rubyforgood / rubyforgood/casa

Dependency Dashboard

Open
#7,014 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Ruby
Stars
381
Forks
542
Avg merge
3d 15h
Merged PRs (30d)
47

Description

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

[!WARNING]
The following dependencies are either deprecated or have replacements available.

Datasource Package Replacement PR?
npm faker Available
npm popper.js Unavailable

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

  • chore(deps): update actions/labeler action to v7
  • chore(deps): update actions/setup-node action to v7
  • chore(deps): update actions/stale action to v11
  • chore(deps): update dependency faker to v6
  • chore(deps): update dependency noticed to v3
  • chore(deps): update dependency pagy to v43
  • chore(deps): update dependency pghero to v4
  • chore(deps): update dependency rubocop-capybara to v3
  • chore(deps): update dependency shoulda-matchers to v8
  • chore(deps): update dependency simplecov to v1
  • chore(deps): update dependency start-server-and-test to v3
  • chore(deps): update postgres docker tag to v18
  • fix(deps): update babel monorepo to v8 (@babel/core, @babel/preset-env)
  • fix(deps): update dependency add-to-calendar-button to v3
  • fix(deps): update dependency datatables.net-dt to v3
  • fix(deps): update dependency jquery to v4
  • 🔐 Create all pending approval PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

  • chore(deps): update github/codeql-action action to v4.38.1
  • chore(deps): update jest monorepo to v30.5.2 (jest, jest-environment-jsdom)
  • chore(deps): update ruby docker tag to v4.0.7
  • chore(deps): update dependency annotaterb to v4.25.0
  • chore(deps): update dependency parallel_tests to v5.8.0
  • chore(deps): update dependency amazing_print to v3

[!WARNING]
Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package ruby/setup-ruby).

Files affected: .github/workflows/erb_lint.yml, .github/workflows/factory_bot_lint.yml, .github/workflows/rake-after_party.yml, .github/workflows/rspec.yml, .github/workflows/ruby_lint.yml, .github/workflows/security.yml, .github/workflows/spec_checker.yml

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

  • chore(deps): update dependency rubocop-performance to v1.27.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

