Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/devsoc-unsw/circles).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [react-beautiful-dnd](https://redirect.github.com/atlassian/react-beautiful-dnd) |  |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update mypy (`mypy`, `mypy-extensions`)
- [ ] fix(deps): update weekly patch updates (`@antv/g6`, `@babel/core`, `@react-spring/web`, `@testing-library/user-event`, `@types/google.accounts`, `@types/node`, `@types/styled-components`, `dayjs`, `eslint-config-prettier`, `eslint-plugin-prettier`, `mongo`, `pandas`, `python-Levenshtein`, `python-dotenv`, `python-multipart`, `redis`, `types-paramiko`, `types-requests`, `zod`)
- [ ] chore(deps): update ci-actions (`caddy`, `python`)
- [ ] fix(deps): update weekly minor updates (`@ant-design/icons`, `@ant-design/plots`, `@reduxjs/toolkit`, `@rive-app/react-canvas`, `@tanstack/react-query`, `@testing-library/jest-dom`, `@testing-library/react`, `@vitejs/plugin-react`, `PyJWT`, `absl-py`, `annotated-types`, `antd`, `anyio`, `axios`, `certifi`, `cffi`, `charset-normalizer`, `click`, `dnspython`, `eslint-plugin-promise`, `fastapi`, `fastapi-limiter`, `framer-motion`, `hiredis`, `hypothesis`, `idna`, `immutabledict`, `iniconfig`, `less`, `packaging`, `pluggy`, `prettier`, `pydantic`, `pymongo`, `pytest`, `pytz`, `rapidfuzz`, `react-icons`, `react-redux`, `react-router-dom`, `react-tooltip`, `requests`, `selenium`, `six`, `starlette`, `styled-components`, `typescript`, `typing_extensions`, `use-debounce`, `uvicorn`, `vite`, `vite-plugin-checker`, `vite-plugin-svgr`, `watchfiles`)
- [ ] chore(deps): update ci-actions (major) (`actions/checkout`, `actions/setup-node`, `actions/setup-python`, `actions/upload-artifact`, `docker/build-push-action`, `docker/login-action`, `docker/setup-buildx-action`, `docker/setup-qemu-action`, `github/codeql-action`)
- [ ] chore(deps): update mongo docker tag to v8
- [ ] chore(deps): update testing-library monorepo (major) (`@testing-library/dom`, `@testing-library/jest-dom`, `@testing-library/react`)
- [ ] chore(deps): update typescript-eslint monorepo to v8 (`@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`)
- [ ] fix(deps): update dependency @ant-design/colors to v8
- [ ] fix(deps): update dependency @ant-design/icons to v6
- [ ] fix(deps): update dependency @antv/g6 to v5
- [ ] fix(deps): update dependency @react-spring/web to v10
- [ ] fix(deps): update dependency antd to v6
- [ ] fix(deps): update dependency framer-motion to v13
- [ ] fix(deps): update dependency react-router-dom to v7
- [ ] fix(deps): update dependency react-tooltip to v6
- [ ] fix(deps): update dependency zod to v4
- [ ] fix(deps): update react monorepo (major) (`eslint-plugin-react-hooks`, `react`, `react-dom`, `react-is`)
- [ ] chore(deps): lock file maintenance
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update dependency vitest to v4.1.11 [security]](../pull/1329)
- [ ] [chore(deps): update dependency pypdf to v6.16.1 [security]](../pull/1310)
- [ ] [chore(deps): update dependency cryptography to v50 [security]](../pull/1293)
- [ ] [chore(deps): update dependency eslint to v10](../pull/1302)
- [ ] [chore(deps): update dependency eslint-plugin-n to v18](../pull/1313)
- [ ] [chore(deps): update dependency eslint-plugin-simple-import-sort to v14](../pull/1314)
- [ ] [chore(deps): update dependency jsdom to v30](../pull/1315)
- [ ] [chore(deps): update dependency paramiko to v5](../pull/1327)
- [ ] [chore(deps): update dependency redis to v8](../pull/1317)
- [ ] [chore(deps): update dependency types-paramiko to v5](../pull/1318)
- [ ] [chore(deps): update dependency typescript to v7](../pull/1319)
- [ ] [chore(deps): update dependency tzdata to v2026](../pull/1320)
- [ ] [chore(deps): update dependency vite-plugin-svgr to v5](../pull/1321)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

docker-compose (1)

docker-compose.yaml (2)

