Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (17)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	amannn/action-semantic-pull-request	2025-08-22
github-actions	appleboy/scp-action	2025-04-27
npm	@dnd-kit/core	2024-12-05
npm	@dnd-kit/modifiers	2024-12-04
npm	@dnd-kit/sortable	2024-12-04
npm	@dnd-kit/utilities	2023-11-06
npm	@mdx-js/react	2025-08-29
npm	@testing-library/dom	2025-07-27
npm	ajv-formats	2024-03-30
npm	class-variance-authority	2024-11-26
npm	clsx	2024-04-23
npm	fast-deep-equal	2020-06-08
npm	mdast-util-mdx	2023-07-12
npm	micromark-extension-mdxjs	2023-10-19
npm	prism-react-renderer	2024-12-11
npm	usehooks-ts	2025-02-05

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update dependency @hey-api/openapi-ts to v0.99.0
• chore(deps): update dependency markdownlint-cli2 to v0.23.2
• chore(deps): update dependency oxc-transform-react to v0.147.0
• chore(deps): update dependency surge to v0.44.0
• chore(deps): update dependency chromatic to v18
• chore(deps): update dependency commander to v15
• chore(deps): update dependency js-yaml@>=4.0.0 to v5
• chore(deps): update dependency jsdom to v30
• chore(deps): update dependency markdown-it@<=14.1.1 to v15
• chore(deps): update dependency msw-storybook-addon to v3
• chore(deps): update dependency npm-package-arg to v14
• chore(deps): update dependency uuid@<11.1.1 to v14
• chore(deps): update postgres docker tag to v18
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update docker.io/library/traefik docker tag to v3.7.12
• chore(deps): update docusaurus monorepo to v3.10.2 (@docusaurus/core, @docusaurus/faster, @docusaurus/module-type-aliases, @docusaurus/plugin-content-docs, @docusaurus/plugin-content-pages, @docusaurus/plugin-css-cascade-layers, @docusaurus/plugin-debug, @docusaurus/plugin-sitemap, @docusaurus/plugin-svgr, @docusaurus/preset-classic, @docusaurus/theme-classic, @docusaurus/theme-mermaid, @docusaurus/types)
• chore(deps): update github actions (actions/deploy-pages, chromaui/action, reviewdog/action-actionlint, trufflesecurity/trufflehog, zizmorcore/zizmor-action)
• chore(deps): update tanstack-query monorepo to v5.102.8 (@tanstack/react-query, @tanstack/react-query-devtools)
• chore(deps): update vercel ai sdk (@ai-sdk/react, ai)
• chore(deps): update bouncycastle.version (org.bouncycastle:bcpkix-jdk18on, org.bouncycastle:bcutil-jdk18on, org.bouncycastle:bcprov-jdk18on)
• chore(deps): update dependency @sentry/react to v10.73.0
• chore(deps): update dependency @tanstack/react-table to v9.2.4
• chore(deps): update dependency @tanstack/router-plugin>unplugin to v3.3.0
• chore(deps): update dependency com.slack.api:bolt to v1.51.0
• chore(deps): update dependency io.sentry:sentry-spring-boot-4-starter to v8.54.0
• chore(deps): update dependency lucide-react to v1.39.0
• chore(deps): update dependency markdown-it@<=14.1.1 to v14.3.1
• chore(deps): update dependency mermaid to v11.17.2
• chore(deps): update dependency motion to v13.2.0
• chore(deps): update dependency openapitools/openapi-generator to v7.25.0
• chore(deps): update dependency pnpm to v12.3.1
• chore(deps): update dependency serialize-javascript to v7.1.1
• chore(deps): update dependency zizmorcore/zizmor to v1.30.0
• chore(deps): update dependency zod to v4.5.4
• chore(deps): update docker/dockerfile docker tag to v1.27
• chore(deps): update node.js toolchain to v24.20.0
• chore(deps): update repository tooling dependencies (@commitlint/cli, @commitlint/config-conventional, @openapitools/openapi-generator-cli, @types/node, @types/pg, fast-xml-parser, mermaid, mprocs, pg)
• chore(deps): update webapp development dependencies (@chromatic-com/storybook, @fontsource-variable/inter, @gitlab/svgs, @playwright/test, @primer/primitives, @storybook/addon-a11y, @storybook/addon-docs, @storybook/addon-onboarding, @storybook/addon-themes, @storybook/addon-vitest, @storybook/react, @storybook/react-vite, @tailwindcss/typography, @tailwindcss/vite, @testing-library/react, @testing-library/user-event, @types/node, @vitejs/plugin-react, msw, playwright, storybook, tailwindcss)
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update nginx:stable-alpine docker digest to dc5069a
• chore(deps): update paketobuildpacks/builder-noble-java-tiny:latest docker digest to ff218b8
• chore(deps): update paketobuildpacks/ubuntu-noble-run-tiny:latest docker digest to ef58117
• chore(deps): update dependency @types/react-dom to v19.2.7
• chore(deps): update dependency browserslist@<=4.28.6 to v4.28.9
• chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v3.10.2
• chore(deps): update docker.io/library/nginx docker tag to v1.31.5
• chore(deps): update dependency @base-ui/react to v1.8.0
• chore(deps): update dependency @earendil-works/pi-coding-agent to v0.85.1
• chore(deps): update shedlock monorepo to v7.10.0 (net.javacrumbs.shedlock:shedlock-provider-jdbc-template, net.javacrumbs.shedlock:shedlock-spring)

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

docker-compose (6)

docker/compose.app.yaml

docker/compose.core.yaml

docker/compose.proxy.yaml

docker/preview/compose.app.yaml

docker/self-host/compose.single-host.yaml

server/compose.yaml (1)

• nats 2.14.6-alpine@sha256:ad7a43eb7e3337c3c38ce5d784d1461791f95f730f252d2b25eee699752a0ca3

dockerfile (3)

docker/agents/pi/Dockerfile (3)

• docker/dockerfile 1.26@sha256:ecfaec9ed6d810b56388c508f4121597bfbba70d41a6dfeee4d8cad5f295fc32 → [Updates: 1.27]
• ghcr.io/pnpm/pnpm 12.0.0@sha256:bce5ae25ef95edd79e696d7fa8489b80561ef660100fd35bd0286d0f90db3dcc → [Updates: 12.3.4]
• node 24.19.0-slim@sha256:a9f5f7c91a432850b2a8a7797adf5eadb6c733ceed61167806cee7ea7fbc29df → [Updates: 24.20.0-slim]

docker/postgres/Dockerfile (2)

• postgres 18-bookworm@sha256:1c59e2c3c818eaa0f0628f695b36e7c9e362d6b219b36a54a32df645cbd7e1af
• postgres 17-bookworm@sha256:051f7b7b3abdd564d5d1bd1e8c4b9c1b6e77087d1dd22020ede611c096a272e0 → [Updates: 18-bookworm]

webapp/Dockerfile (3)

• docker/dockerfile 1.26@sha256:ecfaec9ed6d810b56388c508f4121597bfbba70d41a6dfeee4d8cad5f295fc32 → [Updates: 1.27]
• ghcr.io/pnpm/pnpm 12.0.0@sha256:bce5ae25ef95edd79e696d7fa8489b80561ef660100fd35bd0286d0f90db3dcc → [Updates: 12.3.4]
• nginx stable-alpine@sha256:97d490c12ba55b4946b01546d1c3ed324e8d41ab1c9fcb2a616aa470620e5b46 → [Updates: stable-alpine]

github-actions (38)

.github/actions/ghcr-login/action.yml (1)

• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

.github/actions/restore-server-build/action.yml (1)

• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

.github/actions/setup-browsers/action.yml (1)

• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

.github/actions/setup-caches/action.yml (5)

• actions/setup-java v6.0.0@dd06d9cba3e5552c54d9f8ea23572deb30010f7c
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

.github/actions/setup-release-security-tools/action.yml (1)

• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6

.github/actions/setup-toolchain/action.yml (7)

• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• pnpm/setup v2.1.0@703c52620218391530e48b9e8870d5c0082e1b9b
• pnpm/setup v2.1.0@703c52620218391530e48b9e8870d5c0082e1b9b
• pnpm/setup v2.1.0@703c52620218391530e48b9e8870d5c0082e1b9b
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• voidzero-dev/setup-vp v1.18.0@1b32467adbe183473499fd9d5d372c3ed9641754 → [Updates: v1.19.0]

.github/workflows/cd-docs-teardown.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88

.github/workflows/cd-docs.yml (15)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-pages-artifact v5.0.0@fc324d3547104276b827a68afc52ff2a11cc49c9
• actions/deploy-pages v5.0.0@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 → [Updates: v5.0.1]

.github/workflows/ci-build.yml (9)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• dorny/test-reporter v3.0.0@a43b3a5f7366b97d083190328d2c652e1a8b6aa2
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-java v6.0.0@dd06d9cba3e5552c54d9f8ea23572deb30010f7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/ci-compose-validate.yml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/ci-docker-build.yml (2)

• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

.github/workflows/ci-profile.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/ci-quality-gates.yml (14)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• dorny/test-reporter v3.0.0@a43b3a5f7366b97d083190328d2c652e1a8b6aa2
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• voidzero-dev/setup-vp v1.18.0@1b32467adbe183473499fd9d5d372c3ed9641754 → [Updates: v1.19.0]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• chromaui/action v18.7.1@4cc98810d00b34b8f9e89d454d64a8ac3d088340 → [Updates: v18.7.2]
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• dorny/test-reporter v3.0.0@a43b3a5f7366b97d083190328d2c652e1a8b6aa2
• dorny/test-reporter v3.0.0@a43b3a5f7366b97d083190328d2c652e1a8b6aa2

.github/workflows/ci-security-scan.yml (9)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• trufflesecurity/trufflehog v3.97.1@20652fbbdefffcdaa493a5bf57ab2ac6b1db715b → [Updates: v3.97.2]

.github/workflows/ci-server-clean-reference.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-java v6.0.0@dd06d9cba3e5552c54d9f8ea23572deb30010f7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/ci-tests.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• dorny/test-reporter v3.0.0@a43b3a5f7366b97d083190328d2c652e1a8b6aa2
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• dorny/test-reporter v3.0.0@a43b3a5f7366b97d083190328d2c652e1a8b6aa2

.github/workflows/cicd.yml (18)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• fkirc/skip-duplicate-actions v5.3.2@b974a9395958c231af965b70070979a577efa578
• dorny/paths-filter v4.0.3@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d
• dorny/paths-filter v4.0.3@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• reviewdog/action-actionlint v1.73.2@dbe5299849118fd6f099ba563d263d770955a64a → [Updates: v1.73.4]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• zizmorcore/zizmor-action v0.6.2@3dc1ecc9bcb9e94e9b2c709687979e1298497054 → [Updates: v0.6.3]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• Kesin11/actions-timeline v3.2.0@57fc93f20c6da7fbc14063c6d24a2a5627c799ad
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88
• ghcr.io/zizmorcore/zizmor 1.29.0 → [Updates: 1.30.0, 1.29.0]
• ubuntu 24.04

.github/workflows/cleanup-preview.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88

.github/workflows/codeql.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938

.github/workflows/continuous-staging.yml

.github/workflows/deploy-locked-compose.yml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• appleboy/scp-action v1.0.0@ff85246acaad7bdce478db94a363cd2bf7c90345
• appleboy/ssh-action v1.2.5@0ff4204d59e8e51228ff73bce53f80d53301dee2

.github/workflows/deploy-preview.yml (9)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88

.github/workflows/openapi-autocommit.yml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-java v6.0.0@dd06d9cba3e5552c54d9f8ea23572deb30010f7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

.github/workflows/promote.yml (6)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/pull-request.yml (12)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88
• technote-space/assign-author v1.6.2@9558557c5c4816f38bd06176fbc324ba14bb3160

.github/workflows/reconcile-previews.yml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3

.github/workflows/release-upgrade.yml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/release.yml (10)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/attest v4.2.2@1e69f48acb82d1966a394da916b4c1698aa569d6
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/rescan-main-images.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• ubuntu 24.04

.github/workflows/rescan-release-images.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/reusable-docker-build.yml (20)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-buildx-action v4.3.0@37fe631027851001ddb9b187196cc803df7f5f0e
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• buildpacks/github-actions v6.1.1@af8c06ccd592e27001cbf78083dcc9b47aa6652a
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/attest-build-provenance v4.2.2@4d101475d8b20a2381f78447822ac1eab6504dd8
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• docker/setup-buildx-action v4.3.0@37fe631027851001ddb9b187196cc803df7f5f0e
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• actions/attest-build-provenance v4.2.2@4d101475d8b20a2381f78447822ac1eab6504dd8
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• ubuntu 24.04

.github/workflows/review-policy.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3

.github/workflows/scorecard-ratchet.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/scorecard.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/security-mutation.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-java v6.0.0@dd06d9cba3e5552c54d9f8ea23572deb30010f7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/semgrep.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/verify-changesets.yml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/version-pr.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• changesets/action v2.1.1@8488615a623b1b9c987934bb89eae8af6a946ac1

maven (4)

server/.mvn/extensions.xml (2)

• org.apache.maven.extensions:maven-build-cache-extension 1.3.0
• fr.jcgay.maven:maven-profiler 3.3

server/application/pom.xml (34)

• net.logstash.logback:logstash-logback-encoder 9.0
• net.javacrumbs.shedlock:shedlock-spring 7.9.0 → [Updates: 7.10.0]
• net.javacrumbs.shedlock:shedlock-provider-jdbc-template 7.9.0 → [Updates: 7.10.0]
• com.auth0:java-jwt 4.6.0
• org.springdoc:springdoc-openapi-starter-webmvc-ui 3.1.0
• org.springframework.modulith:spring-modulith-starter-core 2.1.1
• org.springframework.modulith:spring-modulith-starter-test 2.1.1
• com.tngtech.archunit:archunit-junit5 1.5.0
• com.github.therapi:therapi-runtime-javadoc 0.15.0
• io.nats:jnats 2.26.2
• com.github.docker-java:docker-java-api 3.7.1
• com.github.docker-java:docker-java-core 3.7.1
• com.github.docker-java:docker-java-transport-httpclient5 3.7.1
• com.slack.api:bolt 1.50.0 → [Updates: 1.51.0]
• io.sentry:sentry-spring-boot-4-starter 8.53.0 → [Updates: 8.54.0]
• io.github.resilience4j:resilience4j-spring-boot4 2.4.0
• io.github.resilience4j:resilience4j-micrometer 2.4.0
• org.eclipse.jgit:org.eclipse.jgit 7.7.1.202607240634-r
• com.bucket4j:bucket4j_jdk17-core 8.19.0
• com.bucket4j:bucket4j_jdk17-postgresql 8.19.0
• com.tngtech.archunit:archunit 1.5.0
• com.squareup.okhttp3:okhttp-bom 5.5.0
• org.bouncycastle:bcprov-jdk18on 1.84 → [Updates: 1.85.2]
• org.bouncycastle:bcutil-jdk18on 1.84 → [Updates: 1.85]
• org.bouncycastle:bcpkix-jdk18on 1.84 → [Updates: 1.85]
• com.github.therapi:therapi-runtime-javadoc-scribe 0.15.0
• com.google.errorprone:error_prone_core 2.50.0
• com.uber.nullaway:nullaway 0.14.1
• org.jacoco:jacoco-maven-plugin 0.8.15
• org.apache.maven.plugins:maven-pmd-plugin 3.28.0
• org.liquibase:liquibase-maven-plugin 5.0.4
• org.liquibase.ext:liquibase-hibernate7 5.0.4
• org.pitest:pitest-maven 1.30.0
• org.pitest:pitest-junit5-plugin 1.2.3

server/generated-clients/pom.xml (2)

• org.codehaus.mojo:build-helper-maven-plugin 3.6.1
• org.apache.maven.plugins:maven-antrun-plugin 3.2.0

server/pom.xml (6)

• com.diffplug.spotless:spotless-maven-plugin 3.10.1 → [Updates: 3.10.2]
• org.springframework.boot:spring-boot-starter-data-jpa 4.1.1
• io.github.kobylynskyi:graphql-java-codegen 5.10.0
• io.github.kobylynskyi:graphql-codegen-maven-plugin 5.10.0
• org.openapitools:openapi-generator-maven-plugin 7.25.0
• org.springframework.boot:spring-boot-starter-parent 4.1.1

maven-wrapper (3)

server/.mvn/wrapper/maven-wrapper.properties (2)

• maven 3.9.16
• maven-wrapper 3.3.4

server/mvnw (1)

• maven-wrapper 3.3.4

server/mvnw.cmd (1)

• maven-wrapper 3.3.4

npm (6)

docker/agents/pi/package.json (2)

• @earendil-works/pi-coding-agent 0.84.4 → [Updates: 0.85.1]
• pnpm 12.0.0 → [Updates: 12.3.1]

docker/agents/pi/pnpm-workspace.yaml

docs/package.json (24)

• @docusaurus/core 3.10.1 → [Updates: 3.10.2]
• @docusaurus/faster 3.10.1 → [Updates: 3.10.2]
• @docusaurus/plugin-content-docs 3.10.1 → [Updates: 3.10.2]
• @docusaurus/plugin-content-pages 3.10.1 → [Updates: 3.10.2]
• @docusaurus/plugin-css-cascade-layers 3.10.1 → [Updates: 3.10.2]
• @docusaurus/plugin-debug 3.10.1 → [Updates: 3.10.2]
• @docusaurus/plugin-sitemap 3.10.1 → [Updates: 3.10.2]
• @docusaurus/plugin-svgr 3.10.1 → [Updates: 3.10.2]
• @docusaurus/preset-classic 3.10.1 → [Updates: 3.10.2]
• @docusaurus/theme-classic 3.10.1 → [Updates: 3.10.2]
• @docusaurus/theme-mermaid 3.10.1 → [Updates: 3.10.2]
• @easyops-cn/docusaurus-search-local 0.55.3
• @mdx-js/react 3.1.1
• @mermaid-js/layout-elk 0.2.3
• clsx 2.1.1
• prism-react-renderer 2.4.1
• react 19.2.8
• react-dom 19.2.8
• @docusaurus/module-type-aliases 3.10.1 → [Updates: 3.10.2]
• @docusaurus/types 3.10.1 → [Updates: 3.10.2]
• @types/react 19.2.18
• @types/react-dom 19.2.5 → [Updates: 19.2.7]
• markdownlint-cli2 0.22.1 → [Updates: 0.23.2]
• typescript 7.0.2

package.json (31)

• @changesets/cli 3.0.1 → [Updates: 3.0.2]
• @commitlint/cli 21.0.1 → [Updates: 21.2.2]
• @commitlint/config-conventional 21.0.1 → [Updates: 21.2.2]
• @earendil-works/pi-coding-agent 0.84.4 → [Updates: 0.85.1]
• @nats-io/jetstream 3.4.0
• @nats-io/transport-node 3.4.0
• @openapitools/openapi-generator-cli 2.32.0 → [Updates: 2.41.0]
• @types/node 24.12.4 → [Updates: 24.13.3]
• @types/npm-package-arg 6.1.4
• @types/pg 8.20.0 → [Updates: 8.23.1]
• ajv 8.20.0
• ajv-formats 3.0.1
• commander 14.0.3 → [Updates: 15.0.0]
• fast-xml-parser 5.11.0 → [Updates: 5.11.1]
• fast-xml-validator 1.4.2
• graphql 17.0.2
• jsdom 29.1.1 → [Updates: 30.0.1]
• jsonc-parser 3.3.1
• mdast-util-from-markdown 2.0.3
• mdast-util-mdx 3.0.0
• mermaid 11.16.1 → [Updates: 11.17.2]
• micromark-extension-mdxjs 3.0.0
• mprocs 0.9.3 → [Updates: 0.9.6]
• npm-package-arg 13.0.2 → [Updates: 14.0.0]
• pg 8.20.0 → [Updates: 8.23.0]
• surge 0.43.1 → [Updates: 0.44.0]
• typescript 7.0.2
• vite-plus 0.3.0
• yaml 2.9.0
• node 24.19.0 → [Updates: 24.20.0]
• pnpm 12.0.0 → [Updates: 12.3.1]

pnpm-workspace.yaml (12)

• @tanstack/router-plugin>unplugin 3.0.0 → [Updates: 3.3.0]
• mermaid 11.16.1 → [Updates: 11.17.2]
• browserslist@<=4.28.6 4.28.8 → [Updates: 4.28.9]
• dompurify 3.4.14
• js-yaml@>=4.0.0 4.3.2 → [Updates: 5.4.1]
• lodash 4.18.1
• lodash-es 4.18.1
• markdown-it@<=14.1.1 14.2.0 → [Updates: 14.3.1, 15.0.1]
• qs@>=2.2.5 <6.16.0 6.16.0
• serialize-javascript 7.0.5 → [Updates: 7.1.1]
• shell-quote@<=1.8.4 1.10.0
• uuid@<11.1.1 11.1.1 → [Updates: 14.0.2]

webapp/package.json (70)

• @ai-sdk/react 4.0.88 → [Updates: 4.0.94]
• @base-ui/react 1.7.0 → [Updates: 1.8.0]
• @dnd-kit/core ^6.3.1
• @dnd-kit/modifiers ^9.0.0
• @dnd-kit/sortable ^10.0.0
• @dnd-kit/utilities ^3.2.2
• @monaco-editor/react ^4.7.0
• @primer/octicons-react 19.33.0
• @sentry/react 10.71.0 → [Updates: 10.73.0]
• @tanstack/react-query 5.102.5 → [Updates: 5.102.8]
• @tanstack/react-query-devtools 5.102.5 → [Updates: 5.102.8]
• @tanstack/react-router 1.170.32
• @tanstack/react-router-devtools 1.167.1
• @tanstack/react-table 9.1.2 → [Updates: 9.2.4]
• @xyflow/react ^12.11.5
• ai 7.0.85 → [Updates: 7.0.91]
• class-variance-authority 0.7.1
• clsx 2.1.1
• date-fns 4.4.0
• fast-deep-equal 3.1.3
• lucide-react 1.34.0 → [Updates: 1.39.0]
• motion 13.1.1 → [Updates: 13.2.0]
• react 19.2.8
• react-day-picker 10.0.1
• react-dom 19.2.8
• sonner 2.0.8
• streamdown 2.6.0
• tailwind-merge 3.6.0
• use-sync-external-store 1.6.0
• usehooks-ts 3.1.1
• uuid 14.0.2
• zod 4.4.3 → [Updates: 4.5.4]
• zustand 5.0.15
• @chromatic-com/storybook 5.2.1 → [Updates: 5.3.1]
• @fontsource-variable/inter ^5.3.0 → [Updates: 5.3.0]
• @gitlab/svgs 3.163.0 → [Updates: 3.164.0]
• @hey-api/openapi-ts 0.0.0-next-20260824173136 → [Updates: 0.99.0]
• @playwright/test 1.60.0 → [Updates: 1.62.1]
• @primer/primitives 11.9.0 → [Updates: 11.10.0]
• @sentry/vite-plugin 5.4.0
• @storybook/addon-a11y 10.4.0 → [Updates: 10.6.0]
• @storybook/addon-docs 10.4.0 → [Updates: 10.6.0]
• @storybook/addon-onboarding 10.4.0 → [Updates: 10.6.0]
• @storybook/addon-themes 10.4.0 → [Updates: 10.6.0]
• @storybook/addon-vitest 10.4.0 → [Updates: 10.6.0]
• @storybook/react 10.4.0 → [Updates: 10.6.0]
• @storybook/react-vite 10.4.0 → [Updates: 10.6.0]
• @tailwindcss/typography 0.5.19 → [Updates: 0.5.20]
• @tailwindcss/vite 4.3.0 → [Updates: 4.3.3]
• @tanstack/router-plugin 1.168.35
• @testing-library/dom 10.4.1
• @testing-library/react 16.3.2 → [Updates: 16.3.3]
• @testing-library/user-event 14.6.1 → [Updates: 14.6.7]
• @types/hast 3.0.5
• @types/node 24.12.4 → [Updates: 24.13.3]
• @types/react 19.2.18
• @types/react-dom 19.2.5 → [Updates: 19.2.7]
• @vitejs/plugin-react 6.1.0 → [Updates: 6.1.1]
• chromatic 16.10.1 → [Updates: 18.7.1]
• jsdom 29.1.1 → [Updates: 30.0.1]
• msw 2.14.6 → [Updates: 2.15.0]
• msw-storybook-addon 2.0.7 → [Updates: 3.0.0]
• oxc-transform-react 0.145.0 → [Updates: 0.147.0]
• playwright 1.60.0 → [Updates: 1.62.1]
• storybook 10.4.0 → [Updates: 10.6.0]
• tailwindcss 4.3.0 → [Updates: 4.3.3]
• tw-animate-css 1.4.0
• typescript 7.0.2
• vite 8.2.2
• vite-plugin-terminal 1.4.0

