Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (13)

Datasource	Name	Last Updated
npm	@hookform/error-message	2022-11-09
npm	@opentelemetry/api	2024-06-05
npm	@react-hook/debounce	2021-06-18
npm	bootstrap-sass	2022-02-28
npm	classnames	2023-12-29
npm	d3	2024-03-12
npm	domready	2015-04-24
npm	eslint-config-react-hooks	2021-06-16
npm	git-rev-sync	2022-01-19
npm	history	2022-02-22
npm	memoize-one	2021-10-20
npm	moment	2023-12-27
npm	react-transition-group	2022-08-01

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Lock file maintenance (backend/composer.json)
• Lock file maintenance (calendar-api/package.json)
• Lock file maintenance (frontend/package.json)
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Pin dependencies (@eslint/js, @tsconfig/node24, @types/node, actions/checkout, actions/setup-node, docker/build-push-action, docker/login-action, docker/setup-buildx-action, eslint, jiti, php, pnpm/action-setup, postgres, shivammathur/setup-php, typescript-eslint, vitest)
• Update autofix-ci/action digest to 7a166d7
• Update Node.js to 4f696fb
• Update php:8.5-apache Docker digest to 29e2ade
• Update dependency phpunit/phpunit to v12.5.12

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency phpunit/phpunit to v13
• Update eslint monorepo to v10 (major) (@eslint/js, eslint)
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency jquery to v4

Detected Dependencies

composer (1)

backend/composer.json (23)

• php 8.5.*
• google/apiclient 2.19.0
• guzzlehttp/guzzle 7.10.0
• johngrogg/ics-parser 3.5.1
• laravel/framework ^12.0
• laravel/sanctum ^4.0
• laravel/tinker ^2.9
• nategood/httpful 1.0.0
• nesbot/carbon 3.11.1
• onelogin/php-saml 4.3.1
• open-telemetry/exporter-otlp 1.4.0
• open-telemetry/opentelemetry-auto-curl 0.1.0
• open-telemetry/opentelemetry-auto-guzzle 1.2.1
• open-telemetry/opentelemetry-auto-laravel 1.4.0
• open-telemetry/opentelemetry-auto-pdo 0.3.0
• open-telemetry/sdk 1.13.0
• spatie/icalendar-generator ^3.0
• fakerphp/faker 1.24.1
• laravel/sail ^1.25
• mockery/mockery 1.6.12
• nunomaduro/collision ^8.1
• phpunit/phpunit ^12.0 → [Updates: ^12.0, ^13.0]
• spatie/laravel-ignition ^2.0

docker-compose (1)

backend/docker-compose.yml (1)

• postgres 18 → [Updates: 18]

dockerfile (3)

backend/Dockerfile (1)

• php 8.5-apache@sha256:6e5cfaec7df961fe2cca048e9ce3a3c448c1b77b489c51c4e1d98cda943759af → [Updates: 8.5-apache]

calendar-api/Dockerfile (1)

• node 24-alpine@sha256:2867d550cf9d8bb50059a0fff528741f11a84d985c732e60e19e8e75c7239c43 → [Updates: 24-alpine]

frontend/Dockerfile (1)

• nginx 1.29.5@sha256:341bf0f3ce6c5277d6002cf6e1fb0319fa4252add24ab6a0e262e0056d313208

github-actions (4)

.github/workflows/autofix.yml (3)

• actions/checkout v6 → [Updates: v6]
• pnpm/action-setup v4 → [Updates: v4]
• autofix-ci/action 635ffb0c9798bd160680f18fd73371e355b85f27 → [Updates: undefined]

.github/workflows/backend.yml (5)

• actions/checkout v6 → [Updates: v6]
• docker/setup-buildx-action v3 → [Updates: v3]
• shivammathur/setup-php v2 → [Updates: v2]
• docker/login-action v3 → [Updates: v3]
• docker/build-push-action v6 → [Updates: v6]

.github/workflows/calendar-api.yml (8)

• actions/checkout v6 → [Updates: v6]
• pnpm/action-setup v4 → [Updates: v4]
• actions/setup-node v6 → [Updates: v6]
• docker/setup-buildx-action v3 → [Updates: v3]
• docker/build-push-action v6 → [Updates: v6]
• docker/login-action v3 → [Updates: v3]
• docker/build-push-action v6 → [Updates: v6]
• node 24

.github/workflows/frontend.yml (7)

• actions/checkout v6 → [Updates: v6]
• pnpm/action-setup v4 → [Updates: v4]
• docker/setup-buildx-action v3 → [Updates: v3]
• actions/setup-node v6 → [Updates: v6]
• docker/login-action v3 → [Updates: v3]
• docker/build-push-action v6 → [Updates: v6]
• node 24

npm (2)

calendar-api/package.json (23)

• @elysiajs/cors 1.4.1
• @elysiajs/node 1.4.4
• @js-temporal/polyfill ^0.5.1
• @opentelemetry/api ^1.9.0
• @opentelemetry/auto-instrumentations-node ^0.69.0
• @opentelemetry/sdk-node ^0.212.0
• elysia 1.4.25
• ical.js ^2.2.1
• p-map ^7.0.3
• zod ^4.1.11
• @eslint/js ^9.17.0 → [Updates: 9.39.2, ^10.0.0]
• @tsconfig/node24 ^24.0.3 → [Updates: 24.0.3]
• @tsconfig/strictest 2.0.8
• @types/node ^24.10.4 → [Updates: 24.10.4]
• eslint ^9.17.0 → [Updates: 9.39.2, ^10.0.0]
• eslint-config-prettier 10.1.8
• eslint-plugin-prettier 5.5.5
• jiti ^2.5.1 → [Updates: 2.6.1]
• prettier 3.8.1
• typescript 5.9.3
• typescript-eslint ^8.51.0 → [Updates: 8.51.0]
• vitest ^4.0.16 → [Updates: 4.0.16]
• pnpm 10.29.3+sha512.498e1fb4cca5aa06c1dcf2611e6fafc50972ffe7189998c409e90de74566444298ffe43e6cd2acdc775ba1aa7cc5e092a8b7054c811ba8c5770f84693d33d2dc

frontend/package.json (55)

• @hookform/error-message 2.0.1
• @react-hook/debounce 4.0.0
• classnames 2.5.1
• d3 7.9.0
• domready 1.0.8
• history 5.3.0
• jquery 3.7.1 → [Updates: 4.0.0]
• lodash 4.17.23
• memoize-one 6.0.0
• moment 2.30.1
• react 19.2.4
• react-dom 19.2.4
• react-hook-form 7.71.1
• react-router 7.13.0
• react-router-dom 7.13.0
• react-transition-group 4.4.5
• rxjs 7.8.2
• styled-components 6.3.9
• yup 1.7.1
• @eslint/compat 2.0.2
• @eslint/js 9.39.2 → [Updates: 10.0.1]
• @tanstack/react-query 5.90.21
• @tanstack/react-query-devtools 5.91.3
• @tsconfig/node24 ^24.0.3 → [Updates: 24.0.3]
• @tsconfig/strictest 2.0.8
• @types/d3 7.4.3
• @types/domready 1.0.2
• @types/git-rev-sync 2.0.2
• @types/jquery 3.5.33
• @types/lodash 4.17.23
• @types/node 24.10.13
• @types/react 19.2.14
• @types/react-dom 19.2.3
• @types/react-router 5.1.20
• @types/react-router-dom 5.3.3
• @types/react-transition-group 4.4.12
• @vitejs/plugin-react 5.1.4
• autoprefixer 10.4.24
• bootstrap-sass 3.4.3
• eslint 9.39.2 → [Updates: 10.0.0]
• eslint-config-prettier 10.1.8
• eslint-config-react-hooks 1.0.0
• eslint-plugin-prettier 5.5.5
• eslint-plugin-react 7.37.5
• eslint-plugin-react-hooks 7.0.1
• git-rev-sync 3.0.2
• globals 17.3.0
• jiti ^2.5.1 → [Updates: 2.6.1]
• prettier 3.8.1
• sass 1.97.3
• typescript 5.9.3
• typescript-eslint 8.55.0
• vite 7.3.1
• vite-plugin-checker 0.12.0
• pnpm 10.29.3+sha512.498e1fb4cca5aa06c1dcf2611e6fafc50972ffe7189998c409e90de74566444298ffe43e6cd2acdc775ba1aa7cc5e092a8b7054c811ba8c5770f84693d33d2dc

regex (1)

.github/workflows/backend.yml (1)

• php 8.5 → [Updates: 8.5]

---

• Check this box to trigger a request for Renovate to run again on this repository