Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update vite-vitest-dependencies to v3.2.7 (@vitest/coverage-v8, @vitest/ui)
• chore(devdeps): update nx monorepo to v22.7.9 (@nx/express, @nx/vitest)
• chore(deps): update dependency vitest-canvas-mock to v1.2.0
• chore(deps): update effect-dependencies (@effect/cli, @effect/language-service, @effect/opentelemetry, @effect/platform, @effect/platform-node, @effect/vitest, effect)
• chore(devdeps): update dependency typescript-eslint to v8.69.0
• chore(devdeps): update typedoc-dependencies (typedoc, typedoc-github-theme)
• chore(devdeps): update typescript-eslint-dependencies to v8.69.0 (@typescript-eslint/eslint-plugin, @typescript-eslint/parser, @typescript-eslint/typescript-estree, @typescript-eslint/utils)
• chore(deps): update vite-vitest-dependencies (major) (@vitest/coverage-v8, @vitest/ui, vite)
• chore(devdeps): update codecov/codecov-action action to v7
• chore(devdeps): update dependency @changesets/changelog-github to v1
• chore(devdeps): update dependency @changesets/cli to v3
• chore(devdeps): update marocchino/sticky-pull-request-comment action to v3
• chore(devdeps): update pnpm/action-setup action to v6
• chore(devdeps): update slackapi/slack-github-action action to v4
• fix(deps): update dependency nanoid to v6
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(devdeps): update swc monorepo (@swc-node/register, @swc/core, @swc/helpers)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(devdeps): update changesets/action action to v2.1.2
• chore(deps): update ghcr.io/devcontainers/features/docker-in-docker docker tag to v4
• chore(deps): update mcr.microsoft.com/devcontainers/typescript-node docker tag to v26

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency brace-expansion@<2 to v2 [security]
• chore(deps): update dependency jose to v6.2.12
• chore(devdeps): update dependency @eslint/eslintrc to v3.3.7
• fix(deps): update opentelemetry-js monorepo (@opentelemetry/sdk-logs, @opentelemetry/sdk-metrics, @opentelemetry/sdk-trace-base, @opentelemetry/sdk-trace-node, @opentelemetry/sdk-trace-web)
• chore(deps): update dependency ts-patch to v4
• chore(deps): update dependency undici to v8
• chore(deps): update eslint monorepo to v10 (@eslint/js, eslint)
• chore(deps): update nx monorepo (major) (@nx/express, @nx/vitest, nrwl/nx-set-shas)
• chore(deps): update pnpm to v11
• chore(devdeps): update actions/setup-node action to v7
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency vitest to v4 [security]
• chore(devdeps): update dawidd6/action-download-artifact action to v6 [security]
• chore(deps): update dependency @forgerock/javascript-sdk to v4.9.1
• chore(deps): update dependency uuid to v14.0.2
• chore(devdeps): update dependency @changesets/cli to v2.31.1
• chore(devdeps): update dependency @evilmartians/lefthook to v2.1.12
• chore(devdeps): update dependency @types/estree to v1.0.9
• chore(devdeps): update dependency eslint-plugin-package-json to v0.91.2
• chore(devdeps): update dependency eslint-plugin-prettier to v5.5.6
• chore(devdeps): update dependency jsonc-eslint-parser to v2.4.2
• chore(devdeps): update dependency pkg-pr-new to ^0.0.88
• chore(devdeps): update eslint monorepo to v9.39.5 (@eslint/js, eslint)
• chore(deps): update dependency @microsoft/api-extractor to v7.59.0
• chore(deps): update dependency @reduxjs/toolkit to v2.12.0
• chore(deps): update dependency msw to v2.15.0
• chore(deps): update dependency superagent to v10.3.0
• chore(deps): update dependency tsx to v4.23.13
• chore(devdeps): update commitlint monorepo to v20.5.3 (@commitlint/cli, @commitlint/config-conventional, @commitlint/prompt)
• chore(devdeps): update dependency @changesets/changelog-github to ^0.7.0
• chore(devdeps): update dependency @types/node to v24.13.3
• chore(devdeps): update dependency cz-git to v1.14.0
• chore(devdeps): update dependency dotenv to v17.4.2
• chore(devdeps): update dependency eslint-plugin-import to v2.32.0
• chore(devdeps): update dependency eslint-plugin-playwright to v2.11.0
• chore(devdeps): update dependency fast-check to v4.9.0
• chore(devdeps): update dependency jiti to v2.7.0
• chore(devdeps): update dependency prettier to v3.9.6
• chore(devdeps): update dependency syncpack to v15.3.3
• chore(devdeps): update dependency verdaccio to v6.10.1
• chore(devdeps): update jamesives/github-pages-deploy-action action to v4.9.0
• chore(devdeps): update playwright monorepo to v1.62.1 (@playwright/test, playwright)
• chore(devdeps): update pnpm to v10.34.5
• chore(deps): update commitlint monorepo to v21 (@commitlint/cli, @commitlint/config-conventional, @commitlint/prompt)
• chore(deps): update dependency brace-expansion@>=2 <3 to v5
• chore(deps): update dependency brace-expansion@>=3 <4 to v5
• chore(deps): update dependency conventional-changelog-conventionalcommits to v10
• chore(deps): update dependency eslint-plugin-package-json to v1
• chore(deps): update dependency fast-uri to v4
• chore(deps): update dependency immer to v11
• chore(deps): update dependency jsdom to v30
• chore(deps): update dependency jsonc-eslint-parser to v3
• chore(deps): update dependency picomatch@<3 to v4

