Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/DefGuard/proxy).

## Repository Problems

These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/DefGuard/proxy).

- ⚠️ WARN: Base branch does not exist - skipping

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (7)

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>
| Datasource | Package | Last Updated |
|------------|------|-------------|
| cargo | [dotenvy](https://redirect.github.com/allan2/dotenvy) | `2023-03-22` |
| cargo | [mime_guess](https://redirect.github.com/abonander/mime_guess) | `2024-06-29` |
| cargo | [tower_governor](https://redirect.github.com/benwis/tower-governor) | `2025-08-14` |
| npm | [change-case](https://redirect.github.com/blakeembrey/change-case) | `2024-04-03` |
| npm | [clsx](https://redirect.github.com/lukeed/clsx) | `2024-04-23` |
| npm | [qrcode.react](https://redirect.github.com/zpao/qrcode.react) | `2024-12-11` |
| npm | [react-markdown](https://redirect.github.com/remarkjs/react-markdown) | `2025-03-07` |

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] [Pin dependencies (dev)](../pull/373) (`debian`, `public.ecr.aws/docker/library/node`, `rust`)

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Security patches (dev)](../pull/387) (`pnpm`, `rustls`)
- [ ] [Update github actions (dev)](../pull/374) (`actions/checkout`, `actions/setup-node`, `aquasecurity/trivy-action`, `docker/build-push-action`, `docker/login-action`, `docker/metadata-action`, `docker/setup-buildx-action`, `dtolnay/rust-toolchain`, `mozilla-actions/sccache-action`, `pnpm/action-setup`, `shogo82148/actions-create-release`, `shogo82148/actions-upload-release-asset`, `taiki-e/install-action`)
- [ ] [Update frontend dependencies (dev)](../pull/375) (`@inlang/paraglide-js`, `@tanstack/devtools-vite`, `@tanstack/react-devtools`, `@tanstack/router-plugin`, `@types/lodash-es`, `@types/node`, `@types/qs`, `@types/react`, `@types/react-dom`, `@vitejs/plugin-react-swc`, `globals`, `prettier`, `sass`, `seroval`, `sharp`, `stylelint`, `stylelint-config-standard-scss`, `stylelint-scss`, `typescript`, `typescript-eslint`, `vite`, `vite-plugin-image-optimizer`, `vitest`)
- [ ] [Update rust dependencies (dev)](../pull/376) (`reqwest`, `tokio`)
- [ ] [Update actions/setup-node action to v7 (dev)](../pull/378)
- [ ] [Update frontend dependencies (dev) (major)](../pull/377) (`motion`, `typescript`, `vite`)
- [ ] [Lock file maintenance (dev)](../pull/380)
- [ ] [Lock file maintenance (dev)](../pull/381)
- [ ] [Security patches (stable/1.x)](../pull/350) (`ammonia`, `anyhow`, `axios`, `qs`, `sharp`, `vite`)
- [ ] [Security patches (stable/2.0.x)](../pull/391) (`pnpm`, `qs`, `sharp`)
- [ ] [Security patches (stable/2.x)](../pull/392) (`pnpm`, `sharp`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

Branch dev

cargo (1)

Cargo.toml (42)

- `defguard_certs b2bac0d3d70c2a6d7b18b9432a5fa1720c702bf3` → [Updates: ``]
- `defguard_grpc_tls b2bac0d3d70c2a6d7b18b9432a5fa1720c702bf3` → [Updates: ``]
- `defguard_version b2bac0d3d70c2a6d7b18b9432a5fa1720c702bf3` → [Updates: ``]
- `rustls-webpki 0.103`
- `rustls-pki-types 1`
- `axum 0.8`
- `axum-client-ip 1.3`
- `axum-extra 0.12`
- `axum-server 0.8`
- `cookie 0.18.1`
- `time 0.3`
- `tokio 1`
- `tokio-stream 0.1`
- `tower-http 0.7`
- `tracing 0.1`
- `tracing-subscriber 0.3`
- `log 0.4`
- `serde 1.0`
- `serde_json 1.0`
- `toml 1.0` → [Updates: `1.0`]
- `prost 0.14`
- `tonic 0.14`
- `tonic-prost 0.14`
- `thiserror 2.0`
- `anyhow 1.0`
- `clap 4.6` → [Updates: `4.6`]
- `dotenvy 0.15`
- `url 2.5`
- `tower_governor 0.8`
- `rust-embed 8.5`
- `mime_guess 2.0`
- `base64 0.23`
- `tower 0.5`
- `futures-util 0.3`
- `ammonia 4.1`
- `chrono 0.4`
- `rustls 0.23` → [Updates: `0.23`]
- `instant-acme 0.8`
- `reqwest 0.12` → [Updates: `0.13`]
- `tokio 1` → [Updates: `=1.53.1`]
- `tonic-prost-build 0.14`
- `vergen-git2 10.0`

dockerfile (1)

Dockerfile (3)

- `public.ecr.aws/docker/library/node 26-alpine` → [Updates: `26-alpine`]
- `rust 1` → [Updates: `1`]
- `debian 13-slim` → [Updates: `13-slim`]

github-actions (9)

.github/workflows/build-docker.yml (8)

- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee` → [Updates: `v4.6.0`]
- `docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5` → [Updates: `v4.3.0`]
- `docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf` → [Updates: `v7.3.0`]
- `aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8` → [Updates: `v0.36.0`]
- `sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6`
- `docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9` → [Updates: `v6.2.0`]
- `docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee` → [Updates: `v4.6.0`]

.github/workflows/lint-web.yml (4)

- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e` → [Updates: `v6.5.0`, `v7.0.0`]
- `pnpm/action-setup v6.0.9@008330803749db0355799c700092d9a85fd074e9` → [Updates: `v6.1.0`, `v6.0.9`]
- `node 26`

.github/workflows/publish-docker-latest.yml (3)

- `sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6`
- `docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee` → [Updates: `v4.6.0`]
- `docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5` → [Updates: `v4.3.0`]

.github/workflows/release.yml (30)

- `shogo82148/actions-create-release v1.9.0@6a396031bc74c57403da1018fec74d24c6aa03cd` → [Updates: `v1.9.1`]
- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e` → [Updates: `v6.5.0`, `v7.0.0`]
- `pnpm/action-setup v6.0.9@008330803749db0355799c700092d9a85fd074e9` → [Updates: `v6.1.0`, `v6.0.9`]
- `shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3` → [Updates: `v1.10.4`]
- `dtolnay/rust-toolchain stable@29eef336d9b2848a0b548edc03f92a220660cdb8` → [Updates: `stable`]
- `mozilla-actions/sccache-action v0.0.10@1583d6b38d7be47f593cb472781bbb21cab4321e` → [Updates: `v0.0.11`, `v0.0.10`]
- `defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c`
- `defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c`
- `defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c`
- `defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c`
- `defGuard/fpm-action main@ebb2575fbb892876fbdd326bb6d12524fbd7398c`
- `shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3` → [Updates: `v1.10.4`]
- `shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3` → [Updates: `v1.10.4`]
- `shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3` → [Updates: `v1.10.4`]
- `shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3` → [Updates: `v1.10.4`]
- `shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3` → [Updates: `v1.10.4`]
- `shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3` → [Updates: `v1.10.4`]
- `shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3` → [Updates: `v1.10.4`]
- `shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3` → [Updates: `v1.10.4`]
- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e` → [Updates: `v6.5.0`, `v7.0.0`]
- `pnpm/action-setup v6.0.9@008330803749db0355799c700092d9a85fd074e9` → [Updates: `v6.1.0`, `v6.0.9`]
- `dtolnay/rust-toolchain stable@29eef336d9b2848a0b548edc03f92a220660cdb8` → [Updates: `stable`]
- `shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3` → [Updates: `v1.10.4`]
- `node 26`
- `rust stable`
- `ubuntu 22.04` → [Updates: `26.04`, `22.04`]
- `node 26`
- `rust stable`

.github/workflows/sbom-regenerate.yml

.github/workflows/sbom.yml (6)

- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8` → [Updates: `v0.36.0`]
- `aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8` → [Updates: `v0.36.0`]
- `aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8` → [Updates: `v0.36.0`]
- `aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8` → [Updates: `v0.36.0`]
- `shogo82148/actions-upload-release-asset v1.10.2@394b3c11c3cfc038b5396ad265c074065cf875c3` → [Updates: `v1.10.4`]

.github/workflows/test-web.yml (4)

- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e` → [Updates: `v6.5.0`, `v7.0.0`]
- `pnpm/action-setup v6.0.9@008330803749db0355799c700092d9a85fd074e9` → [Updates: `v6.1.0`, `v6.0.9`]
- `node 26`

.github/workflows/test.yml (5)

- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `aquasecurity/trivy-action v0.36.0@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8` → [Updates: `v0.36.0`]
- `mozilla-actions/sccache-action v0.0.10@1583d6b38d7be47f593cb472781bbb21cab4321e` → [Updates: `v0.0.11`, `v0.0.10`]
- `taiki-e/install-action v2.82.2@9e1e5806d4a4822de933115878265be9aaa786d9` → [Updates: `v2.87.8`]
- `public.ecr.aws/docker/library/rust 1` → [Updates: `1`]

.github/workflows/update-repositories.yml (1)

- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]

npm (4)

package.json (2)

- `@tanstack/devtools-vite ^0.3.12` → [Updates: `0.3.12`, `^0.8.0`]
- `pnpm 11.9.0` → [Updates: `11.11.0`]

pnpm-workspace.yaml

web/package.json (47)

- `@axa-ch/react-polymorphic-types ^1.4.2`
- `@floating-ui/react ^0.27.20`
- `@inlang/paraglide-js ^2.25.0` → [Updates: `^2.25.0`]
- `@tanstack/react-devtools ^0.9.13` → [Updates: `^0.10.0`]
- `@tanstack/react-form ^1.33.5`
- `@tanstack/react-query ^5.102.8`
- `@tanstack/react-query-devtools ^5.102.8`
- `@tanstack/react-router ^1.170.33` → [Updates: `^1.170.33`]
- `@tanstack/react-router-devtools ^1.167.1` → [Updates: `^1.167.1`]
- `@uidotdev/usehooks ^2.4.1`
- `axios ^1.20.0`
- `change-case ^5.4.4`
- `clsx ^2.1.1`
- `dayjs ^1.11.23`
- `lodash-es ^4.18.1`
- `motion ^12.43.0` → [Updates: `^13.0.0`]
- `qrcode.react ^4.2.0`
- `qs ^6.16.0`
- `react ^19.2.8` → [Updates: `^19.2.8`]
- `react-dom ^19.2.8` → [Updates: `^19.2.8`]
- `react-markdown ^10.1.0`
- `rxjs ^7.8.2`
- `zod ^4.5.4` → [Updates: `^4.5.4`]
- `zustand ^5.0.15`
- `@biomejs/biome 2.5.12` → [Updates: `2.5.13`]
- `@inlang/paraglide-js 2.15.1` → [Updates: `2.25.0`]
- `@tanstack/devtools-vite ^0.5.5` → [Updates: `0.5.5`, `^0.8.0`]
- `@tanstack/router-plugin ^1.168.36` → [Updates: `1.168.36`]
- `@types/lodash-es ^4.17.12` → [Updates: `4.17.12`]
- `@types/node ^25.9.5` → [Updates: `25.9.5`]
- `@types/qs ^6.15.1` → [Updates: `6.15.1`]
- `@types/react ^19.2.18` → [Updates: `19.2.18`, `^19.3.0`]
- `@types/react-dom ^19.2.7` → [Updates: `19.2.7`, `^19.3.0`]
- `@vitejs/plugin-react-swc ^4.3.3` → [Updates: `4.3.3`]
- `globals ^17.12.0` → [Updates: `17.12.0`]
- `prettier ^3.9.6` → [Updates: `3.9.6`]
- `sass ^1.104.0` → [Updates: `1.104.0`]
- `sharp ^0.35.4` → [Updates: `0.35.4`]
- `stylelint ^17.15.0` → [Updates: `17.15.0`]
- `stylelint-config-standard-scss ^17.0.0` → [Updates: `17.0.0`]
- `stylelint-scss ^7.2.0` → [Updates: `7.2.0`]
- `typescript ~5.9.3` → [Updates: `5.9.3`, `~7.0.0`]
- `typescript-eslint ^8.69.0` → [Updates: `8.69.0`]
- `vite ^7.3.6` → [Updates: `7.3.6`, `^8.0.0`]
- `vite-plugin-image-optimizer ^2.0.3` → [Updates: `2.0.3`]
- `vitest ^5.0.0` → [Updates: `5.0.0`]
- `pnpm 11.9.0` → [Updates: `11.11.0`]

