Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	@types/uuid

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update dev-tools (@biomejs/biome, @eslint/compat, @eslint/css, @types/node, @types/react, @types/react-dom, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, eslint, knip, turbo)

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update anthropics/claude-code-security-review digest to 25e460e
• chore(deps): update actions/checkout action to v4.3.1
• chore(deps): update anthropics/claude-code-action action to v1.0.16
• chore(deps): update dependency @tsconfig/strictest to v2.0.8
• chore(deps): update node.js to v22.21.1
• chore(deps): update storybook monorepo to v9.1.16 (@storybook/addon-docs, @storybook/addon-links, @storybook/nextjs, storybook)
• chore(deps): update tailwindcss monorepo to v4.1.17 (@tailwindcss/postcss, tailwindcss)
• fix(deps): update codemirror (@codemirror/lint, @codemirror/view)
• fix(deps): update dependency @electric-sql/pglite to v0.3.14
• fix(deps): update dependency @langchain/core to v0.3.79
• fix(deps): update dependency @lezer/highlight to v1.2.3
• fix(deps): update dependency @radix-ui/react-slot to v1.2.4
• fix(deps): update dependency langsmith to v0.3.79
• chore(deps): update dependency @turbo/gen to v2.6.1
• chore(deps): update dependency esbuild to v0.27.0
• chore(deps): update dependency msw to v2.12.2
• chore(deps): update dependency rollup to v4.53.2
• chore(deps): update dependency supabase to v2.59.2
• chore(deps): update pnpm to v10.22.0
• fix(deps): update dependency @modelcontextprotocol/sdk to v1.22.0
• fix(deps): update dependency @rive-app/react-canvas to v4.24.0
• fix(deps): update dependency @ruby/prism to v1.6.0
• fix(deps): update dependency @supabase/supabase-js to v2.81.1
• fix(deps): update dependency @xyflow/react to v12.9.3
• fix(deps): update dependency cheerio to v1.1.2
• fix(deps): update dependency dotenv to v16.6.1
• fix(deps): update dependency elkjs to v0.11.0
• fix(deps): update dependency emoji-regex to v10.6.0
• fix(deps): update dependency ink to v6.5.0
• fix(deps): update dependency inquirer to v12.11.1
• fix(deps): update dependency lucide-react to v0.553.0
• fix(deps): update dependency nuqs to v2.7.3
• fix(deps): update dependency openai to v5.23.2
• fix(deps): update dependency resend to v4.8.0
• fix(deps): update dependency ts-pattern to v5.9.0
• fix(deps): update nextjs monorepo to v15.5.6 (@next/third-parties, next)
• fix(deps): update prisma monorepo to v6.19.0 (@prisma/generator-helper, @prisma/internals)
• fix(deps): update react monorepo to v19.2.0 (react, react-dom)
• fix(deps): update swc monorepo to v1.15.2 (@swc/core, @swc/wasm)
• chore(deps): update actions/checkout action to v5
• chore(deps): update actions/github-script action to v8
• chore(deps): update actions/setup-node action to v6
• chore(deps): update actions/stale action to v10
• chore(deps): update actions/upload-artifact action to v5
• chore(deps): update dependency @langchain/langgraph-checkpoint-validation to v1
• chore(deps): update dependency @rollup/plugin-commonjs to v29
• chore(deps): update dependency @vitejs/plugin-react to v5
• chore(deps): update dependency cookie to v1
• chore(deps): update dependency lefthook to v2
• chore(deps): update dependency type-fest to v5
• chore(deps): update dependency vercel to v48
• chore(deps): update dependency vite to v7
• chore(deps): update dev-tools (major) (@eslint/compat, @types/node, @types/uuid, @vitest/coverage-v8, eslint-plugin-unicorn, vitest)
• chore(deps): update node.js to v24
• chore(deps): update storybook monorepo to v10 (major) (@storybook/addon-docs, @storybook/addon-links, @storybook/nextjs, storybook)
• fix(deps): update dependency @langchain/community to v1
• fix(deps): update dependency @langchain/core to v1
• fix(deps): update dependency @langchain/langgraph to v1
• fix(deps): update dependency @langchain/langgraph-checkpoint to v1
• fix(deps): update dependency @langchain/openai to v1
• fix(deps): update dependency @pgsql/types to v17
• fix(deps): update dependency @sentry/nextjs to v10
• fix(deps): update dependency commander to v14
• fix(deps): update dependency dotenv to v17
• fix(deps): update dependency openai to v6
• fix(deps): update dependency react-syntax-highlighter to v16
• fix(deps): update dependency resend to v6
• fix(deps): update dependency style-dictionary to v5
• fix(deps): update dependency tailwind-variants to v3
• fix(deps): update dependency uuid to v13
• fix(deps): update dependency zod to v4.1.12
• fix(deps): update nextjs monorepo to v16 (major) (@next/third-parties, next)
• fix(deps): update octokit monorepo (major) (@octokit/auth-app, @octokit/openapi-types, @octokit/rest)
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency @changesets/cli to v2.29.8
• chore(deps): update peter-evans/create-pull-request action to v7.0.9
• fix(deps): update dependency @langchain/community to v0.3.58
• fix(deps): update dependency yaml to v2.8.2
• chore(deps): update actions/create-github-app-token action to v2.2.0
• chore(deps): update dependency @changesets/get-github-info to v0.7.0
• chore(deps): update dependency @sentry/nextjs to v9.47.1
• chore(deps): update dependency json-schema-to-zod to v2.7.0
• chore(deps): update dependency stylelint to v16.26.1
• fix(deps): update dependency @supabase/ssr to v0.8.0
• fix(deps): update dependency glob to v13
• fix(deps): update dependency inquirer to v13
• fix(deps): update prisma monorepo to v7 (major) (@prisma/generator-helper, @prisma/internals)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency @sentry/node to v10.27.0 [security]
• fix(deps): update dependency valibot to v1.2.0 [security]
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency happy-dom to v20.0.2 [security]
• fix(deps): update dependency @langchain/openai to v0.6.16
• chore(deps): update dependency @vitejs/plugin-react to v4.7.0

Detected dependencies

github-actions

.github/actions/pnpm-setup/action.yml

• pnpm/action-setup v4.2.0@41ff72655975bd51cab0327fa583b6e92b6d3061
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020

.github/workflows/add_assignee_to_pr.yml

• route06/actions v2.7.0@3bcea5bf834ff2e0e6c912c1167fcc1fe05e49c2

.github/workflows/agent-deep-modeling.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• marocchino/sticky-pull-request-comment v2.9.4@773744901bac0e8cbb5a0dc842800d45e9b2b405

.github/workflows/check-schema-drift.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• supabase/setup-cli v1.6.0@b60b5899c73b63a2d2d651b1e90db8d4c9392f51
• tokorom/action-slack-incoming-webhook v1.3.0@d57bf1eb618f3dae9509afefa70d5774ad3d42bf

.github/workflows/claude-pr-creator.yml

• actions/create-github-app-token v2.1.4@67018539274d69449ef7c02e8e71183d1719ab42
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• anthropics/claude-code-action v1.0.12@777ffcbfc9d2e2b07f3cfec41b7c7eadedd1f0dc
• actions/github-script v7.1.0@f28e40c7f34bde8b3046d885e986cb6290c5673b

.github/workflows/claude-security-review.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• anthropics/claude-code-security-review 68982a6bf10d545e94dd0390af08306d94ef684c

.github/workflows/claude.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• anthropics/claude-code-action v1.0.12@777ffcbfc9d2e2b07f3cfec41b7c7eadedd1f0dc

.github/workflows/codeql.yml

• route06/actions v2.7.0@3bcea5bf834ff2e0e6c912c1167fcc1fe05e49c2

.github/workflows/database-ci.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• supabase/setup-cli v1.6.0@b60b5899c73b63a2d2d651b1e90db8d4c9392f51

.github/workflows/dependency_review.yml

• route06/actions v2.7.0@3bcea5bf834ff2e0e6c912c1167fcc1fe05e49c2

.github/workflows/discussion-comment-to-slack.yml

• route06/actions v2.7.0@3bcea5bf834ff2e0e6c912c1167fcc1fe05e49c2

.github/workflows/e2e_tests.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• tokorom/action-slack-incoming-webhook v1.3.0@d57bf1eb618f3dae9509afefa70d5774ad3d42bf

.github/workflows/figma-to-css-variables.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• peter-evans/create-pull-request v7.0.8@271a8d0340265f705b14b6d32b9829c1cb33d45e

.github/workflows/frontend-ci.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955

.github/workflows/ghalint.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955

.github/workflows/license-report-update.yml

• actions/create-github-app-token v2.1.4@67018539274d69449ef7c02e8e71183d1719ab42
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955

.github/workflows/license.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830

.github/workflows/notify_supabase_failure.yml

• tokorom/action-slack-incoming-webhook v1.3.0@d57bf1eb618f3dae9509afefa70d5774ad3d42bf

.github/workflows/process-scheduled-issues.yml

• actions/create-github-app-token v2.1.4@67018539274d69449ef7c02e8e71183d1719ab42
• actions/github-script v7.1.0@f28e40c7f34bde8b3046d885e986cb6290c5673b

.github/workflows/release.yml

• actions/create-github-app-token v2.1.4@67018539274d69449ef7c02e8e71183d1719ab42
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• changesets/action v1.5.3@e0145edc7d9d8679003495b11f87bd8ef63c0cba
• tokorom/action-slack-incoming-webhook v1.3.0@d57bf1eb618f3dae9509afefa70d5774ad3d42bf

.github/workflows/released_package_test.yml

• tokorom/action-slack-incoming-webhook v1.3.0@d57bf1eb618f3dae9509afefa70d5774ad3d42bf
• tokorom/action-slack-incoming-webhook v1.3.0@d57bf1eb618f3dae9509afefa70d5774ad3d42bf

.github/workflows/stale.yml

• actions/stale v9.1.0@5bef64f19d7facfb25b37b414482c7164d639639

nodenv

.node-version

• node 22.21.0

npm

frontend/apps/app/package.json

• @codemirror/lang-sql 6.10.0
• @codemirror/language 6.11.3
• @codemirror/lint 6.9.0
• @codemirror/state 6.5.2
• @codemirror/view 6.38.6
• @electric-sql/pglite 0.3.12
• @langchain/core 0.3.78
• @lezer/highlight 1.2.2
• @next/third-parties 15.3.5
• @sentry/nextjs 9
• @swc/core 1.12.11
• @swc/wasm 1.12.11
• @types/react-syntax-highlighter 15.5.13
• cheerio 1.0.0
• clsx 2.1.1
• cmdk 1.1.1
• codemirror 6.0.2
• date-fns 4.1.0
• dotenv 16.5.0
• emoji-regex 10.4.0
• lucide-react 0.511.0
• neverthrow 8.2.0
• next 15.4.7
• react 19.1.1
• react-dom 19.1.1
• react-markdown 10.1.0
• react-syntax-highlighter 15.6.6
• rehype-raw 7.0.0
• remark-gfm 4.0.1
• resend 4.5.2
• ts-pattern 5.7.1
• valibot 1.1.0
• @biomejs/biome 2.2.6
• @storybook/nextjs 9.1.15
• @types/node 22.18.11
• @types/react 19.2.2
• @types/react-dom 19.2.2
• eslint 9.38.0
• msw 2.11.6
• typed-css-modules 0.9.1
• typescript 5.9.3
• vitest 3.2.4

frontend/apps/assets/package.json

• @biomejs/biome 2.2.6
• @types/fs-extra 11.0.4
• @types/node 22.18.11
• concurrently 9.2.1
• eslint 9.38.0
• fs-extra 11.3.2

frontend/apps/docs/package.json

• @next/third-parties 15.3.5
• @rive-app/react-canvas 4.23.4
• @sentry/nextjs 9
• clsx 2.1.1
• date-fns 4.1.0
• lucide-react 0.511.0
• next 15.4.7
• react 19.1.1
• react-dom 19.1.1
• tailwind-variants 1.0.0
• ts-pattern 5.7.1
• @biomejs/biome 2.2.6
• @tailwindcss/postcss 4.1.16
• @types/node 22.18.11
• @types/react 19.2.2
• @types/react-dom 19.2.2
• eslint 9.38.0
• postcss 8.5.6
• tailwindcss 4.1.16
• typescript 5.9.3

