Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency @ianvs/prettier-plugin-sort-imports to v4.7.1
• chore(deps): update dependency axios to v1.13.5
• chore(deps): update dependency dotenv to v17.2.4
• chore(deps): update dependency mongoose to v9.1.6
• chore(deps): update dependency rolldown to v1.0.0-rc.3
• chore(deps): update dependency tsdown to v0.20.3
• fix(deps): update dependency @nestjs/schedule to v6.1.1
• fix(deps): update dependency commander to v14.0.3
• fix(deps): update dependency nodemailer to v7.0.13
• fix(deps): update dependency semver to v7.7.4
• fix(deps): update dependency ua-parser-js to v2.0.9
• fix(deps): update nest monorepo to v11.1.13 (patch) (@nestjs/common, @nestjs/core, @nestjs/platform-fastify, @nestjs/platform-socket.io, @nestjs/testing, @nestjs/websockets)
• chore(deps): update dependency @cloudflare/workers-types to v4.20260207.0
• chore(deps): update dependency @swc/cli to ^0.8.0
• chore(deps): update dependency @types/node to v25.2.2
• chore(deps): update dependency redis-memory-server to v0.16.0
• chore(deps): update dependency vite-tsconfig-paths to v6.1.0
• chore(deps): update dependency wrangler to v4.63.0
• chore(deps): update pnpm to v10.29.2
• fix(deps): update babel monorepo to v7.29.0 (minor) (@babel/core, @babel/types)
• fix(deps): update dependency @anthropic-ai/sdk to ^0.74.0
• fix(deps): update dependency openai to v6.18.0
• chore(deps): update dependency eslint to v10
• chore(deps): update dependency whatwg-url to v16
• chore(deps): update mongo docker tag to v8
• chore(deps): update node.js to v24
• chore(deps): update redis docker tag to v8
• fix(deps): update dependency nodemailer to v8
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update pnpm/action-setup digest to 1e1c8ea
• chore(deps): update dependency redis-memory-server to v0.15.1
• chore(deps): update dependency redis-memory-server to v0.15.1
• chore(deps): update dependency @sxzz/eslint-config to v7.7.0
• chore(deps): update dependency express to v4.22.1
• chore(deps): update dependency mongodb to v6.21.0
• chore(deps): update dependency whatwg-url to v14.2.0
• chore(deps): update appleboy/scp-action action to v1
• chore(deps): update dependency express to v5
• chore(deps): update dependency mongodb to v7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (2)

docker-compose.server.yml (2)

• redis 7-alpine → [Updates: 8-alpine]
• mongo 7 → [Updates: 8]

docker-compose.yml (1)

• mongo 7 → [Updates: 8]

dockerfile (1)

dockerfile (2)

• node 22-alpine → [Updates: 24-alpine]
• node 22-alpine → [Updates: 24-alpine]

github-actions (4)

.github/actions/setup-node/action.yml (2)

• actions/setup-node v6
• pnpm/action-setup e94b270858c939f4f8b43f5c1438fa1d9a67ad5d → [Updates: undefined]

.github/workflows/api-client.yml (1)

• actions/checkout v6

.github/workflows/ci.yml (8)

• actions/checkout v6
• actions/checkout v6
• docker/metadata-action v5
• docker/setup-qemu-action v3
• docker/setup-buildx-action v3
• docker/build-push-action v6
• actions/checkout v6
• actions/checkout v6

.github/workflows/release.yml (20)

• actions/checkout v6
• actions/checkout v6
• softprops/action-gh-release v2
• actions/checkout v6
• docker/setup-qemu-action v3
• docker/metadata-action v5
• docker/setup-buildx-action v3
• docker/build-push-action v6
• docker/login-action v3
• docker/build-push-action v6
• actions/upload-artifact v6
• actions/download-artifact v7
• docker/login-action v3
• docker/setup-buildx-action v3
• docker/metadata-action v5
• actions/checkout v6
• robinraju/release-downloader v1.12
• appleboy/scp-action v0.1.7 → [Updates: v1.0.0]
• appleboy/scp-action v0.1.7 → [Updates: v1.0.0]
• appleboy/scp-action v0.1.7 → [Updates: v1.0.0]

npm (10)

apps/core/external/pino/package.json

apps/core/external/request/package.json

apps/core/package.json (115)

• @antfu/install-pkg 1.1.0
• @anthropic-ai/sdk ^0.72.1 → [Updates: ^0.74.0]
• @babel/core 7.28.6 → [Updates: 7.29.0]
• @babel/plugin-transform-modules-commonjs 7.28.6
• @babel/plugin-transform-typescript 7.28.6
• @babel/types ^7.28.5 → [Updates: ^7.28.5]
• @better-auth/passkey ^1.4.18
• @fastify/cookie 11.0.2
• @fastify/multipart 9.4.0
• @fastify/static 9.0.0
• @innei/next-async 0.4.0
• @innei/pretty-logger-nestjs 0.4.2
• @keyv/redis 5.1.6
• @lexical/headless ^0.40.0
• @lexical/link ^0.40.0
• @lexical/list ^0.40.0
• @lexical/rich-text ^0.40.0
• @nestjs/cache-manager 3.1.0
• @nestjs/common 11.1.12 → [Updates: 11.1.13]
• @nestjs/core 11.1.12 → [Updates: 11.1.13]
• @nestjs/event-emitter 3.0.1
• @nestjs/mapped-types ^2.1.0
• @nestjs/platform-fastify 11.1.12 → [Updates: 11.1.13]
• @nestjs/platform-socket.io 11.1.12 → [Updates: 11.1.13]
• @nestjs/schedule 6.1.0 → [Updates: 6.1.1]
• @nestjs/throttler 6.5.0
• @nestjs/websockets 11.1.12 → [Updates: 11.1.13]
• @socket.io/redis-adapter 8.3.0
• @socket.io/redis-emitter 5.1.0
• @typegoose/auto-increment ^5.0.0
• @typegoose/typegoose ^13.0.0
• @types/jsonwebtoken 9.0.10
• axios ^1.13.3 → [Updates: ^1.13.3]
• axios-retry 4.5.0
• bcryptjs ^3.0.3
• better-auth 1.4.18
• blurhash 2.0.5
• cache-manager 7.2.8
• commander 14.0.2 → [Updates: 14.0.3]
• dayjs 1.11.19
• diff-match-patch ^1.0.5
• dotenv ^17.2.3 → [Updates: ^17.2.3]
• dotenv-expand ^12.0.3
• ejs 4.0.1
• es-toolkit ^1.44.0
• form-data 4.0.5
• inquirer ^13.2.1
• isbot 5.1.34
• js-yaml ^4.1.1
• json5 2.2.3
• jsonwebtoken 9.0.3
• jszip 3.10.1
• keyv 5.6.0
• lexical ^0.40.0
• linkedom 0.18.12
• lru-cache 11.2.5
• marked 17.0.1
• mime-types ^3.0.1
• mkdirp ^3.0.1
• mongoose ^9.1.5 → [Updates: ^9.1.5]
• mongoose-aggregate-paginate-v2 1.1.4
• mongoose-autopopulate 1.2.1
• mongoose-lean-getters 2.3.1
• mongoose-lean-virtuals 2.1.0
• mongoose-paginate-v2 1.9.1
• nanoid 5.1.6
• nestjs-zod ^5.1.1
• node-machine-id 1.1.12
• nodemailer 7.0.12 → [Updates: 7.0.13, 8.0.1]
• openai 6.16.0 → [Updates: 6.18.0]
• picocolors ^1.1.1
• pluralize ^8.0.0
• qs 6.14.1
• reflect-metadata 0.2.2
• remove-markdown 0.6.3
• remove-md-codeblock 0.0.4
• resend ^6.9.1
• rxjs 7.8.2
• semver 7.7.3 → [Updates: 7.7.4]
• slugify 1.6.6
• source-map-support ^0.5.21
• ua-parser-js 2.0.8 → [Updates: 2.0.9]
• wildcard-match 5.1.4
• xss 1.0.15
• zod 4.3.6
• @nestjs/cli 11.0.16
• @nestjs/schematics 11.0.9
• @nestjs/testing 11.1.12 → [Updates: 11.1.13]
• @swc/cli ^0.7.10 → [Updates: ^0.8.0]
• @swc/core 1.15.11
• @types/babel__core 7.20.5
• @types/diff-match-patch ^1.0.36
• @types/ejs 3.1.5
• @types/get-image-colors 4.0.5
• @types/js-yaml 4.0.9
• @types/mime-types 3.0.1
• @types/node 25.0.10 → [Updates: 25.2.2]
• @types/nodemailer 7.0.9
• @types/qs 6.14.0
• @types/remove-markdown 0.3.4
• @types/semver 7.7.1
• @types/ua-parser-js 0.7.39
• @types/validator 13.15.10
• @vitest/coverage-v8 ^4.0.18
• ioredis 5.9.2
• mongodb-memory-server ^11.0.1
• redis-memory-server ^0.15.0 → [Updates: ^0.15.0, ^0.16.0]
• rimraf 6.1.2
• sharp 0.34.5
• socket.io ^4.8.3
• tsdown 0.20.1 → [Updates: 0.20.3]
• typescript 5.9.3
• unplugin-swc 1.5.9
• vite-tsconfig-paths 6.0.5 → [Updates: 6.1.0]
• node >=22

apps/telemetry/package.json (2)

• @cloudflare/workers-types ^4.20260127.0 → [Updates: ^4.20260127.0]
• wrangler ^4.0.0 → [Updates: ^4.0.0]

external/pino/package.json

external/request/package.json

package.json (26)

• @ianvs/prettier-plugin-sort-imports 4.7.0 → [Updates: 4.7.1]
• @sxzz/eslint-config 7.1.4 → [Updates: 7.7.0]
• @types/node 25.0.10 → [Updates: 25.2.2]
• cross-env 10.1.0
• eslint ^9.36.0 → [Updates: ^10.0.0]
• lint-staged 16.2.7
• mongodb-memory-server 11.0.1
• prettier 3.8.1
• prettier-package-json 2.8.0
• prettier-plugin-ember-template-tag 2.1.3
• redis-memory-server 0.15.0 → [Updates: 0.15.1, 0.16.0]
• rimraf 6.1.2
• rolldown 1.0.0-rc.2 → [Updates: 1.0.0-rc.3]
• simple-git-hooks 2.13.1
• ts-node 10.9.2
• tsconfig-paths 4.2.0
• typescript 5.9.3
• vite-tsconfig-paths 6.0.5 → [Updates: 6.1.0]
• node >=22
• rolldown 1.0.0-rc.2 → [Updates: 1.0.0-rc.3]
• mongodb 6.12.0 → [Updates: 6.21.0, 7.1.0]
• semver 7.7.3 → [Updates: 7.7.4]
• typescript 5.9.3
• whatwg-url 14.1.1 → [Updates: 14.2.0, 16.0.0]
• zod 4.3.6
• pnpm 10.28.2 → [Updates: 10.29.2]

packages/api-client/package.json (12)

• @types/cors 2.8.19
• @types/express 5.0.6
• abort-controller 3.0.0
• axios ^1.13.3 → [Updates: ^1.13.3]
• camelcase-keys ^10.0.2
• cors 2.8.6
• es-toolkit 1.44.0
• express 4.21.2 → [Updates: 4.22.1, 5.2.1]
• form-data 4.0.5
• tsdown 0.20.1 → [Updates: 0.20.3]
• umi-request 1.4.0
• node >=22

packages/webhook/package.json (3)

• express 4.21.2 → [Updates: 4.22.1, 5.2.1]
• tsdown 0.20.1 → [Updates: 0.20.3]
• node >=22

pnpm-workspace.yaml

nvm (1)

.nvmrc (1)

• node 22 → [Updates: 24]

---

• Check this box to trigger a request for Renovate to run again on this repository