Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/bcgov/common-hosted-workflow).

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update dependency pnpm to v11.26.0
- [ ] chore(deps): update dependency terraform to v1.16.1
- [ ] chore(deps): update linters (`@n8n/eslint-plugin-community-nodes`, `eslint`)
- [ ] chore(deps): update node runtime
- [ ] fix(deps): update node dependencies (`@egose/keycloak-fluent`, `@n8n/node-cli`, `@repo-toolkit/changelog`)
- [ ] chore(deps): update dependency @testing-library/jest-dom to v7
- [ ] chore(deps): update dependency @types/better-sqlite3 to v9
- [ ] chore(deps): update dependency jsdom to v30
- [ ] chore(deps): update dependency pnpm to v12
- [ ] chore(deps): update dependency pytest-asyncio to v1
- [ ] chore(deps): update dependency release-it to v21
- [ ] chore(deps): update dependency typescript to v7
- [ ] chore(deps): update grafana/mimir docker tag to v3
- [ ] chore(deps): update infrastructure updates (major) (`chrislusf/seaweedfs`, `grafana/grafana`, `grafana/mimir`, `grafana/tempo`, `redis`, `sysdig`)
- [ ] fix(deps): update dependency better-sqlite3 to v13
- [ ] fix(deps): update dependency markdown-it to v15
- [ ] fix(deps): update dependency redis to v6
- [ ] fix(deps): update dependency tesseract.js to v7
- [ ] chore(deps): lock file maintenance
- [ ] chore(deps): lock file maintenance
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update dependency helm to v4.3.0
- [ ] chore(deps): update ghcr.io/egose/bitnami-postgresql docker tag to v18.6
- [ ] chore(deps): update ghcr.io/egose/bitnami-redis docker tag to v8.10.1
- [ ] fix(deps): update dependency @mermaid-js/layout-elk to v1

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update dependency next to v16.3.3 [security]](../pull/491)
- [ ] [chore(deps): update dependency vitest to v4.1.11 [security]](../pull/492)
- [ ] [chore(deps): update dependency kubectl to v1.37.0](../pull/474)
- [ ] [chore(deps): update infrastructure updates](../pull/472) (`alloy`, `grafana/alloy`, `grafana/grafana`, `grafana/loki`, `hashicorp/terraform`, `n8nio/n8n`, `postgresql`, `seaweedfs`)
- [ ] [chore(deps): update n8nio/n8n docker tag to v2.38.4](../pull/473)
- [ ] [chore(deps): update n8nio/runners docker tag to v2.38.4](../pull/475)
- [ ] [chore(deps): update dependency @release-it/bumper to v8](../pull/482)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [chore(deps): update dependency eslint to v10](../pull/106)

## Detected Dependencies

asdf (1)

.tool-versions (6)

- `node 26.7.0` → [Updates: `26.8.1`]
- `python 3.14.7`
- `pnpm 11.22.0` → [Updates: `11.26.0`, `12.3.4`]
- `kubectl 1.36.3` → [Updates: `1.37.0`]
- `helm 4.2.4` → [Updates: `4.3.0`]
- `terraform 1.15.9` → [Updates: `1.16.1`]

docker-compose (2)

docker-compose/docker-compose.observability.yml (6)

- `chrislusf/seaweedfs 3.99` → [Updates: `4.45`]
- `grafana/mimir 2.17.11` → [Updates: `3.2.0`]
- `grafana/tempo 2.10.8` → [Updates: `3.0.3`]
- `grafana/grafana 12.4.9` → [Updates: `12.4.10`, `13.2.1`]
- `grafana/loki 3.7.6` → [Updates: `3.7.7`]
- `grafana/alloy v1.18.1` → [Updates: `v1.19.2`]

docker-compose/docker-compose.yml (2)

- `postgres 18.4-alpine3.22`
- `redis 8.10-alpine`

dockerfile (5)

dns-probe/Dockerfile (1)

- `python 3.14-alpine`

docker-compose/keycloak-provision/Dockerfile (2)

