Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/graasp/client).

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [react-mentions](https://redirect.github.com/signavio/react-mentions) |  |

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): update dependency yjs to v13.6.32
- [ ] chore(deps): update devdependencies (non-major) (patch) (`@eslint/eslintrc`, `@testing-library/user-event`, `@types/leaflet`, `@types/react`, `@types/react-dom`, `@vitest/coverage-v8`, `@vitest/ui`, `concurrently`)
- [ ] chore(deps): update pnpm to v11.1.3
- [ ] fix(deps): update dependency @graasp/sdk to v5.18.2
- [ ] fix(deps): update dependency i18next-browser-languagedetector to v8.2.1
- [ ] fix(deps): update dependency katex to v0.16.47
- [ ] fix(deps): update dependency papaparse to v5.5.4
- [ ] fix(deps): update dependency react-i18next to v16.0.1
- [ ] fix(deps): update dependency react-qr-code to v2.0.21
- [ ] fix(deps): update dependency react-toastify to v11.0.5
- [ ] fix(deps): update dependency recharts to v2.15.4
- [ ] fix(deps): update dependency uuid to v14.0.1
- [ ] fix(deps): update dependency zod to v3.24.4
- [ ] fix(deps): update mui (non-major) to v7.3.11 (`@mui/icons-material`, `@mui/material`)
- [ ] fix(deps): update react monorepo to v19.1.9 (`react`, `react-dom`)
- [ ] fix(deps): update tanstack-router monorepo to v1.136.18 (`@tanstack/react-router`, `@tanstack/router-devtools`, `@tanstack/zod-adapter`)
- [ ] chore(deps): update node.js to v24.19.0
- [ ] chore(deps): update pnpm to v11.21.0
- [ ] fix(deps): update dependency @fontsource-variable/nunito to v5.3.0
- [ ] fix(deps): update dependency @tanstack/react-query to v5.101.4
- [ ] fix(deps): update dependency date-fns to v4.4.0
- [ ] fix(deps): update dependency i18next to v25.10.10
- [ ] fix(deps): update dependency katex to v0.18.3
- [ ] fix(deps): update dependency lodash.orderby to v4.18.0
- [ ] fix(deps): update dependency lucide-react to v0.577.0
- [ ] fix(deps): update dependency react-hook-form to v7.85.0
- [ ] fix(deps): update dependency react-i18next to v16.6.6
- [ ] fix(deps): update dependency react-image-crop to v11.1.2
- [ ] fix(deps): update dependency react-intersection-observer to v9.16.0
- [ ] fix(deps): update dependency react-markdown to v9.1.0
- [ ] fix(deps): update dependency react-qr-code to v2.2.0
- [ ] fix(deps): update dependency react-quill-new to v3.8.3
- [ ] fix(deps): update dependency react-rnd to v10.5.3
- [ ] fix(deps): update dependency react-toastify to v11.1.0
- [ ] fix(deps): update dependency stylis to v4.4.0
- [ ] fix(deps): update dependency y-websocket to v3.1.0
- [ ] fix(deps): update dependency zod to v3.25.76
- [ ] fix(deps): update lexical monorepo to v0.49.0 (`@lexical/link`, `@lexical/react`, `@lexical/rich-text`, `@lexical/selection`, `@lexical/utils`, `@lexical/yjs`, `lexical`)
- [ ] fix(deps): update react monorepo to v19.2.8 (`react`, `react-dom`)
- [ ] fix(deps): update tanstack-router monorepo (minor) (`@tanstack/react-router`, `@tanstack/router-devtools`, `@tanstack/zod-adapter`)
- [ ] chore(deps): update actions/cache action to v6
- [ ] chore(deps): update actions/checkout action to v7
- [ ] chore(deps): update actions/deploy-pages action to v5
- [ ] chore(deps): update actions/upload-pages-artifact action to v5
- [ ] chore(deps): update commitlint monorepo to v21 (`@commitlint/cli`, `@commitlint/config-conventional`)
- [ ] chore(deps): update cypress-io/github-action action to v7
