Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@types/uuid

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (4)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
npm	@js-temporal/polyfill	2025-03-31
npm	node-jose	2023-02-16
npm	reflect-metadata	2024-03-29
npm	x-forwarded-fetch	2024-05-18

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Lock file maintenance

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update dependency @biomejs/biome to v2.5.2
• Update dependency @hono/node-server to v2.0.8
• Update dependency @logtape/logtape to v2.2.2
• Update dependency sharp to v0.35.3
• Update dependency @sentry/node to v10.63.0
• Update dependency @types/sinon to v22

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update docker/login-action digest to c99871d
• Update docker/metadata-action digest to dc80280
• Update docker/setup-buildx-action digest to bb05f3f
• Update ubuntu:24.04 Docker digest to 4fbb8e6
• Update dependency node-html-parser to v8.0.4
• Update Fedify packages to v2.3.1 (@fedify/cli, @fedify/fedify, @fedify/hono, @fedify/redis, @fedify/vocab, @fedify/vocab-runtime, @fedify/webfinger)
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update Node.js to v24

Detected Dependencies

docker-compose (3)

docker-compose.yml (10)

• jaegertracing/all-in-one 1.76.0@sha256:ab6f1a1f0fb49ea08bcd19f6b84f6081d0d44b364b6de148e1798eb5816bacac
• mysql 8.4.10@sha256:d36d39a64cd12a5c1cc9e6aa2bfb5f8d4c81a2f6586e0a04a9ae13939db02209 → [Updates: 9.7.1]
• redis 7-alpine@sha256:6ab0b6e7381779332f97b8ca76193e45b0756f38d4c0dcda72dbb3c32061ab99 → [Updates: 8-alpine]
• gcr.io/google.com/cloudsdktool/google-cloud-cli 499.0.0-emulators@sha256:38606e0ec8b892ff2be6fb7238c6b98e7b0b69f60ed433fa2b196bdf4646caf9 → [Updates: 575.0.0-emulators]
• mysql 8.4.10@sha256:d36d39a64cd12a5c1cc9e6aa2bfb5f8d4c81a2f6586e0a04a9ae13939db02209 → [Updates: 9.7.1]
• redis 7-alpine@sha256:6ab0b6e7381779332f97b8ca76193e45b0756f38d4c0dcda72dbb3c32061ab99 → [Updates: 8-alpine]
• gcr.io/google.com/cloudsdktool/google-cloud-cli 499.0.0-emulators@sha256:38606e0ec8b892ff2be6fb7238c6b98e7b0b69f60ed433fa2b196bdf4646caf9 → [Updates: 575.0.0-emulators]
• caddy 2@sha256:af5fdcd76f2db5e4e974ee92f96ee8c0fc3edb55bd4ba5032547cbf3f65e486d
• wiremock/wiremock 3.13.2-1@sha256:8bdd64a25db911ba521a38aebf1590d96767c2d29f3e941e2f496a760bbdf47d
• wiremock/wiremock 3.13.2-1@sha256:8bdd64a25db911ba521a38aebf1590d96767c2d29f3e941e2f496a760bbdf47d

jobs/__template__/docker-compose.yml (1)

• mysql 8.4.10@sha256:d36d39a64cd12a5c1cc9e6aa2bfb5f8d4c81a2f6586e0a04a9ae13939db02209 → [Updates: 9.7.1]

jobs/reconcile-account-topics/docker-compose.yml (1)

• mysql 8.4.10@sha256:d36d39a64cd12a5c1cc9e6aa2bfb5f8d4c81a2f6586e0a04a9ae13939db02209 → [Updates: 9.7.1]

dockerfile (7)

dev/fake-gcs/Dockerfile (1)

• fsouza/fake-gcs-server sha256:3730da0e31f7e5186a90ec4899dc2c336104e7599df400411392ef17e684c31f

dev/nginx/Dockerfile (1)

• nginx 1.31.2@sha256:ec4ed8b5299e5e90694af7750eb6dffd2627317d30544d056b0371f8082f7bce

Dockerfile (1)

• node 22.23.1-alpine@sha256:16e22a550f3863206a3f701448c45f7912c6896a62de43add43bb9c86130c3e2 → [Updates: 24.18.0-alpine]

jobs/__template__/Dockerfile (1)

• oven/bun 1.3.14-alpine@sha256:5acc90a93e91ff07bf72aa90a7c9f0fa189765aec90b47bdbf2152d2196383c0

jobs/reconcile-account-topics/Dockerfile (1)

• oven/bun 1.3.14-alpine@sha256:5acc90a93e91ff07bf72aa90a7c9f0fa189765aec90b47bdbf2152d2196383c0

migrate/Dockerfile (1)

• debian bookworm-slim@sha256:60eac759739651111db372c07be67863818726f754804b8707c90979bda511df

migrate/gh-ost.Dockerfile (1)

• ubuntu 24.04@sha256:786a8b558f7be160c6c8c4a54f9a57274f3b4fb1491cf65146521ae77ff1dc54 → [Updates: 26.04, 24.04]

github-actions (7)

.github/workflows/build.yml (25)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• biomejs/setup-biome v2@4c91541eaada48f67d7dbd7833600ce162b68f51
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• docker/setup-buildx-action v4@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4]
• docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6]
• docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6]
• docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6]
• docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6]
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• docker/login-action v4@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4]
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• dorny/paths-filter v4@fbd0ab8f3e69293af611ebaee6363fc25e6d187d
• docker/setup-buildx-action v4@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4]
• docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6]
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• docker/login-action v4@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4]
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a

.github/workflows/cicd.yml (1)

• tryghost/actions main@2390ec2c041d2413852201ac3894381e98e4b13f

.github/workflows/deploy-pr.yml (5)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• hashicorp/setup-terraform v4@dfe3c3f87815947d99a8997f908cb6525fc44e9e
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• google-github-actions/deploy-cloudrun v3@2028e2d7d30a78c6910e0632e48dd561b064884d

.github/workflows/deploy.yml (8)

• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• google-github-actions/deploy-cloudrun v3@2028e2d7d30a78c6910e0632e48dd561b064884d
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• google-github-actions/deploy-cloudrun v3@2028e2d7d30a78c6910e0632e48dd561b064884d
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• google-github-actions/deploy-cloudrun v3@2028e2d7d30a78c6910e0632e48dd561b064884d
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• google-github-actions/deploy-cloudrun v3@2028e2d7d30a78c6910e0632e48dd561b064884d

.github/workflows/ephemeral-staging-teardown.yml (6)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• hashicorp/setup-terraform v4@dfe3c3f87815947d99a8997f908cb6525fc44e9e
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093

.github/workflows/push.yml (7)

• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• google-github-actions/auth v3@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
• docker/login-action v4@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4]
• docker/login-action v4@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4]
• docker/setup-buildx-action v4@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4]

.github/workflows/test.yml (6)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

npm (2)

jobs/reconcile-account-topics/package.json (3)

• @fedify/vocab 2.3.0 → [Updates: 2.3.1]
• @fedify/webfinger 2.3.0 → [Updates: 2.3.1]
• mysql2 3.22.5

package.json (57)

• @fedify/fedify 2.3.0 → [Updates: 2.3.1]
• @fedify/hono 2.3.0 → [Updates: 2.3.1]
• @fedify/redis 2.3.0 → [Updates: 2.3.1]
• @fedify/vocab 2.3.0 → [Updates: 2.3.1]
• @fedify/vocab-runtime 2.3.0 → [Updates: 2.3.1]
• @fedify/webfinger 2.3.0 → [Updates: 2.3.1]
• @google-cloud/opentelemetry-cloud-trace-exporter 3.0.0
• @google-cloud/opentelemetry-cloud-trace-propagator 0.21.0
• @google-cloud/pubsub 5.3.1
• @google-cloud/storage 7.21.0
• @hono/node-server 2.0.6 → [Updates: 2.0.8]
• @js-temporal/polyfill 0.5.1
• @logtape/logtape 2.2.1 → [Updates: 2.2.2]
• @opentelemetry/api 1.9.1
• @opentelemetry/core 2.8.0
• @opentelemetry/exporter-trace-otlp-proto 0.219.0
• @opentelemetry/resources 2.8.0
• @opentelemetry/sdk-trace-base 2.8.0
• @sentry/node 10.62.0 → [Updates: 10.63.0]
• awilix 13.0.5
• es-toolkit 1.49.0
• hono 4.12.27
• html-to-text 10.0.0
• ioredis 5.11.1
• jsonwebtoken 9.0.3
• knex 3.3.0
• ky 2.0.2
• linkify-html 4.3.3
• linkifyjs 4.3.3
• mysql2 3.22.5
• node-html-parser 8.0.3 → [Updates: 8.0.4]
• node-jose 2.2.0
• reflect-metadata 0.2.2
• sanitize-html 2.17.5
• sharp 0.35.2 → [Updates: 0.35.3]
• uuid 14.0.1
• x-forwarded-fetch 0.2.0
• zod 4.4.3
• @biomejs/biome 2.5.1 → [Updates: 2.5.2]
• @cucumber/cucumber 13.0.0
• @faker-js/faker 10.5.0
• @fedify/cli 2.3.0 → [Updates: 2.3.1]
• @types/html-to-text 9.0.4
• @types/jsonwebtoken 9.0.10
• @types/node 22.20.0
• @types/node-jose 1.1.13
• @types/sanitize-html 2.16.1
• @types/sinon 21.0.1 → [Updates: 22.0.0]
• @types/uuid 11.0.0
• @vitest/coverage-v8 4.1.9
• concurrently 10.0.3
• esbuild 0.28.1
• nock 14.0.16
• typescript 6.0.3
• vite-tsconfig-paths 6.1.1
• vitest 4.1.9
• wiremock-captain 4.1.3

nvm (1)

.nvmrc (1)

• node 22.23.1 → [Updates: 24.18.0]

renovate-config (1)

.github/renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository