Dependency Dashboard

> ℹ️ **Note** > > This PR body was truncated due to platform limits. This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/logto-io/logto). ## Deprecations / Replacements > [!WARNING] The following dependencies are either deprecated or have replacements available. | Datasource | Package | Replacement PR? | |------------|------|--------------| | npm | [@shopify/jest-koa-mocks](https://redirect.github.com/Shopify/quilt) |  | | npm | [@simplewebauthn/types](https://redirect.github.com/MasterKale/SimpleWebAuthn) |  | | npm | `@types/psl` |  | | npm | `@types/tar` |  | | npm | [koa-router](https://redirect.github.com/koajs/router) |  | | npm | [pkg-dir](https://redirect.github.com/sindresorhus/pkg-dir) |  | | npm | [snake-case](https://redirect.github.com/blakeembrey/change-case) |  | ## Rate-Limited The following updates are currently rate-limited. To force their creation now, click on a checkbox below. - [ ] chore(deps): update dependency @logto/cloud to v0.2.5-bb0b0a2 - [ ] chore(deps): update dependency @logto/react to v4.0.15 - [ ] chore(deps): update dependency fflate@>=0.4.5 <0.4.9 to ^0.8.0 - [ ] chore(deps): update docker/dockerfile docker tag to v1.27 - [ ] chore(deps): update logto-io/actions-run-logto-integration-tests action to v4.1.0 - [ ] fix(deps): update dependency openapi-fetch to ^0.17.0 - [ ] chore(deps): update actions/checkout action to v7 - [ ] chore(deps): update actions/stale action to v11 - [ ] chore(deps): update changesets/action action to v2 - [ ] chore(deps): update codecov/codecov-action action to v7 - [ ] chore(deps): update commitlint monorepo to v21 (`@commitlint/cli`, `@commitlint/config-conventional`, `@commitlint/types`) - [ ] chore(deps): update crazy-max/ghaction-import-gpg action to v7 - [ ] chore(deps): update dependency @apidevtools/swagger-parser to v13 - [ ] chore(deps): update dependency @babel/core@<=7.29.0 to v8 - [ ] chore(deps): update dependency @changesets/cli to v3 - [ ] chore(deps): update dependency @open-wc/testing to v5 - [ ] chore(deps): update dependency @simplewebauthn/browser to v14 - [ ] chore(deps): update dependency @types/nodemailer to v8 - [ ] chore(deps): update dependency @types/supertest to v7 - [ ] chore(deps): update dependency @types/tar to v7 - [ ] chore(deps): update dependency @vitejs/plugin-react to v6 - [ ] chore(deps): update dependency @web/dev-server to v1 - [ ] chore(deps): update dependency @web/dev-server-esbuild to v2 - [ ] chore(deps): update dependency @web/test-runner to v1 - [ ] chore(deps): update dependency @web/test-runner-playwright to v1 - [ ] chore(deps): update dependency ajv@<6.14.0 to v8 - [ ] chore(deps): update dependency basic-ftp@<=5.2.2 to v6 - [ ] chore(deps): update dependency brace-expansion@<1.1.18 to v5 - [ ] chore(deps): update dependency brace-expansion@>=2.0.0 <2.1.4 to v5 - [ ] chore(deps): update dependency cross-spawn@<6.0.6 to v7 - [ ] chore(deps): update dependency diff@>=6.0.0 <8.0.3 to v9 - [ ] chore(deps): update dependency eslint to v10 - [ ] chore(deps): update dependency expect-puppeteer to v11 - [ ] chore(deps): update dependency fast-uri@>=3.0.0 <3.1.6 to v4 - [ ] chore(deps): update dependency form-data@<2.5.6 to v4 - [ ] chore(deps): update dependency immutable@>=4.0.0-rc.1 <4.3.9 to v5 - [ ] chore(deps): update dependency joi@<17.13.6 to v18 - [ ] chore(deps): update dependency js-yaml@>=3.0.0 <3.15.2 to v5 - [ ] chore(deps): update dependency js-yaml@>=4.0.0 <4.3.2 to v5 - [ ] chore(deps): update dependency jsonc-eslint-parser to v3 - [ ] chore(deps): update dependency koa@<2.16.4 to v3 - [ ] chore(deps): update dependency lint-staged to v17 - [ ] chore(deps): update dependency mermaid to v12 - [ ] chore(deps): update dependency mermaid@<10.9.8 to v12 - [ ] chore(deps): update dependency minimatch@<3.1.4 to v10 - [ ] chore(deps): update dependency minimatch@>=5.0.0 <5.1.8 to v10 - [ ] chore(deps): update dependency minimatch@>=9.0.0 <9.0.7 to v10 - [ ] chore(deps): update dependency nanoid@<3.3.17 to v6 - [ ] chore(deps): update dependency nanoid@>=4.0.0 <5.1.16 to v6 - [ ] chore(deps): update dependency nodemailer@<9.1.1 to v10 - [ ] chore(deps): update dependency picomatch@<2.3.2 to v4 - [ ] chore(deps): update dependency postcss-modules to v9 - [ ] chore(deps): update dependency postcss-selector-parser@>=6.1.0 <6.1.3 to v7 - [ ] chore(deps): update dependency property-information to v7 - [ ] chore(deps): update dependency puppeteer to v25 - [ ] chore(deps): update dependency react-day-picker to v10 - [ ] chore(deps): update dependency react-dropzone to v20 - [ ] chore(deps): update dependency react-easy-crop to v6 - [ ] chore(deps): update dependency react-i18next to v17 - [ ] chore(deps): update dependency react-markdown to v10 - [ ] chore(deps): update dependency react-string-replace to v2 - [ ] chore(deps): update dependency