Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/authelia/authelia). ## Pending Status Checks The following updates await pending status checks. To force their creation now, click on a checkbox below. - [ ] build(deps): update dependency baseline-browser-mapping to v2.11.25 - [ ] build(deps): update dependency prettier to v3.9.8 - [ ] build(deps): update dependency lucide-react to v1.47.0 ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] [build(deps): update mongo docker tag to v8](../pull/13131) ## Detected Dependencies docker-compose (57)

internal/suites/ActiveDirectory/compose.yml internal/suites/BypassAll/compose.yml internal/suites/Caddy/compose.yml internal/suites/CLI/compose.yml internal/suites/compose.yml internal/suites/Docker/compose.yml internal/suites/DuoPush/compose.yml internal/suites/Envoy/compose.yml internal/suites/example/compose/authelia/compose.backend.dev.yml internal/suites/example/compose/authelia/compose.backend.dist.yml internal/suites/example/compose/authelia/compose.frontend.dev.yml internal/suites/example/compose/authelia/compose.frontend.dist.yml (1) - `nginx 1.31.6-alpine` internal/suites/example/compose/caddy/compose.yml (1) - `caddy 2.11.4-alpine` internal/suites/example/compose/duo-api/compose.yml internal/suites/example/compose/envoy/compose.yml (1) - `envoyproxy/envoy v1.39.1` internal/suites/example/compose/haproxy/compose.yml internal/suites/example/compose/httpbin/compose.yml (1) - `mccutchen/go-httpbin 2.25.0` internal/suites/example/compose/k3d/compose.yml (1) - `ghcr.io/k3d-io/k3d 5.9.0-dind` internal/suites/example/compose/ldap/compose.admin.yml (1) - `osixia/phpldapadmin 0.9.0` internal/suites/example/compose/ldap/compose.yml (1) - `osixia/openldap 1.5.0` internal/suites/example/compose/mariadb/compose.yml (1) - `mariadb 13.0.2` internal/suites/example/compose/mysql/compose.yml (1) - `mysql 26.7` internal/suites/example/compose/nginx/backend/compose.yml (1) - `nginx 1.31.6-alpine` internal/suites/example/compose/nginx/cli/compose.yml (1) - `nginx 1.31.6-alpine` internal/suites/example/compose/nginx/portal/compose.yml (1) - `nginx 1.31.6-alpine` internal/suites/example/compose/oidc-client/compose.yml internal/suites/example/compose/pam/compose.yml internal/suites/example/compose/postgres/compose.yml (1) - `postgres 18` internal/suites/example/compose/redis-sentinel/compose.yml (6) - `redis 8.10-alpine` - `redis 8.10-alpine` - `redis 8.10-alpine` - `redis 8.10-alpine` - `redis 8.10-alpine` - `redis 8.10-alpine` internal/suites/example/compose/redis/compose.yml (1) - `redis 8.10-alpine` internal/suites/example/compose/samba/compose.yml internal/suites/example/compose/smtp/compose.auth.yml internal/suites/example/compose/smtp/compose.ports.yml internal/suites/example/compose/smtp/compose.yml (1) - `axllent/mailpit v1.31.1` internal/suites/example/compose/squid/compose.yml (2) - `ubuntu/squid 6.6-24.04_edge` - `ubuntu/squid 6.6-24.04_edge` internal/suites/example/compose/traefik/compose.v2.yml (1) - `traefik v2.11.57` internal/suites/example/compose/traefik/compose.v3.yml (1) - `traefik v3.7.13` internal/suites/example/compose/traefik/compose.yml internal/suites/HAProxy/compose.yml internal/suites/HighAvailability/compose.yml internal/suites/LDAP/compose.yml internal/suites/MariaDB/compose.yml internal/suites/MultiCookieDomain/compose.yml internal/suites/MySQL/compose.yml internal/suites/NetworkACL/compose.yml internal/suites/OIDC/compose.yml internal/suites/OIDCConformance/compose.mongodb.yml (1) - `mongo 6.0.28` → [Updates: `8.3.11`] internal/suites/OIDCConformance/compose.yml internal/suites/OIDCTraefik/compose.yml internal/suites/OneFactorOnly/compose.yml internal/suites/PAM/compose.yml internal/suites/PathPrefix/compose.yml internal/suites/Postgres/compose.yml internal/suites/ShortTimeouts/compose.yml internal/suites/Standalone/compose.yml internal/suites/Traefik/compose.yml internal/suites/TwoFactor/compose.yml

dockerfile (11)

Dockerfile Dockerfile.coverage (3) - `node 26-alpine@sha256:2c45bdcbf63561a54da9549612084b43ca309854a4110c87857d609ddeb61c9e` - `golang 1.27.1-bookworm@sha256:648f440f42a0958804efb24df176f806f9d353b41f1c0627f666428e40310f6b` - `authelia/base latest@sha256:8879a857a3ad69808ea8dd10439a8de2fa167239f02916fa441e9d133dab7532` Dockerfile.dev (3) - `node 26-alpine@sha256:2c45bdcbf63561a54da9549612084b43ca309854a4110c87857d609ddeb61c9e` - `golang 1.27.1-bookworm@sha256:648f440f42a0958804efb24df176f806f9d353b41f1c0627f666428e40310f6b` - `authelia/base latest@sha256:8879a857a3ad69808ea8dd10439a8de2fa167239f02916fa441e9d133dab7532` internal/suites/example/compose/authelia/Dockerfile.backend (1) - `golang 1.27.1-alpine@sha256:cf6fca6641884b8433441b2b0652976f975e1d0fdd26d177eaaf8596087f3125` internal/suites/example/compose/authelia/Dockerfile.frontend (1) - `node 26-alpine@sha256:2c45bdcbf63561a54da9549612084b43ca309854a4110c87857d609ddeb61c9e` internal/suites/example/compose/caddy/Dockerfile (2) - `caddy 2.11.4-builder@sha256:403d237d0bb16d2e62b1f93ca9ebb4953ecbb78aee5986765713a39f9263a5b4` - `caddy 2.11.4@sha256:13ba145cba2f3e28fa801994876e4c086d1b95d5aa2a520a734765ffb6b12017` internal/suites/example/compose/duo-api/Dockerfile (1) - `node 26-alpine@sha256:2c45bdcbf63561a54da9549612084b43ca309854a4110c87857d609ddeb61c9e` internal/suites/example/compose/haproxy/Dockerfile (1) - `haproxy 3.4.4-alpine@sha256:c0afc4864dca9c68694cd1290433f0ee79b5c55be80f6745a165ffe373b9a564` internal/suites/example/compose/pam/Dockerfile (2) - `golang 1.27.1-alpine@sha256:cf6fca6641884b8433441b2b0652976f975e1d0fdd26d177eaaf8596087f3125` - `alpine 3.24.2@sha256:3cf95fe0816180395592b8373f3ec60663f076127617bbacb4eacf9667afe2e9` internal/suites/example/compose/samba/Dockerfile (1) - `alpine 3.24.2@sha256:3cf95fe0816180395592b8373f3ec60663f076127617bbacb4eacf9667afe2e9` internal/suites/OIDCConformance/Dockerfile.server (1) - `registry.gitlab.com/openid/conformance-suite release-v5.2.4@sha256:3a2615ed95a7f3bb92d545b4c65c0268f82a3893d6cd97fd98fd8e44eb15d81f`

github-actions (5)

.github/workflows/codeql-analysis.yml (5) - `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63` - `github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63` - `github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63` .github/workflows/contributors.yml (3) - `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e` .github/workflows/pr-labels.yml (2) - `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1` - `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3` .github/workflows/scorecard.yml (5) - `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc` - `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63` .github/workflows/slsa.yml (2) - `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1` - `slsa-framework/slsa-github-generator v2.1.0@f7dd8c54c2067bafc12ca7a55595d5ee9b75204a`

gomod (2)

