Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
npm	@types/uuid
npm	framer-motion

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency @eslint/compat to ^1.4.1
• chore(deps): update dependency @eslint/eslintrc to ^3.3.3
• chore(deps): update dependency @tailwindcss/forms to ^0.5.11
• chore(deps): update dependency autoprefixer to ^10.4.23
• chore(deps): update dependency node to v20.19.6
• chore(deps): update dependency nodemon to ^3.1.11
• chore(deps): update dependency only-allow to ^1.2.2
• chore(deps): update dependency tailwindcss to ^3.4.19
• chore(deps): update dependency ts-jest to ^29.4.6
• chore(deps): update ghcr.io/interledger/rafiki-auth docker tag to v1.2.1
• chore(deps): update ghcr.io/tigerbeetle/tigerbeetle docker tag to v0.16.67
• fix(deps): update dependency @tanstack/react-query to ^5.90.16
• fix(deps): update dependency ioredis to ^5.8.2
• fix(deps): update dependency react-router-dom to ^6.30.2
• fix(deps): update radix-ui-primitives monorepo (@radix-ui/react-dialog, @radix-ui/react-dropdown-menu, @radix-ui/react-label, @radix-ui/react-popover, @radix-ui/react-slot, @radix-ui/react-tabs, @radix-ui/react-toast, @radix-ui/react-tooltip)
• fix(deps): update socket.io packages to ^4.8.3 (socket.io, socket.io-client)
• chore(deps): update dependency globals to ^16.5.0
• chore(deps): update dependency prettier to ^3.7.4
• chore(deps): update dependency prettier-plugin-tailwindcss to ^0.7.2
• chore(deps): update eslint monorepo to ^9.39.2 (@eslint/js, eslint)
• chore(deps): update ghcr.io/interledger/rafiki-backend docker tag to v1.2.1
• chore(deps): update ghcr.io/interledger/rafiki-frontend docker tag to v1.2.1
• fix(deps): update dependency axios to ^1.13.2
• fix(deps): update dependency express to ^4.22.1 (express, @types/express)
• fix(deps): update dependency graphql to ^16.12.0
• fix(deps): update dependency ky to ^1.14.2
• fix(deps): update dependency react-hook-form to ^7.69.0
• fix(deps): update dependency valtio to ^2.3.0
• fix(deps): update dependency winston to ^3.19.0
• chore(deps): update actions/cache action to v5
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/labeler action to v6
• chore(deps): update actions/setup-node action to v6
• chore(deps): update dependency @eslint/compat to v2
• chore(deps): update dependency @faker-js/faker to v10
• chore(deps): update dependency @types/uuid to v11
• chore(deps): update dependency @vitejs/plugin-react-swc to v4
• chore(deps): update dependency cross-env to v10
• chore(deps): update dependency globals to v17
• chore(deps): update dependency node to v24
• chore(deps): update dependency testcontainers to v11
• chore(deps): update ghcr.io/interledger/rafiki-auth docker tag to v2
• chore(deps): update ghcr.io/interledger/rafiki-backend docker tag to v2
• chore(deps): update ghcr.io/interledger/rafiki-frontend docker tag to v2
• chore(deps): update graphqlcodegenerator monorepo (major) (@graphql-codegen/cli, @graphql-codegen/typescript, @graphql-codegen/typescript-operations)
• chore(deps): update jest monorepo to v30 (major) (@types/jest, jest)
• chore(deps): update mikepenz/release-changelog-builder-action action to v6
• chore(deps): update oryd/kratos docker tag to v25
• chore(deps): update pnpm to v10
• chore(deps): update postgres docker tag to v18
• chore(deps): update redis docker tag to v8
• chore(deps): update stefanzweifel/git-auto-commit-action action to v7
• fix(deps): update dependency @hookform/resolvers to v5
• fix(deps): update dependency express-rate-limit to v8
• fix(deps): update dependency framer-motion to v12
• fix(deps): update dependency helmet to v8
• fix(deps): update dependency json-canonicalize to v2
• fix(deps): update dependency rate-limiter-flexible to v9
• fix(deps): update dependency react-router-dom to v7
• fix(deps): update dependency stripe to v20
• fix(deps): update dependency tailwind-merge to v3
• fix(deps): update dependency uuid to v13
• fix(deps): update dependency zod to v4
• fix(deps): update react monorepo (major) (@types/react, @types/react-dom, eslint-plugin-react-hooks, react, react-dom)
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• fix(deps): update dependency sharp to ^0.34.5

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• fix(deps): replace dependency framer-motion with motion ^11.18.2

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency vite to v5.4.21 [security]
• fix(deps): update dependency next to v14.2.35 [security]
• chore(deps): update dependency @types/react to v18.3.27
• chore(deps): update nextjs monorepo to ^13.5.11 (@next/bundle-analyzer, @next/eslint-plugin-next)
• chore(deps): update pnpm to v9.15.9
• chore(deps): update amannn/action-semantic-pull-request action to v6
• chore(deps): update dependency tailwindcss to v4
• chore(deps): update nextjs monorepo to v16 (major) (@next/bundle-analyzer, @next/eslint-plugin-next)
• chore(deps): update typescript-eslint monorepo to v8 (major) (@typescript-eslint/eslint-plugin, @typescript-eslint/parser)
• fix(deps): update dependency express to v5 (express, @types/express)
• fix(deps): update dependency graphql-request to v7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (2)

docker/dev/docker-compose.yml (9)

• postgres 15 → [Updates: 18]
• ghcr.io/interledger/rafiki-auth v2.2.0-beta
• ghcr.io/interledger/rafiki-backend v2.2.0-beta
• ghcr.io/interledger/rafiki-frontend v2.2.0-beta
• ghcr.io/interledger/rafiki-card-service v2.2.0-beta
• ghcr.io/interledger/rafiki-point-of-sale v2.2.0-beta
• oryd/kratos v1.3.1 → [Updates: v25.4.0]
• ghcr.io/tigerbeetle/tigerbeetle 0.16.60 → [Updates: 0.16.67]
• redis 7 → [Updates: 8]

docker/prod/docker-compose.yml (7)

• postgres 15 → [Updates: 18]
• ghcr.io/interledger/rafiki-auth v1.2.0-beta → [Updates: v1.2.1-beta, v2.2.0-beta]
• ghcr.io/interledger/rafiki-backend v1.1.2-beta → [Updates: v1.2.1-beta, v2.2.0-beta]
• ghcr.io/interledger/rafiki-frontend v1.1.2-beta → [Updates: v1.2.1-beta, v2.2.0-beta]
• ghcr.io/tigerbeetle/tigerbeetle 0.16.60 → [Updates: 0.16.67]
• redis 7 → [Updates: 8]
• oryd/kratos v1.3.1 → [Updates: v25.4.0]

dockerfile (7)

packages/boutique/backend/Dockerfile.dev (1)

• node iron-slim

packages/boutique/backend/Dockerfile.prod (2)

• node 20-alpine
• node 20-alpine

packages/boutique/frontend/Dockerfile.prod (1)

• node 20-alpine

packages/wallet/backend/Dockerfile.dev (1)

• node iron-slim

packages/wallet/backend/Dockerfile.prod (2)

• node 20-alpine
• node 20-alpine

packages/wallet/frontend/Dockerfile.dev (1)

• node iron-slim

packages/wallet/frontend/Dockerfile.prod (2)

• node 20-alpine
• node 20-alpine

github-actions (6)

.github/workflows/build-publish.yaml (13)

• actions/checkout v5 → [Updates: v6]
• actions/setup-node v4 → [Updates: v6]
• actions/checkout v5 → [Updates: v6]
• docker/setup-qemu-action v3
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/build-push-action v6
• actions/checkout v5 → [Updates: v6]
• requarks/changelog-action v1
• ncipollo/release-action v1.20.0
• stefanzweifel/git-auto-commit-action v5 → [Updates: v7]
• pnpm v9.1.4 → [Updates: 9.15.9, 10.27.0]
• node 20.19.5 → [Updates: 20.19.6, 24.12.0]

.github/workflows/ci.yml (7)

• actions/checkout v5 → [Updates: v6]
• actions/checkout v5 → [Updates: v6]
• actions/checkout v5 → [Updates: v6]
• actions/checkout v5 → [Updates: v6]
• actions/checkout v5 → [Updates: v6]
• actions/checkout v5 → [Updates: v6]
• actions/checkout v5 → [Updates: v6]

.github/workflows/deploy.yml (3)

• actions/checkout v5 → [Updates: v6]
• mikepenz/release-changelog-builder-action v5.4.1 → [Updates: v6.0.1]
• softprops/action-gh-release v2

.github/workflows/pr_labeler.yml (1)

• actions/labeler v4 → [Updates: v6]

.github/workflows/pr_title_check.yml (1)

• amannn/action-semantic-pull-request v5 → [Updates: v6]

.github/workflows/setup/action.yml (2)

• actions/setup-node v4 → [Updates: v6]
• actions/cache v4 → [Updates: v5]

npm (9)

package.json (20)

• @eslint/compat ^1.4.0 → [Updates: ^1.4.1, ^2.0.0]
• @eslint/eslintrc ^3.3.1 → [Updates: ^3.3.3]
• @eslint/js ^9.32.0 → [Updates: ^9.39.2]
• @typescript-eslint/eslint-plugin ^7.18.0 → [Updates: ^8.51.0]
• @typescript-eslint/parser ^7.18.0 → [Updates: ^8.51.0]
• concurrently ^9.2.1
• cross-env ^7.0.3 → [Updates: ^10.1.0]
• eslint ^9.32.0 → [Updates: ^9.39.2]
• eslint-config-prettier ^10.1.8
• eslint-plugin-react ^7.37.5
• eslint-plugin-react-hooks ^5.2.0 → [Updates: ^7.0.1]
• globals ^16.4.0 → [Updates: ^16.5.0, ^17.0.0]
• nodemon ^3.1.10 → [Updates: ^3.1.11]
• only-allow ^1.2.1 → [Updates: ^1.2.2]
• prettier ^3.6.2 → [Updates: ^3.7.4]
• prettier-plugin-tailwindcss ^0.6.14 → [Updates: ^0.7.2]
• typescript ^5.9.3
• pnpm ^9.1.4 → [Updates: ^9.15.9, ^10.27.0]
• node ^20.12.1
• pnpm 9.1.4 → [Updates: 9.15.9, 10.27.0]

packages/boutique/backend/package.json (21)

• @google-cloud/logging-winston ^6.0.1
• @interledger/open-payments ^7.1.3
• awilix ^12.0.5
• axios ^1.12.2 → [Updates: ^1.13.2]
• cors ^2.8.5
• express ^4.21.2 → [Updates: ^4.22.1, ^5.2.1]
• helmet ^7.2.0 → [Updates: ^8.1.0]
• knex ^3.1.0
• objection ^3.1.5
• pg ^8.16.3
• winston ^3.18.3 → [Updates: ^3.19.0]
• zod ^3.25.76 → [Updates: ^4.3.4]
• @types/cors ^2.8.19
• @types/express ^4.17.23 → [Updates: ^4.17.25, ^5.0.6]
• @types/jest ^29.5.14 → [Updates: ^30.0.0]
• @types/node ^20.17.30
• jest ^29.7.0 → [Updates: ^30.2.0]
• node-mocks-http ^1.17.2
• ts-jest ^29.4.4 → [Updates: ^29.4.6]
• tsc-alias ^1.8.16
• typescript ^5.9.3

packages/boutique/frontend/package.json (30)

• @hookform/resolvers ^3.10.0 → [Updates: ^5.2.2]
• @radix-ui/react-dialog ^1.1.14 → [Updates: ^1.1.15]
• @radix-ui/react-dropdown-menu ^2.1.15 → [Updates: ^2.1.16]
• @radix-ui/react-label ^2.1.7 → [Updates: ^2.1.8]
• @radix-ui/react-popover ^1.1.14 → [Updates: ^1.1.15]
• @radix-ui/react-slot ^1.2.3 → [Updates: ^1.2.4]
• @radix-ui/react-tabs ^1.1.12 → [Updates: ^1.1.13]
• @radix-ui/react-toast ^1.2.14 → [Updates: ^1.2.15]
• @tanstack/react-query ^5.90.2 → [Updates: ^5.90.16]
• class-variance-authority ^0.7.1
• framer-motion ^11.18.2 → [Updates: ^12.23.26, ^11.18.2]
• react ^18.3.1 → [Updates: ^19.2.3]
• react-dom ^18.3.1 → [Updates: ^19.2.3]
• react-hook-form ^7.64.0 → [Updates: ^7.69.0]
• react-router-dom ^6.30.1 → [Updates: ^6.30.2, ^7.11.0]
• remix-params-helper ^0.5.1
• tailwind-merge ^2.6.0 → [Updates: ^3.4.0]
• tailwindcss-animate ^1.0.7
• valtio ^2.1.8 → [Updates: ^2.3.0]
• zod ^3.25.76 → [Updates: ^4.3.4]
• @tailwindcss/forms ^0.5.10 → [Updates: ^0.5.11]
• @tailwindcss/typography ^0.5.19
• @types/react 18.3.25 → [Updates: 18.3.27, 19.2.7]
• @types/react-dom 18.3.7 → [Updates: 19.2.3]
• @vitejs/plugin-react-swc ^3.11.0 → [Updates: ^4.2.2]
• autoprefixer ^10.4.21 → [Updates: ^10.4.23]
• postcss ^8.5.6
• tailwindcss ^3.4.18 → [Updates: ^3.4.19, ^4.1.18]
• typescript ^5.9.3
• vite ^5.4.20 → [Updates: ^5.4.20]

packages/boutique/shared/package.json (2)

• zod ^3.25.76 → [Updates: ^4.3.4]
• @types/node ^20.17.30

packages/shared/backend/package.json (11)

• awilix ^12.0.5
• express ^4.21.2 → [Updates: ^4.22.1, ^5.2.1]
• objection ^3.1.5
• knex ^3.1.0
• winston ^3.18.3 → [Updates: ^3.19.0]
• axios ^1.12.2 → [Updates: ^1.13.2]
• @types/node ^20.17.30
• tsc-alias ^1.8.16
• typescript ^5.9.3
• @types/express ^4.17.23 → [Updates: ^4.17.25, ^5.0.6]
• ioredis ^5.8.0 → [Updates: ^5.8.2]

packages/wallet/backend/package.json (46)

• @google-cloud/logging-winston ^6.0.1
• @interledger/tlv-kit ^1.0.3
• @sendgrid/mail ^8.1.6
• awilix ^12.0.5
• axios ^1.12.2 → [Updates: ^1.13.2]
• cors ^2.8.5
• crypto-js ^4.2.0
• date-fns ^4.1.0
• disposable-email-domains ^1.0.62
• express ^4.21.2 → [Updates: ^4.22.1, ^5.2.1]
• express-rate-limit ^7.5.1 → [Updates: ^8.2.1]
• graphql ^16.11.0 → [Updates: ^16.12.0]
• graphql-request ^6.1.0 → [Updates: ^7.4.0]
• hash-wasm ^4.12.0
• helmet ^7.2.0 → [Updates: ^8.1.0]
• ioredis ^5.8.0 → [Updates: ^5.8.2]
• iron-session ^8.0.4
• json-canonicalize ^1.2.0 → [Updates: ^2.0.0]
• knex ^3.1.0
• moment ^2.30.1
• node-cache ^5.1.2
• objection ^3.1.5
• pg ^8.16.3
• randexp ^0.5.3
• rate-limiter-flexible ^5.0.5 → [Updates: ^9.0.1]
• socket.io ^4.8.1 → [Updates: ^4.8.3]
• stripe 17.7.0 → [Updates: 20.1.0]
• uuid ^10.0.0 → [Updates: ^13.0.0]
• winston ^3.18.3 → [Updates: ^3.19.0]
• zod ^3.25.76 → [Updates: ^4.3.4]
• @faker-js/faker ^9.9.0 → [Updates: ^10.1.0]
• @graphql-codegen/cli ^5.0.7 → [Updates: ^6.1.0]
• @graphql-codegen/typescript ^4.1.6 → [Updates: ^5.0.7]
• @graphql-codegen/typescript-operations ^4.6.1 → [Updates: ^5.0.7]
• @types/cors ^2.8.19
• @types/crypto-js ^4.2.2
• @types/express ^4.17.23 → [Updates: ^4.17.25, ^5.0.6]
• @types/jest ^29.5.14 → [Updates: ^30.0.0]
• @types/node ^20.17.30
• @types/uuid ^10.0.0 → [Updates: ^11.0.0]
• jest ^29.7.0 → [Updates: ^30.2.0]
• node-mocks-http ^1.17.2
• testcontainers ^10.28.0 → [Updates: ^11.11.0]
• ts-jest ^29.4.4 → [Updates: ^29.4.6]
• tsc-alias ^1.8.16
• typescript ^5.9.3

packages/wallet/frontend/package.json (34)

• @headlessui/react ^2.2.9
• @hookform/resolvers ^3.10.0 → [Updates: ^5.2.2]
• @radix-ui/react-toast ^1.2.14 → [Updates: ^1.2.15]
• @radix-ui/react-tooltip ^1.2.7 → [Updates: ^1.2.8]
• @types/node-rsa ^1.1.4
• class-variance-authority ^0.7.1
• ky ^1.11.0 → [Updates: ^1.14.2]
• next 14.2.32 → [Updates: 14.2.35]
• next-themes ^0.4.6
• node-rsa ^1.1.1
• nprogress ^0.2.0
• react 18.3.1 → [Updates: 19.2.3]
• react-dom 18.3.1 → [Updates: 19.2.3]
• react-hook-form ^7.64.0 → [Updates: ^7.69.0]
• react-joyride ^2.9.3
• react-select ^5.10.2
• sharp ^0.34.4 → [Updates: ^0.34.5]
• socket.io-client ^4.8.1 → [Updates: ^4.8.3]
• tailwind-merge ^2.6.0 → [Updates: ^3.4.0]
• tailwindcss-animate ^1.0.7
• valtio ^2.1.8 → [Updates: ^2.3.0]
• zod ^3.25.76 → [Updates: ^4.3.4]
• next-qrcode ^2.5.1
• @next/bundle-analyzer ^13.4.12 → [Updates: ^13.5.11, ^16.1.1]
• @next/eslint-plugin-next ^13.4.12 → [Updates: ^13.5.11, ^16.1.1]
• @tailwindcss/forms ^0.5.10 → [Updates: ^0.5.11]
• @types/node ^20.17.30
• @types/nprogress ^0.2.3
• @types/react 18.3.25 → [Updates: 18.3.27, 19.2.7]
• @types/react-dom 18.3.7 → [Updates: 19.2.3]
• autoprefixer ^10.4.21 → [Updates: ^10.4.23]
• postcss ^8.5.6
• tailwindcss ^3.4.18 → [Updates: ^3.4.19, ^4.1.18]
• typescript ^5.9.3

packages/wallet/shared/package.json (2)

• zod ^3.25.76 → [Updates: ^4.3.4]
• @types/node ^20.17.30

pnpm-workspace.yaml

nvm (1)

.nvmrc

---

• Check this box to trigger a request for Renovate to run again on this repository