Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/loopbackio/loopback-next).

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [@cloudnative/health](https://redirect.github.com/CloudNativeJS/cloud-health) |  |
| npm | [@lerna/project](https://redirect.github.com/lerna/lerna) |  |
| npm | `@types/uuid` |  |
| npm | `@types/yeoman-environment` |  |
| npm | `@types/yeoman-generator` |  |
| npm | [prom-client](https://redirect.github.com/siimon/prom-client) |  |
| npm | [viz.js](https://redirect.github.com/mdaines/viz.js) |  |
| npm | [yeoman-assert](https://redirect.github.com/yeoman/yeoman-assert) |  |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore: update github/codeql-action action to v4.38.1
- [ ] chore: update dependency webpack to ^5.111.1
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore: update dependency axios to ^1.18.0 [security]](../pull/11765)
- [ ] [chore: update dependency yeoman-environment to v6 [security]](../pull/11766)
- [ ] [chore: update dependency bson to v7.3.3](../pull/11789)
- [ ] [chore: update dependency mocha to ^12.0.2](../pull/11797)
- [ ] [chore: update dependency type-graphql to ^2.0.0-rc.3](../pull/11438)
- [ ] [chore: update lint packages](../pull/11666) (`eslint-plugin-prettier`, `prettier`)
- [ ] [chore: update commitlint monorepo to ^20.5.3](../pull/11497) (`@commitlint/cli`, `@commitlint/config-conventional`)
- [ ] [chore: update dependency @graphql-yoga/subscription to ^5.1.1](../pull/11796)
- [ ] [chore: update dependency multer to ^2.4.0](../pull/11798)
- [ ] [chore: update dependency puppeteer to ^25.11.0](../pull/11799)
- [ ] [chore: update dependency swagger-ui-dist to v5.33.0](../pull/11800)
- [ ] [chore: update dependency typescript to ~5.9.3](../pull/10247)
- [ ] [chore: update commitlint monorepo to v21](../pull/11605) (`@commitlint/cli`, `@commitlint/config-conventional`)
- [ ] [chore: update dependency @types/supertest to v7](../pull/11515)
- [ ] [chore: update dependency @unicode/unicode-10.0.0 to v2](../pull/11775)
- [ ] [chore: update dependency change-case to v5](../pull/10066)
- [ ] [chore: update dependency ejs to v6](../pull/11687)
- [ ] [chore: update dependency express to v5](../pull/10738) (`express`, `@types/express`)
- [ ] [chore: update dependency graphql to v17](../pull/11688)
- [ ] [chore: update dependency hyperid to v4](../pull/11589)
- [ ] [chore: update dependency js-yaml to v5](../pull/11689)
- [ ] [chore: update dependency lerna to v10](../pull/11742)
- [ ] [chore: update dependency mem-fs to v6](../pull/11763)
- [ ] [chore: update dependency mem-fs-editor to v12.0.9](../pull/11574)
- [ ] [chore: update dependency p-event to v7](../pull/11220)
- [ ] [chore: update dependency path-to-regexp to v8](../pull/10792)
- [ ] [chore: update dependency stringify-object to v7](../pull/11710)
- [ ] [chore: update dependency typeorm to v1](../pull/11724)
- [ ] [chore: update dependency typescript to v7](../pull/11725)
- [ ] [chore: update lint packages (major)](../pull/10867) (`@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`, `eslint`, `eslint-config-prettier`, `eslint-plugin-eslint-plugin`, `eslint-plugin-mocha`)
- [ ] [chore: update yeoman packages (major)](../pull/11534) (`yeoman-generator`, `yeoman-test`)
- [ ] [chore: lock file maintenance](../pull/11712)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [chore: update dependency @phenomnomnominal/tsquery to v6](../pull/9760)
- [ ] [chore: update dependency @types/express-serve-static-core to v5](../pull/10739)
- [ ] [chore: update dependency @types/yeoman-environment to v4](../pull/10839)
- [ ] [chore: update dependency @types/yeoman-generator to v6](../pull/10840)
- [ ] [chore: update dependency camelcase-keys to v10](../pull/11428)
- [ ] [chore: update dependency chalk to v6](../pull/11741)
- [ ] [chore: update dependency cron to v4](../pull/10891)
- [ ] [chore: update dependency graphql-ws to v6](../pull/10985)
- [ ] [chore: update dependency helmet to v8](../pull/10783)
- [ ] [chore: update dependency http-status to v2](../pull/10786)
- [ ] [chore: update dependency inquirer-autocomplete-prompt to v3](../pull/8959)
- [ ] [chore: update dependency latest-version to v9](../pull/10858)
- [ ] [chore: update dependency node to v24](../pull/11267)
- [ ] [chore: update dependency openapi3-ts to v4](../pull/9385)
- [ ] [chore: update dependency prom-client to v15](../pull/10042)
- [ ] [chore: update dependency rimraf to v6](../pull/10803)
- [ ] [chore: update dependency slash to v5](../pull/8951)
- [ ] [chore: update dependency tildify to v3](../pull/7747)
- [ ] [chore: update dependency ts-graphviz to v3](../pull/11086)
- [ ] [chore: update docker.io/library/node docker tag to v26](../pull/11600)