- `mongo 6.0.14` → [Updates: `6.0.28`, `8.3.11`]
- `redis/redis-stack 7.2.0-v9`

dockerfile (4)

backend/dev.dockerfile (1)

- `python 3.12.3-slim` → [Updates: `3.14.7-slim`]

backend/production.dockerfile (1)

- `python 3.12.11-slim` → [Updates: `3.14.7-slim`]

frontend/dev.dockerfile

frontend/production.dockerfile (1)

- `caddy 2.10.0-alpine` → [Updates: `2.11.4-alpine`]

github-actions (7)

.github/actions/setup-ci-backend/action.yml (2)

- `actions/setup-python v4` → [Updates: `v7`]
- `python 3.12` → [Updates: `3.14`]

.github/actions/setup-ci-env/action.yml (2)

- `actions/setup-python v4` → [Updates: `v7`]
- `python 3.12` → [Updates: `3.14`]

.github/actions/setup-ci-frontend/action.yml (1)

- `actions/setup-node v4` → [Updates: `v7`]

.github/workflows/ci_test_reports.yml (1)

- `EnricoMi/publish-unit-test-result-action v2`

.github/workflows/ci.yml (10)

- `actions/upload-artifact v4` → [Updates: `v7`]
- `actions/checkout v4` → [Updates: `v7`]
- `actions/checkout v4` → [Updates: `v7`]
- `actions/checkout v4` → [Updates: `v7`]
- `actions/upload-artifact v4` → [Updates: `v7`]
- `actions/checkout v4` → [Updates: `v7`]
- `actions/checkout v4` → [Updates: `v7`]
- `actions/checkout v4` → [Updates: `v7`]
- `actions/upload-artifact v4` → [Updates: `v7`]
- `actions/checkout v4` → [Updates: `v7`]

.github/workflows/codeql.yml (3)

- `actions/checkout v3` → [Updates: `v7`]
- `github/codeql-action v2` → [Updates: `v4`]
- `github/codeql-action v2` → [Updates: `v4`]

.github/workflows/docker.yml (6)

- `actions/checkout v4` → [Updates: `v7`]
- `docker/setup-qemu-action v3` → [Updates: `v4`]
- `docker/setup-buildx-action v3` → [Updates: `v4`]
- `docker/login-action v3` → [Updates: `v4`]
- `docker/build-push-action v6` → [Updates: `v7`]
- `devsoc-unsw/deployment-dispatch-action main`

npm (1)

frontend/package.json (72)

- `@ant-design/colors 7.2.1` → [Updates: `8.0.1`]
- `@ant-design/icons 5.3.7` → [Updates: `5.6.1`, `6.3.4`]
- `@ant-design/plots 2.5.0` → [Updates: `2.6.8`]
- `@antv/algorithm 0.1.26`
- `@antv/g6 4.8.24` → [Updates: `4.8.25`, `5.1.1`]
- `@react-spring/web 9.7.3` → [Updates: `9.7.5`, `10.1.2`]
- `@reduxjs/toolkit 2.8.2` → [Updates: `2.12.0`]
- `@rive-app/react-canvas 4.21.4` → [Updates: `4.34.2`]
- `@tanstack/react-query 5.81.5` → [Updates: `5.102.8`]
- `@tippyjs/react 4.2.6`
- `antd 5.26.2` → [Updates: `5.29.3`, `6.6.4`]
- `axios 1.18.0` → [Updates: `1.20.0`]
- `dayjs 1.11.13` → [Updates: `1.11.23`]
- `fast-fuzzy 1.12.0`
- `framer-motion 11.0.20` → [Updates: `11.18.2`, `13.3.0`]
- `jwt-decode 4.0.0`
- `rc-picker 4.11.3`
- `react 18.3.1` → [Updates: `19.3.0`]
- `react-beautiful-dnd 13.1.1`
- `react-contexify 6.0.0`
- `react-dom 18.3.1` → [Updates: `19.3.0`]
- `react-helmet 6.1.0`
- `react-icons 5.5.0` → [Updates: `5.7.0`]
- `react-liquid-gauge 1.2.4`
- `react-redux 9.2.0` → [Updates: `9.3.0`]
- `react-router-dom 6.22.3` → [Updates: `6.30.6`, `7.18.3`]
- `react-scroll 1.9.3`
- `react-tooltip 5.29.1` → [Updates: `5.30.1`, `6.0.8`]
- `redux 5.0.1`
- `redux-persist 6.0.0`
- `redux-thunk 3.1.0`
- `styled-components 6.1.19` → [Updates: `6.5.3`]
- `use-debounce 10.0.5` → [Updates: `10.1.1`]
- `zod 3.25.67` → [Updates: `3.25.76`, `4.6.5`]
- `@babel/core 8.0.1` → [Updates: `8.0.5`]
- `@testing-library/dom 9.3.4` → [Updates: `10.4.2`]
- `@testing-library/jest-dom 6.6.3` → [Updates: `6.9.1`, `7.0.1`]
- `@testing-library/react 14.2.2` → [Updates: `14.3.1`, `16.3.3`]
- `@testing-library/user-event 14.6.1` → [Updates: `14.6.7`]
- `@types/google.accounts 0.0.14` → [Updates: `0.0.18`]
- `@types/jest 30.0.0`
- `@types/node 24.13.3` → [Updates: `24.13.4`]
- `@types/react-beautiful-dnd 13.1.8`
- `@types/react-helmet 6.1.11`
- `@types/react-scroll 1.8.10`
- `@types/styled-components 5.1.34` → [Updates: `5.1.36`]
- `@typescript-eslint/eslint-plugin 7.18.0` → [Updates: `8.70.0`]
- `@typescript-eslint/parser 7.18.0` → [Updates: `8.70.0`]
- `@vitejs/plugin-react 6.0.5` → [Updates: `6.1.1`]
- `axios-mock-adapter 2.1.0`
- `eslint ^8.57.1` → [Updates: `^10.0.0`]
- `eslint-config-airbnb 19.0.4`
- `eslint-config-airbnb-typescript 18.0.0`
- `eslint-config-prettier 10.1.5` → [Updates: `10.1.8`]
- `eslint-plugin-import 2.32.0`
- `eslint-plugin-jsx-a11y 6.10.2`
- `eslint-plugin-n 14.0.0` → [Updates: `18.3.0`]
- `eslint-plugin-prettier 5.5.1` → [Updates: `5.5.6`]
- `eslint-plugin-promise 7.2.1` → [Updates: `7.3.0`]
- `eslint-plugin-react 7.37.5`
- `eslint-plugin-react-hooks 4.6.2` → [Updates: `7.1.1`]
- `eslint-plugin-simple-import-sort 12.1.1` → [Updates: `14.0.0`]
- `jsdom 26.1.0` → [Updates: `30.0.1`]
- `less 4.3.0` → [Updates: `4.9.1`]
- `prettier 3.6.2` → [Updates: `3.9.6`]
- `react-is 18.3.1` → [Updates: `19.3.0`]
- `typescript 5.8.3` → [Updates: `5.9.3`, `7.0.2`]
- `vite ^8.0.0` → [Updates: `^8.0.0`]
- `vite-plugin-checker 0.9.3` → [Updates: `0.14.5`]
- `vite-plugin-eslint 1.8.1`
- `vite-plugin-svgr 4.3.0` → [Updates: `4.5.0`, `5.2.0`]
- `vitest 4.1.10` → [Updates: `4.1.11`]

pip_requirements (1)

backend/requirements.txt (55)

- `absl-py ==2.1.0` → [Updates: `==2.5.0`]
- `annotated-types ==0.7.0` → [Updates: `==0.8.0`]
- `anyio ==4.3.0` → [Updates: `==4.15.1`]
- `attrs ==26.1.0`
- `bcrypt ==5.0.0`
- `beautifulsoup4 ==4.15.0`
- `certifi ==2026.2.25` → [Updates: `==2026.7.22`]
- `cffi ==2.0.0` → [Updates: `==2.1.1`]
- `charset-normalizer ==3.3.2` → [Updates: `==3.5.1`]
- `click ==8.1.7` → [Updates: `==8.5.0`]
- `cryptography ==48.0.1` → [Updates: `==50.0.0`]
- `dnspython ==2.6.1` → [Updates: `==2.8.0`]
- `fastapi ==0.135.2` → [Updates: `==0.141.1`]
- `fastapi-limiter ==0.1.6` → [Updates: `==0.2.0`]
- `fuzzywuzzy ==0.18.0`
- `h11 ==0.16.0`
- `hiredis ==3.0.0` → [Updates: `==3.4.1`]
- `hypothesis ==6.61.0` → [Updates: `==6.168.0`]
- `idna ==3.15` → [Updates: `==3.19`]
- `immutabledict ==4.2.0` → [Updates: `==4.3.1`]
- `iniconfig ==2.0.0` → [Updates: `==2.3.0`]
- `mypy ==2.3.0` → [Updates: `==2.3.1`]
- `mypy-extensions ==1.0.0` → [Updates: `==1.1.0`]
- `ortools ==9.15.6755`
- `packaging ==26.0` → [Updates: `==26.3`]
- `pandas ==3.0.1` → [Updates: `==3.0.5`]
- `paramiko ==4.0.0` → [Updates: `==5.0.0`]
- `pluggy ==1.5.0` → [Updates: `==1.6.0`]
- `pycparser ==3.0`
- `pydantic ==2.12.5` → [Updates: `==2.13.5`]
- `PyJWT ==2.13.0` → [Updates: `==2.14.0`]
- `pymongo ==4.16.0` → [Updates: `==4.18.1`]
- `PyNaCl ==1.6.2`
- `pypdf ==6.14.2` → [Updates: `==6.16.1`]
- `pytest ==9.0.3` → [Updates: `==9.1.1`]
- `python-dateutil ==2.9.0.post0`
- `python-dotenv ==1.2.2` → [Updates: `==1.2.3`]
- `python-Levenshtein ==0.27.3` → [Updates: `==0.27.5`]
- `python-multipart ==0.0.31` → [Updates: `==0.0.32`]
- `pytz ==2026.1.post1` → [Updates: `==2026.3.post1`]
- `rapidfuzz ==3.9.0` → [Updates: `==3.14.6`]
- `redis ==7.4.0` → [Updates: `==7.4.1`, `==8.1.0`]
- `requests ==2.33.0` → [Updates: `==2.34.2`]
- `selenium ==4.46.0` → [Updates: `==4.49.0`]
- `six ==1.16.0` → [Updates: `==1.17.0`]
- `sniffio ==1.3.1`
- `sortedcontainers ==2.4.0`
- `starlette ==1.3.1` → [Updates: `==1.6.0`]
- `types-paramiko ==4.0.0.20260322` → [Updates: `==4.0.0.20260518`, `==5.0.0.20260724`]
- `types-requests ==2.33.0.20260327` → [Updates: `==2.33.0.20260906`]
- `typing_extensions ==4.15.0` → [Updates: `==4.16.0`]
- `tzdata ==2025.3` → [Updates: `==2026.4`]
- `urllib3 ==2.7.0`
- `uvicorn ==0.42.0` → [Updates: `==0.53.0`]
- `watchfiles ==1.1.1` → [Updates: `==1.2.0`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Review the Renovate dashboard and its linked pull requests first; dependency locations include frontend/package.json, Dockerfiles, docker-compose.yaml, .github/actions, and workflow files. This issue has no single implementation target, so a scoped update would need to be selected before completion can be defined.

Written by the indexing model from the issue text.