react-syntax-highlighter to v16 - [ ] chore(deps): update dependency react-timer-hook to v4 - [ ] chore(deps): update dependency react-top-loading-bar to v3 - [ ] chore(deps): update dependency recharts to v3 - [ ] chore(deps): update dependency sinon to v22 (`sinon`, `@types/sinon`) - [ ] chore(deps): update dependency stylelint to v17 - [ ] chore(deps): update dependency ubuntu to v24 - [ ] chore(deps): update dependency uuid@<11.1.1 to v14 - [ ] chore(deps): update dependency vite to v8 - [ ] chore(deps): update dependency vite-plugin-svgr to v5 - [ ] chore(deps): update dependency vite@<=6.4.2 to v8 - [ ] chore(deps): update dependency ws@>=7.0.0 <7.5.11 to v8 - [ ] chore(deps): update dependency zod-to-ts to v2 - [ ] chore(deps): update docker/build-push-action action to v7 - [ ] chore(deps): update docker/login-action action to v4 - [ ] chore(deps): update docker/metadata-action action to v6 - [ ] chore(deps): update docker/setup-buildx-action action to v4 - [ ] chore(deps): update github/codeql-action action to v4 - [ ] chore(deps): update ikalnytskyi/action-setup-postgres action to v8 - [ ] chore(deps): update jest monorepo to v30 (`@jest/globals`, `@jest/test-sequencer`, `@jest/types`, `@types/jest`, `jest`, `jest-environment-jsdom`) - [ ] chore(deps): update node.js to v24 (`node`, `@types/node`) - [ ] chore(deps): update peter-evans/repository-dispatch action to v4 - [ ] chore(deps): update pnpm to v12 - [ ] chore(deps): update postgres docker tag to v18 - [ ] chore(deps): update react monorepo to v19 (`@types/react`, `@types/react-dom`, `react`, `react-dom`) - [ ] chore(deps): update react-spring monorepo to v10 (`@react-spring/shared`, `@react-spring/web`) - [ ] chore(deps): update redis docker tag to v8 - [ ] chore(deps): update softprops/action-gh-release action to v3 - [ ] chore(deps): update vitest monorepo to v5 (`@vitest/coverage-v8`, `vitest`) - [ ] fix(deps): update dependency @azure/msal-node to v6 - [ ] fix(deps): update dependency @google-cloud/storage to v8 - [ ] fix(deps): update dependency @logto/js to v6 - [ ] fix(deps): update dependency camelcase to v9 - [ ] fix(deps): update dependency camelcase-keys to v10 - [ ] fix(deps): update dependency chalk to v6 - [ ] fix(deps): update dependency color to v5 - [ ] fix(deps): update dependency dotenv to v18 - [ ] fix(deps): update dependency find-up to v8 - [ ] fix(deps): update dependency got to v16 - [ ] fix(deps): update dependency helmet to v8 - [ ] fix(deps): update dependency html-to-text to v10 - [ ] fix(deps): update dependency http-proxy-middleware to v4 - [ ] fix(deps): update dependency i18next to v26 - [ ] fix(deps): update dependency inquirer to v14 - [ ] fix(deps): update dependency koa-router to v14 - [ ] fix(deps): update dependency ky to v2 - [ ] fix(deps): update dependency nanoid to v6 - [ ] fix(deps): update dependency nodemailer to v10 - [ ] fix(deps): update dependency ora to v9 - [ ] fix(deps): update dependency otplib to v13 - [ ] fix(deps): update dependency p-limit to v7 - [ ] fix(deps): update dependency p-queue to v9 - [ ] fix(deps): update dependency p-retry to v8 - [ ] fix(deps): update dependency pkg-dir to v9 - [ ] fix(deps): update dependency postmark to v5 - [ ] fix(deps): update dependency raw-body to v4 - [ ] fix(deps): update dependency redis to v6 - [ ] fix(deps): update dependency snakecase-keys to v9 - [ ] fix(deps): update dependency tinypool to v2 - [ ] fix(deps): update dependency typescript to v7 - [ ] fix(deps): update dependency yargs to v18 - [ ] fix(deps): update dependency zod to v4 - [ ] fix(deps): update react-router monorepo to v7 (`react-router-dom`, `react-router-dom@>=6.7.0 <6.30.6`) - [ ] **Create all rate-limited PRs at once** ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [chore(deps): update dependency react-router@>=6.7.0 <6.30.6 to v7 [security]](../pull/9554) - [ ] [fix(deps): update dependency @simplewebauthn/server to v13 [security]](../pull/9557) - [ ] [fix(deps): update oidc-provider digest to 5570006](../pull/9543) - [ ] [fix(deps): update dependency @silverhand/slonik to v31.0.0-beta.3](../pull/7354) - [ ] [chore(deps): update dependency @xmldom/xmldom@<0.8.15 to ^0.9.0](../pull/9549) - [ ] [chore(deps): update dependency esbuild to ^0.28.0](../pull/9550) - [ ] [chore(deps): update zaproxy/action-full-scan action to v0.13.0](../pull/8565) - [ ] [fix(deps): update dependency iconv-lite to v0.7.3](../pull/8601) - [ ] [fix(deps): update dependency zod to v3.25.76](../pull/7369) - [ ] [chore(deps): update dependency @simplewebauthn/types to v12](../pull/6888) - [ ] [fix(deps): update dependency applicationinsights to v3](../pull/5754) - [ ] [fix(deps): update dependency date-fns to v4](../pull/6744) - [ ] **Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies > [!NOTE] > Detected dependencies section has been truncated docker-compose (3)

docker-compose.integration.yml (2) - `postgres 17-alpine` → [Updates: `18-alpine`] - `redis 6-alpine` → [Updates: `8-alpine`] docker-compose.yml (1) - `postgres 17-alpine` → [Updates: `18-alpine`] packages/api/docker-compose.local.yml

dockerfile (2)

Dockerfile (3) - `docker/dockerfile 1.7` → [Updates: `1.27`] - `node 22-alpine` → [Updates: `24-alpine`] - `node 22-alpine` → [Updates: `24-alpine`] Dockerfile.integration (1) - `node 22-alpine` → [Updates: `24-alpine`]

github-actions (13)

.github/workflows/alteration-compatibility-integration-test.yml (5) - `actions/checkout v4` → [Updates: `v7`] - `logto-io/actions-package-logto-artifact v3` - `logto-io/actions-run-logto-integration-tests v4.1.0` - `ubuntu 22.04` → [Updates: `24.04`] - `ubuntu 22.04` → [Updates: `24.04`] .github/workflows/changesets.yml (4) - `actions/checkout v4` → [Updates: `v7`] - `silverhand-io/actions-node-pnpm-run-steps v5` - `crazy-max/ghaction-import-gpg v6` → [Updates: `v7`] - `changesets/action v1` → [Updates: `v2.1.2`] .github/workflows/close-stale.yml (1) - `actions/stale v9` → [Updates: `v11`] .github/workflows/codeql-analysis.yml (4) - `actions/checkout v4` → [Updates: `v7`] - `github/codeql-action v3` → [Updates: `v4`] - `github/codeql-action v3` → [Updates: `v4`] - `github/codeql-action v3` → [Updates: `v4`] .github/workflows/commitlint.yml (2) - `actions/checkout v4` → [Updates: `v7`] - `silverhand-io/actions-node-pnpm-run-steps v5`