Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/NodeBB/NodeBB). ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [chore(deps): update dependency husky to v9](../pull/12304) - [ ] [fix(deps): update dependency cropperjs to v2](../pull/13221) - [ ] [fix(deps): update dependency jquery to v4](../pull/13902) - [ ] [fix(deps): update dependency redis to v6](../pull/14319) - [ ] **Click on this checkbox to rebase all open PRs at once** ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] [fix(deps): update dependency express to v5](../pull/13297) ## Detected Dependencies docker-compose (3)

docker-compose-pgsql.yml (2) - `postgres 18.6-alpine` - `redis 8.10.1-alpine` docker-compose-redis.yml (1) - `redis 8.10.1-alpine` docker-compose.yml (3) - `mongo 7-jammy` - `redis 8.10.1-alpine` - `postgres 18.6-alpine`

dockerfile (2)

dev.Dockerfile Dockerfile

github-actions (2)

.github/workflows/docker.yml (11) - `actions/checkout v7` - `docker/setup-buildx-action v4` - `docker/login-action v4` - `docker/metadata-action v6` - `actions/cache v6` - `docker/build-push-action v7` - `actions/upload-artifact v7` - `actions/download-artifact v8` - `docker/setup-buildx-action v4` - `docker/login-action v4` - `docker/metadata-action v6` .github/workflows/test.yaml (8) - `actions/checkout v7` - `actions/setup-node v7` - `bahmutov/npm-install v1` - `coverallsapp/github-action v2.3.8@8d6379e14d29928660c4ba802d8e85393440b329` - `coverallsapp/github-action v2.3.8@8d6379e14d29928660c4ba802d8e85393440b329` - `postgres 18-alpine` - `redis 8.10.1` - `mongo 8.3`

npm (1)

install/package.json (158) - `@adactive/bootstrap-tagsinput 0.8.2` - `@fontsource-utils/scss 0.2.4` - `@fontsource/inter 5.3.0` - `@fontsource/poppins 5.3.0` - `@fortawesome/fontawesome-free 7.3.1` - `@isaacs/ttlcache 2.1.5` - `@json2csv/node 7.0.8` - `@misskey-dev/node-http-message-signatures ^0.0.10` - `@nodebb/spider-detector 2.0.3` - `@popperjs/core 2.11.8` - `@textcomplete/contenteditable 0.1.13` - `@textcomplete/core 0.1.13` - `@textcomplete/textarea 0.1.13` - `@xmldom/xmldom ^0.9.10` - `ace-builds 1.44.0` - `archiver 8.0.0` - `async 3.2.6` - `autoprefixer 10.6.1` - `bcryptjs 3.0.3` - `benchpressjs 2.5.5` - `body-parser 2.3.0` - `bootbox 6.0.4` - `bootstrap 5.3.8` - `bootswatch 5.3.8` - `chalk 6.0.0` - `chart.js 4.5.1` - `cli-graph 3.2.2` - `clipboard 2.0.11` - `commander 15.0.0` - `compare-versions 6.1.1` - `compression 1.8.2` - `connect-flash 0.1.1` - `connect-mongo 6.0.0` - `connect-pg-simple 10.0.0` - `connect-redis 10.0.0` - `cookie-parser 1.4.7` - `cron 4.4.0` - `cronstrue 3.27.0` - `cropperjs 1.6.3` → [Updates: `2.2.0`] - `csrf-sync 4.2.1` - `csv-parse 7.0.2` - `daemon 1.1.0` - `diff 9.0.0` - `esbuild 0.28.2` - `express 4.22.3` → [Updates: `5.2.1`] - `express-session 1.19.0` - `express-useragent 2.2.3` - `fetch-cookie 3.2.0` - `file-loader 6.2.0` - `file-type 22.1.1` - `fs-extra 11.4.0` - `graceful-fs 4.2.11` - `helmet 8.3.0` - `html-to-text 10.0.1` - `imagesloaded 5.0.0` - `ipaddr.js 2.5.0` - `jquery 3.7.1` → [Updates: `4.0.0`] - `jquery-deserialize 2.0.0` - `jquery-form 4.3.0` - `jquery-serializeobject 1.0.0` - `jquery-ui 1.14.2` - `jsesc 3.1.0` - `jsonwebtoken 9.0.3` - `lodash 4.18.1` - `logrotate-stream 0.2.9` - `lru-cache 11.5.2` - `mime 4.1.0` - `minimizer-webpack-plugin 5.10.1` - `mkdirp 3.0.1` - `mongodb 7.6.0` - `morgan 1.12.1` - `mousetrap 1.6.5` - `multer 2.4.0` - `nconf 0.13.0` - `nodebb-plugin-2factor 8.0.10` - `nodebb-plugin-composer-default 11.0.16` - `nodebb-plugin-dbsearch 7.0.1` - `nodebb-plugin-emoji 6.0.19` - `nodebb-plugin-emoji-android 4.1.1` - `nodebb-plugin-link-preview 2.2.9` - `nodebb-plugin-markdown 13.2.11` - `nodebb-plugin-mentions 5.0.4` - `nodebb-plugin-spam-be-gone 2.3.11` - `nodebb-plugin-web-push 0.9.5` - `nodebb-rewards-essentials 1.0.3` - `nodebb-theme-harmony 3.3.4` - `nodebb-theme-lavender 8.1.0` - `nodebb-theme-peace 3.1.3` - `nodebb-theme-persona 15.3.3` - `nodebb-widget-essentials 8.0.10` - `nodemailer 10.0.10` - `nprogress 0.2.0` - `passport 0.7.0` - `passport-http-bearer 1.0.1` - `passport-local 1.0.0` - `pg 8.23.0` - `pg-cursor 2.22.0` - `postcss 8.5.28` - `pretty ^2.0.0` - `progress-webpack-plugin 1.0.16` - `prompt 1.3.0` - `proxy-addr 2.0.8` - `qs 6.16.0` - `redis 5.12.1` → [Updates: `6.2.1`] - `rimraf 6.1.3` - `rss 1.2.2` - `rtlcss 4.3.0` - `sanitize-html 2.17.7` - `sass 1.104.1` - `satori 0.33.4` - `sbd ^1.0.19` - `semver 7.8.5` - `serve-favicon 2.5.1` - `sharp 0.35.4` - `sitemap 9.0.1` - `socket.io 4.8.3` - `socket.io-client 4.8.3` - `@socket.io/redis-adapter 8.3.0` - `sortablejs 1.15.7` - `spdx-license-list 6.12.0` - `textcomplete 0.18.2` - `textcomplete.contenteditable 0.1.1` - `timeago 1.6.7` - `tinycon 0.6.8` - `toobusy-js 0.5.1` - `tough-cookie 6.0.2` - `undici 8.10.2` - `validator 13.15.35` - `wawoff2 2.0.1` - `webpack 5.111.0` - `webpack-merge 6.0.1` - `winston 3.19.0` - `workerpool 10.0.3` - `xml 1.0.1` - `yargs 18.1.0` - `zxcvbn 4.4.2` - `@apidevtools/swagger-parser 13.0.0` - `@commitlint/cli 21.2.2` - `@commitlint/config-angular 21.2.2` - `coveralls 3.1.1` - `@eslint/js 10.0.1` - `@stylistic/eslint-plugin 5.10.0` - `ajv 8.20.0` - `eslint-config-nodebb 2.0.3` - `globals 17.12.0` - `grunt 1.6.3` - `grunt-contrib-watch 1.1.0` - `husky 8.0.3` → [Updates: `9.1.7`] - `jsdom 30.1.0` - `lint-staged 17.5.1` - `mocha 12.0.2` - `mocha-lcov-reporter 1.3.0` - `mockdate 3.0.5` - `nyc 18.0.0` - `smtp-server 3.19.13` - `sass-embedded 1.104.1` - `node >=22` - `jquery 3.7.1` → [Updates: `4.0.0`]

--- - [ ] Check this box to trigger a request for Renovate to run again on this repository