Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency @swc/core to v1.15.8
• chore(deps): update dependency tsdown to v0.18.4
• fix(deps): update dependency @ai-sdk/openai to v2.0.89
• fix(deps): update dependency mongoose to v8.19.4
• fix(deps): update dependency openai to v5.23.2
• fix(deps): update dependency qs to v6.14.1
• fix(deps): update dependency ua-parser-js to v2.0.7
• fix(deps): update nest monorepo to v11.1.11 (patch) (@nestjs/common, @nestjs/core, @nestjs/platform-fastify, @nestjs/platform-socket.io, @nestjs/testing, @nestjs/websockets)
• chore(deps): update dependency @sxzz/eslint-config to v7.4.4
• chore(deps): update dependency express to v4.22.1
• chore(deps): update dependency mongodb-memory-server to v10.4.3
• chore(deps): update dependency mongodb-memory-server to v10.4.3
• chore(deps): update dependency prettier to v3.7.4
• chore(deps): update dependency redis-memory-server to v0.14.1
• chore(deps): update dependency rimraf to v6.1.2
• chore(deps): update docker/setup-qemu-action action to v3.7.0
• chore(deps): update pnpm/action-setup action to v4.2.0
• fix(deps): update dependency marked to v16.4.2
• fix(deps): update dependency mongoose to v8.21.0
• fix(deps): update dependency mongoose-autopopulate to v1.2.1
• fix(deps): update dependency mongoose-lean-getters to v2.3.1
• fix(deps): update dependency mongoose-lean-virtuals to v2.1.0
• fix(deps): update dependency vm2 to v3.10.0
• chore(deps): update actions/cache action to v5
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-node action to v6
• chore(deps): update appleboy/scp-action action to v1
• chore(deps): update dependency @types/nodemailer to v7
• chore(deps): update dependency camelcase-keys to v10
• chore(deps): update dependency express to v5
• chore(deps): update dependency mongodb to v7
• chore(deps): update dependency mongodb-memory-server to v11
• chore(deps): update dependency node to v24
• chore(deps): update dependency vite-tsconfig-paths to v6
• chore(deps): update dependency whatwg-url to v15
• chore(deps): update dependency zod to v4
• fix(deps): update dependency @ai-sdk/openai to v3
• fix(deps): update dependency @fastify/static to v9
• fix(deps): update dependency @typegoose/auto-increment to v5
• fix(deps): update dependency @typegoose/typegoose to v13
• fix(deps): update dependency ai to v6
• fix(deps): update dependency inquirer to v13
• fix(deps): update dependency marked to v17
• fix(deps): update dependency mongoose to v9
• fix(deps): update dependency openai to v6
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency better-auth to v1.4.5 [security]
• chore(deps): update dependency rolldown to v1.0.0-beta.57
• chore(deps): update supercharge/redis-github-action action to v1.8.1
• fix(deps): update dependency @typegoose/typegoose to v12.20.1
• fix(deps): update dependency ai to v5.0.117
• fix(deps): update dependency form-data to v4.0.5
• chore(deps): update dependency mongodb to v6.21.0
• chore(deps): update dependency whatwg-url to v14.2.0
• chore(deps): update pnpm to v10.27.0
• fix(deps): update dependency @simplewebauthn/server to v13
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (1)

dockerfile (2)

• node 22-alpine → [Updates: 24-alpine]
• node 22-alpine → [Updates: 24-alpine]

github-actions (5)

.github/actions/setup-databases/action.yml (2)

• supercharge/mongodb-github-action 1.12.1
• supercharge/redis-github-action 1.8.0 → [Updates: 1.8.1]

.github/actions/setup-node/action.yml (3)

• actions/setup-node v4 → [Updates: v6]
• pnpm/action-setup v4.1.0 → [Updates: v4.2.0]
• actions/cache v4 → [Updates: v5]

.github/workflows/api-client.yml (4)

• actions/checkout v4 → [Updates: v6]
• actions/setup-node v4 → [Updates: v6]
• actions/cache v4 → [Updates: v5]
• pnpm/action-setup v4.1.0 → [Updates: v4.2.0]

.github/workflows/ci.yml (7)

• actions/checkout v4 → [Updates: v6]
• docker/metadata-action v5
• docker/setup-qemu-action v3
• docker/setup-buildx-action v3
• docker/build-push-action v6
• actions/checkout v4 → [Updates: v6]
• actions/checkout v4 → [Updates: v6]

.github/workflows/release.yml (19)

• actions/checkout v4 → [Updates: v6]
• actions/setup-node v4 → [Updates: v6]
• supercharge/mongodb-github-action 1.12.1
• supercharge/redis-github-action 1.8.0 → [Updates: 1.8.1]
• pnpm/action-setup v4.1.0 → [Updates: v4.2.0]
• actions/cache v4 → [Updates: v5]
• actions/create-release v1
• actions/upload-release-asset v1
• robinraju/release-downloader v1.12
• appleboy/scp-action v0.1.7 → [Updates: v1.0.0]
• actions/checkout v4 → [Updates: v6]
• docker/setup-qemu-action v3.6.0 → [Updates: v3.7.0]
• docker/metadata-action v5
• docker/setup-buildx-action v3
• docker/build-push-action v6
• docker/login-action v3
• docker/build-push-action v6
• ubuntu 24.04
• node 22.x → [Updates: 24.x]

npm (10)

apps/core/external/pino/package.json

apps/core/external/request/package.json

apps/core/package.json (103)

• @ai-sdk/openai 2.0.88 → [Updates: 2.0.89, 3.0.2]
• @babel/core 7.28.5
• @babel/plugin-transform-modules-commonjs 7.27.1
• @babel/plugin-transform-typescript 7.28.5
• @babel/types ^7.28.5
• @fastify/cookie 11.0.2
• @fastify/multipart 9.3.0
• @fastify/static 8.3.0 → [Updates: 9.0.0]
• @innei/next-async 0.3.0
• @innei/pretty-logger-nestjs 0.3.4
• @keyv/redis 5.1.5
• @nestjs/cache-manager 3.1.0
• @nestjs/common 11.1.10 → [Updates: 11.1.11]
• @nestjs/core 11.1.10 → [Updates: 11.1.11]
• @nestjs/event-emitter 3.0.1
• @nestjs/mapped-types ^2.1.0
• @nestjs/platform-fastify 11.1.10 → [Updates: 11.1.11]
• @nestjs/platform-socket.io 11.1.10 → [Updates: 11.1.11]
• @nestjs/schedule 6.1.0
• @nestjs/throttler 6.5.0
• @nestjs/websockets 11.1.10 → [Updates: 11.1.11]
• @simplewebauthn/server 10.0.1 → [Updates: 13.2.2]
• @socket.io/redis-adapter 8.3.0
• @socket.io/redis-emitter 5.1.0
• @typegoose/auto-increment 4.13.2 → [Updates: 5.0.0]
• @typegoose/typegoose 12.20.0 → [Updates: 12.20.1, 13.0.0]
• @types/jsonwebtoken 9.0.10
• ai 5.0.93 → [Updates: 5.0.117, 6.0.5]
• axios ^1.13.2
• axios-retry 4.5.0
• bcryptjs ^3.0.3
• blurhash 2.0.5
• cache-manager 7.2.7
• class-validator-jsonschema 3.1.2
• cls-hooked ^4.2.2
• commander 14.0.2
• dayjs 1.11.19
• ejs 3.1.10
• form-data 4.0.4 → [Updates: 4.0.5]
• inquirer ^12.9.6 → [Updates: ^13.0.0]
• isbot 5.1.32
• js-yaml ^4.1.1
• json5 2.2.3
• jsonwebtoken 9.0.3
• jszip 3.10.1
• keyv 5.5.5
• linkedom 0.18.12
• lodash ^4.17.21
• lru-cache 11.2.4
• marked 16.3.0 → [Updates: 16.4.2, 17.0.1]
• mime-types ^3.0.1
• mkdirp ^3.0.1
• mongoose 8.19.3 → [Updates: 8.19.4, 8.21.0, 9.1.1]
• mongoose-aggregate-paginate-v2 1.1.4
• mongoose-autopopulate 1.1.0 → [Updates: 1.2.1]
• mongoose-lean-getters 2.2.2 → [Updates: 2.3.1]
• mongoose-lean-virtuals 2.0.1 → [Updates: 2.1.0]
• mongoose-paginate-v2 1.9.1
• node-machine-id 1.1.12
• nodemailer 7.0.12
• openai 5.23.1 → [Updates: 5.23.2, 6.15.0]
• pluralize ^8.0.0
• qs 6.14.0 → [Updates: 6.14.1]
• reflect-metadata 0.2.2
• remove-markdown 0.6.2
• remove-md-codeblock 0.0.4
• rxjs 7.8.2
• semver 7.7.3
• slugify 1.6.6
• source-map-support ^0.5.21
• ua-parser-js 2.0.6 → [Updates: 2.0.7]
• vm2 3.9.19 → [Updates: 3.10.0]
• wildcard-match 5.1.4
• xss 1.0.15
• zx-cjs 7.0.7-0
• @nestjs/cli 11.0.14
• @nestjs/schematics 11.0.9
• @nestjs/testing 11.1.10 → [Updates: 11.1.11]
• @swc/core 1.15.7 → [Updates: 1.15.8]
• @types/babel__core 7.20.5
• @types/cls-hooked ^4.3.9
• @types/ejs 3.1.5
• @types/get-image-colors 4.0.5
• @types/js-yaml 4.0.9
• @types/lodash 4.17.21
• @types/mime-types 3.0.1
• @types/node 24.10.4
• @types/nodemailer 6.4.21 → [Updates: 7.0.4]
• @types/qs 6.14.0
• @types/remove-markdown 0.3.4
• @types/semver 7.7.1
• @types/ua-parser-js 0.7.39
• @types/validator 13.15.10
• @vercel/ncc 0.38.4
• ioredis 5.8.2
• mongodb-memory-server ^10.2.1 → [Updates: ^10.2.1, ^11.0.0]
• redis-memory-server ^0.13.0 → [Updates: ^0.14.0]
• rimraf 6.0.1 → [Updates: 6.1.2]
• sharp 0.34.5
• socket.io ^4.8.3
• typescript 5.9.3
• unplugin-swc 1.5.9
• vite-tsconfig-paths 5.1.4 → [Updates: 6.0.3]

external/pino/package.json

external/request/package.json

package.json (26)

• @ianvs/prettier-plugin-sort-imports 4.7.0
• @sxzz/eslint-config 7.1.4 → [Updates: 7.4.4]
• @types/node 24.10.4
• cross-env 10.1.0
• eslint ^9.36.0
• lint-staged 16.2.7
• mongodb-memory-server 10.2.3 → [Updates: 10.4.3, 11.0.1]
• prettier 3.6.2 → [Updates: 3.7.4]
• prettier-package-json 2.8.0
• prettier-plugin-ember-template-tag 2.1.2
• redis-memory-server 0.13.0 → [Updates: 0.14.1]
• rimraf 6.0.1 → [Updates: 6.1.2]
• rolldown 1.0.0-beta.53 → [Updates: 1.0.0-beta.57]
• simple-git-hooks 2.13.1
• ts-node 10.9.2
• tsconfig-paths 4.2.0
• typescript 5.9.3
• vite-tsconfig-paths 5.1.4 → [Updates: 6.0.3]
• zx-cjs 7.0.7-0
• rolldown 1.0.0-beta.53 → [Updates: 1.0.0-beta.57]
• mongodb 6.12.0 → [Updates: 6.21.0, 7.0.0]
• semver 7.7.3
• typescript 5.9.3
• whatwg-url 14.1.1 → [Updates: 14.2.0, 15.1.0]
• zod 3.25.76 → [Updates: 4.2.1]
• pnpm 10.10.0+sha512.d615db246fe70f25dcfea6d8d73dee782ce23e2245e3c4f6f888249fb568149318637dca73c2c5c8ef2a4ca0d5657fb9567188bfab47f566d1ee6ce987815c39 → [Updates: 10.27.0]

packages/api-client/package.json (12)

• @types/cors 2.8.19
• @types/express 5.0.6
• @types/lodash 4.17.21
• abort-controller 3.0.0
• axios ^1.13.2
• camelcase-keys ^9.1.3 → [Updates: ^10.0.0]
• cors 2.8.5
• express 4.21.2 → [Updates: 4.22.1, 5.2.1]
• form-data 4.0.4 → [Updates: 4.0.5]
• lodash ^4.17.21
• tsdown 0.18.3 → [Updates: 0.18.4]
• umi-request 1.4.0

packages/compiled/package.json (5)

• @antfu/install-pkg 1.1.0
• better-auth 1.3.7 → [Updates: 1.4.5]
• nanoid 5.1.6
• tsdown 0.18.3 → [Updates: 0.18.4]
• zod 3.25.76 → [Updates: 4.2.1]

packages/webhook/package.json (2)

• express 4.21.2 → [Updates: 4.22.1, 5.2.1]
• tsdown 0.18.3 → [Updates: 0.18.4]

pnpm-workspace.yaml

---

• Check this box to trigger a request for Renovate to run again on this repository