Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	popper.js

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update lewagon/wait-on-check-action action to v1.9.1
• Update dependency highcharts to v13
• Update dependency simplecov to v1
• Update dependency vanilla-cookieconsent to v3
• Update hmarr/auto-approve-action action to v4
• Update peter-evans/repository-dispatch action to v4
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency rails to '~> 7.2.0', '>= 7.2.3.2'
• Update dependency ruby to v3.4.10
• Update actions/checkout action to v7
• Update actions/github-script action to v9
• Update dependabot/fetch-metadata action to v3
• Update dependency @fortawesome/fontawesome-free to v7
• Update dependency puma to v8
• Update dependency rails to v8
• Update dependency ruby to v4
• Update dependency sass-migrator to v2
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency @hotwired/turbo-rails to v8
• Update dependency choices.js to v11

Detected Dependencies

bundler (1)

Gemfile (32)

• ruby 3.2.2 → [Updates: 3.4.10, 4.0.7]
• rails '~> 7.0.2', '>= 7.0.2.2' → [Updates: '~> 7.2.0', '>= 7.2.3.2', '~> 8.1.0', '>= 8.1.3.1']
• sprockets-rails lock file @ 3.5.2
• puma '~> 6.0' → [Updates: '~> 8.0']
• jsbundling-rails lock file @ 1.1.2
• turbo-rails lock file @ 1.4.0
• stimulus-rails lock file @ 1.3.4
• jbuilder lock file @ 2.11.5
• bootsnap lock file @ 1.26.0
• cssbundling-rails '>= 0.2.4'
• faraday lock file @ 2.7.10
• pagy lock file @ 6.0.4
• wicked lock file @ 2.0.0
• countries lock file @ 5.6.0
• wicked_pdf lock file @ 2.7.0
• wkhtmltopdf-binary '~> 0.12.6.5'
• omniauth '>=2.0.0'
• omniauth-rails_csrf_protection lock file @ 1.0.1
• coderay '~> 1.1', '>= 1.1.2'
• debug lock file @ 1.11.1
• rspec-rails lock file @ 6.0.3
• brakeman lock file @ 6.0.1
• web-console lock file @ 4.2.1
• capybara lock file @ 3.40.0
• capybara-screenshot lock file @ 1.0.26
• faker lock file @ 3.8.0
• fuubar lock file @ 2.5.1
• selenium-webdriver lock file @ 4.44.0
• simplecov '0.22.0' → [Updates: '1.3.0']
• vcr lock file @ 6.4.0
• webmock lock file @ 3.26.4
• jwt lock file @ 2.7.1

docker-compose (1)

docker-compose.yml

github-actions (6)

.github/workflows/auto-merge.yml (4)

• actions/checkout v6 → [Updates: v7]
• hmarr/auto-approve-action v3 → [Updates: v4.0.0]
• dependabot/fetch-metadata v1 → [Updates: v3]
• lewagon/wait-on-check-action v1.8.0 → [Updates: v1.9.1]

.github/workflows/deploy-complete.yml (1)

• actions/github-script v8 → [Updates: v9]

.github/workflows/deploy-pr-staging.yml (4)

• actions/checkout v6 → [Updates: v7]
• aws-actions/configure-aws-credentials v6
• actions/create-github-app-token v3
• peter-evans/repository-dispatch v3 → [Updates: v4]

.github/workflows/manual-destroy-staging.yml (2)

• actions/create-github-app-token v3
• peter-evans/repository-dispatch v3 → [Updates: v4]

.github/workflows/pr-merged-mattermost.yml

.github/workflows/ruby.yml (8)

• actions/checkout v6 → [Updates: v7]
• ruby/setup-ruby v1
• actions/upload-artifact v7
• actions/checkout v6 → [Updates: v7]
• ruby/setup-ruby v1
• actions/download-artifact v8
• qltysh/qlty-action v2
• ubuntu 24.04

npm (1)

package.json (16)

• @fortawesome/fontawesome-free 5.15.4 → [Updates: 7.3.1]
• @hotwired/stimulus ^3.0.1
• @hotwired/turbo-rails ^7.1.0 → [Updates: ^8.0.0]
• choices.js ^10.2.0 → [Updates: ^11.0.0]
• epic-spinners ^2.0.0
• esbuild ^0.28.2
• esbuild-rails ^1.0.8
• flatpickr ^4.6.3
• highcharts ^10.2.0 → [Updates: ^13.0.0]
• popper.js ^1.16.0
• sass ^1.104.0
• sass-migrator ^1.5.6 → [Updates: ^2.0.0]
• tippy.js ^6.3.7
• vanilla-cookieconsent ^2.9.2 → [Updates: ^3.0.0]
• core-js ^3.50.0
• regenerator-runtime ^0.14.1

ruby-version (1)

.ruby-version

---

• Check this box to trigger a request for Renovate to run again on this repository