Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/adobe/spacecat-api-service).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [package.json](https://redirect.github.com/IonicaBizau/pkg.json) |  |

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update dependency @xmldom/xmldom to v0.9.12 [security]](../pull/3185)
- [ ] [chore(deps): update dependency form-data to v4.0.6 [security]](../pull/3004)
- [ ] [fix(deps): update dependency js-yaml to v4.3.2 [security]](../pull/3137)
- [ ] [fix(deps): update adobe fixes](../pull/3008) (`@adobe/eslint-config-helix`, `@adobe/fetch`, `@adobe/helix-deploy`, `@adobe/helix-shared-bounce`, `@adobe/helix-universal`, `@adobe/helix-universal-devserver`, `@adobe/helix-universal-logger`, `@adobe/mysticat-shared-seo-client`, `@adobe/semantic-release-coralogix`, `@adobe/spacecat-shared-drs-client`, `@adobe/spacecat-shared-http-utils`, `@adobe/spacecat-shared-rum-api-client`)
- [ ] [fix(deps): update external fixes](../pull/2521) (`@aws-sdk/client-cloudfront`, `@aws-sdk/client-cloudwatch-logs`, `@aws-sdk/client-iam`, `@aws-sdk/client-lambda`, `@aws-sdk/client-s3`, `@aws-sdk/client-secrets-manager`, `@aws-sdk/client-sfn`, `@aws-sdk/client-sqs`, `@aws-sdk/client-ssm`, `@aws-sdk/client-sts`, `@aws-sdk/s3-request-presigner`, `@bufbuild/protobuf`, `@connectrpc/connect`, `@connectrpc/connect-node`, `@eslint/config-helpers`, `@langchain/langgraph`, `@redocly/cli`, `@slack/bolt`, `@slack/web-api`, `@types/node`, `csv`, `date-fns`, `electrodb`, `eslint`, `esmock`, `fuse.js`, `jose`, `jszip`, `lint-staged`, `mocha`, `mocha-multi-reporters`, `nock`, `node`, `semantic-release`, `sinon`, `tldts`, `tough-cookie`, `yaml`)
- [ ] [fix(deps): update external major (major)](../pull/2483) (`@semantic-release/changelog`, `@semantic-release/git`, `@slack/bolt`, `@slack/web-api`, `actions/checkout`, `actions/setup-node`, `adobe/mysticat-ci`, `c8`, `dynamo-db-local`, `mocha`, `node-html-parser`, `typescript`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

github-actions (7)

.github/workflows/ci.yaml (6)

- `adobe/mysticat-ci v3`
- `actions/checkout v6` → [Updates: `v7`]
- `adobe/mysticat-ci v1` → [Updates: `v3`]
- `actions/checkout v6` → [Updates: `v7`]
- `adobe/mysticat-ci v1` → [Updates: `v3`]
- `adobe/mysticat-ci v1` → [Updates: `v3`]

.github/workflows/cm-assess-pr.yaml (1)

- `adobe/mysticat-ci v3`

.github/workflows/e2e-tests.yaml (2)

- `actions/checkout v6` → [Updates: `v7`]
- `actions/setup-node v6` → [Updates: `v7`]

.github/workflows/pr-title.yaml (1)

- `amannn/action-semantic-pull-request v6`

.github/workflows/release-cm-audit.yaml (2)

- `actions/checkout v4` → [Updates: `v7`]
- `adobe/mysticat-ci v3`

.github/workflows/release-cm.yaml (2)

- `actions/checkout v4` → [Updates: `v7`]
- `adobe/mysticat-ci v3`

.github/workflows/semver-check.yaml (1)

- `adobe-rnd/github-semantic-release-comment-action master`

npm (2)

package.json (112)

- `@adobe/fetch 4.3.0` → [Updates: `4.3.1`]
- `@adobe/helix-shared-body-data 2.2.7`
- `@adobe/helix-shared-bounce 2.0.34` → [Updates: `2.0.35`]
- `@adobe/helix-shared-utils 3.0.2`
- `@adobe/helix-shared-wrap 2.0.2`
- `@adobe/helix-status 10.1.5`
- `@adobe/helix-universal-logger 3.0.29` → [Updates: `3.0.30`]
- `@adobe/mysticat-shared-seo-client 1.8.0` → [Updates: `1.8.1`]
- `@adobe/spacecat-helix-content-sdk 1.4.33`
- `@adobe/spacecat-shared-akamai-client 1.2.1`
- `@adobe/spacecat-shared-athena-client 1.11.0`
- `@adobe/spacecat-shared-brand-client 1.4.0`
- `@adobe/spacecat-shared-cloudflare-client 1.3.0`
- `@adobe/spacecat-shared-content-client 1.10.0`
- `@adobe/spacecat-shared-data-access 4.29.1`
- `@adobe/spacecat-shared-drs-client 1.14.0` → [Updates: `1.15.1`]
- `@adobe/spacecat-shared-gpt-client 1.7.1`
- `@adobe/spacecat-shared-http-utils 1.36.0` → [Updates: `1.37.0`]
- `@adobe/spacecat-shared-ims-client 1.16.0`
- `@adobe/spacecat-shared-launchdarkly-client 1.3.1`
- `@adobe/spacecat-shared-project-engine-client 1.23.0`
- `@adobe/spacecat-shared-rum-api-client 2.44.1` → [Updates: `2.45.0`]
- `@adobe/spacecat-shared-scrape-client 2.7.2`
- `@adobe/spacecat-shared-slack-client 1.7.2`
- `@adobe/spacecat-shared-ticket-client ^1.0.4`
- `@adobe/spacecat-shared-tier-client 1.6.3`
- `@adobe/spacecat-shared-tokowaka-client 1.24.0`
- `@adobe/spacecat-shared-user-manager-client 1.5.0`
- `@adobe/spacecat-shared-utils 1.126.0`
- `@adobe/spacecat-shared-vault-secrets 1.4.1`
- `@aws-sdk/client-cloudfront 3.1045.0` → [Updates: `3.1131.0`]
- `@aws-sdk/client-cloudwatch-logs 3.1045.0` → [Updates: `3.1131.0`]
- `@aws-sdk/client-iam 3.1045.0` → [Updates: `3.1131.0`]
- `@aws-sdk/client-lambda 3.1045.0` → [Updates: `3.1131.0`]
- `@aws-sdk/client-s3 3.1045.0` → [Updates: `3.1131.0`]
- `@aws-sdk/client-secrets-manager 3.1045.0` → [Updates: `3.1131.0`]
- `@aws-sdk/client-sfn 3.1045.0` → [Updates: `3.1131.0`]
- `@aws-sdk/client-sqs 3.1045.0` → [Updates: `3.1131.0`]
- `@aws-sdk/client-ssm 3.1045.0` → [Updates: `3.1131.0`]
- `@aws-sdk/client-sts 3.1045.0` → [Updates: `3.1131.0`]
- `@aws-sdk/s3-request-presigner 3.1045.0` → [Updates: `3.1131.0`]
- `@bufbuild/protobuf 2.7.0` → [Updates: `2.15.0`]
- `@connectrpc/connect ^2.1.1` → [Updates: `^2.1.1`]
- `@connectrpc/connect-node ^2.1.1` → [Updates: `^2.1.1`]
- `@langchain/core 0.3.80` → [Updates: `1.2.11`]
- `@langchain/langgraph 0.4.9` → [Updates: `0.4.10`, `1.4.15`]
- `@langchain/openai 0.6.17` → [Updates: `1.5.13`]
- `@octokit/rest 22.0.1`
- `@slack/bolt 4.7.2` → [Updates: `4.7.3`, `5.1.0`]
- `@slack/web-api 7.15.2` → [Updates: `7.19.0`, `8.1.1`]
- `busboy 1.6.0`
- `csv 6.5.1` → [Updates: `6.6.3`]
- `csv-writer 1.6.0`
- `date-fns 4.1.0` → [Updates: `4.4.0`]
- `exceljs ^4.4.0`
- `fuse.js 7.3.0` → [Updates: `7.5.0`]
- `iso-3166 ^4.4.0`
- `iso-639-3 3.0.1`
- `js-yaml 4.1.1` → [Updates: `4.3.2`]
- `node-html-parser 7.1.0` → [Updates: `9.0.4`]
- `package-lock.json ^1.0.0`
- `package.json ^2.0.1`
- `slack-block-builder 2.8.0`
- `tldts 7.0.30` → [Updates: `7.4.13`]
- `tough-cookie 6.0.1` → [Updates: `6.0.2`]
- `urijs 1.19.11`
- `world-countries 5.1.0`
- `zod 3.25.76`
- `@adobe/eslint-config-helix 3.0.29` → [Updates: `3.0.31`]
- `@adobe/helix-deploy 14.4.3` → [Updates: `14.4.6`]
- `@adobe/helix-universal 5.4.2` → [Updates: `5.4.3`]
- `@adobe/helix-universal-devserver 1.1.149` → [Updates: `1.1.150`]
- `@adobe/semantic-release-coralogix 1.1.41` → [Updates: `1.1.42`]
- `@adobe/semantic-release-skms-cmr 1.1.5`
- `@eslint/config-helpers 0.6.0` → [Updates: `0.7.0`]
- `@redocly/cli 2.30.4` → [Updates: `2.52.1`]
- `@semantic-release/changelog 6.0.3` → [Updates: `7.0.0`]
- `@semantic-release/exec 7.1.0`
- `@semantic-release/git 10.0.1` → [Updates: `11.0.1`]
- `@semantic-release/npm ^13.1.5`
- `@types/node 24.13.2` → [Updates: `24.13.4`]
- `@xmldom/xmldom 0.9.10` → [Updates: `0.9.12`]
- `ajv ^8.20.0`
- `ajv-formats ^3.0.1`
- `c8 ^11.0.0` → [Updates: `^12.0.0`]
- `chai 6.2.2`
- `chai-as-promised 8.0.2`
- `dotenv 17.4.2`
- `dynamo-db-local ^10.3.0` → [Updates: `^11.0.0`]
- `electrodb 3.9.0` → [Updates: `3.9.3`]
- `eslint 9.39.4` → [Updates: `9.39.5`]
- `esmock 2.7.4` → [Updates: `2.7.6`]
- `form-data 4.0.5` → [Updates: `4.0.6`]
- `husky 9.1.7`
- `jose ^6.1.3` → [Updates: `^6.1.3`]
- `jszip 3.10.1` → [Updates: `3.10.2`]
- `junit-report-builder 5.1.2`
- `lint-staged 17.0.4` → [Updates: `17.5.1`]
- `mocha 11.7.5` → [Updates: `11.8.0`, `12.0.1`]
- `mocha-multi-reporters 1.5.1` → [Updates: `1.5.2`]
- `mocha-suppress-logs 0.6.0`
- `nock 14.0.15` → [Updates: `14.0.17`]
- `nodemon 3.1.14`
- `semantic-release ^25.0.3` → [Updates: `^25.0.3`]
- `sinon 22.0.0` → [Updates: `22.1.0`]
- `sinon-chai 4.0.1`
- `typescript 6.0.3` → [Updates: `7.0.2`]
- `yaml 2.8.4` → [Updates: `2.9.1`]
- `mark.js ^8.11.1`
- `node >=24.0.0 <25.0.0`
- `npm >=10.9.0`
- `@adobe/fetch 4.3.0` → [Updates: `4.3.1`]

third-party/ai-seo-ts/package.json (1)

- `@bufbuild/protobuf 2.7.0` → [Updates: `2.15.0`]

nvm (1)

.nvmrc (1)

- `node 24.15.0` → [Updates: `24.21.0`]

renovate-config (1)

renovate.json5

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the Renovate Dependency Dashboard, package.json, .nvmrc, the listed .github/workflows files, and renovate.json5. Review the linked dependency pull requests and Renovate documentation first; this issue has no single requested change. Done would require resolving a clearly selected set of dependency or workflow updates and confirming the repository checks pass.

Written by the indexing model from the issue text.