frontend/apps/erd-sample/package.json

frontend/internal-packages/agent/package.json

• @langchain/community 0.3.57
• @langchain/core 0.3.78
• @langchain/langgraph 0.4.9
• @langchain/langgraph-checkpoint 0.1.1
• @langchain/openai 0.6.9
• @sentry/node 10.19.0
• @valibot/to-json-schema 1.3.0
• dotenv 16.5.0
• fast-json-patch 3.1.1
• langsmith 0.3.73
• neverthrow 8.2.0
• uuid 11.1.0
• valibot 1.1.0
• @biomejs/biome 2.2.6
• @langchain/langgraph-checkpoint-validation 0.1.1
• @types/node 22.18.11
• @types/uuid 10.0.0
• eslint 9.38.0
• msw 2.11.6
• typescript 5.9.3
• vitest 3.2.4
• yoctocolors 2.1.2

frontend/internal-packages/configs/package.json

• @biomejs/biome 2.2.6
• @css-modules-kit/eslint-plugin 0.3.0
• @eslint/compat 1.4.0
• @eslint/css 0.13.0
• @tsconfig/strictest 2.0.6
• @typescript-eslint/eslint-plugin 8.46.1
• @typescript-eslint/parser 8.46.1
• eslint 9.38.0
• eslint-plugin-unicorn 58.0.0

frontend/internal-packages/db/package.json

• @supabase/ssr 0.7.0
• @supabase/supabase-js 2.75.0
• neverthrow 8.2.0
• valibot 1.1.0
• @biomejs/biome 2.2.6
• eslint 9.38.0
• supabase 2.50.14
• type-fest 4.41.0
• typescript 5.9.3
• vitest 3.2.4

frontend/internal-packages/e2e/package.json

• @biomejs/biome 2.2.6
• @playwright/test 1.56.1
• @types/node 22.18.11
• eslint 9.38.0
• typescript 5.9.3

frontend/internal-packages/figma-to-css-variables/package.json

• dotenv 16.5.0
• style-dictionary 4.4.0
• @biomejs/biome 2.2.6

frontend/internal-packages/github/package.json

• @octokit/auth-app 7.2.2
• @octokit/openapi-types 25.1.0
• @octokit/rest 21.1.1
• neverthrow 8.2.0
• valibot 1.1.0
• @biomejs/biome 2.2.6
• @types/node 22.18.11
• eslint 9.38.0
• typescript 5.9.3
• vitest 3.2.4

frontend/internal-packages/mcp-server/package.json

• @modelcontextprotocol/sdk 1.20.2
• zod 4.0.0
• @biomejs/biome 2.2.6
• @types/node 22.18.11
• concurrently 9.2.1
• tsx 4.20.6
• typescript 5.9.3

frontend/internal-packages/neverthrow/package.json

• neverthrow 8.2.0
• valibot 1.1.0
• @biomejs/biome 2.2.6
• @types/node 22.18.11
• concurrently 9.2.1
• eslint 9.38.0
• typescript 5.9.3

frontend/internal-packages/pglite-server/package.json

• @electric-sql/pglite 0.3.12
• @pgsql/types 15.1.1
• @biomejs/biome 2.2.6
• eslint 9.38.0
• typescript 5.9.3
• vitest 3.2.4

frontend/internal-packages/schema-bench/package.json

• @huggingface/transformers 3.3.3
• dotenv 16.5.0
• langsmith 0.3.73
• neverthrow 8.2.0
• openai 5.9.2
• tsx 4.20.6
• valibot 1.1.0
• @biomejs/biome 2.2.6
• eslint 9.38.0
• vitest 3.2.4

frontend/internal-packages/security/package.json

• neverthrow 8.2.0
• @biomejs/biome 2.2.6
• @types/node 22.18.11
• eslint 9.38.0
• typescript 5.9.3

frontend/internal-packages/storybook/package.json

• react 19.1.1
• react-dom 19.1.1
• @storybook/addon-docs 9.1.15
• @storybook/addon-links 9.1.15
• @storybook/nextjs 9.1.15
• @types/react 19.2.2
• @types/react-dom 19.2.2
• msw 2.11.6
• msw-storybook-addon 2.0.6
• storybook 9.1.15
• typescript 5.9.3
• zod 3.25.76

frontend/packages/cli/package.json

• @prisma/internals 6.8.2
• @swc/core 1.12.11
• commander 13.1.0
• glob 11.1.0
• ink 6.0.1
• ink-gradient 3.0.0
• inquirer 12.6.3
• neverthrow 8.2.0
• react 19.1.1
• react-dom 19.1.1
• valibot 1.1.0
• yoctocolors 2.1.2
• @biomejs/biome 2.2.6
• @rollup/plugin-commonjs 28.0.9
• @rollup/plugin-node-resolve 16.0.3
• @rollup/plugin-typescript 12.3.0
• @types/node 22.18.11
• @types/react 19.2.2
• @types/react-dom 19.2.2
• @vitejs/plugin-react 4.6.0
• eslint 9.38.0
• rollup 4.52.5
• rollup-plugin-execute 1.1.1
• typed-css-modules 0.9.1
• typescript 5.9.3
• vite 6.4.1
• vite-tsconfig-paths 5.1.4
• vitest 3.2.4

frontend/packages/erd-core/package.json

• @radix-ui/react-dialog 1.1.15
• @radix-ui/react-toolbar 1.1.11
• @xyflow/react 12.8.6
• clsx 2.1.1
• cmdk 1.1.1
• elkjs 0.10.0
• neverthrow 8.2.0
• nuqs 2.4.3
• pako 2.1.0
• react 19.1.1
• ts-pattern 5.7.1
• valibot 1.1.0
• @biomejs/biome 2.2.6
• @storybook/nextjs 9.1.15
• @testing-library/jest-dom 6.9.1
• @testing-library/react 16.3.0
• @testing-library/user-event 14.6.1
• @types/pako 2.0.4
• @types/react 19.2.2
• @vitejs/plugin-react 4.6.0
• eslint 9.38.0
• happy-dom 20.0.0
• typed-css-modules 0.9.1
• typescript 5.9.3
• vitest 3.2.4

frontend/packages/schema/package.json

• @prisma/internals 6.8.2
• @ruby/prism 1.5.2
• @swc/core 1.12.11
• fast-json-patch 3.1.1
• neverthrow 8.2.0
• pg-query-emscripten 5.1.0
• valibot 1.1.0
• yaml 2.8.1
• zod 4.0.0
• @biomejs/biome 2.2.6
• @pgsql/types 15.1.1
• @prisma/generator-helper 6.8.2
• @types/node 22.18.11
• eslint 9.38.0
• json-refs 3.0.15
• json-schema-to-zod 2.6.1
• typescript 5.9.3
• vitest 3.2.4

frontend/packages/ui/package.json

• @radix-ui/react-collapsible 1.1.12
• @radix-ui/react-context-menu 2.2.16
• @radix-ui/react-dialog 1.1.15
• @radix-ui/react-dropdown-menu 2.1.16
• @radix-ui/react-popover 1.1.15
• @radix-ui/react-radio-group 1.3.8
• @radix-ui/react-select 2.2.6
• @radix-ui/react-slot 1.2.3
• @radix-ui/react-switch 1.2.6
• @radix-ui/react-tabs 1.1.13
• @radix-ui/react-toast 1.2.15
• @radix-ui/react-tooltip 1.2.8
• clsx 2.1.1
• destyle.css 4.0.1
• lucide-react 0.511.0
• neverthrow 8.2.0
• react 19.1.1
• react-resizable-panels 3.0.6
• ts-pattern 5.7.1
• vaul 1.1.2
• @biomejs/biome 2.2.6
• @storybook/nextjs 9.1.15
• @testing-library/jest-dom 6.9.1
• @testing-library/react 16.3.0
• @testing-library/user-event 14.6.1
• @types/react 19.2.2
• @vitejs/plugin-react 4.6.0
• eslint 9.38.0
• happy-dom 20.0.0
• typed-css-modules 0.9.1
• typescript 5.9.3
• vitest 3.2.4

package.json

• @changesets/cli 2.29.7
• @changesets/get-github-info 0.6.0
• @changesets/types 6.1.0
• @turbo/gen 2.5.8
• @types/node 22.18.11
• @vitest/coverage-v8 3.2.4
• concurrently 9.2.1
• knip 5.66.0
• lefthook 1.13.6
• stylelint 16.25.0
• stylelint-config-recess-order 7.4.0
• stylelint-value-no-unknown-custom-properties 6.0.1
• syncpack 13.0.4
• turbo 2.5.8
• typescript 5.9.3
• vercel 41.7.8
• vitest 3.2.4
• pnpm 10.18.3
• @radix-ui/react-dialog 1.1.15
• cookie ^0.7.0
• esbuild 0.25.11
• path-to-regexp 8.3.0
• prismjs 1.30.0
• undici 7.16.0

pnpm-workspace.yaml

---

• Check this box to trigger a request for Renovate to run again on this repository