🚀 Dependency Updates

[hash-worker]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
npm	@apollo/server-plugin-landing-page-graphql-playground
npm	@handsontable/react
npm	@types/app-root-path
npm	@types/react-window
npm	framer-motion
npm	lodash.isequal
npm	react-beautiful-dnd

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Replace npm package framer-motion with motion
• Update express npm packages (@types/express, express)
• Update libp2p npm packages (@libp2p/crypto, @libp2p/identify, @libp2p/interface, @libp2p/ping, @libp2p/tcp, libp2p)
• Update lodash npm packages (@types/lodash, lodash-es)
• Update prosemirror npm packages (prosemirror-collab, prosemirror-commands, prosemirror-dropcursor, prosemirror-inputrules, prosemirror-keymap, prosemirror-state, prosemirror-transform)
• Update babel monorepo to v7.28.5 (@babel/core, @babel/eslint-parser, @babel/plugin-transform-typescript, @babel/preset-env, @babel/preset-react)
• Update npm package @ai-sdk/openai to v2.0.89
• Update npm package @changesets/changelog-github to v0.5.2
• Update npm package @figma/code-connect to v1.3.12
• Update npm package @keyv/redis to v5.1.5
• Update npm package @mantine/hooks to v8.3.10
• Update npm package @mastra/core to v1.0.0-beta.19
• Update npm package @mastra/evals to v1.0.0-beta.3
• Update npm package @mastra/libsql to v1.0.0-beta.10
• Update npm package @mastra/mcp to v1.0.0-beta.7
• Update npm package @mastra/memory to v1.0.0-beta.10
• Update npm package @mastra/observability to v1.0.0-beta.9
• Update npm package @multiformats/dns to v1.0.11
• Update npm package @optique/core to v0.8.6
• Update npm package @ory/client to v1.22.15
• Update npm package @pmmmwh/react-refresh-webpack-plugin to v0.6.2
• Update npm package @rudderstack/rudder-sdk-node to v2.1.11
• Update npm package @sinclair/typebox to v0.34.46
• Update npm package @smithy/protocol-http to v5.3.7
• Update npm package @smithy/signature-v4 to v5.3.7
• Update npm package @types/google.picker to v0.0.52
• Update npm package @types/mailchimp__mailchimp_marketing to v3.0.22
• Update npm package @types/yargs to v17.0.35
• Update npm package ai to v5.0.117
• Update npm package artillery to v2.0.27
• Update npm package clipboardy to v5.0.2
• Update npm package dedent to v1.7.1
• Update npm package envalid to v8.1.1
• Update npm package execa to v9.6.1
• Update npm package fs-extra to v11.3.3
• Update npm package html-webpack-plugin to v5.6.5
• Update npm package jsondiffpatch to v0.7.3
• Update npm package keyv to v5.5.5
• Update npm package lefthook to v2.0.13
• Update npm package mastra to v1.0.0-beta.12
• Update npm package motion to v12.23.26
• Update npm package multiformats to v13.4.2
• Update npm package oembed-providers to v1.0.20251201
• Update npm package pdf2json to v3.2.2
• Update npm package terser-webpack-plugin to v5.3.16
• Update npm package wait-on to v9.0.3
• Update npm package zustand to v5.0.9
• Update storybook monorepo to v9.1.17 (@storybook/addon-docs, @storybook/react, @storybook/react-vite)
• Update effect npm packages (@effect/cluster, @effect/experimental, @effect/platform, @effect/platform-node, @effect/rpc, @effect/sql, effect)
• Update graphql npm packages (graphql, graphql-scalars)
• Update opentelemetry npm packages (@opentelemetry/api-logs, @opentelemetry/exporter-logs-otlp-grpc, @opentelemetry/exporter-trace-otlp-grpc, @opentelemetry/instrumentation, @opentelemetry/instrumentation-express, @opentelemetry/instrumentation-graphql, @opentelemetry/instrumentation-http, @opentelemetry/sdk-logs, @opentelemetry/sdk-node, @opentelemetry/semantic-conventions)
• Update sentry npm packages (@sentry/browser, @sentry/nextjs, @sentry/node, @sentry/react, @sentry/webpack-plugin)
• Update Apollo GraphQL packages (@apollo/client, @apollo/server)
• Update aws-sdk-js-v3 monorepo to v3.962.0 (@aws-sdk/client-s3, @aws-sdk/client-sesv2, @aws-sdk/credential-provider-node, @aws-sdk/s3-presigned-post, @aws-sdk/s3-request-presigner)
• Update Docker tag debian to v12.12
• Update Docker tag grafana/grafana to v12.3.1
• Update Docker tag grafana/loki to v3.6.3
• Update Docker tag grafana/mimir to v2.17.4
• Update Docker tag grafana/pyroscope to v1.17.0
• Update Docker tag grafana/tempo to v2.9.0
• Update Docker tag oryd/hydra to v2.3.0
• Update Docker tag oryd/kratos to v1.3.1
• Update Docker tag otel/opentelemetry-collector-contrib to v0.142.0
• Update Docker tag postgres to v13.23
• Update npm package @ark-ui/react to v5.30.0
• Update npm package @google-cloud/storage to v7.18.0
• Update npm package @handsontable/react to v16.2.0
• Update npm package @modelcontextprotocol/sdk to v1.25.1
• Update npm package @notionhq/client to v5.6.0
• Update npm package @openapitools/openapi-generator-cli to v2.27.0
• Update npm package @pandacss/dev to v1.7.3
• Update npm package @types/node to v22.19.3
• Update npm package @types/papaparse to v5.5.2
• Update npm package @vitejs/plugin-react to v5.1.2
• Update npm package axios to v1.13.2
• Update npm package bowser to v2.13.1
• Update npm package es-toolkit to v1.43.0
• Update npm package globals to v16.5.0
• Update npm package gpt-tokenizer to v3.4.0
• Update npm package immer to v10.2.0
• Update npm package lucide-react to v0.562.0
• Update npm package openai to v6.15.0
• Update npm package react-hook-form to v7.69.0
• Update npm package react-virtuoso to v4.18.1
• Update npm package redis to v5.10.0
• Update npm package rooks to v9.5.0
• Update npm package sass to v1.97.1
• Update npm package sort-package-json to v3.6.0
• Update npm package tsx to v4.21.0
• Update npm package type-fest to v5.3.1
• Update npm package vite to v7.3.0
• Update npm package web-worker to v1.5.0
• Update npm package webpack to v5.104.1
• Update npm package winston to v3.19.0
• Update npm package zod-to-json-schema to v3.25.1
• Update npm package zod to v4.3.4
• Update Terraform cloudflare to v5.15.0
• Update Terraform postgresql to v1.26.0
• Update ory npm packages to v25 (major) (@ory/hydra-client, @ory/kratos-client)
• Update Docker tag debian to v13
• Update Docker tag grafana/mimir to v3
• Update Docker tag oryd/hydra to v25
• Update Docker tag oryd/kratos to v25
• Update Docker tag postgres to v18
• Update Docker tag redis to v8
• Update Font Awesome to v7 (major) (@fortawesome/free-regular-svg-icons, @fortawesome/free-solid-svg-icons)
• Update graphqlcodegenerator monorepo (major) (@graphql-codegen/cli, @graphql-codegen/fragment-matcher, @graphql-codegen/introspection, @graphql-codegen/typescript, @graphql-codegen/typescript-graphql-request, @graphql-codegen/typescript-operations, @graphql-codegen/typescript-resolvers)
• Update material-ui monorepo to v7 (major) (@mui/icons-material, @mui/material, @mui/system)
• Update nextjs monorepo to v16 (major) (@next/bundle-analyzer, next)
• Update npm package @ai-sdk/openai to v3
• Update npm package @apollo/client to v4
• Update npm package @dnd-kit/sortable to v10
• Update npm package @graphql-tools/schema to v10
• Update npm package @linear/sdk to v68
• Update npm package @lit-labs/react to v2
• Update npm package @react-sigma/core to v5
• Update npm package @types/iframe-resizer to v4
• Update npm package @types/node to v24
• Update npm package @vercel/edge-config to v1
• Update npm package ai to v6
• Update npm package cache-manager to v7
• Update npm package copy-webpack-plugin to v13
• Update npm package css-loader to v7
• Update npm package dotenv-flow to v4
• Update npm package e2b to v2
• Update npm package echarts to v6
• Update npm package framer-motion to v12
• Update npm package globals to v17
• Update npm package globby to v16
• Update npm package googleapis to v169
• Update npm package graphql-request to v7
• Update npm package helmet to v8
• Update npm package hot-shots to v12
• Update npm package html-loader to v5
• Update npm package html-to-text to v9 (html-to-text, @types/html-to-text)
• Update npm package iframe-resizer to v5
• Update npm package immer to v11
• Update npm package is-docker to v4
• Update npm package jsdom to v27 (jsdom, @types/jsdom)
• Update npm package lit to v3
• Update npm package lowlight to v3
• Update npm package marked to v17
• Update npm package material-ui-popup-state to v5
• Update npm package mime-types to v3 (mime-types, @types/mime-types)
• Update npm package nanoid to v5
• Update npm package next-seo to v7
• Update npm package node-fetch to v3
• Update npm package nodemailer to v7.0.12 (nodemailer, @types/nodemailer)
• Update npm package notistack to v3
• Update npm package officeparser to v6
• Update npm package pdf2json to v4
• Update npm package prosemirror-dev-tools to v4
• Update npm package puppeteer to v24
• Update npm package quicktype to v23
• Update npm package react-pdf to v10
• Update npm package react-syntax-highlighter to v16
• Update npm package react-window to v2 (react-window, @types/react-window)
• Update npm package sass-loader to v16
• Update npm package slonik to v48
• Update npm package source-map-loader to v5
• Update npm package style-loader to v4
• Update npm package ts-json-schema-generator to v2
• Update Terraform aws to v6
• Update Terraform vault to v5
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update GitHub Action rtCamp/action-slack-notify to 2ca439b
• Update GitHub Action withgraphite/graphite-ci-action to ee395f3
• Update clap Rust crates to v4.5.54 (clap, clap_builder)
• Update GitHub Action codecov/codecov-action to v5.5.2
• Update GitHub Action github/codeql-action to v4.31.9
• Update Rust crate bumpalo to v3.19.1
• Update Rust crate proc-macro2 to v1.0.105
• Update Rust crate quote to v1.0.43
• Update Rust crate syn to v2.0.113
• Update Rust crate tokio-stream to v0.1.18
• Update Rust crate tokio-test to v0.4.5
• Update Rust crate tokio-util to v0.7.18
• Update Rust crate url to v2.5.8
• Update tool uv to v0.9.21
• Update eslint npm packages (eslint, eslint-config-sheriff, eslint-plugin-react-hooks, eslint-plugin-storybook)
• Update GitHub Action docker/setup-buildx-action to v3.12.0
• Update GitHub Action returntocorp/semgrep to v1.146.0
• Update npm package rollup to v4.54.0
• Update Rust crate allocator-api2 to 0.4.0
• Update Rust crate aws-sdk-s3 to v1.119.0
• Update Rust crate hifijson to 0.5.0
• Update Rust crate insta to v1.46.0
• Update Rust crate nextest-filtering to 0.18.0
• Update Rust crate nextest-metadata to 0.13.0
• Update Rust crate reqwest to 0.13.0
• Update Rust crate tarpc to v0.37.0
• Update Rust crate tokio to v1.49.0
• Update tool just to v1.46.0
• Update tool markdownlint-cli2 to v0.20.0
• Update tool npm:@redocly/cli to v2.14.3
• Update tool npm:renovate to v42.71.2
• Update tool npm:turbo to v2.7.3
• Update tool yq to v4.50.1
• Update GitHub Action actions/cache to v5
• Update GitHub Action actions/labeler to v6
• Update GitHub Action aws-actions/configure-aws-credentials to v5
• Update GitHub Action dawidd6/action-download-artifact to v12
• Update GitHub Artifact Actions (major) (actions/download-artifact, actions/upload-artifact)
• Update Rust crate utoipa to v5
• Update tool node to v24
• Update tool npm:@napi-rs/cli to v3
• Update tool protoc to v33

Edited/Blocked

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update npm package e2b to v0.16.2
• Update Rust crate logos to 0.16.0
• Update eslint npm packages (major) (eslint-config-sheriff, eslint-plugin-storybook)
• Update storybook monorepo to v10 (major) (@storybook/addon-docs, @storybook/react, @storybook/react-vite, storybook)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update npm package ws to v8.19.0
• Update npm package @rudderstack/rudder-sdk-node to v3

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (git-refs package https://github.com/google/tarpc).

Files affected: Cargo.toml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update Rust crate temporal-client to 12bc359
• Update Rust crate temporal-sdk-core-protos to 12bc359
• Update opentelemetry Rust crates (opentelemetry, opentelemetry-appender-tracing, opentelemetry-otlp, opentelemetry-semantic-conventions, opentelemetry_sdk, tracing-opentelemetry)
• Update npm package llamaindex to v0.12.1
• Update Rust crate cedar-policy-core to v4.8.2
• Update Rust crate oxc to 0.107.0
• Update temporalio-ts monorepo to v1.14.0 (@temporalio/activity, @temporalio/client, @temporalio/common, @temporalio/proto, @temporalio/worker, @temporalio/workflow)
• Update tool pipx:sqlfluff to v3.5.0
• Update napi Rust crates to v3 (major) (napi, napi-derive)
• Update vitest npm packages to v4 (major) (@vitest/coverage-istanbul, vitest)
• Update Rust crate scc to v3
• Update Rust toolchains to nightly-2026-01-05
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update npm package @eslint/eslintrc to v3.3.3
• Update npm package @types/nodemailer to v6.4.21
• Update tool java to v25.0.1+8.0.LTS
• Update Rust crate refinery to 0.9.0

Detected Dependencies

Note

Detected dependencies section has been truncated

cargo

apps/hash-graph/Cargo.toml

Cargo.toml

• allocator-api2 0.2.8
• annotate-snippets 0.12.8
• ansi-to-html 0.2.2
• anstream 0.6.21
• anstyle 1.0.13
• anstyle-lossy 1.1.4
• anstyle-svg 0.1.11
• async-scoped 0.9.0
• aws-config 1.8.10
• aws-sdk-s3 1.110.0
• aws-types 1.3.10
• axum 0.8.6
• axum-core 0.5.5
• bitvec 1.0.1
• bon 3.8.1
• bstr 1.12.1
• bumpalo 3.19.0
• bytes 1.10.1
• bytes-utils 0.1.4
• camino 1.1.12
• cargo_metadata 0.23.0
• cedar-policy-core 4.5.1
• circular-buffer 1.1.0
• clap 4.5.51
• clap_builder 4.5.51
• clap_complete 4.5.60
• console_error_panic_hook 0.1.7
• convert_case 0.10.0
• criterion 0.8.0
• criterion-macro 0.4.0
• dashu-base 0.4.1
• dashu-float 0.4.3
• deadpool 0.12.3
• deadpool-postgres 0.14.1
• derive-where 1.6.0
• derive_more 2.0.1
• dotenv-flow 0.16.2
• either 1.15.0
• email_address 0.2.9
• ena 0.14.3
• enum-iterator 2.1.0
• enumflags2 0.7.12
• expect-test 1.5.1
• foldhash 0.2.0
• frunk 0.4.4
• frunk_core 0.4.4
• futures 0.3.31
• futures-channel 0.3.31
• futures-core 0.3.31
• futures-io 0.3.31
• futures-sink 0.3.31
• futures-util 0.3.31
• glob 0.3.3
• globset 0.4.18
• guppy 0.17.20
• hashbrown 0.16.0
• hifijson 0.4.0
• http 1.3.1
• humansize 2.1.3
• hyper 1.7.0
• include_dir 0.7.4
• include_dir_macros 0.7.4
• indexmap 2.12.0
• indicatif 0.18.2
• indoc 2.0.7
• inferno 0.12.3
• insta 1.43.2
• iso8601-duration 0.2.0
• itertools 0.14.0
• jsonptr 0.7.1
• lcov 0.8.1
• lexical 7.0.5
• libp2p 0.56.0
• libp2p-core 0.43.1
• libp2p-identity 0.2.12
• libp2p-ping 0.47.0
• libp2p-stream 0.4.0-alpha
• libp2p-swarm 0.47.0
• libp2p-yamux 0.47.0
• libtest-mimic 0.8.1
• line-index 0.1.2
• logos 0.15.1
• memchr 2.7.6
• mimalloc 0.1.48
• mime 0.3.17
• multiaddr 0.18.2
• multistream-select 0.13.0
• napi 2.16.17
• napi-build 2.2.4
• napi-derive 2.16.13
• nextest-filtering 0.17.0
• nextest-metadata 0.12.2
• opentelemetry 0.30.0
• opentelemetry-appender-tracing 0.30.1
• opentelemetry-otlp 0.30.0
• opentelemetry-semantic-conventions 0.30.0
• opentelemetry_sdk 0.30.0
• owo-colors 4.2.3
• oxc 0.95.0
• pin-project 1.1.10
• pin-project-lite 0.2.16
• postgres-protocol 0.6.9
• postgres-types 0.2.11
• pretty 0.12.5
• pretty_assertions 1.4.1
• proc-macro-error2 2.0.1
• proc-macro2 1.0.103
• prometheus-client 0.24.0
• proptest 1.7.0
• quote 1.0.41
• radix_trie 0.3.0
• rand 0.9.2
• rand_distr 0.5.1
• rapidfuzz 0.5.0
• rayon 1.11.0
• refinery 0.8.16
• regex 1.11.2
• reqwest 0.12.24
• reqwest-middleware 0.4.2
• reqwest-tracing 0.5.8
• roaring 0.11.2
• rpds 1.1.2
• rstest 0.26.1
• rustc_version 0.4.1
• scc 2.4.0
• semver 1.0.27
• sentry 0.46.0
• sentry-core 0.46.0
• sentry-types 0.46.0
• serde 1.0.228
• serde_core 1.0.228
• serde_json 1.0.145
• serde_plain 1.0.2
• sha2 0.10.9
• similar-asserts 1.7.0
• simple-mermaid 0.2.0
• smallvec 2.0.0-alpha.11
• smol_str 0.3.4
• specta 2.0.0-rc.22
• stacker 0.1.22
• supports-color 3.0.2
• supports-unicode 3.0.0
• syn 2.0.108
• tachyonix 0.3.1
• tarpc 0.36.0@f55f36d2d876b1868cfcf52f41d0456a60cf726c
• temporal-client 4a2368d
• temporal-sdk-core-protos 4a2368d
• test-log 0.2.18
• test-strategy 0.4.3
• text-size 1.1.1
• thiserror 2.0.17
• time 0.3.44
• tokio 1.47.1
• tokio-postgres 0.7.15
• tokio-stream 0.1.17
• tokio-test 0.4.4
• tokio-util 0.7.16
• toml 0.9.8
• tower 0.5.2
• tower-http 0.6.6
• tower-layer 0.3.3
• tower-service 0.3.3
• tower-test 0.4.0
• tracing 0.1.41
• tracing-appender 0.2.3
• tracing-core 0.1.34
• tracing-error 0.2.1
• tracing-flame 0.2.0
• tracing-indicatif 0.3.13
• tracing-opentelemetry 0.31.0
• tracing-subscriber 0.3.20
• trait-variant 0.1.2
• trybuild 1.0.113
• tsify-next 0.5.6
• unicase 2.8.1
• unicode-ident 1.0.22
• unicode-normalization 0.1.25
• unicode-properties 0.1.4
• unicode-segmentation 1.12.0
• url 2.5.7
• utoipa 4.2.3
• uuid 1.18.1
• walkdir 2.5.0
• wasm-bindgen 0.2.100
• wasm-bindgen-test 0.3.50
• winnow 0.7.13
• xxhash-rust 0.8.15

libs/@blockprotocol/type-system/rust/Cargo.toml

libs/@local/codec/Cargo.toml

libs/@local/codegen/Cargo.toml

libs/@local/effect-dns/hickory/Cargo.toml

libs/@local/graph/api/Cargo.toml

libs/@local/graph/authorization/Cargo.toml

libs/@local/graph/migrations-macros/Cargo.toml

libs/@local/graph/migrations/Cargo.toml

libs/@local/graph/postgres-store/Cargo.toml

libs/@local/graph/store/Cargo.toml

libs/@local/graph/temporal-versioning/Cargo.toml

libs/@local/graph/test-server/Cargo.toml

libs/@local/graph/type-defs/Cargo.toml

libs/@local/graph/type-fetcher/Cargo.toml

libs/@local/graph/types/Cargo.toml

libs/@local/graph/validation/Cargo.toml

libs/@local/harpc/client/rust/Cargo.toml

• serde-value 0.7.0

libs/@local/harpc/codec/Cargo.toml

libs/@local/harpc/net/Cargo.toml

libs/@local/harpc/server/Cargo.toml

libs/@local/harpc/system/Cargo.toml

libs/@local/harpc/tower/Cargo.toml

libs/@local/harpc/types/Cargo.toml

libs/@local/harpc/wire-protocol/Cargo.toml

• base64 0.22.1

libs/@local/hashql/ast/Cargo.toml

libs/@local/hashql/compiletest/Cargo.toml

libs/@local/hashql/core/Cargo.toml

libs/@local/hashql/diagnostics/Cargo.toml

libs/@local/hashql/eval/Cargo.toml

libs/@local/hashql/hir/Cargo.toml

libs/@local/hashql/mir/Cargo.toml

libs/@local/hashql/syntax-jexpr/Cargo.toml

libs/@local/repo-chores/rust/Cargo.toml

libs/@local/status/rust/Cargo.toml

libs/@local/telemetry/Cargo.toml

libs/@local/temporal-client/Cargo.toml

libs/antsi/Cargo.toml

libs/error-stack/Cargo.toml

• eyre >=0.6
• futures-core >=0.3
• serde_core >=1
• spin >=0.9
• tracing >=0.1
• tracing-error >=0.2

tests/graph/benches/Cargo.toml

tests/graph/integration/Cargo.toml

tests/graph/test-data/rust/Cargo.toml

docker-compose

apps/hash-external-services/docker-compose.dev.yml

• otel/opentelemetry-collector-contrib 0.128.0
• grafana/loki 3.5.2
• grafana/tempo 2.8.1
• grafana/mimir 2.16.1
• grafana/pyroscope 1.14.1
• grafana/grafana 12.0.2

apps/hash-external-services/docker-compose.prod.yml

apps/hash-external-services/docker-compose.test.yml

• jaegertracing/all-in-one 1.60

apps/hash-external-services/docker-compose.yml

• redis 6.2

infra/docker/docker-compose-statsd-override.yml

dockerfile

apps/hash-ai-worker-ts/docker/Dockerfile

• docker/dockerfile 1
• debian 12.10-slim

apps/hash-external-services/hydra/Dockerfile

• oryd/hydra v2.2.0

apps/hash-external-services/kratos/Dockerfile

• oryd/kratos v1.2.0

apps/hash-external-services/postgres/Dockerfile

• postgres 18.1-alpine3.23

apps/hash-external-services/temporal/migrate.Dockerfile

apps/hash-external-services/temporal/setup.Dockerfile

apps/hash-graph/docker/Dockerfile

• docker/dockerfile 1
• debian 12.10-slim

apps/hash-integration-worker/docker/Dockerfile

• docker/dockerfile 1
• debian 12.10-slim

infra/docker/api/prod/Dockerfile

• docker/dockerfile 1
• debian 12.10-slim

infra/docker/citus/prod/Dockerfile

• postgres 13.4

infra/docker/frontend/prod/Dockerfile

• debian 12.10-slim

infra/docker/statsd/Dockerfile

github-actions

.github/actions/build-docker-images/action.yml

• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83

.github/actions/docker-build-push/action.yml

• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83

.github/actions/docker-ecr-login/action.yml

• aws-actions/configure-aws-credentials v4.3.1@7474bc4690e29a8392af63c5b98e7449536d5c3a
• aws-actions/amazon-ecr-login v2.0.1@062b18b96a7aff071d4dc91bc00c4c1a7945b076
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435

.github/actions/install-corepack/action.yml

• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830

.github/actions/install-sccache/action.yml

• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• mozilla-actions/sccache-action v0.0.9@7d986dd989559c6ecdb630a3fd2557667be217ad

.github/actions/install-tools/action.yml

• jdx/mise-action v3.5.1@146a28175021df8ca24f8ee1828cc2a60f980bd5
• nick-fields/retry v3.0.2@ce71cc2ab81d554ebbe88c79ab5975992d79ba08

.github/actions/load-docker-images/action.yml

• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0

.github/actions/redeploy-ecs-service/action.yml

• aws-actions/configure-aws-credentials v4.3.1@7474bc4690e29a8392af63c5b98e7449536d5c3a

.github/actions/terraform-exec/action.yml

• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• aws-actions/configure-aws-credentials v4.3.1@7474bc4690e29a8392af63c5b98e7449536d5c3a
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd

.github/actions/warm-up-repo/action.yml

• nick-fields/retry v3.0.2@ce71cc2ab81d554ebbe88c79ab5975992d79ba08
• nick-fields/retry v3.0.2@ce71cc2ab81d554ebbe88c79ab5975992d79ba08

.github/workflows/ai-pr-review.yml

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• nick-fields/retry v3.0.2@ce71cc2ab81d554ebbe88c79ab5975992d79ba08
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/auto-approve.yml

• hmarr/auto-approve-action v4

.github/workflows/bench.yml

• withgraphite/graphite-ci-action 6213dcfab02da542aaf534e087282a928ff4374a
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• rtCamp/action-slack-notify 07cbdbfd6c6190970778d8f98f11d073b2932aae
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0
• mshick/add-pr-comment v2.8.2@b8f338c590a895d50bcbfa6c5859251edc8952fc
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/canary-release.yml

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8

.github/workflows/check-todo-linear-tickets.yml

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8

.github/workflows/codeql-analysis.yml

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• github/codeql-action v4.31.7@cf1bb45a277cb3c205638b2cd5c984db1c46a412
• github/codeql-action v4.31.7@cf1bb45a277cb3c205638b2cd5c984db1c46a412
• github/codeql-action v4.31.7@cf1bb45a277cb3c205638b2cd5c984db1c46a412

.github/workflows/dependency-review.yml

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/dependency-review-action v4.8.2@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261

.github/workflows/deploy.yml

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• rtCamp/action-slack-notify 07cbdbfd6c6190970778d8f98f11d073b2932aae
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/dismiss-stale-approvals.yml

• turnage/dismiss-stale-approvals ff3fc67f2978497c420e446f704b9502dd911fd8
• ubuntu 24.04

.github/workflows/dispatch-fix.yml

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8

.github/workflows/hash-backend-cd.yml

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• rtCamp/action-slack-notify 07cbdbfd6c6190970778d8f98f11d073b2932aae
• ubuntu 24.04-arm
• ubuntu 24.04-arm
• ubuntu 24.04-arm
• ubuntu 24.04-arm
• ubuntu 24.04-arm
• ubuntu 24.04-arm
• ubuntu 24.04-arm
• ubuntu 24.04-arm

.github/workflows/labeler.yml

• actions/labeler v5.0.0@8558fd74291d67161a8a78ce36a881fa63b766a9

.github/workflows/lint.yml

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• github/codeql-action v4.31.7@cf1bb45a277cb3c205638b2cd5c984db1c46a412
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• yuzutech/annotations-action v0.5.0@0e061a6e3ac848299310b6429b60d67cafd4e7f8
• rtCamp/action-slack-notify 07cbdbfd6c6190970778d8f98f11d073b2932aae
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/publish-blocks-to-preview.yml

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/publish-blocks-to-production.yml

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/release.yml

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• changesets/action v1.5.3@e0145edc7d9d8679003495b11f87bd8ef63c0cba
• rtCamp/action-slack-notify 07cbdbfd6c6190970778d8f98f11d073b2932aae

.github/workflows/remove-obsolete-caches.yml

• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd

.github/workflows/renovate.yml

• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• jdx/mise-action v3.5.1@146a28175021df8ca24f8ee1828cc2a60f980bd5
• dawidd6/action-download-artifact v11@ac66b43f0e6a346234dd65d4d0c8fbb31cb316e5
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02

.github/workflows/semgrep.yml

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• andstor/file-existence-action v3.0.0@076e0072799f4942c8bc574a82233e1e4d13e9d6
• github/codeql-action v4.31.7@cf1bb45a277cb3c205638b2cd5c984db1c46a412
• returntocorp/semgrep 1.141.0@sha256:9189e3bd81e6081b9c7ed40eb51ad6ed4e5b2937a1925e5b203b44899b2c0001

.github/workflows/test.yml

• withgraphite/graphite-ci-action 6213dcfab02da542aaf534e087282a928ff4374a
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• codecov/codecov-action v5.5.1@5a1091511ad55cbe89839c7260b706298ca349f7
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• nick-fields/retry v3.0.2@ce71cc2ab81d554ebbe88c79ab5975992d79ba08
• codecov/codecov-action v5.5.1@5a1091511ad55cbe89839c7260b706298ca349f7
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• rtCamp/action-slack-notify 07cbdbfd6c6190970778d8f98f11d073b2932aae
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/tf-apply-hash.yml

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• rtCamp/action-slack-notify v2.3.3@e31e87e03dd19038e411e38ae27cbad084a90661

.github/workflows/tf-plan-hash.yml

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8

.github/workflows/warm-up-vercel.yml

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8

mise

.config/mise/config.toml

• node 22.21.1
• npm:turbo 2.6.3
• uv 0.9.13
• cargo:wasm-opt 0.116.1
• cargo:wasm-pack 0.13.1
• java 25
• protoc 32.1
• cargo:cargo-hack 0.6.37
• cargo:cargo-insta 1.43.1
• cargo:cargo-llvm-cov 0.6.18
• cargo:cargo-nextest 0.9.103
• just 1.43.1
• markdownlint-cli2 0.19.1
• npm:@napi-rs/cli 2.18.4
• npm:@redocly/cli 2.12.3
• npm:renovate 42.39.1
• pipx:sqlfluff 3.4.2
• taplo 0.10.0
• ubi:terrastruct/d2 0.7.1
• yq 4.49.2

npm

.claude/hooks/package.json

• natural 8.1.0
• @types/node 22.18.13
• @vitest/coverage-istanbul 3.2.4
• eslint 9.38.0
• tsx 4.20.6
• typescript 5.9.3
• vitest 3.2.4

apps/hash-ai-agent/package.json

• @ai-sdk/openai 2.0.80
• @apidevtools/json-schema-ref-parser 15.1.3
• @dmitryrechkin/json-schema-to-zod 1.0.1
• @mastra/core 1.0.0-beta.10
• @mastra/evals 1.0.0-beta.2
• @mastra/libsql 1.0.0-beta.7
• @mastra/loggers 1.0.0-beta.3
• @mastra/mcp 1.0.0-beta.6
• @mastra/memory 1.0.0-beta.4
• @mastra/observability 1.0.0-beta.4
• @sinclair/typebox 0.34.41
• dedent 1.7.0
• es-toolkit 1.41.0
• json-schema 0.4.0
• vitest 4.0.16
• zod 4.1.12
• zod-from-json-schema 0.5.2
• @types/dedent 0.7.2
• @types/dotenv-flow 3.3.3
• @types/jsdom 21.1.7
• @types/lodash 4.17.20
• @types/md5 2.3.6
• @types/mime-types 2.1.4
• @types/node 22.18.13
• @types/papaparse 5.3.16
• @types/sanitize-html 2.16.0
• @vitest/coverage-istanbul 3.2.4
• baseline-browser-mapping 2.9.11
• eslint 9.38.0
• jsdom 24.1.3
• mastra 1.0.0-beta.5
• npm-run-all2 8.0.4
• sanitize-html 2.17.0
• tsx 4.20.6
• typescript 5.9.3
• node >=22.13.0

apps/hash-ai-worker-ts/package.json

• @anthropic-ai/bedrock-sdk 0.26.0
• @anthropic-ai/sdk 0.71.2
• @google-cloud/storage 7.17.2
• @google-cloud/vertexai 1.10.0
• @sentry/node 10.27.0
• @temporalio/activity 1.12.1
• @temporalio/common 1.12.1
• @temporalio/proto 1.12.1
• @temporalio/worker 1.12.1
• @temporalio/workflow 1.12.1
• ajv 8.17.1
• ajv-formats 3.0.1
• axios 1.12.2
• cache-manager 5.7.6
• dedent 1.7.0
• dotenv-flow 3.3.0
• e2b 0.13.1
• exponential-backoff 3.1.3
• googleapis 133.0.0
• gpt-tokenizer 3.2.0
• is-docker 3.0.0
• jsdom 24.1.3
• llamaindex 0.8.37
• lodash 4.17.21
• md5 2.3.0
• mime-types 2.1.35
• officeparser 4.2.0
• openai 6.6.0
• openai-chat-tokens 0.2.8
• papaparse 5.5.3
• pdf2json 3.2.0
• puppeteer 22.15.0
• puppeteer-extra 3.3.6
• puppeteer-extra-plugin-stealth 2.11.2
• sanitize-html 2.17.0
• tsconfig-paths-webpack-plugin 4.2.0
• tsx 4.20.6
• typescript 5.9.3
• @types/dedent 0.7.2
• @types/dotenv-flow 3.3.3
• @types/jsdom 21.1.7
• @types/lodash 4.17.20
• @types/md5 2.3.6
• @types/mime-types 2.1.4
• @types/node 22.18.13
• @types/papaparse 5.3.16
• @types/sanitize-html 2.16.0
• @vitest/coverage-istanbul 3.2.4
• eslint 9.38.0
• rimraf 6.1.2
• typescript 5.9.3
• vitest 3.2.4
• wait-on 9.0.1

apps/hash-api/package.json

• @apollo/server 5.0.0
• @apollo/server-plugin-landing-page-graphql-playground 4.0.1
• @apollo/utils.keyvadapter 4.0.1
• @as-integrations/express5 1.1.2
• @aws-sdk/client-s3 3.913.0
• @aws-sdk/client-sesv2 3.928.0
• @aws-sdk/credential-provider-node 3.913.0
• @aws-sdk/s3-presigned-post 3.913.0
• @aws-sdk/s3-request-presigner 3.913.0
• @blockprotocol/core 0.1.4
• @graphql-tools/schema 8.5.1
• @keyv/redis 5.1.3
• @linear/sdk 61.0.0
• @mailchimp/mailchimp_marketing 3.0.80
• @opentelemetry/api 1.9.0
• @opentelemetry/api-logs 0.207.0
• @opentelemetry/core 2.2.0
• @opentelemetry/exporter-logs-otlp-grpc 0.207.0
• @opentelemetry/exporter-trace-otlp-grpc 0.207.0
• @opentelemetry/instrumentation 0.207.0
• @opentelemetry/instrumentation-express 0.56.0
• @opentelemetry/instrumentation-graphql 0.55.0
• @opentelemetry/instrumentation-http 0.207.0
• @opentelemetry/resources 2.2.0
• @opentelemetry/sdk-logs 0.207.0
• @opentelemetry/sdk-trace-base 2.2.0
• @opentelemetry/sdk-trace-node 2.2.0
• @ory/client 1.22.7
• @ory/hydra-client 2.2.1
• @ory/kratos-client 1.3.8
• @rudderstack/rudder-sdk-node 2.1.10
• @sentry/node 10.27.0
• @snowplow/node-tracker 4.6.8
• @temporalio/client 1.12.1
• @temporalio/proto 1.12.1
• @types/ws 8.18.1
• agentkeepalive 4.6.0
• app-root-path 3.1.0
• axios 1.12.2
• body-parser 2.2.1
• clipboardy 5.0.0
• cors 2.8.5
• dedent 1.7.0
• effect 3.18.4
• exponential-backoff 3.1.3
• express 5.2.0
• express-handlebars 8.0.4
• express-rate-limit 8.2.1
• fractional-indexing 3.2.0
• googleapis 133.0.0
• graphql 16.11.0
• graphql-parse-resolve-info 4.14.1
• graphql-scalars 1.24.2
• helmet 4.6.0
• hot-shots 8.5.2
• html-to-text 8.2.1
• http-terminator 3.2.0
• immer 10.1.3
• install 0.13.0
• js-yaml 4.1.1
• jsonpath 1.1.1
• keyv 5.5.3
• lodash 4.17.21
• long 5.3.2
• md5 2.3.0
• mime-types 2.1.35
• nanoid 3.3.11
• nodemailer 7.0.11
• oembed-providers 1.0.20250926
• openai 6.6.0
• ts-json-schema-generator 1.5.1
• tsx 4.20.6
• typescript 5.9.3
• ws 8.18.3
• @graphql-codegen/cli ^5.0.3
• @graphql-codegen/introspection 2.2.3
• @graphql-codegen/typescript 2.8.8
• @graphql-codegen/typescript-resolvers 2.7.13
• @types/app-root-path 3.1.0
• @types/cors 2.8.19
• @types/dedent 0.7.2
• @types/html-to-text 8.1.1
• @types/jsonpath 0.2.4
• @types/lodash 4.17.20
• @types/mailchimp__mailchimp_marketing 3.0.21
• @types/md5 2.3.6
• @types/mime-types 2.1.4
• @types/nodemailer 6.4.17