Detected Dependencies

bundler (1)
Gemfile (97)
  • ruby 4.0.6 → [Updates: 4.0.7]
  • rails "~> 8.1"
  • after_party lock file @ 2.1.0
  • amazing_print lock file @ 2.0.0 → [Updates: undefined]
  • authtrail lock file @ 1.0.0
  • azure-blob lock file @ 0.8.0
  • benchmark lock file @ 0.5.0
  • blueprinter lock file @ 1.3.0
  • bugsnag lock file @ 6.30.0
  • caxlsx "~> 4.5"
  • caxlsx_rails "~> 0.7.1"
  • cssbundling-rails "~> 1.4"
  • delayed_job_active_record lock file @ 4.1.11
  • devise lock file @ 5.0.4
  • devise_invitable lock file @ 2.0.12
  • draper lock file @ 4.0.6
  • filterrific lock file @ 5.2.7
  • flipper lock file @ 1.4.2
  • flipper-active_record lock file @ 1.4.2
  • flipper-ui lock file @ 1.4.2
  • friendly_id "~> 5.7.0"
  • groupdate lock file @ 6.8.0
  • httparty lock file @ 0.24.2
  • image_processing "~> 2.1"
  • jbuilder lock file @ 2.15.1
  • jsbundling-rails lock file @ 1.3.1
  • lograge lock file @ 0.15.0
  • net-imap lock file @ 0.6.7
  • net-pop lock file @ 0.1.2
  • net-smtp lock file @ 0.5.1
  • noticed lock file @ 2.9.3 → [Updates: undefined]
  • oj lock file @ 3.17.6
  • pagy lock file @ 9.4.0 → [Updates: undefined]
  • paranoia lock file @ 3.1.0
  • pdf-forms lock file @ 1.5.2
  • pg lock file @ 1.6.3
  • pghero lock file @ 3.8.0 → [Updates: undefined]
  • pg_query lock file @ 6.2.3
  • pretender lock file @ 1.0.0
  • puma "~> 8.0"
  • pundit lock file @ 2.5.2
  • rack-attack lock file @ 6.8.0
  • rack-cors lock file @ 3.0.0
  • request_store lock file @ 1.7.0
  • rexml lock file @ 3.4.4
  • rswag-api lock file @ 2.17.0
  • rswag-ui lock file @ 2.17.0
  • sablon lock file @ 0.4.3
  • scout_apm lock file @ 6.3.0
  • scout_apm_logging "~> 2.1"
  • sprockets-rails lock file @ 3.5.2
  • stimulus-rails lock file @ 1.3.4
  • strong_migrations lock file @ 2.8.0
  • turbo-rails "~> 2.0"
  • twilio-ruby lock file @ 7.11.2
  • view_component lock file @ 4.15.0
  • wicked lock file @ 2.0.0
  • brakeman lock file @ 8.0.6
  • prosopite lock file @ 2.2.0
  • byebug lock file @ 13.0.0
  • dotenv-rails lock file @ 3.2.0
  • erb_lint lock file @ 0.9.0
  • factory_bot_rails lock file @ 6.5.1
  • faker lock file @ 3.8.0
  • parallel_tests lock file @ 5.7.0 → [Updates: undefined]
  • pry lock file @ 0.16.0
  • pry-byebug lock file @ 3.12.0
  • rspec_junit_formatter lock file @ 0.6.0
  • rspec-rails lock file @ 8.0.4
  • rubocop-capybara lock file @ 2.23.0 → [Updates: undefined]
  • rubocop-factory_bot lock file @ 2.28.0
  • rubocop-performance lock file @ 1.26.1 → [Updates: undefined]
  • rubocop-rspec lock file @ 3.10.2
  • rubocop-rspec_rails lock file @ 2.32.0
  • rswag-specs lock file @ 2.17.0
  • shoulda-matchers lock file @ 7.0.1 → [Updates: undefined]
  • standard lock file @ 1.56.0
  • standard-rails lock file @ 1.6.0
  • annotaterb lock file @ 4.24.0 → [Updates: undefined]
  • bundler-audit lock file @ 0.9.3
  • letter_opener lock file @ 1.10.0
  • simplecov-mcp lock file @ 2.0.1
  • spring lock file @ 4.7.0
  • spring-commands-rspec lock file @ 1.0.4
  • traceroute lock file @ 0.8.1
  • web-console "~> 4.3"
  • axe-core-rspec lock file @ 4.13.0
  • capybara lock file @ 3.40.0
  • capybara-screenshot lock file @ 1.0.27
  • database_cleaner-active_record lock file @ 2.2.2
  • docx lock file @ 0.13.0
  • email_spec lock file @ 2.3.1
  • rails-controller-testing lock file @ 1.0.5
  • rspec-retry lock file @ 0.6.2
  • selenium-webdriver lock file @ 4.49.0
  • simplecov lock file @ 0.22.0 → [Updates: undefined]
  • webmock lock file @ 3.26.4
docker-compose (2)
.devcontainer/docker-compose.yml
docker-compose.yml (1)
  • postgres 12.22 → [Updates: 18.4]
dockerfile (2)
.devcontainer/Dockerfile
Dockerfile (3)
  • node 24-alpine
  • ruby 4.0.6-alpine → [Updates: 4.0.7-alpine]
  • ruby 4.0.6-alpine → [Updates: 4.0.7-alpine]
github-actions (21)
.github/workflows/add-labels-based-on-column.yml (1)
  • rubyforgood/add-label-to-cards v3.3@62e1346cb6a1837c82e1c2919562d54dd2893ddf
.github/workflows/after-deploy.yml (1)
  • Firelemons/on-deploy v2.2.1@852d81d797e1e230da7617a3e3784971fda7a047
.github/workflows/codeql-analysis.yml (5)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63 → [Updates: v4.38.1]
  • github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63 → [Updates: v4.38.1]
  • github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63 → [Updates: v4.38.1]
  • actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
.github/workflows/combine_and_report.yml (4)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
  • test-summary/action v2@37b508cfee6d4d080eedd00b5bb240a6a784a6a5
  • actions/github-script v9@373c709c69115d41ff229c7e5df9f8788daa9553 → [Updates: v9]
.github/workflows/docker.yml (2)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
.github/workflows/erb_lint.yml (2)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • ruby/setup-ruby v1@95ef2b042f9d7a56d8268cba8559e2842e2ad01b
.github/workflows/factory_bot_lint.yml (3)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • ruby/setup-ruby v1@95ef2b042f9d7a56d8268cba8559e2842e2ad01b
  • postgres 14.24 → [Updates: 18.4]
.github/workflows/issue-auto-close-done.yml (1)
  • dessant/issue-states v3@a1bd84606ef48dca24ce24140e068516a74b3e0b
.github/workflows/issue-auto-unassign.yml (1)
  • rubyforgood/unassign-issues v1.3@f3d8461c2a3ea67cc4a015ca50737a4f865460d7
.github/workflows/label.yml (1)
  • actions/labeler v5@8558fd74291d67161a8a78ce36a881fa63b766a9 → [Updates: v7]
.github/workflows/npm_lint_and_test.yml (2)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v7, v6]
.github/workflows/rake-after_party.yml (3)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • ruby/setup-ruby v1@95ef2b042f9d7a56d8268cba8559e2842e2ad01b
  • postgres 14.24 → [Updates: 18.4]
.github/workflows/remove-helped-wanted.yml (1)
  • andymckay/labeler 1.0.4@e6c4322d0397f3240f0e7e30a33b5c5df2d39e90
.github/workflows/remove-label-based-on-column.yml (1)
  • rubyforgood/remove-label-from-cards 2.0@186f170a25e437b6b172a4f274d2492dd14bfb4e
.github/workflows/rspec.yml (6)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • ruby/setup-ruby v1@95ef2b042f9d7a56d8268cba8559e2842e2ad01b
  • actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v7, v6]
  • qltysh/qlty-action v2.3.0@08a0a862c159eae9b9003081da6663d96efef637
  • actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • postgres 14.24 → [Updates: 18.4]
.github/workflows/ruby_lint.yml (2)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • ruby/setup-ruby v1@95ef2b042f9d7a56d8268cba8559e2842e2ad01b
.github/workflows/security.yml (2)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • ruby/setup-ruby v1@95ef2b042f9d7a56d8268cba8559e2842e2ad01b
.github/workflows/spec_checker.yml (2)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • ruby/setup-ruby v1@95ef2b042f9d7a56d8268cba8559e2842e2ad01b
.github/workflows/stale.yml (1)
  • actions/stale v9@5bef64f19d7facfb25b37b414482c7164d639639 → [Updates: v11]
.github/workflows/toc.yml (1)
  • technote-space/toc-generator v4@9e238e7974de5fcf7b17b7acc54c896160dda0a3
.github/workflows/yaml_lint.yml (2)
  • actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
  • ibiqlik/action-yamllint v3@2576378a8e339169678f9939646ee3ee325e845c
npm (1)
package.json (32)
  • @babel/core ^7.29.7 → [Updates: ^8.0.0]
  • @fortawesome/fontawesome-free ^7.3.1
  • @hotwired/stimulus ^3.2.2
  • @hotwired/turbo-rails ^8.0.23
  • @popperjs/core ^2.11.8
  • @rails/actioncable ^8.1.301
  • @rails/actiontext ^8.1.300
  • @rails/activestorage ^8.1.301
  • @rails/ujs ^7.1.600
  • @stimulus-components/rails-nested-form ^5.0.0
  • @tailwindcss/cli ^4.3.2
  • add-to-calendar-button ^2.14.0 → [Updates: ^3.0.0]
  • datatables.net-dt ^1.13.11 → [Updates: ^3.0.0]
  • esbuild ^0.28.2
  • jquery ^3.7.1 → [Updates: ^4.0.0]
  • js-cookie ^3.0.8
  • jstz ^2.1.1
  • lodash ^4.18.1
  • popper.js ^1.16.1
  • strftime ^0.10.3
  • sweetalert2 ^11.3.5 → [Updates: ^11.3.5]
  • tailwindcss ^4.3.3
  • tom-select ^2.6.1 → [Updates: ^2.6.1]
  • trix ^2.1.19
  • @babel/preset-env ^7.29.7 → [Updates: ^8.0.0]
  • faker ^5.5.3 → [Updates: ^6.0.0, ^5.5.3]
  • jest ^30.4.2 → [Updates: ^30.4.2]
  • jest-environment-jsdom ^30.4.1 → [Updates: ^30.4.1]
  • markdown-toc ^1.2.0
  • standard ^17.1.2
  • start-server-and-test ^2.1.5 → [Updates: ^3.0.0]
  • node 24.x
  • Check this box to trigger a request for Renovate to run again on this repository

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

This is a Renovate-generated dashboard covering Gemfile, docker-compose.yml, Dockerfile, and .github/workflows/*.yml rather than a scoped task. Start with the linked Renovate dashboard documentation, choose one pending dependency update, and use the repository’s CI checks to determine whether that update is complete.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, docker-compose, github-actions, javascript, postgresql, rails, ruby
Domain
build-system, ci-cd, devops, tooling
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.