.7
• loglevel 1.9.2
• minimatch 10.2.5 → [Updates: 10.2.6]
• node-cache 5.1.2
• node-cron 4.6.0
• packageurl-js 2.0.1
• passport 0.7.0
• passport-local 1.0.0
• swagger-ui-express 5.0.1
• @ngneat/falso ^8.0.0
• @playwright/test 1.61.1 → [Updates: 1.62.0]
• @types/adm-zip 0.5.8
• @types/braces ^3.0.4
• @types/chai 5.2.3
• @types/compression 1.8.1
• @types/connect-pg-simple 7.0.3
• @types/cookie-parser 1.4.10
• @types/cors 2.8.19
• @types/express 4.17.25
• @types/express-session 1.19.0
• @types/glob-parent 5.1.3
• @types/glob-to-regexp ^0.4.4
• @types/is-valid-path 0.1.2
• @types/mocha 10.0.10
• @types/node 24.13.3
• @types/node-cron 3.0.11
• @types/passport 1.0.17
• @types/passport-local 1.0.38
• @types/swagger-ui-express 4.1.8
• chai 6.2.2
• dotenv-cli 11.0.0
• mocha 11.7.6
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 7.0.2]

apps/clearance_ui/package.json (67)

• @hookform/resolvers 5.1.0
• @monaco-editor/react 4.7.0
• @radix-ui/react-accordion 1.2.17 → [Updates: 1.2.18]
• @radix-ui/react-alert-dialog 1.1.20 → [Updates: 1.1.21]
• @radix-ui/react-avatar 1.2.3 → [Updates: 1.2.4]
• @radix-ui/react-checkbox 1.3.8 → [Updates: 1.3.9]
• @radix-ui/react-context-menu 2.3.4 → [Updates: 2.3.5]
• @radix-ui/react-dialog 1.1.20 → [Updates: 1.1.21]
• @radix-ui/react-dropdown-menu 2.1.21 → [Updates: 2.1.22]
• @radix-ui/react-label 2.1.12 → [Updates: 2.1.13]
• @radix-ui/react-popover 1.1.20 → [Updates: 1.1.21]
• @radix-ui/react-radio-group 1.4.4 → [Updates: 1.4.5]
• @radix-ui/react-select 2.3.4 → [Updates: 2.3.5]
• @radix-ui/react-separator 1.1.12 → [Updates: 1.1.13]
• @radix-ui/react-slot 1.3.0 → [Updates: 1.3.1]
• @radix-ui/react-tabs 1.1.18 → [Updates: 1.1.19]
• @radix-ui/react-toast 1.2.20 → [Updates: 1.2.21]
• @radix-ui/react-toggle 1.1.15 → [Updates: 1.1.16]
• @radix-ui/react-tooltip 1.2.13 → [Updates: 1.2.14]
• @tanstack/react-query 4.35.3
• @tanstack/react-query-devtools 4.35.3
• @tanstack/react-table 8.21.3
• @zodios/core 10.9.6
• @zodios/react 10.4.5
• axios 1.18.1 → [Updates: 1.19.0]
• check-password-strength 3.0.0
• class-variance-authority 0.7.1
• clsx 2.1.1
• cmdk 1.1.1
• es-toolkit 1.49.0 → [Updates: 1.50.0]
• generate-password 1.7.1
• js-yaml 5.2.2
• lucide-react 1.25.0 → [Updates: 1.26.0]
• minimatch 10.2.5 → [Updates: 10.2.6]
• next 16.2.11 → [Updates: 16.2.12]
• next-auth ^4.24.11
• next-themes 0.4.6
• node-cache ^5.1.2
• nuqs 2.9.1 → [Updates: 2.9.3]
• packageurl-js 2.0.1
• react-arborist 3.15.1 → [Updates: 3.16.0]
• react-copy-to-clipboard 5.1.1
• react-hook-form 7.82.0 → [Updates: 7.83.0]
• react-icons 5.7.0
• react-resizable-panels 4.12.2
• tailwind-merge 3.6.0
• tailwindcss-animate 1.0.7
• zod 3.22.4
• zustand 5.0.14
• @next/eslint-plugin-next 15.5.12 → [Updates: 15.5.21, 16.2.11]
• @playwright/test 1.61.1 → [Updates: 1.62.0]
• @tailwindcss/postcss ^4.0.0
• @testing-library/jest-dom 7.0.0
• @testing-library/react 16.3.2
• @types/js-yaml 4.0.9
• @types/node 24.13.3
• @types/react 19.2.17
• @types/react-copy-to-clipboard 5.0.7
• @types/spdx-expression-parse 4.0.0
• dotenv-cli ^11.0.0
• jest 30.4.2
• jest-environment-jsdom 30.4.1
• next-router-mock 1.0.5
• tailwindcss ^4.0.0
• ts-jest 29.4.12
• ts-node 10.9.2
• typescript 5.9.3 → [Updates: 7.0.2]

apps/scanner_worker/package.json (5)

• bull 4.16.5
• @types/node 24.13.3
• dotenv-cli 11.0.0
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 7.0.2]

package.json (8)

• @ianvs/prettier-plugin-sort-imports 4.7.1
• dotenv-cli 11.0.0
• prettier 3.9.6
• prettier-plugin-tailwindcss 0.8.1
• rimraf 6.1.3
• tsx 4.23.1
• turbo 2.10.5 → [Updates: 2.10.6]
• npm 12.0.1 → [Updates: 12.0.2]

packages/common-helpers/package.json (9)

• pako 3.0.1
• @types/chai 5.2.3
• @types/mocha 10.0.10
• @types/node 24.13.3
• @types/pako 2.0.4
• chai 6.2.2
• mocha 11.7.6
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 7.0.2]

packages/database/package.json (9)

• @keycloak/keycloak-admin-client ^26.5.0
• @prisma/client 6.19.3 → [Updates: 7.9.0]
• adm-zip 0.6.0
• @types/adm-zip 0.5.8
• @types/node 24.13.3
• prisma 6.19.3 → [Updates: 7.9.0]
• ts-node 10.9.2
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 7.0.2]

packages/eslint-config-custom-server/package.json (5)

• @typescript-eslint/eslint-plugin 8.65.0
• @typescript-eslint/parser 8.65.0
• eslint 10.7.0 → [Updates: 10.8.0]
• eslint-config-turbo 2.10.5 → [Updates: 2.10.6]
• eslint-plugin-turbo 2.10.5 → [Updates: 2.10.6]

packages/eslint-config-custom/package.json (13)

• @next/eslint-plugin-next 15.5.12 → [Updates: 15.5.21, 16.2.11]
• @typescript-eslint/eslint-plugin 8.65.0
• @vercel/style-guide 6.0.0
• eslint 10.7.0 → [Updates: 10.8.0]
• eslint-config-next 15.5.12 → [Updates: 15.5.21, 16.2.11]
• eslint-config-prettier 10.1.8
• eslint-config-turbo 2.10.5 → [Updates: 2.10.6]
• eslint-plugin-jest-dom 5.5.0 → [Updates: 5.6.0]
• eslint-plugin-playwright 2.10.5 → [Updates: 2.11.0]
• eslint-plugin-react 7.37.5
• eslint-plugin-react-hooks 7.1.1
• eslint-plugin-testing-library 7.16.2
• eslint-plugin-turbo 2.10.5 → [Updates: 2.10.6]

packages/s3-helpers/package.json (11)

• @aws-sdk/client-s3 3.1090.0 → [Updates: 3.1093.0]
• @aws-sdk/s3-request-presigner 3.1090.0 → [Updates: 3.1093.0]
• @smithy/node-http-handler ^4.0.0
• stream 0.0.3
• @types/chai 5.2.3
• @types/mocha 10.0.10
• @types/node 24.13.3
• chai 6.2.2
• mocha 11.7.6
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 7.0.2]

packages/spdx-validation/package.json (7)

• spdx-exceptions ^2.5.0
• spdx-license-ids ^3.0.20
• @types/jest 30.0.0
• @types/node 24.13.3
• jest ^30.0.0
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 7.0.2]

packages/tsconfig/package.json

packages/validation-helpers/package.json (11)

• @zodios/express 10.6.0
• check-password-strength 3.0.0
• is-glob 4.0.3
• packageurl-js 2.0.1
• zod 3.22.4
• @types/is-glob 4.0.4
• @types/jest ^30.0.0
• jest ^30.0.0
• ts-jest ^29.2.5
• tsup 8.5.1
• typescript 5.9.3 → [Updates: 7.0.2]

pip_requirements (1)

requirements.txt (1)

• scancode-toolkit ==32.5.0

regex (4)

.github/workflows/eslint.yml (1)

• node 24.18.0 → [Updates: 24.18.1]

.github/workflows/formatting.yml (1)

• node 24.18.0 → [Updates: 24.18.1]

.github/workflows/playwright.yml (1)

• node 24.18.0 → [Updates: 24.18.1]

.github/workflows/unittest.yml (1)

• node 24.18.0 → [Updates: 24.18.1]

renovate-config (1)

renovate.json

terraform (1)

terraform/keycloak.tf (1)

• keycloak 5.8.0

---

• Check this box to trigger a request for Renovate to run again on this repository