Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	crypto-js

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update dependency @ai-sdk/openai-compatible to v3.0.48
• chore(deps): update dependency ai to v7.0.99
• chore(deps): update dependency hls.js to v1.7.3
• chore(deps): update dependency hono to v4.13.7
• chore(deps): update dependency query-string to v9.5.1
• chore(deps): update dependency react-router to v8.3.1
• chore(deps): update dependency tsx to v4.23.13
• chore(deps): update dependency undici to v8.10.2
• chore(deps): update dependency @types/node to v26.5.1
• chore(deps): update dependency ahooks to v3.10.0
• chore(deps): update dependency axios to v1.20.0
• chore(deps): update dependency eslint to v10.10.0
• chore(deps): update dependency lint-staged to v17.5.1
• chore(deps): update dependency typescript-eslint to v8.70.0
• chore(deps): update dependency vite to v8.3.0
• chore(deps): update pnpm to v11.27.0
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/labeler action to v7
• chore(deps): update actions/setup-node action to v7
• chore(deps): update mcr.microsoft.com/devcontainers/typescript-node docker tag to v5
• chore(deps): update pnpm to v12
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/dependency-review-action action to v5

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (1)

• mcr.microsoft.com/devcontainers/typescript-node 4-22-bookworm → [Updates: 5-22-bookworm]

docker-compose (2)

docker-compose.prod.yml

docker-compose.yml

dockerfile (2)

apps/backend/Dockerfile (1)

• node 24-alpine

apps/frontend/Dockerfile (1)

• node 24-alpine

github-actions (5)

.github/workflows/audit.yml (4)

• actions/checkout v6 → [Updates: v7]
• pnpm/action-setup v6
• actions/setup-node v6 → [Updates: v7]
• node 24

.github/workflows/ci.yml (8)

• actions/checkout v6 → [Updates: v7]
• pnpm/action-setup v6
• actions/setup-node v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• pnpm/action-setup v6
• actions/setup-node v6 → [Updates: v7]
• node 24
• node 24

.github/workflows/dependency-review.yml (2)

• actions/checkout v6 → [Updates: v7]
• actions/dependency-review-action v4 → [Updates: v5.0.0]

.github/workflows/docker-image.yml (12)

• actions/checkout v6 → [Updates: v7]
• docker/login-action v4
• docker/setup-buildx-action v4
• docker/setup-qemu-action v4
• docker/metadata-action v6
• docker/build-push-action v7
• actions/checkout v6 → [Updates: v7]
• docker/login-action v4
• docker/setup-buildx-action v4
• docker/setup-qemu-action v4
• docker/metadata-action v6
• docker/build-push-action v7

.github/workflows/labeler.yml (1)

• actions/labeler v6 → [Updates: v7]

npm (5)

apps/backend/package.json (28)

• @ai-sdk/openai-compatible ^3.0.34 → [Updates: ^3.0.34]
• @hono/node-server ^2.1.1
• @keyv/redis ^5.1.6
• ai ^7.0.73 → [Updates: ^7.0.73]
• axios ^1.19.0 → [Updates: ^1.19.0]
• cache-manager ^7.2.9
• cacheable ^2.5.0
• cross-env ^10.1.0
• crypto-js ^4.2.0
• dayjs ^1.11.23
• dotenv ^17.4.2
• hono ^4.13.3 → [Updates: ^4.13.3]
• ioredis ^6.0.0
• keyv ^5.6.0
• lodash-es ^4.17.23
• query-string ^9.5.0 → [Updates: ^9.5.0]
• tmdb-ts ^2.3.0
• undici ^8.10.0 → [Updates: ^8.10.0]
• winston ^3.19.0
• @eslint/js ^10.0.1
• @types/crypto-js ^4.2.2
• @types/lodash ^4.17.25
• @types/lodash-es ^4.17.12
• @types/node ^26.2.0 → [Updates: ^26.2.0]
• tsup ^8.5.1
• tsx ^4.23.12 → [Updates: ^4.23.12]
• typescript ^7.0.2
• typescript-eslint ^8.67.0 → [Updates: ^8.67.0]

apps/frontend/package.json (27)

• @ant-design/icons ^6.3.2
• ahooks ^3.9.6 → [Updates: ^3.9.6]
• antd ^6.6.1
• antd-style ^4.1.0
• axios ^1.19.0 → [Updates: ^1.19.0]
• crypto-js ^4.2.0
• dayjs ^1.11.23
• hls.js ^1.7.1 → [Updates: ^1.7.1]
• lodash ^4.17.23
• query-string ^9.5.0 → [Updates: ^9.5.0]
• react ^19.2.8
• react-dom ^19.2.8
• react-router ^8.3.0 → [Updates: ^8.3.0]
• store2 ^2.14.4
• valtio ^2.3.2
• xgplayer ^3.0.26
• xgplayer-flv ^3.0.26
• xgplayer-hls ^3.0.26
• xgplayer-mp4 ^3.0.26
• zustand ^5.0.15
• @types/crypto-js ^4.2.2
• @types/lodash ^4.17.25
• @types/react ^19.2.18
• @types/react-dom ^19.2.4
• @vitejs/plugin-react ^6.1.0
• typescript ^7.0.2
• vite ^8.2.2 → [Updates: ^8.2.2]

package.json (20)

• @commitlint/cli ^21.2.2
• @commitlint/config-conventional ^21.2.2
• @eslint/js ^10.0.1
• commitizen ^4.3.2
• cz-conventional-changelog ^3.3.0
• eslint ^10.9.0 → [Updates: ^10.9.0]
• eslint-config-prettier ^10.1.8
• eslint-plugin-import ^2.32.0
• eslint-plugin-import-x ^4.17.1
• eslint-plugin-prettier ^5.5.5
• eslint-plugin-react ^7.37.5
• eslint-plugin-react-hooks ^7.0.1
• eslint-plugin-unused-imports ^4.4.1
• husky ^9.1.7
• lint-staged ^17.3.0 → [Updates: ^17.3.0]
• prettier ^3.9.6
• typescript-eslint ^8.67.0 → [Updates: ^8.67.0]
• node >=24
• pnpm >=11
• pnpm 11.22.0 → [Updates: 11.27.0, 12.4.1]

packages/shared/package.json

pnpm-workspace.yaml

---

• Check this box to trigger a request for Renovate to run again on this repository