Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/devsoc-unsw/notangles).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | `@types/react-window` |  |
| npm | [framer-motion](https://redirect.github.com/motiondivision/motion) |  |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update dependency @types/node to v24
- [ ] chore(deps): update dependency certifi to v2026
- [ ] chore(deps): update dependency eslint-config-prettier to v10
- [ ] chore(deps): update dependency eslint-plugin-react-hooks to v7
- [ ] chore(deps): update dependency eslint-plugin-simple-import-sort to v14
- [ ] chore(deps): update dependency globals to v17
- [ ] chore(deps): update dependency jsdom to v30
- [ ] chore(deps): update dependency pandas to v3
- [ ] chore(deps): update dependency prisma to v7
- [ ] chore(deps): update dependency pytz to v2026
- [ ] chore(deps): update dependency typescript to v7
- [ ] chore(deps): update dependency tzdata to v2026
- [ ] chore(deps): update dependency vite-tsconfig-paths to v6
- [ ] chore(deps): update eslint monorepo to v10 (`@eslint/js`, `eslint`)
- [ ] chore(deps): update pnpm to v12
- [ ] chore(deps): update postgres docker tag to v18
- [ ] fix(deps): update dependency @apollo/client to v4
- [ ] fix(deps): update dependency @nestjs/mapped-types to v12
- [ ] fix(deps): update dependency @nestjs/swagger to v12
- [ ] fix(deps): update dependency @prisma/client to v7
- [ ] fix(deps): update dependency colorizr to v5
- [ ] fix(deps): update dependency dotenv to v17
- [ ] fix(deps): update dependency framer-motion to v13
- [ ] fix(deps): update dependency google-protobuf to v4
- [ ] fix(deps): update dependency openid-client to v6
- [ ] fix(deps): update dependency react-router-dom to v7
- [ ] fix(deps): update dependency react-window to v2 (`react-window`, `@types/react-window`)
- [ ] fix(deps): update dependency web-vitals to v6
- [ ] fix(deps): update material-ui monorepo to v9 (`@mui/icons-material`, `@mui/material`, `@mui/system`, `@mui/x-date-pickers`)
- [ ] fix(deps): update nest monorepo to v12 (`@nestjs/cli`, `@nestjs/common`, `@nestjs/config`, `@nestjs/core`, `@nestjs/microservices`, `@nestjs/passport`, `@nestjs/platform-express`, `@nestjs/schematics`, `@nestjs/testing`)
- [ ] chore(deps): lock file maintenance
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update dependency postcss to v8.5.23 [security]](../pull/1147)
- [ ] [fix(deps): update dependency @grpc/grpc-js to v1.13.5 [security]](../pull/1162)
- [ ] [chore(deps): update dependency urllib3 to v2.7.0 [security]](../pull/1014)
- [ ] [chore(deps): update dependency vite to v7.3.5 [security]](../pull/1084)
- [ ] [fix(deps): update dependency protobufjs to v7.6.5 [security]](../pull/1150)
- [ ] [chore(deps): update dependency vitest to v4 [security]](../pull/1161)
- [ ] [fix(deps): replace dependency framer-motion with motion](../pull/1170)
- [ ] [fix(deps): update weekly minor & patch updates](../pull/883) (`@apollo/client`, `@eslint/js`, `@fontsource-variable/roboto-flex`, `@microsoft/clarity`, `@mui/icons-material`, `@mui/lab`, `@mui/material`, `@mui/system`, `@nestjs/common`, `@nestjs/core`, `@nestjs/mapped-types`, `@nestjs/microservices`, `@nestjs/platform-express`, `@nestjs/testing`, `@prisma/client`, `@quixo3/prisma-session-store`, `@tailwindcss/postcss`, `@tanstack/eslint-plugin-query`, `@types/express`, `@types/express-session`, `@types/node`, `@types/react`, `@uiw/react-color`, `@vitejs/plugin-react-swc`, `absl-py`, `autoprefixer`, `caddy`, `certifi`, `class-validator`, `colorizr`, `dayjs`, `dotenv`, `eslint`, `eslint-config-prettier`, `eslint-plugin-prettier`, `eslint-plugin-unused-imports`, `express-session`, `framer-motion`, `fuse.js`, `globals`, `grpc-tools`, `grpcio`, `ics`, `immutabledict`, `node`, `numpy`, `ortools`, `pandas`, `pnpm`, `prettier`, `prisma`, `python`, `react-router-dom`, `six`, `tailwind-merge`, `tailwindcss`, `ts-jest`, `ts-loader`, `typescript`, `typescript-eslint`, `tzdata`, `uuid`, `workbox-background-sync`, `workbox-broadcast-update`, `workbox-cacheable-response`, `workbox-core`, `workbox-expiration`, `workbox-google-analytics`, `workbox-navigation-preload`, `workbox-precaching`, `workbox-range-requests`, `workbox-routing`, `workbox-strategies`, `workbox-streams`)
- [ ] [chore(deps): update ci-actions to v7](../pull/1153) (`actions/checkout`, `actions/setup-node`, `actions/setup-python`)
- [ ] [chore(deps): update dependency @types/express to v5](../pull/896)
- [ ] [chore(deps): update dependency @vitejs/plugin-react-swc to v4](../pull/1043)
- [ ] [chore(deps): update dependency supertest to v7](../pull/873) (`supertest`, `@types/supertest`)
- [ ] [chore(deps): update jest monorepo to v30](../pull/1011) (`@types/jest`, `jest`)
- [ ] [chore(deps): update typescript-eslint monorepo to v8](../pull/982) (`@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`)
- [ ] [fix(deps): update dependency date-fns to v4](../pull/988)
- [ ] [fix(deps): update react monorepo with types to v19](../pull/922) (`@types/react`, `@types/react-dom`, `react`, `react-dom`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

docker-compose (1)

server/docker-compose.yaml (1)

- `postgres 17-alpine` → [Updates: `18-alpine`]

dockerfile (3)

auto_server/Dockerfile (1)

- `python 3.10.17-slim-bookworm`

client/Dockerfile (2)

- `node 24.15.0-alpine` → [Updates: `24.21.0-alpine`]
- `caddy 2.10.0-alpine` → [Updates: `2.11.4-alpine`]

server/Dockerfile (2)

- `node 24.15.0-alpine` → [Updates: `24.21.0-alpine`]
- `node 24.15.0-alpine` → [Updates: `24.21.0-alpine`]

github-actions (3)

.github/workflows/ci.yml (7)

- `actions/checkout v6` → [Updates: `v7`]
- `pnpm/action-setup v6`
- `actions/setup-node v6` → [Updates: `v7`]
- `actions/checkout v6` → [Updates: `v7`]
- `actions/setup-python v6` → [Updates: `v7`]
- `node 24`
- `python 3.10.4` → [Updates: `3.14.7`]

.github/workflows/docker-ci.yml (8)

- `actions/checkout v6` → [Updates: `v7`]
- `docker/setup-qemu-action v4`
- `docker/setup-buildx-action v4`
- `docker/build-push-action v7`
- `actions/checkout v6` → [Updates: `v7`]
- `docker/setup-qemu-action v4`
- `docker/setup-buildx-action v4`
- `docker/build-push-action v7`

.github/workflows/docker.yml (11)

- `actions/checkout v6` → [Updates: `v7`]
- `docker/setup-qemu-action v4`
- `docker/setup-buildx-action v4`
- `docker/login-action v4`
- `docker/build-push-action v7`
- `actions/checkout v6` → [Updates: `v7`]
- `docker/setup-qemu-action v4`
- `docker/setup-buildx-action v4`
- `docker/login-action v4`
- `docker/build-push-action v7`
- `devsoc-unsw/deployment-dispatch-action main`

npm (4)

client/package.json (76)

