Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@testing-library/jest-native
npm	framer-motion
npm	js-cookie

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): replace dependency framer-motion with motion ^12.38.0
• chore(deps): update dependency @types/node to ^24.12.4
• chore(deps): update dependency @vitejs/plugin-react to ^6.0.2
• chore(deps): update dependency matplotlib to v3.10.9
• chore(deps): update dependency postcss to ^8.5.14
• chore(deps): update dependency python to v3.14.5
• chore(deps): update dependency sbt/sbt to v1.12.11
• chore(deps): update dependency scalafmt to v3.11.1
• chore(deps): update dependency wxt to ^0.20.26
• chore(deps): update github/codeql-action action to v4.35.5
• chore(deps): update go module directive to v1.26.3
• chore(deps): update pnpm to v10.33.4
• chore(deps): update prom/prometheus docker tag to v3.11.3
• chore(deps): update sigstore/cosign-installer action to v4.1.2
• chore(deps): update vitest monorepo to ^4.1.6 (@vitest/coverage-v8, vitest)
• fix(deps): update dependency @fastify/swagger-ui to ^5.2.6
• fix(deps): update dependency @ory/client to ^1.22.37
• fix(deps): update dependency js-cookie to ^3.0.6
• fix(deps): update dependency react-native-paper to ^5.15.2
• fix(deps): update dependency react-native-svg to ^15.15.5
• fix(deps): update dependency redux-saga to ^1.4.3
• fix(deps): update expo monorepo (@expo/cli, @expo/metro-config, babel-preset-expo, expo, expo-insights, expo-splash-screen, expo-status-bar, jest-expo)
• fix(deps): update material-ui monorepo (@mui/icons-material, @mui/material, @mui/material-nextjs, @mui/x-date-pickers)
• fix(deps): update module buf.build/gen/go/shortlink-org/shortlink-link-link/grpc/go to v1.6.2-20251128130903-01e2641aede0.1
• fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.44
• fix(deps): update module github.com/redis/rueidis to v1.0.75
• fix(deps): update module github.com/threedotslabs/watermill to v1.5.2
• fix(deps): update nextjs monorepo to ^16.2.6 (@next/env, next)
• fix(deps): update react monorepo to v19.2.6 (react, react-dom, react-test-renderer)
• chore(deps): update actions/setup-node action to v6.4.0
• chore(deps): update authzed/spicedb docker tag to v1.53.0
• chore(deps): update dependency @playwright/test to ^1.60.0
• chore(deps): update dependency @types/node to v25.8.0
• chore(deps): update dependency allure-playwright to ^3.8.0
• chore(deps): update dependency eslint to v10.4.0
• chore(deps): update dependency globals to v17.6.0
• chore(deps): update dependency jsdom to ^29.1.1
• chore(deps): update dependency tsx to ^4.22.0
• chore(deps): update docker/dockerfile docker tag to v1.24
• chore(deps): update ghcr.io/nginx/nginx-unprivileged docker tag to v1.31
• chore(deps): update module github.com/sqlc-dev/sqlc to v1.31.1
• chore(deps): update prisma monorepo to v7.8.0 (@prisma/client, prisma)
• chore(deps): update redis docker tag to v25.5.3
• chore(deps): update step-security/harden-runner action to v2.19.3
• chore(deps): update terraform hashicorp/terraform to >= 1.15.3
• chore(deps): update trufflesecurity/trufflehog action to v3.95.3
• fix(deps): update dependency @bufbuild/protobuf to v2.12.0
• fix(deps): update dependency @react-navigation/native-stack to ^7.15.1
• fix(deps): update dependency @reduxjs/toolkit to ^2.12.0
• fix(deps): update dependency @tanstack/react-query to ^5.100.10
• fix(deps): update dependency amqplib to ^1.2.0
• fix(deps): update dependency axios to ^1.16.1
• fix(deps): update dependency react-native-screens to ^4.25.0
• fix(deps): update dependency react-redux to ^9.3.0
• fix(deps): update dependency zod to v4.4.3
• fix(deps): update module github.com/authzed/authzed-go to v1.9.0
• fix(deps): update module github.com/elastic/go-elasticsearch/v9 to v9.4.1
• fix(deps): update module github.com/graph-gophers/graphql-go to v1.10.1
• fix(deps): update module github.com/ibm/sarama to v1.48.2
• fix(deps): update module github.com/minio/minio-go/v7 to v7.1.0
• fix(deps): update module go.mongodb.org/mongo-driver/v2 to v2.6.0
• fix(deps): update module golang.org/x/text to v0.37.0
• fix(deps): update module google.golang.org/grpc to v1.81.1
• fix(deps): update opentelemetry-js monorepo (@opentelemetry/exporter-logs-otlp-grpc, @opentelemetry/exporter-metrics-otlp-grpc, @opentelemetry/exporter-prometheus, @opentelemetry/exporter-trace-otlp-grpc, @opentelemetry/instrumentation, @opentelemetry/resources, @opentelemetry/sdk-logs, @opentelemetry/sdk-metrics, @opentelemetry/sdk-node, @opentelemetry/sdk-trace-base, @opentelemetry/sdk-trace-node, @opentelemetry/semantic-conventions)
• fix(deps): update opentelemetry-js-contrib monorepo (@opentelemetry/auto-instrumentations-node, @opentelemetry/instrumentation-kafkajs, @opentelemetry/instrumentation-runtime-node, @opentelemetry/instrumentation-winston, @opentelemetry/winston-transport)
• fix(deps): update tailwindcss monorepo to ^4.3.0 (@tailwindcss/cli, @tailwindcss/postcss, tailwindcss)
• chore(deps): update actions/dependency-review-action action to v5
• chore(deps): update azure/setup-helm action to v5
• chore(deps): update dependency eslint-plugin-n to v18
• chore(deps): update github/ossar-action action to v2
• chore(deps): update pnpm to v11
• fix(deps): update dependency amqplib to v2
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package github/ossar-action), Failed to look up npm package @buf/shortlink-org_shortlink-link-link.bufbuild_es: no-result.

