Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@types/bcryptjs
npm	@types/dotenv

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update github-actions (actions/checkout, docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action)
• chore(deps): update npm non-major (@babel/eslint-parser, @sentry/node, @types/bcryptjs, @types/dotenv, @types/express, @types/jsdom, @types/jsonwebtoken, @types/node, @types/nodemailer, @types/supertest, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, eslint-config-prettier, eslint-import-resolver-node, eslint-plugin-import, eslint-plugin-prettier, express, express-rate-limit, isomorphic-dompurify, jest, jsdom, jsonwebtoken, lint-staged, nodemailer, nodemon, pg, prettier, prisma-erd-generator, ts-jest, ts-node, typescript, winston, zod)
• chore(deps): update dependency @babel/eslint-parser to v8
• chore(deps): update dependency eslint to v10
• chore(deps): update dependency eslint-config-prettier to v10
• chore(deps): update dependency husky to v9
• chore(deps): update dependency lint-staged to v17
• chore(deps): update dependency typescript to v7
• chore(deps): update github-actions (major) (actions/checkout, actions/setup-node, docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action, node)
• chore(deps): update node.js to v24 (node, @types/node)
• chore(deps): update postgres docker tag to v18
• fix(deps): update dependency @asteasolutions/zod-to-openapi to v9
• fix(deps): update dependency bcryptjs to v3 (bcryptjs, @types/bcryptjs)
• fix(deps): update dependency dotenv to v17
• fix(deps): update dependency express to v5 (express, @types/express)
• fix(deps): update dependency nodemailer to v9
• fix(deps): update prisma to v7 (@prisma/client, prisma)
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• node 24-alpine3.23
• node 24-alpine3.23

github-actions (2)

.github/workflows/publish.yml (14)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v7.0.0]
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v7.0.0]
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v7.0.0]
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v7.0.0]
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v7.0.0]
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v7.0.0]
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435 → [Updates: v3.12.0, v4.2.0]
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef → [Updates: v3.7.0, v4.4.0]
• docker/metadata-action v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f → [Updates: v5.10.0, v6.2.0]
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v6.19.2, v7.3.0]
• postgres 16 → [Updates: 18]
• node 22 → [Updates: 24]
• postgres 16 → [Updates: 18]
• node 22 → [Updates: 24]

.github/workflows/security-review-gate.yml

npm (1)

package.json (51)

• @asteasolutions/zod-to-openapi ^8.5.0 → [Updates: ^9.0.0]
• @prisma/client ^6.19.3 → [Updates: ^7.0.0]
• @sentry/node ^10.55.0 → [Updates: ^10.55.0]
• prisma ^6.19.3 → [Updates: ^7.0.0]
• bcryptjs ^2.4.3 → [Updates: ^3.0.0]
• cookie-parser ^1.4.7
• cors ^2.8.6
• dotenv ^16.3.1 → [Updates: ^17.0.0]
• express ^4.18.2 → [Updates: ^4.18.2, ^5.0.0]
• express-rate-limit ^8.3.2 → [Updates: ^8.3.2]
• isomorphic-dompurify ^3.9.0 → [Updates: ^3.9.0]
• jsdom ^29.0.2 → [Updates: ^29.0.2]
• jsonwebtoken ^9.0.2 → [Updates: ^9.0.2]
• nodemailer ^8.0.7 → [Updates: ^8.0.7, ^9.0.0]
• swagger-ui-express ^5.0.1
• winston ^3.10.0 → [Updates: ^3.10.0]
• zod ^4.3.6 → [Updates: ^4.3.6]
• @babel/eslint-parser ^7.22.9 → [Updates: ^7.22.9, ^8.0.0]
• @types/bcryptjs ^2.4.4 → [Updates: ^2.4.4, ^3.0.0]
• @types/cookie-parser ^1.4.10
• @types/cors ^2.8.19
• @types/dotenv ^8.2.0 → [Updates: ^8.2.0]
• @types/express ^4.17.17 → [Updates: ^4.17.17, ^5.0.0]
• @types/jest ^30.0.0
• @types/jsdom ^28.0.1 → [Updates: ^28.0.1]
• @types/jsonwebtoken ^9.0.3 → [Updates: ^9.0.3]
• @types/node ^20.6.0 → [Updates: ^20.6.0, ^24.0.0]
• @types/nodemailer ^8.0.0 → [Updates: ^8.0.0]
• @types/pg ^8.20.0
• @types/supertest ^7.2.0 → [Updates: ^7.2.0]
• @types/swagger-ui-express ^4.1.8
• @typescript-eslint/eslint-plugin ^8.59.0 → [Updates: ^8.59.0]
• @typescript-eslint/parser ^8.59.0 → [Updates: ^8.59.0]
• eslint ^8.45.0 → [Updates: ^10.0.0]
• eslint-config-prettier ^8.8.0 → [Updates: ^8.8.0, ^10.0.0]
• eslint-import-resolver-node ^0.3.7 → [Updates: ^0.4.0]
• eslint-plugin-import ^2.27.5 → [Updates: ^2.27.5]
• eslint-plugin-prettier ^5.0.0 → [Updates: ^5.0.0]
• husky ^8.0.3 → [Updates: ^9.0.0]
• jest ^30.3.0 → [Updates: ^30.3.0]
• jest-mock-extended ^4.0.1
• lint-staged ^13.2.3 → [Updates: ^13.2.3, ^17.0.0]
• nodemon ^3.0.1 → [Updates: ^3.0.1]
• pg ^8.20.0 → [Updates: ^8.20.0]
• prettier ^3.0.0 → [Updates: ^3.0.0]
• prisma-erd-generator ^2.4.3 → [Updates: ^2.4.3]
• supertest ^7.2.2
• ts-jest ^29.4.9 → [Updates: ^29.4.9]
• ts-node ^10.9.1 → [Updates: ^10.9.1]
• typescript ^5.2.2 → [Updates: ^5.2.2, ^7.0.0]
• node >=22 <23 → [Updates: >=22 <25]

nvm (1)

.nvmrc (1)

• node 22 → [Updates: 24]

---

• Check this box to trigger a request for Renovate to run again on this repository