Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/element-hq/element-call).

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | `@types/pako` |  |

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] Update all non-major dependencies (`@playwright/test`, `@rolldown/plugin-babel`, `@types/node`, `@types/react`, `@types/react-dom`, `@typescript-eslint/utils`, `i18next`, `i18next-cli`, `livekit/livekit-server`, `oxfmt`, `oxlint`, `postcss`, `postcss-selector-parser`, `react`, `react-dom`, `sass`)
- [ ] Update dependency posthog-js to v1.429.1
- [ ] Update GitHub Actions (`actions/checkout`, `actions/setup-java`, `zizmorcore/zizmor-action`)
- [ ] Update plugin maven_publish to v0.37.0
- [ ] Update pnpm to v11.26.0
- [ ] Update dependency @codecov/vite-plugin to v2
- [ ] Update dependency @formatjs/intl-segmenter to v12
- [ ] Update dependency @livekit/track-processors>@mediapipe/tasks-vision to v1
- [ ] Update dependency @mediapipe/tasks-vision to v1
- [ ] Update dependency @sentry/react to v10
- [ ] Update dependency @sentry/vite-plugin to v5
- [ ] Update dependency @testing-library/jest-dom to v7
- [ ] Update dependency @types/sdp-transform to v3
- [ ] Update dependency copy-to-clipboard to v4
- [ ] Update dependency fetch-mock to v12
- [ ] Update dependency glob to v13
- [ ] Update dependency js-yaml to v5
- [ ] Update dependency jsdom to v30 (`jsdom`, `@types/jsdom`)
- [ ] Update dependency knip to v6
- [ ] Update dependency oxlint-tsgolint to v7
- [ ] Update dependency pako to v3 (`pako`, `@types/pako`)
- [ ] Update dependency postcss-preset-env to v11
- [ ] Update dependency react-i18next to v17
- [ ] Update dependency typescript to v7
- [ ] Update dependency undici to v8
- [ ] Update dependency vite-plugin-svgr to v5
- [ ] Update embedded package dependencies to v9 (`gradle`, `com.android.library`, `com.android.tools.build:gradle`)
- [ ] Update GitHub Actions (major) (`actions/checkout`, `actions/download-artifact`, `actions/github-script`, `actions/setup-java`, `actions/setup-node`, `actions/upload-artifact`, `docker/build-push-action`, `docker/login-action`, `docker/metadata-action`, `docker/setup-buildx-action`, `hashicorp/vault-action`, `nwtgck/actions-netlify`, `peter-evans/create-pull-request`, `softprops/action-gh-release`)
- [ ] Update pnpm to v12
- [ ] Update vitest monorepo to v5 (`@vitest/browser-playwright`, `@vitest/coverage-v8`, `@vitest/ui`, `vitest`)
- [ ] 🔐 **Create all awaiting schedule PRs at once** 🔐

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] Update ghcr.io/element-hq/synapse:develop Docker digest to 938a729
- [ ] Update nginx:latest Docker digest to e10899b
- [ ] Update dependency @vector-im/compound-design-tokens to v11

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update ghcr.io/element-hq/element-web:develop Docker digest to c76d299](../pull/4260)

## Detected Dependencies

docker-compose (3)

config/otel_dev/docker-compose.yaml

docker-compose-dev.yml (5)

- `ghcr.io/element-hq/lk-jwt-service 0.7.0`
- `ghcr.io/element-hq/lk-jwt-service 0.7.0`
- `livekit/livekit-server v1.13.4` → [Updates: `v1.13.6`]
- `livekit/livekit-server v1.13.4` → [Updates: `v1.13.6`]
- `nginx latest@sha256:4ae259ae64fbedb67918c07d167fdcb0e05855a1615480ca445bea485e7d65ff` → [Updates: `latest`]

docker-compose-playwright.yml (4)

- `ghcr.io/element-hq/synapse develop@sha256:337921fd22be310d453344b2265f6c9942315446595df3cf81866f71ca2055a7` → [Updates: `develop`]
- `ghcr.io/element-hq/synapse develop@sha256:337921fd22be310d453344b2265f6c9942315446595df3cf81866f71ca2055a7` → [Updates: `develop`]
- `ghcr.io/element-hq/element-web develop@sha256:1850bf66c2eab668aedfc48c280dbdeae3a03f0c59946b0631ffa0c97a3716ff` → [Updates: `develop`]
- `ghcr.io/element-hq/element-web develop@sha256:1850bf66c2eab668aedfc48c280dbdeae3a03f0c59946b0631ffa0c97a3716ff` → [Updates: `develop`]

dockerfile (1)

Dockerfile

github-actions (16)

.github/workflows/blocked.yaml (1)

- `actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b` → [Updates: `v9`]

.github/workflows/build-and-publish-docker.yaml (9)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093` → [Updates: `v8`]
- `docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9` → [Updates: `v4.6.0`]
- `tailscale/github-action v4@306e68a486fd2350f2bfc3b19fcd143891a4a2d8`
- `hashicorp/vault-action v3@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b` → [Updates: `v4`]
- `docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9` → [Updates: `v4`]
- `docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051` → [Updates: `v6.2.0`]
- `docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f` → [Updates: `v4.3.0`]
- `docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8` → [Updates: `v7.3.0`]

.github/workflows/build-element-call.yaml (3)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020` → [Updates: `v7`]
- `actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02` → [Updates: `v7`]

.github/workflows/build.yaml (4)

- `actions/github-script v6@d7906e4ad0b1822421a7e6a35d5ca353c962f410` → [Updates: `v9`]
- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020` → [Updates: `v7`]
- `actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02` → [Updates: `v7`]

.github/workflows/changelog-label.yml (1)

- `yogevbd/enforce-label-action 2.2.2@a3c219da6b8fa73f6ba62b68ff09c469b3a1c024`

.github/workflows/deploy-to-netlify.yaml (4)

- `bobheadxi/deployments v1@648679e8e4915b27893bd7dbc35cb504dc915bc8`
- `actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093` → [Updates: `v8`]
- `nwtgck/actions-netlify v3.0@4cbaf4c08f1a7bfa537d6113472ef4424e4eb654` → [Updates: `v4.0`]
- `bobheadxi/deployments v1@648679e8e4915b27893bd7dbc35cb504dc915bc8`

.github/workflows/lint.yaml (2)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020` → [Updates: `v7`]

.github/workflows/pr-deploy.yaml (1)

- `matrix-org/pr-details-action v1.3@15bde5285d7850ba276cc3bd8a03733e3f24622a`

.github/workflows/publish-embedded-packages.yaml (12)

- `actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093` → [Updates: `v8`]
- `softprops/action-gh-release v2@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65` → [Updates: `v3`]
- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093` → [Updates: `v8`]
- `actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020` → [Updates: `v7`]
- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093` → [Updates: `v8`]
- `actions/setup-java v4@c1e323688fd81a25caa38c78aa6df2d33d3e20d9` → [Updates: `v6`, `v4`]
- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093` → [Updates: `v8`]
- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `softprops/action-gh-release v2@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65` → [Updates: `v3`]

.github/workflows/publish.yaml (3)

- `actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093` → [Updates: `v8`]
- `softprops/action-gh-release v2@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65` → [Updates: `v3`]
- `softprops/action-gh-release v2@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65` → [Updates: `v3`]

.github/workflows/sync-labels.yml

.github/workflows/test-netlify.yaml (3)

- `actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c`
- `matrix-org/netlify-pr-preview v3@9805cd123fc9a7e421e35340a05e1ebc5dee46b5`
- `ubuntu 24.04`

.github/workflows/test.yaml (8)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020` → [Updates: `v7`]
- `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9`
- `codecov/codecov-action v7@fb8b3582c8e4def4969c97caa2f19720cb33a72f` → [Updates: `v7`]
- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020` → [Updates: `v7`]
- `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`

.github/workflows/translations-download.yaml (4)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020` → [Updates: `v7`]
- `localazy/download v1.1.0@0a79880fb66150601e3b43606fab69c88123c087`
- `peter-evans/create-pull-request v7.0.11@22a9089034f40e5a961c8808d113e2c98fb63676` → [Updates: `v8.1.1`]

.github/workflows/translations-upload.yaml (2)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `localazy/upload v1@27e6b5c0fddf4551596b42226b1c24124335d24a`

.github/workflows/zizmor.yml (2)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `zizmorcore/zizmor-action v0.5.7@192e21d79ab29983730a13d1382995c2307fbcaa` → [Updates: `v0.6.4`]

gradle (4)

embedded/android/gradle.properties

embedded/android/gradle/libs.versions.toml (3)

- `com.android.tools.build:gradle 8.13.2` → [Updates: `9.4.0`]
- `com.android.library 8.13.2` → [Updates: `9.4.0`]
- `com.vanniktech.maven.publish 0.36.0` → [Updates: `0.37.0`]

embedded/android/lib/build.gradle.kts

embedded/android/settings.gradle

gradle-wrapper (1)

embedded/android/gradle/wrapper/gradle-wrapper.properties (1)

- `gradle 8.14.5` → [Updates: `9.7.1`]

nodenv (1)

.node-version (1)

- `node 24`

npm (6)

component/package.json (3)

- `livekit-client ^2.18.1`
- `react ^19`
- `react-dom ^19`

component/pnpm-workspace.yaml

embedded/web/package.json

eslint/package.json

package.json (90)

- `@codecov/vite-plugin ^1.3.0` → [Updates: `^2.0.0`]
- `@fontsource/inconsolata ^5.1.0`
- `@fontsource/inter ^5.1.0`
- `@formatjs/intl-durationformat ^0.10.0` → [Updates: `^0.11.0`]
- `@formatjs/intl-segmenter ^11.7.3` → [Updates: `^12.0.0`]
- `@livekit/components-core ^0.12.0`
- `@livekit/components-react ^2.0.0`
- `@livekit/track-processors ^0.7.1` → [Updates: `^0.8.0`]
- `@mediapipe/tasks-vision ^0.10.18` → [Updates: `^1.0.0`]
- `@playwright/test ^1.60.0` → [Updates: `^1.60.0`]
- `@radix-ui/react-dialog ^1.0.4`
- `@radix-ui/react-slider ^1.1.2`
- `@radix-ui/react-visually-hidden ^1.0.3`
- `@react-spring/web ^10.0.0`
- `@rolldown/plugin-babel ^0.2.3` → [Updates: `^0.2.3`]
- `@sentry/react ^8.0.0` → [Updates: `^10.0.0`]
- `@sentry/vite-plugin ^3.0.0` → [Updates: `^5.0.0`]
- `@storybook/addon-docs ^10.3.6`
- `@storybook/addon-vitest ^10.3.6`
- `@storybook/react-vite ^10.3.6`
- `@testing-library/dom ^10.1.0` → [Updates: `^10.1.0`]
- `@testing-library/jest-dom ^6.6.3` → [Updates: `^7.0.0`]
- `@testing-library/react ^16.0.0`
- `@testing-library/user-event ^14.5.1`
- `@types/eslint ^9.6.1`
- `@types/grecaptcha ^3.0.9`
- `@types/jsdom ^21.1.7` → [Updates: `^30.0.0`]
- `@types/lodash-es ^4.17.12`
- `@types/node ^24.0.0` → [Updates: `^24.0.0`]
- `@types/pako ^2.0.3` → [Updates: `^3.0.0`]
- `@types/qrcode ^1.5.5`
- `@types/react ^19.0.0` → [Updates: `^19.0.0`]
- `@types/react-dom ^19.0.0` → [Updates: `^19.0.0`]
- `@types/sdp-transform ^2.4.5` → [Updates: `^3.0.0`]
- `@typescript-eslint/utils ^8.61.0` → [Updates: `^8.61.0`]
- `@use-gesture/react ^10.2.11`
- `@vector-im/compound-design-tokens ^10.0.0` → [Updates: `^11.0.0`]
- `@vector-im/compound-web ^10.0.0`
- `@vitejs/plugin-react ^6.0.2`
- `@vitest/browser-playwright ^4.1.5` → [Updates: `^5.0.0`]
- `@vitest/coverage-v8 ^4.0.18` → [Updates: `^5.0.0`]
- `@vitest/ui 4.1.11` → [Updates: `5.0.0`]
- `babel-plugin-react-compiler ^1.0.0`
- `classnames ^2.3.1`
- `copy-to-clipboard ^3.3.3` → [Updates: `^4.0.0`]
- `eslint-plugin-storybook ^10.3.6`
- `fetch-mock 11.1.5` → [Updates: `12.6.0`]
- `i18next ^26.0.0` → [Updates: `^26.0.0`]
- `i18next-browser-languagedetector ^8.0.0`
- `i18next-cli ^1.61.0` → [Updates: `^1.61.0`]
- `jsdom ^26.0.0` → [Updates: `^30.0.0`]
- `knip ^5.86.0` → [Updates: `^6.0.0`]
- `livekit-client ^2.18.1`
- `lodash-es ^4.17.21`
- `loglevel ^1.9.1`
- `matrix-widget-api ^1.18.0`
- `node-stdlib-browser ^1.3.1`
- `normalize.css ^8.0.1`
- `observable-hooks ^4.2.3`
- `oxfmt ^0.66.0` → [Updates: `^0.67.0`]
- `oxlint ^1.70.0` → [Updates: `^1.70.0`]
- `oxlint-tsgolint ^0.25.0` → [Updates: `^7.0.0`]
- `pako ^2.0.4` → [Updates: `^3.0.0`]
- `postcss ^8.4.41` → [Updates: `^8.4.41`]
- `postcss-preset-env ^10.0.0` → [Updates: `^11.0.0`]
- `postcss-selector-parser ^7.1.1` → [Updates: `^7.1.1`]
- `posthog-js 1.408.2` → [Updates: `1.429.1`]
- `qrcode ^1.5.4`
- `react 19` → [Updates: `19`]
- `react-dom 19` → [Updates: `19`]
- `react-i18next ^16.0.0 <16.7.0` → [Updates: `^16.0.0 <17.1.0`]
- `react-router-dom ^7.0.0`
- `react-use-measure ^2.1.1`
- `rxjs ^7.8.1`
- `sass ^1.42.1` → [Updates: `^1.42.1`]
- `storybook ^10.3.6`
- `typescript ^5.8.3` → [Updates: `^7.0.0`]
- `unique-names-generator ^4.6.0`
- `uuid ^14.0.0`
- `vaul ^1.0.0`
- `vite ^8.0.0` → [Updates: `^8.0.0`]
- `vite-plugin-generate-file ^0.3.0`
- `vite-plugin-html ^3.2.2`
- `vite-plugin-node-polyfills ^0.28.0`
- `vite-plugin-node-stdlib-browser ^0.2.1`
- `vite-plugin-svgr ^4.0.0` → [Updates: `^5.0.0`]
- `vite-plugin-wasm ^3.6.0`
- `vitest ^4.1.5` → [Updates: `^5.0.0`]
- `vitest-axe ^1.0.0-pre.3`
- `pnpm 11.21.0+sha512.521705bce689924eac72f5a3587122f362689ef6571e55ba80076fd637c11132ecffada26fad4ea79c485bfddbfd3d5a2a5b05805a77e893de71ec8a6cca3bb1` → [Updates: `11.26.0`, `12.4.0`]

pnpm-workspace.yaml (12)

- `@livekit/components-core>rxjs ^7.8.1`
- `@livekit/track-processors>@mediapipe/tasks-vision ^0.10.18` → [Updates: `^1.0.0`]
- `tar ^7.5.11`
- `minimatch ^10.2.3`
- `glob ^10.5.0` → [Updates: `^13.0.0`]
- `qs ^6.15.2`
- `js-yaml ^4.2.0` → [Updates: `^5.0.0`]
- `esbuild ^0.28.0`
- `undici ^6.27.0` → [Updates: `^8.0.0`]
- `flatted ^3.4.2`
- `ws ^8.21.0`
- `dompurify ^3.4.11`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

This is an automatically maintained Renovate dashboard rather than a scoped change. Start with the linked Dependency Dashboard documentation, then review the listed workflow files, Docker Compose files, Dockerfile, and dependency updates; completion is not defined because many unrelated updates are listed and one already has pull request 4260.

Written by the indexing model from the issue text.