Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (49)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
npm	@hyperwatch/hyperwatch	2024-11-20
npm	@json2csv/plainjs	2024-02-11
npm	@opensearch-project/opensearch	2025-04-04
npm	@paypal/payouts-sdk	2021-09-28
npm	argparse	2020-08-28
npm	async-mutex	2024-03-11
npm	babel-plugin-add-module-exports	2020-09-08
npm	bayes	2020-01-16
npm	blurhash	2023-02-17
npm	chai-jest-snapshot	2017-11-07
npm	chai-sorted	2018-03-24
npm	cloudflare-ip	2018-03-26
npm	commitizen	2024-09-27
npm	cookie-parser	2024-10-08
npm	crypto-js	2023-10-24
npm	crypto-random-string	2022-05-10
npm	cz-conventional-changelog	2020-08-26
npm	dataloader	2024-12-03
npm	dataloader-sequelize	2021-05-21
npm	deepmerge	2023-03-16
npm	eslint-plugin-react	2025-04-03
npm	express-basic-auth	2021-12-11
npm	express-ws	2021-06-07
npm	fake-tag	2022-08-20
npm	fast-levenshtein	2020-07-22
npm	fast-redact	2024-03-19
npm	get-urls	2023-08-15
npm	graphql-upload	2024-10-08
npm	hashids	2023-05-24
npm	hcaptcha	2024-06-27
npm	helmet	2025-03-17
npm	html-to-text	2023-03-23
npm	husky	2024-11-18
npm	kysely-sequelize	2024-03-16
npm	markdown-table	2024-10-22
npm	mocha-junit-reporter	2023-07-12
npm	moment	2023-12-27
npm	nordigen-node	2025-04-07
npm	opentelemetry-instrumentation-sequelize	2024-05-21
npm	passport	2023-11-27
npm	passport-github	2016-02-03
npm	pg-format	2017-02-18
npm	pg-listen	2020-12-19
npm	sequelize-temporal	2024-11-21
npm	throng	2020-09-21
npm	ts-unused-exports	2024-11-25
npm	tweetnacl	2020-02-10
npm	tweetnacl-util	2020-01-29
npm	url-regex-safe	2023-08-15

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update aws-sdk-js-v3 monorepo to v3.1032.0 (@aws-sdk/client-s3, @aws-sdk/lib-storage, @aws-sdk/s3-request-presigner)
• fix(deps): update dependency dotenv to v17.4.2
• fix(deps): update dependency ics to v3.11.0
• fix(deps): update dependency lru-cache to v11.3.5
• fix(deps): update dependency redis to v5.12.1
• chore(deps): update codecov/codecov-action action to v6
• chore(deps): update dependency @types/nodemailer to v8
• chore(deps): update dependency babel-plugin-istanbul to v8
• chore(deps): update dependency eslint-plugin-simple-import-sort to v13
• chore(deps): update octokit/request-action action to v3
• fix(deps): update dependency plaid to v42
• fix(deps): update dependency stripe to v22
• fix(deps): update dependency uuid to v14
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update dependency typescript to v6

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): pin dependencies (actions/cache, actions/checkout, actions/setup-node, actions/upload-artifact, codecov/codecov-action, codecov/test-results-action, github/codeql-action, kamilkisiela/graphql-inspector, minio/minio, opensearchproject/opensearch, postgres, redis)
• fix(deps): update dependency axios to v1.15.1
• fix(deps): update dependency p-queue to v9.1.2
• chore(deps): update dependency @opentelemetry/auto-instrumentations-node to ^0.73.0
• fix(deps): update dependency config to v4.4.1
• fix(deps): update opentelemetry-js monorepo (@opentelemetry/context-async-hooks, @opentelemetry/exporter-trace-otlp-proto, @opentelemetry/instrumentation)
• chore(deps): update postgres docker tag to v18
• fix(deps): update dependency cloudflare to v5
• fix(deps): update sentry-javascript monorepo to v10 (major) (@sentry/node, @sentry/profiling-node)
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency chai-as-promised to v8
• chore(deps): update dependency chokidar to v5
• chore(deps): update dependency eslint to v10
• chore(deps): update dependency fake-tag to v5
• chore(deps): update dependency markdown-table to v3
• chore(deps): update dependency sinon-chai to v4
• fix(deps): update dependency crypto-random-string to v5
• fix(deps): update dependency get-urls to v12
• fix(deps): update dependency graphql-upload to v17 (graphql-upload, @types/graphql-upload)
• fix(deps): update dependency node-fetch to v3
• fix(deps): update dependency p-map to v7
• fix(deps): update opentelemetry-js monorepo to v2 (major) (@opentelemetry/resources, @opentelemetry/sdk-trace-base, @opentelemetry/sdk-trace-node)

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (1)

• ghcr.io/robbert229/devcontainer-features/postgresql-client 1

github-actions (4)

.github/workflows/ci.yml (49)

• actions/checkout v6 → [Updates: v6]
• actions/setup-node v6 → [Updates: v6]
• actions/cache v5 → [Updates: v5]
• actions/checkout v6 → [Updates: v6]
• actions/setup-node v6 → [Updates: v6]
• actions/cache v5 → [Updates: v5]
• actions/checkout v6 → [Updates: v6]
• actions/setup-node v6 → [Updates: v6]
• actions/cache v5 → [Updates: v5]
• actions/checkout v6 → [Updates: v6]
• actions/setup-node v6 → [Updates: v6]
• actions/cache v5 → [Updates: v5]
• actions/checkout v6 → [Updates: v6]
• actions/setup-node v6 → [Updates: v6]
• actions/cache v5 → [Updates: v5]
• actions/cache v5 → [Updates: v5]
• actions/checkout v6 → [Updates: v6]
• actions/setup-node v6 → [Updates: v6]
• actions/cache v5 → [Updates: v5]
• actions/cache v5 → [Updates: v5]
• actions/checkout v6 → [Updates: v6]
• actions/setup-node v6 → [Updates: v6]
• actions/cache v5 → [Updates: v5]
• codecov/codecov-action v5 → [Updates: v6, v5]
• codecov/test-results-action v1 → [Updates: v1]
• actions/checkout v6 → [Updates: v6]
• actions/setup-node v6 → [Updates: v6]
• actions/cache v5 → [Updates: v5]
• codecov/codecov-action v5 → [Updates: v6, v5]
• codecov/test-results-action v1 → [Updates: v1]
• actions/checkout v6 → [Updates: v6]
• actions/setup-node v6 → [Updates: v6]
• actions/cache v5 → [Updates: v5]
• actions/checkout v6 → [Updates: v6]
• kamilkisiela/graphql-inspector v3.4.0 → [Updates: v3.4.0]
• kamilkisiela/graphql-inspector v3.4.0 → [Updates: v3.4.0]
• redis unknown version → [Updates: undefined]
• postgres 16.13 → [Updates: 18.3, 16.13]
• minio/minio edge-cicd → [Updates: edge-cicd]
• ubuntu 24.04
• redis unknown version → [Updates: undefined]
• postgres 16.13 → [Updates: 18.3, 16.13]
• opensearchproject/opensearch 3 → [Updates: 3]
• minio/minio edge-cicd → [Updates: edge-cicd]
• ubuntu 24.04
• redis unknown version → [Updates: undefined]
• postgres 16.13 → [Updates: 18.3, 16.13]
• redis unknown version → [Updates: undefined]
• postgres 16.13 → [Updates: 18.3, 16.13]

.github/workflows/codeql-analysis.yml (3)

• actions/checkout v6 → [Updates: v6]
• github/codeql-action v4 → [Updates: v4]
• github/codeql-action v4 → [Updates: v4]

.github/workflows/e2e.yml (20)

• actions/checkout v6 → [Updates: v6]
• actions/setup-node v6 → [Updates: v6]
• octokit/request-action v2.4.0@dad4362715b7fb2ddedf9772c8670824af564f0d → [Updates: v3.0.0]
• actions/checkout v6 → [Updates: v6]
• actions/checkout v6 → [Updates: v6]
• actions/checkout v6 → [Updates: v6]
• actions/checkout v6 → [Updates: v6]
• actions/cache v5 → [Updates: v5]
• actions/cache v5 → [Updates: v5]
• actions/cache v5 → [Updates: v5]
• actions/cache v5 → [Updates: v5]
• actions/cache v5 → [Updates: v5]
• actions/cache v5 → [Updates: v5]
• actions/cache v5 → [Updates: v5]
• actions/cache v5 → [Updates: v5]
• actions/upload-artifact v7 → [Updates: v7]
• redis unknown version → [Updates: undefined]
• postgres 16.13 → [Updates: 18.3, 16.13]
• minio/minio edge-cicd → [Updates: edge-cicd]
• ubuntu 24.04

.github/workflows/lockfile-lint.yml (1)

• actions/checkout v6 → [Updates: v6]

npm (1)

package.json (167)

• @apollo/server 5.5.0
• @as-integrations/express5 1.1.2
• @aws-sdk/client-s3 3.1021.0 → [Updates: 3.1032.0]
• @aws-sdk/lib-storage 3.1021.0 → [Updates: 3.1032.0]
• @aws-sdk/s3-request-presigner 3.1021.0 → [Updates: 3.1032.0]
• @babel/core 7.29.0
• @babel/node 7.29.0
• @babel/plugin-transform-typescript 7.28.6
• @babel/preset-env 7.29.2
• @escape.tech/graphql-armor 3.2.0
• @hyperwatch/hyperwatch 4.2.0
• @json2csv/plainjs ^7.0.6
• @node-oauth/oauth2-server 5.3.0
• @octokit/auth-oauth-app 9.0.3
• @octokit/rest 22.0.1
• @opencollective/taxes 5.4.0
• @opensearch-project/opensearch ^3.4.0
• @opentelemetry/context-async-hooks 2.3.0 → [Updates: 2.7.0]
• @opentelemetry/instrumentation 0.209.0 → [Updates: 0.215.0]
• @opentelemetry/sdk-trace-base 1.30.1 → [Updates: 2.7.0]
• @paypal/payouts-sdk 1.1.1
• @peculiar/asn1-schema 2.6.0
• @peculiar/asn1-x509 2.6.1
• @sentry/node 9.47.1 → [Updates: 10.49.0]
• @sentry/profiling-node 9.47.1 → [Updates: 10.49.0]
• @simplewebauthn/server 13.3.0
• argparse 2.0.1
• async-mutex 0.5.0
• axios 1.15.0 → [Updates: 1.15.1]
• babel-plugin-add-module-exports 1.0.4
• bayes 1.0.0
• bcrypt 6.0.0
• blurhash 2.0.5
• cloudflare 4.5.0 → [Updates: 5.2.0]
• cloudflare-ip 0.0.7
• commander 14.0.3
• config 4.3.0 → [Updates: 4.4.1]
• connect-redis 9.0.0
• cookie-parser 1.4.7
• cors 2.8.6
• crypto-js 4.2.0
• crypto-random-string 3.3.1 → [Updates: 5.0.0]
• csv-parse 6.2.1
• dataloader 2.2.3
• dataloader-sequelize 2.3.3
• debug 4.4.3
• deepmerge 4.3.1
• dotenv 17.3.1 → [Updates: 17.4.2]
• errorhandler 1.5.2
• express 5.2.1
• express-basic-auth 1.2.1
• express-session 1.19.0
• express-ws 5.0.2
• fast-levenshtein 3.0.0
• fast-redact 3.5.0
• get-urls 10.0.1 → [Updates: 12.1.0]
• gqlmin 0.3.2
• graphql 16.13.2
• graphql-scalars 1.25.0
• graphql-upload 15.0.2 → [Updates: 17.0.0]
• handlebars 4.7.9
• hashids 2.3.0
• hcaptcha 0.2.0
• helmet 8.1.0
• html-to-text 9.0.5
• ics 3.9.1 → [Updates: 3.11.0]
• jsonwebtoken 9.0.3
• juice 11.1.1
• kysely 0.28.16
• kysely-sequelize ^0.2.0
• lib-address 0.7.0
• limax 4.2.3
• lodash 4.18.1
• lru-cache 11.2.7 → [Updates: 11.3.5]
• moment 2.30.1
• moment-timezone 0.6.1
• multer 2.1.1
• node-fetch 2.7.0 → [Updates: 3.3.2]
• nodemailer 8.0.5
• nordigen-node 1.4.1
• otplib 13.4.0
• p-map 4.0.0 → [Updates: 7.0.4]
• p-queue 9.1.0 → [Updates: 9.1.2]
• passport 0.7.0
• passport-github 1.1.0
• pg 8.20.0
• pg-connection-string 2.12.0
• pg-format 1.0.4
• pg-listen 1.7.0
• plaid 31.1.0 → [Updates: 42.1.0]
• redis 5.11.0 → [Updates: 5.12.1]
• sanitize-html 2.17.3
• sequelize 6.37.8
• sequelize-cli 6.6.5
• sequelize-temporal 2.1.1
• sharp 0.34.5
• spdx-license-list 6.11.0
• stripe 17.7.0 → [Updates: 22.0.2]
• throng 5.0.0
• tweetnacl 1.0.3
• tweetnacl-util 0.15.1
• uuid 13.0.0 → [Updates: 14.0.0]
• validator 13.15.35
• winston 3.19.0
• zod 4.3.6
• @babel/cli ^7.23.4
• @babel/register ^7.23.7
• @graphql-eslint/eslint-plugin ^4.0.0
• @opentelemetry/api ^1.7.0
• @opentelemetry/auto-instrumentations-node ^0.71.0 → [Updates: ^0.73.0]
• @opentelemetry/exporter-trace-otlp-proto ^0.209.0 → [Updates: ^0.215.0]
• @opentelemetry/resources ^1.20.0 → [Updates: ^2.0.0]
• @opentelemetry/sdk-trace-node ^1.20.0 → [Updates: ^2.0.0]
• @sentry/cli ^3.0.0
• @types/express ^5.0.6
• @types/graphql-upload 16.0.7 → [Updates: 17.0.0]
• @types/jsonwebtoken ^9.0.10
• @types/lodash ^4.14.202
• @types/mocha ^10.0.10
• @types/node ^24.0.0
• @types/node-fetch ^2.6.13
• @types/nodemailer ^7.0.4 → [Updates: ^8.0.0]
• @types/validator ^13.11.8
• @typescript-eslint/parser ^8.13.0
• babel-plugin-istanbul ^7.0.1 → [Updates: ^8.0.0]
• chai ^6.0.0
• chai-as-promised ^7.1.1 → [Updates: ^8.0.0]
• chai-jest-snapshot ^2.0.0
• chai-sorted ^0.2.0
• cheerio ^1.1.2
• chokidar ^4.0.1 → [Updates: ^5.0.0]
• commitizen ^4.3.1
• cz-conventional-changelog ^3.3.0
• eslint ^9.14.0 → [Updates: ^10.0.0]
• eslint-config-opencollective ^6.0.0
• eslint-import-resolver-typescript ^4.0.0
• eslint-plugin-import ^2.31.0
• eslint-plugin-mocha 11.2.0
• eslint-plugin-n ^17.11.1
• eslint-plugin-react ^7.37.5
• eslint-plugin-simple-import-sort ^12.1.1 → [Updates: ^13.0.0]
• exif-reader ^2.0.3
• fake-tag ^3.0.0 → [Updates: ^5.0.0]
• geoip-lite ^2.0.0
• globals ^17.0.0
• husky ^9.0.10
• lint-staged ^16.0.0
• markdown-table ^2.0.0 → [Updates: ^3.0.0]
• mocha ^11.7.5
• mocha-junit-reporter ^2.2.1
• nock ^14.0.10
• node-mocks-http ^1.16.1
• nodemon ^3.0.2
• npm-run-all2 ^8.0.4
• nyc ^18.0.0
• opentelemetry-instrumentation-sequelize ^0.41.0
• prettier 3.8.3
• sinon ^21.0.0
• sinon-chai ^3.7.0 → [Updates: ^4.0.0]
• supertest ^7.0.0
• ts-unused-exports ^11.0.1
• typescript 5.9.3 → [Updates: 6.0.3]
• typescript-eslint ^8.13.0
• ws ^8.18.3
• node 24.x
• npm 11.x
• url-regex-safe 4.0.0

nvm (1)

.nvmrc (1)

• node 24

renovate-config-presets (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository