Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
npm	@types/diff
npm	@types/uuid

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency @eslint/compat to v2.0.1
• Update dependency @graphql-tools/graphql-file-loader to v8.1.9
• Update dependency @lezer/lr to v1.4.7
• Update dependency @rails/activestorage to v8.1.200
• Update dependency @testing-library/react to v16.3.1
• Update dependency @types/lodash to v4.17.23
• Update dependency autoprefixer to v10.4.23
• Update dependency caniuse-lite to v1.0.30001764
• Update dependency debug to v1.11.1
• Update dependency faker to v3.5.3
• Update dependency i18next-chained-backend to v4.6.3
• Update dependency lint-staged to v16.2.7
• Update dependency minitest-focus to v1.4.1
• Update dependency oj to v3.16.13
• Update dependency pg to v1.6.3
• Update dependency phonelib to v0.10.15
• Update dependency rails to v8.1.2
• Update dependency rbtrace to v0.5.3
• Update dependency react-transition-state to v2.3.2
• Update dependency reverse_markdown to v3.0.1
• Update dependency ruby to v3.4.8
• Update dependency typeprof to v0.31.1
• Update dependency tzdata to v1.0.47
• Update dependency tzinfo-data to v1.2025.3
• Update dependency webrick to v1.9.2
• Update dependency yard to v0.9.38
• Update eslint monorepo to v9.39.2 (@eslint/js, eslint)
• Update react monorepo (@types/react, react, react-dom, react-test-renderer)
• Update vitest monorepo to v4.0.16 (@vitest/coverage-v8, @vitest/ui, vitest)
• Update CodeMirror (@codemirror/language, @codemirror/state, @codemirror/view)
• Update dependency @lezer/common to v1.5.0
• Update dependency @stripe/react-stripe-js to v5.4.1
• Update dependency @stripe/stripe-js to v8.6.1
• Update dependency @vitest/eslint-plugin to v1.6.6
• Update dependency aws-sdk-s3 to v1.211.0
• Update dependency aws-sdk-ses to v1.95.0
• Update dependency aws-sdk-sns to v1.111.0
• Update dependency aws-sdk-sqs to v1.109.0
• Update dependency bootsnap to v1.20.1
• Update dependency core-js to v3.47.0
• Update dependency core-js-compat to v3.47.0
• Update dependency dotenv-rails to v3.2.0
• Update dependency i18next to v25.7.4
• Update dependency i18next-localstorage-backend to v4.3.1
• Update dependency jsdom to v27.4.0
• Update dependency liquid to v5.11.0
• Update dependency prettier to v3.7.4
• Update dependency prism to v1.7.0
• Update dependency react-i18next to v16.5.2
• Update dependency rubocop to v1.82.1
• Update dependency rubocop-rails to v2.34.3
• Update dependency rubocop-rspec to v3.9.0
• Update dependency ruby-vips to v2.3.0
• Update dependency sass to v1.97.2
• Update dependency sequel to v5.100.0
• Update dependency tsx to v4.21.0
• Update dependency twilio-ruby to "~> 7.9.0"
• Update dependency wrangler to v4.58.0
• Update graphqlcodegenerator monorepo (@graphql-codegen/cli, @graphql-codegen/typed-document-node, @graphql-codegen/typescript, @graphql-codegen/typescript-operations, @graphql-codegen/typescript-react-apollo)
• Update Node.js to v24.12.0 (node, @types/node)
• Update sentry-javascript monorepo to v10.32.1 (@sentry/browser, @sentry/types)
• Update sentry-ruby monorepo to v6.2.0 (sentry-rails, sentry-ruby)
• Update typescript-eslint monorepo to v8.52.0 (@typescript-eslint/eslint-plugin, @typescript-eslint/parser, @typescript-eslint/utils, typescript-eslint)
• Update actions/cache action to v5
• Update actions/checkout action to v6
• Update dawidd6/action-download-artifact action to v12
• Update dependency @graphql-codegen/near-operation-file-preset to v4
• Update dependency eu_central_bank to v2
• Update dependency globals to v17
• Update dependency money-rails to v2
• Update dependency openssl to v4
• Update dependency react-cookie-consent to v10
• Update dependency ruby to v4
• Update dependency stripe to v18
• Update dependency vite-tsconfig-paths to v6
• Update GitHub Artifact Actions (major) (actions/download-artifact, actions/upload-artifact)
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency qs to v6.14.1 [SECURITY]
• Update dependency react-router to v7.12.0 [SECURITY]
• Update dependency @swc/core to v1.15.8
• Update dependency graphiql to v5
• Update dependency vite to v7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

bundler (1)

Gemfile (105)

• rails "8.1.1" → [Updates: "8.1.2"]
• pg lock file @ 1.6.2-arm64-darwin → [Updates: undefined]
• puma lock file @ 7.1.0
• sprockets-rails lock file @ 3.5.2
• dotenv-rails lock file @ 3.1.8 → [Updates: undefined]
• with_advisory_lock lock file @ 7.0.2
• devise lock file @ 4.9.4
• pundit lock file @ 2.5.2
• recaptcha lock file @ 5.21.1
• doorkeeper "5.8.2"
• devise-doorkeeper lock file @ 1.2.0
• devise-encryptable lock file @ 0.2.0
• doorkeeper-jwt lock file @ 0.4.2
• doorkeeper-openid_connect lock file @ 1.8.11
• activerecord-session_store lock file @ 2.2.0
• cadmus_navbar "~> 0.1.0"
• liquid lock file @ 5.10.0 → [Updates: undefined]
• scheduled_value "~> 1.4.0"
• aws-sdk-s3 lock file @ 1.208.0 → [Updates: undefined]
• ruby-vips lock file @ 2.2.5 → [Updates: undefined]
• image_processing "~> 1.2"
• active_storage_svg_sanitizer lock file @ 0.1.0
• money-rails lock file @ 1.15.0 → [Updates: undefined]
• eu_central_bank lock file @ 1.7.0 → [Updates: undefined]
• stripe lock file @ 17.2.0 → [Updates: undefined]
• business_time lock file @ 0.13.0
• holidays lock file @ 8.8.0
• will_paginate lock file @ 4.0.1
• pg_search lock file @ 2.3.7
• apollo_upload_server "2.1.7"
• graphql-rails_logger lock file @ 1.2.5
• aws-actionmailer-ses lock file @ 1.0.0
• aws-sdk-rails lock file @ 5.1.0
• aws-sdk-ses lock file @ 1.92.0 → [Updates: undefined]
• aws-sdk-sns lock file @ 1.108.0 → [Updates: undefined]
• redcarpet lock file @ 3.6.1
• twilio-ruby "~> 7.8.0" → [Updates: "~> 7.9.0"]
• phonelib lock file @ 0.10.13 → [Updates: undefined]
• shoryuken lock file @ 6.2.1
• aws-sdk-sqs lock file @ 1.106.0 → [Updates: undefined]
• ahoy_matey lock file @ 5.4.1
• lograge lock file @ 0.14.0
• csv lock file @ 3.3.5
• dalli lock file @ 3.2.8
• domain_prefix lock file @ 1.0.20241203
• faraday lock file @ 2.14.0
• icalendar lock file @ 2.12.1
• platform-api lock file @ 3.8.0
• fly.io-rails lock file @ 0.3.5
• tzinfo-data lock file @ 1.2025.2 → [Updates: undefined]
• browser lock file @ 6.2.0
• positioning lock file @ 0.4.7
• stackprof lock file @ 0.2.27
• faker lock file @ 3.5.2 → [Updates: undefined]
• rollbar lock file @ 3.7.0
• oj "~> 3.16.0" → [Updates: "~> 3.16.0"]
• bootsnap ">= 1.1.0" → [Updates: ">= 1.1.0"]
• parallel lock file @ 1.27.0
• skylight lock file @ 7.0.0
• webrick lock file @ 1.9.1 → [Updates: undefined]
• rbtrace lock file @ 0.5.2 → [Updates: undefined]
• rack-mini-profiler lock file @ 4.0.1
• memory_profiler lock file @ 1.1.0
• flamegraph lock file @ 0.9.5
• derailed_benchmarks lock file @ 2.2.1
• listen lock file @ 3.9.0
• yard lock file @ 0.9.37 → [Updates: undefined]
• annotaterb lock file @ 4.20.0
• debug lock file @ 1.11.0 → [Updates: undefined]
• rubocop "1.81.7" → [Updates: "1.82.1"]
• rubocop-performance lock file @ 1.26.1
• rubocop-rails lock file @ 2.33.4 → [Updates: undefined]
• rubocop-sequel lock file @ 0.4.1
• rubocop-factory_bot lock file @ 2.28.0
• rubocop-graphql lock file @ 1.5.6
• rubocop-rspec lock file @ 3.8.0 → [Updates: undefined]
• rubocop-capybara lock file @ 2.22.1
• prettier "4.0.4"
• prettier_print lock file @ 1.2.1
• syntax_tree lock file @ 6.3.0
• syntax_tree-haml lock file @ 4.0.3
• syntax_tree-rbs lock file @ 1.0.0
• prism lock file @ 1.6.0 → [Updates: undefined]
• dead_end lock file @ 4.0.0
• typeprof lock file @ 0.31.0 → [Updates: undefined]
• pry-rails lock file @ 0.3.11
• pry-remote lock file @ 0.1.8
• sequel lock file @ 5.98.0 → [Updates: undefined]
• term-ansicolor lock file @ 1.11.3
• reverse_markdown lock file @ 3.0.0 → [Updates: undefined]
• mysql2 "~> 0.5.3"
• capybara lock file @ 3.40.0
• cuprite lock file @ 0.17
• database_cleaner-active_record lock file @ 2.2.2
• minitest-spec-rails lock file @ 7.4.1
• minitest-reporters lock file @ 1.7.1
• minitest-focus lock file @ 1.4.0 → [Updates: undefined]
• factory_bot lock file @ 6.5.6
• factory_bot_rails lock file @ 6.5.1
• simplecov lock file @ 0.22.0
• simplecov-cobertura lock file @ 3.1.0
• rails-controller-testing lock file @ 1.0.5
• sentry-ruby "~> 6.0" → [Updates: "~> 6.0"]
• sentry-rails "~> 6.0" → [Updates: "~> 6.0"]
• openssl "~> 3.3" → [Updates: "~> 4.0"]

docker-compose (3)

docker-compose.load_production_database.yml (1)

• postgres 18

docker-compose.test.yml (1)

• postgres 18

docker-compose.yml (1)

• postgres 18

dockerfile (2)

Dockerfile

Dockerfile.assets

github-actions (4)

.github/workflows/ci.yml (36)

• actions/checkout v5 → [Updates: v6]
• actions/setup-node v6
• actions/checkout v5 → [Updates: v6]
• actions/setup-node v6
• mikepenz/action-junit-report v6
• actions/upload-artifact v5 → [Updates: v6]
• actions/upload-artifact v5 → [Updates: v6]
• actions/checkout v5 → [Updates: v6]
• ruby/setup-ruby v1
• mikepenz/action-junit-report v6
• actions/upload-artifact v5 → [Updates: v6]
• actions/upload-artifact v5 → [Updates: v6]
• actions/checkout v5 → [Updates: v6]
• ruby/setup-ruby v1
• actions/setup-node v6
• mikepenz/action-junit-report v6
• actions/upload-artifact v5 → [Updates: v6]
• actions/upload-artifact v5 → [Updates: v6]
• actions/checkout v5 → [Updates: v6]
• actions/setup-node v6
• docker/build-push-action v6
• docker/build-push-action v6
• actions/checkout v5 → [Updates: v6]
• actions/cache v4 → [Updates: v5]
• actions/setup-node v6
• ruby/setup-ruby v1
• actions/upload-artifact v5 → [Updates: v6]
• actions/download-artifact v6 → [Updates: v7]
• actions/download-artifact v6 → [Updates: v7]
• actions/download-artifact v6 → [Updates: v7]
• clearlyip/code-coverage-report-action v6
• marocchino/sticky-pull-request-comment v2
• release-drafter/release-drafter v6
• slackapi/slack-github-action v2.1.1
• postgres 18
• postgres 18

.github/workflows/codeql-analysis.yml (4)

• actions/checkout v5 → [Updates: v6]
• github/codeql-action v4
• github/codeql-action v4
• github/codeql-action v4

.github/workflows/release.yml (8)

• actions/checkout v5 → [Updates: v6]
• actions/checkout v5 → [Updates: v6]
• actions/checkout v5 → [Updates: v6]
• actions/setup-node v6
• LoveToKnow/slackify-markdown-action v1.1.1
• slackapi/slack-github-action v2.1.1
• dawidd6/action-download-artifact v11 → [Updates: v12]
• peaceiris/actions-gh-pages v4

.github/workflows/static.yml (8)

• actions/checkout v5 → [Updates: v6]
• ruby/setup-ruby v1
• actions/checkout v5 → [Updates: v6]
• ruby/setup-ruby v1
• reviewdog/action-rubocop v2
• actions/checkout v5 → [Updates: v6]
• actions/setup-node v6
• reviewdog/action-eslint v1

nodenv (1)

.node-version (1)

• node 24.11.1 → [Updates: 24.12.0]

npm (5)

.yarn/sdks/eslint/package.json

.yarn/sdks/prettier/package.json

.yarn/sdks/typescript/package.json

doc-site/package.json (21)

• @docusaurus/core 3.9.2
• @docusaurus/logger ^3.7.0
• @docusaurus/plugin-ideal-image 3.9.2
• @docusaurus/preset-classic 3.9.2
• @docusaurus/types 3.9.2
• @graphql-markdown/docusaurus ^1.24.1
• @graphql-tools/graphql-file-loader ^8.0.1 → [Updates: ^8.0.1]
• @mdx-js/react ^3.0.0
• @svgr/webpack 8.1.0
• clsx 2.1.1
• file-loader 6.2.0
• graphql-config ^5.1.3
• prism-react-renderer 2.4.1
• react 19.2.0 → [Updates: 19.2.3]
• react-dom 19.2.0 → [Updates: 19.2.3]
• url 0.11.4
• url-loader 4.1.1
• @types/lodash 4.17.20 → [Updates: 4.17.23]
• entities 7.0.0
• lodash 4.17.21
• ts-node 10.9.2

package.json (201)

• @apollo/client 4.0.11
• @breezehr/currency-codes ^2.2.1
• @codemirror/commands ^6.7.1
• @codemirror/lang-html 6.4.11
• @codemirror/lang-json 6.0.2
• @codemirror/lang-markdown 6.5.0
• @codemirror/language 6.11.3 → [Updates: 6.12.1]
• @codemirror/state 6.5.2 → [Updates: 6.5.3]
• @codemirror/view 6.39.4 → [Updates: 6.39.9]
• @dnd-kit/core 6.3.1
• @dnd-kit/sortable 10.0.0
• @dnd-kit/utilities 3.2.2
• @emotion/serialize 1.3.3
• @graphiql/toolkit 0.11.3
• @graphql-typed-document-node/core ^3.2.0
• @juggle/resize-observer 3.4.0
• @lezer/common 1.3.0 → [Updates: 1.5.0]
• @lezer/highlight ^1.2.1
• @lezer/lr ^1.4.2 → [Updates: ^1.4.2]
• @neinteractiveliterature/litform 0.35.0
• @popperjs/core ^2.11.8
• @rails/activestorage 8.1.100 → [Updates: 8.1.200]
• @sentry/browser ^10.0.0 → [Updates: ^10.0.0]
• @sentry/types ^10.0.0 → [Updates: ^10.0.0]
• @stripe/react-stripe-js 5.3.0 → [Updates: 5.4.1]
• @stripe/stripe-js 8.4.0 → [Updates: 8.6.1]
• @tanstack/react-table ^8.20.6
• @testing-library/react 16.3.0 → [Updates: 16.3.1]
• @types/bytes 3.1.5
• @types/debounce-promise 3.1.9
• @types/diff 8.0.0
• @types/file-saver 2.0.7
• @types/geojson ^7946.0.14
• @types/js-search 1.4.4
• @types/lodash 4.17.20 → [Updates: 4.17.23]
• @types/luxon 3.7.1
• @types/minimist 1.2.5
• @types/react 19.2.5 → [Updates: 19.2.8]
• @types/react-click-outside-hook 1.0.3
• @types/react-color 3.0.13
• @types/react-google-recaptcha 2.1.9
• @types/react-onclickoutside 6.7.10
• @types/source-map-support 0.5.10
• @types/tinycolor2 1.4.6
• @types/uuid 11.0.0
• @types/zxcvbn 4.4.5
• apollo-upload-client 19.0.0
• array-to-sentence 2.0.0
• assert-never 1.4.0
• autoprefixer 10.4.22 → [Updates: 10.4.23]
• bootstrap 5.3.8
• bootstrap-icons 1.13.1
• buffer 6.0.3
• bytes 3.1.2
• cadmus-navbar-admin 6.0.0
• caniuse-lite 1.0.30001754 → [Updates: 1.0.30001764]
• classnames 2.5.1
• codemirror ^6.0.1
• core-js 3.46.0 → [Updates: 3.47.0]
• crypto-browserify 3.12.1
• cssnano 7.1.2
• csv-stringify ^6.5.1
• custom-event-polyfill 1.0.7
• debounce-promise 3.1.2
• detect-browser 5.3.0
• diff 8.0.2
• events 3.3.0
• fast-diff 1.3.0
• file-saver 2.0.5
• font-awesome 4.7.0
• graphiql 3.9.0 → [Updates: 5.2.2]
• graphql-anywhere 4.2.8
• graphql-tag 2.12.6
• graphql-ws 6.0.6
• history 5.3.0
• html-to-react 1.7.0
• i18next 25.6.2 → [Updates: 25.7.4]
• i18next-chained-backend ^4.6.2 → [Updates: ^4.6.2]
• i18next-intervalplural-postprocessor 3.0.0
• i18next-localstorage-backend ^4.2.0 → [Updates: ^4.2.0]
• js-search 2.0.1
• lodash 4.17.21
• luxon 3.7.2
• md5 2.3.0
• mini-css-extract-plugin 2.9.4
• minimist 1.2.8
• ol ^10.2.1
• path-browserify 1.0.1
• path-complete-extname 1.0.0
• payment 2.4.7
• porter-stemmer 0.9.1
• postcss 8.5.6
• postcss-import 16.1.1
• prop-types 15.8.1
• punycode 2.3.1
• qs ^6.13.0 → [Updates: ^6.13.0]
• react 19.2.0 → [Updates: 19.2.3]
• react-bootstrap4-modal 3.0.11
• react-color 2.19.3
• react-cookie-consent 9.0.0 → [Updates: 10.0.0]
• react-dom 19.2.0 → [Updates: 19.2.3]
• react-google-recaptcha 3.1.0
• react-html-id 0.1.5
• react-i18next 16.3.3 → [Updates: 16.5.2]
• react-onclickoutside 6.13.2
• react-popper 2.3.0
• react-router 7.9.6 → [Updates: 7.12.0]
• react-select 5.10.2
• react-transition-state ^2.3.1 → [Updates: ^2.3.1]
• react-waypoint 10.3.0
• regenerator-runtime 0.14.1
• require-from-string 2.0.2
• rollbar ^2.26.5
• rxjs ^7.8.2
• sass 1.94.0 → [Updates: 1.97.2]
• source-map-support 0.5.21
• stream-browserify 3.0.0
• tiny-invariant ^1.3.3
• tinycolor2 1.6.0
• tzdata 1.0.46 → [Updates: 1.0.47]
• uuid 13.0.0
• zxcvbn 4.4.2
• @eslint/compat ^2.0.0 → [Updates: ^2.0.0]
• @eslint/eslintrc ^3.2.0
• @eslint/js ^9.18.0 → [Updates: ^9.18.0]
• @graphql-codegen/add 6.0.0
• @graphql-codegen/cli 6.0.2 → [Updates: 6.1.1]
• @graphql-codegen/fragment-matcher 6.0.0
• @graphql-codegen/introspection 5.0.0
• @graphql-codegen/near-operation-file-preset 3.1.0 → [Updates: 4.0.0]
• @graphql-codegen/typed-document-node ^6.0.0 → [Updates: ^6.0.0]
• @graphql-codegen/typescript 5.0.4 → [Updates: 5.0.7]
• @graphql-codegen/typescript-operations 5.0.4 → [Updates: 5.0.7]
• @graphql-codegen/typescript-react-apollo 4.3.3 → [Updates: 4.4.0]
• @graphql-eslint/eslint-plugin 4.4.0
• @prettier/plugin-ruby 4.0.4
• @rollup/plugin-commonjs ^29.0.0
• @rollup/plugin-node-resolve ^16.0.0
• @rollup/plugin-replace ^6.0.1
• @rollup/plugin-swc ^0.4.0
• @swc/core ^1.14.0 → [Updates: ^1.14.0]
• @testing-library/dom ^10.4.1
• @testing-library/jest-dom 6.9.1
• @testing-library/user-event ^14.6.1
• @types/bootstrap 5.2.10
• @types/events 3.0.3
• @types/md5 ^2
• @types/node 24.10.1 → [Updates: 24.10.7]
• @types/pnpapi ^0.0.5
• @types/punycode 2.1.4
• @types/qs ^6
• @types/rails__activestorage 8.0.1
• @types/react-dom 19.2.3
• @typescript-eslint/eslint-plugin 8.46.4 → [Updates: 8.52.0]
• @typescript-eslint/parser 8.46.4 → [Updates: 8.52.0]
• @typescript-eslint/utils ^8.36.0 → [Updates: ^8.36.0]
• @vitejs/plugin-react-swc ^4.2.0
• @vitest/coverage-v8 ^4.0.0 → [Updates: ^4.0.0]
• @vitest/eslint-plugin ^1.1.24 → [Updates: ^1.1.24]
• @vitest/ui ^4.0.0 → [Updates: ^4.0.0]
• core-js-compat 3.46.0 → [Updates: 3.47.0]
• eslint 9.39.1 → [Updates: 9.39.2]
• eslint-config-airbnb 19.0.4
• eslint-config-airbnb-base 15.0.0
• eslint-config-airbnb-typescript 18.0.0
• eslint-config-prettier 10.1.8
• eslint-import-resolver-node 0.3.9
• eslint-import-resolver-typescript 4.4.4
• eslint-plugin-i18next ^6.1.1
• eslint-plugin-import 2.32.0
• eslint-plugin-jsx-a11y 6.10.2
• eslint-plugin-react 7.37.5
• eslint-plugin-react-hooks 7.0.1
• globals ^16.0.0 → [Updates: ^17.0.0]
• husky 9.1.7
• jsdom ^27.0.0 → [Updates: ^27.0.0]
• lint-staged 16.2.6 → [Updates: 16.2.7]
• prettier 3.6.2 → [Updates: 3.7.4]
• react-test-renderer 19.2.0 → [Updates: 19.2.3]
• rollup ^4.29.2
• rollup-plugin-executable ^1.6.3
• rollup-plugin-executable-output ^1.3.0
• rollup-plugin-shebang-bin ^0.1.0
• sass-pnp-importer ^0.3.0
• ts-node 10.9.2
• tslib ^2.8.1
• tsx ^4.20.3 → [Updates: ^4.20.3]
• typed-scss-modules ^8.1.1
• typescript 5.9.3
• typescript-eslint ^8.36.0 → [Updates: ^8.36.0]
• vite ^6.4.1 → [Updates: ^7.0.0]
• vite-bundle-visualizer ^1.2.1
• vite-plugin-node-polyfills ^0.24.0
• vite-tsconfig-paths ^5.1.4 → [Updates: ^6.0.0]
• vitest ^4.0.0 → [Updates: ^4.0.0]
• wrangler ^4.12.0 → [Updates: ^4.12.0]
• node 24.x
• @typescript-eslint/parser 8.46.4 → [Updates: 8.52.0]
• react-bootstrap4-modal 3.0.11
• rollup 4.34.4
• yarn 4.12.0

ruby-version (1)

.ruby-version (1)

• ruby 3.4.7 → [Updates: 3.4.8, 4.0.0]

---

• Check this box to trigger a request for Renovate to run again on this repository