go.mod (51) - `go 1.27.0` - `go 1.27.1` - `authelia.com/provider/oauth2 v0.3.2` - `cel.dev/cel-go v0.32.0` - `github.com/asaskevich/govalidator/v12 v12.0.0` - `github.com/authelia/jsonschema v0.1.7` - `github.com/authelia/otp v1.0.4` - `github.com/duosecurity/duo_api_golang v0.3.0` - `github.com/fasthttp/router v1.5.4` - `github.com/fasthttp/session/v2 v2.5.9` - `github.com/fsnotify/fsnotify v1.10.1` - `github.com/go-asn1-ber/asn1-ber v1.5.8` - `github.com/go-crypt/crypt v0.14.15` - `github.com/go-ldap/ldap/v3 v3.4.14` - `github.com/go-rod/rod v0.116.2` - `github.com/go-sql-driver/mysql v1.10.1` - `github.com/go-viper/mapstructure/v2 v2.5.0` - `github.com/go-webauthn/webauthn v0.18.1` - `github.com/golang-jwt/jwt/v5 v5.3.1` - `github.com/google/uuid v1.6.0` - `github.com/hashicorp/go-retryablehttp v0.7.8` - `github.com/jackc/pgx/v5 v5.11.0` - `github.com/knadh/koanf/parsers/yaml v1.1.1` - `github.com/knadh/koanf/providers/confmap v1.0.1` - `github.com/knadh/koanf/providers/env/v2 v2.0.1` - `github.com/knadh/koanf/providers/posflag v1.0.2` - `github.com/knadh/koanf/providers/rawbytes v1.0.1` - `github.com/knadh/koanf/v2 v2.3.6` - `github.com/mattn/go-sqlite3 v1.14.52` - `github.com/otiai10/copy v1.14.1` - `github.com/prometheus/client_golang v1.24.1` - `github.com/rpadovani/sqlx-v2 v0.1.2` - `github.com/savsgio/gotils v0.0.0-20250924091648-bce9a52d7761@bce9a52d7761` - `github.com/sirupsen/logrus v1.10.2` - `github.com/spf13/cobra v1.10.2` - `github.com/spf13/pflag v1.0.10` - `github.com/stretchr/testify v1.12.1` - `github.com/trustelem/zxcvbn v1.0.1` - `github.com/valyala/fasthttp v1.74.0` - `github.com/weppos/publicsuffix-go v0.50.3` - `github.com/wneessen/go-mail v0.8.1` - `github.com/ysmood/gson v0.7.3` - `go.uber.org/mock v0.6.0` - `go.yaml.in/yaml/v4 v4.0.0-rc.6` - `golang.org/x/crypto v0.57.0` - `golang.org/x/net v0.59.0` - `golang.org/x/sync v0.23.0` - `golang.org/x/term v0.46.0` - `golang.org/x/text v0.42.0` - `golang.org/x/time v0.16.0` - `golang.org/x/net v0.59.0` internal/suites/example/compose/authelia/resources/go.mod (4) - `go 1.25.1` - `github.com/cespare/reflex v0.3.2` - `github.com/go-delve/delve v1.27.2` - `golang.org/x/net v0.59.0`

kubernetes (7)

internal/suites/example/kube/apps/nginx.yml (3) - `nginx 1.31.6-alpine` - `Deployment apps/v1` - `Ingress networking.k8s.io/v1` internal/suites/example/kube/authelia/authelia.yml (2) - `Deployment apps/v1` - `Ingress networking.k8s.io/v1` internal/suites/example/kube/dashboards.yml (9) - `kubernetesui/dashboard v2.7.0` - `kubernetesui/metrics-scraper v1.0.9` - `Role rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `Deployment apps/v1` - `Deployment apps/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` internal/suites/example/kube/ldap/ldap.yml (2) - `osixia/openldap 1.5.0` - `Deployment apps/v1` internal/suites/example/kube/mail/mail.yml (3) - `axllent/mailpit v1.31.1` - `Deployment apps/v1` - `Ingress networking.k8s.io/v1` internal/suites/example/kube/storage/mariadb.yml (2) - `mariadb 13.0.2` - `Deployment apps/v1` internal/suites/example/kube/storage/redis.yml (2) - `redis 8.10-alpine` - `Deployment apps/v1`

npm (8)

docs/package.json (33) - `@docsearch/css 5.1.0` - `@docsearch/js 5.1.0` - `@tabler/icons 3.46.0` - `@thulite/core 1.5.9` - `@thulite/doks-core 1.9.3` - `@thulite/images 3.3.4` - `@thulite/inline-svg 1.2.2` - `@thulite/seo 2.4.3` - `bootstrap-icons 1.13.1` - `thulite 2.6.5` - `@changesets/changelog-github 1.0.1` - `@changesets/cli 3.0.3` - `@eslint/css 2.0.0` - `@eslint/json 2.1.0` - `@eslint/markdown 8.0.3` - `@fullhuman/postcss-purgecss 8.0.0` - `autoprefixer 10.6.1` - `basiclightbox 5.0.4` - `bootstrap 5.3.8` - `clipboard 2.0.11` - `eslint 10.10.0` - `eslint-formatter-rdjson 1.0.6` - `eslint-formatter-visualstudio 9.0.1` - `eslint-plugin-prettier 5.5.6` - `flexsearch 0.8.212` - `postcss 8.5.28` - `postcss-cli 12.0.0` - `prettier 3.9.7` → [Updates: `3.9.8`] - `vite 8.3.0` - `hugo-extended 0.166.0` - `node >=24.13.0` - `pnpm 12` - `pnpm 12.4.2` docs/pnpm-workspace.yaml (4) - `adm-zip 0.6.1` - `brace-expansion 5.0.12` - `picomatch 4.0.7` - `semver 7.8.5` internal/suites/example/compose/duo-api/package.json (1) - `express 5.2.1` internal/suites/example/compose/duo-api/pnpm-workspace.yaml (1) - `qs 6.16.0` internal/templates/src/package.json (18) - `react 19.3.0` - `react-dom 19.3.0` - `react-email 6.9.5` - `@eslint-react/eslint-plugin 5.19.1` - `@eslint/js 10.0.1` - `@react-email/ui 6.9.5` - `@types/node 26.6.1` - `@types/react 19.3.0` - `@typescript-eslint/eslint-plugin 8.70.0` - `@typescript-eslint/parser 8.70.0` - `@typescript/native 7.0.2` - `eslint 10.10.0` - `eslint-config-prettier 10.1.8` - `eslint-plugin-prettier 5.5.6` - `prettier 3.9.7` → [Updates: `3.9.8`] - `tailwindcss 4.3.3` - `typescript 6.0.2` - `vitest 5.0.1` internal/templates/src/pnpm-workspace.yaml (5) - `@babel/traverse 8.0.5` - `baseline-browser-mapping 2.11.24` → [Updates: `2.11.25`] - `fast-uri 4.1.5` - `next 16.3.5` - `postcss 8.5.28` web/package.json (54) - `@base-ui/react 1.8.0` - `@simplewebauthn/browser 14.0.0` - `axios 1.20.0` - `broadcast-channel 7.4.0` - `class-variance-authority 0.7.1` - `clsx 2.1.1` - `i18next 26.4.2` - `i18next-browser-languagedetector 8.2.1` - `i18next-http-backend 4.0.2` - `lucide-react 1.46.0` → [Updates: `1.47.0`] - `qrcode.react 4.2.0` - `react 19.3.0` - `react-dom 19.3.0` - `react-i18next 17.0.14` - `react-router 8.4.0` - `tailwind-merge 3.7.0` - `zxcvbn 4.4.2` - `@commitlint/cli 21.2.2` - `@commitlint/config-conventional 21.2.2` - `@eslint-react/eslint-plugin 5.19.1` - `@limegrass/eslint-plugin-import-alias 1.6.1` - `@tailwindcss/vite 4.3.3` - `@testing-library/jest-dom 7.0.1` - `@testing-library/react 16.3.3` - `@types/react 19.3.0` - `@types/react-dom 19.3.0` - `@types/zxcvbn 4.4.5` - `@typescript-eslint/eslint-plugin 8.70.0` - `@typescript-eslint/parser 8.70.0` - `@typescript/native 7.0.2` - `@vitejs/plugin-react 6.1.1` - `@vitest/coverage-istanbul 5.0.1` - `@vitest/ui 5.0.1` - `eslint 10.10.0` - `eslint-config-prettier 10.1.8` - `eslint-formatter-rdjson 1.0.6` - `eslint-formatter-visualstudio 9.0.1` - `eslint-import-resolver-typescript 4.4.5` - `eslint-plugin-import 2.32.0` - `eslint-plugin-perfectionist 5.11.1` - `eslint-plugin-prettier 5.5.6` - `happy-dom 20.14.5` - `lefthook 2.1.14` - `prettier 3.9.7` → [Updates: `3.9.8`] - `tailwindcss 4.3.3` - `typescript 6.0.2` - `vite 8.3.0` - `vite-plugin-checker 0.14.5` - `vite-plugin-istanbul 9.0.1` - `vite-plugin-svgr 5.2.0` - `vitest 5.0.1` - `vitest-preview 0.0.3` - `node >=22.22.0` - `pnpm 12` web/pnpm-workspace.yaml (7) - `fast-uri 4.1.5` - `js-yaml 5.4.2` - `minimatch 10.2.6` - `picomatch 4.0.7` - `qs 6.16.0` - `semver 7.8.5` - `vite 8.3.0`

regex (1)

docs/netlify.toml (1) - `hugo-extended 0.166.0`

--- - [ ] Check this box to trigger a request for Renovate to run again on this repository