Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/AIObjectives/tttc-light-js).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | `@types/csv-parse` |  |
| npm | `@types/firebase` |  |
| npm | `@types/uuid` |  |

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] Update @types packages (`@types/node`, `@types/react`, `@types/react-dom`)
- [ ] Update dependency effect to v3.22.2
- [ ] Update dependency fast-uri to v3.1.7
- [ ] Update dependency immer to v11.1.18
- [ ] Update dependency picomatch@4 to v4.0.7
- [ ] Update dependency postcss to v8.5.28
- [ ] Update dependency postcss to v8.5.28
- [ ] Update dependency protobufjs to v7.6.6
- [ ] Update dependency systeminformation to v5.33.10
- [ ] Update dependency undici to v7.29.1
- [ ] Update dependency uuid to v14.0.2
- [ ] Update dependency uuid to v14.0.2
- [ ] Update dependency ws@8 to v8.21.3
- [ ] Update dependency yaml to v2.9.1
- [ ] Update dependency zustand to v5.0.15
- [ ] Update nextjs monorepo to v16.3.5 (`@next/bundle-analyzer`, `next`)
- [ ] Update Radix UI (`@radix-ui/react-alert-dialog`, `@radix-ui/react-avatar`, `@radix-ui/react-dialog`, `@radix-ui/react-dropdown-menu`, `@radix-ui/react-hover-card`, `@radix-ui/react-progress`, `@radix-ui/react-scroll-area`, `@radix-ui/react-select`, `@radix-ui/react-separator`, `@radix-ui/react-slot`, `@radix-ui/react-switch`, `@radix-ui/react-tabs`)
- [ ] Update dependency @anthropic-ai/sdk to ^0.125.0
- [ ] Update dependency @biomejs/biome to v2.5.13
- [ ] Update dependency @opentelemetry/core to v2.11.0
- [ ] Update dependency @playwright/test to v1.63.0
- [ ] Update dependency @rollup/rollup-linux-x64-gnu to v4.63.2
- [ ] Update dependency @tanstack/react-virtual to v3.14.12
- [ ] Update dependency ajv@6 to v6.15.0
- [ ] Update dependency autoprefixer to v10.6.0
- [ ] Update dependency axios to v1.20.0
- [ ] Update dependency bullmq to v5.81.5
- [ ] Update dependency cspell to v9.8.0
- [ ] Update dependency express-rate-limit to v8.7.0
- [ ] Update dependency fast-xml-parser to v5.11.1
- [ ] Update dependency firebase-admin to v13.10.0
- [ ] Update dependency helmet to v8.3.0
- [ ] Update dependency ioredis to v5.11.1
- [ ] Update dependency ip-address to v10.7.0
- [ ] Update dependency lucide-react to ^0.577.0
- [ ] Update dependency openai to v6.49.0
- [ ] Update dependency papaparse to v5.7.0
- [ ] Update dependency pino to v10.3.1
- [ ] Update dependency posthog-js to v1.430.3
- [ ] Update dependency rollup to v4.63.2
- [ ] Update dependency serialize-javascript to v7.1.1
- [ ] Update dependency shell-quote to v1.10.0
- [ ] Update dependency smol-toml to v1.8.0
- [ ] Update dependency supertest to v7.2.2
- [ ] Update dependency tsx to v4.23.13
- [ ] Update dependency turbo to v2.10.12
- [ ] Update dependency weave to ^0.16.0
- [ ] Update dependency webpack to v5.110.3
- [ ] Update dependency zod to v4.6.4
- [ ] Update Google Cloud (`@google-cloud/pubsub`, `@google-cloud/storage`)
- [ ] Update pnpm to v10.34.5
- [ ] Update react monorepo to v19.3.0 (`react`, `react-dom`)
- [ ] Update Storybook to v10.6.0 (`@storybook/addon-docs`, `@storybook/addon-onboarding`, `@storybook/nextjs`, `@storybook/react`, `storybook`)
- [ ] Update tailwindcss monorepo to v4.3.3 (`@tailwindcss/postcss`, `tailwindcss`)
- [ ] Update tanstack-query monorepo to v5.102.8 (`@tanstack/react-query`, `@tanstack/react-query-devtools`)
- [ ] Update testcontainers-node monorepo to v11.14.0 (`@testcontainers/redis`, `testcontainers`)
- [ ] Update @types packages (major) (`@types/firebase`, `@types/jsdom`, `@types/supertest`, `@types/uuid`)
- [ ] Update Firebase (major) (`firebase`, `firebase-admin`)
- [ ] Update Google Cloud (major) (`@google-cloud/pubsub`, `@google-cloud/storage`)
- [ ] Update major updates (major) (`@babel/core`, `@babel/plugin-transform-modules-systemjs`, `@chromatic-com/storybook`, `@testcontainers/redis`, `@testing-library/jest-dom`, `@tootallnate/once`, `actions/checkout`, `actions/github-script`, `actions/setup-node`, `ajv@6`, `basic-ftp`, `bn.js@4`, `brace-expansion@2`, `bullmq`, `chromatic`, `color-space`, `concurrently`, `cspell`, `diff`, `dotenv`, `fast-uri`, `flat-cache`, `form-data@2`, `google-github-actions/auth`, `google-github-actions/setup-gcloud`, `ioredis`, `js-yaml`, `jsdom`, `lucide-react`, `minimatch@9`, `openai`, `p-retry`, `picomatch@2`, `pino-http`, `pm2`, `pnpm`, `pnpm/action-setup`, `posthog-node`, `protobufjs`, `rate-limit-redis`, `react-day-picker`, `react-merge-refs`, `sonner`, `streetsidesoftware/cspell-action`, `syncpack`, `tailwind-merge`, `testcontainers`, `typescript`, `undici`)
- [ ] Lock file maintenance
- [ ] 🔐 **Create all awaiting schedule PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update dependency vitest to v4 [SECURITY]](../pull/728)

## Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (3)

express-server/Dockerfile (2)

- `node 25-slim`
- `node 25-slim`

next-client/Dockerfile (2)

- `docker.io/docker/dockerfile 1`
- `node 25-slim`

pipeline-worker/Dockerfile (2)

- `node 25-slim`
- `node 25-slim`

github-actions (12)

.github/workflows/chromatic.yml (4)

- `actions/checkout v4` → [Updates: `v7`]
- `pnpm/action-setup v4` → [Updates: `v6`]
- `actions/setup-node v4` → [Updates: `v7`]
- `chromaui/action latest`

.github/workflows/deploy-express-server-production.yml (3)

- `actions/checkout v3` → [Updates: `v7`]
- `google-github-actions/auth v2` → [Updates: `v3`]
- `google-github-actions/setup-gcloud v1` → [Updates: `v3`]

.github/workflows/deploy-express-server.yml (3)

- `actions/checkout v3` → [Updates: `v7`]
- `google-github-actions/auth v2` → [Updates: `v3`]
- `google-github-actions/setup-gcloud v1` → [Updates: `v3`]

.github/workflows/deploy-next-client-production.yml (3)

- `actions/checkout v3` → [Updates: `v7`]
- `google-github-actions/auth v2` → [Updates: `v3`]
- `google-github-actions/setup-gcloud v1` → [Updates: `v3`]

.github/workflows/deploy-next-client.yml (3)

- `actions/checkout v3` → [Updates: `v7`]
- `google-github-actions/auth v2` → [Updates: `v3`]
- `google-github-actions/setup-gcloud v1` → [Updates: `v3`]

.github/workflows/deploy-pipeline-worker-production.yml (3)

- `actions/checkout v3` → [Updates: `v7`]
- `google-github-actions/auth v2` → [Updates: `v3`]
- `google-github-actions/setup-gcloud v1` → [Updates: `v3`]

.github/workflows/deploy-pipeline-worker.yml (3)

- `actions/checkout v3` → [Updates: `v7`]
- `google-github-actions/auth v2` → [Updates: `v3`]
- `google-github-actions/setup-gcloud v1` → [Updates: `v3`]

.github/workflows/deps-audit.yml (4)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-node v4` → [Updates: `v7`]
- `pnpm/action-setup v4` → [Updates: `v6`]
- `node 24`

.github/workflows/ephemeral-cleanup.yml (7)

- `actions/checkout v4` → [Updates: `v7`]
- `google-github-actions/auth v2` → [Updates: `v3`]
- `google-github-actions/setup-gcloud v2` → [Updates: `v3`]
- `actions/checkout v4` → [Updates: `v7`]
- `google-github-actions/auth v2` → [Updates: `v3`]
- `google-github-actions/setup-gcloud v2` → [Updates: `v3`]
- `actions/github-script v7` → [Updates: `v9`]

.github/workflows/ephemeral-deploy.yml (4)

- `actions/checkout v4` → [Updates: `v7`]
- `google-github-actions/auth v2` → [Updates: `v3`]
- `google-github-actions/setup-gcloud v2` → [Updates: `v3`]
- `actions/github-script v7` → [Updates: `v9`]

.github/workflows/pr-validation.yml (3)

- `actions/checkout v4` → [Updates: `v7`]
- `pnpm/action-setup v4` → [Updates: `v6`]
- `actions/setup-node v4` → [Updates: `v7`]

.github/workflows/spell-check.yml (2)

- `actions/checkout v4` → [Updates: `v7`]
- `streetsidesoftware/cspell-action v6` → [Updates: `v9`]

npm (7)

common/package.json (13)

- `openai ^4.104.0` → [Updates: `^7.0.0`]
- `pino ^10.1.0` → [Updates: `^10.1.0`]
- `pino-pretty ^13.1.1`
- `posthog-js ^1.301.2` → [Updates: `^1.301.2`]
- `posthog-node ^4.18.0` → [Updates: `^5.0.0`]
- `sanitize-html ^2.17.0`
- `uuid ^14.0.0` → [Updates: `^14.0.0`]
- `weave ^0.11.0` → [Updates: `^0.16.0`]
- `zod ^4.2.1` → [Updates: `^4.2.1`]
- `@types/sanitize-html ^2.16.0`
- `@types/uuid ^10.0.0` → [Updates: `^11.0.0`]
- `tsx ^4.21.0` → [Updates: `^4.21.0`]
- `node >=24`

express-server/package.json (27)

- `@anthropic-ai/sdk ^0.93.0` → [Updates: `^0.125.0`]
- `@google-cloud/pubsub ^5.2.0` → [Updates: `^5.2.0`, `^6.0.0`]
- `@google-cloud/storage ^7.17.2` → [Updates: `^7.17.2`, `^8.0.0`]
- `p-retry ^6.2.1` → [Updates: `^8.0.0`]
- `bullmq ^5.30.1` → [Updates: `^5.30.1`, `^6.0.0`]
- `cors ^2.8.5`
- `csv-parser ^3.0.0`
- `dotenv ^16.4.7` → [Updates: `^17.0.0`]
- `express ^5.2.1`
- `express-rate-limit ^8.2.1` → [Updates: `^8.2.1`]
- `firebase-admin ^13.0.2` → [Updates: `^13.0.2`, `^14.0.0`]
- `helmet ^8.1.0` → [Updates: `^8.1.0`]
- `ioredis ^5.4.1` → [Updates: `^5.4.1`, `^6.0.0`]
- `node-fetch ^3.3.2`
- `openai ^6.10.0` → [Updates: `^6.10.0`, `^7.0.0`]
- `pino ^10.1.0` → [Updates: `^10.1.0`]
- `pino-http ^10.5.0` → [Updates: `^11.0.0`]
- `posthog-node ^4.18.0` → [Updates: `^5.0.0`]
- `rate-limit-redis ^4.2.2` → [Updates: `^6.0.0`]
- `tsx ^4.21.0` → [Updates: `^4.21.0`]
- `zod ^4.2.1` → [Updates: `^4.2.1`]
- `@types/cors ^2.8.17`
- `@types/express ^5.0.6`
- `@types/supertest ^6.0.3` → [Updates: `^7.0.0`]
- `nodemon ^3.1.0`
- `supertest ^7.1.4` → [Updates: `^7.1.4`]
- `node >=24`

next-client/package.json (68)

- `@radix-ui/react-alert-dialog ^1.1.2` → [Updates: `^1.1.2`]
- `@radix-ui/react-avatar ^1.1.2` → [Updates: `^1.1.2`]
- `@radix-ui/react-dialog ^1.1.6` → [Updates: `^1.1.6`]
- `@radix-ui/react-dropdown-menu ^2.1.4` → [Updates: `^2.1.4`]
- `@radix-ui/react-hover-card ^1.0.7` → [Updates: `^1.0.7`]
- `@radix-ui/react-progress ^1.1.0` → [Updates: `^1.1.0`]
- `@radix-ui/react-scroll-area ^1.2.3` → [Updates: `^1.2.3`]
- `@radix-ui/react-select ^2.0.0` → [Updates: `^2.0.0`]
- `@radix-ui/react-separator ^1.0.3` → [Updates: `^1.0.3`]
- `@radix-ui/react-slot ^1.2.4` → [Updates: `^1.2.4`]
- `@radix-ui/react-switch ^1.2.5` → [Updates: `^1.2.5`]
- `@radix-ui/react-tabs ^1.0.4` → [Updates: `^1.0.4`]
- `@tanstack/react-query ^5.90.12` → [Updates: `^5.90.12`]
- `@tanstack/react-query-devtools ^5.91.1` → [Updates: `^5.91.1`]
- `@tanstack/react-virtual ^3.13.13` → [Updates: `^3.13.13`]
- `@types/firebase ^2.4.32` → [Updates: `^3.0.0`]
- `@types/papaparse ^5.3.15`
- `class-variance-authority ^0.7.1`
- `clsx ^2.1.1`
- `cors ^2.8.5`
- `csv-parser ^3.0.0`
- `dotenv ^16.4.7` → [Updates: `^17.0.0`]
- `effect ^3.18.4` → [Updates: `^3.18.4`]
- `firebase ^11.1.0` → [Updates: `^12.0.0`]
- `http-errors ^2.0.0`
- `immer ^11.1.0` → [Updates: `^11.1.0`]
- `lucide-react ^0.562.0` → [Updates: `^0.577.0`, `^1.0.0`]
- `next ^16.3.0` → [Updates: `^16.3.0`]
- `next-themes ^0.4.6`
- `p-retry ^6.2.1` → [Updates: `^8.0.0`]
- `papaparse ^5.4.1` → [Updates: `^5.4.1`]
- `pino-pretty ^13.1.1`
- `posthog-js ^1.301.2` → [Updates: `^1.301.2`]
- `react ^19.2.3` → [Updates: `^19.2.3`]
- `react-day-picker ^9.14.0` → [Updates: `^10.0.0`]
- `react-dom ^19.2.3` → [Updates: `^19.2.3`]
- `react-merge-refs ^2.1.1` → [Updates: `^3.0.0`]
- `sonner ^1.5.0` → [Updates: `^2.0.0`]
- `tailwind-merge ^2.3.0` → [Updates: `^3.0.0`]
- `vaul ^1.1.2`
- `zod ^4.2.1` → [Updates: `^4.2.1`]
- `zustand ^5.0.9` → [Updates: `^5.0.9`]
- `@chromatic-com/storybook ^4.1.3` → [Updates: `^5.0.0`]
- `@next/bundle-analyzer ^16.3.0` → [Updates: `^16.3.0`]
- `@playwright/test ^1.56.1` → [Updates: `^1.56.1`]
- `@storybook/addon-docs ^10.0.0` → [Updates: `^10.0.0`]
- `@storybook/addon-onboarding ^10.0.0` → [Updates: `^10.0.0`]
- `@storybook/nextjs ^10.0.0` → [Updates: `^10.0.0`]
- `@storybook/react ^10.0.0` → [Updates: `^10.0.0`]
- `@tailwindcss/postcss ^4.1.18` → [Updates: `^4.1.18`]
- `@testing-library/jest-dom ^6.6.3` → [Updates: `^7.0.0`]
- `@testing-library/react ^16.3.0`
- `@types/cors ^2.8.17`
- `@types/express ^5.0.6`
- `@types/http-errors ^2.0.4`
- `@types/jsdom ^21.1.7` → [Updates: `^30.0.0`]
- `@types/react ^19.2.7` → [Updates: `^19.2.7`]
- `@types/react-dom ^19.2.3` → [Updates: `^19.2.3`]
- `autoprefixer ^10.4.19` → [Updates: `^10.4.19`]
- `chromatic ^11.28.2` → [Updates: `^18.0.0`]
- `esbuild ^0.28.0`
- `jsdom ^26.1.0` → [Updates: `^30.0.0`]
- `postcss ^8.4.38` → [Updates: `^8.4.38`]
- `storybook ^10.1.10` → [Updates: `^10.1.10`]
- `tailwindcss ^4.1.18` → [Updates: `^4.1.18`]
- `tw-animate-css ^1.4.0`
- `@rollup/rollup-linux-x64-gnu ^4.40.1` → [Updates: `^4.40.1`]
- `node >=24`