Files affected: .github/workflows/ossar.yml, boundaries/proxy/package.json

---

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• chore(deps): update dependency fastify to v5.8.5 [security]

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency detox to ^20.50.4
• chore(deps): update dependency metro to v0.84.4
• chore(deps): update dependency metro-resolver to ^0.84.4
• chore(deps): update jest monorepo (babel-jest, jest, jest-circus, jest-environment-jsdom)
• chore(deps): update nx monorepo to v22.7.2 (@nx/detox, @nx/eslint-plugin, @nx/expo, @nx/jest, @nx/js, @nx/workspace, nx)
• chore(deps): update typescript-eslint monorepo to v8.59.3 (@typescript-eslint/eslint-plugin, @typescript-eslint/parser, typescript-eslint)
• fix(deps): update dependency @sentry/nextjs to ^10.53.1
• fix(deps): update dependency firebase to ^12.13.0
• fix(deps): update dependency fonttools to v4.63.0
• fix(deps): update dependency numpy to v2.4.5
• fix(deps): update dependency react-native to ^0.85.3
• chore(deps): update dependency eas-cli to v18
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

ansible (1)

ops/ansible/playbooks/roles/ui-next/tasks/main.yml

ansible-galaxy (1)

ops/ansible/requirements.yml (2)

• geerlingguy.docker 8.0.0
• geerlingguy.pip 3.1.2

docker-compose (13)

docker-compose.yaml

ops/docker-compose/application/api/api.yaml (1)

• prom/prometheus v3.11.2 → [Updates: v3.11.3]

ops/docker-compose/application/auth/hydra/hydra.yaml (2)

• oryd/hydra v26.2
• oryd/hydra v26.2

ops/docker-compose/application/auth/keto/keto.yaml (1)

• oryd/keto v0.12.0-alpha.0

ops/docker-compose/application/auth/keycloak/keycloak.yaml (2)

• quay.io/keycloak/keycloak 26.6.1
• prom/prometheus v3.11.2 → [Updates: v3.11.3]

ops/docker-compose/application/auth/kratos/kratos.yaml (2)

• oryd/kratos v26.2.0
• oryd/kratos v26.2.0

ops/docker-compose/application/auth/spicedb/spicedb.yaml (2)

• authzed/spicedb v1.51.1 → [Updates: v1.53.0]
• authzed/spicedb v1.51.1 → [Updates: v1.53.0]

ops/docker-compose/application/link/link.yaml (1)

• prom/prometheus v3.11.2 → [Updates: v3.11.3]

ops/docker-compose/application/logger/logger.yaml

ops/docker-compose/application/metadata/metadata.yaml (1)

• prom/prometheus v3.11.2 → [Updates: v3.11.3]

ops/docker-compose/application/support/support.yaml

ops/docker-compose/application/ui-next/ui-next.yaml

poc/xa/dtm-example/docker-compose.yaml (1)

• ghcr.io/dbsystel/postgresql-partman 18

dockerfile (18)

.clusterfuzzlite/Dockerfile

boundaries/bff/ops/Dockerfile (3)

• docker/dockerfile 1.23 → [Updates: 1.24]
• golang 1.26-alpine
• alpine 3.23

boundaries/link/ops/Dockerfile (3)

• docker/dockerfile 1.23 → [Updates: 1.24]
• golang 1.26-alpine
• alpine 3.23

boundaries/metadata/ops/Dockerfile (3)

• docker/dockerfile 1.23 → [Updates: 1.24]
• golang 1.26-alpine
• alpine 3.23

boundaries/proxy/ops/Dockerfile (3)

• docker/dockerfile 1.23 → [Updates: 1.24]
• node 25.9.0-bookworm-slim
• node 25.9.0-bookworm-slim

boundaries/ui/ops/Dockerfile (3)

• docker/dockerfile 1.23 → [Updates: 1.24]
• node 24.15.0-alpine
• node 24.15.0-alpine

ops/dockerfile/boundaries/marketing/referral.Dockerfile (2)

• docker/dockerfile 1.23 → [Updates: 1.24]
• python 3.14-slim

ops/dockerfile/boundaries/notification/bot.Dockerfile (2)

• docker/dockerfile 1.23 → [Updates: 1.24]
• maven 3-eclipse-temurin-21-alpine

ops/dockerfile/boundaries/platform/backstage.Dockerfile (3)

• node 24.15.0-bookworm-slim
• node 24.15.0-bookworm-slim
• node 24.15.0-bookworm-slim

ops/dockerfile/boundaries/platform/csi.Dockerfile (3)

• docker/dockerfile 1.23 → [Updates: 1.24]
• golang 1.26-alpine
• alpine 3.23

ops/dockerfile/boundaries/platform/go_wasm.Dockerfile (2)

• docker/dockerfile 1.23 → [Updates: 1.24]
• golang 1.26-alpine

ops/dockerfile/boundaries/platform/landscape.Dockerfile (2)

• docker/dockerfile 1.23 → [Updates: 1.24]
• ghcr.io/nginx/nginx-unprivileged 1.29-alpine-otel → [Updates: 1.31-alpine-otel]

ops/dockerfile/boundaries/platform/support/support-proxy.Dockerfile (1)

• ghcr.io/nginx/nginx-unprivileged 1.29-alpine-otel → [Updates: 1.31-alpine-otel]

ops/dockerfile/boundaries/platform/support/support.Dockerfile (1)

• php 8.5-fpm-alpine

ops/dockerfile/boundaries/shop/admin.Dockerfile (2)

• docker/dockerfile 1.23 → [Updates: 1.24]
• python 3.14-slim

ops/dockerfile/boundaries/shop/bff.Dockerfile (2)

• docker/dockerfile 1.23 → [Updates: 1.24]
• node 24.15.0-alpine

ops/dockerfile/boundaries/shop/ui.Dockerfile (2)

• docker/dockerfile 1.23 → [Updates: 1.24]
• node 24.15.0-alpine

ops/dockerfile/boundaries/shortdb/shortdb.Dockerfile (3)

• docker/dockerfile 1.23 → [Updates: 1.24]
• golang 1.26-alpine
• debian 13.4

github-actions (21)

.github/workflows/cflite_build.yml (4)

• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• google/clusterfuzzlite v1@884713a6c30a92e5e8544c39945cd7cb630abcd1
• google/clusterfuzzlite v1@884713a6c30a92e5e8544c39945cd7cb630abcd1

.github/workflows/ci.yml (12)

• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-protoc v3.0.0@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b
• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• pnpm/action-setup v6
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6.4.0]
• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4.35.5]
• pnpm 10.33.0 → [Updates: 10.33.4, 11.1.2]

.github/workflows/codecov.yaml (6)

• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-protoc v3.0.0@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b
• codecov/codecov-action v6.0.0@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2
• go 1.26.2 → [Updates: 1.26.3]

.github/workflows/codeql.yml (5)

• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4.35.5]
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4.35.5]
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4.35.5]

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/dependency-review-action v4.9.0@2031cfc080254a8a887f58cffee85186f0e49e48 → [Updates: v5.0.0]

.github/workflows/docker.yml (8)

• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121
• docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]

.github/workflows/fossa.yml (2)

• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/golangci-lint.yml (5)

• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• golangci/golangci-lint-action v9.2.0@1e7e51e771db61008b38414a730f564565cf7c20
• go 1.26.2 → [Updates: 1.26.3]

.github/workflows/helm-test.yaml (7)

• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78 → [Updates: v5.0.0]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
• helm/kind-action v1.14.0@ef37e7f390d99f746eb8b610417061a60e82a6cc
• python 3.14.4 → [Updates: 3.14.5]

.github/workflows/maintenance.yml (6)

• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• go 1.26.2 → [Updates: 1.26.3]

.github/workflows/npm-publish.yaml (6)

• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• pnpm/action-setup v6
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6.4.0]
• pnpm 10.33.0 → [Updates: 10.33.4, 11.1.2]
• node 24.15.0

.github/workflows/ossar.yml (4)

• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• github/ossar-action v1@786a16a90ba92b4ae6228fe7382fb16ef5c51000 → [Updates: v2.0.0]
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4.35.5]

.github/workflows/scorecard.yml (5)

• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4.35.5]

.github/workflows/security.yml (6)

• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• trufflesecurity/trufflehog v3.94.3@47e7b7cd74f578e1e3145d48f669f22fd1330ca6 → [Updates: v3.95.3]
• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• fossas/fossa-action v1.9.0@ff70fe9fe17cbd2040648f1c45e8ec4e4884dcf3

.github/workflows/semgrep.yml (4)

• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 → [Updates: v4.35.5]
• ubuntu 24.04

.github/workflows/stale.yaml (2)

• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/stale v10.2.0@b5d41d4e1d5dceea10e7104786b73624c18a190f

.github/workflows/super-linter.yaml (2)

• step-security/harden-runner v2.18.0@6c3c2f2c1c457b00c10c4848d6f5491db3b629df → [Updates: v2.19.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

ops/ansible/playbooks/roles/geerlingguy.docker/.github/workflows/ci.yml (6)

• actions/checkout v6
• actions/setup-python v6
• actions/checkout v6
• actions/setup-python v6
• python 3.14.4 → [Updates: 3.14.5]
• python 3.14.4 → [Updates: 3.14.5]

ops/ansible/playbooks/roles/geerlingguy.docker/.github/workflows/release.yml (3)

• actions/checkout v6
• actions/setup-python v6
• python 3.14.4 → [Updates: 3.14.5]

ops/ansible/playbooks/roles/geerlingguy.pip/.github/workflows/ci.yml (6)

• actions/checkout v6
• actions/setup-python v6
• actions/checkout v6
• actions/setup-python v6
• python 3.14.4 → [Updates: 3.14.5]
• python 3.14.4 → [Updates: 3.14.5]

ops/ansible/playbooks/roles/geerlingguy.pip/.github/workflows/release.yml (3)

• actions/checkout v6
• actions/setup-python v6
• python 3.14.4 → [Updates: 3.14.5]

gitlabci (2)

.gitlab/ci/.gitlab-ci.yml

.gitlab/ci/stages/build.yml

gomod (7)

boundaries/api/api-gateway/go.mod (15)

• go 1.26.2 → [Updates: 1.26.3]
• buf.build/gen/go/shortlink-org/shortlink-link-link/grpc/go v1.6.1-20251128130903-01e2641aede0.1@01e2641aede0 → [Updates: v1.6.2-20251128130903-01e2641aede0.1]
• github.com/cloudevents/sdk-go/observability/opentelemetry/v2 v2.16.2
• github.com/cloudevents/sdk-go/v2 v2.16.2
• github.com/google/wire v0.7.0
• github.com/graph-gophers/graphql-go v1.9.0 → [Updates: v1.10.1]
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0
• github.com/segmentio/encoding v0.5.4
• github.com/spf13/viper v1.21.0
• github.com/uptrace/opentelemetry-go-extra/otelgraphql v0.3.2
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0
• go.opentelemetry.io/otel/trace v1.43.0
• golang.org/x/sync v0.20.0
• google.golang.org/grpc v1.80.0 → [Updates: v1.81.1]
• google.golang.org/protobuf v1.36.11

boundaries/bff/go.mod (17)

• go 1.26.2 → [Updates: 1.26.3]
• buf.build/gen/go/shortlink-org/shortlink-link-link/grpc/go v1.6.1-20251128130903-01e2641aede0.1@01e2641aede0 → [Updates: v1.6.2-20251128130903-01e2641aede0.1]
• buf.build/gen/go/shortlink-org/shortlink-link-link/protocolbuffers/go v1.36.11-20251128130903-01e2641aede0.1@01e2641aede0
• github.com/go-chi/chi/v5 v5.2.5
• github.com/go-chi/cors v1.2.2
• github.com/go-chi/render v1.0.3
• github.com/google/wire v0.7.0
• github.com/oapi-codegen/runtime v1.4.0
• github.com/segmentio/encoding v0.5.4
• github.com/spf13/viper v1.21.0
• github.com/stretchr/testify v1.11.1
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0
• go.opentelemetry.io/otel/trace v1.43.0
• golang.org/x/sync v0.20.0
• golang.org/x/text v0.36.0 → [Updates: v0.37.0]
• google.golang.org/grpc v1.80.0 → [Updates: v1.81.1]
• google.golang.org/protobuf v1.36.11

boundaries/link/go.mod (34)

• go 1.26.2 → [Updates: 1.26.3]
• github.com/IBM/sarama v1.47.0 → [Updates: v1.48.2]
• github.com/ThreeDotsLabs/watermill v1.5.1 → [Updates: v1.5.2]
• github.com/authzed/authzed-go v1.8.0 → [Updates: v1.9.0]
• github.com/dgraph-io/badger/v4 v4.9.1
• github.com/dgraph-io/dgo/v2 v2.2.0
• github.com/go-redis/cache/v9 v9.0.0
• github.com/golang-migrate/migrate/v4 v4.19.1
• github.com/google/uuid v1.6.0
• github.com/google/wire v0.7.0
• github.com/jackc/pgx/v5 v5.9.2
• github.com/lib/pq v1.12.3
• github.com/mattn/go-sqlite3 v1.14.42 → [Updates: v1.14.44]
• github.com/prometheus/client_golang v1.23.2
• github.com/redis/rueidis v1.0.74 → [Updates: v1.0.75]
• github.com/segmentio/encoding v0.5.4
• github.com/spf13/viper v1.21.0
• github.com/stretchr/testify v1.11.1
• github.com/testcontainers/testcontainers-go v0.42.0
• github.com/testcontainers/testcontainers-go/modules/kafka v0.42.0
• github.com/testcontainers/testcontainers-go/modules/mongodb v0.42.0
• github.com/testcontainers/testcontainers-go/modules/mysql v0.42.0
• github.com/testcontainers/testcontainers-go/modules/postgres v0.42.0
• github.com/testcontainers/testcontainers-go/modules/redis v0.42.0
• go.mongodb.org/mongo-driver/v2 v2.5.1 → [Updates: v2.6.0]
• go.opentelemetry.io/otel v1.43.0
• go.opentelemetry.io/otel/metric v1.43.0
• go.opentelemetry.io/otel/sdk/metric v1.43.0
• go.opentelemetry.io/otel/trace v1.43.0
• go.uber.org/atomic v1.11.0
• go.uber.org/goleak v1.3.0
• google.golang.org/grpc v1.80.0 → [Updates: v1.81.1]
• google.golang.org/protobuf v1.36.11
• github.com/sqlc-dev/sqlc v1.30.0 → [Updates: v1.31.1]

boundaries/metadata/go.mod (18)

• go 1.26.2 → [Updates: 1.26.3]
• buf.build/gen/go/shortlink-org/shortlink-link-link/protocolbuffers/go v1.36.11-20251128130903-01e2641aede0.1@01e2641aede0
• github.com/IBM/sarama v1.47.0 → [Updates: v1.48.2]
• github.com/PuerkitoBio/goquery v1.12.0
• github.com/ThreeDotsLabs/watermill v1.5.1 → [Updates: v1.5.2]
• github.com/chromedp/chromedp v0.15.1
• github.com/google/wire v0.7.0
• github.com/minio/minio-go/v7 v7.0.100 → [Updates: v7.1.0]
• github.com/spf13/viper v1.21.0
• github.com/stretchr/testify v1.11.1
• github.com/testcontainers/testcontainers-go v0.42.0
• github.com/testcontainers/testcontainers-go/modules/kafka v0.42.0
• go.opentelemetry.io/otel v1.43.0
• go.opentelemetry.io/otel/metric v1.43.0
• go.opentelemetry.io/otel/sdk/metric v1.43.0
• go.opentelemetry.io/otel/trace v1.43.0
• google.golang.org/grpc v1.80.0 → [Updates: v1.81.1]
• google.golang.org/protobuf v1.36.11

boundaries/supplies/knative/kafka-to-elasticsearch/go.mod (4)

• go 1.26.2 → [Updates: 1.26.3]
• github.com/cloudevents/sdk-go/observability/opencensus/v2 v2.16.2
• github.com/cloudevents/sdk-go/v2 v2.16.2
• github.com/elastic/go-elasticsearch/v9 v9.3.2 → [Updates: v9.4.1]

docs/ADR/decisions/proof/ADR-0007/go.mod (4)

• go 1.26.2 → [Updates: 1.26.3]
• github.com/google/uuid v1.6.0
• github.com/segmentio/encoding v0.5.4
• github.com/stretchr/testify v1.11.1

poc/xa/dtm-example/go.mod (4)

• go 1.26.2 → [Updates: 1.26.3]
• github.com/dtm-labs/dtmcli v1.14.2
• github.com/go-chi/chi/v5 v5.2.5
• github.com/go-chi/render v1.0.3

helm-values (5)

boundaries/bff/ops/bff/values.yaml

boundaries/link/ops/link/values.yaml

boundaries/metadata/ops/metadata/values.yaml

boundaries/proxy/ops/proxy/values.yaml

boundaries/ui/ops/ui/values.yaml

helmv3 (6)

boundaries/bff/ops/bff/Chart.yaml (1)

• shortlink-template 0.12.6

boundaries/common/ops/common/Chart.yaml (2)

• shortlink-template 0.12.6
• redis 25.3.11 → [Updates: 25.5.3]

boundaries/link/ops/link/Chart.yaml (1)

• shortlink-template 0.12.6

boundaries/metadata/ops/metadata/Chart.yaml (1)

• shortlink-template 0.12.6

boundaries/proxy/ops/proxy/Chart.yaml (1)

• shortlink-template 0.12.6

boundaries/ui/ops/ui/Chart.yaml (1)

• shortlink-template 0.12.6

npm (13)

boundaries/chrome-extension/package.json (13)

• @tailwindcss/cli ^4.2.2 → [Updates: ^4.3.0]
• @tailwindcss/postcss ^4.2.2 → [Updates: ^4.3.0]
• react ^19.2.5 → [Updates: ^19.2.6]
• react-dom ^19.2.5 → [Updates: ^19.2.6]
• @types/react ^19.2.14
• @types/react-dom ^19.2.3
• @vitejs/plugin-react ^6.0.1 → [Updates: ^6.0.2]
• autoprefixer ^10.5.0
• postcss ^8.5.10 → [Updates: ^8.5.14]
• tailwindcss 4.2.2 → [Updates: 4.3.0]
• typescript ^6.0.3
• wxt ^0.20.24 → [Updates: ^0.20.26]
• pnpm 10.33.0 → [Updates: 10.33.4, 11.1.2]

boundaries/chrome-extension/pnpm-workspace.yaml

boundaries/common/script/kube-secret-fetcher/package.json (1)

• yargs ^18.0.0

boundaries/mobile/apps/shortlink/package.json (13)

• @testing-library/jest-native *
• @testing-library/react-native *
• metro-config *
• react-native *
• expo *
• react-native-svg *
• react-native-web *
• @nx/expo *
• @expo/metro-config *
• react-native-svg-transformer *
• react *
• @react-navigation/native *
• @react-navigation/native-stack *

boundaries/mobile/libs/ui/package.json

boundaries/mobile/package.json (56)

• @expo/metro-config ~55.0.16 → [Updates: ~55.0.21]
• @react-navigation/native-stack ^7.14.11 → [Updates: ^7.15.1]
• expo ^55.0.17 → [Updates: ^55.0.24]
• expo-insights ^55.0.16 → [Updates: ^55.0.17]
• expo-splash-screen ^55.0.18 → [Updates: ^55.0.21]
• expo-status-bar ^55.0.5 → [Updates: ^55.0.6]
• react 19.2.5 → [Updates: 19.2.6]
• react-dom 19.2.5 → [Updates: 19.2.6]
• react-native ^0.83.2 → [Updates: ^0.85.3]
• react-native-paper ^5.15.1 → [Updates: ^5.15.2]
• react-native-safe-area-context ^5.7.0
• react-native-screens ^4.24.0 → [Updates: ^4.25.0]
• react-native-svg ^15.15.4 → [Updates: ^15.15.5]
• react-native-svg-transformer ^1.5.3
• react-native-web ~0.21.2
• tslib ^2.8.1
• @config-plugins/detox ~11.0.0
• @expo/cli ~55.0.24 → [Updates: ~55.0.30]
• @nx/detox 22.1.3 → [Updates: 22.7.2]
• @nx/eslint-plugin 22.1.3 → [Updates: 22.7.2]
• @nx/expo ^22.5.3 → [Updates: ^22.7.2]
• @nx/jest 22.1.3 → [Updates: 22.7.2]
• @nx/js 22.1.3 → [Updates: 22.7.2]
• @nx/linter 19.8.4
• @nx/workspace 22.1.3 → [Updates: 22.7.2]
• @testing-library/jest-dom ^6.9.1
• @testing-library/jest-native 5.4.3
• @testing-library/react-native ^13.3.3
• @types/jest ^30.0.0
• @types/node ^24.12.2 → [Updates: ^24.12.4]
• @types/react ~19.2.14
• @typescript-eslint/eslint-plugin ^8.56.1 → [Updates: ^8.59.3]
• @typescript-eslint/parser ^8.56.1 → [Updates: ^8.59.3]
• babel-jest ^30.2.0 → [Updates: ^30.4.1]
• babel-preset-expo ~55.0.17 → [Updates: ~55.0.21]
• detox ^20.47.0 → [Updates: ^20.50.4]
• eas-cli ^16.32.0 → [Updates: ^18.13.0]
• eslint ^10.2.1 → [Updates: ^10.4.0]
• eslint-config-prettier ^10.1.8
• eslint-plugin-import ^2.32.0
• eslint-plugin-jsx-a11y 6.10.2
• eslint-plugin-react 7.37.5
• eslint-plugin-react-hooks 7.1.1
• jest ^30.2.0 → [Updates: ^30.4.2]
• jest-circus ^30.2.0 → [Updates: ^30.4.2]
• jest-environment-jsdom ^30.2.0 → [Updates: ^30.4.1]
• jest-expo ~55.0.16 → [Updates: ~55.0.17]
• metro 0.83.3 → [Updates: 0.84.4]
• metro-resolver ^0.83.4 → [Updates: ^0.84.4]
• nx 22.1.3 → [Updates: 22.7.2]
• prettier ^3.8.3
• react-test-renderer 19.2.5 → [Updates: 19.2.6]
• ts-jest ^29.4.9
• ts-node 10.9.2
• typescript ~6.0.3
• pnpm 10.33.0+sha512.10568bb4a6afb58c9eb3630da90cc9516417abebd3fabbe6739f0ae795728da1491e9db5a544c76ad8eb7570f5c4bb3d6c637b2cb41bfdcdb47fa823c8649319 → [Updates: 10.33.4, 11.1.2]

boundaries/proxy/package.json (67)

• @buf/shortlink-org_shortlink-link-link.bufbuild_es 2.11.0-20251128130903-01e2641aede0.1
• @bufbuild/protobuf 2.11.0 → [Updates: 2.12.0]
• @connectrpc/connect 2.1.1
• @connectrpc/connect-node 2.1.1
• @fastify/formbody ^8.0.2
• @fastify/helmet ^13.0.2
• @fastify/swagger ^9.7.0
• @fastify/swagger-ui ^5.2.5 → [Updates: ^5.2.6]
• @godaddy/terminus ^4.12.1
• @grpc/grpc-js 1.14.3
• @opentelemetry/api 1.9.1
• @opentelemetry/auto-instrumentations-node 0.73.0 → [Updates: 0.76.0]
• @opentelemetry/exporter-logs-otlp-grpc 0.215.0 → [Updates: 0.218.0]
• @opentelemetry/exporter-metrics-otlp-grpc 0.215.0 → [Updates: 0.218.0]
• @opentelemetry/exporter-prometheus 0.215.0 → [Updates: 0.218.0]
• @opentelemetry/exporter-trace-otlp-grpc 0.215.0 → [Updates: 0.218.0]
• @opentelemetry/instrumentation 0.215.0 → [Updates: 0.218.0]
• @opentelemetry/instrumentation-kafkajs 0.24.0 → [Updates: 0.27.0]
• @opentelemetry/instrumentation-runtime-node 0.28.0 → [Updates: 0.31.0]
• @opentelemetry/instrumentation-winston 0.59.0 → [Updates: 0.62.0]
• @opentelemetry/resources 2.7.0 → [Updates: 2.7.1]
• @opentelemetry/sdk-logs 0.215.0 → [Updates: 0.218.0]
• @opentelemetry/sdk-metrics 2.7.0 → [Updates: 2.7.1]
• @opentelemetry/sdk-node 0.215.0 → [Updates: 0.218.0]
• @opentelemetry/sdk-trace-base 2.7.0 → [Updates: 2.7.1]
• @opentelemetry/sdk-trace-node 2.7.0 → [Updates: 2.7.1]
• @opentelemetry/semantic-conventions 1.40.0 → [Updates: 1.41.1]
• @opentelemetry/winston-transport 0.25.0 → [Updates: 0.28.0]
• @ory/kratos-client 26.2.0
• @pyroscope/nodejs 0.4.11
• amqplib ^1.0.3 → [Updates: ^1.2.0, ^2.0.1]
• awilix ^13.0.3
• compression 1.8.1
• dotenv ^17.4.2
• fastify ^5.8.4 → [Updates: ^5.8.4]
• ioredis ^5.10.1
• kafkajs 2.2.4
• neverthrow 8.2.0
• swagger-jsdoc 6.2.8
• winston 3.19.0
• zod 4.3.6 → [Updates: 4.4.3]
• zod-validation-error 5.0.0
• @eslint/js 10.0.1
• @prisma/client 7.7.0 → [Updates: 7.8.0]
• @testcontainers/rabbitmq ^11.14.0
• @testcontainers/redis ^11.14.0
• @types/amqplib 0.10.8
• @types/compression 1.8.1
• @types/node ^25.6.0 → [Updates: ^25.8.0]
• @types/swagger-jsdoc 6.0.4
• @typescript-eslint/eslint-plugin 8.58.0 → [Updates: 8.59.3]
• @typescript-eslint/parser 8.58.0 → [Updates: 8.59.3]
• @vitest/coverage-v8 ^4.1.4 → [Updates: ^4.1.6]
• eslint 10.2.1 → [Updates: 10.4.0]
• eslint-import-resolver-typescript 4.4.4
• eslint-plugin-boundaries 6.0.2
• eslint-plugin-import 2.32.0
• eslint-plugin-n 17.24.0 → [Updates: 18.0.1]
• globals 17.5.0 → [Updates: 17.6.0]
• prisma 7.7.0 → [Updates: 7.8.0]
• tsx ^4.21.0 → [Updates: ^4.22.0]
• typescript ^6.0.3
• typescript-eslint 8.58.0 → [Updates: 8.59.3]
• vite-tsconfig-paths ^6.1.1
• vitest ^4.1.4 → [Updates: ^4.1.6]
• node >=25.9.0
• pnpm 10.33.0+sha512.10568bb4a6afb58c9eb3630da90cc9516417abebd3fabbe6739f0ae795728da1491e9db5a544c76ad8eb7570f5c4bb3d6c637b2cb41bfdcdb47fa823c8649319 → [Updates: 10.33.4, 11.1.2]

boundaries/proxy/pnpm-workspace.yaml

boundaries/ui/package.json (78)

• @emotion/react ^11.14.0
• @emotion/styled ^11.14.1
• @headlessui/react ^2.2.10
• @heroicons/react 2.2.0
• @js-temporal/polyfill ^0.5.1
• @mui/icons-material ^9.0.0 → [Updates: ^9.0.1]
• @mui/material ^9.0.0 → [Updates: ^9.0.1]
• @mui/material-nextjs ^9.0.0 → [Updates: ^9.0.1]
• @mui/x-date-pickers ^9.0.2 → [Updates: ^9.2.0]
• @next/env ^16.2.4 → [Updates: ^16.2.6]
• @ory/client ^1.22.35 → [Updates: ^1.22.37]
• @ory/integrations ^1.3.1
• @reduxjs/toolkit ^2.11.2 → [Updates: ^2.12.0]
• @sentry/nextjs ^10.47.0 → [Updates: ^10.53.1]
• @shortlink-org/eslint-plugin-shortlink 0.20250809.193608
• @shortlink-org/ui-kit ^0.20260407.113159
• @tailwindcss/aspect-ratio ^0.4.2
• @tailwindcss/container-queries ^0.1.1
• @tailwindcss/forms ^0.5.11
• @tailwindcss/typography ^0.5.19
• @tanstack/react-query ^5.99.0 → [Updates: ^5.100.10]
• axios ^1.15.2 → [Updates: ^1.16.1]
• babel-plugin-react-compiler ^1.0.0
• clsx ^2.1.1
• cookie-parser ^1.4.7
• date-fns ^4.1.0
• express 5.2.1
• firebase ^12.11.0 → [Updates: ^12.13.0]
• framer-motion ^12.38.0 → [Updates: ^12.38.0]
• js-cookie ^3.0.5 → [Updates: ^3.0.6]
• jspdf-autotable ^5.0.7
• localforage 1.10.0
• lodash ^4.18.1
• next ^16.2.4 → [Updates: ^16.2.6]
• next-themes ^0.4.6
• prop-types ^15.8.1
• react 19.2.5 → [Updates: 19.2.6]
• react-copy-to-clipboard ^5.1.1
• react-dom 19.2.5 → [Updates: 19.2.6]
• react-redux ^9.2.0 → [Updates: ^9.3.0]
• react-wrap-balancer ^1.1.1
• redux ^5.0.1
• redux-saga ^1.4.2 → [Updates: ^1.4.3]
• schema-dts ^2.0.0
• sharp ^0.34.5
• shortlink-ui-kit ^1.4.5
• sonner ^2.0.7
• uuid ^14.0.0
• @mdx-js/loader 3.1.1
• @playwright/test ^1.59.1 → [Updates: ^1.60.0]
• @redux-devtools/extension ^4.0.0
• @svgr/webpack ^8.1.0
• @tailwindcss/postcss ^4.2.2 → [Updates: ^4.3.0]
• @testing-library/jest-dom ^6.9.1
• @testing-library/react ^16.3.2
• @testing-library/user-event ^14.6.1
• @types/express ^5.0.6
• @types/lodash ^4.17.24
• @types/material-ui ^0.21.18
• @types/node 25.6.0 → [Updates: 25.8.0]
• @types/react 19.2.14
• @types/react-copy-to-clipboard ^5.0.7
• @vitejs/plugin-react ^6.0.1 → [Updates: ^6.0.2]
• allure-playwright ^3.7.1 → [Updates: ^3.8.0]
• autoprefixer ^10.5.0
• eslint ^10.2.1 → [Updates: ^10.4.0]
• eslint-config-prettier ^10.1.8
• eslint-plugin-prettier ^5.5.5
• jsdom ^29.0.2 → [Updates: ^29.1.1]
• next-sitemap ^4.2.3
• patch-package ^8.0.1
• postcss ^8.5.10 → [Updates: ^8.5.14]
• prettier ^3.8.3
• tailwindcss ^4.2.2 → [Updates: ^4.3.0]
• ts-node ^10.9.2
• typescript ^6.0.3
• vitest ^4.1.4 → [Updates: ^4.1.6]
• pnpm 10.33.0+sha512.10568bb4a6afb58c9eb3630da90cc9516417abebd3fabbe6739f0ae795728da1491e9db5a544c76ad8eb7570f5c4bb3d6c637b2cb41bfdcdb47fa823c8649319 → [Updates: 10.33.4, 11.1.2]

boundaries/ui/pnpm-workspace.yaml

boundaries/ui/src/components/Footer/package.json

boundaries/ui/src/components/Header/package.json

boundaries/ui/src/components/Testimonials/package.json

pip_requirements (1)

poc/ml-diff/ml/requirements.txt (7)

• asgiref ==3.11.1
• fonttools ==4.61.1 → [Updates: ==4.63.0]
• matplotlib ==3.10.8 → [Updates: ==3.10.9]
• numpy ==2.3.5 → [Updates: ==2.4.5]
• pillow ==12.2.0
• scikit-learn ==1.8.0
• setuptools ==82.0.1

poetry (1)

poc/ml-diff/ml/pyproject.toml (4)

• asgiref ==3.11.1
• numpy >=2.3.5 → [Updates: >=2.4.5]
• pillow >=12.2.0
• fonttools >=4.61.1 → [Updates: >=4.63.0]

sbt (4)

poc/gatling/build.sbt (1)

• scala 3.8.3

poc/gatling/project/build.properties (1)

• sbt/sbt 1.12.9 → [Updates: 1.12.11]

poc/gatling/project/Dependencies.scala

poc/gatling/project/plugins.sbt (1)

• io.gatling:gatling-sbt 4.18.1

scalafmt (1)

poc/gatling/.scalafmt.conf (1)

• scalafmt 3.11.0 → [Updates: 3.11.1]

terraform (2)

ops/terraform/main.tf

ops/terraform/versions.tf (1)

• hashicorp/terraform >= 1.14.8 → [Updates: >= 1.15.3]

---

• Check this box to trigger a request for Renovate to run again on this repository