Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency @types/node to v25.9.7
• chore(deps): update dependency electron to v42.11.4
• chore(deps): update dependency esbuild to v0.28.2
• chore(deps): update dependency fast-uri to v3.1.8
• chore(deps): update dependency simple-keyboard to v3.8.189
• chore(deps): update dependency undici to v7.29.1
• chore(deps): update dependency browserslist to ~4.29.0
• chore(deps): update dependency ip-address to v10.7.2
• chore(deps): update dependency vite to v8.3.0
• chore(deps): update docker/build-push-action action to v7.4.0
• chore(deps): update docker/setup-buildx-action action to v4.4.1
• chore(deps): update docker/setup-qemu-action action to v4.4.0
• chore(deps): update dependency electron to v44
• chore(deps): update dependency fast-uri to v4
• chore(deps): update dependency js-yaml to v5
• chore(deps): update dependency jsdom to v30
• chore(deps): update dependency node to v24
• chore(deps): update dependency typescript to v7
• chore(deps): update dependency undici to v8
• chore(deps): update eslint monorepo to v10 (@eslint/js, eslint)
• chore(deps): update softprops/action-gh-release action to v3
• chore(deps): update vitest monorepo to v5 (@vitest/coverage-v8, vitest)
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update node.js to 0b36e8c
• chore(deps): update postgres:16-alpine docker digest to 721873c
• chore(deps): update python:3.14-slim docker digest to caaf356
• chore(deps): update dependency next to v16.3.6
• chore(deps): update dependency tsx to v4.23.15
• chore(deps): update github/codeql-action action to v4.38.1
• chore(deps): update dependency eslint to v10.11.0
• chore(deps): update nginx docker tag to v1.31
• chore(deps): update postgres docker tag to v18

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update typescript-eslint monorepo to v8.70.0 (@typescript-eslint/eslint-plugin, @typescript-eslint/parser)
• fix(deps): update dependency alphatheta-connect to v0.26.1
• fix(deps): update dependency metadata-connect to v1.2.2
• fix(deps): update dependency stagelinq to v3.5.5
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-node action to v7
• chore(deps): update actions/setup-python action to v7
• chore(deps): update codecov/codecov-action action to v7
• chore(deps): update dependency @babel/core to v8
• chore(deps): update dependency @testing-library/jest-dom to v7
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update dependency onelibrary-connect to v1.1.5

Detected Dependencies

docker-compose (4)

deploy/dev-proxy/docker-compose.yml (1)

• nginx 1.29-alpine@sha256:5616878291a2eed594aee8db4dade5878cf7edcb475e59193904b198d9b830de → [Updates: 1.31-alpine]

deploy/docker-compose.ghcr.yml (1)

• postgres 16-alpine@sha256:cf78e76683b9ca8c5733cbbdce6c9262b45b6767934dd0a95e671f9a0fc20685 → [Updates: 18-alpine, 16-alpine]

deploy/docker-compose.yml (1)

• postgres 16-alpine@sha256:cf78e76683b9ca8c5733cbbdce6c9262b45b6767934dd0a95e671f9a0fc20685 → [Updates: 18-alpine, 16-alpine]

docker-compose.yml (1)

• postgres 16-alpine@sha256:cf78e76683b9ca8c5733cbbdce6c9262b45b6767934dd0a95e671f9a0fc20685 → [Updates: 18-alpine, 16-alpine]

dockerfile (3)

bridge/Dockerfile (1)

• node 26-alpine@sha256:2d984a15c9b54fd0aeb608b8e0d0d83529eb34d2966db27a1fb4f1edc3d298a3 → [Updates: 26-alpine]

dashboard/Dockerfile (1)

• node 26-alpine@sha256:ef24c5053d50fdc3e4e56eb4e7ddb7861874ab0fdc797046ba897581deb8e868 → [Updates: 26-alpine]

server/Dockerfile (1)

• python 3.14-slim@sha256:cad9a2c871761c413caa6fdd6441c783451e740a48aaeba60ae62a8b53525ef6 → [Updates: 3.14-slim]

github-actions (8)

.github/workflows/ci.yml (21)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• codecov/codecov-action v6.0.2@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7.1.0]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• docker/setup-buildx-action v4.3.0@37fe631027851001ddb9b187196cc803df7f5f0e → [Updates: v4.4.1]
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a → [Updates: v7.4.0]
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a → [Updates: v7.4.0]
• postgres 16 → [Updates: 18]
• python 3.14
• node 22 → [Updates: 24]
• node 22 → [Updates: 24]
• node 22 → [Updates: 24]
• python 3.14

.github/workflows/codeql.yml (4)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63 → [Updates: v4.38.1]
• github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63 → [Updates: v4.38.1]
• github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63 → [Updates: v4.38.1]

.github/workflows/dependency-health.yml (10)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• node 22 → [Updates: 24]
• node 22 → [Updates: 24]
• node 22 → [Updates: 24]

.github/workflows/docker-publish.yml (12)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• docker/setup-qemu-action v4.3.0@1f40c72289eff860ee54a304f1438e3cff362e0a → [Updates: v4.4.0]
• docker/setup-buildx-action v4.3.0@37fe631027851001ddb9b187196cc803df7f5f0e → [Updates: v4.4.1]
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a → [Updates: v7.4.0]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• docker/setup-qemu-action v4.3.0@1f40c72289eff860ee54a304f1438e3cff362e0a → [Updates: v4.4.0]
• docker/setup-buildx-action v4.3.0@37fe631027851001ddb9b187196cc803df7f5f0e → [Updates: v4.4.1]
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a → [Updates: v7.4.0]

.github/workflows/release.yml (11)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• softprops/action-gh-release v2@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 → [Updates: v3]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• node 22 → [Updates: 24]

.github/workflows/scorecard.yml (3)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63 → [Updates: v4.38.1]

.github/workflows/trivy.yml (5)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• docker/setup-buildx-action v4.3.0@37fe631027851001ddb9b187196cc803df7f5f0e → [Updates: v4.4.1]
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a → [Updates: v7.4.0]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63 → [Updates: v4.38.1]

.github/workflows/winget-scripts-test.yml (2)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]

npm (3)

bridge-app/package.json (36)

• alphatheta-connect 0.15.0 → [Updates: 0.26.1]
• electron-squirrel-startup ^1.0.1
• electron-store ^11.0.2
• stagelinq 3.0.4 → [Updates: 3.5.5]
• @electron-forge/cli ^7.6.0
• @electron-forge/maker-dmg ^7.6.0
• @electron-forge/maker-squirrel ^7.6.0
• @electron-forge/maker-zip ^7.11.1
• @electron-forge/plugin-auto-unpack-natives ^7.6.0
• @electron-forge/plugin-vite ^7.6.0
• @reforged/maker-appimage ^5.2.0
• @testing-library/jest-dom ^6.4.0 → [Updates: ^7.0.0]
• @testing-library/react ^16.3.2
• @types/react ^19.2.14
• @types/react-dom ^19.2.3
• @vitejs/plugin-react ^6.0.1
• @vitest/coverage-v8 ^4.1.6 → [Updates: ^5.0.0]
• electron ^42.0.1 → [Updates: ^42.0.1, ^44.0.0]
• eslint ^10.3.0 → [Updates: ^10.3.0]
• jsdom ^29.1.1 → [Updates: ^30.0.0]
• react ^19.2.6
• react-dom ^19.2.6
• typescript ^6.0.3 → [Updates: ^7.0.0]
• vitest ^4.1.11 → [Updates: ^5.0.0]
• node >=22.0.0
• fast-uri ^3.1.7 → [Updates: ^3.1.7, ^4.0.0]
• tar ^7.5.18
• tmp ^0.2.7
• @tootallnate/once ^3.0.1
• ip ^2.0.1
• ip-address ^10.1.1 → [Updates: ^10.1.1]
• postcss ^8.5.23
• lodash ^4.18.1
• @xmldom/xmldom ^0.9.0
• vite ^8.0.16 → [Updates: ^8.0.16]
• undici ^7.29.0 → [Updates: ^7.29.0, ^8.0.0]

bridge/package.json (15)

• alphatheta-connect 0.21.1 → [Updates: 0.26.1]
• metadata-connect 1.1.10 → [Updates: 1.2.2]
• onelibrary-connect 1.1.1 → [Updates: 1.1.5]
• stagelinq 3.0.4 → [Updates: 3.5.5]
• @types/node ^25.7.0 → [Updates: ^25.7.0]
• @vitest/coverage-v8 ^4.1.6 → [Updates: ^5.0.0]
• tsx ^4.0.0 → [Updates: ^4.0.0]
• typescript ^6.0.3 → [Updates: ^7.0.0]
• vitest ^4.0.0 → [Updates: ^5.0.0]
• node >=22.0.0
• ip ^2.0.1
• ip-address ^10.1.1 → [Updates: ^10.1.1]
• lodash ^4.18.1
• vite ^8.0.16
• esbuild ^0.28.1 → [Updates: ^0.28.1]

dashboard/package.json (30)

• @thumbmarkjs/thumbmarkjs ^1.9.0
• next ^16.3.4 → [Updates: ^16.3.4]
• qrcode.react ^4.2.0
• react ^19.2.6
• react-dom ^19.2.6
• simple-keyboard ^3.8.141 → [Updates: ^3.8.141]
• @eslint/js ^9.39.2 → [Updates: ^10.0.0]
• @playwright/test ^1.60.0
• @testing-library/jest-dom ^6.4.0 → [Updates: ^7.0.0]
• @testing-library/react ^16.3.2
• @types/node ^25 → [Updates: ^25]
• @types/react ^19.2.14
• @types/react-dom ^19.2.3
• @typescript-eslint/eslint-plugin ^8.59.3 → [Updates: ^8.59.3]
• @typescript-eslint/parser ^8.54.0 → [Updates: ^8.54.0]
• @vitest/coverage-v8 ^4.1.6 → [Updates: ^5.0.0]
• eslint ^9.39.4 → [Updates: ^10.0.0]
• eslint-plugin-react ^7.37.5
• eslint-plugin-react-hooks ^7.1.1
• globals ^17.6.0
• jsdom ^29.1.1 → [Updates: ^30.0.0]
• openapi-typescript ^7.13.0
• typescript ^5 → [Updates: ^7.0.0]
• vitest ^4.0.18 → [Updates: ^5.0.0]
• postcss ^8.5.10
• vite ^8.0.16
• js-yaml ^4.3.2 → [Updates: ^5.0.0]
• @babel/core ^7.29.6 → [Updates: ^8.0.0]
• undici ^7.29.0 → [Updates: ^7.29.0, ^8.0.0]
• browserslist ~4.28.9 → [Updates: ~4.29.0]

pep621 (1)

server/pyproject.toml (45)

• python >=3.11
• fastapi >=0.133.0
• uvicorn >=0.27.0
• sqlalchemy >=2.0.0
• alembic >=1.13.0
• psycopg >=3.1.0
• pydantic >=2.0.0
• pydantic-settings >=2.14.2
• bcrypt >=4.0.0
• httpx >=0.26.0
• anyio >=4.14.2
• python-multipart >=0.0.31
• spotipy >=2.23.0
• slowapi >=0.1.9
• tidalapi >=0.7.0
• Pillow >=12.3.0
• cryptography >=50.0.0
• PyJWT >=2.13.0
• aiohttp >=3.14.3
• requests >=2.33.0
• python-dotenv >=1.2.2
• mako >=1.3.12
• pyasn1 >=0.6.4
• idna >=3.15
• urllib3 >=2.7.0
• anthropic >=0.40.0
• resend >=2.0.0
• better-profanity >=0.7.0
• sse-starlette >=2.0.0
• starlette >=1.3.1
• python-json-logger >=3.0
• coolname ==5.0.0
• ruff >=0.1.0
• pytest >=9.0.3
• pytest-asyncio >=0.24.0
• pytest-cov >=4.1.0
• pytest-xdist >=3.6.0
• bandit >=1.7.0
• pip-audit >=2.6.0
• freezegun >=1.2.0
• pygments >=2.20.0
• msgpack >=1.2.1
• pip >=26.1.2
• setuptools >=83.0.0
• setuptools >=83.0.0

---

• Check this box to trigger a request for Renovate to run again on this repository