Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency vitest-canvas-mock to v1.1.4
• chore(devdeps): update dependency @eslint/eslintrc to v3.3.5
• chore(devdeps): update dependency @types/express to v5.0.6
• chore(devdeps): update dependency @types/express to v5.0.6
• chore(devdeps): update eslint monorepo to v9.39.4 (@eslint/js, eslint)
• fix(deps): update dependency nanoid to v5.1.7
• chore(deps): update dependency tsx to v4.21.0
• chore(deps): update effect-dependencies (@effect/cli, @effect/language-service, @effect/opentelemetry, @effect/platform, @effect/platform-node, @effect/vitest)
• chore(devdeps): update commitlint monorepo to v20.5.0 (@commitlint/cli, @commitlint/config-conventional, @commitlint/prompt)
• chore(devdeps): update dependency @changesets/changelog-github to ^0.6.0
• chore(devdeps): update dependency @changesets/cli to v2.30.0
• chore(devdeps): update dependency eslint-plugin-package-json to v0.91.1
• chore(devdeps): update dependency eslint-plugin-playwright to v2.10.1
• chore(devdeps): update dependency fast-check to v4.6.0
• chore(devdeps): update dependency jsdom to v27.4.0
• chore(devdeps): update dependency prettier to v3.8.2
• chore(devdeps): update dependency tsx to v4.21.0
• chore(devdeps): update jamesives/github-pages-deploy-action action to v4.8.0
• chore(devdeps): update playwright monorepo to v1.59.1 (@playwright/test, playwright)
• chore(devdeps): update pnpm to v10.33.0
• chore(devdeps): update typedoc-dependencies (typedoc, typedoc-github-theme)
• chore(devdeps): update typescript-eslint-dependencies to v8.58.1 (@typescript-eslint/eslint-plugin, @typescript-eslint/parser, @typescript-eslint/typescript-estree, @typescript-eslint/utils)
• fix(deps): update dependency @forgerock/javascript-sdk to v4.9.0
• fix(deps): update opentelemetry-js monorepo (@opentelemetry/sdk-logs, @opentelemetry/sdk-metrics, @opentelemetry/sdk-trace-base, @opentelemetry/sdk-trace-node, @opentelemetry/sdk-trace-web)
• chore(deps): update dependency immer to v11
• chore(deps): update dependency jsdom to v29
• chore(deps): update dependency jsonc-eslint-parser to v3
• chore(deps): update dependency picomatch@<3 to v4
• chore(deps): update dependency undici@^7 to v8
• chore(deps): update eslint monorepo to v10 (major) (@eslint/js, eslint)
• chore(deps): update vite-vitest-dependencies (major) (@vitest/coverage-v8, @vitest/ui, vite, vitest)
• chore(devdeps): update actions/checkout action to v6
• chore(devdeps): update actions/upload-artifact action to v6
• chore(devdeps): update codecov/codecov-action action to v6
• chore(devdeps): update dawidd6/action-download-artifact action to v20
• chore(devdeps): update nrwl/nx-set-shas action to v5
• chore(devdeps): update pnpm/action-setup action to v5
• chore(devdeps): update slackapi/slack-github-action action to v3
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update dependency cors to v2.8.6
• chore(devdeps): update dependency eslint-plugin-prettier to v5.5.5
• chore(devdeps): update dependency pkg-pr-new to ^0.0.66
• chore(deps): update dependency msw to v2.13.4
• chore(deps): update dependency superagent to v10.3.0
• chore(devdeps): update dependency typescript-eslint to v8.58.1
• chore(devdeps): update swc monorepo (@swc/cli, @swc/core, swc-loader)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency @microsoft/api-extractor to v7.58.3
• chore(devdeps): update dependency @evilmartians/lefthook to v2.1.6
• chore(devdeps): update dependency verdaccio to v6.5.1
• chore(devdeps): update actions/cache action to v5

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency effect to v3.20.0 [security]
• chore(deps): update dependency @reduxjs/toolkit to v2.11.2
• chore(devdeps): update dependency dotenv to v17.4.1
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(devdeps): update dependency jsonc-eslint-parser to v2.4.2
• chore(devdeps): update dependency eslint-plugin-import to v2.32.0
• chore(deps): update dependency conventional-changelog-conventionalcommits to v9
• chore(deps): update node.js to v24 (node, @types/node)

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (5)

• mcr.microsoft.com/devcontainers/typescript-node 24-bookworm
• ghcr.io/duduribeiro/devcontainer-features/neovim 1
• ghcr.io/devcontainers/features/github-cli 1
• ghcr.io/dhoeric/features/act 1
• ghcr.io/devcontainers/features/docker-in-docker 2

github-actions (7)

.github/actions/publish-beta/action.yml (1)

• JamesIves/github-pages-deploy-action v4.7.4 → [Updates: v4.8.0]

.github/actions/publish-release/action.yml (2)

• slackapi/slack-github-action v2.1.1 → [Updates: v3.0.1]
• JamesIves/github-pages-deploy-action v4.7.4 → [Updates: v4.8.0]

.github/actions/setup/action.yml (5)

• pnpm/action-setup v4 → [Updates: v5]
• actions/setup-node v6
• actions/cache v4 → [Updates: v5]
• nrwl/nx-set-shas v4 → [Updates: v5]
• actions/upload-artifact v5 → [Updates: v6]

.github/workflows/ci-fork.yml (5)

• actions/checkout v4 → [Updates: v6]
• pnpm/action-setup v4 → [Updates: v5]
• actions/setup-node v6
• actions/cache v4 → [Updates: v5]
• nrwl/nx-set-shas v4 → [Updates: v5]

.github/workflows/ci.yml (11)

• actions/checkout v4 → [Updates: v6]
• codecov/codecov-action v5 → [Updates: v6]
• rajyan/preview-pages v1
• marocchino/sticky-pull-request-comment v2
• peter-evans/find-comment v4
• peter-evans/create-or-update-comment v5
• peter-evans/create-or-update-comment v5
• dawidd6/action-download-artifact v3 → [Updates: v20]
• actions/upload-artifact v5 → [Updates: v6]
• peter-evans/find-comment v4
• peter-evans/create-or-update-comment v5

.github/workflows/cleanup-docs-preview.yml (1)

• actions/checkout v4 → [Updates: v6]

.github/workflows/publish.yml (5)

• actions/checkout v4 → [Updates: v6]
• changesets/action v1
• actions/upload-artifact v5 → [Updates: v6]
• actions/checkout v4 → [Updates: v6]
• slackapi/slack-github-action v2.1.1 → [Updates: v3.0.1]

nodenv (1)

.node-version (1)

• node 22 → [Updates: 24]

npm (31)

e2e/am-mock-api/package.json (7)

• body-parser ^2.2.2
• cookie-parser ^1.4.7
• cors ^2.8.5 → [Updates: ^2.8.5]
• express ^5.2.1
• superagent ^10.2.3 → [Updates: ^10.2.3]
• uuid ^13.0.0
• @types/express ^5.0.0 → [Updates: ^5.0.0]

e2e/davinci-app/package.json (1)

• @forgerock/javascript-sdk 4.7.0 → [Updates: 4.9.0]

e2e/davinci-suites/package.json

e2e/device-client-app/package.json (3)

• @forgerock/javascript-sdk 4.7.0 → [Updates: 4.9.0]
• effect ^3.12.7 → [Updates: ^3.12.7]
• @effect/language-service ^0.20.0 → [Updates: ^0.85.0]

e2e/journey-app/package.json

e2e/journey-suites/package.json

e2e/mock-api-v2/package.json (6)

• @opentelemetry/sdk-logs 0.207.0 → [Updates: 0.214.0]
• @opentelemetry/sdk-metrics 2.2.0 → [Updates: 2.6.1]
• @opentelemetry/sdk-trace-base 2.2.0 → [Updates: 2.6.1]
• @opentelemetry/sdk-trace-node 2.2.0 → [Updates: 2.6.1]
• @opentelemetry/sdk-trace-web 2.2.0 → [Updates: 2.6.1]
• nanoid 5.1.6 → [Updates: 5.1.7]

e2e/oidc-app/package.json

e2e/oidc-suites/package.json

e2e/protect-app/package.json (1)

• @forgerock/javascript-sdk 4.7.0 → [Updates: 4.9.0]

e2e/protect-suites/package.json

package.json (60)

• @changesets/changelog-github ^0.5.0 → [Updates: ^0.6.0]
• @changesets/cli ^2.27.9 → [Updates: ^2.27.9]
• @commitlint/cli ^20.0.0 → [Updates: ^20.0.0]
• @commitlint/config-conventional ^20.0.0 → [Updates: ^20.0.0]
• @commitlint/prompt ^20.0.0 → [Updates: ^20.0.0]
• @eslint/eslintrc ^3.0.0 → [Updates: ^3.0.0]
• @eslint/js ~9.39.0 → [Updates: ~9.39.0, ~10.0.0]
• @nx/express 22.6.5
• @nx/vitest 22.6.5
• @playwright/test ^1.47.2 → [Updates: ^1.47.2]
• @swc-node/register 1.11.1
• @swc/cli 0.7.10 → [Updates: 0.8.1]
• @swc/core 1.15.8 → [Updates: 1.15.26]
• @swc/helpers 0.5.21
• @types/eslint 9.6.1
• @types/estree ^1.0.1
• @types/express 5.0.5 → [Updates: 5.0.6]
• @types/node 24.9.2 → [Updates: 24.12.2]
• @typescript-eslint/eslint-plugin ^8.45.0 → [Updates: ^8.45.0]
• @typescript-eslint/parser ^8.45.0 → [Updates: ^8.45.0]
• @typescript-eslint/typescript-estree 8.23.0 → [Updates: 8.58.1]
• @typescript-eslint/utils ^8.13.0 → [Updates: ^8.13.0]
• @vitest/coverage-v8 3.2.4 → [Updates: 4.1.2]
• @vitest/ui 3.2.4 → [Updates: 4.1.2]
• conventional-changelog-conventionalcommits ^8.0.0 → [Updates: ^9.0.0]
• cz-conventional-changelog ^3.3.0
• cz-git ^1.6.1
• eslint ^9.8.0 → [Updates: ^9.8.0, ^10.0.0]
• eslint-config-prettier 10.1.8
• eslint-plugin-import 2.31.0 → [Updates: 2.32.0]
• eslint-plugin-package-json 0.30.0 → [Updates: 0.91.1]
• eslint-plugin-playwright ^2.0.0 → [Updates: ^2.0.0]
• eslint-plugin-prettier ^5.2.3 → [Updates: ^5.2.3]
• fast-check ^4.0.0 → [Updates: ^4.0.0]
• @evilmartians/lefthook ^2.1.4 → [Updates: ^2.1.4]
• jiti 2.6.1
• jsdom 27.1.0 → [Updates: 27.4.0, 29.0.1]
• jsonc-eslint-parser ^2.1.0 → [Updates: ^2.1.0, ^3.0.0]
• madge 8.0.0
• pkg-pr-new ^0.0.60 → [Updates: ^0.0.66]
• playwright ^1.47.2 → [Updates: ^1.47.2]
• prettier ^3.2.5 → [Updates: ^3.2.5]
• shx ^0.4.0
• swc-loader 0.2.6 → [Updates: 0.2.7]
• ts-node 10.9.2
• tsx ^4.20.0 → [Updates: ^4.20.0]
• ts-patch 3.3.0
• tslib ^2.5.0
• typedoc ^0.27.4 → [Updates: ^0.28.0]
• typedoc-github-theme 0.2.1 → [Updates: 0.4.0]
• typedoc-plugin-rename-defaults ^0.7.2
• typescript-eslint ^8.19.0 → [Updates: ^8.19.0]
• verdaccio 6.5.0 → [Updates: 6.5.1]
• node ^20 || ^22 || ^24
• pnpm >=10.17.1
• pnpm 10.21.0+sha512.da3337267e400fdd3d479a6c68079ac6db01d8ca4f67572083e722775a796788a7a9956613749e000fac20d424b594f7a791a5f4e2e13581c5ef947f26968a40 → [Updates: 10.33.0]
• rollup ^4.59.0
• undici@^7 ^7.24.0 → [Updates: ^8.0.0]
• picomatch@>=4 ^4.0.4
• picomatch@<3 ^2.3.2 → [Updates: ^4.0.0]

packages/davinci-client/package.json

packages/device-client/package.json (1)

• @forgerock/javascript-sdk 4.7.0 → [Updates: 4.9.0]

packages/journey-client/package.json (1)

• tslib ^2.3.0

packages/oidc-client/package.json

packages/protect/package.json

packages/sdk-effects/iframe-manager/package.json

packages/sdk-effects/logger/package.json

packages/sdk-effects/oidc/package.json

packages/sdk-effects/sdk-request-middleware/package.json

packages/sdk-effects/storage/package.json

packages/sdk-types/package.json

packages/sdk-utilities/package.json

pnpm-workspace.yaml (14)

• @reduxjs/toolkit ^2.8.2 → [Updates: ^2.8.2]
• immer ^10.1.1 → [Updates: ^11.0.0]
• msw ^2.5.1 → [Updates: ^2.5.1]
• effect ^3.20.0 → [Updates: ^3.20.0]
• @effect/cli ^0.69.0 → [Updates: ^0.75.0]
• @effect/language-service ^0.35.2 → [Updates: ^0.85.0]
• @effect/platform ^0.90.0 → [Updates: ^0.96.0]
• @effect/platform-node 0.94.2 → [Updates: 0.106.0]
• @effect/vitest ^0.27.0 → [Updates: ^0.29.0]
• @effect/opentelemetry ^0.56.1 → [Updates: ^0.63.0]
• vitest ^3.2.0 → [Updates: ^4.0.0]
• @vitest/coverage-v8 ^3.2.0 → [Updates: ^4.0.0]
• vitest-canvas-mock ^1.1.3 → [Updates: ^1.1.3]
• vite ^7.3.2 → [Updates: ^8.0.0]

scratchpad/package.json (2)

• dotenv 17.2.3 → [Updates: 17.4.1]
• tsx 4.20.6 → [Updates: 4.21.0]

tools/api-report/package.json (2)

• @microsoft/api-extractor ^7.52.8 → [Updates: ^7.52.8]
• tsx ^4.20.0 → [Updates: ^4.20.0]

tools/interface-mapping-validator/package.json (3)

• ts-morph ^28.0.0
• tsx ^4.20.0 → [Updates: ^4.20.0]
• @forgerock/javascript-sdk 4.9.0

tools/interface-mapping-validator/src/fixtures/mock-package/package.json

tools/release/package.json

tools/user-scripts/package.json

---

• Check this box to trigger a request for Renovate to run again on this repository