web/pnpm-workspace.yaml (1)

- `seroval 1.5.4` → [Updates: `1.6.5`]

nvm (1)

web/.nvmrc (1)

- `node v26`

renovate-config (1)

renovate.json

Branch stable/1.x

cargo (1)

Cargo.toml (2)

- `anyhow 1.0` → [Updates: `1.0`]
- `ammonia 4.1.1` → [Updates: `4.1.1`]

dockerfile (1)

Dockerfile

github-actions (7)

.github/workflows/build-docker.yml

.github/workflows/lint-web.yml

.github/workflows/release.yml

.github/workflows/sbom-regenerate.yml

.github/workflows/sbom.yml

.github/workflows/test.yml

.github/workflows/update-repositories.yml

npm (4)

package.json

pnpm-workspace.yaml

web/package.json (4)

- `axios ^1.15.0` → [Updates: `^1.15.0`]
- `qs ^6.15.1` → [Updates: `^6.15.1`]
- `sharp ^0.34.5` → [Updates: `^0.35.0`]
- `vite ^7.3.2` → [Updates: `^7.3.2`]

web/pnpm-workspace.yaml

Branch stable/2.0.x

cargo (1)

Cargo.toml

dockerfile (1)

Dockerfile

github-actions (8)

.github/workflows/build-docker.yml

.github/workflows/lint-web.yml

.github/workflows/publish-docker-latest.yml

.github/workflows/release.yml

.github/workflows/sbom-regenerate.yml

.github/workflows/sbom.yml

.github/workflows/test.yml

.github/workflows/update-repositories.yml

npm (4)

package.json (1)

- `pnpm 11.9.0` → [Updates: `11.11.0`]

pnpm-workspace.yaml

web/package.json (3)

- `qs ^6.15.3` → [Updates: `^6.15.3`]
- `sharp ^0.35.0` → [Updates: `^0.35.0`]
- `pnpm 11.9.0` → [Updates: `11.11.0`]

web/pnpm-workspace.yaml

renovate-config (1)

renovate.json

Branch stable/2.x

cargo (1)

Cargo.toml

dockerfile (1)

Dockerfile

github-actions (8)

.github/workflows/build-docker.yml

.github/workflows/lint-web.yml

.github/workflows/publish-docker-latest.yml

.github/workflows/release.yml

.github/workflows/sbom-regenerate.yml

.github/workflows/sbom.yml

.github/workflows/test.yml

.github/workflows/update-repositories.yml

npm (4)

package.json (1)

- `pnpm 11.9.0` → [Updates: `11.11.0`]

pnpm-workspace.yaml

web/package.json (2)

- `sharp ^0.35.0` → [Updates: `^0.35.0`]
- `pnpm 11.9.0` → [Updates: `11.11.0`]

web/pnpm-workspace.yaml

nvm (1)

web/.nvmrc

renovate-config (1)

renovate.json

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository