Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): update dependency typescript-eslint to v8.30.0

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• chore(deps): update apple-actions/import-codesign-certs action to v5
• chore(deps): update react monorepo to v19 (major) (@types/react, @types/react-dom, react, react-dom)

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• fix(deps): update dependency @triliumnext/express-partial-content to v1.1.0
• fix(deps): update dependency codemirror to v6
• fix(deps): update dependency express to v5

Detected dependencies

docker-compose

docker-compose.yml

dockerfile

.gitpod.dockerfile

Dockerfile

• node 22.14.0-bullseye-slim
• node 22.14.0-bullseye-slim

Dockerfile.alpine

• node 22.14.0-alpine
• node 22.14.0-alpine

github-actions

.github/actions/build-electron/action.yml

• apple-actions/import-codesign-certs v3
• apple-actions/import-codesign-certs v3

.github/actions/build-server/action.yml

• actions/setup-node v4

.github/actions/report-size/action.yml

• actions/checkout v4
• nejcm/bundle-size-reporter-action v1.4.1
• marocchino/sticky-pull-request-comment v2

.github/workflows/codeql.yml

• actions/checkout v4
• github/codeql-action v3
• github/codeql-action v3

.github/workflows/dev.yml

• actions/checkout v4
• actions/setup-node v4
• actions/checkout v4
• actions/setup-node v4
• actions/checkout v4
• actions/setup-node v4
• actions/checkout v4
• docker/setup-buildx-action v3
• docker/build-push-action v6
• actions/checkout v4
• docker/setup-buildx-action v3
• docker/build-push-action v6
• stringbean/docker-healthcheck-action v3

.github/workflows/main-docker.yml

• actions/checkout v4
• docker/setup-buildx-action v3
• actions/setup-node v4
• docker/build-push-action v6
• stringbean/docker-healthcheck-action v3
• actions/upload-artifact v4
• actions/checkout v4
• docker/metadata-action v5
• docker/setup-qemu-action v3
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/login-action v3
• docker/build-push-action v6
• actions/upload-artifact v4
• actions/download-artifact v4
• docker/setup-buildx-action v3
• docker/metadata-action v5
• docker/login-action v3
• docker/login-action v3

.github/workflows/nightly.yml

• actions/checkout v4
• actions/setup-node v4
• softprops/action-gh-release v2
• actions/upload-artifact v4
• actions/checkout v4
• softprops/action-gh-release v2

.github/workflows/playwright.yml

• actions/checkout v4
• actions/setup-node v4
• actions/upload-artifact v4

.github/workflows/release-winget.yml

.github/workflows/release.yml

• actions/checkout v4
• actions/setup-node v4
• actions/upload-artifact v4
• actions/checkout v4
• actions/upload-artifact v4
• actions/download-artifact v4
• softprops/action-gh-release v2

npm

dump-db/package.json

• better-sqlite3 ^11.1.2
• mime-types ^3.0.0
• sanitize-filename ^1.6.3
• tsx ^4.19.3
• yargs ^17.3.1
• @types/better-sqlite3 ^7.6.11
• @types/mime-types ^2.1.4
• @types/yargs ^17.0.33

package.json

• @braintree/sanitize-url 7.1.1
• @electron/remote 2.1.2
• @highlightjs/cdn-assets 11.11.1
• @triliumnext/express-partial-content 1.0.1
• archiver 7.0.1
• async-mutex 0.5.0
• autocomplete.js 0.38.1
• axios 1.8.4
• better-sqlite3 11.9.1
• boxicons 2.1.4
• chardet 2.1.0
• cheerio 1.0.0
• chokidar 4.0.3
• cls-hooked 4.2.2
• codemirror 5.65.19
• compression 1.8.0
• cookie-parser 1.4.7
• csrf-csrf 3.1.0
• dayjs 1.11.13
• dayjs-plugin-utc 0.1.2
• debounce 2.2.0
• draggabilly 3.0.0
• ejs 3.1.10
• electron-debug 4.1.0
• electron-dl 4.0.0
• electron-squirrel-startup 1.0.1
• electron-window-state 5.0.3
• escape-html 1.0.3
• eslint-linter-browserify 9.24.0
• express 4.21.2
• express-openid-connect ^2.17.1
• express-rate-limit 7.5.0
• express-session 1.18.1
• force-graph 1.49.5
• fs-extra 11.3.0
• helmet 8.1.0
• html 1.0.0
• html2plaintext 2.1.4
• http-proxy-agent 7.0.2
• https-proxy-agent 7.0.6
• i18next 24.2.3
• i18next-fs-backend 2.6.0
• image-type 5.2.0
• ini 5.0.0
• is-animated 2.0.2
• is-svg 5.1.0
• jimp 1.6.0
• jquery 3.7.1
• jquery-hotkeys 0.2.2
• jquery.fancytree 2.38.5
• js-yaml 4.1.0
• jsdom 26.1.0
• katex 0.16.22
• marked 15.0.8
• mime-types 3.0.1
• multer 1.4.5-lts.2
• normalize-strings 1.1.1
• normalize.css 8.0.1
• rand-token 1.0.1
• safe-compare 1.1.4
• sanitize-filename 1.6.3
• sanitize-html 2.15.0
• sax 1.4.1
• serve-favicon 2.5.0
• session-file-store 1.5.0
• stream-throttle 0.1.3
• strip-bom 5.0.0
• striptags 3.2.0
• swagger-ui-express 5.0.1
• time2fa ^1.3.0
• tmp 0.2.3
• turndown 7.2.0
• unescape 1.0.1
• ws 8.18.1
• xml2js 0.6.2
• yauzl 3.2.0
• @electron-forge/cli 7.8.0
• @electron-forge/maker-deb 7.8.0
• @electron-forge/maker-dmg 7.8.0
• @electron-forge/maker-flatpak 7.8.0
• @electron-forge/maker-rpm 7.8.0
• @electron-forge/maker-squirrel 7.8.0
• @electron-forge/maker-zip 7.8.0
• @electron-forge/plugin-auto-unpack-natives 7.8.0
• @electron/rebuild 3.7.2
• @eslint/js 9.24.0
• @excalidraw/excalidraw 0.18.0
• @fullcalendar/core 6.1.17
• @fullcalendar/daygrid 6.1.17
• @fullcalendar/interaction 6.1.17
• @fullcalendar/list 6.1.17
• @fullcalendar/multimonth 6.1.17
• @fullcalendar/timegrid 6.1.17
• @mermaid-js/layout-elk 0.1.7
• @mind-elixir/node-menu 1.0.5
• @playwright/test 1.51.1
• @popperjs/core 2.11.8
• @stylistic/eslint-plugin 4.2.0
• @types/archiver 6.0.3
• @types/better-sqlite3 7.6.13
• @types/bootstrap 5.2.10
• @types/cheerio 0.22.35
• @types/cls-hooked 4.3.9
• @types/compression 1.7.5
• @types/cookie-parser 1.4.8
• @types/debounce 1.2.4
• @types/ejs 3.1.5
• @types/electron-squirrel-startup 1.0.2
• @types/escape-html 1.0.4
• @types/express 5.0.1
• @types/express-session 1.18.1
• @types/fs-extra 11.0.4
• @types/html 1.0.4
• @types/ini 4.1.1
• @types/jquery 3.5.32
• @types/js-yaml 4.0.9
• @types/jsdom 21.1.7
• @types/leaflet 1.9.17
• @types/leaflet-gpx 1.3.7
• @types/mime-types 2.1.4
• @types/multer 1.4.12
• @types/node 22.14.1
• @types/react 18.3.20
• @types/react-dom 18.3.6
• @types/safe-compare 1.1.2
• @types/sanitize-html 2.15.0
• @types/sax 1.2.7
• @types/serve-favicon 2.5.7
• @types/session-file-store 1.2.5
• @types/stream-throttle 0.1.4
• @types/supertest 6.0.3
• @types/swagger-ui-express 4.1.8
• @types/tmp 0.2.6
• @types/turndown 5.0.5
• @types/ws 8.18.1
• @types/xml2js 0.4.14
• @types/yargs 17.0.33
• @vitest/coverage-v8 3.1.1
• autoprefixer 10.4.21
• bootstrap 5.3.5
• copy-webpack-plugin 13.0.0
• cross-env 7.0.3
• css-loader 7.1.2
• electron 35.1.5
• eslint 9.24.0
• eslint-plugin-simple-import-sort 12.1.1
• esm 3.2.25
• globals 16.0.0
• happy-dom 17.4.4
• i18next-http-backend 3.0.2
• jsdoc 4.0.4
• jsplumb 2.15.6
• knockout 3.5.1
• leaflet 1.9.4
• leaflet-gpx 2.1.2
• lorem-ipsum 2.0.8
• mark.js 8.11.1
• mermaid 11.6.0
• mind-elixir 4.5.1
• mini-css-extract-plugin 2.9.2
• nodemon 3.1.9
• panzoom 9.4.3
• postcss-loader 8.1.1
• rcedit 4.0.1
• react 18.3.1
• react-dom 18.3.1
• rimraf 6.0.1
• sass 1.86.3
• sass-loader 16.0.5
• script-loader 0.7.2
• split.js 1.6.5
• supertest 7.1.0
• svg-pan-zoom 3.6.2
• swagger-jsdoc 6.2.8
• ts-loader 9.5.2
• tslib 2.8.1
• tsx 4.19.3
• typedoc 0.28.2
• typedoc-plugin-missing-exports 4.0.0
• typescript 5.8.3
• typescript-eslint 8.29.1
• vanilla-js-wheel-zoom 9.0.4
• vitest 3.1.1
• webpack 5.99.5
• webpack-cli 6.0.1
• webpack-dev-middleware 7.4.2
• appdmg 0.6.6

packages/turndown-plugin-gfm/package.json

• browserify ^17.0.1
• rollup ^4.36.0
• standard ^17.1.2
• turndown 7.2.0
• turndown-attendant 0.0.3

---

• Check this box to trigger a request for Renovate to run again on this repository

[pano9000]

csurf replacement is being worked on here: #864

[pano9000]

electron-packager and electron-rebuild are updated here: #935

[eliandoran]

Closing for now as we have the web UI of Renovate if we need it.
Apparently it is needed.