Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
npm	@types/eslint__js

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency storybook to v10.2.10 [security]
• chore(deps): update module filippo.io/edwards25519 to v1.1.1 [security]
• chore(deps): update pre-commit hook commitizen-tools/commitizen to v4.13.9
• fix(deps): update backend (99designs/gqlgen, github.com/99designs/gqlgen, github.com/gin-gonic/gin, github.com/samber/lo, github.com/vektah/gqlparser/v2, go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin, go.opentelemetry.io/contrib/propagators/b3, go.opentelemetry.io/contrib/propagators/jaeger, go.opentelemetry.io/contrib/propagators/ot, go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/otlp/otlptrace, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/trace, go:github.com/99designs/gqlgen, grafana/grafana, openpolicyagent/opa, prom/prometheus, quay.io/keycloak/keycloak, rabbitmq)
• fix(deps): update frontend (@apollo/client, @eslint/js, @fontsource/roboto, @mui/x-data-grid, @mui/x-date-pickers, @storybook/builder-vite, @storybook/react-vite, @stylistic/eslint-plugin, @types/node, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, axios, eslint, eslint-plugin-storybook, graphql, i18next, react-hook-form, react-router, react-scan, typescript-eslint)
• chore(deps): update frontend (major) (@eslint/js, eslint, rollup-plugin-visualizer, vite-imagetools)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (3)

backend/Dockerfile (1)

• alpine 3.23

backend/Dockerfile.multiarch (2)

• golang 1.26
• alpine 3.23

frontend/Dockerfile (1)

• nginx 1.29-alpine

github-actions (4)

.github/workflows/ci.yml (30)

• actions/checkout v6
• dorny/paths-filter v3
• actions/checkout v6
• bearer/bearer-action v2
• actions/checkout v6
• actions/setup-go v6
• golangci/golangci-lint-action v9
• actions/checkout v6
• actions/setup-go v6
• docker/setup-qemu-action v3
• actions/checkout v6
• actions/setup-go v6
• actions/checkout v6
• actions/setup-go v6
• actions/checkout v6
• actions/setup-node v6
• actions/checkout v6
• actions/setup-node v6
• actions/checkout v6
• actions/setup-node v6
• actions/checkout v6
• actions/setup-node v6
• go ^1.26.0
• go ^1.26.0
• go ^1.26.0
• go ^1.26.0
• node 24
• node 24
• node 24
• node 24

.github/workflows/labeler.yml (1)

• actions/labeler v6

.github/workflows/size.yml (1)

• pascalgn/size-label-action v0.5.5

.github/workflows/stale.yml (1)

• actions/stale v10

gomod (1)

backend/go.mod (54)

• go 1.25.6
• cirello.io/pglock v1.16.1
• emperror.dev/errors v0.8.1
• github.com/99designs/gqlgen v0.17.86 → [Updates: v0.17.87]
• github.com/99designs/gqlgen-contrib v0.1.1-0.20251208230329-86324b741cc0@86324b741cc0
• github.com/AppsFlyer/go-sundheit v0.6.0
• github.com/DATA-DOG/go-sqlmock v1.5.2
• github.com/coreos/go-oidc/v3 v3.17.0
• github.com/danielkov/gin-helmet/ginhelmet v1.0.2
• github.com/dave/jennifer v1.7.1
• github.com/fsnotify/fsnotify v1.9.0
• github.com/gin-contrib/cors v1.7.6
• github.com/gin-contrib/gzip v1.2.5
• github.com/gin-contrib/static v1.1.5
• github.com/gin-gonic/gin v1.11.0 → [Updates: v1.12.0]
• github.com/go-gormigrate/gormigrate/v2 v2.1.5
• github.com/go-playground/validator/v10 v10.30.1
• github.com/gofrs/uuid v4.4.0+incompatible
• github.com/graph-gophers/dataloader/v7 v7.1.3
• github.com/hasura/go-graphql-client v0.15.1
• github.com/microcosm-cc/bluemonday v1.0.27
• github.com/prometheus/client_golang v1.23.2
• github.com/rabbitmq/amqp091-go v1.10.0
• github.com/ravilushqa/otelgqlgen v0.19.0
• github.com/samber/lo v1.52.0 → [Updates: v1.53.0]
• github.com/samber/slog-zap/v2 v2.6.3
• github.com/spf13/cobra v1.10.2
• github.com/spf13/viper v1.21.0
• github.com/stretchr/testify v1.11.1
• github.com/thoas/go-funk v0.9.3
• github.com/vektah/gqlparser/v2 v2.5.31 → [Updates: v2.5.32]
• github.com/xhit/go-simple-mail/v2 v2.16.0
• go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin v0.65.0 → [Updates: v0.66.0]
• go.opentelemetry.io/contrib/propagators/b3 v1.40.0 → [Updates: v1.41.0]
• go.opentelemetry.io/contrib/propagators/jaeger v1.40.0 → [Updates: v1.41.0]
• go.opentelemetry.io/contrib/propagators/ot v1.40.0 → [Updates: v1.41.0]
• go.opentelemetry.io/otel v1.40.0 → [Updates: v1.41.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0 → [Updates: v1.41.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.40.0 → [Updates: v1.41.0]
• go.opentelemetry.io/otel/sdk v1.40.0 → [Updates: v1.41.0]
• go.opentelemetry.io/otel/trace v1.40.0 → [Updates: v1.41.0]
• go.uber.org/automaxprocs v1.6.0
• go.uber.org/goleak v1.3.0
• go.uber.org/mock v0.6.0
• go.uber.org/zap v1.27.1
• go.yaml.in/yaml/v3 v3.0.4
• golang.org/x/oauth2 v0.35.0
• gorm.io/driver/postgres v1.6.0
• gorm.io/driver/sqlite v1.6.0
• gorm.io/gorm v1.31.1
• gorm.io/plugin/dbresolver v1.6.2
• gorm.io/plugin/opentelemetry v0.1.16
• gorm.io/plugin/prometheus v0.1.0
• filippo.io/edwards25519 v1.1.0 → [Updates: v1.1.1]

mise (2)

backend/.mise.toml (7)

• go 1.26.0
• golangci-lint 2.10.1
• gotestsum 1.13.0
• go:github.com/99designs/gqlgen v0.17.86 → [Updates: v0.17.87]
• go:go.uber.org/mock/mockgen v0.6.0
• go:github.com/boumenot/gocover-cobertura v1.4.0
• go:github.com/mitchellh/gox v1.0.1

frontend/.mise.toml (1)

• node 24

npm (1)

frontend/package.json (88)

• @apollo/client 4.1.4 → [Updates: 4.1.6]
• @emotion/react 11.14.0
• @emotion/styled 11.14.1
• @fontsource/roboto 5.2.9 → [Updates: 5.2.10]
• @hookform/resolvers 5.2.2
• @mdi/js 7.4.47
• @mui/lab 7.0.1-beta.22
• @mui/material 7.3.8
• @mui/x-data-grid 8.27.1 → [Updates: 8.27.3]
• @mui/x-date-pickers 8.27.0 → [Updates: 8.27.2]
• autosuggest-highlight 3.3.4
• axios 1.13.5 → [Updates: 1.13.6]
• dayjs 1.11.19
• graphql 16.12.0 → [Updates: 16.13.0]
• i18next 25.8.10 → [Updates: 25.8.13]
• i18next-browser-languagedetector 8.2.1
• i18next-http-backend 3.0.2
• react 19.2.4
• react-dom 19.2.4
• react-error-boundary 6.1.1
• react-hook-form 7.71.1 → [Updates: 7.71.2]
• react-i18next 16.5.4
• react-router 7.13.0 → [Updates: 7.13.1]
• react-window 2.2.7
• rxjs 7.8.2
• yup 1.7.1
• @emotion/jest 11.14.2
• @eslint/js 9.39.2 → [Updates: 9.39.3, 10.0.1]
• @fontsource/material-icons 5.2.7
• @storybook/builder-vite 10.2.9 → [Updates: 10.2.14]
• @storybook/icons 2.0.1
• @storybook/react-vite 10.2.9 → [Updates: 10.2.14]
• @stylistic/eslint-plugin 5.8.0 → [Updates: 5.9.0]
• @testing-library/dom 10.4.1
• @testing-library/jest-dom 6.9.1
• @testing-library/react 16.3.2
• @testing-library/user-event 14.6.1
• @types/autosuggest-highlight 3.2.3
• @types/eslint 9
• @types/eslint__js 9.14.0
• @types/identity-obj-proxy 3
• @types/jest 30.0.0
• @types/node 25.2.3 → [Updates: 25.3.3]
• @types/react 19.2.14
• @types/react-dom 19.2.3
• @types/react-test-renderer 19.1.0
• @typescript-eslint/eslint-plugin 8.56.0 → [Updates: 8.56.1]
• @typescript-eslint/parser 8.56.0 → [Updates: 8.56.1]
• @vitejs/plugin-react 5.1.4
• @vueless/storybook-dark-mode 10.0.7
• @welldone-software/why-did-you-render 10.0.1
• concurrently 9.2.1
• eslint 9.39.2 → [Updates: 9.39.3, 10.0.2]
• eslint-config-airbnb-extended 3.0.1
• eslint-config-prettier 10.1.8
• eslint-formatter-gitlab 7.0.1
• eslint-import-resolver-typescript 4.4.4
• eslint-plugin-import-x 4.16.1
• eslint-plugin-jsx-a11y 6.10.2
• eslint-plugin-react 7.37.5
• eslint-plugin-react-hooks 7.0.1
• eslint-plugin-storybook 10.2.9 → [Updates: 10.2.14]
• eslint-plugin-unicorn 63.0.0
• eslint-plugin-unused-imports 4.4.1
• identity-obj-proxy 3.0.0
• jest 30.2.0
• jest-environment-jsdom 30.2.0
• jest-junit 16.0.0
• prettier 3.8.1
• react-docgen 8.0.2
• react-scan 0.5.2 → [Updates: 0.5.3]
• rollup-plugin-visualizer 6.0.5 → [Updates: 7.0.1]
• rollup-preserve-directives 1.1.3
• storybook 10.2.9 → [Updates: 10.2.10]
• storybook-addon-remix-react-router 6.0.0
• storybook-react-i18next 10.0.1
• ts-jest 29.4.6
• ts-node 10.9.2
• typescript 5.9.3
• typescript-eslint 8.56.0 → [Updates: 8.56.1]
• unplugin-inject-preload 3.0.0
• vite 7.3.1
• vite-imagetools 9.0.3 → [Updates: 10.0.0]
• vite-plugin-svgr 4.5.0
• vite-tsconfig-paths 6.1.1
• whatwg-fetch 3.6.20
• yarn-or-npm 3.0.1
• yarn 4.12.0

pre-commit (1)

.pre-commit-config.yaml (4)

• commitizen-tools/commitizen v4.13.7 → [Updates: v4.13.9]
• pre-commit/pre-commit-hooks v6.0.0
• shellcheck-py/shellcheck-py v0.10.0.1
• zricethezav/gitleaks v8.30.0

regex (4)

.github/workflows/ci.yml (1)

• golangci/golangci-lint v2.10.1

backend/.mise.toml (6)

• gotestyourself/gotestsum 1.13.0
• 99designs/gqlgen v0.17.86 → [Updates: v0.17.87]
• go.uber.org/mock/mockgen v0.6.0
• golang.org/x/tools/go/analysis/passes/fieldalignment/cmd/fieldalignment v0.42.0
• boumenot/gocover-cobertura v1.4.0
• mitchellh/gox v1.0.1

backend/Makefile (9)

• golangci/golangci-lint v2.10.1
• dpage/pgadmin4 9.12.0
• maildev/maildev 2.2.1
• prom/prometheus v3.9.1 → [Updates: v3.10.0]
• grafana/grafana 12.3.3 → [Updates: 12.4.0]
• grafana/tempo 2.10.1
• openpolicyagent/opa 1.13.1 → [Updates: 1.14.0]
• quay.io/keycloak/keycloak 26.5.3 → [Updates: 26.5.4]
• rabbitmq 4.2.3 → [Updates: 4.2.4]

backend/Makefile (6)

• github.com/99designs/gqlgen v0.17.86 → [Updates: v0.17.87]
• go.uber.org/mock/mockgen v0.6.0
• golang.org/x/tools/go/analysis/passes/fieldalignment/cmd/fieldalignment v0.42.0
• gotest.tools/gotestsum v1.13.0
• github.com/boumenot/gocover-cobertura v1.4.0
• github.com/mitchellh/gox v1.0.1

---

• Check this box to trigger a request for Renovate to run again on this repository