Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/bytebase/bytebase). ## Deprecations / Replacements > [!WARNING] The following dependencies are either deprecated or have replacements available. | Datasource | Package | Replacement PR? | |------------|------|--------------| | npm | [crypto-js](https://redirect.github.com/brix/crypto-js) |  | ## Awaiting Schedule The following updates are awaiting their schedule. To get an update now, click on a checkbox below. - [ ] fix(deps): update google.golang.org/genproto to eeb232e (`google.golang.org/genproto/googleapis/api`, `google.golang.org/genproto/googleapis/rpc`) - [ ] chore(deps): update dependency @biomejs/biome to v2.5.14 - [ ] chore(deps): update dependency @stylexjs/stylex to v0.19.1 - [ ] chore(deps): update dependency @stylexjs/unplugin to v0.19.1 - [ ] chore(deps): update dependency @tanstack/react-virtual to v3.14.13 - [ ] chore(deps): update dependency code-inspector-plugin to v2.0.9 - [ ] chore(deps): update dependency dompurify to v3.4.15 - [ ] chore(deps): update dependency esbuild to v0.28.2 - [ ] chore(deps): update dependency immer to v11.1.18 - [ ] chore(deps): update dependency jszip to v3.10.2 - [ ] chore(deps): update dependency lossless-json to v4.3.1 - [ ] chore(deps): update dependency markdown-it to v14.3.2 (`markdown-it`, `@types/markdown-it`) - [ ] chore(deps): update dependency postcss to v8.5.28 - [ ] chore(deps): update dependency react-resizable-panels to v4.12.4 - [ ] chore(deps): update dependency zustand to v5.0.15 - [ ] chore(deps): update testing-library monorepo (`@testing-library/jest-dom`, `@testing-library/react`) - [ ] fix(deps): update dependency @markdoc/markdoc to v0.5.10 - [ ] fix(deps): update dependency dayjs to v1.11.23 - [ ] fix(deps): update dependency uuid to v14.0.2 - [ ] fix(deps): update module cloud.google.com/go/spanner to v1.95.1 - [ ] fix(deps): update module github.com/github/gh-ost to v1.1.11 - [ ] fix(deps): update module github.com/nyaruka/phonenumbers/v2 to v2.0.12 - [ ] fix(deps): update module github.com/opensearch-project/opensearch-go/v4 to v4.7.3 - [ ] fix(deps): update module github.com/prometheus/client_model to v0.6.3 - [ ] fix(deps): update module github.com/sourcegraph/jsonrpc2 to v0.2.3 - [ ] fix(deps): update module github.com/stripe/stripe-go/v86 to v86.4.2 - [ ] chore(deps): update connectrpc to v2.2.0 (`@connectrpc/connect`, `@connectrpc/connect-web`) - [ ] chore(deps): update dependency @base-ui/react to v1.8.0 - [ ] chore(deps): update dependency @playwright/test to v1.63.0 - [ ] chore(deps): update dependency @types/d3-shape to v3.2.0 - [ ] chore(deps): update dependency @types/semver to v7.8.0 - [ ] chore(deps): update dependency autoprefixer to v10.6.1 - [ ] chore(deps): update dependency microsoft.azure.cosmos to 3.63.1 - [ ] chore(deps): update dependency pnpm to v11.27.0 - [ ] chore(deps): update dependency posthog-js to v1.433.9 - [ ] chore(deps): update dependency react-router to v8.4.0 - [ ] chore(deps): update dependency rollup to v4.63.3 - [ ] chore(deps): update dependency tailwind-merge to v3.7.0 - [ ] chore(deps): update dependency vite to v8.3.0 - [ ] chore(deps): update i18next (`i18next`, `react-i18next`) - [ ] chore(deps): update lucide monorepo to v1.47.0 (`lucide-react`, `lucide-static`) - [ ] chore(deps): update react to v19.3.0 (`@types/react`, `@types/react-dom`, `react`, `react-dom`) - [ ] fix(deps): update aws-sdk-go-v2 monorepo (`github.com/aws/aws-sdk-go-v2`, `github.com/aws/aws-sdk-go-v2/config`, `github.com/aws/aws-sdk-go-v2/credentials`, `github.com/aws/aws-sdk-go-v2/feature/rds/auth`, `github.com/aws/aws-sdk-go-v2/service/dynamodb`, `github.com/aws/aws-sdk-go-v2/service/secretsmanager`, `github.com/aws/aws-sdk-go-v2/service/sts`) - [ ] fix(deps): update dependency @bufbuild/protobuf to v2.15.0 - [ ] fix(deps): update dependency highlight.js to v11.12.0 - [ ] fix(deps): update dependency js-yaml to v5.4.2 - [ ] fix(deps): update module buf.build/go/protovalidate to v1.4.0 - [ ] fix(deps): update module cloud.google.com/go/bigquery to v1.84.0 - [ ] fix(deps): update module connectrpc.com/connect to v1.21.0 - [ ] fix(deps): update module connectrpc.com/validate to v0.7.0 - [ ] fix(deps): update module github.com/clickhouse/clickhouse-go/v2 to v2.48.0 - [ ] fix(deps): update module github.com/databricks/databricks-sdk-go to v0.181.0 - [ ] fix(deps): update module github.com/go-ego/gse to v1.1.0 - [ ] fix(deps): update module github.com/google/cel-go to v0.32.0 - [ ] fix(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.30.0 - [ ] fix(deps): update module github.com/jackc/pgx/v5 to v5.11.0 - [ ] fix(deps): update module github.com/modelcontextprotocol/go-sdk to v1.8.0 - [ ] fix(deps): update module github.com/prometheus/common to v0.71.0 - [ ] fix(deps): update module github.com/redis/go-redis/v9 to v9.22.0 - [ ] fix(deps): update module github.com/snowflakedb/gosnowflake/v2 to v2.2.0 - [ ] fix(deps): update module golang.org/x/crypto to v0.57.0 - [ ] fix(deps): update module golang.org/x/net to v0.59.0 - [ ] fix(deps): update module golang.org/x/oauth2 to v0.37.0 - [ ] fix(deps): update module golang.org/x/sync to v0.23.0 - [ ] fix(deps): update module golang.org/x/term to v0.46.0 - [ ] fix(deps): update module golang.org/x/text to v0.42.0 - [ ] fix(deps): update module google.golang.org/api to v0.298.0 - [ ] fix(deps): update module google.golang.org/grpc to v1.84.0 - [ ] chore(deps): update actions/setup-node action to v7 - [ ] chore(deps): update cloudflare/wrangler-action action to v4 - [ ] chore(deps): update dependency jsdom to v30 (`jsdom`, `@types/jsdom`) - [ ] chore(deps): update dependency node to v24 (`node`, `@types/node`) - [ ] chore(deps): update dependency pnpm to v12 - [ ] chore(deps): update dependency ubuntu to v26 - [ ] chore(deps): update dependency vitest to v5 - [ ] fix(deps): update dependency markdown-it to v15 - [ ] fix(deps): update module github.com/sijms/go-ora/v2 to v3 - [ ] **Create all awaiting schedule PRs at once** ## Pending Status Checks The following updates await pending status checks. To force their creation now, click on a checkbox below. - [ ] chore(deps): update dependency dotenv to v18 - [ ] fix(deps): update codingame to v37 (`@codingame/monaco-vscode-api`, `@codingame/monaco-vscode-javascript-default-extension`, `@codingame/monaco-vscode-languages-service-override`, `@codingame/monaco-vscode-sql-default-extension`, `@codingame/monaco-vscode-textmate-service-override`, `@codingame/monaco-vscode-theme-defaults-default-extension`, `monaco-editor`, `vscode`) ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [fix(deps): update module go.mongodb.org/mongo-driver/v2 to v2.9.1](../pull/21374) ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] [chore(deps): update module github.com/bytebase/tidb to v1](../pull/19088) ## Detected Dependencies dockerfile (3)

scripts/Dockerfile (3) - `node 24.18.1-slim` → [Updates: `24.21.0-slim`] - `golang 1.27.1-alpine3.23` - `alpine 3.24` scripts/Dockerfile.action (2) - `golang 1.27.1-alpine3.23` - `alpine 3.24` scripts/Dockerfile.action-debian (1) - `golang 1.27.1-bookworm`

github-actions (10)

.github/workflows/build-push-action-image.yml (10) - `actions/checkout v7` - `docker/login-action v4` - `docker/setup-qemu-action v4` - `docker/setup-buildx-action v4` - `docker/build-push-action v7` - `actions/checkout v7` - `docker/login-action v4` - `docker/setup-qemu-action v4` - `docker/setup-buildx-action v4` - `docker/build-push-action v7` .github/workflows/build-push-cloud-image.yml (11) - `actions/checkout v7` - `google-github-actions/auth v3` - `google-github-actions/setup-gcloud v3` - `docker/setup-buildx-action v4` - `docker/build-push-action v7` - `google-github-actions/get-gke-credentials v3` - `actions/checkout v7` - `docker/login-action v4` - `depot/setup-action v1` - `depot/build-push-action v1` - `depot/build-push-action v1` .github/workflows/build-push-release-image.yml (4) - `actions/checkout v7` - `docker/login-action v4` - `depot/setup-action v1` - `depot/build-push-action v1` .github/workflows/ci.yml (18) - `actions/checkout v7` - `actions/checkout v7` - `actions/setup-go v7` - `actions/checkout v7` - `actions/setup-go v7` - `golangci/golangci-lint-action v9` - `actions/checkout v7` - `actions/setup-node v7` - `pnpm/setup v2` - `actions/setup-go v7` - `actions/checkout v7` - `bufbuild/buf-action v1` - `go 1.27.1` - `go 1.27.1` - `golangci/golangci-lint v2.13.2` - `node 24.18.1` → [Updates: `24.21.0`] - `pnpm 11.17.0` → [Updates: `11.27.0`, `12.4.2`] - `go 1.27.1` .github/workflows/comment-cherry-pick.yml (2) - `actions/checkout v7` - `korthout/backport-action v4` .github/workflows/deploy-api-docs.yml (4) - `actions/checkout v7` - `actions/setup-node v4` → [Updates: `v7`] - `cloudflare/wrangler-action v3` → [Updates: `v4`] - `node 22` → [Updates: `24`] .github/workflows/docker-tag-latest.yml (1) - `docker/login-action v4` .github/workflows/draft-release.yml (2) - `actions/checkout v7` - `goreleaser/goreleaser-action v7` .github/workflows/proto-push-bsr.yml (2) - `actions/checkout v7` - `bufbuild/buf-setup-action v1` .github/workflows/trigger-oncall-sync.yml (1) - `ubuntu 24.04` → [Updates: `26.04`]

gomod (1)

go.mod (115) - `go 1.27.1` - `buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.12-20260825204119-511051f7f437.2@511051f7f437` - `buf.build/go/protovalidate v1.2.0` → [Updates: `v1.4.0`] - `cloud.google.com/go/bigquery v1.83.0` → [Updates: `v1.84.0`] - `cloud.google.com/go/cloudsqlconn v1.25.2` - `cloud.google.com/go/secretmanager v1.21.0` - `cloud.google.com/go/spanner v1.95.0` → [Updates: `v1.95.1`] - `connectrpc.com/connect v1.20.0` → [Updates: `v1.21.0`] - `connectrpc.com/cors v0.1.0` - `connectrpc.com/grpcreflect v1.3.0` - `connectrpc.com/validate v0.6.0` → [Updates: `v0.7.0`] - `github.com/Azure/azure-sdk-for-go/sdk/azcore v1.23.1` - `github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.14.1` - `github.com/Azure/azure-sdk-for-go/sdk/data/azcosmos v1.5.0` - `github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets v1.5.0` - `github.com/ClickHouse/clickhouse-go/v2 v2.47.0` → [Updates: `v2.48.0`] - `github.com/alexmullins/zip v0.0.0-20180717182244-4affb64b04d0@4affb64b04d0` - `github.com/apache/cassandra-gocql-driver/v2 v2.1.2` - `github.com/aws/aws-sdk-go-v2 v1.46.0` → [Updates: `v1.47.0`] - `github.com/aws/aws-sdk-go-v2/config v1.33.3` → [Updates: `v1.33.5`] - `github.com/aws/aws-sdk-go-v2/credentials v1.20.3` → [Updates: `v1.20.5`] - `github.com/aws/aws-sdk-go-v2/feature/rds/auth v1.7.2` → [Updates: `v1.7.3`] - `github.com/aws/aws-sdk-go-v2/service/dynamodb v1.67.0` → [Updates: `v1.69.0`] - `github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.48.0` → [Updates: `v1.50.0`] - `github.com/aws/aws-sdk-go-v2/service/sts v1.49.0` → [Updates: `v1.51.0`] - `github.com/beltran/gohive/v2 v2.1.0` - `github.com/blang/semver/v4 v4.0.0` - `github.com/bmatcuk/doublestar/v4 v4.10.0` - `github.com/bytebase/gomongo v0.0.0-20260730033313-67ba6e249735@67ba6e249735` - `github.com/bytebase/lsp-protocol v0.0.0-20250324071136-1586d0c10ff0@1586d0c10ff0` - `github.com/bytebase/omni v0.0.0-20260917062119-96fc86c5cfd8@96fc86c5cfd8` - `github.com/caarlos0/env/v11 v11.4.1` - `github.com/cenkalti/backoff/v7 v7.0.0` - `github.com/cockroachdb/cockroach-go/v2 v2.4.3` - `github.com/cockroachdb/cockroachdb-parser v0.25.2` - `github.com/coreos/go-oidc v2.5.0+incompatible` - `github.com/databricks/databricks-sdk-go v0.163.0` → [Updates: `v0.181.0`] - `github.com/fsnotify/fsnotify v1.10.1` - `github.com/github/gh-ost v1.1.10` → [Updates: `v1.1.11`] - `github.com/go-ego/gse v1.0.2` → [Updates: `v1.1.0`] - `github.com/go-jose/go-jose/v4 v4.1.5` - `github.com/go-ldap/ldap/v3 v3.4.14` - `github.com/go-sql-driver/mysql v1.10.1` - `github.com/golang-jwt/jwt/v5 v5.3.1` - `github.com/golang-sql/sqlexp v0.1.0` - `github.com/google/cel-go v0.30.0` → [Updates: `v0.32.0`] - `github.com/google/go-cmp v0.7.0` - `github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510@e7afc7fbc510` - `github.com/google/uuid v1.6.0` - `github.com/gorilla/websocket v1.5.3` - `github.com/gosimple/slug v1.15.0` - `github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0` → [Updates: `v2.30.0`] - `github.com/hashicorp/golang-lru/v2 v2.0.7` - `github.com/hashicorp/vault/api v1.23.0` - `github.com/hashicorp/vault/api/auth/approle v0.12.0` - `github.com/jackc/pgconn v1.14.3` - `github.com/jackc/pgtype v1.14.4` - `github.com/jackc/pgx/v5 v5.10.0` → [Updates: `v5.11.0`] - `github.com/labstack/echo-contrib/v5 v5.0.1` - `github.com/labstack/echo/v5 v5.3.1` - `github.com/lib/pq v1.12.3` - `github.com/lor00x/goldap v0.0.0-20240304151906-8d785c64d1c8@8d785c64d1c8` - `github.com/microsoft/go-mssqldb v1.11.0` - `github.com/modelcontextprotocol/go-sdk v1.7.0` → [Updates: `v1.8.0`] - `github.com/nyaruka/phonenumbers/v2 v2.0.5` → [Updates: `v2.0.12`] - `github.com/openark/golib v0.0.0-20210531070646-355f37940af8@355f37940af8` - `github.com/opensearch-project/opensearch-go/v4 v4.7.2` → [Updates: `v4.7.3`] - `github.com/paulmach/orb v0.13.0` - `github.com/pb33f/libopenapi v0.38.7` - `github.com/pkg/errors v0.9.1` - `github.com/pquerna/otp v1.5.0` - `github.com/prometheus/client_golang v1.24.1` - `github.com/prometheus/client_model v0.6.2` → [Updates: `v0.6.3`] - `github.com/prometheus/common v0.70.1` → [Updates: `v0.71.0`] - `github.com/redis/go-redis/v9 v9.21.0` → [Updates: `v9.22.0`] - `github.com/shopspring/decimal v1.4.0` - `github.com/sijms/go-ora/v2 v2.9.0` → [Updates: `v3.0.1`] - `github.com/snowflakedb/gosnowflake/v2 v2.1.0` → [Updates: `v2.2.0`] - `github.com/sourcegraph/conc v0.3.0` - `github.com/sourcegraph/jsonrpc2 v0.2.1` → [Updates: `v0.2.3`] - `github.com/spf13/cobra v1.10.2` - `githu