package.json (67)

- `@biomejs/biome ^2.3.10` → [Updates: `^2.3.10`]
- `@types/node ^22.10.0` → [Updates: `^22.10.0`]
- `concurrently ^9.1.0` → [Updates: `^10.0.0`]
- `cspell ^9.4.0` → [Updates: `^9.4.0`, `^10.0.0`]
- `husky ^9.0.11`
- `pm2 ^6.0.14` → [Updates: `^7.0.0`]
- `syncpack ^13.0.4` → [Updates: `^15.0.0`]
- `turbo ^2.6.3` → [Updates: `^2.6.3`]
- `typescript ^5.9.3` → [Updates: `^7.0.0`]
- `vitest ^3.1.2` → [Updates: `^4.0.0`]
- `node >=25`
- `pnpm 10.26.0` → [Updates: `10.34.5`, `12.4.1`]
- `color-normalize ^2.0.0`
- `color-space ^2.0.0` → [Updates: `^3.0.0`]
- `flat-cache ^4.0.1` → [Updates: `^6.0.0`]
- `@types/react ^19.2.7`
- `@types/react-dom ^19.2.3`
- `ajv@6 6.14.0` → [Updates: `6.15.0`, `8.20.0`]
- `ajv@8 8.20.0`
- `axios 1.19.0` → [Updates: `1.20.0`]
- `@babel/core 7.29.7` → [Updates: `8.0.5`]
- `@babel/plugin-transform-modules-systemjs 7.29.8` → [Updates: `8.0.1`]
- `basic-ftp 5.3.1` → [Updates: `6.2.1`]
- `bn.js@4 4.12.5` → [Updates: `5.2.5`]
- `bn.js@5 5.2.5`
- `body-parser 2.3.0`
- `brace-expansion@1 5.0.9`
- `brace-expansion@2 2.1.4` → [Updates: `5.0.9`]
- `brace-expansion@5 5.0.9`
- `diff 4.0.4` → [Updates: `9.0.0`]
- `esbuild 0.28.2`
- `fast-uri 3.1.6` → [Updates: `3.1.7`, `4.1.4`]
- `fast-xml-parser 5.7.0` → [Updates: `5.11.1`]
- `flatted 3.4.4`
- `follow-redirects 1.16.0`
- `form-data@2 2.5.6` → [Updates: `4.0.6`]
- `form-data@4 4.0.6`
- `@grpc/grpc-js@1.14 1.14.4`
- `@grpc/grpc-js@1.9 1.14.4`
- `ip-address 10.4.0` → [Updates: `10.7.0`]
- `js-yaml 4.3.2` → [Updates: `5.4.2`]
- `lodash 4.18.1`
- `minimatch@9 9.0.9` → [Updates: `10.2.6`]
- `node-forge 1.4.0`
- `@opentelemetry/core 2.8.0` → [Updates: `2.11.0`]
- `path-to-regexp 8.4.2`
- `picomatch@2 2.3.2` → [Updates: `4.0.7`]
- `picomatch@4 4.0.5` → [Updates: `4.0.7`]
- `postcss 8.5.26` → [Updates: `8.5.28`]
- `preact 10.29.8`
- `protobufjs 7.6.5` → [Updates: `7.6.6`, `8.8.0`]
- `@protobufjs/utf8 1.1.2`
- `qs 6.16.0`
- `rollup 4.62.4` → [Updates: `4.63.2`]
- `sanitize-html 2.17.7`
- `serialize-javascript 7.0.5` → [Updates: `7.1.1`]
- `shell-quote 1.9.0` → [Updates: `1.10.0`]
- `smol-toml 1.7.1` → [Updates: `1.8.0`]
- `systeminformation 5.33.1` → [Updates: `5.33.10`]
- `tmp 0.2.7`
- `@tootallnate/once 2.0.1` → [Updates: `3.0.1`]
- `undici 7.29.0` → [Updates: `7.29.1`, `8.10.2`]
- `uuid 14.0.1` → [Updates: `14.0.2`]
- `webpack 5.104.1` → [Updates: `5.110.3`]
- `websocket-driver 0.7.5`
- `ws@8 8.21.0` → [Updates: `8.21.3`]
- `yaml 2.9.0` → [Updates: `2.9.1`]

pipeline-worker/package.json (15)

- `@anthropic-ai/sdk ^0.93.0` → [Updates: `^0.125.0`]
- `@google-cloud/pubsub ^5.2.0` → [Updates: `^5.2.0`, `^6.0.0`]
- `@google-cloud/storage ^7.17.2` → [Updates: `^7.17.2`, `^8.0.0`]
- `dotenv ^16.4.7` → [Updates: `^17.0.0`]
- `effect ^3.18.4` → [Updates: `^3.18.4`]
- `firebase-admin ^13.0.2` → [Updates: `^13.0.2`, `^14.0.0`]
- `ioredis ^5.4.1` → [Updates: `^5.4.1`, `^6.0.0`]
- `openai ^6.10.0` → [Updates: `^6.10.0`, `^7.0.0`]
- `pino ^10.1.0` → [Updates: `^10.1.0`]
- `tsx ^4.21.0` → [Updates: `^4.21.0`]
- `weave ^0.11.0` → [Updates: `^0.16.0`]
- `zod ^4.2.1` → [Updates: `^4.2.1`]
- `@testcontainers/redis ^11.11.0` → [Updates: `^11.11.0`, `^12.0.0`]
- `testcontainers ^11.11.0` → [Updates: `^11.11.0`, `^12.0.0`]
- `node >=24`

pnpm-workspace.yaml

utils/package.json (11)

- `@google-cloud/storage ^7.17.2` → [Updates: `^7.17.2`, `^8.0.0`]
- `csv-parse ^7.0.0`
- `dotenv ^16.4.7` → [Updates: `^17.0.0`]
- `firebase-admin ^13.0.2` → [Updates: `^13.0.2`, `^14.0.0`]
- `fs-extra ^11.3.0`
- `uuid ^14.0.0` → [Updates: `^14.0.0`]
- `zod ^4.2.1` → [Updates: `^4.2.1`]
- `@types/csv-parse ^1.1.12`
- `@types/fs-extra ^11.0.4`
- `ts-node ^10.9.2`
- `tsx ^4.21.0` → [Updates: `^4.21.0`]

nvm (1)

.nvmrc (1)

- `node 25`

pip_requirements (1)

data-utils/requirements.txt (1)

- `openai >=1.0.0,<3.0.0` → [Updates: `>=3.13.0,<3.14.0`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository