Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/immich-app/data.immich.app).

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [@octokit/webhooks-types](https://redirect.github.com/octokit/webhooks) |  |

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>

View abandoned dependencies (5)

| Datasource | Package | Last Updated |
|------------|------|-------------|
| github-actions | [cloudflare/pages-action](https://redirect.github.com/cloudflare/pages-action) | `2023-05-23` |
| npm | [@mdi/js](https://redirect.github.com/Templarian/MaterialDesign-JS) | `2023-12-27` |
| npm | [fetch-retry](https://redirect.github.com/jonbern/fetch-retry) | `2024-03-17` |
| npm | [tslib](https://redirect.github.com/Microsoft/tslib) | `2024-10-31` |
| npm | [uplot](https://redirect.github.com/leeoniya/uPlot) | `2025-03-14` |

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): update typescript-projects (`@aws-sdk/client-s3`, `svelte-highlight`, `wrangler`)

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update dependency @types/node to ^24.13.5

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update vitest monorepo to v5](../pull/405) (`@vitest/coverage-istanbul`, `vitest`)

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [chore(deps): update terraform cloudflare to v5](../pull/74)

## Detected Dependencies

github-actions (5)

.github/workflows/build.yml (11)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c`
- `1password/install-cli-action v4.1.0@1a3160d5e9de1ae0803eaa08a88746f5ae3daa50`
- `eLco/setup-terragrunt v1.0.4@d6093fd3d1e651013c072facb41d488602b85fbf`
- `opentofu/setup-opentofu v2.0.2@a1320f892987e89d278cc92dc5adc984fb93aca4`
- `cloudflare/pages-action v1.5.0@f0a1cd58cd66095dee69bfa18fa5efd1dde93bca`
- `immich-app/devtools sticky-comment-action-v1.0.0@0135acd12ad9f3369b94a2aa3c0ae8c835a4e926`

.github/workflows/destroy.yml (5)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `1password/install-cli-action v4.1.0@1a3160d5e9de1ae0803eaa08a88746f5ae3daa50`
- `eLco/setup-terragrunt v1.0.4@d6093fd3d1e651013c072facb41d488602b85fbf`
- `opentofu/setup-opentofu v2.0.2@a1320f892987e89d278cc92dc5adc984fb93aca4`
- `immich-app/devtools sticky-comment-action-v1.0.0@0135acd12ad9f3369b94a2aa3c0ae8c835a4e926`

.github/workflows/org-pr-require-conventional-commit.yml

.github/workflows/org-zizmor.yml

.github/workflows/test.yml (2)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020`

npm (2)

backend/package.json (31)

- `@aws-sdk/client-s3 ^3.633.0` → [Updates: `^3.633.0`]
- `@influxdata/influxdb-client ^1.34.0`
- `@octokit/auth-app ^8.0.0`
- `@octokit/graphql ^9.0.0`
- `fetch-retry ^6.0.0`
- `fflate ^0.8.2`
- `globals ^17.3.0`
- `itty-router ^5.0.18`
- `luxon ^3.5.0`
- `p-limit ^7.0.0`
- `@cloudflare/vitest-pool-workers ^0.22.0`
- `@cloudflare/workers-types ^5.0.0` → [Updates: `^5.0.0`]
- `@eslint/js ^10.0.1`
- `@octokit/types ^18.0.0`
- `@octokit/webhooks-types ^7.6.1`
- `@types/express ^5.0.0`
- `@types/luxon ^3.4.2`
- `@typescript-eslint/parser ^8.56.0`
- `@vitest/coverage-istanbul ^4.1.1` → [Updates: `^5.0.0`]
- `eslint ^10.0.0`
- `express ^5.0.0`
- `prettier-plugin-organize-imports ^4.0.0`
- `tsx ^4.17.0`
- `@typescript/native ^7.0.2`
- `typescript ^6.0.2`
- `typescript-eslint ^8.56.0`
- `vite-node ^6.0.0`
- `vite-plugin-node-polyfills ^0.28.0`
- `vitest ^4.1.1` → [Updates: `^5.0.0`]
- `wrangler ^4.0.0` → [Updates: `^4.0.0`]
- `node 24.21.0`

frontend/package.json (30)

- `@immich/ui ^0.89.0`
- `@mdi/js ^7.4.47`
- `luxon ^3.5.0`
- `simple-icons ^16.0.0` → [Updates: `^16.0.0`]
- `svelte-highlight ^7.8.4` → [Updates: `^7.8.4`]
- `uplot ^1.6.31`
- `@eslint/js ^10.0.1`
- `@sveltejs/adapter-static ^3.0.6`
- `@sveltejs/kit ^2.56.1`
- `@sveltejs/vite-plugin-svelte ^7.0.0`
- `@tailwindcss/vite ^4.2.2`
- `@types/eslint ^9.0.0`
- `@types/luxon ^3.4.2`
- `@types/node ^24.13.4` → [Updates: `^24.13.5`]
- `eslint ^10.0.0`
- `eslint-config-prettier ^10.0.0`
- `eslint-plugin-svelte ^3.15.0`
- `globals ^17.0.0`
- `postcss ^8.4.39`
- `prettier ^3.1.1` → [Updates: `^3.1.1`]
- `prettier-plugin-svelte ^4.0.0`
- `svelte ^5.1.5`
- `svelte-check ^4.0.0`
- `tailwindcss ^4.2.2`
- `tslib ^2.4.1`
- `@typescript/native ^7.0.2`
- `typescript ^6.0.2`
- `typescript-eslint ^8.56.0`
- `vite ^8.0.2`
- `vitest ^4.1.1` → [Updates: `^5.0.0`]

nvm (2)

backend/.nvmrc (1)

- `node 24.21.0`

frontend/.nvmrc (1)

- `node 24.21`

renovate-config (1)

renovate.json

terraform (7)

deployment/modules/cloudflare/backend/config.tf (2)

- `cloudflare 4.52.9` → [Updates: `5.25.0`]
- `hashicorp/terraform ~> 1.7`

deployment/modules/cloudflare/backend/providers.tf

deployment/modules/cloudflare/frontend/config.tf (2)

- `cloudflare 4.52.9` → [Updates: `5.25.0`]
- `hashicorp/terraform ~> 1.7`

deployment/modules/cloudflare/frontend/pages.tf

deployment/modules/cloudflare/frontend/providers.tf

deployment/modules/github/config.tf (2)

- `github ~> 6.0`
- `hashicorp/terraform ~> 1.7`

deployment/modules/github/providers.tf

terragrunt (3)

deployment/modules/cloudflare/backend/terragrunt.hcl

deployment/modules/cloudflare/frontend/terragrunt.hcl

deployment/modules/github/terragrunt.hcl

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the dependency entries in backend/package.json, frontend/package.json, .github/workflows/build.yml, and deployment/modules/cloudflare/backend/config.tf and frontend/config.tf. Review the Dependency Dashboard and linked Renovate pull requests 405 and 74 before choosing scope. Done is not defined in this issue, so confirm which dependency updates remain in scope and what checks must pass.

Written by the indexing model from the issue text.