Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Base branch does not exist - skipping

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (6)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
cargo	dotenvy	2023-03-22
cargo	mime_guess	2024-06-29
npm	change-case	2024-04-03
npm	clsx	2024-04-23
npm	qrcode.react	2024-12-11
npm	react-markdown	2025-03-07

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Pin dependencies (dev) (debian, rust)
• Update github actions (dev) (actions/checkout, actions/setup-node, aquasecurity/trivy-action, docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action, dtolnay/rust-toolchain, mozilla-actions/sccache-action, pnpm/action-setup, shogo82148/actions-create-release, shogo82148/actions-upload-release-asset, taiki-e/install-action, ubuntu)
• Update frontend dependencies (dev) (@biomejs/biome, @floating-ui/react, @inlang/paraglide-js, @tanstack/devtools-vite, @tanstack/react-devtools, @tanstack/react-form, @tanstack/react-query, @tanstack/react-query-devtools, @tanstack/react-router, @tanstack/react-router-devtools, @tanstack/router-plugin, @types/lodash-es, @types/node, @types/qs, @types/react, @types/react-dom, @vitejs/plugin-react-swc, axios, globals, motion, pnpm, prettier, qs, react, react-dom, sass, seroval, sharp, stylelint, stylelint-config-standard-scss, stylelint-scss, typescript, typescript-eslint, vite, vite-plugin-image-optimizer)
• Update rust dependencies (dev) (base64, reqwest, tokio, tower-http)
• Update frontend dependencies (dev) (major) (motion, typescript, vite)
• Update github actions (dev) (major) (actions/setup-node, ubuntu)
• Update rust dependencies (dev) (major) (axum-client-ip, vergen-git2)
• Lock file maintenance (dev)
• Lock file maintenance (dev)
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Security patches (stable/1.x) (ammonia, anyhow, axios, qs, sharp, vite)

Detected Dependencies

Branch dev

cargo (1)

Cargo.toml (41)

• defguard_certs cdf3ef9a70796d47a6247ad1300d2e6bb7474cf5 → [Updates: ``]
• defguard_grpc_tls cdf3ef9a70796d47a6247ad1300d2e6bb7474cf5 → [Updates: ``]
• defguard_version cdf3ef9a70796d47a6247ad1300d2e6bb7474cf5 → [Updates: ``]
• rustls-webpki 0.103
• rustls-pki-types 1
• axum 0.8
• axum-client-ip 0.7 → [Updates: 1.0]
• axum-extra 0.12
• axum-server 0.8
• time 0.3
• tokio 1
• tokio-stream 0.1
• tower-http 0.6 → [Updates: 0.7]
• tracing 0.1
• tracing-subscriber 0.3
• log 0.4
• serde 1.0
• serde_json 1.0
• toml 1.0
• prost 0.14
• tonic 0.14
• tonic-prost 0.14
• thiserror 2.0
• anyhow 1.0
• clap 4.5
• dotenvy 0.15
• url 2.5
• tower_governor 0.8
• rust-embed 8.5
• mime_guess 2.0
• base64 0.22 → [Updates: 0.23]
• tower 0.5
• futures-util 0.3
• ammonia 4.1
• chrono 0.4
• rustls 0.23
• instant-acme 0.8
• reqwest 0.12 → [Updates: 0.13]
• tokio 1 → [Updates: =1.53.1]
• tonic-prost-build 0.14
• vergen-git2 9.1 → [Updates: 10.0]

dockerfile (1)

Dockerfile (3)

• public.ecr.aws/docker/library/node 26-alpine → [Updates: 26-alpine]
• rust 1 → [Updates: 1]
• debian 13-slim → [Updates: 13-slim]

github-actions (8)

.github/workflows/build-docker.yml (8)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.6.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 → [Updates: v0.36.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.6.0]

.github/workflows/lint-web.yml (4)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• pnpm/action-setup v6.0.9@008330803749db0355799c700092d9a85fd074e9 → [Updates: v6.0.10, v6.0.9]
• node 26

