Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
bun	@types/xlsx
npm	@types/jszip
npm	@types/uuid

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update livekit/livekit-server docker tag to v1.9.12
• fix(deps): update dependency @tanstack/react-virtual to v3.13.23
• fix(deps): update dependency duckdb-async to v1.4.2
• chore(deps): update dependency eslint-plugin-react-refresh to ^0.5.0
• chore(deps): update nginx docker tag to v1.29
• chore(deps): update vespaengine/vespa docker tag to v8.660.21
• fix(deps): update dependency @anthropic-ai/vertex-sdk to ^0.14.0
• fix(deps): update dependency @jrmdayn/googleapis-batcher to ^0.10.0
• fix(deps): update dependency @tanstack/react-query to v5.91.3
• fix(deps): update dependency @tanstack/react-router to v1.168.1
• fix(deps): update dependency ollama to ^0.6.0
• fix(deps): update dependency pino to v9.14.0
• fix(deps): update dependency zod to v3.25.76
• fix(deps): update lexical monorepo to ^0.42.0 (@lexical/link, @lexical/list, @lexical/react, @lexical/rich-text, @lexical/selection, @lexical/utils, lexical)
• chore(deps): update actions/checkout action to v6
• chore(deps): update commitlint monorepo to v20 (major) (@commitlint/cli, @commitlint/config-conventional)
• chore(deps): update dependency @biomejs/biome to v2
• chore(deps): update dependency @faker-js/faker to v10
• chore(deps): update dependency @types/node to v25
• chore(deps): update dependency @types/uuid to v11
• chore(deps): update dependency @vitejs/plugin-react to v6
• chore(deps): update dependency globals to v17
• chore(deps): update dependency jsdom to v29
• chore(deps): update dependency p-queue to v9
• chore(deps): update dependency vite to v8
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update eslint monorepo to v10 (major) (@eslint/js, eslint)
• chore(deps): update postgres docker tag to v18
• chore(deps): update react monorepo (major) (@types/react, @types/react-dom, eslint-plugin-react-hooks)
• chore(deps): update semantic-release monorepo (major) (@semantic-release/npm, semantic-release)
• chore(deps): update vitest monorepo to v4 (major) (@vitest/coverage-v8, @vitest/ui, vitest)
• fix(deps): update dependency @ai-sdk/amazon-bedrock to v4
• fix(deps): update dependency @ai-sdk/google-vertex to v4
• fix(deps): update dependency @ai-sdk/openai to v3
• fix(deps): update dependency @ai-sdk/provider to v3
• fix(deps): update dependency @langchain/core to v1
• fix(deps): update dependency @notionhq/client to v5
• fix(deps): update dependency @paralleldrive/cuid2 to v3
• fix(deps): update dependency @tanstack/react-form to v1
• fix(deps): update dependency ai to v6
• fix(deps): update dependency google-auth-library to v10
• fix(deps): update dependency googleapis to v171
• fix(deps): update dependency gpt-tokenizer to v3
• fix(deps): update dependency openai to v6
• fix(deps): update dependency ora to v9
• fix(deps): update dependency p-limit to v7
• fix(deps): update dependency pdf-parse to v2
• fix(deps): update dependency pg-boss to v12
• fix(deps): update dependency pino to v10
• fix(deps): update dependency pino-http to v11
• fix(deps): update dependency simple-icons to v16
• fix(deps): update dependency uuid to v13
• fix(deps): update dependency zod to v4
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up docker package xyne/vespa-gpu.

Files affected: deployment/docker-compose.gpu.yml, deployment/docker-compose.prod.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency hono to v4.12.7 [security]
• fix(deps): update dependency @langchain/community to v1 [security]
• chore(deps): update dependency drizzle-kit to v0.31.10
• fix(deps): update dependency autoevals to ^0.0.132
• chore(deps): update dependency @vitest/coverage-v8 to v3.2.4
• chore(deps): update grafana/loki docker tag to v3.6.7
• chore(deps): update grafana/promtail docker tag to v3.6.7
• fix(deps): update dependency @hono/oauth-providers to ^0.8.0
• fix(deps): update dependency @hono/zod-validator to ^0.7.0
• fix(deps): update dependency @tanstack/react-form to v0.48.2
• fix(deps): update dependency drizzle-orm to ^0.45.0
• fix(deps): update dependency lucide-react to ^0.577.0
• fix(deps): update dependency together-ai to ^0.38.0
• chore(deps): update dependency tailwindcss to v4
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update dependency tailwind-merge to v3

Detected Dependencies

bun (1)

frontend/package.json (88)

• @lexical/link ^0.38.1 → [Updates: ^0.42.0]
• @lexical/list ^0.38.1 → [Updates: ^0.42.0]
• @lexical/react ^0.38.1 → [Updates: ^0.42.0]
• @lexical/rich-text ^0.38.1 → [Updates: ^0.42.0]
• @lexical/selection ^0.38.1 → [Updates: ^0.42.0]
• @lexical/utils ^0.38.1 → [Updates: ^0.42.0]
• @livekit/components-core ^0.12.9
• @livekit/components-react ^2.9.14
• @livekit/components-styles ^1.1.6
• @radix-ui/react-accordion ^1.2.11
• @radix-ui/react-dialog ^1.1.11
• @radix-ui/react-dropdown-menu ^2.1.4
• @radix-ui/react-icons ^1.3.2
• @radix-ui/react-label ^2.1.1
• @radix-ui/react-popover ^1.1.15
• @radix-ui/react-progress ^1.1.1
• @radix-ui/react-select ^2.2.6
• @radix-ui/react-slot ^1.1.1
• @radix-ui/react-tabs ^1.1.2
• @radix-ui/react-toast ^1.2.4
• @radix-ui/react-tooltip ^1.1.6
• @tanstack/react-form 0.32.0 → [Updates: 0.48.2, 1.28.5]
• @tanstack/react-query 5.62.11 → [Updates: 5.91.3]
• @tanstack/react-router 1.114.17 → [Updates: 1.168.1]
• @tanstack/react-virtual 3.13.12 → [Updates: 3.13.23]
• @uiw/react-markdown-preview ^5.1.3
• @xyflow/react ^12.8.4
• caniuse-lite ^1.0.30001696
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• date-fns ^4.1.0
• docx-preview ^0.3.5
• dompurify ^3.2.6
• emoji-picker-react ^4.15.0
• hono ^4.6.15
• jszip ^3.10.1
• lexical ^0.38.1 → [Updates: ^0.42.0]
• livekit-client ^2.15.7
• livekit-server-sdk ^2.13.3
• lucide-react ^0.475.0 → [Updates: ^0.577.0]
• mermaid ^11.6.0
• notion-md-crawler ^1.0.0
• papaparse ^5.5.3
• react ^19.2.1
• react-dom ^19.2.1
• react-icons ^5.5.0
• react-is ^19.2.1
• react-json-view ^1.21.3
• react-pdf ^10.1.0
• react-simple-icons ^1.0.0-beta.5
• react-zoom-pan-pinch ^3.7.0
• recharts ^3.1.0
• simple-icons ^15.13.0 → [Updates: ^16.0.0]
• stopword ^3.1.5
• tailwind-merge ^2.6.0 → [Updates: ^3.0.0]
• tailwindcss-animate ^1.0.7
• xlsx ^0.18.5
• zod 3.23.8 → [Updates: 3.25.76, 4.3.6]
• zustand ^5.0.8
• @eslint/js ^9.17.0 → [Updates: ^10.0.0]
• @tanstack/router-devtools ^1.93.0
• @tanstack/router-plugin ^1.93.0
• @testing-library/jest-dom ^6.6.3
• @testing-library/react ^16.3.0
• @types/node ^22.10.3 → [Updates: ^25.0.0]
• @types/papaparse ^5.3.16
• @types/react ^18.3.27 → [Updates: ^19.0.0]
• @types/react-dom ^18.3.7 → [Updates: ^19.0.0]
• @types/stopword ^2.0.3
• @types/xlsx ^0.0.36
• @vitejs/plugin-react ^4.3.4 → [Updates: ^6.0.0]
• @vitest/coverage-v8 3.1.4 → [Updates: 3.2.4, 4.1.0]
• @vitest/ui ^3.1.4 → [Updates: ^4.0.0]
• autoprefixer ^10.4.20
• eslint ^9.17.0 → [Updates: ^10.0.0]
• eslint-plugin-react-hooks ^5.1.0 → [Updates: ^7.0.0]
• eslint-plugin-react-refresh ^0.4.16 → [Updates: ^0.5.0]
• globals ^15.14.0 → [Updates: ^17.0.0]
• jsdom ^26.1.0 → [Updates: ^29.0.0]
• madge ^8.0.0
• postcss ^8.4.49
• tailwindcss ^3.4.17 → [Updates: ^4.0.0]
• typescript ^5.7.2
• typescript-eslint ^8.19.0
• vite ^5.4.11 → [Updates: ^8.0.0]
• vite-plugin-static-copy ^3.1.1
• vite-plugin-svgr ^4.3.0
• vitest ^3.1.4 → [Updates: ^4.0.0]

docker-compose (13)

deployment/docker-compose.dev.yml (2)

• postgres 15-alpine → [Updates: 18-alpine]
• grafana/loki 3.4.1 → [Updates: 3.6.7]

deployment/docker-compose.gpu.yml (1)

• xyne/vespa-gpu 8.514

deployment/docker-compose.metrics.yml (2)

• postgres 15-alpine → [Updates: 18-alpine]
• grafana/loki 3.4.1 → [Updates: 3.6.7]

deployment/docker-compose.prod.yml (3)

• xyne/vespa-gpu 8.583.10
• grafana/loki 3.4.1 → [Updates: 3.6.7]
• nginx 1.26-alpine → [Updates: 1.29-alpine]

deployment/docker-compose.selfhost.yml (1)

• postgres 15-alpine → [Updates: 18-alpine]

deployment/docker-compose.yml (2)

• postgres 15-alpine → [Updates: 18-alpine]
• grafana/loki 3.4.1 → [Updates: 3.6.7]

deployment/portable/docker-compose.app-build.yml

deployment/portable/docker-compose.app-version.yml

deployment/portable/docker-compose.infrastructure-cpu.yml (5)

• postgres 15-alpine → [Updates: 18-alpine]
• livekit/livekit-server v1.9.1 → [Updates: v1.9.12]
• grafana/loki 3.4.1 → [Updates: 3.6.7]
• grafana/promtail 3.4.1 → [Updates: 3.6.7]
• nginx 1.26-alpine → [Updates: 1.29-alpine]

deployment/portable/docker-compose.infrastructure.yml (5)

• postgres 15-alpine → [Updates: 18-alpine]
• livekit/livekit-server v1.9.1 → [Updates: v1.9.12]
• grafana/loki 3.4.1 → [Updates: 3.6.7]
• grafana/promtail 3.4.1 → [Updates: 3.6.7]
• nginx 1.26-alpine → [Updates: 1.29-alpine]

deployment/portable/docker-compose.sync-build.yml

deployment/portable/docker-compose.sync-version.yml

deployment/portable/docker-compose.yml

dockerfile (5)

deployment/Dockerfile-vespa-gpu (1)

• vespaengine/vespa 8.583.10 → [Updates: 8.660.21]

deployment/portable/Dockerfile-vespa-gpu

deployment/portable/vespa-deploy/Dockerfile

Dockerfile (1)

• oven/bun 1

Dockerfile-vespa

github-actions (3)

.github/workflows/release.yml (4)

• actions/checkout v4 → [Updates: v6]
• oven-sh/setup-bun v2
• docker/login-action v3 → [Updates: v4]
• docker/build-push-action v6 → [Updates: v7]

.github/workflows/tests.yml (2)

• actions/checkout v4 → [Updates: v6]
• oven-sh/setup-bun v2

.github/workflows/tsc-check.yml (2)

• actions/checkout v4 → [Updates: v6]
• oven-sh/setup-bun v2

npm (1)

server/package.json (100)

• @ai-sdk/amazon-bedrock ^3.0.23 → [Updates: ^4.0.0]
• @ai-sdk/google-vertex ^3.0.29 → [Updates: ^4.0.0]
• @ai-sdk/openai ^2.0.34 → [Updates: ^3.0.0]
• @ai-sdk/provider ^2.0.0 → [Updates: ^3.0.0]
• @anthropic-ai/vertex-sdk ^0.13.1 → [Updates: ^0.14.0]
• @aws-sdk/client-bedrock ^3.797.0
• @aws-sdk/client-bedrock-runtime ^3.797.0
• @aws-sdk/client-ses ^3.879.0
• @azure/identity ^4.12.0
• @azure/msal-node ^3.7.3
• @google-cloud/vertexai ^1.10.0
• @google/genai ^1.9.0
• @hono/event-emitter ^2.0.0
• @hono/oauth-providers ^0.6.2 → [Updates: ^0.8.0]
• @hono/zod-validator ^0.2.2 → [Updates: ^0.7.0]
• @jrmdayn/googleapis-batcher ^0.8.0 → [Updates: ^0.10.0]
• @langchain/community ^0.3.22 → [Updates: ^1.1.18]
• @langchain/core ^0.3.27 → [Updates: ^1.0.0]
• @livekit/components-core ^0.12.9
• @microsoft/microsoft-graph-client ^3.0.7
• @microsoft/microsoft-graph-types ^2.40.0
• @modelcontextprotocol/sdk ^1.11.2
• @notionhq/client ^2.2.15 → [Updates: ^5.0.0]
• @orama/stopwords ^3.0.6
• @paralleldrive/cuid2 ^2.2.2 → [Updates: ^3.0.0]
• @slack/socket-mode ^2.0.4
• @slack/web-api ^7.8.0
• @types/json-schema ^7.0.15
• @types/jszip ^3.4.1
• @types/node ^24.3.0
• @xyne/vespa-ts 1.9.0
• @xynehq/jaf ^0.1.21
• ai ^5.0.51 → [Updates: ^6.0.0]
• arctic ^3.3.0
• async-mutex ^0.5.0
• autoevals ^0.0.119 → [Updates: ^0.0.132]
• canvas ^3.1.0
• cors ^2.8.5
• drizzle-orm ^0.44.5 → [Updates: ^0.45.0]
• drizzle-zod ^0.8.3
• duckdb-async 1.4.0 → [Updates: 1.4.2]
• fast-xml-parser ^5.2.5
• file-type ^21.0.0
• google-auth-library ^9.14.0 → [Updates: ^10.0.0]
• googleapis ^140.0.1 → [Updates: ^171.0.0]
• gpt-tokenizer ^2.8.1 → [Updates: ^3.0.0]
• hono 4.6.15 → [Updates: 4.12.7]
• html-to-text ^9.0.5
• i ^0.3.7
• image-type ^6.0.0
• jose ^6.1.0
• jszip ^3.10.1
• langfuse ^3.38.6
• libreoffice ^0.4.5
• livekit-server-sdk ^2.13.3
• llama3-tokenizer-js ^1.2.0
• nanoid ^5.1.5
• node-sql-parser ^5.3.12
• ollama ^0.5.11 → [Updates: ^0.6.0]
• openai ^5.16.0 → [Updates: ^6.0.0]
• ora ^8.1.1 → [Updates: ^9.0.0]
• p-limit ^6.2.0 → [Updates: ^7.0.0]
• partial-json ^0.1.7
• pdf-lib ^1.17.1
• pdf-parse ^1.1.1 → [Updates: ^2.0.0]
• pdfjs-dist ^5.3.31
• pg-boss ^10.1.5 → [Updates: ^12.0.0]
• picocolors ^1.1.1
• pino 9.6.0 → [Updates: 9.14.0, 10.3.1]
• pino-http ^10.3.0 → [Updates: ^11.0.0]
• pino-pretty ^13.0.0
• playwright ^1.49.1
• postgres ^3.4.5
• prom-client ^15.1.3
• secure-json-parse ^4.0.0
• sharp ^0.34.3
• together-ai ^0.13.0 → [Updates: ^0.38.0]
• uuid ^11.0.0 → [Updates: ^13.0.0]
• xlsx ^0.18.5
• zod ^4.0.15
• @biomejs/biome 1.9.4 → [Updates: 2.4.8]
• @commitlint/cli ^19.8.1 → [Updates: ^20.0.0]
• @commitlint/config-conventional ^19.8.1 → [Updates: ^20.0.0]
• @digitalroute/cz-conventional-changelog-for-jira ^8.0.1
• @faker-js/faker ^9.3.0 → [Updates: ^10.0.0]
• @semantic-release/changelog ^6.0.3
• @semantic-release/commit-analyzer ^13.0.1
• @semantic-release/git ^10.0.1
• @semantic-release/npm ^12.0.2 → [Updates: ^13.0.0]
• @semantic-release/release-notes-generator ^14.1.0
• @types/html-to-text ^9.0.4
• @types/uuid ^10.0.0 → [Updates: ^11.0.0]
• commitizen ^4.3.1
• cz-conventional-changelog ^3.3.0
• drizzle-kit 0.31.4 → [Updates: 0.31.10]
• husky ^9.1.7
• madge ^8.0.0
• p-queue ^8.0.1 → [Updates: ^9.0.0]
• semantic-release ^24.2.7 → [Updates: ^25.0.0]
• typescript ^5.0.0

---

• Check this box to trigger a request for Renovate to run again on this repository