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (5)

• mcr.microsoft.com/devcontainers/typescript-node 24-bookworm → [Updates: 26-bookworm]
• ghcr.io/duduribeiro/devcontainer-features/neovim 1
• ghcr.io/devcontainers/features/github-cli 1
• ghcr.io/dhoeric/features/act 1
• ghcr.io/devcontainers/features/docker-in-docker 2 → [Updates: 4]

github-actions (7)

.github/actions/publish-beta/action.yml (1)

• JamesIves/github-pages-deploy-action v4.7.4 → [Updates: v4.9.0]

.github/actions/publish-release/action.yml (2)

• slackapi/slack-github-action v2.1.1 → [Updates: v4.0.0]
• JamesIves/github-pages-deploy-action v4.7.4 → [Updates: v4.9.0]

.github/actions/setup/action.yml (5)

• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v6 → [Updates: v7]
• actions/cache v6
• nrwl/nx-set-shas v4 → [Updates: v5]
• actions/upload-artifact v7

.github/workflows/ci-fork.yml (5)

• actions/checkout v7
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v6 → [Updates: v7]
• actions/cache v6
• nrwl/nx-set-shas v4 → [Updates: v5]

.github/workflows/ci.yml (11)

• actions/checkout v7
• codecov/codecov-action v5 → [Updates: v7]
• rajyan/preview-pages v1
• marocchino/sticky-pull-request-comment v2 → [Updates: v3.0.5]
• peter-evans/find-comment v4
• peter-evans/create-or-update-comment v5
• peter-evans/create-or-update-comment v5
• dawidd6/action-download-artifact v3 → [Updates: v6]
• actions/upload-artifact v7
• peter-evans/find-comment v4
• peter-evans/create-or-update-comment v5

.github/workflows/cleanup-docs-preview.yml (1)

• actions/checkout v7

.github/workflows/publish.yml (5)

• actions/checkout v7
• changesets/action v2.1.1 → [Updates: v2.1.2]
• actions/upload-artifact v7
• actions/checkout v7
• slackapi/slack-github-action v2.1.1 → [Updates: v4.0.0]

nodenv (1)

.node-version (1)

• node 24

npm (31)

e2e/am-mock-api/package.json (6)

• body-parser ^2.3.0
• cookie-parser ^1.4.7
• cors ^2.8.5
• express ^5.2.1
• superagent ^10.2.3 → [Updates: ^10.2.3]
• uuid ^14.0.0 → [Updates: ^14.0.0]

e2e/davinci-app/package.json

e2e/davinci-suites/package.json

e2e/device-client-app/package.json

e2e/journey-app/package.json

e2e/journey-suites/package.json

e2e/mock-api-v2/package.json (6)

