Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@material-ui/core
npm	@material-ui/icons
npm	@types/domutils

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (20)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
npm	classnames	2023-12-29
npm	clsx	2024-04-23
npm	escape-string-regexp	2021-04-17
npm	eslint-plugin-react	2025-04-03
npm	font-awesome	2016-10-24
npm	history	2022-02-22
npm	husky	2024-11-18
npm	load-plugin	2024-04-16
npm	lusca	2021-02-23
npm	material-design-icons	2016-09-02
npm	moment	2023-12-27
npm	passport	2023-11-27
npm	passport-activedirectory	2023-03-01
npm	passport-local	2014-03-08
npm	perfect-scrollbar	2024-10-29
npm	react-html-parser	2017-11-29
npm	react-social-media-embed	2025-02-18
npm	slick-carousel	2017-10-03

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Replace dependency @material-ui/icons with @mui/icons-material 5.0.0 - - package.json
• Update github-actions - workflows - .github/workflows/docker-publish.yml (docker/login-action, docker/setup-buildx-action, github/codeql-action)
• Update httpd:2.4 Docker digest to 2a7deaa - localgit - localgit/Dockerfile
• Update dependency axios to ^1.16.1 - git-proxy-cli - packages/git-proxy-cli/package.json
• Update actions/dependency-review-action action to v5 - workflows - .github/workflows/dependency-review.yml
• Update codecov/codecov-action action to v6 - workflows - .github/workflows/ci.yml
• Update crazy-max/ghaction-github-runtime action to v4 - workflows - .github/workflows/e2e.yml
• Update dependency https-proxy-agent to v9 - - package.json
• Update dependency uuid to v14 - - package.json
• Update dependency yargs to v18 - git-proxy-cli - packages/git-proxy-cli/package.json
• Update npm to v6 - - package.json (@vitejs/plugin-react, connect-mongo, eslint-plugin-cypress, mongodb, typescript, vite-tsconfig-paths)
• Update npm to v17 - - package.json (globals, lint-staged, react, react-dom)
• Update npm to v18 - - package.json (@types/react-dom, nyc, react, react-dom, yargs)
• Update npm to v19 - - package.json (@types/react-dom, react, react-dom)
• Update npm to v21 - - package.json (@commitlint/cli, @commitlint/config-conventional)
• Lock file maintenance - - package.json
• Lock file maintenance - git-proxy-cli - packages/git-proxy-cli/package.json
• Lock file maintenance - git-proxy-plugin-samples - plugins/git-proxy-plugin-samples/package.json
• Lock file maintenance - test-package - test/fixtures/test-package/package.json
• Lock file maintenance - website - website/package.json
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-digest package github/codeql-action), Could not determine new digest for update (github-tags package actions/dependency-review-action).

Files affected: .github/workflows/codeql.yml, .github/workflows/dependency-review.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Replace dependency @material-ui/core with @mui/material ^5.0.0 - - package.json
• Update npm - website - website/package.json (@docusaurus/core, @docusaurus/plugin-google-gtag, @docusaurus/preset-classic, @docusaurus/theme-mermaid, @mermaid-js/layout-elk, ajv, axios, eslint, eslint-plugin-react, react, react-dom, webpack)
• Update npm - - package.json (@aws-sdk/credential-providers, @babel/core, @esbuild/darwin-arm64, @esbuild/darwin-x64, @esbuild/linux-x64, @esbuild/win32-x64, @eslint/compat, @eslint/js, @eslint/json, @fontsource/roboto, @primer/octicons-react, @types/express-session, @types/lodash, @types/node, @vitejs/plugin-react, axios, cypress, eslint, eslint-plugin-cypress, express-rate-limit, fast-check, isomorphic-git, lint-staged, lodash, mongo, node, openid-client, parse-diff, prettier, simple-git, tsx, typescript-eslint, uuid, validator, vite)
• Update dependency @types/node to v24 - - package.json
• Update mongo Docker tag to v8 - - docker-compose.yml
• Update npm to v4 - - package.json (@vitest/coverage-v8, env-paths, vitest)
• Update npm to v7 - - package.json (@types/supertest, mongodb, react-router-dom)
• Update npm to v8 - - package.json (https-proxy-agent, vite)
• Update npm to v10 - - package.json (@eslint/js, eslint)
• Update npm to v20 - - package.json (@commitlint/cli, @commitlint/config-conventional)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (2)

docker-compose.ci.yml

docker-compose.yml (1)

