Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@otplib/preset-default
npm	@types/uuid

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update dependency @types/node to v24.13.6
• Update dependency @sentry/node to v10.75.0
• Update dependency axios to v1.20.0
• Update dependency lint-staged to v17.5.1
• Update dependency nodemailer to v9.1.1
• Update dependency oxfmt to ^0.68.0
• Update dependency oxlint to v1.83.0
• Update dependency oxlint-tsgolint to ^0.25.0
• Update dependency stripe to v18.5.0
• Update dependency zod to v4.6.5
• Update ghcr.io/pnpm/pnpm Docker tag to v12.5.1
• Update mikro-orm to v7.2.0 (@mikro-orm/cli, @mikro-orm/core, @mikro-orm/decorators, @mikro-orm/migrations, @mikro-orm/mysql, @mikro-orm/reflection)
• Update actions/checkout action to v7
• Update clickhouse/clickhouse-server Docker tag to v26
• Update codecov/codecov-action action to v7
• Update dependency @ngneat/falso to v8
• Update dependency @types/bcrypt to v6
• Update dependency @types/nodemailer to v8
• Update dependency @types/supertest to v7
• Update dependency @types/uuid to v11
• Update dependency axios-mock-adapter to v2
• Update dependency bullmq to v6
• Update dependency bullmq-otel to v2
• Update dependency dotenv to v18
• Update dependency ioredis to v6
• Update dependency koa-logger to v4
• Update dependency nodemailer to v10
• Update dependency otplib to v13
• Update dependency oxlint-tsgolint to v7
• Update dependency p-retry to v8
• Update dependency rate-limiter-flexible to v11
• Update dependency s3mini to v1
• Update dependency stripe to v22
• Update dependency typescript to v7
• Update dependency vite to v8
• Update mysql Docker tag to v26
• Update vitest monorepo to v5 (@vitest/coverage-v8, vitest)
• 🔐 Create all awaiting schedule PRs at once 🔐

Detected Dependencies

docker-compose (3)

docker-compose.ci.yml (1)

• redis 8-alpine

docker-compose.test.yml (3)

• mysql 8.4 → [Updates: 26.7]
• arm64v8/redis 8-alpine
• clickhouse/clickhouse-server 24.12-alpine → [Updates: 26.8-alpine]

docker-compose.yml (3)

• mysql 8.4 → [Updates: 26.7]
• arm64v8/redis 8-alpine
• clickhouse/clickhouse-server 24.12-alpine → [Updates: 26.8-alpine]

dockerfile (1)

Dockerfile (1)

• ghcr.io/pnpm/pnpm 12.0.0 → [Updates: 12.5.1]

github-actions (5)

.github/actions/setup/action.yml (2)

• pnpm/setup v2
• node 24

.github/workflows/ci.yml (7)

• actions/checkout v6 → [Updates: v7]
• actions/upload-artifact v7
• actions/checkout v6 → [Updates: v7]
• actions/download-artifact v8
• codecov/codecov-action v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]

.github/workflows/create-release.yml (5)

• actions/checkout v6 → [Updates: v7]
• pnpm/setup v2
• softprops/action-gh-release v3
• getsentry/action-release v3
• node 24

.github/workflows/docker.yml (5)

• docker/setup-qemu-action v4
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/build-push-action v7
• appleboy/ssh-action master

.github/workflows/tag.yml (5)

• actions/checkout v6 → [Updates: v7]
• EndBug/version-check v3
• tvdias/github-tagger v0.0.2
• actions/github-script v9
• actions/github-script v9

npm (2)

package.json (81)

• @clickhouse/client ^1.15.0
• @hyperdx/node-opentelemetry ^0.11.0
• @koa/bodyparser ^6.1.0
• @koa/cors ^5.0.0
• @mikro-orm/core ^7.1.15 → [Updates: ^7.1.15]
• @mikro-orm/decorators ^7.1.15 → [Updates: ^7.1.15]
• @mikro-orm/migrations ^7.1.15 → [Updates: ^7.1.15]
• @mikro-orm/mysql ^7.1.15 → [Updates: ^7.1.15]
• @mikro-orm/reflection ^7.1.15 → [Updates: ^7.1.15]
• @ngneat/falso ^7.2.0 → [Updates: ^8.0.0]
• @opentelemetry/api ^1.9.1
• @otplib/preset-default ^12.0.1
• @sentry/node ^10.57.0 → [Updates: ^10.57.0]
• archiver ^8.0.0
• axios ^1.18.1 → [Updates: ^1.18.1]
• bcrypt ^6.0.0
• bullmq ^5.40.2 → [Updates: ^5.40.2, ^6.0.0]
• bullmq-otel ^1.0.1 → [Updates: ^2.0.0]
• date-fns ^4.1.0
• dinero.js ^2.0.2
• dotenv ^16.0.0 → [Updates: ^18.0.0]
• handlebars ^4.7.9
• ioredis ^5.10.1 → [Updates: ^6.0.0]
• jsonwebtoken ^9.0.0
• koa ^3.2.1
• koa-compose ^4.1.0
• koa-compress ^5.1.1
• koa-helmet ^9.0.0
• koa-jwt ^4.0.4
• koa-logger ^3.2.1 → [Updates: ^4.0.0]
• koa-tree-router ^0.13.1
• lodash-es ^4.18.1
• mikro-orm-cache-adapter-redis ^4.0.0
• nodemailer ^9.0.1 → [Updates: ^9.0.1, ^10.0.0]
• obscenity ^0.4.6
• otplib ^12.0.1 → [Updates: ^13.0.0]
• p-retry ^7.1.1 → [Updates: ^8.0.0]
• qrcode ^1.5.0
• qs ^6.14.2
• rate-limiter-flexible ^7.3.0 → [Updates: ^11.0.0]
• redlock-universal ^0.8.4
• s3mini ^0.9.2 → [Updates: ^1.0.0]
• sqids ^0.3.0
• stripe 18.0.0 → [Updates: 18.5.0, 22.6.2]
• uuid ^14.0.0
• ws ^8.21.0
• zod ^4.3.6 → [Updates: ^4.3.6]
• @mikro-orm/cli ^7.1.15 → [Updates: ^7.1.15]
• @types/archiver ^8.0.0
• @types/bcrypt ^5.0.2 → [Updates: ^6.0.0]
• @types/jsonwebtoken ^9.0.9
• @types/koa ^3.0.3
• @types/koa-bodyparser ^4.3.12
• @types/koa-compress ^4.0.7
• @types/koa-logger ^3.1.2
• @types/koa__cors ^5.0.0
• @types/lodash-es ^4.17.12
• @types/node 24 → [Updates: 24]
• @types/nodemailer ^6.4.17 → [Updates: ^8.0.0]
• @types/qrcode ^1.5.5
• @types/qs ^6.9.18
• @types/supertest ^6.0.2 → [Updates: ^7.0.0]
• @types/unzipper ^0.10.11
• @types/uuid ^10.0.0 → [Updates: ^11.0.0]
• @types/ws ^8.5.13
• @vitest/coverage-v8 ^4.1.5 → [Updates: ^5.0.0]
• axios-mock-adapter ^1.22.0 → [Updates: ^2.0.0]
• csv-parse ^7.0.0
• hefty ^2.0.0
• husky ^9.0.11
• lint-staged >=10 → [Updates: >=10]
• oxfmt ^0.48.0 → [Updates: ^0.68.0]
• oxlint ^1.63.0 → [Updates: ^1.63.0]
• oxlint-tsgolint ^0.22.1 → [Updates: ^0.25.0, ^7.0.0]
• supertest ^7.0.0
• tsx ^4.21.0
• typescript ^5.9.3 → [Updates: ^7.0.0]
• unzipper ^0.12.3
• vite ^7.3.1 → [Updates: ^8.0.0]
• vitest ^4.1.5 → [Updates: ^5.0.0]
• node >=24.0.0

pnpm-workspace.yaml

nvm (1)

.nvmrc (1)

• node 24

---

• Check this box to trigger a request for Renovate to run again on this repository