- [ ] chore(deps): update dependency @cypress/code-coverage to v4
- [ ] chore(deps): update dependency @eslint-react/eslint-plugin to v5
- [ ] chore(deps): update dependency @eslint/compat to v2
- [ ] chore(deps): update dependency @testing-library/jest-dom to v7
- [ ] chore(deps): update dependency @trivago/prettier-plugin-sort-imports to v6
- [ ] chore(deps): update dependency @vitejs/plugin-react to v6
- [ ] chore(deps): update dependency concurrently to v10
- [ ] chore(deps): update dependency env-cmd to v11
- [ ] chore(deps): update dependency eslint-import-resolver-typescript to v4
- [ ] chore(deps): update dependency eslint-plugin-react-hooks to v7
- [ ] chore(deps): update dependency globals to v17
- [ ] chore(deps): update dependency jose to v6
- [ ] chore(deps): update dependency nyc to v18
- [ ] chore(deps): update dependency typescript to v7
- [ ] chore(deps): update dependency vite-plugin-istanbul to v9
- [ ] chore(deps): update dependency vite-plugin-static-copy to v4
- [ ] chore(deps): update dependency vite-tsconfig-paths to v6
- [ ] chore(deps): update eslint monorepo to v10 (`@eslint/js`, `eslint`)
- [ ] chore(deps): update googleapis/release-please-action action to v5
- [ ] chore(deps): update jdx/mise-action action to v4
- [ ] chore(deps): update storybook monorepo to v10 (`@storybook/addon-a11y`, `@storybook/addon-docs`, `@storybook/addon-links`, `@storybook/addon-vitest`, `@storybook/react`, `@storybook/react-vite`, `eslint-plugin-storybook`, `storybook`)
- [ ] chore(deps): update vitest monorepo to v4 (`@vitest/coverage-v8`, `@vitest/ui`)
- [ ] fix(deps): update dependency i18next to v26
- [ ] fix(deps): update dependency i18next-fetch-backend to v8
- [ ] fix(deps): update dependency lucide-react to v1
- [ ] fix(deps): update dependency react-helmet-async to v3
- [ ] fix(deps): update dependency react-i18next to v17
- [ ] fix(deps): update dependency react-intersection-observer to v11
- [ ] fix(deps): update dependency react-leaflet-cluster to v4
- [ ] fix(deps): update dependency react-markdown to v10
- [ ] fix(deps): update dependency recharts to v3
- [ ] fix(deps): update dependency zod to v4
- [ ] fix(deps): update material-ui monorepo to v9 (`@mui/icons-material`, `@mui/material`)
- [ ] 🔐 **Create all awaiting schedule PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update dependency @vitest/browser to v3.2.5 [security]](../pull/1257)
- [ ] [chore(deps): update dependency vite to v7.3.5 [security]](../pull/1258)
- [ ] [chore(deps): update dependency vitest to v3.2.6 [security]](../pull/1247)
- [ ] [chore(deps): update dependency @hey-api/openapi-ts to v0.97.3 [security]](../pull/1259)
- [ ] [fix(deps): update dependency axios to v1.18.0 [security]](../pull/1246)
- [ ] [chore(deps): update devdependencies (non-major) (minor)](../pull/1144) (`@eslint/js`, `@tanstack/react-query-devtools`, `@tanstack/router-plugin`, `@types/node`, `@types/papaparse`, `@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`, `@vitejs/plugin-react`, `cypress`, `eslint`, `eslint-plugin-react-refresh`, `happy-dom`, `oxlint`, `playwright`, `prettier`, `vite-plugin-checker`, `vite-plugin-static-copy`)
- [ ] [fix(deps): update dependency @sentry/react to v10](../pull/1070)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [fix(deps): update dependency social-links to v1.15.1](../pull/841)
- [ ] [chore(deps): update dependency nock to v14](../pull/854)

## Detected Dependencies

dockerfile (1)

Dockerfile (2)

- `node 24.15.0-bookworm-slim` → [Updates: `24.19.0-bookworm-slim`]
- `joseluisq/static-web-server 2`

github-actions (5)

.github/workflows/auto-tag.yml (1)

- `graasp/graasp-deploy v1`

.github/workflows/deploy-storybook.yml (4)

- `actions/checkout v6` → [Updates: `v7`]
- `jdx/mise-action v3` → [Updates: `v4`]
- `actions/upload-pages-artifact v4` → [Updates: `v5`]
- `actions/deploy-pages v4` → [Updates: `v5`]

.github/workflows/deploy.yml (3)

- `actions/checkout v6` → [Updates: `v7`]
- `jdx/mise-action v3` → [Updates: `v4`]
- `getsentry/action-release v3`

.github/workflows/release-please.yml (3)

- `googleapis/release-please-action v4` → [Updates: `v5`]
- `actions/checkout v6` → [Updates: `v7`]
- `graasp/graasp-deploy v1`

.github/workflows/test.yml (8)

- `actions/checkout v6` → [Updates: `v7`]
- `jdx/mise-action v3` → [Updates: `v4`]
- `actions/checkout v6` → [Updates: `v7`]
- `jdx/mise-action v3` → [Updates: `v4`]
- `actions/cache v5` → [Updates: `v6`]
- `cypress-io/github-action v6` → [Updates: `v7.4.1`]
- `cypress-io/github-action v6` → [Updates: `v7.4.1`]
- `actions/upload-artifact v7`

mise (1)

mise.toml (1)

- `node 24`

npm (2)

package.json (144)

- `@air/react-drag-to-select 5.0.11`
- `@emotion/cache 11.14.0`
- `@emotion/react 11.14.0`
- `@emotion/styled 11.14.1`
- `@fontsource-variable/nunito 5.2.7` → [Updates: `5.3.0`]
- `@graasp/sdk 5.18.1` → [Updates: `5.18.2`]
- `@graasp/stylis-plugin-rtl 2.2.0`
- `@lexical/link 0.33.1` → [Updates: `0.49.0`]
- `@lexical/react 0.33.1` → [Updates: `0.49.0`]
- `@lexical/rich-text 0.33.1` → [Updates: `0.49.0`]
- `@lexical/selection 0.33.1` → [Updates: `0.49.0`]
- `@lexical/utils 0.33.1` → [Updates: `0.49.0`]
- `@lexical/yjs 0.33.1` → [Updates: `0.49.0`]
- `@mui/icons-material 7.3.10` → [Updates: `7.3.11`, `9.3.1`]
- `@mui/lab 7.0.0-beta.17`
- `@mui/material 7.3.10` → [Updates: `7.3.11`, `9.3.1`]
- `@sentry/react 9.47.1` → [Updates: `10.70.0`]
- `@tanstack/react-query 5.90.21` → [Updates: `5.101.4`]
- `@tanstack/react-router 1.136.8` → [Updates: `1.136.18`, `1.170.25`]
- `@tanstack/router-devtools 1.136.8` → [Updates: `1.136.18`, `1.167.1`]
- `@tanstack/zod-adapter 1.136.8` → [Updates: `1.136.18`, `1.167.0`]
- `axios 1.15.2` → [Updates: `1.18.0`]
- `date-fns 4.1.0` → [Updates: `4.4.0`]
- `http-status-codes 2.3.0`
- `i18n-iso-countries 7.14.0`
- `i18next 25.5.3` → [Updates: `25.10.10`, `26.3.6`]
- `i18next-browser-languagedetector 8.2.0` → [Updates: `8.2.1`]
- `i18next-fetch-backend 6.0.0` → [Updates: `8.0.0`]
- `interweave 13.1.1`
- `jwt-decode 4.0.0`
- `katex 0.16.22` → [Updates: `0.16.47`, `0.18.3`]
- `leaflet 1.9.4`
- `lexical 0.33.1` → [Updates: `0.49.0`]
- `lodash.countby 4.6.0`
- `lodash.debounce 4.0.8`
- `lodash.frompairs 4.0.1`
- `lodash.groupby 4.6.0`
- `lodash.orderby 4.6.0` → [Updates: `4.18.0`]
- `lodash.topairs 4.3.0`
- `lodash.truncate 4.4.2`
- `lucide-react 0.544.0` → [Updates: `0.577.0`, `1.31.0`]
- `papaparse 5.5.3` → [Updates: `5.5.4`]
- `prism-react-renderer 2.4.1`
- `react 19.1.1` → [Updates: `19.1.9`, `19.2.8`]
- `react-date-range 2.0.1`
- `react-dnd 16.0.1`
- `react-dnd-html5-backend 16.0.1`
- `react-dom 19.1.1` → [Updates: `19.1.9`, `19.2.8`]
- `react-fullscreen-crossbrowser 1.1.3`
- `react-helmet-async 2.0.5` → [Updates: `3.0.0`]
- `react-hook-form 7.54.2` → [Updates: `7.85.0`]
- `react-i18next 16.0.0` → [Updates: `16.0.1`, `16.6.6`, `17.0.11`]
- `react-image-crop 11.0.10` → [Updates: `11.1.2`]
- `react-intersection-observer 9.15.1` → [Updates: `9.16.0`, `11.0.0`]
- `react-leaflet 5.0.0`
- `react-leaflet-cluster 2.1.0` → [Updates: `4.1.3`]
- `react-markdown 9.0.3` → [Updates: `9.1.0`, `10.1.0`]
- `react-mentions 4.4.10`
- `react-qr-code 2.0.15` → [Updates: `2.0.21`, `2.2.0`]
- `react-quill-new 3.3.3` → [Updates: `3.8.3`]
- `react-rnd 10.4.14` → [Updates: `10.5.3`]
- `react-toastify 11.0.3` → [Updates: `11.0.5`, `11.1.0`]
- `recharts 2.15.1` → [Updates: `2.15.4`, `3.10.1`]
- `remark-breaks 4.0.0`
- `remark-gfm 4.0.1`
- `social-links 1.15.0` → [Updates: `1.15.1`]
- `stylis 4.3.6` → [Updates: `4.4.0`]
- `use-supercluster 1.2.0`
- `uuid 14.0.0` → [Updates: `14.0.1`]
- `y-websocket 3.0.0` → [Updates: `3.1.0`]
- `yjs ^13.6.27` → [Updates: `^13.6.27`]
- `zod 3.24.2` → [Updates: `3.24.4`, `3.25.76`, `4.4.3`]
- `@commitlint/cli 19.8.1` → [Updates: `21.2.1`]
- `@commitlint/config-conventional 19.8.1` → [Updates: `21.2.0`]
- `@cypress/code-coverage 3.14.7` → [Updates: `4.0.3`]
