Dependency Dashboard #1
Description
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Deprecations / Replacements
Warning
These dependencies are either deprecated or have replacements available:
| Datasource | Package | Replacement PR? |
|---|---|---|
| npm | i18next-parser |  |
Rate-Limited
The following updates are currently rate-limited. To force their creation now, click on a checkbox below.
- ⬆️(dependencies) update GitHub Actions dependencies (
actions/cache,actions/checkout,actions/setup-node,actions/setup-python,actions/upload-artifact,azure/setup-helm,crowdin/github-action,docker/build-push-action,docker/metadata-action,node,peter-evans/create-pull-request,postgres,python) - ⬆️(dependencies) update js dependencies (
@blocknote/code-block,@blocknote/core,@blocknote/mantine,@blocknote/react,@blocknote/server-util,@blocknote/xl-docx-exporter,@blocknote/xl-pdf-exporter,@fontsource/material-icons,@gouvfr-lasuite/ui-kit,@ironcalc/workbook,@next/eslint-plugin-next,@openfun/cunningham-react,@playwright/test,@react-pdf/renderer,@sentry/nextjs,@sentry/node,@sentry/profiling-node,@tanstack/eslint-plugin-query,@tanstack/react-query,@tanstack/react-query-devtools,@testing-library/dom,@testing-library/jest-dom,@testing-library/react,@types/cors,@types/express,@types/express-ws,@types/jest,@types/lodash,@types/luxon,@types/node,@types/react,@types/react-dom,@types/supertest,@typescript-eslint/eslint-plugin,@typescript-eslint/parser,cors,crisp-sdk-web,cross-env,docx,dotenv,eslint-config-next,eslint-config-prettier,eslint-plugin-import,eslint-plugin-jest,eslint-plugin-playwright,eslint-plugin-prettier,eslint-plugin-testing-library,express,i18next,i18next-browser-languagedetector,i18next-parser,jest,jest-environment-jsdom,luxon,mjml,nodemon,pdf-parse,posthog-js,prettier,react,react-aria-components,react-dom,react-i18next,react-intersection-observer,react-select,styled-components,stylelint,stylelint-config-standard,supertest,ts-jest,typescript,use-debounce,uuid,ws,y-protocols,yargs,yjs,zustand) - ⬆️(dependencies) update python dependencies (
beautifulsoup4,boto3,celery,dj-database-url,django-cors-headers,django-countries,django-filter,django-lasuite,django-redis,django-treebeard,djangorestframework,dockerflow,drf-spectacular-sidecar,drf_spectacular,easy_thumbnails,freezegun,gunicorn,ipython,ironcalc,jsonschema,lxml,mozilla-django-oidc,nested-multipart-parser,openai,psycopg,pycrdt,pyfakefs,pylint,pylint-django,pytest,pytest-cov,pytest-django,pytest-xdist,responses,ruff,sentry-sdk,types-requests,whitenoise) - 🔐 Create all rate-limited PRs at once 🔐
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
- ⬆️(dependencies) update django to v5.1.15 [SECURITY]
- ⬆️(dependencies) update lodash to v4.17.23 [SECURITY]
- ⬆️(dependencies) update markdown to v3.8.1 [SECURITY]
- ⬆️(dependencies) update requests to v2.32.4 [SECURITY]
- ⬆️(dependencies) update axios to v1.13.5 [SECURITY]
- ⬆️(dependencies) update Brotli to v1.2.0 [SECURITY]
- ⬆️(dependencies) update next to v15.5.10 [SECURITY]
- ⬆️(dependencies) update PyJWT to v2.12.0 [SECURITY]
- ⬆️(dependencies) update webpack to v5.104.1 [SECURITY]
- Click on this checkbox to rebase all open PRs at once
Detected Dependencies
github-actions (8)
.github/workflows/crowdin_download.yml (4)
actions/checkout v4→ [Updates:v6,v4]crowdin/github-action v2→ [Updates:v2]actions/cache v4→ [Updates:v5,v4]peter-evans/create-pull-request v7→ [Updates:v8,v7].github/workflows/crowdin_upload.yml (6)
actions/checkout v4→ [Updates:v6,v4]actions/setup-python v3→ [Updates:v6,v3]actions/cache v4→ [Updates:v5,v4]actions/cache v4→ [Updates:v5,v4]crowdin/github-action v2→ [Updates:v2]python 3.13.3→ [Updates:3.14.3].github/workflows/dependencies.yml (8)
actions/checkout v4→ [Updates:v6,v4]actions/cache v4→ [Updates:v5,v4]actions/setup-node v4→ [Updates:v6,v4]actions/cache v4→ [Updates:v5,v4]actions/checkout v4→ [Updates:v6,v4]actions/cache v4→ [Updates:v5,v4]actions/setup-node v4→ [Updates:v6,v4]actions/cache v4→ [Updates:v5,v4].github/workflows/docker-hub.yml (13)
actions/checkout v4→ [Updates:v6,v4]docker/metadata-action v5→ [Updates:v6,v5]numerique-gouv/action-trivy-cache maindocker/build-push-action v6→ [Updates:v7,v6]actions/checkout v4→ [Updates:v6,v4]docker/metadata-action v5→ [Updates:v6,v5]numerique-gouv/action-trivy-cache maindocker/build-push-action v6→ [Updates:v7,v6]actions/checkout v4→ [Updates:v6,v4]docker/metadata-action v5→ [Updates:v6,v5]numerique-gouv/action-trivy-cache maindocker/build-push-action v6→ [Updates:v7,v6]numerique-gouv/action-argocd-webhook-notification main.github/workflows/helmfile-linter.yaml (2)
actions/checkout v4→ [Updates:v6,v4]ghcr.io/helmfile/helmfile v0.171.0→ [Updates:v1.4.1].github/workflows/impress-frontend.yml (18)
actions/checkout v4→ [Updates:v6,v4]actions/setup-node v4→ [Updates:v6,v4]actions/cache v4→ [Updates:v5,v4]actions/checkout v4→ [Updates:v6,v4]actions/setup-node v4→ [Updates:v6,v4]actions/cache v4→ [Updates:v5,v4]actions/checkout v4→ [Updates:v6,v4]actions/setup-node v4→ [Updates:v6,v4]actions/cache v4→ [Updates:v5,v4]actions/upload-artifact v4→ [Updates:v7,v4]actions/checkout v4→ [Updates:v6,v4]actions/setup-node v4→ [Updates:v6,v4]actions/cache v4→ [Updates:v5,v4]actions/upload-artifact v4→ [Updates:v7,v4]node 20.x→ [Updates:24.x]node 20.x→ [Updates:24.x]node 20.x→ [Updates:24.x]node 20.x→ [Updates:24.x].github/workflows/impress.yml (12)
actions/checkout v2→ [Updates:v6,v2]actions/checkout v3→ [Updates:v6,v3]actions/checkout v2→ [Updates:v6,v2]actions/checkout v2→ [Updates:v6,v2]actions/checkout v2→ [Updates:v6,v2]actions/setup-python v3→ [Updates:v6,v3]actions/checkout v4→ [Updates:v6,v4]actions/cache v4→ [Updates:v5,v4]actions/setup-python v3→ [Updates:v6,v3]python 3.13.3→ [Updates:3.14.3]postgres 16→ [Updates:18]python 3.13.3→ [Updates:3.14.3].github/workflows/release-helm-chart.yaml (3)
actions/checkout v4→ [Updates:v6,v4]azure/setup-helm v4→ [Updates:v4]numerique-gouv/helm-gh-pages add-overwrite-option
npm (7)
src/frontend/apps/e2e/package.json (6)
convert-stream 1.0.2pdf-parse 1.1.1→ [Updates:2.4.5]@playwright/test 1.52.0→ [Updates:1.58.2]@types/node *→ [Updates:*]@types/pdf-parse 1.1.5typescript *→ [Updates:*]src/frontend/apps/impress/package.json (63)
@ag-media/react-pdf-table 2.0.3@blocknote/code-block 0.31.1→ [Updates:0.47.1]@blocknote/core 0.31.1→ [Updates:0.47.1]@blocknote/mantine 0.31.1→ [Updates:0.47.1]@blocknote/react 0.31.1→ [Updates:0.47.1]@blocknote/xl-docx-exporter 0.31.1→ [Updates:0.47.1]@blocknote/xl-pdf-exporter 0.31.1→ [Updates:0.47.1]@emoji-mart/data 1.2.1@emoji-mart/react 1.1.1@fontsource/material-icons 5.2.5→ [Updates:5.2.7]@gouvfr-lasuite/integration 1.0.3@gouvfr-lasuite/ui-kit 0.7.0→ [Updates:0.19.10]@ironcalc/workbook 0.5.5→ [Updates:0.5.7]@openfun/cunningham-react 3.1.0→ [Updates:4.0.0]@react-pdf/renderer 4.3.0→ [Updates:4.3.2]@sentry/nextjs 9.22.0→ [Updates:10.42.0]@tanstack/react-query 5.77.1→ [Updates:5.90.21]canvg 4.0.3clsx 2.1.1cmdk 1.1.1crisp-sdk-web 1.0.25→ [Updates:1.0.27]docx 9.5.0→ [Updates:9.6.0]emoji-mart 5.6.0i18next 25.2.1→ [Updates:25.8.14]i18next-browser-languagedetector 8.1.0→ [Updates:8.2.1]idb 8.0.3lodash 4.17.21→ [Updates:4.17.23]luxon 3.6.1→ [Updates:3.7.2]next 15.3.2→ [Updates:15.5.10]posthog-js 1.246.0→ [Updates:1.359.1]react *→ [Updates:*]react-aria-components 1.9.0→ [Updates:1.16.0]react-dom *→ [Updates:*]react-i18next 15.5.2→ [Updates:16.5.6]react-intersection-observer 9.16.0→ [Updates:10.0.3]react-select 5.10.1→ [Updates:5.10.2]styled-components 6.1.18→ [Updates:6.3.11]use-debounce 10.0.4→ [Updates:10.1.0]y-protocols 1.0.6→ [Updates:1.0.7]yjs *→ [Updates:*]zustand 5.0.5→ [Updates:5.0.11]@svgr/webpack 8.1.0@tanstack/react-query-devtools 5.77.1→ [Updates:5.91.3]@testing-library/dom 10.4.0→ [Updates:10.4.1]@testing-library/jest-dom 6.6.3→ [Updates:6.9.1]@testing-library/react 16.3.0→ [Updates:16.3.2]@testing-library/user-event 14.6.1@types/jest 29.5.14→ [Updates:30.0.0]@types/lodash 4.17.17→ [Updates:4.17.24]@types/luxon 3.6.2→ [Updates:3.7.1]@types/node *→ [Updates:*]@types/react *→ [Updates:*]@types/react-dom *→ [Updates:*]cross-env 7.0.3→ [Updates:10.1.0]dotenv 16.5.0→ [Updates:17.3.1]jest 29.7.0→ [Updates:30.2.0]jest-environment-jsdom 29.7.0→ [Updates:30.2.0]prettier 3.5.3→ [Updates:3.8.1]stylelint 16.19.1→ [Updates:17.4.0]stylelint-config-standard 38.0.0→ [Updates:40.0.0]stylelint-prettier 5.0.3typescript *→ [Updates:*]webpack 5.99.9→ [Updates:5.104.1]src/frontend/package.json (10)
@types/node 22.15.21→ [Updates:24.12.0]@types/react 19.1.5→ [Updates:19.2.14]@types/react-dom 19.1.5→ [Updates:19.2.3]@typescript-eslint/eslint-plugin 8.32.1→ [Updates:8.56.1]@typescript-eslint/parser 8.32.1→ [Updates:8.56.1]react 19.1.0→ [Updates:19.2.4]react-dom 19.1.0→ [Updates:19.2.4]typescript 5.8.3→ [Updates:5.9.3]yjs 13.6.27→ [Updates:13.6.29]yarn 1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137esrc/frontend/packages/eslint-config-impress/package.json (13)
@next/eslint-plugin-next 15.3.2→ [Updates:16.1.6]@tanstack/eslint-plugin-query 5.74.7→ [Updates:5.91.4]@typescript-eslint/eslint-plugin *→ [Updates:*]@typescript-eslint/parser *→ [Updates:*]eslint-config-next 15.3.2→ [Updates:16.1.6]eslint-config-prettier 10.1.5→ [Updates:10.1.8]eslint-plugin-import 2.31.0→ [Updates:2.32.0]eslint-plugin-jest 28.11.0→ [Updates:29.15.0]eslint-plugin-jsx-a11y 6.10.2eslint-plugin-playwright 2.2.0→ [Updates:2.9.0]eslint-plugin-prettier 5.4.0→ [Updates:5.5.5]eslint-plugin-testing-library 7.2.1→ [Updates:7.16.0]prettier 3.5.3→ [Updates:3.8.1]src/frontend/packages/i18n/package.json (8)
