Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
npm	@types/uuid

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update dependency @types/node to v24.10.13
• Update dependency @types/nodemailer to v6.4.22
• Update dependency @types/qrcode to v1.5.6
• Update dependency lint-staged to v15.5.2
• Update mikro-orm to v6.6.7 (@mikro-orm/cli, @mikro-orm/core, @mikro-orm/migrations, @mikro-orm/mysql, @mikro-orm/reflection)
• Update dependency @clickhouse/client to v1.17.0
• Update dependency @hyperdx/node-opentelemetry to ^0.10.0
• Update dependency @ngneat/falso to v7.4.0
• Update dependency @sentry/node to v9.47.1
• Update dependency @stylistic/eslint-plugin to v5.8.0
• Update dependency bullmq to v5.69.3
• Update dependency bullmq-otel to v1.2.0
• Update dependency dotenv to v16.6.1
• Update dependency eslint to v9.39.2
• Update dependency ioredis to v5.9.3
• Update dependency koa-compress to v5.2.0
• Update dependency qs to v6.15.0
• Update dependency rate-limiter-flexible to v7.4.0
• Update dependency stripe to v18.5.0
• Update dependency supertest to v7.2.2
• Update dependency ws to v8.19.0
• Update typescript-eslint monorepo to v8.56.0 (@typescript-eslint/eslint-plugin, @typescript-eslint/parser)
• Update actions/cache action to v5
• Update actions/checkout action to v6
• Update actions/github-script action to v8
• Update actions/setup-node action to v6
• Update clickhouse/clickhouse-server Docker tag to v26
• Update codecov/codecov-action action to v5
• Update dependency @ngneat/falso to v8
• Update dependency @sentry/node to v10
• Update dependency @types/archiver to v7
• Update dependency @types/bcrypt to v6
• Update dependency @types/nodemailer to v7
• Update dependency @types/uuid to v11
• Update dependency axios-mock-adapter to v2
• Update dependency csv-parse to v6
• Update dependency dotenv to v17
• Update dependency eslint to v10
• Update dependency koa-helmet to v9
• Update dependency koa-logger to v4
• Update dependency lint-staged to v16
• Update dependency nodemailer to v8
• Update dependency otplib to v13
• Update dependency rate-limiter-flexible to v9
• Update dependency stripe to v20
• Update dependency uuid to v13
• Update dependency vite to v7
• Update docker/build-push-action action to v6
• Update getsentry/action-release action to v3
• Update GitHub Artifact Actions (major) (actions/download-artifact, actions/upload-artifact)
• Update mysql Docker tag to v9
• 🔐 Create all awaiting schedule PRs at once 🔐

Detected Dependencies

docker-compose (3)

docker-compose.ci.yml (1)

• redis 8-alpine

docker-compose.test.yml (3)

• mysql 8.4 → [Updates: 9.6]
• arm64v8/redis 8-alpine
• clickhouse/clickhouse-server 24.12-alpine → [Updates: 26.1-alpine]

docker-compose.yml (3)

• mysql 8.4 → [Updates: 9.6]
• arm64v8/redis 8-alpine
• clickhouse/clickhouse-server 24.12-alpine → [Updates: 26.1-alpine]

dockerfile (1)

Dockerfile (1)

• node 24-slim

github-actions (6)

.github/actions/setup/action.yml (3)

• actions/setup-node v4 → [Updates: v6]
• actions/cache v4 → [Updates: v5]
• node 24

.github/workflows/ci.yml (7)

• actions/checkout v4 → [Updates: v6]
• actions/upload-artifact v4 → [Updates: v6]
• actions/checkout v4 → [Updates: v6]
• actions/download-artifact v4 → [Updates: v7]
• codecov/codecov-action v4 → [Updates: v5]
• actions/checkout v4 → [Updates: v6]
• actions/checkout v4 → [Updates: v6]

.github/workflows/claude-code-review.yml (2)

• actions/checkout v4 → [Updates: v6]
• anthropics/claude-code-action v1

.github/workflows/create-release.yml (6)

• actions/checkout v4 → [Updates: v6]
• actions/setup-node v4 → [Updates: v6]
• actions/cache v4 → [Updates: v5]
• softprops/action-gh-release v2
• getsentry/action-release v1 → [Updates: v3]
• node 24

.github/workflows/docker.yml (4)

• docker/setup-qemu-action v3
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/build-push-action v5 → [Updates: v6]

.github/workflows/tag.yml (5)

• actions/checkout v4 → [Updates: v6]
• EndBug/version-check v2
• tvdias/github-tagger v0.0.2
• actions/github-script v7 → [Updates: v8]
• actions/github-script v7 → [Updates: v8]

npm (1)

package.json (76)

• @clickhouse/client ^1.15.0 → [Updates: ^1.15.0]
• @dinero.js/currencies ^2.0.0-alpha.14 → [Updates: ^2.0.0-alpha.14]
• @hyperdx/node-opentelemetry ^0.8.2 → [Updates: ^0.10.0]
• @koa/cors ^5.0.0
• @mikro-orm/core ^6.6.6 → [Updates: ^6.6.6]
• @mikro-orm/migrations ^6.6.6 → [Updates: ^6.6.6]
• @mikro-orm/mysql ^6.6.6 → [Updates: ^6.6.6]
• @mikro-orm/reflection ^6.6.6 → [Updates: ^6.6.6]
• @ngneat/falso ^7.2.0 → [Updates: ^7.2.0, ^8.0.0]
• @opentelemetry/api ^1.9.0
• @sentry/node ^9.29.0 → [Updates: ^9.29.0, ^10.0.0]
• archiver ^7.0.1
• axios ^1.12.1
• bcrypt ^6.0.0
• bullmq ^5.40.2 → [Updates: ^5.40.2]
• bullmq-otel ^1.0.1 → [Updates: ^1.0.1]
• date-fns ^4.1.0
• dinero.js ^2.0.0-alpha.14 → [Updates: ^2.0.0-alpha.14]
• dotenv ^16.0.0 → [Updates: ^16.0.0, ^17.0.0]
• handlebars ^4.7.7
• ioredis ^5.2.4 → [Updates: ^5.2.4]
• jsonwebtoken ^9.0.0 → [Updates: ^9.0.0]
• koa ^3.1.1
• koa-bodyparser ^4.4.1
• koa-compose ^4.1.0
• koa-compress ^5.1.1 → [Updates: ^5.1.1]
• koa-helmet ^7.0.0 → [Updates: ^9.0.0]
• koa-jwt ^4.0.4
• koa-logger ^3.2.1 → [Updates: ^4.0.0]
• koa-tree-router ^0.13.1
• lodash ^4.17.23
• mikro-orm-cache-adapter-redis ^4.0.0 → [Updates: ^4.0.0]
• nodemailer ^7.0.11 → [Updates: ^7.0.11, ^8.0.0]
• otplib ^12.0.1 → [Updates: ^13.0.0]
• qrcode ^1.5.0
• qs ^6.14.2 → [Updates: ^6.14.2]
• rate-limiter-flexible ^7.3.0 → [Updates: ^7.3.0, ^9.0.0]
• stripe ^18.0.0 → [Updates: ^18.0.0, ^20.0.0]
• uuid ^9.0.0 → [Updates: ^13.0.0]
• ws ^8.18.0 → [Updates: ^8.18.0]
• zod ^4.3.6
• @mikro-orm/cli ^6.6.6 → [Updates: ^6.6.6]
• @stylistic/eslint-plugin ^5.5.0 → [Updates: ^5.5.0]
• @types/archiver ^6.0.3 → [Updates: ^7.0.0]
• @types/bcrypt ^5.0.2 → [Updates: ^6.0.0]
• @types/jsonwebtoken ^9.0.9
• @types/koa ^3.0.1
• @types/koa__cors ^5.0.0
• @types/koa-bodyparser ^4.3.12
• @types/koa-compress ^4.0.7
• @types/koa-logger ^3.1.2
• @types/lodash ^4.14.182
• @types/node 24 → [Updates: 24]
• @types/nodemailer ^6.4.17 → [Updates: ^6.4.17, ^7.0.0]
• @types/qrcode ^1.5.5 → [Updates: ^1.5.5]
• @types/supertest ^6.0.2
• @types/unzipper ^0.10.11
• @types/uuid ^10.0.0 → [Updates: ^11.0.0]
• @types/ws ^8.5.13
• @typescript-eslint/eslint-plugin ^8.46.2 → [Updates: ^8.46.2]
• @typescript-eslint/parser ^8.46.2 → [Updates: ^8.46.2]
• @vitest/coverage-v8 ^4.0.18
• axios-mock-adapter ^1.22.0 → [Updates: ^2.0.0]
• csv-parse ^5.6.0 → [Updates: ^6.0.0]
• eslint ^9.38.0 → [Updates: ^9.38.0, ^10.0.0]
• hefty ^2.0.0
• husky ^9.0.11
• lint-staged >=10 → [Updates: >=10]
• nodemon ^3.1.11
• supertest ^7.0.0 → [Updates: ^7.0.0]
• ts-node ^10.7.0
• typescript ^5.9.3
• unzipper ^0.12.3
• vite ^6.4.1 → [Updates: ^7.0.0]
• vitest ^4.0.18
• node >=24.0.0

nvm (1)

.nvmrc (1)

• node 24

---

• Check this box to trigger a request for Renovate to run again on this repository