- `@eslint-react/eslint-plugin 1.53.1` → [Updates: `5.18.3`]
- `@eslint/compat 1.4.1` → [Updates: `2.1.0`]
- `@eslint/eslintrc 3.3.5` → [Updates: `3.3.6`]
- `@eslint/js 9.36.0` → [Updates: `9.39.5`, `10.0.1`]
- `@hey-api/openapi-ts 0.84.4` → [Updates: `0.97.3`]
- `@storybook/addon-a11y 9.1.20` → [Updates: `10.5.7`]
- `@storybook/addon-docs 9.1.20` → [Updates: `10.5.7`]
- `@storybook/addon-links 9.1.20` → [Updates: `10.5.7`]
- `@storybook/addon-vitest ^9.0.11` → [Updates: `^10.0.0`]
- `@storybook/react 9.1.20` → [Updates: `10.5.7`]
- `@storybook/react-vite 9.1.20` → [Updates: `10.5.7`]
- `@tanstack/react-query-devtools 5.90.2` → [Updates: `5.101.4`]
- `@tanstack/router-plugin 1.136.18` → [Updates: `1.168.29`]
- `@testing-library/dom 10.4.1`
- `@testing-library/jest-dom 6.9.1` → [Updates: `7.0.1`]
- `@testing-library/react 16.3.2`
- `@testing-library/user-event 14.6.1` → [Updates: `14.6.3`]
- `@trivago/prettier-plugin-sort-imports 5.2.2` → [Updates: `6.0.2`]
- `@types/leaflet 1.9.21` → [Updates: `1.9.22`]
- `@types/lodash.countby 4.6.9`
- `@types/lodash.debounce 4.0.9`
- `@types/lodash.frompairs 4.0.9`
- `@types/lodash.groupby 4.6.9`
- `@types/lodash.orderby 4.6.9`
- `@types/lodash.topairs 4.3.9`
- `@types/lodash.truncate 4.4.9`
- `@types/node 25.0.10` → [Updates: `25.9.5`]
- `@types/papaparse 5.3.16` → [Updates: `5.5.2`]
- `@types/react 19.2.14` → [Updates: `19.2.18`]
- `@types/react-dom 19.2.3` → [Updates: `19.2.4`]
- `@types/react-mentions 4.4.1`
- `@types/stylis 4.2.7`
- `@typescript-eslint/eslint-plugin 8.45.0` → [Updates: `8.66.0`]
- `@typescript-eslint/parser 8.45.0` → [Updates: `8.66.0`]
- `@vitejs/plugin-react 5.0.4` → [Updates: `5.2.0`, `6.0.5`]
- `@vitest/browser 3.2.4` → [Updates: `3.2.5`]
- `@vitest/coverage-v8 3.2.4` → [Updates: `3.2.7`, `4.1.10`]
- `@vitest/ui 3.2.4` → [Updates: `3.2.7`, `4.1.10`]
- `concurrently 9.2.1` → [Updates: `9.2.4`, `10.0.4`]
- `cypress 15.6.0` → [Updates: `15.20.0`]
- `env-cmd 10.1.0` → [Updates: `11.0.0`]
- `eslint 9.36.0` → [Updates: `9.39.5`, `10.8.1`]
- `eslint-config-prettier 10.1.8`
- `eslint-import-resolver-typescript 3.10.1` → [Updates: `4.4.5`]
- `eslint-plugin-import 2.32.0`
- `eslint-plugin-jsx-a11y 6.10.2`
- `eslint-plugin-react 7.37.5`
- `eslint-plugin-react-hooks 5.2.0` → [Updates: `7.1.1`]
- `eslint-plugin-react-refresh 0.4.26` → [Updates: `0.5.3`]
- `eslint-plugin-storybook 9.1.20` → [Updates: `10.5.7`]
- `globals 15.15.0` → [Updates: `17.9.0`]
- `happy-dom 20.8.9` → [Updates: `20.11.2`]
- `husky 9.1.7`
- `jose 5.10.0` → [Updates: `6.2.8`]
- `nock 13.5.6` → [Updates: `14.0.17`]
- `nyc 17.1.0` → [Updates: `18.0.0`]
- `oxlint 1.19.0` → [Updates: `1.78.0`]
- `playwright 1.55.1` → [Updates: `1.62.1`]
- `prettier 3.6.2` → [Updates: `3.9.6`]
- `storybook 9.1.20` → [Updates: `10.5.7`]
- `typescript 5.9.3` → [Updates: `7.0.2`]
- `vite 7.3.2` → [Updates: `7.3.5`]
- `vite-plugin-checker 0.11.0` → [Updates: `0.14.5`]
- `vite-plugin-istanbul 7.2.1` → [Updates: `9.0.1`]
- `vite-plugin-static-copy 3.1.6` → [Updates: `3.4.0`, `4.1.1`]
- `vite-tsconfig-paths 5.1.4` → [Updates: `6.1.1`]
- `vitest 3.2.4` → [Updates: `3.2.6`]
- `node >=24`
- `pnpm 11.1.2` → [Updates: `11.1.3`, `11.21.0`]

pnpm-workspace.yaml

renovate-config (1)

renovate.json

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository