Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency helmet to v8.3.0
• Update mongoose and redis minor and patch updates (ioredis, mongoose)
• Update actions/checkout action to v7
• Update actions/setup-node action to v7
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update all minor and patch github action updates (Mattraks/delete-workflow-runs, actions/setup-node, docker/build-push-action, docker/setup-buildx-action)
• Update tooling and types minor and patch updates (@eslint/eslintrc, @eslint/js, @types/luxon, @types/multer, @types/node, @types/nodemailer, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, eslint, eslint-plugin-prettier, prettier)
• Update aws and storage minor and patch updates (@aws-sdk/client-s3, @aws-sdk/s3-request-presigner, tar-stream)
• Update dependency @opentelemetry/instrumentation to ^0.220.0
• Update services and utilities minor and patch updates (@sentry/node, axios)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• node 24-slim

github-actions (9)

.github/workflows/auto-tag.yaml (1)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]

.github/workflows/build-and-deploy-prod.yaml (5)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4]
• docker/login-action v4@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4]
• docker/build-push-action v7@d08e5c354a6adb9ed34480a06d141179aa583294 → [Updates: v7]
• digitalocean/action-doctl v2

.github/workflows/build-and-deploy-staging.yaml (5)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4]
• docker/login-action v4@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4]
• docker/build-push-action v7@d08e5c354a6adb9ed34480a06d141179aa583294 → [Updates: v7]
• digitalocean/action-doctl v2

.github/workflows/build-and-push-trigger.yaml (4)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4]
• docker/login-action v4@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4]
• docker/build-push-action v7@d08e5c354a6adb9ed34480a06d141179aa583294 → [Updates: v7]

.github/workflows/delete-old-workflow-runs.yml (1)

• Mattraks/delete-workflow-runs v2@0073229620e676f1b9d933b31b2b53df8b5915ef → [Updates: v2]

.github/workflows/pr-check.yaml (3)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• actions/setup-node v6@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 → [Updates: v7, v6]
• node 24

.github/workflows/prettier-check.yaml (3)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• actions/setup-node v6@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 → [Updates: v7, v6]
• node 24

.github/workflows/sync-staging.yaml (1)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]

.github/workflows/validate-renovate.yaml (3)

• actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v7, v6]
• actions/setup-node v6@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 → [Updates: v7, v6]
• node 24

npm (1)

package.json (48)

• @aws-sdk/client-s3 ^3.899.0 → [Updates: ^3.899.0]
• @aws-sdk/s3-request-presigner ^3.899.0 → [Updates: ^3.899.0]
• @opentelemetry/instrumentation ^0.217.0 → [Updates: ^0.220.0]
• @sentry/node ^10.17.0 → [Updates: ^10.17.0]
• @sentry/tracing ^7.120.4
• axios ^1.12.2 → [Updates: ^1.12.2]
• cookie-parser ^1.4.7
• cors ^2.8.5
• croner ^9.1.0 → [Updates: ^10.0.0]
• express ^5.1.0
• express-validator ^7.2.1
• helmet ^8.1.0 → [Updates: ^8.1.0]
• ioredis ^5.8.0 → [Updates: ^5.8.0, ^6.0.0]
• isomorphic-dompurify ^2.32.0 → [Updates: ^3.0.0]
• jsonwebtoken ^9.0.2
• luxon ^3.7.2
• mongoose ^8.18.3 → [Updates: ^8.18.3, ^9.0.0]
• mongoose-delete ^1.0.2
• mongoose-lean-virtuals ^0.9.1 → [Updates: ^2.0.0]
• mongoose-select-virtuals ^3.0.3
• nodemailer ^7.0.6 → [Updates: ^9.0.0]
• nodemailer-express-handlebars ^7.0.0
• string-similarity-js ^2.1.4
• tar-stream ^3.1.7 → [Updates: ^3.1.7]
• ts-cache-mongoose ^1.7.6 → [Updates: ^2.0.0]
• @eslint/eslintrc ^3.3.1 → [Updates: ^3.3.1]
• @eslint/js ^9.36.0 → [Updates: ^9.36.0, ^10.0.0]
• @types/cookie-parser ^1.4.9
• @types/cors ^2.8.19
• @types/express ^5.0.3
• @types/jsonwebtoken ^9.0.10
• @types/luxon ^3.7.1 → [Updates: ^3.7.1]
• @types/mongoose-delete ^1.0.6
• @types/multer ^2.0.0 → [Updates: ^2.0.0]
• @types/node ^24.6.2 → [Updates: ^24.6.2]
• @types/nodemailer ^7.0.2 → [Updates: ^7.0.2, ^8.0.0]
• @types/nodemailer-express-handlebars ^4.0.5
• @types/tar-stream ^3.1.4
• @typescript-eslint/eslint-plugin ^8.45.0 → [Updates: ^8.45.0]
• @typescript-eslint/parser ^8.45.0 → [Updates: ^8.45.0]
• eslint ^9.36.0 → [Updates: ^9.36.0, ^10.0.0]
• eslint-config-prettier ^10.1.8
• eslint-plugin-prettier ^5.5.4 → [Updates: ^5.5.4]
• globals ^16.4.0 → [Updates: ^17.0.0]
• nodemon ^3.1.10
• prettier ^3.6.2 → [Updates: ^3.6.2]
• ts-node ^10.9.2
• typescript ^5.9.3 → [Updates: ^7.0.0]

---

• Check this box to trigger a request for Renovate to run again on this repository