• @opentelemetry/sdk-logs 0.207.0 → [Updates: 0.222.0]
• @opentelemetry/sdk-metrics 2.2.0 → [Updates: 2.11.0]
• @opentelemetry/sdk-trace-base 2.2.0 → [Updates: 2.11.0]
• @opentelemetry/sdk-trace-node 2.2.0 → [Updates: 2.11.0]
• @opentelemetry/sdk-trace-web 2.2.0 → [Updates: 2.11.0]
• nanoid ^5.1.16 → [Updates: ^6.0.0]

e2e/oidc-app/package.json

e2e/oidc-suites/package.json

e2e/recognize-app/package.json

package.json (67)

• @changesets/changelog-github ^0.6.0 → [Updates: ^0.7.0, ^1.0.0]
• @changesets/cli ^2.27.9 → [Updates: ^2.27.9, ^3.0.0]
• @commitlint/cli ^20.0.0 → [Updates: ^20.0.0, ^21.0.0]
• @commitlint/config-conventional ^20.0.0 → [Updates: ^20.0.0, ^21.0.0]
• @commitlint/prompt ^20.0.0 → [Updates: ^20.0.0, ^21.0.0]
• @eslint/eslintrc ^3.0.0 → [Updates: ^3.0.0]
• @eslint/js ~9.39.0 → [Updates: ~9.39.0, ~10.0.0]
• @evilmartians/lefthook ^2.1.4 → [Updates: ^2.1.4]
• @nx/express 22.7.6 → [Updates: 22.7.9, 23.1.1]
• @nx/vitest 22.7.6 → [Updates: 22.7.9, 23.1.1]
• @playwright/test ^1.47.2 → [Updates: ^1.47.2]
• @swc-node/register 1.11.1 → [Updates: 1.12.1]
• @swc/cli 0.8.1
• @swc/core 1.15.30 → [Updates: 1.16.1]
• @swc/helpers 0.5.21 → [Updates: 0.5.23]
• @types/eslint 9.6.1
• @types/estree ^1.0.1 → [Updates: ^1.0.1]
• @types/node 24.9.2 → [Updates: 24.13.3]
• @typescript-eslint/eslint-plugin ^8.45.0 → [Updates: ^8.45.0]
• @typescript-eslint/parser ^8.45.0 → [Updates: ^8.45.0]
• @typescript-eslint/typescript-estree 8.23.0 → [Updates: 8.69.0]
• @typescript-eslint/utils ^8.13.0 → [Updates: ^8.13.0]
• @vitest/ui 3.2.6 → [Updates: 3.2.7, 4.1.11]
• conventional-changelog-conventionalcommits ^8.0.0 → [Updates: ^10.0.0]
• cz-conventional-changelog ^3.3.0
• cz-git ^1.6.1 → [Updates: ^1.6.1]
• eslint ^9.8.0 → [Updates: ^9.8.0, ^10.0.0]
• eslint-config-prettier 10.1.8
• eslint-plugin-import 2.31.0 → [Updates: 2.32.0]
• eslint-plugin-package-json 0.91.1 → [Updates: 0.91.2, 1.7.1]
• eslint-plugin-playwright ^2.0.0 → [Updates: ^2.0.0]
• eslint-plugin-prettier ^5.2.3 → [Updates: ^5.2.3]
• fast-check ^4.0.0 → [Updates: ^4.0.0]
• jiti 2.6.1 → [Updates: 2.7.0]
• jsdom 27.4.0 → [Updates: 30.0.1]
• jsonc-eslint-parser ^2.1.0 → [Updates: ^2.1.0, ^3.0.0]
• madge 8.0.0
• pkg-pr-new ^0.0.67 → [Updates: ^0.0.88]
• playwright ^1.47.2 → [Updates: ^1.47.2]
• prettier ^3.2.5 → [Updates: ^3.2.5]
• shx ^0.4.0
• swc-loader 0.2.7
• syncpack ^15.0.0 → [Updates: ^15.0.0]
• ts-node 10.9.2
• ts-patch 3.3.0 → [Updates: 4.0.1]
• typedoc ^0.27.4 → [Updates: ^0.28.0]
• typedoc-github-theme 0.2.1 → [Updates: 0.4.0]
• typedoc-plugin-rename-defaults ^0.7.2
• typescript-eslint ^8.19.0 → [Updates: ^8.19.0]
• verdaccio 6.5.2 → [Updates: 6.10.1]
• node ^20 || ^22 || ^24
• pnpm >=10.17.1
• pnpm 10.21.0+sha512.da3337267e400fdd3d479a6c68079ac6db01d8ca4f67572083e722775a796788a7a9956613749e000fac20d424b594f7a791a5f4e2e13581c5ef947f26968a40 → [Updates: 10.34.5, 11.24.0]
• rollup ^4.59.0
• picomatch@>=4 ^4.0.4
• picomatch@<3 ^2.3.2 → [Updates: ^4.0.0]
• fast-uri ^3.1.6 → [Updates: ^4.0.0]
• qs ^6.16.0
• @opentelemetry/core ^2.8.0
• brace-expansion@<2 ~1.1.15 → [Updates: ~2.1.2]
• brace-expansion@>=2 <3 ~2.1.1 → [Updates: ~5.0.0]
• brace-expansion@>=3 <4 ~3.0.2 → [Updates: ~5.0.0]
• brace-expansion@>=4 ~5.0.8
• ws ^8.21.1
• undici ^7.29.0 → [Updates: ^8.0.0]
• nanoid ^5.1.16 → [Updates: ^6.0.0]
• postcss ^8.5.23

packages/davinci-client/package.json

packages/device-client/package.json

packages/journey-client/package.json

packages/oidc-client/package.json

packages/protect/package.json

packages/recognize/package.json (2)

• @aracna/core ^1.5.0
• @aracna/web-components ^1.1.18

packages/sdk-effects/iframe-manager/package.json

packages/sdk-effects/logger/package.json

packages/sdk-effects/oidc/package.json

packages/sdk-effects/sdk-request-middleware/package.json

packages/sdk-effects/storage/package.json

packages/sdk-types/package.json

packages/sdk-utilities/package.json

pnpm-workspace.yaml (19)

• @forgerock/javascript-sdk 4.9.0 → [Updates: 4.9.1]
• jose ^6.0.0 → [Updates: ^6.0.0]
• @reduxjs/toolkit ^2.8.2 → [Updates: ^2.8.2]
• @types/express 5.0.6
• immer ^10.1.1 → [Updates: ^11.0.0]
• msw ^2.5.1 → [Updates: ^2.5.1]
• tslib ^2.5.0
• tsx 4.21.0 → [Updates: 4.23.13]
• effect ^3.20.0 → [Updates: ^3.20.0]
• @effect/cli ^0.69.0 → [Updates: ^0.77.0]
• @effect/language-service ^0.35.2 → [Updates: ^0.87.0]
• @effect/platform ^0.90.0 → [Updates: ^0.97.0]
• @effect/platform-node 0.94.2 → [Updates: 0.108.1]
• @effect/vitest ^0.27.0 → [Updates: ^0.30.0]
• @effect/opentelemetry ^0.56.1 → [Updates: ^0.64.0]
• vitest ^3.2.6 → [Updates: ^4.0.0]
• @vitest/coverage-v8 ^3.2.6 → [Updates: ^3.2.6, ^4.0.0]
• vitest-canvas-mock ^1.1.3 → [Updates: ^1.1.3]
• vite ^7.3.6 → [Updates: ^8.0.0]

scratchpad/package.json (1)

• dotenv 17.2.3 → [Updates: 17.4.2]

tools/api-report/package.json (1)

• @microsoft/api-extractor ^7.52.8 → [Updates: ^7.52.8]

tools/interface-mapping-validator/package.json (1)

• ts-morph ^28.0.0

tools/interface-mapping-validator/src/fixtures/mock-package/package.json

tools/release/package.json

tools/user-scripts/package.json

---

• Check this box to trigger a request for Renovate to run again on this repository