@types/jest 29.5.14→ [Updates:30.0.0]@types/node *→ [Updates:*]eslint-plugin-import 2.31.0→ [Updates:2.32.0]i18next-parser 9.3.0→ [Updates:9.4.0]jest 29.7.0→ [Updates:30.2.0]ts-jest 29.3.4→ [Updates:29.4.6]typescript *→ [Updates:*]yargs 17.7.2→ [Updates:18.0.0]src/frontend/servers/y-provider/package.json (26)
@blocknote/server-util 0.31.1→ [Updates:0.47.1]@sentry/node 9.22.0→ [Updates:10.42.0]@sentry/profiling-node 9.22.0→ [Updates:10.42.0]axios 1.9.0→ [Updates:1.13.5]cors 2.8.5→ [Updates:2.8.6]express 5.1.0→ [Updates:5.2.1]express-ws 5.0.2uuid 11.1.0→ [Updates:13.0.0]y-protocols 1.0.6→ [Updates:1.0.7]yjs *→ [Updates:*]@types/cors 2.8.18→ [Updates:2.8.19]@types/express 5.0.2→ [Updates:5.0.6]@types/express-ws 3.0.5→ [Updates:3.0.6]@types/jest 29.5.14→ [Updates:30.0.0]@types/node *→ [Updates:*]@types/supertest 6.0.3→ [Updates:7.2.0]@types/ws 8.18.1cross-env 7.0.3→ [Updates:10.1.0]jest 29.7.0→ [Updates:30.2.0]nodemon 3.1.10→ [Updates:3.1.14]supertest 7.1.1→ [Updates:7.2.2]ts-jest 29.3.4→ [Updates:29.4.6]ts-node 10.9.2tsc-alias 1.8.16typescript *→ [Updates:*]ws 8.18.2→ [Updates:8.19.0]src/mail/package.json (2)
@html-to/text-cli 0.5.4mjml 4.15.3→ [Updates:4.18.0]
pep621 (1)
src/backend/pyproject.toml (55)
python >=3.12beautifulsoup4 ==4.13.4→ [Updates:==4.14.3]boto3 ==1.38.27→ [Updates:==1.42.63]Brotli ==1.1.0→ [Updates:==1.2.0]celery ==5.5.3→ [Updates:==5.6.2]dj-database-url ==2.3.0→ [Updates:==3.1.2]django-configurations ==2.5.1django-cors-headers ==4.7.0→ [Updates:==4.9.0]django-countries ==7.6.1→ [Updates:==8.2.0]django-filter ==25.1→ [Updates:==25.2]django-lasuite ==0.0.9→ [Updates:==0.0.24]django-parler ==2.3django-redis ==5.4.0→ [Updates:==6.0.0]django-storages ==1.14.6django-timezone-field >=5.1django ==5.1.9→ [Updates:==5.1.15]django-treebeard ==4.7.1→ [Updates:==5.0.5]djangorestframework ==3.16.0→ [Updates:==3.16.1]drf_spectacular ==0.28.0→ [Updates:==0.29.0]dockerflow ==2024.4.2→ [Updates:==2026.3.4]easy_thumbnails ==2.10→ [Updates:==2.10.1]factory_boy ==3.3.3gunicorn ==23.0.0→ [Updates:==25.1.0]ironcalc ==0.5.6→ [Updates:==0.7.0]jsonschema ==4.24.0→ [Updates:==4.26.0]lxml ==5.4.0→ [Updates:==6.0.2]markdown ==3.8→ [Updates:==3.8.1]mozilla-django-oidc ==4.0.1→ [Updates:==5.0.2]nested-multipart-parser ==1.5.0→ [Updates:==1.6.0]openai ==1.82.1→ [Updates:==2.26.0]psycopg ==3.2.9→ [Updates:==3.3.3]pycrdt ==0.12.20→ [Updates:==0.12.47]PyJWT ==2.10.1→ [Updates:==2.12.0]python-magic ==0.4.27redis <6.0.0requests ==2.32.3→ [Updates:==2.32.4]sentry-sdk ==2.29.1→ [Updates:==2.54.0]whitenoise ==6.9.0→ [Updates:==6.12.0]django-extensions ==4.1django-test-migrations ==1.5.0drf-spectacular-sidecar ==2025.6.1→ [Updates:==2026.3.1]freezegun ==1.5.2→ [Updates:==1.5.5]ipdb ==0.13.13ipython ==9.3.0→ [Updates:==9.11.0]pyfakefs ==5.8.0→ [Updates:==6.1.4]pylint-django ==2.6.1→ [Updates:==2.7.0]pylint ==3.3.7→ [Updates:==4.0.5]pytest-cov ==6.1.1→ [Updates:==7.0.0]pytest-django ==4.11.1→ [Updates:==4.12.0]pytest ==8.3.5→ [Updates:==9.0.2]pytest-icdiff ==0.9pytest-xdist ==3.7.0→ [Updates:==3.8.0]responses ==0.25.7→ [Updates:==0.26.0]ruff ==0.11.12→ [Updates:==0.15.5]types-requests ==2.32.0.20250602→ [Updates:==2.32.4.20260107]
- Check this box to trigger a request for Renovate to run again on this repository