- `@apollo/client 3.13.8` → [Updates: `3.14.1`, `4.3.0`]
- `@emotion/react 11.14.0`
- `@emotion/styled 11.14.1`
- `@fontsource-variable/roboto-flex 5.2.6` → [Updates: `5.3.0`]
- `@hello-pangea/dnd 18.0.1`
- `@heroicons/react 2.2.0`
- `@microsoft/clarity 1.0.0` → [Updates: `1.0.2`]
- `@mui/icons-material 5.17.1` → [Updates: `5.18.0`, `9.4.0`]
- `@mui/lab 5.0.0-alpha.176` → [Updates: `5.0.0-alpha.177`]
- `@mui/material 5.17.1` → [Updates: `5.18.0`, `9.4.0`]
- `@mui/system 5.17.1` → [Updates: `5.18.0`, `9.4.0`]
- `@mui/x-date-pickers 6.20.2` → [Updates: `9.13.0`]
- `@uiw/react-color 2.7.1` → [Updates: `2.10.3`]
- `clsx 2.1.1`
- `colorizr 3.0.8` → [Updates: `3.0.9`, `5.1.1`]
- `date-fns 2.30.0` → [Updates: `4.4.0`]
- `dayjs 1.11.13` → [Updates: `1.11.23`]
- `file-saver 2.0.5`
- `framer-motion 12.23.3` → [Updates: `12.43.0`, `13.3.0`, `12.23.3`]
- `fuse.js 7.1.0` → [Updates: `7.5.0`]
- `ics 3.8.1` → [Updates: `3.12.0`]
- `is-base64 1.1.0`
- `lodash-es 4.18.1`
- `react 18.3.1` → [Updates: `19.3.0`]
- `react-dom 18.3.1` → [Updates: `19.3.0`]
- `react-router-dom 6.30.0` → [Updates: `6.30.6`, `7.18.3`]
- `react-transition-group 4.4.5`
- `react-window 1.8.11` → [Updates: `2.3.1`]
- `tailwind-merge 3.3.1` → [Updates: `3.7.0`]
- `uuid 14.0.0` → [Updates: `14.0.2`]
- `web-vitals 4.2.4` → [Updates: `6.2.2`]
- `workbox-background-sync 7.3.0` → [Updates: `7.4.1`]
- `workbox-broadcast-update 7.3.0` → [Updates: `7.4.1`]
- `workbox-cacheable-response 7.3.0` → [Updates: `7.4.1`]
- `workbox-core 7.3.0` → [Updates: `7.4.1`]
- `workbox-expiration 7.3.0` → [Updates: `7.4.1`]
- `workbox-google-analytics 7.3.0` → [Updates: `7.4.1`]
- `workbox-navigation-preload 7.3.0` → [Updates: `7.4.1`]
- `workbox-precaching 7.3.0` → [Updates: `7.4.1`]
- `workbox-range-requests 7.3.0` → [Updates: `7.4.1`]
- `workbox-routing 7.3.0` → [Updates: `7.4.1`]
- `workbox-strategies 7.3.0` → [Updates: `7.4.1`]
- `workbox-streams 7.3.0` → [Updates: `7.4.1`]
- `@eslint/js 9.31.0` → [Updates: `9.39.5`, `10.0.1`]
- `@tailwindcss/postcss 4.1.11` → [Updates: `4.3.3`]
- `@tanstack/eslint-plugin-query 5.83.1` → [Updates: `5.102.8`]
- `@types/file-saver 2.0.7`
- `@types/is-base64 1.1.3`
- `@types/lodash-es 4.17.12`
- `@types/node 22.15.30` → [Updates: `22.20.2`, `24.13.4`]
- `@types/react 18.3.20` → [Updates: `18.3.31`, `19.3.0`]
- `@types/react-dom 18.3.7` → [Updates: `19.3.0`]
- `@types/react-router-dom 5.3.3`
- `@types/react-transition-group 4.4.12`
- `@types/react-window 1.8.8` → [Updates: `2.0.0`]
- `@vitejs/plugin-react-swc 3.10.2` → [Updates: `3.11.0`, `4.3.3`]
- `autoprefixer 10.4.21` → [Updates: `10.6.0`]
- `eslint 9.31.0` → [Updates: `9.39.5`, `10.10.0`]
- `eslint-config-prettier 10.1.5` → [Updates: `10.1.8`]
- `eslint-plugin-prettier 5.5.1` → [Updates: `5.5.6`]
- `eslint-plugin-react 7.37.5`
- `eslint-plugin-react-hooks 5.2.0` → [Updates: `7.1.1`]
- `eslint-plugin-simple-import-sort 12.1.1` → [Updates: `14.0.0`]
- `eslint-plugin-unused-imports 4.1.4` → [Updates: `4.4.1`]
- `globals 16.3.0` → [Updates: `16.5.0`, `17.12.0`]
- `jsdom 26.1.0` → [Updates: `30.0.1`]
- `postcss 8.5.6` → [Updates: `8.5.23`]
- `prettier 3.6.2` → [Updates: `3.9.6`]
- `tailwindcss 4.1.11` → [Updates: `4.3.3`]
- `typescript 5.8.3` → [Updates: `5.9.3`, `7.0.2`]
- `typescript-eslint 8.37.0` → [Updates: `8.70.0`]
- `vite 7.1.5` → [Updates: `7.3.5`]
- `vite-bundle-visualizer 1.2.1`
- `vite-tsconfig-paths 5.1.4` → [Updates: `6.1.1`]
- `vitest 3.2.4` → [Updates: `4.1.11`]
- `pnpm 10.13.1+sha512.37ebf1a5c7a30d5fabe0c5df44ee8da4c965ca0c5af3dbab28c3a1681b70a256218d05c81c9c0dcf767ef6b8551eb5b960042b9ed4300c59242336377e01cfad` → [Updates: `10.34.5`, `12.4.1`]

client/pnpm-workspace.yaml

server/package.json (49)

- `@grpc/grpc-js 1.13.4` → [Updates: `1.13.5`]
- `@nestjs/common 10.4.17` → [Updates: `10.4.22`, `12.0.2`]
- `@nestjs/config 3.3.0` → [Updates: `12.0.0`]
- `@nestjs/core 11.1.18` → [Updates: `11.2.4`, `12.0.2`]
- `@nestjs/mapped-types 2.1.0` → [Updates: `2.1.1`, `12.0.0`]
- `@nestjs/microservices 11.1.19` → [Updates: `11.2.4`, `12.0.2`]
- `@nestjs/passport 10.0.3` → [Updates: `12.0.0`]
- `@nestjs/platform-express 10.4.17` → [Updates: `10.4.22`, `12.0.2`]
- `@nestjs/swagger 7.4.2` → [Updates: `12.0.1`]
- `@prisma/client 6.9.0` → [Updates: `6.19.3`, `7.10.0`]
- `@quixo3/prisma-session-store 3.1.13` → [Updates: `3.1.21`]
- `@types/express-session 1.18.2` → [Updates: `1.19.0`]
- `class-transformer 0.5.1`
- `class-validator 0.14.1` → [Updates: `0.15.1`]
- `dotenv 16.5.0` → [Updates: `16.6.1`, `17.4.2`]
- `express-session 1.18.1` → [Updates: `1.19.0`]
- `google-protobuf 3.21.4` → [Updates: `4.0.2`]
- `openid-client 5.7.1` → [Updates: `6.8.8`]
- `passport 0.7.0`
- `protobufjs 7.5.5` → [Updates: `7.6.5`]
- `reflect-metadata 0.2.2`
- `rxjs 7.8.2`
- `ts-protoc-gen 0.15.0`
- `uuid 14.0.0` → [Updates: `14.0.2`]
- `@nestjs/cli 10.4.9` → [Updates: `12.0.1`]
- `@nestjs/schematics 10.2.3` → [Updates: `12.0.2`]
- `@nestjs/testing 10.4.17` → [Updates: `10.4.22`, `12.0.2`]
- `@types/express 4.17.21` → [Updates: `4.17.25`, `5.0.6`]
- `@types/jest 29.5.14` → [Updates: `30.0.0`]
- `@types/node 22.15.3` → [Updates: `22.20.2`, `24.13.4`]
- `@types/supertest 6.0.3` → [Updates: `7.2.1`]
- `@typescript-eslint/eslint-plugin 6.21.0` → [Updates: `8.70.0`]
- `@typescript-eslint/parser 6.21.0` → [Updates: `8.70.0`]
- `eslint 8.57.1` → [Updates: `10.10.0`]
- `eslint-config-prettier 9.1.0` → [Updates: `9.1.2`, `10.1.8`]
- `eslint-plugin-prettier 5.4.1` → [Updates: `5.5.6`]
- `grpc-tools 1.13.0` → [Updates: `1.13.1`]
- `grpc_tools_node_protoc_ts 5.3.3`
- `jest 29.7.0` → [Updates: `30.5.1`]
- `prettier 3.5.3` → [Updates: `3.9.6`]
- `prisma 6.9.0` → [Updates: `6.19.3`, `7.10.0`]
- `source-map-support 0.5.21`
- `supertest 6.3.4` → [Updates: `7.2.2`]
- `ts-jest 29.3.4` → [Updates: `29.4.12`]
- `ts-loader 9.5.2` → [Updates: `9.6.2`]
- `ts-node 10.9.2`
- `tsconfig-paths 4.2.0`
- `typescript 5.8.3` → [Updates: `5.9.3`, `7.0.2`]
- `pnpm 10.12.1+sha512.f0dda8580f0ee9481c5c79a1d927b9164f2c478e90992ad268bbb2465a736984391d6333d2c327913578b2804af33474ca554ba29c04a8b13060a717675ae3ac` → [Updates: `10.34.5`, `12.4.1`]

server/pnpm-workspace.yaml

pip_requirements (1)

auto_server/requirements.txt (12)

- `absl-py ==2.1.0` → [Updates: `==2.5.0`]
- `certifi ==2025.1.31` → [Updates: `==2025.11.12`, `==2026.7.22`]
- `grpcio ==1.65.1` → [Updates: `==1.84.0`]
- `immutabledict ==4.2.0` → [Updates: `==4.3.1`]
- `numpy ==2.1.1` → [Updates: `==2.5.3`]
- `ortools ==9.10.4067` → [Updates: `==9.15.6755`]
- `pandas ==2.2.2` → [Updates: `==2.3.3`, `==3.0.5`]
- `python-dateutil ==2.9.0.post0`
- `pytz ==2025.2` → [Updates: `==2026.3.post1`]
- `six ==1.16.0` → [Updates: `==1.17.0`]
- `tzdata ==2025.2` → [Updates: `==2025.3`, `==2026.4`]
- `urllib3 ==2.2.2` → [Updates: `==2.7.0`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

This is an automated Renovate dashboard covering dependency files such as client/package.json, server/docker-compose.yaml, Dockerfiles, and .github/workflows/*.yml. Read the linked Renovate dashboard documentation first, then inspect the individual linked pull requests; there is no single change or completion criterion for this issue.

Written by the indexing model from the issue text.