Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Base branch does not exist - skipping

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (7)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
cargo	base64	2024-04-30
cargo	dotenvy	2023-03-22
cargo	mime_guess	2024-06-29
npm	change-case	2024-04-03
npm	clsx	2024-04-23
npm	qrcode.react	2024-12-11
npm	react-markdown	2025-03-07

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Pin dependencies (dev) (debian, public.ecr.aws/docker/library/node, rust)
• Update github actions (dev) (aquasecurity/trivy-action, docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action, dtolnay/rust-toolchain, mozilla-actions/sccache-action, pnpm/action-setup, public.ecr.aws/docker/library/rust, taiki-e/install-action, ubuntu)
• Update rust dependencies (dev) (defguard_certs, defguard_grpc_tls, defguard_version, reqwest, rustls, rustls-pki-types, time, tokio, tower-http)
• Update frontend dependencies (dev) (@biomejs/biome, @inlang/paraglide-js, @tanstack/devtools-vite, @tanstack/react-devtools, @tanstack/react-query, @tanstack/react-query-devtools, @tanstack/react-router, @tanstack/router-plugin, @types/lodash-es, @types/node, @types/qs, @types/react, @types/react-dom, @vitejs/plugin-react-swc, axios, globals, motion, prettier, qs, sass, sharp, stylelint, stylelint-config-standard-scss, stylelint-scss, typescript, typescript-eslint, vite, vite-plugin-image-optimizer)
• Update frontend dependencies (dev) (major) (typescript, vite)
• Update rust dependencies (dev) (major) (axum-client-ip, vergen-git2)
• Update ubuntu Docker tag to v26 (dev)
• Lock file maintenance (dev)
• Lock file maintenance (dev)
• 🔐 Create all awaiting schedule PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Lock file maintenance (stable/1.x)
• Lock file maintenance (stable/2.x)
• Lock file maintenance (release/2.1)
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Security patches (dev) (ammonia, anyhow)
• Security patches (stable/1.x) (ammonia, anyhow, axios, qs, vite)
• Security patches (release/2.1) (ammonia, anyhow)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

Branch dev

cargo (1)

Cargo.toml (41)

• defguard_certs b6e69565394662eb0b81199eb9efba3aea43b414 → [Updates: ``]
• defguard_grpc_tls b6e69565394662eb0b81199eb9efba3aea43b414 → [Updates: ``]
• defguard_version b6e69565394662eb0b81199eb9efba3aea43b414 → [Updates: ``]
• rustls-webpki 0.103
• rustls-pki-types 1 → [Updates: 1]
• axum 0.8
• axum-client-ip 0.7 → [Updates: 1.0]
• axum-extra 0.12
• axum-server 0.8
• time 0.3 → [Updates: 0.3]
• tokio 1
• tokio-stream 0.1
• tower-http 0.6 → [Updates: 0.7]
• tracing 0.1
• tracing-subscriber 0.3
• log 0.4
• serde 1.0
• serde_json 1.0
• toml 1.0
• prost 0.14
• tonic 0.14
• tonic-prost 0.14
• thiserror 2.0
• anyhow 1.0 → [Updates: 1.0]
• clap 4.5
• dotenvy 0.15
• url 2.5
• tower_governor 0.8
• rust-embed 8.5 → [Updates: 8.5]
• mime_guess 2.0
• base64 0.22
• tower 0.5
• futures-util 0.3
• ammonia 4.1 → [Updates: 4.1]
• chrono 0.4
• rustls 0.23 → [Updates: 0.23]
• instant-acme 0.8
• reqwest 0.12 → [Updates: 0.13]
• tokio 1 → [Updates: =1.52.3]
• tonic-prost-build 0.14
• vergen-git2 9.1 → [Updates: 10.0]

dockerfile (1)

Dockerfile (3)

• public.ecr.aws/docker/library/node 26-alpine → [Updates: 26-alpine]
• rust 1 → [Updates: 1]
• debian 13-slim → [Updates: 13-slim]

github-actions (8)

.github/workflows/build-docker.yml (8)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.3.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 → [Updates: v0.36.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.3.0]

.github/workflows/lint-web.yml (5)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• pnpm/action-setup v6.0.9@008330803749db0355799c700092d9a85fd074e9 → [Updates: v6.0.9]
• node 26
• pnpm 11

.github/workflows/publish-docker-latest.yml (3)

• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.3.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]

.github/workflows/release.yml (29)

• shogo82148/actions-create-release v1.9.0@6a396031bc74c57403da1018fec74d24c6aa03cd
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• pnpm/action-setup v6.0.9@008330803749db0355799c700092d9a85fd074e9 → [Updates: v6.0.9]
• dtolnay/rust-toolchain stable@e97e2d8cc328f1b50210efc529dca0028893a2d9 → [Updates: stable]
• mozilla-actions/sccache-action v0.0.10@1583d6b38d7be47f593cb472781bbb21cab4321e → [Updates: v0.0.10]
• defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c
• defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c
• defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c
• defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c
• defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• pnpm/action-setup v6.0.9@008330803749db0355799c700092d9a85fd074e9 → [Updates: v6.0.9]
• dtolnay/rust-toolchain stable@e97e2d8cc328f1b50210efc529dca0028893a2d9 → [Updates: stable]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3
• node 26
• pnpm 11
• ubuntu 22.04 → [Updates: 26.04, 22.04]
• node 26
• pnpm 11

.github/workflows/sbom-regenerate.yml

.github/workflows/sbom.yml (6)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 → [Updates: v0.36.0]
• aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 → [Updates: v0.36.0]
• aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 → [Updates: v0.36.0]
• aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 → [Updates: v0.36.0]
• shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3

