Dependency Dashboard

[balena-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
npm	openvpn-client
npm	request
npm	request-promise

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Lock file maintenance

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency @opentelemetry/instrumentation-express to v0.61.0
• Update dependency @opentelemetry/instrumentation-http to v0.213.0
• Update dependency @opentelemetry/sdk-node to v0.213.0
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency telnet-client to v2
• Update dependency nock to v14
• Update express to v5 (major) (@types/express, express)

Detected Dependencies

cargo (1)

auth/Cargo.toml (1)

• ureq 3.0.8

docker-compose (1)

docker-compose.test.yml

dockerfile (1)

Dockerfile (3)

• balena/open-balena-base 21.0.1-s6-overlay
• rust 1-trixie
• golang 1.26.1

github-actions (1)

.github/workflows/flowzone.yml (1)

• product-os/flowzone master

npm (1)

package.json (51)

• @balena/env-parsing ^1.2.6
• @balena/es-version ^1.0.3
• @balena/node-metrics-gatherer ^6.1.2
• @opentelemetry/api ^1.9.0
• @opentelemetry/instrumentation-express 0.57.1 → [Updates: 0.61.0]
• @opentelemetry/instrumentation-http 0.208.0 → [Updates: 0.213.0]
• @opentelemetry/sdk-node 0.208.0 → [Updates: 0.213.0]
• @sentry/node ^10.32.1
• body-parser ^2.2.1
• compression ^1.8.1
• eventemitter3 ^5.0.1
• express ^4.22.1 → [Updates: ^5.0.0]
• memoizee ^0.4.17
• morgan ^1.10.1
• netmask ^2.0.2
• node-tunnel ^4.0.8
• p-timeout ^7.0.1
• pinejs-client-request ^8.1.1
• request ^2.88.2
• request-promise ^4.2.6
• split ^1.0.1
• telnet-client ^1.4.11 → [Updates: ^2.0.0]
• typed-error ^3.2.2
• winston ^3.19.0
• @balena/lint ^9.3.12
• @swc-node/register ^1.11.1
• @swc/core ^1.15.7
• @types/bluebird ^3.5.42
• @types/chai ^5.2.3
• @types/chai-as-promised ^8.0.2
• @types/compression ^1.8.1
• @types/express ^4.17.25 → [Updates: ^5.0.0]
• @types/memoizee ^0.4.12
• @types/mocha ^10.0.10
• @types/morgan ^1.9.10
• @types/netmask ^2.0.6
• @types/node ^24.10.4
• @types/request-promise ^4.1.51
• @types/split ^1.0.5
• balena-sdk ^23.0.0
• bluebird ^3.7.2
• chai ^6.2.2
• chai-as-promised ^8.0.2
• husky ^9.1.7
• lint-staged ^16.2.7
• mocha ^11.7.5
• nock ^13.5.6 → [Updates: ^14.0.0]
• openvpn-client 0.0.2
• typescript ^5.9.3
• node ^24.5.0
• npm ^11.5.2

regex (1)

Dockerfile (3)

• debian_13/openvpn 2.6.14-1+deb13u1
• debian_13/haproxy 3.0.11-1+deb13u2
• debian_13/openvpn 2.6.14-1+deb13u1