## Detected Dependencies

dockerfile (9)

examples/access-control-migration/Dockerfile (1)

- `docker.io/library/node 24-slim` → [Updates: `26-slim`]

examples/multi-tenancy/Dockerfile (1)

- `docker.io/library/node 24-slim` → [Updates: `26-slim`]

examples/references-many/Dockerfile (1)

- `docker.io/library/node 24-slim` → [Updates: `26-slim`]

examples/rest-crud/Dockerfile (1)

- `docker.io/library/node 24-slim` → [Updates: `26-slim`]

examples/socketio/Dockerfile (1)

- `docker.io/library/node 24-slim` → [Updates: `26-slim`]

examples/todo-jwt/Dockerfile (1)

- `docker.io/library/node 24-slim` → [Updates: `26-slim`]

examples/todo-list/Dockerfile (1)

- `docker.io/library/node 24-slim` → [Updates: `26-slim`]

examples/todo/Dockerfile (1)

- `docker.io/library/node 24-slim` → [Updates: `26-slim`]

packages/cli/generators/app/templates/Dockerfile (1)

- `docker.io/library/node 24-slim` → [Updates: `26-slim`]

github-actions (3)

.github/workflows/codeql-analysis.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63` → [Updates: `v4.38.1`]
- `github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63` → [Updates: `v4.38.1`]

.github/workflows/continuous-integration.yml (17)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020`
- `actions/setup-python v7`
- `coverallsapp/github-action v2.3.8@8d6379e14d29928660c4ba802d8e85393440b329`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020`
- `python 3.14.7`
- `node 22.23.2` → [Updates: `24.21.0`]
- `node 22.23.2` → [Updates: `24.21.0`]
- `node 22.23.2` → [Updates: `24.21.0`]
- `node 22.23.2` → [Updates: `24.21.0`]

.github/workflows/renovate-config-validator.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020`
- `node 22.23.2` → [Updates: `24.21.0`]

npm (80)

acceptance/extension-logging-fluentd/package.json (3)

- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `testcontainers ^12.1.0`
- `tslib ^2.8.1`

acceptance/repository-cloudant/package.json (10)

- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `async ^3.2.6`
- `chalk ^4.1.2` → [Updates: `^6.0.0`]
- `debug ^4.4.3`
- `dockerode ^5.0.1`
- `lodash ^4.18.1`
- `loopback-connector-cloudant 2.5.0`
- `ms 2.1.3`
- `tslib ^2.8.1`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

acceptance/repository-mongodb/package.json (3)

- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `loopback-connector-mongodb ^8.0.2`
- `tslib ^2.8.1`

acceptance/repository-mysql/package.json (3)

- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `loopback-connector-mysql ^9.0.3`
- `tslib ^2.8.1`

acceptance/repository-postgresql/package.json (3)

- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `loopback-connector-postgresql ^9.0.3`
- `tslib ^2.8.1`

benchmark/package.json (16)

- `@types/byline ^4.2.36`
- `@types/debug ^4.1.13`
- `@types/request-promise-native ^1.0.21`
- `autocannon ^8.0.0`
- `axios ^1.16.0` → [Updates: `^1.18.0`]
- `benchmark ^2.1.4`
- `byline ^5.0.0`
- `debug ^4.4.3`
- `path-to-regexp ^6.3.0` → [Updates: `^8.4.2`]
- `tslib ^2.8.1`
- `@types/autocannon ^7.12.7`
- `@types/benchmark ^2.1.5`
- `@types/mocha ^10.0.10`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `mocha ^12.0.1` → [Updates: `^12.0.2`]
- `source-map-support ^0.5.21`

bodyparsers/rest-msgpack/package.json (7)

- `msgpack5 ^6.0.2`
- `tslib ^2.8.1`
- `type-is ^2.1.0`
- `@types/msgpack5 ^3.4.7`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `@types/type-is ^1.6.7`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

docs/package.json (2)

- `fs-extra ^11.4.0`
- `tslib ^2.8.1`

examples/access-control-migration/package.json (9)

- `bcryptjs ^3.0.3`
- `casbin ^5.51.1`
- `jsonwebtoken ^9.0.3`
- `loopback-connector-rest ^7.0.3`
- `@types/lodash ^4.17.25`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `lodash ^4.18.1`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/binding-resolution/package.json (7)

- `debug ^4.4.3`
- `tslib ^2.8.1`
- `@types/debug ^4.1.13`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `source-map-support ^0.5.21`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/context/package.json (4)

- `tslib ^2.8.1`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/express-composition/package.json (6)

- `express ^4.22.3` → [Updates: `^5.2.1`]
- `tslib ^2.8.1`
- `@types/express ^4.17.25` → [Updates: `^5.0.6`]
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/file-transfer/package.json (7)

- `multer ^2.3.0` → [Updates: `^2.4.0`]
- `tslib ^2.8.1`
- `@types/express-serve-static-core ^4.19.9` → [Updates: `^5.1.3`]
- `@types/multer ^2.2.0`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/graphql/package.json (10)

- `@graphql-yoga/subscription ^5.0.5` → [Updates: `^5.1.1`]
- `class-transformer ^0.5.1`
- `tslib ^2.8.1`
- `@types/multer ^2.2.0`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `graphql-ws ^5.16.2` → [Updates: `^6.2.2`]
- `rimraf ^5.0.10` → [Updates: `^6.1.3`]
- `source-map-support ^0.5.21`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/greeter-extension/package.json (7)

- `chalk ^4.1.2` → [Updates: `^6.0.0`]
- `debug ^4.4.3`
- `tslib ^2.8.1`
- `@types/debug 4.1.13`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/greeting-app/package.json (7)

- `chalk ^4.1.2` → [Updates: `^6.0.0`]
- `debug ^4.4.3`
- `tslib ^2.8.1`
- `@types/debug 4.1.13`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/hello-world/package.json (4)

- `tslib ^2.8.1`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/lb3-application/package.json (14)

- `compression ^1.8.2`
- `cors ^2.8.6`
- `debug ^4.4.3`
- `express ^4.22.3` → [Updates: `^5.2.1`]
- `helmet ^4.6.0` → [Updates: `^8.3.0`]
- `loopback ^3.28.0`
- `loopback-boot ^3.3.1`
- `tslib ^2.8.1`
- `@types/lodash ^4.17.25`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `lodash ^4.18.1`
- `should ^13.2.3`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/log-extension/package.json (7)

- `chalk ^4.1.2` → [Updates: `^6.0.0`]
- `debug ^4.4.3`
- `tslib ^2.8.1`
- `@types/debug ^4.1.13`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/metrics-prometheus/package.json (4)

- `tslib ^2.8.1`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/multi-tenancy/package.json (9)

- `debug ^4.4.3`
- `jsonwebtoken ^9.0.3`
- `tslib ^2.8.1`
- `@types/debug ^4.1.13`
- `@types/jsonwebtoken ^9.0.10`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `source-map-support ^0.5.21`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/passport-login/package.json (34)

- `@types/jsonwebtoken 9.0.10`
- `@types/lodash ^4.17.25`
- `@types/passport ^1.0.17`
- `@types/passport-facebook ^3.0.4`
- `@types/passport-google-oauth ^1.0.45`
- `@types/passport-google-oauth2 ^0.1.10`
- `@types/passport-http ^0.3.11`
- `@types/passport-local ^1.0.38`
- `@types/passport-oauth2 ^1.8.0`
- `@types/passport-twitter 1.0.40`
- `body-parser ^2.3.0`
- `client-sessions ^0.8.0`
- `debug ^4.4.3`
- `express ^4.22.3` → [Updates: `^5.2.1`]
- `express-session ^1.19.0`
- `lodash ^4.18.1`
- `passport ^0.7.0`
- `passport-facebook ^3.0.0`
- `passport-google ^0.3.0`
- `passport-google-oauth2 ^0.2.0`
- `passport-http ^0.3.0`
- `passport-local ^1.0.0`
- `passport-oauth2 ^1.8.0`
- `passport-twitter 1.0.4`
- `path ^0.12.7`
- `pug ^3.0.4`
- `tslib ^2.8.1`
- `@types/express ^4.17.25` → [Updates: `^5.0.6`]
- `@types/lodash ^4.17.25`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `axios ^1.16.0` → [Updates: `^1.18.0`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `lodash ^4.18.1`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/references-many/package.json (7)

- `loopback-connector-rest ^7.0.3`
- `tslib ^2.8.1`
- `@types/lodash ^4.17.25`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `lodash ^4.18.1`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/rest-crud/package.json (7)

- `loopback-connector-rest ^7.0.3`
- `tslib ^2.8.1`
- `@types/lodash ^4.17.25`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `lodash ^4.18.1`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/rpc-server/package.json (6)

- `express ^4.22.3` → [Updates: `^5.2.1`]
- `tslib ^2.8.1`
- `@types/express ^4.17.25` → [Updates: `^5.0.6`]
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/soap-calculator/package.json (8)

- `loopback-connector-soap ^10.0.3`
- `tslib ^2.8.1`
- `@types/mocha ^10.0.10`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `mocha ^12.0.1` → [Updates: `^12.0.2`]
- `source-map-support ^0.5.21`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/socketio/package.json (9)

- `debug ^4.4.3`
- `p-event ^4.2.0` → [Updates: `^7.1.1`]
- `tslib ^2.8.1`
- `@types/debug ^4.1.13`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `socket.io-client ^4.8.3`
- `source-map-support ^0.5.21`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/todo-jwt/package.json (8)

- `bcryptjs ^3.0.3`
- `loopback-connector-rest ^7.0.3`
- `tslib ^2.8.1`
- `@types/lodash ^4.17.25`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `lodash ^4.18.1`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/todo-list/package.json (7)

- `loopback-connector-rest ^7.0.3`
- `tslib ^2.8.1`
- `@types/lodash ^4.17.25`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `lodash ^4.18.1`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/todo/package.json (9)

- `loopback-connector-rest ^7.0.3`
- `morgan ^1.12.1`
- `tslib ^2.8.1`
- `@types/lodash ^4.17.25`
- `@types/morgan ^1.9.10`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `lodash ^4.18.1`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/validation-app/package.json (6)

- `strong-error-handler ^6.0.2`
- `tslib ^2.8.1`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `source-map-support ^0.5.21`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

examples/webpack/package.json (12)

- `tslib ^2.8.1`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `assert ^2.1.0`
- `buffer ^6.0.3`
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `events ^3.3.0`
- `process ^0.11.10`
- `puppeteer ^25.10.0` → [Updates: `^25.11.0`]
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]
- `util ^0.12.5`
- `webpack ^5.110.3` → [Updates: `^5.111.1`]
- `webpack-cli ^7.2.3`

extensions/apiconnect/package.json (2)

- `tslib ^2.8.1`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]

extensions/authentication-jwt/package.json (8)

- `bcryptjs ^3.0.3`
- `debug ^4.4.3`
- `jsonwebtoken ^9.0.3`
- `@types/debug ^4.1.13`
- `@types/lodash ^4.17.25`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `lodash ^4.18.1`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

extensions/authentication-passport/package.json (20)

- `passport ^0.7.0`
- `tslib ^2.8.1`
- `util-promisifyall ^1.0.6`
- `@types/jsonwebtoken ^9.0.10`
- `@types/lodash ^4.17.25`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `@types/passport ^1.0.17`
- `@types/passport-http ^0.3.11`
- `@types/passport-oauth2 ^1.8.0`
- `@types/qs ^6.15.1`
- `axios ^1.16.0` → [Updates: `^1.18.0`]
- `body-parser ^2.3.0`
- `express ^4.22.3` → [Updates: `^5.2.1`]
- `form-data ^4.0.6`
- `jsonwebtoken ^9.0.3`
- `lodash ^4.18.1`
- `passport-http ^0.3.0`
- `passport-oauth2 ^1.8.0`
- `qs ^6.16.0`
- `supertest ^7.2.2`

extensions/context-explorer/package.json (3)

- `ts-graphviz ^0.16.0` → [Updates: `^3.0.7`]
- `viz.js ^2.1.2`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]

extensions/cron/package.json (5)

- `@types/debug ^4.1.13`
- `cron ^2.4.4` → [Updates: `^4.4.0`]
- `debug ^4.4.3`
- `tslib ^2.8.1`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]

extensions/graphql/package.json (17)

- `@apollo/server ^5.5.1`
- `@as-integrations/express4 ^1.1.2`
- `@graphql-tools/utils ^12.0.1`
- `body-parser ^2.3.0`
- `cors ^2.8.6`
- `debug ^4.4.3`
- `express ^4.22.3` → [Updates: `^5.2.1`]
- `graphql ^16.14.2` → [Updates: `^17.0.2`]
- `graphql-ws ^5.16.2` → [Updates: `^6.2.2`]
- `type-graphql ^2.0.0-rc.2` → [Updates: `^2.0.0-rc.3`]
- `ws ^8.21.3`
- `@graphql-yoga/subscription ^5.0.5` → [Updates: `^5.1.1`]
- `@types/cors ^2.8.19`
- `@types/debug ^4.1.13`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `@types/ws ^8.18.1`
- `class-transformer ^0.5.1`

extensions/health/package.json (3)

- `@cloudnative/health ^2.1.2`
- `tslib ^2.8.1`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]

extensions/logging/package.json (7)

- `fluent-logger ^3.4.1`
- `morgan ^1.12.1`
- `tslib ^2.8.1`
- `winston ^3.19.0`
- `winston-transport ^4.9.0`
- `@types/morgan ^1.9.10`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]

extensions/metrics/package.json (5)

- `prom-client ^14.2.0` → [Updates: `^15.1.3`]
- `tslib ^2.8.1`
- `@types/express ^4.17.25` → [Updates: `^5.0.6`]
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `express ^4.22.3` → [Updates: `^5.2.1`]

extensions/pooling/package.json (6)

- `debug ^4.4.3`
- `generic-pool ^3.9.0`
- `tslib ^2.8.1`
- `@types/debug ^4.1.13`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

extensions/sequelize/package.json (9)

- `debug ^4.4.3`
- `sequelize ^6.37.8`
- `tslib ^2.8.1`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `oracledb ^7.0.1`
- `pg ^8.23.0`
- `pg-hstore ^2.3.4`
- `sqlite3 6.0.1`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

extensions/socketio/package.json (9)

- `@types/cors ^2.8.19`
- `@types/lodash ^4.17.25`
- `cors ^2.8.6`
- `debug ^4.4.3`
- `lodash ^4.18.1`
- `socket.io ^4.8.3`
- `@types/debug ^4.1.13`
- `p-event ^4.2.0` → [Updates: `^7.1.1`]
- `socket.io-client ^4.8.3`

extensions/typeorm/package.json (7)

- `debug ^4.4.3`
- `tslib ^2.8.1`
- `typeorm ^0.3.31` → [Updates: `^1.1.1`]
- `@types/debug ^4.1.13`
- `@types/json-schema ^7.0.15`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `sqlite3 ^6.0.1`

fixtures/mock-oauth2-provider/package.json (12)

- `@types/body-parser ^1.19.6`
- `@types/express ^4.17.25` → [Updates: `^5.0.6`]
- `@types/jsonwebtoken ^9.0.10`
- `@types/lodash ^4.17.25`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `axios ^1.16.0` → [Updates: `^1.18.0`]
- `body-parser ^2.3.0`
- `express ^4.22.3` → [Updates: `^5.2.1`]
- `form-data ^4.0.6`
- `jsonwebtoken ^9.0.3`
- `lodash ^4.18.1`
- `tslib ^2.8.1`

fixtures/tsdocs-monorepo/package.json

fixtures/tsdocs-monorepo/packages/pkg1/package.json

fixtures/tsdocs-monorepo/packages/pkg2/package.json

fixtures/tsdocs-monorepo/packages/pkg3-non-ts/package.json

fixtures/tsdocs-monorepo/packages/pkg4-private/package.json

package.json (24)

- `@commitlint/cli ^20.4.3` → [Updates: `^20.5.3`, `^21.2.2`]
- `@commitlint/config-conventional ^20.4.3` → [Updates: `^20.5.3`, `^21.2.2`]
- `@npmcli/map-workspaces ^6.0.0`
- `@npmcli/package-json ^8.0.0`
- `@types/mocha ^10.0.10`
- `@typescript-eslint/eslint-plugin ^7.18.0` → [Updates: `^8.70.0`]
- `@typescript-eslint/parser ^7.18.0` → [Updates: `^8.70.0`]
- `cross-env ^10.1.0`
- `cz-conventional-changelog ^3.3.0`
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `eslint-config-prettier ^9.1.1` → [Updates: `^10.1.8`]
- `eslint-plugin-eslint-plugin ^5.5.1` → [Updates: `^7.6.2`]
- `eslint-plugin-mocha ^10.5.0` → [Updates: `^12.0.2`]
- `eslint-plugin-prettier ^5.5.5` → [Updates: `^5.5.6`]
- `fs-extra ^11.4.0`
- `husky ^9.1.7`
- `lerna ^9.0.7` → [Updates: `^10.0.1`]
- `lint-staged ^17.5.1`
- `markdown-table ^3.0.4`
- `mem-fs ^2.3.0` → [Updates: `^6.0.0`]
- `mem-fs-editor ^9.7.0` → [Updates: `^12.0.9`]
- `open-cli ^9.0.0`
- `prettier ^3.8.3` → [Updates: `^3.9.8`]
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

packages/authentication/package.json (6)

- `@types/express ^4.17.25` → [Updates: `^5.0.6`]
- `@types/lodash ^4.17.25`
- `lodash ^4.18.1`
- `tslib ^2.8.1`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `jsonwebtoken ^9.0.3`

packages/authorization/package.json (5)

- `debug ^4.4.3`
- `tslib ^2.8.1`
- `@types/debug ^4.1.13`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `casbin ^5.51.1`

packages/boot/package.json (5)

- `@types/debug ^4.1.13`
- `debug ^4.4.3`
- `glob ^13.0.6`
- `tslib ^2.8.1`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]

packages/booter-lb3app/package.json (13)

- `@types/express ^4.17.25` → [Updates: `^5.0.6`]
- `debug ^4.4.3`
- `loopback ^3.28.0`
- `loopback-swagger ^5.9.0`
- `swagger2openapi ^7.0.8`
- `tslib ^2.8.1`
- `@types/debug ^4.1.13`
- `@types/lodash ^4.17.25`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `compression ^1.8.2`
- `cors ^2.8.6`
- `helmet ^4.6.0` → [Updates: `^8.3.0`]
- `loopback-boot ^3.3.1`

packages/build/package.json (14)

- `@types/mocha ^10.0.10`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `cross-spawn ^7.0.6`
- `debug ^4.4.3`
- `eslint ^8.57.1` → [Updates: `^10.11.0`]
- `fs-extra ^11.4.0`
- `glob ^13.0.6`
- `lodash ^4.18.1`
- `mocha ^12.0.1` → [Updates: `^12.0.2`]
- `nyc ^18.0.0`
- `prettier ^3.8.3` → [Updates: `^3.9.8`]
- `rimraf ^5.0.10` → [Updates: `^6.1.3`]
- `source-map-support ^0.5.21`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

packages/cli/package.json (56)

- `@npmcli/map-workspaces ^6.0.0`
- `@npmcli/package-json ^8.0.0`
- `@openapi-contrib/openapi-schema-to-json-schema ^5.1.0`
- `@phenomnomnominal/tsquery ~5.0.1` → [Updates: `~6.2.0`]
- `@unicode/unicode-10.0.0 ^1.6.17` → [Updates: `^2.0.7`]
- `camelcase-keys ^7.0.2` → [Updates: `^10.0.2`]
- `chalk ^4.1.2` → [Updates: `^6.0.0`]
- `change-case ^4.1.2` → [Updates: `^5.4.4`]
- `debug ^4.4.3`
- `fs-extra ^11.4.0`
- `glob ^13.0.6`
- `inquirer-autocomplete-prompt ^2.0.1` → [Updates: `^3.0.1`]
- `json5 ^2.2.3`
- `latest-version ^5.1.0` → [Updates: `^9.0.0`]
- `lodash ^4.18.1`
- `minimatch ^10.2.6`
- `minimist ^1.2.8`
- `mkdirp ^3.0.1`
- `natural-compare ^1.4.0`
- `pacote ^22.0.0`
- `pluralize ^8.0.0`
- `regenerate ^1.4.2`
- `semver ^7.8.5`
- `slash ^3.0.0` → [Updates: `^5.1.0`]
- `spdx-license-list ^6.12.0`
- `stringify-object ^3.3.0` → [Updates: `^7.0.0`]
- `strong-globalize ^6.0.6`
- `swagger-parser ^10.0.3`
- `swagger2openapi ^7.0.8`
- `tabtab ^3.0.2`
- `terminal-link ^5.0.0`
- `tildify ^2.0.0` → [Updates: `^3.0.0`]
- `ts-morph ^28.0.0`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]
- `untildify ^6.0.0`
- `update-notifier ^7.3.1`
- `url-slug ^5.1.0`
- `validate-npm-package-name ^8.0.0`
- `write-file-atomic ^8.0.0`
- `yeoman-environment ^3.19.3` → [Updates: `^6.0.1`]
- `yeoman-generator ^5.10.0` → [Updates: `^9.2.0`]
- `@types/ejs ^3.1.5`
- `@types/fs-extra ^11.0.4`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `@types/yeoman-environment ^2.10.11` → [Updates: `^4.0.0`]
- `@types/yeoman-generator ^5.2.14` → [Updates: `^6.0.0`]
- `loopback ^3.28.0`
- `loopback-datasource-juggler ^7.0.3`
- `mem-fs ^4.1.5` → [Updates: `^6.0.0`]
- `mem-fs-editor ^12.0.3` → [Updates: `^12.0.9`]
- `mock-stdin ^1.0.0`
- `rimraf ^5.0.10` → [Updates: `^6.1.3`]
- `sinon ^22.1.0`
- `strong-globalize-cli 7.1.1`
- `yeoman-assert ^3.1.1`
- `yeoman-test ^6.3.0` → [Updates: `^11.8.2`]

packages/context/package.json (10)

- `@types/debug ^4.1.13`
- `debug ^4.4.3`
- `hyperid ^3.3.0` → [Updates: `^4.0.0`]
- `p-event ^4.2.0` → [Updates: `^7.1.1`]
- `tslib ^2.8.1`
- `uuid ^14.0.2`
- `@types/bluebird ^3.5.42`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `@types/uuid ^11.0.0`
- `bluebird ^3.7.2`

packages/core/package.json (4)

- `debug ^4.4.3`
- `tslib ^2.8.1`
- `@types/debug ^4.1.13`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]

packages/eslint-config/package.json (6)

- `@typescript-eslint/eslint-plugin ^7.18.0` → [Updates: `^8.70.0`]
- `@typescript-eslint/parser ^7.18.0` → [Updates: `^8.70.0`]
- `eslint-config-prettier ^9.1.1` → [Updates: `^10.1.8`]
- `eslint-plugin-eslint-plugin ^5.5.1` → [Updates: `^7.6.2`]
- `eslint-plugin-mocha ^10.5.0` → [Updates: `^12.0.2`]
- `eslint ^8.57.1` → [Updates: `^10.11.0`]

packages/express/package.json (17)

- `@types/body-parser ^1.19.6`
- `@types/express ^4.17.25` → [Updates: `^5.0.6`]
- `@types/express-serve-static-core ^4.19.9` → [Updates: `^5.1.3`]
- `@types/http-errors ^2.0.5`
- `body-parser ^2.3.0`
- `debug ^4.4.3`
- `express ^4.22.3` → [Updates: `^5.2.1`]
- `http-errors ^2.0.1`
- `on-finished ^2.4.1`
- `toposort ^2.0.2`
- `tslib ^2.8.1`
- `@types/debug ^4.1.13`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `@types/on-finished ^2.3.5`
- `@types/toposort ^2.0.7`
- `source-map-support ^0.5.21`
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

packages/filter/package.json (3)

- `tslib ^2.8.1`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `typescript ~5.2.2` → [Updates: `~5.9.3`, `~7.0.2`]

packages/http-caching-proxy/package.json (10)

- `axios ^1.16.0` → [Updates: `^1.18.0`]
- `cacache ^21.0.1`
- `debug ^4.4.3`
- `rimraf ^5.0.10` → [Updates: `^6.1.3`]
- `tslib ^2.8.1`
- `@types/debug ^4.1.13`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `@types/tunnel 0.0.7`
- `delay ^7.0.0`
- `tunnel 0.0.6`

packages/http-server/package.json (6)

- `debug ^4.4.3`
- `stoppable ^1.1.0`
- `tslib ^2.8.1`
- `@types/debug ^4.1.13`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `@types/stoppable ^1.1.3`

packages/metadata/package.json (7)

- `debug ^4.4.3`
- `lodash ^4.18.1`
- `reflect-metadata ^0.2.1`
- `tslib ^2.8.1`
- `@types/debug ^4.1.13`
- `@types/lodash ^4.17.25`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]

packages/model-api-builder/package.json (2)

- `tslib ^2.8.1`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]

packages/openapi-spec-builder/package.json (3)

- `openapi3-ts ^2.0.2` → [Updates: `^4.6.1`]
- `tslib ^2.8.1`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]

packages/openapi-v3/package.json (10)

- `debug ^4.4.3`
- `http-status ^1.8.1` → [Updates: `^2.1.0`]
- `json-merge-patch ^1.0.2`
- `lodash ^4.18.1`
- `openapi3-ts ^2.0.2` → [Updates: `^4.6.1`]
- `tslib ^2.8.1`
- `@types/debug ^4.1.13`
- `@types/json-merge-patch 1.0.0`
- `@types/lodash ^4.17.25`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]

packages/repository-json-schema/package.json (6)

- `@types/json-schema ^7.0.15`
- `debug ^4.4.3`
- `tslib ^2.8.1`
- `@types/debug ^4.1.13`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `ajv-formats ^3.0.1`

packages/repository-tests/package.json (7)

- `@types/debug ^4.1.13`
- `debug ^4.4.3`
- `tslib ^2.8.1`
- `@types/debug ^4.1.13`
- `@types/lodash ^4.17.25`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `lodash ^4.18.1`

packages/repository/package.json (9)

- `@types/debug ^4.1.13`
- `debug ^4.4.3`
- `lodash ^4.18.1`
- `loopback-datasource-juggler ^7.0.3`
- `tslib ^2.8.1`
- `@types/json-schema ^7.0.15`
- `@types/lodash ^4.17.25`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `bson 7.3.2` → [Updates: `7.3.3`]

packages/rest-crud/package.json (4)

- `debug ^4.4.3`
- `tslib ^2.8.1`
- `@types/debug ^4.1.13`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]

packages/rest-explorer/package.json (7)

- `ejs ^5.0.2` → [Updates: `^6.0.1`]
- `swagger-ui-dist 5.32.15` → [Updates: `5.33.0`]
- `tslib ^2.8.1`
- `@types/ejs ^3.1.5`
- `@types/express ^4.17.25` → [Updates: `^5.0.6`]
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `express ^4.22.3` → [Updates: `^5.2.1`]

packages/rest/package.json (37)

- `@openapi-contrib/openapi-schema-to-json-schema ^5.1.0`
- `@types/body-parser ^1.19.6`
- `@types/cors ^2.8.19`
- `@types/express ^4.17.25` → [Updates: `^5.0.6`]
- `@types/express-serve-static-core ^4.19.9` → [Updates: `^5.1.3`]
- `@types/http-errors ^2.0.5`
- `@types/on-finished ^2.3.5`
- `@types/serve-static 2.2.0`
- `@types/type-is ^1.6.7`
- `ajv ^8.20.0`
- `ajv-errors ^3.0.0`
- `ajv-formats ^3.0.1`
- `ajv-keywords ^5.1.0`
- `body-parser ^2.3.0`
- `cors ^2.8.6`
- `debug ^4.4.3`
- `express ^4.22.3` → [Updates: `^5.2.1`]
- `http-errors ^2.0.1`
- `js-yaml ^4.3.2` → [Updates: `^5.4.2`]
- `json-schema-compare ^0.2.2`
- `lodash ^4.18.1`
- `on-finished ^2.4.1`
- `path-to-regexp ^6.3.0` → [Updates: `^8.4.2`]
- `qs ^6.16.0`
- `strong-error-handler ^6.0.2`
- `tslib ^2.8.1`
- `type-is ^2.1.0`
- `validator ^13.15.35`
- `@types/debug ^4.1.13`
- `@types/js-yaml ^4.0.9`
- `@types/json-schema-compare ^0.2.4`
- `@types/lodash ^4.17.25`
- `@types/multer ^2.2.0`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `@types/on-finished ^2.3.5`
- `@types/qs ^6.15.1`
- `multer ^2.3.0` → [Updates: `^2.4.0`]

packages/security/package.json (4)

- `debug ^4.4.3`
- `tslib ^2.8.1`
- `@types/debug ^4.1.13`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]

packages/service-proxy/package.json (3)

- `loopback-datasource-juggler ^7.0.3`
- `tslib ^2.8.1`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]

packages/testlab/package.json (14)

- `@hapi/shot ^6.0.3`
- `@types/express ^4.17.25` → [Updates: `^5.0.6`]
- `@types/fs-extra ^11.0.4`
- `@types/shot ^4.0.5`
- `@types/sinon ^22.0.0`
- `@types/supertest ^2.0.16` → [Updates: `^7.2.1`]
- `express ^4.22.3` → [Updates: `^5.2.1`]
- `fs-extra ^11.4.0`
- `oas-validator ^5.0.8`
- `should ^13.2.3`
- `sinon ^22.1.0`
- `supertest ^7.2.2`
- `tslib ^2.8.1`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]

packages/tsdocs/package.json (13)

- `@lerna/project ^6.4.1`
- `@microsoft/api-documenter ^7.30.15`
- `@microsoft/api-extractor ^7.59.1`
- `@npmcli/map-workspaces ^6.0.0`
- `@npmcli/package-json ^8.0.0`
- `debug ^4.4.3`
- `fs-extra ^11.4.0`
- `tslib ^2.8.1`
- `@types/debug ^4.1.13`
- `@types/fs-extra ^11.0.4`
- `@types/node ^20.19.43` → [Updates: `^26.6.2`]
- `@types/npmcli__map-workspaces ^3.0.4`
- `@types/npmcli__package-json ^4.0.4`

sandbox/example/package.json

renovate-config (1)

renovate.json

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the linked Dependency Dashboard documentation, then inspect the listed Dockerfiles and GitHub Actions workflows. The dashboard contains many rate-limited, open, and blocked dependency updates, with several already represented by pull requests. Done would require a specific update scope and resolving the corresponding dependency changes, but this issue does not define one.

Written by the indexing model from the issue text.