.github/workflows/test.yml (5)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 → [Updates: v0.36.0]
• mozilla-actions/sccache-action v0.0.10@1583d6b38d7be47f593cb472781bbb21cab4321e → [Updates: v0.0.10]
• taiki-e/install-action v2.82.2@9e1e5806d4a4822de933115878265be9aaa786d9 → [Updates: v2.82.7]
• public.ecr.aws/docker/library/rust 1 → [Updates: 1]

.github/workflows/update-repositories.yml (1)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

npm (4)

package.json (1)

• @tanstack/devtools-vite ^0.3.12 → [Updates: 0.3.12, ^0.8.0]

pnpm-workspace.yaml

web/package.json (45)

• @axa-ch/react-polymorphic-types ^1.4.2
• @floating-ui/react ^0.27.19
• @inlang/paraglide-js ^2.20.0 → [Updates: ^2.20.0]
• @tanstack/react-devtools ^0.9.13 → [Updates: ^0.10.0]
• @tanstack/react-form ^1.33.0 → [Updates: ^1.33.0]
• @tanstack/react-query ^5.101.0 → [Updates: ^5.101.0]
• @tanstack/react-query-devtools ^5.101.0 → [Updates: ^5.101.0]
• @tanstack/react-router ^1.170.16 → [Updates: ^1.170.16]
• @tanstack/react-router-devtools ^1.167.0
• @uidotdev/usehooks ^2.4.1
• axios ^1.18.0 → [Updates: ^1.18.0]
• change-case ^5.4.4
• clsx ^2.1.1
• dayjs ^1.11.21
• lodash-es ^4.18.1
• motion ^12.40.0 → [Updates: ^12.40.0]
• qrcode.react ^4.2.0
• qs ^6.15.2 → [Updates: ^6.15.2]
• react ^19.2.7
• react-dom ^19.2.7
• react-markdown ^10.1.0
• rxjs ^7.8.2
• zod ^4.4.3
• zustand ^5.0.14
• @biomejs/biome 2.3.14 → [Updates: 2.5.2]
• @inlang/paraglide-js 2.15.1 → [Updates: 2.20.2]
• @tanstack/devtools-vite ^0.5.5 → [Updates: 0.5.5, ^0.8.0]
• @tanstack/router-plugin ^1.168.18 → [Updates: 1.168.18]
• @types/lodash-es ^4.17.12 → [Updates: 4.17.12]
• @types/node ^25.9.4 → [Updates: 25.9.4]
• @types/qs ^6.15.1 → [Updates: 6.15.1]
• @types/react ^19.2.17 → [Updates: 19.2.17]
• @types/react-dom ^19.2.3 → [Updates: 19.2.3]
• @vitejs/plugin-react-swc ^4.3.1 → [Updates: 4.3.1]
• globals ^17.6.0 → [Updates: 17.6.0]
• prettier ^3.8.4 → [Updates: 3.8.4]
• sass ^1.101.0 → [Updates: 1.101.0]
• sharp ^0.34.5 → [Updates: 0.34.5, ^0.35.0]
• stylelint ^17.13.0 → [Updates: 17.13.0]
• stylelint-config-standard-scss ^17.0.0 → [Updates: 17.0.0]
• stylelint-scss ^7.2.0 → [Updates: 7.2.0]
• typescript ~5.9.3 → [Updates: 5.9.3, ~6.0.0]
• typescript-eslint ^8.61.1 → [Updates: 8.61.1]
• vite ^7.3.5 → [Updates: 7.3.5, ^8.0.0]
• vite-plugin-image-optimizer ^2.0.3 → [Updates: 2.0.3]

web/pnpm-workspace.yaml (1)

• seroval 1.5.4 → [Updates: 1.5.5]

nvm (1)

web/.nvmrc (1)

• node v26

Branch release/2.1

cargo (1)

Cargo.toml (2)

• anyhow 1.0 → [Updates: 1.0]
• ammonia 4.1 → [Updates: 4.1]

dockerfile (1)

Dockerfile

github-actions (8)

.github/workflows/build-docker.yml

.github/workflows/lint-web.yml

.github/workflows/publish-docker-latest.yml

.github/workflows/release.yml

.github/workflows/sbom-regenerate.yml

.github/workflows/sbom.yml

.github/workflows/test.yml

.github/workflows/update-repositories.yml

npm (4)

package.json

pnpm-workspace.yaml

web/package.json

web/pnpm-workspace.yaml

nvm (1)

web/.nvmrc

Branch stable/1.x

cargo (1)

Cargo.toml (2)

• anyhow 1.0 → [Updates: 1.0]
• ammonia 4.1.1 → [Updates: 4.1.1]

dockerfile (1)

Dockerfile

github-actions (7)

.github/workflows/build-docker.yml

.github/workflows/lint-web.yml

.github/workflows/release.yml

.github/workflows/sbom-regenerate.yml

.github/workflows/sbom.yml

.github/workflows/test.yml

.github/workflows/update-repositories.yml

npm (4)

package.json

pnpm-workspace.yaml

web/package.json (3)

• axios ^1.15.0 → [Updates: ^1.15.0]
• qs ^6.15.1 → [Updates: ^6.15.1]
• vite ^7.3.2 → [Updates: ^7.3.2]

web/pnpm-workspace.yaml

Branch stable/2.x

cargo (1)

Cargo.toml

dockerfile (1)

Dockerfile

github-actions (8)

.github/workflows/build-docker.yml

.github/workflows/lint-web.yml

.github/workflows/publish-docker-latest.yml

.github/workflows/release.yml

.github/workflows/sbom-regenerate.yml

.github/workflows/sbom.yml

.github/workflows/test.yml

.github/workflows/update-repositories.yml

npm (4)

package.json

pnpm-workspace.yaml

web/package.json

web/pnpm-workspace.yaml

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository