Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (4)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
cargo	base64	2024-04-30
cargo	color-eyre	2025-05-30
cargo	dirs	2025-01-12
cargo	tracing-error	2024-11-29

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update all digest updates (node, postgres, profiidev/rust-lint-action)
• chore(deps): update all non-major dependencies (@sveltejs/kit, @types/node, aws-config, aws-sdk-s3, bytes, typebox, vite)
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency typescript to v7

Detected Dependencies

cargo (5)

backend/Cargo.toml (28)

• aide 0.16.0-alpha.4
• async-compression 0.4.42
• aws-config 1.8.17 → [Updates: 1.8.17]
• aws-sdk-s3 1.133.0 → [Updates: 1.133.0]
• axum 0.8.9
• axum-extra 0.12.6
• centaurus 0.16.2
• chrono 0.4.44
• dashmap 6.2.1
• dotenvy 0.15.7
• figment 0.10.19
• futures-util 0.3.32
• http 1.4.1
• image 0.25.10
• rand 0.10.1
• regex 1.12.3
• reqwest 0.13.4
• schemars 1.2.1
• sea-orm 1.1.20
• serde 1.0.228
• sha2 0.11.0
• time 0.3.47
• tokio 1.52.3
• tokio-util 0.7.18
• tower_governor 0.8.0
• tracing 0.1.44
• url 2.5.8
• uuid 1.23.1

backend/entity/Cargo.toml (3)

• sea-orm 1.1.20
• serde 1.0.228
• schemars 1.2.1

backend/migration/Cargo.toml (3)

• centaurus 0.16.2
• tokio 1
• sea-orm-migration 1.1.20

cli/Cargo.toml (19)

• async-compression 0.4.42
• bytes 1.11.1 → [Updates: 1.11.1]
• centaurus 0.16.2
• clap 4.6.1
• color-eyre 0.6.5
• dirs 6.0.0
• futures-core 0.3.32
• indicatif 0.18.4
• opener 0.8.4
• reqwest 0.13.4
• serde 1.0.228
• serde_json 1.0.149
• sha2 0.11.0
• tokio 1.52.3
• tokio-util 0.7.18
• tracing 0.1.44
• tracing-error 0.2.1
• url 2.5.8
• uuid 1.23.1

shared/Cargo.toml (7)

• serde 1.0.228
• uuid 1.23.1
• tokio 1.52.3
• itoa 1.0.18
• ed25519-compact 2.2.0
• base64 0.22.1
• schemars 1.2.1

docker-compose (1)

docker-compose.yml (3)

• ghcr.io/profiidev/images/node-gnu-dev main@sha256:61e87c72097f5ff6adcba649295209700d3842f8ff9cab4910c8218df24a60ca
• ghcr.io/profiidev/images/rust-musl-watch main@sha256:fe2632f5dd048025fb3713ac610a06733f3c151987060230317ab4397682f312
• postgres 18@sha256:4aabea78cf39b90e834caf3af7d602a18565f6fe2508705c8d01aa63245c2e20 → [Updates: 18]

dockerfile (1)

Dockerfile (4)

• node 26-slim@sha256:a1d9d671994fc2d26e297ac56b4b1522a8bc7fa71c43b14cd1b1fe6c5116f7dc → [Updates: 26-slim]
• ghcr.io/profiidev/images/rust-gnu-builder main@sha256:060cb215d84ed1963dc102216ab9ee58f9186053f31c314fcf50fdea69e346f4
• ghcr.io/profiidev/images/rust-gnu-builder main@sha256:060cb215d84ed1963dc102216ab9ee58f9186053f31c314fcf50fdea69e346f4
• node 26-slim@sha256:a1d9d671994fc2d26e297ac56b4b1522a8bc7fa71c43b14cd1b1fe6c5116f7dc → [Updates: 26-slim]

github-actions (10)

.github/workflows/auto-merge-flake-updates.yml (2)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/auto-merge-release.yml (2)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/checks.yml (6)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• dtolnay/rust-toolchain stable@4be7066ada62dd38de10e7b70166bc74ed198c30
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• bahmutov/npm-install v1
• profiidev/rust-lint-action v4@e9435ea64793ce035116e328195eb0c786a46f5a → [Updates: v4]

.github/workflows/cli-release.yml (8)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• Swatinem/rust-cache v2@e18b497796c12c097a38f9edb9d0641fb99eee32
• dtolnay/rust-toolchain stable@4be7066ada62dd38de10e7b70166bc74ed198c30
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• softprops/action-gh-release v3@718ea10b132b3b2eba29c1007bb80653f286566b
• rust stable

.github/workflows/create-release.yml (2)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

.github/workflows/flake-lock-update.yml (4)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• cachix/install-nix-action v31@8aa03977d8d733052d78f4e008a241fd1dbf36b3
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/flake.yml (3)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• cachix/install-nix-action v31@8aa03977d8d733052d78f4e008a241fd1dbf36b3
• profiidev/hibernation v0@d1d0857b79670ea9edb16431850bff98f93cdcbe

.github/workflows/release-trigger.yml (5)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• dtolnay/rust-toolchain stable@4be7066ada62dd38de10e7b70166bc74ed198c30
• bahmutov/npm-install v1
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/release.yml (13)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• docker/metadata-action v6@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/attest-build-provenance v4@0f67c3f4856b2e3261c31976d6725780e5e4c373
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/metadata-action v6@dc802804100637a589fabce1cb79ff13a1411302
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• peter-evans/repository-dispatch v4@28959ce8df70de7be546dd1250a005dd32156697

.github/workflows/test-action.yml (1)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

npm (3)

action/package.json (4)

• @actions/core ^3.0.0
• @actions/tool-cache ^4.0.0
• typescript 6.0.3 → [Updates: 7.0.2]
• vite 8.1.2 → [Updates: 8.1.3]

frontend/package.json (19)

• @lucide/svelte ^1.21.0
• @profidev/pleiades ^1.11.1
• @sveltejs/enhanced-img 0.11.0
• jsencrypt ^3.5.4
• valibot ^1.4.1
• @fontsource-variable/geist 5.2.9
• @hey-api/openapi-ts 0.99.0
• @sveltejs/adapter-node 5.5.7
• @sveltejs/kit 2.68.0 → [Updates: 2.69.1]
• @sveltejs/vite-plugin-svelte 7.1.2 → [Updates: 7.2.0]
• @tailwindcss/vite 4.3.2
• @types/node 26.0.1 → [Updates: 26.1.0]
• shadcn-svelte 1.3.0 → [Updates: 1.4.0]
• svelte 5.56.4
• svelte-check 4.7.1 → [Updates: 4.7.2]
• tailwindcss 4.3.2
• tw-animate-css 1.4.0
• typescript 6.0.3 → [Updates: 7.0.2]
• vite 8.1.2 → [Updates: 8.1.3]

package.json (6)

• oxfmt 0.57.0 → [Updates: 0.58.0]
• oxlint 1.72.0 → [Updates: 1.73.0]
• oxlint-tsgolint 0.24.0
• prettier-plugin-svelte 4.1.1
• prettier-plugin-tailwindcss 0.8.0
• typebox =1.3.2 → [Updates: =1.3.4]

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository