Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/sequelize/sequelize). ## Rate-Limited The following updates are currently rate-limited. To force their creation now, click on a checkbox below. - [ ] meta: update dependency mocha to v11.8.0 - [ ] meta: update dependency moment to v2.31.0 - [ ] meta: update dependency oclif to v4.24.0 - [ ] meta: update dependency prettier to v3.9.7 - [ ] meta: update mariadb docker tag to v11.8.9 - [ ] meta: update yarn to v4.18.0 - [ ] meta: update actions/checkout action to v7 - [ ] meta: update actions/github-script action to v9 - [ ] meta: update actions/setup-node action to v7 - [ ] meta: update actions/stale action to v11 - [ ] meta: update dependency @oclif/core to v5 - [ ] meta: update dependency @oclif/plugin-help to v7 - [ ] meta: update dependency @oclif/test to v5 - [ ] meta: update dependency concurrently to v10 - [ ] meta: update dependency cosmiconfig to v10 - [ ] meta: update dependency eslint-plugin-jsdoc to v64 - [ ] meta: update dependency eslint-plugin-mocha to v12 - [ ] meta: update dependency lcov-result-merger to v6 - [ ] meta: update dependency lerna to v10 - [ ] meta: update dependency lint-staged to v17 - [ ] meta: update dependency mocha to v12 - [ ] meta: update dependency node to v24.21.0 (`node`, `@types/node`) - [ ] meta: update dependency node-gyp to v13 - [ ] meta: update dependency nx to v23 - [ ] meta: update dependency oclif to v6 - [ ] meta: update dependency oracledb to v7 (`oracledb`, `@types/oracledb`) - [ ] meta: update dependency sinon to v22 (`sinon`, `@types/sinon`) - [ ] meta: update dependency snowflake-sdk to v3 - [ ] meta: update dependency tedious to v20 - [ ] meta: update dependency typescript to v7 - [ ] meta: update dependency uuid to v14 - [ ] meta: update mariadb docker tag to v13 - [ ] meta: update mysql docker tag to v26 - [ ] meta: lock file maintenance - [ ] **Create all rate-limited PRs at once** ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [meta: update dependency @types/node to v22.20.3](../pull/18396) - [ ] [meta: update dependency markdownlint-cli to v0.49.1](../pull/18397) - [ ] **Click on this checkbox to rebase all open PRs at once** ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] [meta: update dependency expect-type to v0.20.0](../pull/17475) - [ ] [meta: update dependency @ephys/eslint-config-typescript to v21](../pull/18104) - [ ] [meta: update dependency @inquirer/checkbox to v5](../pull/18057) - [ ] [meta: update dependency @inquirer/confirm to v6](../pull/18063) - [ ] [meta: update dependency @inquirer/input to v5](../pull/18064) - [ ] [meta: update dependency @inquirer/select to v5](../pull/18065) - [ ] [meta: update dependency @types/chai to v5](../pull/18023) - [ ] [meta: update dependency ansis to v4](../pull/17864) - [ ] [meta: update dependency bnf-parser to v4](../pull/16276) - [ ] [meta: update dependency chai to v6](../pull/18024) - [ ] [meta: update dependency chai-as-promised to v8](../pull/17373) (`chai-as-promised`, `@types/chai-as-promised`) - [ ] [meta: update dependency delay to v7](../pull/18046) - [ ] [meta: update dependency eslint to v10](../pull/18153) - [ ] [meta: update dependency expect-type to v1](../pull/17533) - [ ] [meta: update dependency nyc to v18](../pull/18155) - [ ] [meta: update dependency p-map to v7](../pull/16838) - [ ] [meta: update dependency p-props to v6](../pull/16631) - [ ] [meta: update dependency p-settle to v5](../pull/15033) - [ ] [meta: update dependency p-timeout to v7](../pull/18027) - [ ] [meta: update dependency rimraf to v6](../pull/17463) - [ ] [meta: update dependency sinon-chai to v4](../pull/17464) (`sinon-chai`, `@types/sinon-chai`) - [ ] [meta: update dependency type-fest to v5](../pull/18028) - [ ] [meta: update dependency ubuntu to v24](../pull/17532) ## Detected Dependencies docker-compose (6)

dev/db2/latest/docker-compose.yml (1) - `icr.io/db2_community/db2 12.1.5.0` dev/mariadb/latest/docker-compose.yml (1) - `mariadb 11.6.2` → [Updates: `11.8.9`, `13.0.2`] dev/mssql/latest/docker-compose.yml (1) - `mcr.microsoft.com/mssql/server 2025-latest` dev/mysql/latest/docker-compose.yml (1) - `mysql 8.4.11` → [Updates: `26.7.0`] dev/oracle/latest/docker-compose.yml (1) - `gvenzl/oracle-free 23.26.3-slim` dev/postgres/latest/docker-compose.yml (1) - `postgis/postgis 18-3.6`

github-actions (9)

.github/workflows/authors.yml (1) - `actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7.0.1`] .github/workflows/auto-add-pending-approval.yml (1) - `actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd` → [Updates: `v9.0.0`] .github/workflows/auto-remove-awaiting-response-label.yml .github/workflows/autoupdate.yml (2) - `actions/create-github-app-token v3` - `sequelize/pr-auto-update-and-handle-conflicts 2.1.0@fcc8633eb414be54676e16dc17f3340ec40dda27` .github/workflows/ci.yml (38) - `actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7.0.1`] - `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`] - `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7.0.1`] - `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`] - `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7.0.1`] - `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`] - `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7.0.1`] - `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`] - `actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7.0.1`] - `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`] - `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7.0.1`] - `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`] - `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7.0.1`] - `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`] - `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7.0.1`] - `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`] - `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7.0.1`] - `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`] - `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7.0.1`] - `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`] - `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `actions/create-github-app-token v3` - `actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7.0.1`] - `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`] - `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `sdepold/github-action-get-latest-release master@aa12fcb2943e8899cbcc29ff6f73409b32b48fa1` - `node 24.14.0` → [Updates: `24.21.0`] - `node 24.14.0` → [Updates: `24.21.0`] - `node 24.14.0` → [Updates: `24.21.0`] - `node 24.14.0` → [Updates: `24.21.0`] .github/workflows/notify.yml (3) - `cardinalby/git-get-release-action 1.2.6@2ab178299eecb253f820dcf2cce11f62be1178f7` - `ethomson/send-tweet-action v1.0.0@288f9339e0412e3038dce350e0da5ecdf12133a6` - `sequelize/proxy-release-to-open-collective main@d8edaf56f12f51518fb97829b699a2e2e6d8166e` .github/workflows/pr-title.yml (1) - `amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50` .github/workflows/semgrep.yml (2) - `actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7`] - `ubuntu 22.04` → [Updates: `24.04`] .github/workflows/stale.yml (4) - `actions/create-github-app-token v3` - `actions/stale v10.4.0@1e223db275d687790206a7acac4d1a11bd6fe629` → [Updates: `v11.0.0`] - `actions/stale v10.4.0@1e223db275d687790206a7acac4d1a11bd6fe629` → [Updates: `v11.0.0`] - `actions/stale v10.4.0@1e223db275d687790206a7acac4d1a11bd6fe629` → [Updates: `v11.0.0`]

npm (14)

package.json (33) - `@ephys/eslint-config-typescript 20.1.4` → [Updates: `21.0.1`] - `@rushstack/eslint-patch 1.16.1` - `@types/chai 4.3.20` → [Updates: `5.2.3`] - `@types/lodash 4.17.25` - `@types/mocha 10.0.10` - `@types/node 22.19.17` → [Updates: `22.20.3`, `24.13.5`] - `chai 4.5.0` → [Updates: `6.2.2`] - `concurrently 9.2.4` → [Updates: `10.0.5`] - `cross-env 10.1.0` - `esbuild 0.28.2` - `eslint 8.57.1` → [Updates: `10.10.0`] - `eslint-plugin-jsdoc 61.7.1` → [Updates: `64.5.2`] - `eslint-plugin-mocha 10.5.0` → [Updates: `12.0.2`] - `fast-glob 3.3.3` - `husky 9.1.7` - `lerna 8.2.4` → [Updates: `10.0.1`] - `lint-staged 16.4.0` → [Updates: `17.5.1`] - `lodash 4.18.1` - `markdownlint-cli 0.48.0` → [Updates: `0.49.1`] - `mocha 11.7.5` → [Updates: `11.8.0`, `12.0.2`] - `node-gyp 11.5.0` → [Updates: `13.0.2`] - `node-hook 1.0.0` - `nx 22.7.12` → [Updates: `23.2.1`] - `prettier 3.5.3` → [Updates: `3.9.7`] - `prettier-plugin-organize-imports 4.3.0` - `source-map-support 0.5.21` - `ts-node 10.9.2` - `typedoc 0.28.20` - `typedoc-plugin-mdn-links 5.1.1` - `typedoc-plugin-missing-exports 4.1.4` - `typescript 6.0.3` → [Updates: `7.0.2`] - `node-gyp 11.5.0` → [Updates: `13.0.2`] - `yarn 4.13.0` → [Updates: `4.18.0`] packages/cli/package.json (19) - `@inquirer/checkbox ^4.3.2` → [Updates: `^5.2.5`] - `@inquirer/confirm ^5.1.21` → [Updates: `^6.3.2`] - `@inquirer/input ^4.3.1` → [Updates: `^5.1.6`] - `@inquirer/select ^4.4.2` → [Updates: `^5.2.5`] - `@oclif/core ^4.14.0` → [Updates: `^5.0.0`] - `@oclif/plugin-help ^6.3.0` → [Updates: `^7.0.0`] - `ansis ^3.17.0` → [Updates: `^4.4.0`] - `cosmiconfig ^9.0.2` → [Updates: `^10.0.1`] - `umzug ^3.8.3` - `zod ^4.6.5` - `@oclif/test 4.2.0` → [Updates: `5.0.0`] - `@types/chai 4.3.20` → [Updates: `5.2.3`] - `@types/mocha 10.0.10` - `chai 4.5.0` → [Updates: `6.2.2`] - `concurrently 9.2.4` → [Updates: `10.0.5`] - `mocha 11.7.5` → [Updates: `11.8.0`, `12.0.2`] - `oclif 4.22.96` → [Updates: `4.24.0`, `6.0.0`] - `rimraf 5.0.10` → [Updates: `6.1.3`] - `node ^22.13.0 || >=24.0.0` packages/core/package.json (42) - `@types/debug ^4.1.13` - `@types/validator ^13.15.10` - `ansis ^3.17.0` → [Updates: `^4.4.0`] - `bnf-parser ^3.1.6` → [Updates: `^4.1.3`] - `dayjs ^1.11.23` - `debug ^4.4.3` - `fast-glob ^3.3.3` - `inflection ^3.0.2` - `lodash ^4.18.1` - `retry-as-promised ^7.1.1` - `semver ^7.8.5` - `sequelize-pool ^8.0.1` - `toposort-class ^1.0.1` - `type-fest ^4.41.0` → [Updates: `^5.10.0`] - `uuid ^11.1.1` → [Updates: `^14.0.2`] - `validator ^13.15.35` - `@types/chai 4.3.20` → [Updates: `5.2.3`] - `@types/chai-as-promised 7.1.8` → [Updates: `8.0.2`] - `@types/chai-datetime 1.0.0` - `@types/lodash 4.17.25` - `@types/mocha 10.0.10` - `@types/semver 7.8.0` - `@types/sinon 17.0.4` → [Updates: `22.0.0`] - `@types/sinon-chai 3.2.12` → [Updates: `4.0.0`] - `chai 4.5.0` → [Updates: `6.2.2`] - `chai-as-promised 7.1.2` → [Updates: `8.0.2`] - `chai-datetime 1.8.1` - `delay 5.0.0` → [Updates: `7.0.0`] - `expect-type 0.13.0` → [Updates: `0.20.0`, `1.4.0`] - `fs-jetpack 5.1.0` - `lcov-result-merger 5.0.1` → [Updates: `6.0.0`] - `mocha 11.7.5` → [Updates: `11.8.0`, `12.0.2`] - `moment 2.30.1` → [Updates: `2.31.0`] - `nyc 17.1.0` → [Updates: `18.0.0`] - `p-map 4.0.0` → [Updates: `7.0.8`] - `p-props 4.0.0` → [Updates: `6.1.0`] - `p-settle 4.1.1` → [Updates: `5.2.1`] - `p-timeout 4.1.0` → [Updates: `7.0.2`] - `rimraf 5.0.10` → [Updates: `6.1.3`] - `sinon 18.0.1` → [Updates: `22.1.0`] - `sinon-chai 3.7.0` → [Updates: `4.0.1`] - `node ^22.13.0 || >=24.0.0` packages/db2/package.json (7) - `dayjs ^1.11.23` - `ibm_db ^4.0.1` - `lodash ^4.18.1` - `@types/chai 4.3.20` → [Updates: `5.2.3`] - `@types/mocha 10.0.10` - `chai 4.5.0` → [Updates: `6.2.2`] - `mocha 11.7.5` → [Updates: `11.8.0`, `12.0.2`] packages/ibmi/package.json (3) - `dayjs ^1.11.23` - `lodash ^4.18.1` - `odbc ^2.5.0` packages/mariadb/package.json (9) - `dayjs ^1.11.23` - `lodash ^4.18.1` - `mariadb ^3.5.4` - `semver ^7.8.5` - `wkx ^0.5.0` - `@types/chai 4.3.20` → [Updates: `5.2.3`] - `@types/mocha 10.0.10` - `chai 4.5.0` → [Updates: `6.2.2`] - `mocha 11.7.5` → [Updates: `11.8.0`, `12.0.2`] packages/mssql/package.json (9) - `dayjs ^1.11.23` - `lodash ^4.18.1` - `tedious ^19.2.2` → [Updates: `^20.0.0`] - `@types/chai 4.3.20` → [Updates: `5.2.3`] - `@types/mocha 10.0.10` - `@types/sinon 17.0.4` → [Updates: `22.0.0`] - `chai 4.5.0` → [Updates: `6.2.2`] - `mocha 11.7.5` → [Updates: `11.8.0`, `12.0.2`] - `sinon 18.0.1` → [Updates: `22.1.0`] packages/mysql/package.json (8) - `dayjs ^1.11.23` - `lodash ^4.18.1` - `mysql2 ^3.24.4` - `wkx ^0.5.0` - `@types/chai 4.3.20` → [Updates: `5.2.3`] - `@types/mocha 10.0.10` - `chai 4.5.0` → [Updates: `6.2.2`] - `mocha 11.7.5` → [Updates: `11.8.0`, `12.0.2`] packages/oracle/package.json (5) - `@types/oracledb ^6.10.4` → [Updates: `^7.0.3`] - `dayjs ^1.11.23` - `lodash ^4.18.1` - `oracledb ^6.10.0` → [Updates: `^7.0.1`] - `semver ^7.8.5` packages/postgres/package.json (12) - `@types/pg ^8.23.1` - `lodash ^4.18.1` - `pg ^8.23.0` - `pg-hstore ^2.3.4` - `pg-types ^4.1.0` - `postgres-array ^3.0.4` - `semver ^7.8.5` - `wkx ^0.5.0` - `@types/chai 4.3.20` → [Updates: `5.2.3`] - `@types/mocha 10.0.10` - `chai 4.5.0` → [Updates: `6.2.2`] - `mocha 11.7.5` → [Updates: `11.8.0`, `12.0.2`] packages/snowflake/package.json (2) - `lodash ^4.18.1` - `snowflake-sdk ^2.4.3` → [Updates: `^3.3.0`] packages/sqlite3/package.json (2) - `lodash ^4.18.1` - `sqlite3 ^6.0.1` packages/utils/package.json (9) - `@types/lodash ^4.17.25` - `lodash ^4.18.1` - `@types/chai 4.3.20` → [Updates: `5.2.3`] - `@types/mocha 10.0.10` - `chai 4.5.0` → [Updates: `6.2.2`] - `concurrently 9.2.4` → [Updates: `10.0.5`] - `expect-type 0.19.0` → [Updates: `0.20.0`, `1.4.0`] - `mocha 11.7.5` → [Updates: `11.8.0`, `12.0.2`] - `node ^22.13.0 || >=24.0.0` packages/validator-js/package.json (6) - `lodash ^4.18.1` - `@types/chai 4.3.20` → [Updates: `5.2.3`] - `@types/chai-as-promised 7.1.8` → [Updates: `8.0.2`] - `chai 4.5.0` → [Updates: `6.2.2`] - `chai-as-promised 7.1.2` → [Updates: `8.0.2`] - `mocha 11.7.5` → [Updates: `11.8.0`, `12.0.2`]

--- - [ ] Check this box to t