• mongo 7@sha256:606f8e029603330411a7dd10b5ffd50eefc297fc80cee89f10a455e496a76ae7 → [Updates: 8, 7]

dockerfile (2)

Dockerfile (2)

• node 24@sha256:5a593d74b632d1c6f816457477b6819760e13624455d587eef0fa418c8d0777b → [Updates: 24]
• node 24@sha256:5a593d74b632d1c6f816457477b6819760e13624455d587eef0fa418c8d0777b → [Updates: 24]

localgit/Dockerfile (1)

• httpd 2.4@sha256:331548c5249bdeced0f048bc2fb8c6b6427d2ec6508bed9c1fec6c57d0b27a60 → [Updates: 2.4]

github-actions (14)

.github/workflows/ci.yml (10)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• supercharge/mongodb-github-action 1.12.1@315db7fe45ac2880b7758f1933e6e5d59afd5e94
• codecov/codecov-action v5.5.4@75cd11691c0faa626561e295848008c8a7dddffe → [Updates: v6.0.1]
• cypress-io/github-action v7.3.0@dace029018fcdf86e0df89a31bc3cfa5b32570d8
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• node 24.x

.github/workflows/codeql.yml (5)

• step-security/harden-runner v2@ab7a9404c0f3da075243ca237b5fac12c98deaa5
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• github/codeql-action ratchet:github/codeql-action/init@v4@72c0b0efb7def5141326c5e13760acdda431379d
• github/codeql-action ratchet:github/codeql-action/autobuild@v4@72c0b0efb7def5141326c5e13760acdda431379d
• github/codeql-action ratchet:github/codeql-action/analyze@v4@72c0b0efb7def5141326c5e13760acdda431379d

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2@ab7a9404c0f3da075243ca237b5fac12c98deaa5
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/dependency-review-action v4@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 → [Updates: v5.0.0]

.github/workflows/docker-publish.yml (4)

• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/login-action v4@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4]
• docker/build-push-action v7@f9f3042f7e2789586610d6e8b85c8f03e5195baf

.github/workflows/e2e.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• crazy-max/ghaction-github-runtime v3@3cb05d89e1f492524af3d41a1c98c83bc3025124 → [Updates: v4]
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• node 24

.github/workflows/experimental-inventory-ci.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• supercharge/mongodb-github-action 1.12.1@315db7fe45ac2880b7758f1933e6e5d59afd5e94

.github/workflows/experimental-inventory-cli-publish.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• node 24.x

.github/workflows/experimental-inventory-publish.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• node 24.x

.github/workflows/lint.yml (3)

• step-security/harden-runner v2@ab7a9404c0f3da075243ca237b5fac12c98deaa5
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/npm.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• node 24

.github/workflows/pr-lint.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• amannn/action-semantic-pull-request v6@48f256284bd46cdaab1048c3721360e808335d50
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• release-drafter/release-drafter v7@c2e2804cc59f45f57076a99af580d0fedb697927

.github/workflows/sample-publish.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• node 24.x

.github/workflows/scorecard.yml (5)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.35.5@9e0d7b8d25671d64c341c19c0152d693099fb5ba → [Updates: v4.36.0]

.github/workflows/unused-dependencies.yml (4)

• step-security/harden-runner v2@ab7a9404c0f3da075243ca237b5fac12c98deaa5
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• node 24.x

npm (5)

package.json (98)

• @aws-sdk/credential-providers ^3.980.0 → [Updates: ^3.1050.0]
• @fontsource/roboto ^5.2.9 → [Updates: ^5.2.10]
• @material-ui/core ^4.12.4 → [Updates: ^5.0.0]
• @material-ui/icons 4.11.3 → [Updates: 5.0.0]
• @primer/octicons-react ^19.21.2 → [Updates: ^19.26.0]
• @seald-io/nedb ^4.1.2
• axios ^1.13.4 → [Updates: ^1.16.1]
• bcryptjs ^3.0.3
• clsx ^2.1.1
• concurrently ^9.2.1
• connect-mongo ^5.1.0 → [Updates: ^6.0.0]
• cors ^2.8.6
• diff2html ^3.4.56
• env-paths ^3.0.0 → [Updates: ^4.0.0]
• escape-string-regexp ^5.0.0
• express ^5.2.1
• express-http-proxy ^2.1.2
• express-rate-limit ^8.2.1 → [Updates: ^8.5.2]
• express-session ^1.19.0
• font-awesome ^4.7.0
• history 5.3.0
• https-proxy-agent ^7.0.6 → [Updates: ^8.0.0, ^9.0.0]
• isomorphic-git ^1.36.3 → [Updates: ^1.38.1]
• jsonwebtoken ^9.0.3
• load-plugin ^6.0.3
• lodash ^4.17.23 → [Updates: ^4.18.1]
• lusca ^1.7.0
• material-design-icons ^3.0.1
• moment ^2.30.1
• mongodb ^5.9.2 → [Updates: ^6.21.0, ^7.2.0]
• openid-client ^6.8.1 → [Updates: ^6.8.4]
• parse-diff ^0.11.1 → [Updates: ^0.12.0]
• passport ^0.7.0
• passport-activedirectory ^1.4.0
• passport-local ^1.0.0
• perfect-scrollbar ^1.5.6
• react ^16.14.0 → [Updates: ^17.0.2, ^18.3.1, ^19.2.6]
• react-dom ^16.14.0 → [Updates: ^17.0.2, ^18.3.1, ^19.2.6]
• react-html-parser ^2.0.2
• react-router-dom 6.30.3 → [Updates: 7.15.1]
• simple-git ^3.30.0 → [Updates: ^3.36.0]
• uuid ^13.0.0 → [Updates: ^13.0.2, ^14.0.0]
• validator ^13.15.26 → [Updates: ^13.15.35]
• yargs ^17.7.2 → [Updates: ^18.0.0]
• @babel/core ^7.28.6 → [Updates: ^7.29.0]
• @babel/preset-react ^7.28.5
• @commitlint/cli ^19.8.1 → [Updates: ^20.5.3, ^21.0.1]
• @commitlint/config-conventional ^19.8.1 → [Updates: ^20.5.3, ^21.0.1]
• @eslint/compat ^2.0.2 → [Updates: ^2.1.0]
• @eslint/js ^9.39.2 → [Updates: ^9.39.4, ^10.0.1]
• @eslint/json ^1.0.1 → [Updates: ^1.2.0]
• @types/activedirectory2 ^1.2.6
• @types/cors ^2.8.19
• @types/domutils ^2.1.0
• @types/express ^5.0.6
• @types/express-http-proxy ^1.6.7
• @types/express-session ^1.18.2 → [Updates: ^1.19.0]
• @types/jsonwebtoken ^9.0.10
• @types/lodash ^4.17.23 → [Updates: ^4.17.24]
• @types/lusca ^1.7.5
• @types/node ^22.19.7 → [Updates: ^22.19.19, ^24.12.4]
• @types/passport ^1.0.17
• @types/passport-local ^1.0.38
• @types/react-dom ^17.0.26 → [Updates: ^18.3.7, ^19.2.3]
• @types/react-html-parser ^2.0.7
• @types/supertest ^6.0.3 → [Updates: ^7.2.0]
• @types/validator ^13.15.10
• @types/yargs ^17.0.35
• @vitejs/plugin-react ^5.1.2 → [Updates: ^5.2.0, ^6.0.2]
• @vitest/coverage-v8 ^3.2.4 → [Updates: ^4.1.7]
• c8 ^11.0.0
• cross-env ^10.1.0
• cypress ^15.9.0 → [Updates: ^15.15.0]
• eslint ^9.39.2 → [Updates: ^9.39.4, ^10.4.0]
• eslint-config-prettier ^10.1.8
• eslint-plugin-cypress ^5.2.1 → [Updates: ^5.3.0, ^6.4.1]
• eslint-plugin-license-header ^0.9.0
• eslint-plugin-react ^7.37.5
• fast-check ^4.5.3 → [Updates: ^4.8.0]
• globals ^16.5.0 → [Updates: ^17.6.0]
• husky ^9.1.7
• lint-staged ^16.2.7 → [Updates: ^16.4.0, ^17.0.5]
• nyc ^17.1.0 → [Updates: ^18.0.0]
• prettier ^3.8.1 → [Updates: ^3.8.3]
• quicktype ^23.2.6
• supertest ^7.2.2
• ts-node ^10.9.2
• tsx ^4.21.0 → [Updates: ^4.22.3]
• typescript ^5.9.3 → [Updates: ^6.0.3]
• typescript-eslint ^8.54.0 → [Updates: ^8.59.4]
• vite ^7.3.1 → [Updates: ^7.3.3, ^8.0.13]
• vite-tsconfig-paths ^5.1.4 → [Updates: ^6.1.1]
• vitest ^3.2.4 → [Updates: ^4.1.7]
• @esbuild/darwin-arm64 ^0.27.2 → [Updates: ^0.28.0]
• @esbuild/darwin-x64 ^0.27.2 → [Updates: ^0.28.0]
• @esbuild/linux-x64 0.27.2 → [Updates: 0.28.0]
• @esbuild/win32-x64 0.27.2 → [Updates: 0.28.0]
• node >=22.13.1 || >=24.0.0

packages/git-proxy-cli/package.json (3)

• axios ^1.13.6 → [Updates: ^1.16.1]
• yargs ^17.7.2 → [Updates: ^18.0.0]
• @finos/git-proxy 2.0.0

plugins/git-proxy-plugin-samples/package.json (2)

• express ^5.2.1
• @finos/git-proxy ^2.0.0

test/fixtures/test-package/package.json

website/package.json (22)

• @docusaurus/core ^3.10.0 → [Updates: ^3.10.1]
• @docusaurus/plugin-google-gtag ^3.10.0 → [Updates: ^3.10.1]
• @docusaurus/preset-classic ^3.10.0 → [Updates: ^3.10.1]
• @docusaurus/theme-mermaid ^3.10.0 → [Updates: ^3.10.1]
• @mermaid-js/layout-elk ^0.1.9 → [Updates: ^0.2.1]
• ajv ^8.17.1 → [Updates: ^8.20.0]
• axios ^1.13.4 → [Updates: ^1.16.1]
• classnames ^2.5.1
• clsx ^2.1.1
• eslint ^10.1.0 → [Updates: ^10.4.0]
• eslint-plugin-react ^7.22.0 → [Updates: ^7.37.5]
• react ^19.2.4 → [Updates: ^19.2.6]
• react-dom ^19.2.4 → [Updates: ^19.2.6]
• react-player ^3.4.0
• react-slick ^0.31.0
• react-social-media-embed ^2.5.18
• slick-carousel ^1.8.1
• webpack ~5.105.0 → [Updates: ~5.106.2]
• serialize-javascript ^7.0.5
• uuid ^14.0.0
• webpack ~5.105.0 → [Updates: ~5.106.2]
• lodash ^4.18.0

---

• Check this box to trigger a request for Renovate to run again on this repository

[JamieSlome]

Closed this issue as it is not required to be open 👍