- `node 24.19.0-alpine3.23` → [Updates: `24.20.0-alpine3.23`]
- `node 24.19.0-alpine3.23` → [Updates: `24.20.0-alpine3.23`]

docker-compose/keycloak/Dockerfile (2)

- `golang 1.24.6-bullseye`
- `quay.io/keycloak/keycloak 26.4.7` → [Updates: `26.7.3`]

docker-compose/sdg-mock-app/Dockerfile (1)

- `node 24-alpine`

Dockerfile (4)

- `node 24.19.0-alpine3.23` → [Updates: `24.20.0-alpine3.23`]
- `node 24.19.0-alpine3.23` → [Updates: `24.20.0-alpine3.23`]
- `node 24.19.0-alpine3.23` → [Updates: `24.20.0-alpine3.23`]
- `n8nio/n8n 2.36.2` → [Updates: `2.38.4`]

github-actions (15)

.github/actions/setup-npm/action.yml

.github/actions/setup-tools/action.yml

.github/workflows/_build-and-push.yml (1)

- `ubuntu 24.04`

.github/workflows/_deploy.yml (1)

- `ubuntu 24.04`

.github/workflows/deploy-docs.yml (1)

- `ubuntu 24.04`

.github/workflows/deploy-prod.yml (1)

- `ubuntu 24.04`

.github/workflows/deploy-test.yml (1)

- `ubuntu 24.04`

.github/workflows/deploy-tools.yml (1)

- `ubuntu 24.04`

.github/workflows/docs-to-confluence.yml

.github/workflows/pre-commit-pr.yml (1)

- `ubuntu 24.04`

.github/workflows/pre-commit.yml (1)

- `ubuntu 24.04`

.github/workflows/release-tag-changelog.yml (1)

- `ubuntu 24.04`

.github/workflows/sysdig-terraform.yml (2)

- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/test.yml (1)

- `ubuntu 24.04`

.github/workflows/zap-scan.yml

helm-values (6)

helm/_dns-probe/values.yaml

helm/_mimir/values.yaml (1)

- `grafana/mimir 2.17.11` → [Updates: `3.2.0`]

helm/_n8n/values.yaml (2)

- `n8nio/n8n 2.35.3` → [Updates: `2.38.4`]
- `n8nio/runners 2.35.3` → [Updates: `2.38.4`]

helm/_pgo/values.yaml

helm/_sdg-mock-app/values.yaml

helm/main/values.yaml (4)

- `n8nio/runners 2.35.3` → [Updates: `2.38.4`]
- `ghcr.io/egose/bitnami-postgresql 18.1` → [Updates: `18.6`]
- `ghcr.io/egose/bitnami-redis 8.4.0` → [Updates: `8.10.1`]
- `grafana/mimir 2.17.11` → [Updates: `3.2.0`]

helmv3 (2)

helm/main/Chart.yaml (7)

- `postgresql 18.8.12` → [Updates: `18.8.17`]
- `redis 25.5.3` → [Updates: `28.0.15`]
- `backup-storage 0.1.18`
- `alloy 1.11.1` → [Updates: `1.12.1`]
- `loki 7.3.0`
- `tempo 1.24.4`
- `grafana 10.5.15`

helm/tools/Chart.yaml (1)

- `seaweedfs 4.42.0` → [Updates: `4.45.0`]

npm (14)

community-nodes/package.json (21)

- `image-size 2.0.2`
- `pdf-parse 2.4.5`
- `sanitize-html ^2.17.6`
- `tesseract.js 6.0.1` → [Updates: `7.0.0`]
- `zod ^4.4.3`
- `@eslint/js ^10.0.1`
- `@n8n/eslint-plugin-community-nodes ^0.29.0` → [Updates: `^0.31.0`]
- `@n8n/node-cli ^0.45.0` → [Updates: `^0.47.0`]
- `@types/node ^26.2.0`
- `@types/sanitize-html ^2.16.1`
- `eslint 10.8.1` → [Updates: `10.10.0`]
- `eslint-import-resolver-typescript ^4.4.5`
- `eslint-plugin-import-x ^4.17.1`
- `eslint-plugin-n8n-nodes-base 2.0.0`
- `n8n-core ^2.16.1`
- `n8n-nodes-base ^2.15.1`
- `n8n-workflow ^2.16.0`
- `typescript 6.0.3` → [Updates: `7.0.2`]
- `typescript-eslint ^8.67.0`
- `vitest ^4.1.10` → [Updates: `^4.1.10`]
- `n8n-workflow ^2.16.0`

community-nodes/pnpm-workspace.yaml

doc-site/package.json (17)

- `@docusaurus/core 3.10.2`
- `@docusaurus/plugin-client-redirects 3.10.2`
- `@docusaurus/preset-classic 3.10.2`
- `@docusaurus/theme-mermaid 3.10.2`
- `@easyops-cn/docusaurus-search-local ^0.55.2`
- `@mdx-js/react ^3.0.0`
- `@mermaid-js/layout-elk ^0.2.2` → [Updates: `^1.0.0`]
- `clsx ^2.0.0`
- `prism-react-renderer ^2.3.0`
- `react ^19.0.0`
- `react-dom ^19.0.0`
- `@docusaurus/module-type-aliases 3.10.2`
- `@docusaurus/tsconfig 3.10.2`
- `@docusaurus/types 3.10.2`
- `@types/react ^19.0.0`
- `typescript ~6.0.2` → [Updates: `~7.0.0`]
- `node >=20.0`

doc-site/pnpm-workspace.yaml

docker-compose/keycloak-provision/package.json (11)

- `@egose/keycloak-fluent ^0.11.0` → [Updates: `^0.14.0`]
- `wait-on ^9.0.6`
- `@eslint/js ^10.0.1`
- `@types/node ^25.6.2`
- `@types/wait-on ^5.3.4`
- `eslint 10.8.1` → [Updates: `10.10.0`]
- `eslint-config-prettier ^10.1.8`
- `rimraf ^6.1.3`
- `tsx ^4.21.0`
- `typescript ^6.0.3` → [Updates: `^7.0.0`]
- `typescript-eslint ^8.59.2`

docker-compose/keycloak-provision/pnpm-workspace.yaml

docker-compose/sdg-mock-app/package.json (17)

- `better-sqlite3 ^12.9.0` → [Updates: `^13.0.0`]
- `adaptivecards ^3.0.6`
- `markdown-it ^14.1.1` → [Updates: `^15.0.0`]
- `next ^16.2.6` → [Updates: `^16.2.6`]
- `react ^19.2.6`
- `react-dom ^19.2.6`
- `@eslint/eslintrc ^3.3.5`
- `@tailwindcss/postcss ^4.3.0`
- `@types/markdown-it ^14.1.2`
- `@types/better-sqlite3 ^7.6.13` → [Updates: `^9.0.0`]
- `@types/node ^25.6.2`
- `@types/react ^19.2.14`
- `@types/react-dom ^19.2.3`
- `eslint ^9.39.4` → [Updates: `^10.0.0`]
- `eslint-config-next ^16.2.6`
- `tailwindcss ^4.3.0`
- `typescript ^6.0.3` → [Updates: `^7.0.0`]

docker-compose/sdg-mock-app/pnpm-workspace.yaml

external-hooks/package.json (33)

- `axios ^1.18.1`
- `drizzle-orm ^0.45.2`
- `express ^5.2.1`
- `handlebars ^4.7.9`
- `html-to-text ^10.0.0`
- `jose ^6.2.4`
- `lodash-es ^4.18.1`
- `pg ^8.22.0`
- `redis ^5.12.1` → [Updates: `^6.0.0`]
- `sanitize-html ^2.17.6`
- `swagger-ui-express ^5.0.1`
- `zod ^4.4.3`
- `@eslint/js ^10.0.1`
- `@types/eslint-config-prettier ^6.11.3`
- `@types/express ^5.0.6`
- `@types/html-to-text ^9.0.4`
- `@types/lodash-es ^4.17.12`
- `@types/node ^25.9.5`
- `@types/pg ^8.20.0`
- `@types/swagger-ui-express ^4.1.8`
- `cross-env ^10.1.0`
- `dotenv ^17.4.2`
- `drizzle-kit ^0.31.10`
- `eslint 10.8.1` → [Updates: `10.10.0`]
- `eslint-config-prettier ^10.1.8`
- `fs-extra ^11.3.6`
- `rimraf ^6.1.3`
- `tsup ^8.5.1`
- `tsx ^4.23.1`
- `typescript ^6.0.3` → [Updates: `^7.0.0`]
- `typescript-eslint ^8.65.0`
- `vitest ^4.1.10` → [Updates: `^4.1.10`]
- `node >=20`

external-hooks/pnpm-workspace.yaml

external-ui/package.json (37)

- `@radix-ui/react-alert-dialog ^1.1.20`
- `@radix-ui/react-dialog ^1.1.20`
- `@radix-ui/react-label ^2.1.12`
- `@radix-ui/react-navigation-menu ^1.2.19`
- `@radix-ui/react-scroll-area ^1.2.15`
- `@radix-ui/react-separator ^1.1.12`
- `@radix-ui/react-slot ^1.3.0`
- `@tabler/icons-react ^3.45.0`
- `@tailwindcss/vite ^4.3.3`
- `@tanstack/react-query ^5.101.4`
- `axios ^1.18.1`
- `class-variance-authority ^0.7.1`
- `clsx ^2.1.1`
- `dompurify ^3.4.12`
- `react ^19.2.8`
- `react-dom ^19.2.8`
- `react-router ^8.0.0`
- `tailwind-merge ^3.6.0`
- `tailwindcss ^4.3.3`
- `valtio ^2.3.2`
- `@eslint/js ^10.0.1`
- `@testing-library/jest-dom ^6.9.1` → [Updates: `^7.0.0`]
- `@testing-library/react ^16.3.2`
- `@testing-library/user-event ^14.6.1`
- `@types/node ^25.9.5`
- `@types/react ^19.2.17`
- `@types/react-dom ^19.2.3`
- `@vitejs/plugin-react ^6.0.4`
- `eslint ^10.7.0`
- `eslint-plugin-react-hooks ^7.1.1`
- `eslint-plugin-react-refresh ^0.5.3`
- `globals ^17.7.0`
- `jsdom ^29.1.1` → [Updates: `^30.0.0`]
- `typescript ~6.0.3` → [Updates: `~7.0.0`]
- `typescript-eslint ^8.65.0`
- `vite ^8.1.5`
- `vitest ^4.1.10` → [Updates: `^4.1.10`]

external-ui/pnpm-workspace.yaml

package.json (13)

- `@commitlint/cli ^21.2.1`
- `@commitlint/config-conventional ^21.2.0`
- `@commitlint/format ^21.2.0`
- `@release-it/bumper ^7.0.6` → [Updates: `^8.0.0`]
- `@repo-toolkit/changelog ^0.20.0` → [Updates: `^0.25.0`]
- `@types/node ^25.9.5`
- `@types/sanitize-html ^2.16.1`
- `axios ^1.18.1`
- `fast-csv ^5.0.7`
- `pino ^10.3.1`
- `pino-pretty ^13.1.3`
- `prettier 4.0.0-alpha.13`
- `release-it ^20.2.1` → [Updates: `^21.0.0`]

pnpm-workspace.yaml

pip_requirements (3)

dns-probe/requirements-dev.txt (2)

- `pytest >=9.1.1,<9.1.2`
- `pytest-asyncio >=0.23.0,<1.0.0` → [Updates: `>=1.4.0,<1.5.0`]

dns-probe/requirements.txt (2)

- `fastapi >=0.115.0,<1.0.0`
- `uvicorn >=0.30.0,<1.0.0`

requirements.txt (3)

- `pre-commit ==4.6.2`
- `detect-secrets ==1.5.0`
- `black ==26.5.1`

renovate-config (1)

renovate.json

terraform (31)

terraform/openshift-deployer/b0c13b-dev-gold/config.tf (1)

- `hashicorp/terraform 1.15.8` → [Updates: `1.16.1`]

terraform/openshift-deployer/b0c13b-dev-gold/main.tf

terraform/openshift-deployer/b0c13b-dev-golddr/config.tf (1)

- `hashicorp/terraform 1.15.8` → [Updates: `1.16.1`]

terraform/openshift-deployer/b0c13b-dev-golddr/main.tf

terraform/openshift-deployer/b0c13b-prod-gold/config.tf (1)

- `hashicorp/terraform 1.15.8` → [Updates: `1.16.1`]

terraform/openshift-deployer/b0c13b-prod-gold/main.tf

terraform/openshift-deployer/b0c13b-prod-golddr/config.tf (1)

- `hashicorp/terraform 1.15.8` → [Updates: `1.16.1`]

terraform/openshift-deployer/b0c13b-prod-golddr/main.tf

terraform/openshift-deployer/b0c13b-test-gold/config.tf (1)

- `hashicorp/terraform 1.15.8` → [Updates: `1.16.1`]

terraform/openshift-deployer/b0c13b-test-gold/main.tf

terraform/openshift-deployer/b0c13b-test-golddr/config.tf (1)

- `hashicorp/terraform 1.15.8` → [Updates: `1.16.1`]

terraform/openshift-deployer/b0c13b-test-golddr/main.tf

terraform/openshift-deployer/b0c13b-tools-gold/config.tf (1)

- `hashicorp/terraform ~> 1.15`

terraform/openshift-deployer/b0c13b-tools-gold/main.tf

terraform/openshift-deployer/c89a45-dev-gold/config.tf (1)

- `hashicorp/terraform 1.15.8` → [Updates: `1.16.1`]

terraform/openshift-deployer/c89a45-dev-gold/main.tf

terraform/openshift-deployer/c89a45-dev-golddr/config.tf (1)

- `hashicorp/terraform 1.15.8` → [Updates: `1.16.1`]

terraform/openshift-deployer/c89a45-dev-golddr/main.tf

terraform/openshift-deployer/c89a45-prod-gold/config.tf (1)

- `hashicorp/terraform 1.15.8` → [Updates: `1.16.1`]

terraform/openshift-deployer/c89a45-prod-gold/main.tf

terraform/openshift-deployer/c89a45-prod-golddr/config.tf (1)

- `hashicorp/terraform 1.15.8` → [Updates: `1.16.1`]

terraform/openshift-deployer/c89a45-prod-golddr/main.tf

terraform/openshift-deployer/c89a45-test-gold/config.tf (1)

- `hashicorp/terraform 1.15.8` → [Updates: `1.16.1`]

terraform/openshift-deployer/c89a45-test-gold/main.tf

terraform/openshift-deployer/c89a45-test-golddr/config.tf (1)

- `hashicorp/terraform 1.15.8` → [Updates: `1.16.1`]

terraform/openshift-deployer/c89a45-test-golddr/main.tf

terraform/openshift-deployer/c89a45-tools-gold/config.tf (1)

- `hashicorp/terraform 1.15.8` → [Updates: `1.16.1`]

terraform/openshift-deployer/c89a45-tools-gold/main.tf

terraform/sysdig/_module/main.tf (1)

- `sysdig ~> 1.0` → [Updates: `~> 3.0`]

terraform/sysdig/b0c13b/config.tf (2)

- `sysdig ~> 1.0` → [Updates: `~> 3.0`]
- `hashicorp/terraform ~> 1.15`

terraform/sysdig/b0c13b/main.tf

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

This is a Renovate-generated dashboard spanning .tool-versions, Dockerfiles, Helm charts, GitHub workflows, and multiple package.json files, with several updates already linked to pull requests. Start by reviewing one listed dependency and its linked PR, then run the relevant checks; done means the selected update is applied and its checks pass.

Written by the indexing model from the issue text.