Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update github actions (docker/build-push-action, github/codeql-action)
• chore(deps): update all non-major dependencies (@playwright/test, @types/node, pino, prettier)
• chore(deps): update dependency svelte to v5.50.1
• fix(deps): update dependency ejs to v4
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (2)

compose.dev.yaml (4)

• node 24-alpine
• node 24-alpine
• node 24-alpine
• node 24-alpine

docker-legacy/compose.legacy.yaml (4)

• node 24-alpine
• node 24-alpine
• node 24-alpine
• node 24-alpine

dockerfile (3)

docker-legacy/Dockerfile.legacy (2)

• node 24-alpine
• node 24-alpine

Dockerfile (2)

• node 24-alpine
• node 24-alpine

Dockerfile.railway (2)

• node 24-alpine
• node 24-alpine

github-actions (9)

.github/workflows/ci.yml (9)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238
• pnpm/action-setup v4@41ff72655975bd51cab0327fa583b6e92b6d3061
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/build-push-action v6@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v6]
• node 24
• pnpm latest

.github/workflows/cleanup-images-action.yml (7)

• dataaxiom/ghcr-cleanup-action v1.0.16@cd0cdb900b5dbf3a6f2cc869f0dbb0b8211f50c4
• dataaxiom/ghcr-cleanup-action v1.0.16@cd0cdb900b5dbf3a6f2cc869f0dbb0b8211f50c4
• dataaxiom/ghcr-cleanup-action v1.0.16@cd0cdb900b5dbf3a6f2cc869f0dbb0b8211f50c4
• dataaxiom/ghcr-cleanup-action v1.0.16@cd0cdb900b5dbf3a6f2cc869f0dbb0b8211f50c4
• dataaxiom/ghcr-cleanup-action v1.0.16@cd0cdb900b5dbf3a6f2cc869f0dbb0b8211f50c4
• dataaxiom/ghcr-cleanup-action v1.0.16@cd0cdb900b5dbf3a6f2cc869f0dbb0b8211f50c4
• dataaxiom/ghcr-cleanup-action v1.0.16@cd0cdb900b5dbf3a6f2cc869f0dbb0b8211f50c4

.github/workflows/docker-hub-publish.yml (9)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• 1Password/load-secrets-action v3.1.0@8d0d610af187e78a2772c2d18d627f4c52d3fbfb
• 1password/load-secrets-action v3.1.0@8d0d610af187e78a2772c2d18d627f4c52d3fbfb
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9
• docker/setup-qemu-action v3.7.0@c7c53464625b32c7a7e944ae62b3e17d2b600130
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/metadata-action v5@c299e40c65443455700f0fdfc63efafe5b349051
• docker/build-push-action v6@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v6]

.github/workflows/docker-publish-hardened.yml (10)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• 1Password/load-secrets-action v3.1.0@8d0d610af187e78a2772c2d18d627f4c52d3fbfb
• 1password/load-secrets-action v3.1.0@8d0d610af187e78a2772c2d18d627f4c52d3fbfb
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9
• docker/setup-qemu-action v3.7.0@c7c53464625b32c7a7e944ae62b3e17d2b600130
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/metadata-action v5@c299e40c65443455700f0fdfc63efafe5b349051
• docker/build-push-action v6@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v6]

.github/workflows/docker-publish.yml (7)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9
• docker/setup-qemu-action v3.7.0@c7c53464625b32c7a7e944ae62b3e17d2b600130
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/metadata-action v5@c299e40c65443455700f0fdfc63efafe5b349051
• docker/build-push-action v6@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v6]

.github/workflows/osv-scanner.yml (2)

• google/osv-scanner-action v2.3.2@2a387edfbe02a11d856b89172f6e978100177eb4 → [Updates: v2.3.3]
• google/osv-scanner-action v2.3.2@2a387edfbe02a11d856b89172f6e978100177eb4 → [Updates: v2.3.3]

.github/workflows/railway-verify.yml (1)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/release.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b

.github/workflows/security.yml (9)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238
• pnpm/action-setup v4@41ff72655975bd51cab0327fa583b6e92b6d3061
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
• github/codeql-action v4@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 → [Updates: v4]
• github/codeql-action v4@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 → [Updates: v4]
• github/codeql-action v4@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 → [Updates: v4]
• node 24
• pnpm latest

nodenv (1)

.node-version (1)

• node 24

npm (2)

package.json (15)

• compression ^1.8.1
• cookie-parser ~1.4.7
• ejs ~3.1.10 → [Updates: ~4.0.0]
• errorhandler ~1.5.2
• express ^5.2.1
• helmet ^8.1.0
• morgan ^1.10.1
• pino ^10.3.0 → [Updates: ^10.3.0]
• pino-http ^11.0.0
• @playwright/test ^1.58.1 → [Updates: ^1.58.1]
• @types/node ^24.10.10 → [Updates: ^24.10.10]
• pino-pretty ^13.1.3
• prettier ^3.7.4 → [Updates: ^3.7.4]
• prettier-plugin-svelte ^3.4.1
• node >=24.0.0

svelte-app/package.json (17)

• @fontsource-variable/overpass ^5.2.8
• @fontsource-variable/red-hat-display ^5.2.8
• @fontsource/overpass ^5.2.8
• @types/leaflet ^1.9.21
• leaflet ^1.9.4
• svelte-i18n ^4.0.1
• @svelte-put/qr ^2.1.1
• @sveltejs/adapter-node ^5.5.2 → [Updates: ^5.5.2]
• @sveltejs/kit ^2.50.2 → [Updates: ^2.50.2]
• @sveltejs/vite-plugin-svelte ^6.2.4
• @types/node ^24.10.9 → [Updates: ^24.10.9]
• iconify-icon ^3.0.2
• svelte ^5.48.3 → [Updates: ^5.48.3]
• svelte-check ^4.3.6 → [Updates: ^4.3.6]
• typescript ^5.9.3
• vite ^7.3.1
• node >=24.0.0

nvm (1)

.nvmrc (1)

• node 24

---

• Check this box to trigger a request for Renovate to run again on this repository