regex (15)

.github/actions/setup-release-security-tools/action.yml (2)

• anchore/syft 1.51.1
• aquasecurity/trivy 0.74.0

.github/workflows/ci-build.yml (1)

• paketobuildpacks/ubuntu-noble-run-tiny latest@sha256:c32333227b6dfbc2a4a93b03ee6d3475cfe152468c7d396bf22f06099bb0ecc9 → [Updates: latest]

.github/workflows/cicd.yml (1)

• zizmorcore/zizmor 1.29.0 → [Updates: 1.30.0]

.github/workflows/reusable-docker-build.yml (1)

• buildpacks/pack 0.40.9

.github/workflows/semgrep.yml (1)

• semgrep/semgrep 1.176.1@sha256:34ab619bf1391a24bfda3f05debd0d8a6ce3093c2d5f9d39cfc00f83c1397823

docker/agents/pi/Dockerfile (2)

• node 24.19.0 → [Updates: 24.20.0]
• @earendil-works/pi-coding-agent 0.84.4 → [Updates: 0.85.1]

openapitools.json (1)

• OpenAPITools/openapi-generator 7.7.0 → [Updates: 7.25.0]

package.json (1)

• node 24.19.0 → [Updates: 24.20.0]

package.json (1)

• pnpm 12.0.0 → [Updates: 12.3.1]

security/release-images.json (4)

• docker.io/library/alpine 3@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b
• docker.io/library/nats 2.14.6-alpine@sha256:ad7a43eb7e3337c3c38ce5d784d1461791f95f730f252d2b25eee699752a0ca3
• docker.io/library/nginx 1.31.4-alpine@sha256:db35bfc6b2951e7f8a72db5db120288c127ffaeeb4a6d4b95a26fead017d5913 → [Updates: 1.31.5-alpine]
• docker.io/library/traefik v3.7.11@sha256:5203c3f39ca70de6790d964624e042463ffbd57715bc82be155cf224c0dd5144 → [Updates: v3.7.12]

server/application/project.toml (2)

• paketobuildpacks/builder-noble-java-tiny latest@sha256:3a9f6efa2351dba2492a9c6eb28b3bf52b5f930832a20c39b6261ed7c1a0a085 → [Updates: latest]
• paketobuildpacks/health-checker latest@sha256:7ef317843d076c93682a2f0f79384dc11ff20227cf779d3b11b9f34e9d8b9246

server/application/src/test/java/de/tum/cit/aet/hephaestus/agent/mentor/live/MentorLiveLlmTest.java (1)

• @earendil-works/pi-coding-agent 0.84.4 → [Updates: 0.85.1]

server/application/src/test/java/de/tum/cit/aet/hephaestus/agent/mentor/live/MentorSandboxStressTest.java (1)

• @earendil-works/pi-coding-agent 0.84.4 → [Updates: 0.85.1]

server/application/src/test/java/de/tum/cit/aet/hephaestus/agent/practice/live/PracticeRunnerLiveLlmTest.java (1)

• @earendil-works/pi-coding-agent 0.84.4 → [Updates: 0.85.1]

webapp/Dockerfile (1)

• node 24.19.0 → [Updates: 24.20.0]

---

• Check this box to trigger a request for Renovate to run again on this repository