Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/convos-chat/convos).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [querystring](https://redirect.github.com/Gozala/querystring) |  |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update dependency jsdom to v30
- [ ] chore(deps): update docker/login-action action to v4
- [ ] chore(deps): update docker/metadata-action action to v6
- [ ] chore(deps): update docker/setup-buildx-action action to v4
- [ ] chore(deps): update docker/setup-qemu-action action to v4
- [ ] chore(deps): update pnpm/action-setup action to v6
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update dependency js-cookie to v3.0.7 [security]](../pull/964)
- [ ] [fix(deps): update module github.com/go-chi/chi/v5 to v5.2.2 [security]](../pull/956)
- [ ] [chore(deps): update dependency lodash to v4.18.1 [security]](../pull/957)
- [ ] [chore(deps): update dependency qs to v6.15.2 [security]](../pull/958)
- [ ] [chore(deps): update dependency vite to ^6.4.3 [security]](../pull/959)
- [ ] [chore(deps): update module github.com/oapi-codegen/oapi-codegen/v2 to v2.7.1 [security]](../pull/970)
- [ ] [fix(deps): update module github.com/getkin/kin-openapi to v0.144.0 [security]](../pull/972)
- [ ] [fix(deps): update module golang.org/x/crypto to v0.52.0 [security]](../pull/968)
- [ ] [fix(deps): update module golang.org/x/net to v0.55.0 [security]](../pull/967)
- [ ] [chore(deps): update dependency svelte to v5 [security]](../pull/961)
- [ ] [chore(deps): update dependency vitest to v4 [security]](../pull/965)
- [ ] [fix(deps): update all non-major dependencies](../pull/916) (`@fortawesome/fontawesome-free`, `docker/login-action`, `docker/metadata-action`, `github.com/coreos/go-oidc/v3`, `github.com/ergochat/irc-go`, `github.com/go-ldap/ldap/v3`, `github.com/oapi-codegen/runtime`, `github.com/urfave/cli/v3`, `golang`, `golang.org/x/oauth2`, `golang.org/x/sys`)
- [ ] [chore(deps): update actions/checkout action to v7](../pull/973)
- [ ] [chore(deps): update actions/setup-go action to v7](../pull/974)
- [ ] [chore(deps): update actions/setup-node action to v7](../pull/975)
- [ ] [chore(deps): update actions/upload-artifact action to v7](../pull/976)
- [ ] [chore(deps): update dependency @fortawesome/fontawesome-free to v7](../pull/931)
- [ ] [chore(deps): update dependency @sveltejs/vite-plugin-svelte to v7](../pull/954)
- [ ] [chore(deps): update dependency eslint to v10](../pull/948)
- [ ] [chore(deps): update dependency eslint-plugin-svelte to v3](../pull/921)
- [ ] [chore(deps): update docker/build-push-action action to v7](../pull/952)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

dockerfile (1)

Dockerfile (2)

- `node 24-slim`
- `golang 1.26` → [Updates: `1.27`]

github-actions (3)

.github/workflows/alpha.yml (12)

- `actions/checkout v4` → [Updates: `v7`]
- `docker/login-action v3.3.0` → [Updates: `v3.7.0`, `v4.6.0`]
- `docker/setup-qemu-action v3` → [Updates: `v4`]
- `docker/setup-buildx-action v3` → [Updates: `v4`]
- `docker/metadata-action v5.5.1` → [Updates: `v5.10.0`, `v6.2.0`]
- `docker/build-push-action v5.4.0` → [Updates: `v7.3.0`]
- `actions/checkout v4` → [Updates: `v7`]
- `pnpm/action-setup v4` → [Updates: `v6`]
- `actions/setup-node v4` → [Updates: `v7`]
- `actions/setup-go v6` → [Updates: `v7`]
- `actions/upload-artifact v4` → [Updates: `v7`]
- `node 24`

.github/workflows/docker.yml (5)

- `actions/checkout v4` → [Updates: `v7`]
- `docker/login-action v3.3.0` → [Updates: `v3.7.0`, `v4.6.0`]
- `docker/setup-qemu-action v3` → [Updates: `v4`]
- `docker/setup-buildx-action v3` → [Updates: `v4`]
- `docker/build-push-action v5` → [Updates: `v7`]

.github/workflows/linux.yml (5)

- `actions/checkout v6` → [Updates: `v7`]
- `pnpm/action-setup v4` → [Updates: `v6`]
- `actions/checkout v6` → [Updates: `v7`]
- `actions/setup-go v6` → [Updates: `v7`]
- `golangci/golangci-lint-action v9`

gomod (1)

go.mod (19)

- `go 1.26.0`
- `github.com/SherClockHolmes/webpush-go v1.4.0`
- `github.com/coreos/go-oidc/v3 v3.17.0` → [Updates: `v3.21.0`]
- `github.com/ergochat/irc-go v0.6.0` → [Updates: `v0.7.0`]
- `github.com/getkin/kin-openapi v0.131.0` → [Updates: `v0.144.0`]
- `github.com/go-chi/chi/v5 v5.2.1` → [Updates: `v5.2.2`]
- `github.com/go-ldap/ldap/v3 v3.4.12` → [Updates: `v3.4.14`]
- `github.com/gorilla/sessions v1.4.0`
- `github.com/gorilla/websocket v1.5.3`
- `github.com/kelseyhightower/envconfig v1.4.0`
- `github.com/leonelquinteros/gotext v1.7.2`
- `github.com/oapi-codegen/runtime v1.1.1` → [Updates: `v1.7.0`]
- `github.com/urfave/cli/v3 v3.6.2` → [Updates: `v3.12.0`]
- `golang.org/x/crypto v0.47.0` → [Updates: `v0.52.0`]
- `golang.org/x/net v0.49.0` → [Updates: `v0.55.0`]
- `golang.org/x/oauth2 v0.35.0` → [Updates: `v0.37.0`]
- `golang.org/x/sys v0.41.0` → [Updates: `v0.48.0`]
- `gopkg.in/yaml.v3 v3.0.1`
- `github.com/oapi-codegen/oapi-codegen/v2 v2.4.1` → [Updates: `v2.7.1`]

npm (2)

package.json (18)

- `svelte-check ^4.0.0`
- `@fortawesome/fontawesome-free 6.6.0` → [Updates: `6.7.2`, `7.3.1`]
- `@sveltejs/vite-plugin-svelte ^3.0.0` → [Updates: `^7.0.0`]
- `eslint ^9.0.0` → [Updates: `^10.0.0`]
- `eslint-plugin-svelte ^2.34.0` → [Updates: `^3.0.0`]
- `highlight.js ^11.9.0`
- `js-cookie ^3.0.5` → [Updates: `^3.0.5`]
- `jsdoc ^4.0.2`
- `jsdom ^25.0.0` → [Updates: `^30.0.0`]
- `jsonhtmlify ^0.1.0`
- `lodash ^4.17.21` → [Updates: `^4.17.21`]
- `qs ^6.11.2` → [Updates: `^6.11.2`]
- `querystring ^0.2.1`
- `sass ^1.69.3`
- `svelte ^4.2.19` → [Updates: `^5.0.0`]
- `svelte-preprocess ^6.0.0`
- `vite ^5.0.0` → [Updates: `^6.4.3`]
- `vitest ^2.1.9` → [Updates: `^4.0.0`]

pnpm-workspace.yaml

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository