Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Base branch does not exist - skipping
• ⚠️ WARN: Detected empty commit - aborting git push

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (7)

Datasource	Package	Last Updated
cargo	dotenvy	2023-03-22
cargo	mime_guess	2024-06-29
cargo	tower_governor	2025-08-14
npm	change-case	2024-04-03
npm	clsx	2024-04-23
npm	qrcode.react	2024-12-11
npm	react-markdown	2025-03-07

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Pin dependencies (dev) (debian, public.ecr.aws/docker/library/node, rust)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Security patches (dev)
• Update frontend dependencies (dev) (@biomejs/biome, @inlang/paraglide-js, @tanstack/devtools-vite, @tanstack/react-devtools, @tanstack/react-router, @tanstack/router-plugin, @types/lodash-es, @types/node, @types/qs, @types/react, @types/react-dom, @vitejs/plugin-react-swc, globals, prettier, react, react-dom, sass, seroval, sharp, stylelint, stylelint-config-standard-scss, stylelint-scss, typescript, typescript-eslint, vite, vite-plugin-image-optimizer, vitest, zod)
• Update github actions (dev) (actions/checkout, actions/setup-node, aquasecurity/trivy-action, docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action, dtolnay/rust-toolchain, mozilla-actions/sccache-action, pnpm/action-setup, shogo82148/actions-create-release, shogo82148/actions-upload-release-asset, taiki-e/install-action)
• Update rust dependencies (dev) (reqwest, tokio)
• Update actions/setup-node action to v7 (dev)
• Update frontend dependencies (dev) (major) (motion, typescript, vite)
• Lock file maintenance (dev)
• Lock file maintenance (dev)
• Security patches (stable/1.x) (ammonia, anyhow, axios, qs, sharp, vite)
• Security patches (stable/2.0.x) (pnpm, qs, rustls, sharp)
• Security patches (stable/2.x) (pnpm, rustls, sharp)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

Branch dev

cargo (1)

Cargo.toml (42)

• defguard_certs d80302d6841e107e09825e9e21507bca515663e6 → [Updates: ``]
• defguard_grpc_tls d80302d6841e107e09825e9e21507bca515663e6 → [Updates: ``]
• defguard_version d80302d6841e107e09825e9e21507bca515663e6 → [Updates: ``]
• rustls-webpki 0.103
• rustls-pki-types 1
• axum 0.8
• axum-client-ip 1.3
• axum-extra 0.12
• axum-server 0.8
• cookie 0.18.1
• time 0.3
• tokio 1
• tokio-stream 0.1
• tower-http 0.7
• tracing 0.1
• tracing-subscriber 0.3
• log 0.4
• serde 1.0
• serde_json 1.0
• toml 1.0
• prost 0.14
• tonic 0.14
• tonic-prost 0.14
• thiserror 2.0
• anyhow 1.0
• clap 4.6
• dotenvy 0.15
• url 2.5
• tower_governor 0.8
• rust-embed 8.5
• mime_guess 2.0
• base64 0.23
• tower 0.5
• futures-util 0.3
• ammonia 4.1
• chrono 0.4
• rustls 0.23
• instant-acme 0.8
• reqwest 0.12 → [Updates: 0.13]
• tokio 1 → [Updates: =1.53.1]
• tonic-prost-build 0.14
• vergen-git2 10.0

dockerfile (1)

Dockerfile (3)

• public.ecr.aws/docker/library/node 26-alpine → [Updates: 26-alpine]
• rust 1 → [Updates: 1]
• debian 13-slim → [Updates: 13-slim]

github-actions (9)

.github/workflows/build-docker.yml (8)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.6.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.3.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 → [Updates: v0.36.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.6.0]

.github/workflows/lint-web.yml (4)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• pnpm/action-setup v6.0.9@008330803749db0355799c700092d9a85fd074e9 → [Updates: v6.1.0, v6.0.9]
• node 26

.github/workflows/publish-docker-latest.yml (3)

• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.6.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.3.0]

.github/workflows/release.yml (30)

• shogo82148/actions-create-release v1.9.0@6a396031bc74c57403da1018fec74d24c6aa03cd → [Updates: v1.9.1]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• pnpm/action-setup v6.0.9@008330803749db0355799c700092d9a85fd074e9 → [Updates: v6.1.0, v6.0.9]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.4]
• dtolnay/rust-toolchain stable@29eef336d9b2848a0b548edc03f92a220660cdb8 → [Updates: stable]
• mozilla-actions/sccache-action v0.0.10@1583d6b38d7be47f593cb472781bbb21cab4321e → [Updates: v0.0.11, v0.0.10]
• defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c
• defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c
• defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c
• defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c
• defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.4]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.4]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.4]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.4]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.4]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.4]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.4]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.4]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• pnpm/action-setup v6.0.9@008330803749db0355799c700092d9a85fd074e9 → [Updates: v6.1.0, v6.0.9]
• dtolnay/rust-toolchain stable@29eef336d9b2848a0b548edc03f92a220660cdb8 → [Updates: stable]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.4]
• node 26
• rust stable
• ubuntu 22.04 → [Updates: 26.04, 22.04]
• node 26
• rust stable

.github/workflows/sbom-regenerate.yml

.github/workflows/sbom.yml (6)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 → [Updates: v0.36.0]
• aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 → [Updates: v0.36.0]
• aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 → [Updates: v0.36.0]
• aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 → [Updates: v0.36.0]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3 → [Updates: v1.10.4]

.github/workflows/test-web.yml (4)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• pnpm/action-setup v6.0.9@008330803749db0355799c700092d9a85fd074e9 → [Updates: v6.1.0, v6.0.9]
• node 26

.github/workflows/test.yml (5)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 → [Updates: v0.36.0]
• mozilla-actions/sccache-action v0.0.10@1583d6b38d7be47f593cb472781bbb21cab4321e → [Updates: v0.0.11, v0.0.10]
• taiki-e/install-action v2.82.2@9e1e5806d4a4822de933115878265be9aaa786d9 → [Updates: v2.87.10]
• public.ecr.aws/docker/library/rust 1 → [Updates: 1]

.github/workflows/update-repositories.yml (1)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]

npm (4)

package.json (2)

• @tanstack/devtools-vite ^0.3.12 → [Updates: 0.3.12, ^0.8.0]
• pnpm 11.9.0 → [Updates: 11.11.0]

pnpm-workspace.yaml

web/package.json (47)

• @axa-ch/react-polymorphic-types ^1.4.2
• @floating-ui/react ^0.27.20
• @inlang/paraglide-js ^2.25.0 → [Updates: ^2.25.0]
• @tanstack/react-devtools ^0.9.13 → [Updates: ^0.10.0]
• @tanstack/react-form ^1.33.5
• @tanstack/react-query ^5.102.8 → [Updates: ^5.102.8]
• @tanstack/react-query-devtools ^5.102.8 → [Updates: ^5.102.8]
• @tanstack/react-router ^1.170.33 → [Updates: ^1.170.33]
• @tanstack/react-router-devtools ^1.167.1 → [Updates: ^1.167.1]
• @uidotdev/usehooks ^2.4.1
• axios ^1.20.0
• change-case ^5.4.4
• clsx ^2.1.1
• dayjs ^1.11.23
• lodash-es ^4.18.1
• motion ^12.43.0 → [Updates: ^13.0.0]
• qrcode.react ^4.2.0
• qs ^6.16.0
• react ^19.2.8 → [Updates: ^19.2.8]
• react-dom ^19.2.8 → [Updates: ^19.2.8]
• react-markdown ^10.1.0
• rxjs ^7.8.2
• zod ^4.5.4 → [Updates: ^4.5.4]
• zustand ^5.0.15
• @biomejs/biome 2.5.12 → [Updates: 2.5.13]
• @inlang/paraglide-js 2.15.1 → [Updates: 2.25.1]
• @tanstack/devtools-vite ^0.5.5 → [Updates: 0.5.5, ^0.8.0]
• @tanstack/router-plugin ^1.168.36 → [Updates: 1.168.36, ^1.168.36]
• @types/lodash-es ^4.17.12 → [Updates: 4.17.12]
• @types/node ^25.9.5 → [Updates: 25.9.5, ^25.9.5]
• @types/qs ^6.15.1 → [Updates: 6.15.1]
• @types/react ^19.2.18 → [Updates: 19.2.18, ^19.3.0]
• @types/react-dom ^19.2.7 → [Updates: 19.2.7, ^19.3.0]
• @vitejs/plugin-react-swc ^4.3.3 → [Updates: 4.3.3]
• globals ^17.12.0 → [Updates: 17.12.0]
• prettier ^3.9.6 → [Updates: 3.9.6, ^3.9.6]
• sass ^1.104.0 → [Updates: 1.104.0]
• sharp ^0.35.4 → [Updates: 0.35.4]
• stylelint ^17.15.0 → [Updates: 17.15.0]
• stylelint-config-standard-scss ^17.0.0 → [Updates: 17.0.0]
• stylelint-scss ^7.2.0 → [Updates: 7.2.0, ^7.2.0]
• typescript ~5.9.3 → [Updates: 5.9.3, ~7.0.0]
• typescript-eslint ^8.69.0 → [Updates: 8.69.0, ^8.69.0]
• vite ^7.3.6 → [Updates: 7.3.6, ^8.0.0]
• vite-plugin-image-optimizer ^2.0.3 → [Updates: 2.0.3]
• vitest ^5.0.0 → [Updates: 5.0.0, ^5.0.0]
• pnpm 11.9.0 → [Updates: 11.11.0]

web/pnpm-workspace.yaml (1)

• seroval 1.5.4 → [Updates: 1.6.7]

nvm (1)

web/.nvmrc (1)

• node v26

renovate-config (1)

renovate.json

Branch stable/1.x

cargo (1)

Cargo.toml (2)

• anyhow 1.0 → [Updates: 1.0]
• ammonia 4.1.1 → [Updates: 4.1.1]

dockerfile (1)

Dockerfile

github-actions (7)

.github/workflows/build-docker.yml

.github/workflows/lint-web.yml

.github/workflows/release.yml

.github/workflows/sbom-regenerate.yml

.github/workflows/sbom.yml

.github/workflows/test.yml

.github/workflows/update-repositories.yml

npm (4)

package.json

pnpm-workspace.yaml

web/package.json (4)

• axios ^1.15.0 → [Updates: ^1.15.0]
• qs ^6.15.1 → [Updates: ^6.15.1]
• sharp ^0.34.5 → [Updates: ^0.35.0]
• vite ^7.3.2 → [Updates: ^7.3.2]

web/pnpm-workspace.yaml

Branch stable/2.0.x

cargo (1)

Cargo.toml (1)

• rustls 0.23 → [Updates: 0.23]

dockerfile (1)

Dockerfile

github-actions (8)

.github/workflows/build-docker.yml

.github/workflows/lint-web.yml

.github/workflows/publish-docker-latest.yml

.github/workflows/release.yml

.github/workflows/sbom-regenerate.yml

.github/workflows/sbom.yml

.github/workflows/test.yml

.github/workflows/update-repositories.yml

npm (4)

package.json (1)

• pnpm 11.9.0 → [Updates: 11.11.0]

pnpm-workspace.yaml

web/package.json (3)

• qs ^6.15.3 → [Updates: ^6.15.3]
• sharp ^0.35.0 → [Updates: ^0.35.0]
• pnpm 11.9.0 → [Updates: 11.11.0]

web/pnpm-workspace.yaml

renovate-config (1)

renovate.json

Branch stable/2.x

cargo (1)

Cargo.toml (1)

• rustls 0.23 → [Updates: 0.23]

dockerfile (1)

Dockerfile

github-actions (8)

.github/workflows/build-docker.yml

.github/workflows/lint-web.yml

.github/workflows/publish-docker-latest.yml

.github/workflows/release.yml

.github/workflows/sbom-regenerate.yml

.github/workflows/sbom.yml

.github/workflows/test.yml

.github/workflows/update-repositories.yml

npm (4)

package.json (1)

• pnpm 11.9.0 → [Updates: 11.11.0]

pnpm-workspace.yaml

web/package.json (2)

• sharp ^0.35.0 → [Updates: ^0.35.0]
• pnpm 11.9.0 → [Updates: 11.11.0]

web/pnpm-workspace.yaml

nvm (1)

web/.nvmrc

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository