Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@types/uuid

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update dependency nodemon to v3.1.14
• Update mikro-orm to v6.6.13 (@mikro-orm/cli, @mikro-orm/core, @mikro-orm/migrations, @mikro-orm/mysql, @mikro-orm/reflection)
• Update dependency @clickhouse/client to v1.18.3
• Update dependency @hyperdx/node-opentelemetry to ^0.10.0
• Update dependency @ngneat/falso to v7.4.0
• Update dependency @sentry/node to v9.47.1
• Update dependency @types/node to v24.12.2
• Update dependency bullmq to v5.76.1
• Update dependency bullmq-otel to v1.3.0
• Update dependency dotenv to v16.6.1
• Update dependency ioredis to v5.10.1
• Update dependency koa-compress to v5.2.1
• Update dependency oxfmt to ^0.46.0
• Update dependency oxlint to v1.61.0
• Update dependency oxlint-tsgolint to ^0.21.0
• Update dependency qs to v6.15.1
• Update dependency rate-limiter-flexible to v7.4.0
• Update dependency stripe to v18.5.0
• Update dependency supertest to v7.2.2
• Update dependency ws to v8.20.0
• Update vitest monorepo to v4.1.5 (@vitest/coverage-v8, vitest)
• Update actions/cache action to v5
• Update actions/checkout action to v6
• Update actions/github-script action to v9
• Update actions/setup-node action to v6
• Update clickhouse/clickhouse-server Docker tag to v26
• Update codecov/codecov-action action to v6
• Update dependency @ngneat/falso to v8
• Update dependency @sentry/node to v10
• Update dependency @types/archiver to v7
• Update dependency @types/bcrypt to v6
• Update dependency @types/nodemailer to v8
• Update dependency @types/supertest to v7
• Update dependency @types/uuid to v11
• Update dependency axios-mock-adapter to v2
• Update dependency csv-parse to v6
• Update dependency dotenv to v17
• Update dependency koa-helmet to v9
• Update dependency koa-logger to v4
• Update dependency lint-staged to v16
• Update dependency otplib to v13
• Update dependency p-retry to v8
• Update dependency rate-limiter-flexible to v11
• Update dependency stripe to v22
• Update dependency typescript to v6
• Update dependency vite to v8
• Update docker/build-push-action action to v7
• Update docker/login-action action to v4
• Update docker/setup-buildx-action action to v4
• Update docker/setup-qemu-action action to v4
• Update EndBug/version-check action to v3
• Update getsentry/action-release action to v3
• Update GitHub Artifact Actions (major) (actions/download-artifact, actions/upload-artifact)
• Update mikro-orm monorepo to v7 (major) (@mikro-orm/cli, @mikro-orm/core, @mikro-orm/migrations, @mikro-orm/mysql, @mikro-orm/reflection)
• Update mysql Docker tag to v9
• Update softprops/action-gh-release action to v3
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency uuid to v14 [SECURITY]

Detected Dependencies

docker-compose (3)

docker-compose.ci.yml (1)

• redis 8-alpine

docker-compose.test.yml (3)

• mysql 8.4 → [Updates: 9.7]
• arm64v8/redis 8-alpine
• clickhouse/clickhouse-server 24.12-alpine → [Updates: 26.3-alpine]

docker-compose.yml (3)

• mysql 8.4 → [Updates: 9.7]
• arm64v8/redis 8-alpine
• clickhouse/clickhouse-server 24.12-alpine → [Updates: 26.3-alpine]

dockerfile (1)

Dockerfile (1)

• node 24-slim

github-actions (6)

.github/actions/setup/action.yml (3)

• actions/setup-node v4 → [Updates: v6]
• actions/cache v4 → [Updates: v5]
• node 24

.github/workflows/ci.yml (7)

• actions/checkout v4 → [Updates: v6]
• actions/upload-artifact v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v6]
• actions/download-artifact v4 → [Updates: v8]
• codecov/codecov-action v4 → [Updates: v6]
• actions/checkout v4 → [Updates: v6]
• actions/checkout v4 → [Updates: v6]

.github/workflows/claude-code-review.yml (2)

• actions/checkout v6
• anthropics/claude-code-action v1

.github/workflows/create-release.yml (6)

• actions/checkout v4 → [Updates: v6]
• actions/setup-node v4 → [Updates: v6]
• actions/cache v4 → [Updates: v5]
• softprops/action-gh-release v2 → [Updates: v3]
• getsentry/action-release v1 → [Updates: v3]
• node 24

.github/workflows/docker.yml (5)

• docker/setup-qemu-action v3 → [Updates: v4]
• docker/setup-buildx-action v3 → [Updates: v4]
• docker/login-action v3 → [Updates: v4]
• docker/build-push-action v5 → [Updates: v7]
• appleboy/ssh-action master

.github/workflows/tag.yml (5)

• actions/checkout v4 → [Updates: v6]
• EndBug/version-check v2 → [Updates: v3]
• tvdias/github-tagger v0.0.2
• actions/github-script v7 → [Updates: v9]
• actions/github-script v7 → [Updates: v9]

npm (1)

package.json (77)

• @clickhouse/client ^1.15.0 → [Updates: ^1.15.0]
• @hyperdx/node-opentelemetry ^0.8.2 → [Updates: ^0.10.0]
• @koa/cors ^5.0.0
• @mikro-orm/core ^6.6.12 → [Updates: ^6.6.12, ^7.0.0]
• @mikro-orm/migrations ^6.6.12 → [Updates: ^6.6.12, ^7.0.0]
• @mikro-orm/mysql ^6.6.12 → [Updates: ^6.6.12, ^7.0.0]
• @mikro-orm/reflection ^6.6.12 → [Updates: ^6.6.12, ^7.0.0]
• @ngneat/falso ^7.2.0 → [Updates: ^7.2.0, ^8.0.0]
• @opentelemetry/api ^1.9.0 → [Updates: ^1.9.0]
• @sentry/node ^9.29.0 → [Updates: ^9.29.0, ^10.0.0]
• archiver ^7.0.1
• axios ^1.15.0 → [Updates: ^1.15.0]
• bcrypt ^6.0.0
• bullmq ^5.40.2 → [Updates: ^5.40.2]
• bullmq-otel ^1.0.1 → [Updates: ^1.0.1]
• date-fns ^4.1.0
• dinero.js ^2.0.0 → [Updates: ^2.0.0]
• dotenv ^16.0.0 → [Updates: ^16.0.0, ^17.0.0]
• handlebars ^4.7.9
• ioredis ^5.2.4 → [Updates: ^5.2.4]
• jsonwebtoken ^9.0.0 → [Updates: ^9.0.0]
• koa ^3.2.0
• koa-bodyparser ^4.4.1
• koa-compose ^4.1.0
• koa-compress ^5.1.1 → [Updates: ^5.1.1]
• koa-helmet ^7.0.0 → [Updates: ^9.0.0]
• koa-jwt ^4.0.4
• koa-logger ^3.2.1 → [Updates: ^4.0.0]
• koa-tree-router ^0.13.1
• lodash ^4.18.1
• mikro-orm-cache-adapter-redis ^4.0.0 → [Updates: ^4.0.0]
• nodemailer ^8.0.5
• otplib ^12.0.1 → [Updates: ^13.0.0]
• p-retry ^7.1.1 → [Updates: ^8.0.0]
• qrcode ^1.5.0
• qs ^6.14.2 → [Updates: ^6.14.2]
• rate-limiter-flexible ^7.3.0 → [Updates: ^7.3.0, ^11.0.0]
• s3mini ^0.9.2 → [Updates: ^0.9.2]
• sqids ^0.3.0
• stripe ^18.0.0 → [Updates: ^18.0.0, ^22.0.0]
• uuid ^9.0.0 → [Updates: ^14.0.0]
• ws ^8.18.0 → [Updates: ^8.18.0]
• zod ^4.3.6
• @mikro-orm/cli ^6.6.12 → [Updates: ^6.6.12, ^7.0.0]
• @types/archiver ^6.0.3 → [Updates: ^7.0.0]
• @types/bcrypt ^5.0.2 → [Updates: ^6.0.0]
• @types/jsonwebtoken ^9.0.9
• @types/koa ^3.0.2
• @types/koa-bodyparser ^4.3.12
• @types/koa-compress ^4.0.7
• @types/koa-logger ^3.1.2
• @types/koa__cors ^5.0.0
• @types/lodash ^4.14.182
• @types/node 24 → [Updates: 24]
• @types/nodemailer ^6.4.17 → [Updates: ^8.0.0]
• @types/qrcode ^1.5.5
• @types/supertest ^6.0.2 → [Updates: ^7.0.0]
• @types/unzipper ^0.10.11
• @types/uuid ^10.0.0 → [Updates: ^11.0.0]
• @types/ws ^8.5.13
• @vitest/coverage-v8 ^4.0.18 → [Updates: ^4.0.18]
• axios-mock-adapter ^1.22.0 → [Updates: ^2.0.0]
• csv-parse ^5.6.0 → [Updates: ^6.0.0]
• hefty ^2.0.0
• husky ^9.0.11
• lint-staged >=10 → [Updates: >=10]
• nodemon ^3.1.11 → [Updates: ^3.1.11]
• oxfmt ^0.34.0 → [Updates: ^0.46.0]
• oxlint ^1.49.0 → [Updates: ^1.49.0]
• oxlint-tsgolint ^0.14.1 → [Updates: ^0.21.0]
• supertest ^7.0.0 → [Updates: ^7.0.0]
• ts-node ^10.7.0
• typescript ^5.9.3 → [Updates: ^6.0.0]
• unzipper ^0.12.3
• vite ^7.3.1 → [Updates: ^8.0.0]
• vitest ^4.0.18 → [Updates: ^4.0.18]
• node >=24.0.0

nvm (1)

.nvmrc (1)

• node 24

---

• Check this box to trigger a request for Renovate to run again on this repository