Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency rolldown to v1.0.0-rc.1
• chore(deps): update dependency zod to v4.3.6
• chore(deps): update dependency zod to v4.3.6
• chore(deps): update dependency whatwg-url to v15
• chore(deps): update mongo docker tag to v8
• chore(deps): update node.js to v24
• chore(deps): update redis docker tag to v8
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update pnpm/action-setup digest to 1e1c8ea
• chore(deps): update dependency rolldown to v1.0.0-rc.1
• chore(deps): update dependency @sxzz/eslint-config to v7.5.1
• chore(deps): update dependency express to v4.22.1
• chore(deps): update dependency mongodb to v6.21.0
• chore(deps): update dependency whatwg-url to v14.2.0
• chore(deps): update pnpm to v10.28.1
• chore(deps): update appleboy/scp-action action to v1
• chore(deps): update dependency express to v5
• chore(deps): update dependency mongodb to v7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (2)

docker-compose.server.yml (2)

• redis 7-alpine → [Updates: 8-alpine]
• mongo 7 → [Updates: 8]

docker-compose.yml (1)

• mongo 7 → [Updates: 8]

dockerfile (1)

dockerfile (2)

• node 22-alpine → [Updates: 24-alpine]
• node 22-alpine → [Updates: 24-alpine]

github-actions (4)

.github/actions/setup-node/action.yml (2)

• actions/setup-node v6
• pnpm/action-setup e94b270858c939f4f8b43f5c1438fa1d9a67ad5d → [Updates: undefined]

.github/workflows/api-client.yml (1)

• actions/checkout v6

.github/workflows/ci.yml (7)

• actions/checkout v6
• docker/metadata-action v5
• docker/setup-qemu-action v3
• docker/setup-buildx-action v3
• docker/build-push-action v6
• actions/checkout v6
• actions/checkout v6

.github/workflows/release.yml (19)

• actions/checkout v6
• softprops/action-gh-release v2
• actions/checkout v6
• docker/setup-qemu-action v3
• docker/metadata-action v5
• docker/setup-buildx-action v3
• docker/build-push-action v6
• docker/login-action v3
• docker/build-push-action v6
• actions/upload-artifact v6
• actions/download-artifact v7
• docker/login-action v3
• docker/setup-buildx-action v3
• docker/metadata-action v5
• actions/checkout v6
• robinraju/release-downloader v1.12
• appleboy/scp-action v0.1.7 → [Updates: v1.0.0]
• appleboy/scp-action v0.1.7 → [Updates: v1.0.0]
• appleboy/scp-action v0.1.7 → [Updates: v1.0.0]

npm (9)

apps/core/external/pino/package.json

apps/core/external/request/package.json

apps/core/package.json (108)

• @ai-sdk/anthropic ^3.0.23
• @ai-sdk/openai 3.0.18
• @antfu/install-pkg 1.1.0
• @babel/core 7.28.6
• @babel/plugin-transform-modules-commonjs 7.28.6
• @babel/plugin-transform-typescript 7.28.6
• @babel/types ^7.28.5
• @fastify/cookie 11.0.2
• @fastify/multipart 9.4.0
• @fastify/static 9.0.0
• @innei/next-async 0.4.0
• @innei/pretty-logger-nestjs 0.4.0
• @keyv/redis 5.1.6
• @nestjs/cache-manager 3.1.0
• @nestjs/common 11.1.12
• @nestjs/core 11.1.12
• @nestjs/event-emitter 3.0.1
• @nestjs/mapped-types ^2.1.0
• @nestjs/platform-fastify 11.1.12
• @nestjs/platform-socket.io 11.1.12
• @nestjs/schedule 6.1.0
• @nestjs/throttler 6.5.0
• @nestjs/websockets 11.1.12
• @simplewebauthn/server 13.2.2
• @socket.io/redis-adapter 8.3.0
• @socket.io/redis-emitter 5.1.0
• @typegoose/auto-increment ^5.0.0
• @typegoose/typegoose ^13.0.0
• @types/jsonwebtoken 9.0.10
• ai 6.0.49
• axios ^1.13.3
• axios-retry 4.5.0
• bcryptjs ^3.0.3
• better-auth 1.4.17
• blurhash 2.0.5
• cache-manager 7.2.8
• commander 14.0.2
• dayjs 1.11.19
• dotenv ^17.2.3
• dotenv-expand ^12.0.3
• ejs 4.0.1
• es-toolkit ^1.44.0
• form-data 4.0.5
• inquirer ^13.2.1
• isbot 5.1.33
• js-yaml ^4.1.1
• json5 2.2.3
• jsonwebtoken 9.0.3
• jszip 3.10.1
• keyv 5.6.0
• linkedom 0.18.12
• lru-cache 11.2.5
• marked 17.0.1
• mime-types ^3.0.1
• mkdirp ^3.0.1
• mongoose ^9.1.5
• mongoose-aggregate-paginate-v2 1.1.4
• mongoose-autopopulate 1.2.1
• mongoose-lean-getters 2.3.1
• mongoose-lean-virtuals 2.1.0
• mongoose-paginate-v2 1.9.1
• nanoid 5.1.6
• nestjs-zod ^5.1.1
• node-machine-id 1.1.12
• nodemailer 7.0.12
• openai 6.16.0
• picocolors ^1.1.1
• pluralize ^8.0.0
• qs 6.14.1
• reflect-metadata 0.2.2
• remove-markdown 0.6.3
• remove-md-codeblock 0.0.4
• rxjs 7.8.2
• semver 7.7.3
• slugify 1.6.6
• source-map-support ^0.5.21
• ua-parser-js 2.0.8
• wildcard-match 5.1.4
• xss 1.0.15
• zod 4.3.6 → [Updates: 4.3.6]
• @nestjs/cli 11.0.16
• @nestjs/schematics 11.0.9
• @nestjs/testing 11.1.12
• @swc/cli ^0.7.10
• @swc/core 1.15.10
• @types/babel__core 7.20.5
• @types/ejs 3.1.5
• @types/get-image-colors 4.0.5
• @types/js-yaml 4.0.9
• @types/mime-types 3.0.1
• @types/node 25.0.10
• @types/nodemailer 7.0.5
• @types/qs 6.14.0
• @types/remove-markdown 0.3.4
• @types/semver 7.7.1
• @types/ua-parser-js 0.7.39
• @types/validator 13.15.10
• ioredis 5.9.2
• mongodb-memory-server ^11.0.1
• redis-memory-server ^0.15.0
• rimraf 6.1.2
• sharp 0.34.5
• socket.io ^4.8.3
• tsdown 0.20.1
• typescript 5.9.3
• unplugin-swc 1.5.9
• vite-tsconfig-paths 6.0.5
• node >=22

external/pino/package.json

external/request/package.json

package.json (26)

• @ianvs/prettier-plugin-sort-imports 4.7.0
• @sxzz/eslint-config 7.1.4 → [Updates: 7.5.1]
• @types/node 25.0.10
• cross-env 10.1.0
• eslint ^9.36.0
• lint-staged 16.2.7
• mongodb-memory-server 11.0.1
• prettier 3.8.1
• prettier-package-json 2.8.0
• prettier-plugin-ember-template-tag 2.1.3
• redis-memory-server 0.15.0
• rimraf 6.1.2
• rolldown 1.0.0-rc.1 → [Updates: 1.0.0-rc.1]
• simple-git-hooks 2.13.1
• ts-node 10.9.2
• tsconfig-paths 4.2.0
• typescript 5.9.3
• vite-tsconfig-paths 6.0.5
• node >=22
• rolldown 1.0.0-beta.60 → [Updates: 1.0.0-rc.1]
• mongodb 6.12.0 → [Updates: 6.21.0, 7.0.0]
• semver 7.7.3
• typescript 5.9.3
• whatwg-url 14.1.1 → [Updates: 14.2.0, 15.1.0]
• zod 4.3.5 → [Updates: 4.3.6]
• pnpm 10.10.0+sha512.d615db246fe70f25dcfea6d8d73dee782ce23e2245e3c4f6f888249fb568149318637dca73c2c5c8ef2a4ca0d5657fb9567188bfab47f566d1ee6ce987815c39 → [Updates: 10.28.1]

packages/api-client/package.json (12)

• @types/cors 2.8.19
• @types/express 5.0.6
• abort-controller 3.0.0
• axios ^1.13.3
• camelcase-keys ^10.0.2
• cors 2.8.6
• es-toolkit 1.44.0
• express 4.21.2 → [Updates: 4.22.1, 5.2.1]
• form-data 4.0.5
• tsdown 0.20.1
• umi-request 1.4.0
• node >=22

packages/webhook/package.json (3)

• express 4.21.2 → [Updates: 4.22.1, 5.2.1]
• tsdown 0.20.1
• node >=22

pnpm-workspace.yaml

nvm (1)

.nvmrc (1)

• node 22 → [Updates: 24]

---

• Check this box to trigger a request for Renovate to run again on this repository