Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	positron-components

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency vite to v8.0.16 [security]
• chore(deps): update dependency @sveltejs/kit to v2.60.1 [security]
• chore(deps): update dependency svelte to v5.55.7 [security]
• fix(deps): update cargo (axum, axum-extra, centaurus, chrono, futures, hmac, http, hyper-util, jsonwebtoken, memchr, reqwest, sea-orm, sea-orm-migration, serde-enum-str, serde_json, sha2, time, tokio, tower, tower-http, url, uuid)
• chore(deps): update aquasecurity/trivy-action action to v0.36.0
• fix(deps): update npm (@esbuild/linux-arm64, @sveltejs/vite-plugin-svelte, @tailwindcss/typography, positron-components, prettier, prettier-plugin-svelte, prettier-plugin-tailwindcss, svelte-check, typescript, zod)
• chore(deps): update github-actions (major) (actions/cache, actions/checkout, profiidev/rust-lint-action)
• chore(deps): update npm (major) (prettier-plugin-svelte, typescript)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cargo (4)

backend/Cargo.toml (33)

• centaurus 0.4.4 → [Updates: 0.16.0]
• uuid 1.18.1 → [Updates: 1.18.1]
• axum 0.8.4 → [Updates: 0.8.4]
• axum-extra 0.12.1 → [Updates: 0.12.1]
• tracing 0.1.41
• tower 0.5.2 → [Updates: 0.5.2]
• tower-http 0.6.6 → [Updates: 0.7.0]
• http 1.3.1 → [Updates: 1.3.1]
• tokio 1.47.1 → [Updates: 1.47.1]
• dotenv 0.15.0
• serde_json 1.0.143 → [Updates: 1.0.143]
• serde-xml-rs 0.8.1
• async-trait 0.1.89
• hmac 0.12.1 → [Updates: 0.13.0]
• base64 0.22.1
• chrono 0.4.42 → [Updates: 0.4.42]
• eyre 0.6.12
• color-eyre 0.6.5
• jsonwebtoken 10.0.0 → [Updates: 10.0.0]
• rsa 0.9.8
• argon2 0.5.3
• sha2 0.10.9 → [Updates: 0.11.0]
• hex 0.4.3
• serde-enum-str 0.4.0 → [Updates: 0.5.0]
• mime 0.3.17
• serde_urlencoded 0.7.1
• futures 0.3.31 → [Updates: 0.3.31]
• memchr 2.7.5 → [Updates: 2.7.5]
• time 0.3.44 → [Updates: 0.3.44]
• hyper-util 0.1.17 → [Updates: 0.1.17]
• url 2.5.7 → [Updates: 2.5.7]
• reqwest 0.12.23 → [Updates: 0.13.0]
• figment 0.10.19

backend/entity/Cargo.toml

backend/migration/Cargo.toml (2)

• async-std 1
• sea-orm-migration 1.1.16 → [Updates: 1.1.16]

Cargo.toml (2)

• serde 1.0.223
• sea-orm 1.1.16 → [Updates: 1.1.16]

docker-compose (1)

docker-compose.yml

dockerfile (1)

Dockerfile (2)

• node 24-alpine
• node 24-alpine

github-actions (3)

.github/workflows/build.yml (10)

• actions/checkout v6 → [Updates: v7]
• docker/setup-buildx-action v4
• actions/cache v5 → [Updates: v6]
• reproducible-containers/buildkit-cache-dance v3
• docker/login-action v4
• docker/metadata-action v6
• docker/build-push-action v7
• actions/attest-build-provenance v4
• aquasecurity/trivy-action 0.35.0 → [Updates: v0.36.0]
• github/codeql-action v4

.github/workflows/checks.yml (5)

• actions/checkout v6 → [Updates: v7]
• dtolnay/rust-toolchain stable
• Swatinem/rust-cache v2
• bahmutov/npm-install v1
• profiidev/rust-lint-action v3 → [Updates: v4]

.github/workflows/tests.yml (7)

• actions/checkout v6 → [Updates: v7]
• dtolnay/rust-toolchain stable
• Swatinem/rust-cache v2
• taiki-e/install-action nextest
• actions/upload-artifact v7
• actions/download-artifact v8
• EnricoMi/publish-unit-test-result-action v2

npm (2)

frontend/package.json (34)

• @tailwindcss/typography 0.5.19 → [Updates: 0.5.20]
• @tailwindcss/vite ^4.1.13
• jsencrypt ^3.5.4
• tailwindcss ^4.1.13
• tw-animate-css ^1.3.8
• @types/d3-scale ^4.0.9
• @types/d3-shape ^3.1.7
• positron-components 1.14.1 → [Updates: 1.15.2]
• @lucide/svelte ^1.0.0
• @sveltejs/adapter-node ^5.3.2
• @sveltejs/kit 2.55.0 → [Updates: 2.60.1]
• @sveltejs/vite-plugin-svelte 7.0.0 → [Updates: 7.2.0]
• bits-ui ^2.11.0
• svelte 5.54.1 → [Updates: 5.55.7]
• svelte-check 4.4.5 → [Updates: 4.7.2]
• tailwind-merge ^3.3.1
• tailwind-variants 3.2.2
• tslib 2.8.1
• typescript 6.0.2 → [Updates: 6.0.3, 7.0.2]
• vite 8.0.5 → [Updates: 8.0.16]
• zod 4.3.6 → [Updates: 4.4.3]
• @esbuild/linux-arm64 ^0.27.0 → [Updates: ^0.28.0]
• @rollup/rollup-darwin-arm64 ^4.50.2
• @rollup/rollup-darwin-x64 ^4.50.2
• @rollup/rollup-linux-arm64-gnu ^4.50.2
• @rollup/rollup-linux-arm64-musl ^4.50.2
• @rollup/rollup-linux-x64-gnu ^4.50.2
• @rollup/rollup-win32-x64-msvc ^4.50.2
• lightningcss-darwin-arm64 ^1.30.1
• lightningcss-darwin-x64 ^1.30.1
• lightningcss-linux-arm64-gnu ^1.30.1
• lightningcss-linux-arm64-musl ^1.30.1
• lightningcss-linux-x64-gnu ^1.30.1
• lightningcss-win32-x64-msvc ^1.30.1

package.json (4)

• prettier ^3.6.2 → [Updates: ^3.6.2]
• prettier-plugin-svelte ^3.4.0 → [Updates: ^3.4.0, ^4.0.0]
• prettier-plugin-tailwindcss ^0.7.2 → [Updates: ^0.8.0]
• svelte-check ^4.3.1 → [Updates: ^4.3.1]

---

• Check this box to trigger a request for Renovate to run again on this repository