.github/workflows/publish-docker-latest.yml (3)

• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.6.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]

.github/workflows/release.yml (30)

• shogo82148/actions-create-release v1.9.0@6a396031bc74c57403da1018fec74d24c6aa03cd → [Updates: v1.9.1]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• pnpm/action-setup v6.0.9@008330803749db0355799c700092d9a85fd074e9 → [Updates: v6.0.10, v6.0.9]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.3]
• dtolnay/rust-toolchain stable@29eef336d9b2848a0b548edc03f92a220660cdb8 → [Updates: stable]
• mozilla-actions/sccache-action v0.0.10@1583d6b38d7be47f593cb472781bbb21cab4321e → [Updates: v0.0.11, v0.0.10]
• defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c
• defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c
• defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c
• defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c
• defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.3]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.3]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.3]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.3]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.3]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.3]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.3]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.3]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• pnpm/action-setup v6.0.9@008330803749db0355799c700092d9a85fd074e9 → [Updates: v6.0.10, v6.0.9]
• dtolnay/rust-toolchain stable@29eef336d9b2848a0b548edc03f92a220660cdb8 → [Updates: stable]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.3]
• node 26
• rust stable
• ubuntu 22.04 → [Updates: 26.04, 22.04]
• node 26
• rust stable

.github/workflows/sbom-regenerate.yml

.github/workflows/sbom.yml (6)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 → [Updates: v0.36.0]
• aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 → [Updates: v0.36.0]
• aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 → [Updates: v0.36.0]
• aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 → [Updates: v0.36.0]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.3]

.github/workflows/test.yml (5)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 → [Updates: v0.36.0]
• mozilla-actions/sccache-action v0.0.10@1583d6b38d7be47f593cb472781bbb21cab4321e → [Updates: v0.0.11, v0.0.10]
• taiki-e/install-action v2.82.2@9e1e5806d4a4822de933115878265be9aaa786d9 → [Updates: v2.85.9]
• public.ecr.aws/docker/library/rust 1 → [Updates: 1]

.github/workflows/update-repositories.yml (1)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]

npm (4)

package.json (2)

• @tanstack/devtools-vite ^0.3.12 → [Updates: 0.3.12, ^0.8.0]
• pnpm 11.9.0 → [Updates: 11.20.0]

pnpm-workspace.yaml

web/package.json (46)

• @axa-ch/react-polymorphic-types ^1.4.2
• @floating-ui/react ^0.27.19 → [Updates: ^0.27.19]
• @inlang/paraglide-js ^2.20.0 → [Updates: ^2.20.0]
• @tanstack/react-devtools ^0.9.13 → [Updates: ^0.10.0]
• @tanstack/react-form ^1.33.0 → [Updates: ^1.33.0]
• @tanstack/react-query ^5.101.0 → [Updates: ^5.101.0]
• @tanstack/react-query-devtools ^5.101.0 → [Updates: ^5.101.0]
• @tanstack/react-router ^1.170.16 → [Updates: ^1.170.16]
• @tanstack/react-router-devtools ^1.167.0 → [Updates: ^1.167.0]
• @uidotdev/usehooks ^2.4.1
• axios ^1.18.0 → [Updates: ^1.18.0]
• change-case ^5.4.4
• clsx ^2.1.1
• dayjs ^1.11.21
• lodash-es ^4.18.1
• motion ^12.40.0 → [Updates: ^12.40.0, ^13.0.0]
• qrcode.react ^4.2.0
• qs ^6.15.2 → [Updates: ^6.15.2]
• react ^19.2.7 → [Updates: ^19.2.7]
• react-dom ^19.2.7 → [Updates: ^19.2.7]
• react-markdown ^10.1.0
• rxjs ^7.8.2
• zod ^4.4.3
• zustand ^5.0.14 → [Updates: ^5.0.14]
• @biomejs/biome 2.3.14 → [Updates: 2.5.7]
• @inlang/paraglide-js 2.15.1 → [Updates: 2.23.2]
• @tanstack/devtools-vite ^0.5.5 → [Updates: 0.5.5, ^0.8.0]
• @tanstack/router-plugin ^1.168.18 → [Updates: 1.168.18]
• @types/lodash-es ^4.17.12 → [Updates: 4.17.12]
• @types/node ^25.9.4 → [Updates: 25.9.4]
• @types/qs ^6.15.1 → [Updates: 6.15.1]
• @types/react ^19.2.17 → [Updates: 19.2.17]
• @types/react-dom ^19.2.3 → [Updates: 19.2.3]
• @vitejs/plugin-react-swc ^4.3.1 → [Updates: 4.3.1]
• globals ^17.6.0 → [Updates: 17.6.0]
• prettier ^3.8.4 → [Updates: 3.8.4]
• sass ^1.101.0 → [Updates: 1.101.0]
• sharp ^0.35.0 → [Updates: 0.35.3]
• stylelint ^17.13.0 → [Updates: 17.13.0]
• stylelint-config-standard-scss ^17.0.0 → [Updates: 17.0.0]
• stylelint-scss ^7.2.0 → [Updates: 7.2.0]
• typescript ~5.9.3 → [Updates: 5.9.3, ~7.0.0]
• typescript-eslint ^8.61.1 → [Updates: 8.61.1, ^8.66.0]
• vite ^7.3.5 → [Updates: 7.3.5, ^8.0.0]
• vite-plugin-image-optimizer ^2.0.3 → [Updates: 2.0.3]
• pnpm 11.9.0 → [Updates: 11.20.0]

web/pnpm-workspace.yaml (1)

• seroval 1.5.4 → [Updates: 1.6.2]

nvm (1)

web/.nvmrc (1)

• node v26

renovate-config (1)

renovate.json

Branch release/2.1

cargo (1)

Cargo.toml

dockerfile (1)

Dockerfile

github-actions (8)

.github/workflows/build-docker.yml

.github/workflows/lint-web.yml

.github/workflows/publish-docker-latest.yml

.github/workflows/release.yml

.github/workflows/sbom-regenerate.yml

.github/workflows/sbom.yml

.github/workflows/test.yml

.github/workflows/update-repositories.yml

npm (4)

package.json

pnpm-workspace.yaml

web/package.json

web/pnpm-workspace.yaml

nvm (1)

web/.nvmrc

renovate-config (1)

renovate.json

Branch stable/1.x

cargo (1)

Cargo.toml (2)

• anyhow 1.0 → [Updates: 1.0]
• ammonia 4.1.1 → [Updates: 4.1.1]

dockerfile (1)

Dockerfile

github-actions (7)

.github/workflows/build-docker.yml

.github/workflows/lint-web.yml

.github/workflows/release.yml

.github/workflows/sbom-regenerate.yml

.github/workflows/sbom.yml

.github/workflows/test.yml

.github/workflows/update-repositories.yml

npm (4)

package.json

pnpm-workspace.yaml

web/package.json (4)

• axios ^1.15.0 → [Updates: ^1.15.0]
• qs ^6.15.1 → [Updates: ^6.15.1]
• sharp ^0.34.5 → [Updates: ^0.35.0]
• vite ^7.3.2 → [Updates: ^7.3.2]

web/pnpm-workspace.yaml

Branch stable/2.x

cargo (1)

Cargo.toml

dockerfile (1)

Dockerfile

github-actions (8)

.github/workflows/build-docker.yml

.github/workflows/lint-web.yml

.github/workflows/publish-docker-latest.yml

.github/workflows/release.yml

.github/workflows/sbom-regenerate.yml

.github/workflows/sbom.yml

.github/workflows/test.yml

.github/workflows/update-repositories.yml

npm (4)

package.json

pnpm-workspace.yaml

web/package.json

web/pnpm-workspace.yaml

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository