Dependency Dashboard

[svc-secops]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

See Config Migration PR: #132.

Repository problems

Renovate tried to run on this repository, but found these problems.

• WARN: Using npm packages for Renovate presets is now deprecated. Please migrate to repository-based presets instead.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	tailwind

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• fix(deps): update dependency sharp to v0.34.4
• chore(deps): update actions/checkout action to v5
• chore(deps): update actions/setup-node action to v6
• chore(deps): update dependency node to v24
• chore(deps): update peter-evans/create-or-update-comment action to v5
• fix(deps): update dependency body-parser to v2
• fix(deps): update dependency express to v5
• 🔐 Create all rate-limited PRs at once 🔐

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• chore(deps): update dependency undici to v6.21.2 [security]
• chore(deps): update dependency vite to v5.4.21 [security]
• chore(deps): update dependency vitest to v2.1.9 [security]
• fix(deps): update all dependencies - patch updates (@astrojs/check, @changesets/changelog-github, @graphql-codegen/cli, @graphql-codegen/typescript, @graphql-tools/jest-transform, @testing-library/dom, @tsconfig/recommended, @types/cors, @types/jest, @types/node, @types/react, @types/react-dom, graphql-ws, msw-storybook-addon, slackapi/slack-github-action, tailwindcss, wait-on)
• chore(deps): update all devdependencies (@apollo/client, @changesets/cli, @graphql-codegen/typescript-resolvers, @playwright/test, @storybook/addon-docs, @storybook/addon-essentials, @storybook/addon-interactions, @storybook/addon-links, @storybook/blocks, @storybook/react, @storybook/react-vite, @storybook/test, @storybook/test-runner, @testing-library/jest-dom, @testing-library/react, @types/node, @types/ws, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, eslint-plugin-storybook, graphql, msw, postcss, prettier, storybook, ts-jest, typescript, vite-plugin-svgr)
• fix(deps): update dependency @astrojs/starlight to v0.36.2
• chore(deps): update all devdependencies (major) (@apollo/client, @graphql-codegen/cli, @graphql-codegen/typescript, @graphql-codegen/typescript-resolvers, @storybook/addon-docs, @storybook/addon-links, @storybook/react, @storybook/react-vite, @types/jest, @types/node, @types/react, @types/react-dom, @types/react-relay, @types/relay-runtime, babel-plugin-relay, concurrently, eslint-plugin-storybook, graphql-ws, jest, jest-environment-jsdom, jsdom, react, react-relay, relay-compiler, relay-runtime, storybook, tailwindcss, wait-on)
• chore(deps): update slackapi/slack-github-action action to v2
• fix(deps): update dependency graphql-ws to v6
• fix(deps): update dependency typescript to v5.9.3
• chore(deps): lock file maintenance

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update dependency tsup to v8.3.5 [security]
• chore(deps): update dependency playwright to v1.55.1 [security]
• fix(deps): update dependency astro to v5 [security]
• fix(deps): update apollo graphql packages (major) (@apollo/server, graphql-subscriptions)
• fix(deps): update dependency @graphql-tools/schema to v10
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

22/22 CVEs have Renovate fixes.

npm

docs/package.json

astro

• GHSA-c4pw-33h3-35xw (fixed in >= 4.16.17)
• GHSA-49w6-73cw-chjr (fixed in >= 4.16.18)
• GHSA-m85w-3h95-hcf9 (fixed in >= 4.16.1)
• GHSA-5ff5-9fcw-vg88 (fixed in >= 5.14.3)
• GHSA-xf8x-j4p2-f749 (fixed in >= 4.16.19)

package.json

playwright

• GHSA-7mvr-c777-76hp (fixed in >= 1.55.1)

tsup

• GHSA-3mv9-4h5g-vhg3 (fixed in > 8.3.4)

undici

• GHSA-c76h-2ccp-4975 (fixed in >= 6.21.1)
• GHSA-cxrh-j4jr-qwg3 (fixed in >= 6.21.2)

vite

• GHSA-356w-63v5-8wf4 (fixed in >= 5.4.18)
• GHSA-g4jq-h2w9-997c (fixed in >= 5.4.20)
• GHSA-xcj6-pq6g-qj4x (fixed in >= 5.4.17)
• GHSA-jqfw-vq24-v9c3 (fixed in >= 5.4.20)
• GHSA-x574-m823-4x7w (fixed in >= 5.4.15)
• GHSA-93m4-6634-74q7 (fixed in >= 5.4.21)
• GHSA-93m4-6634-74q7 (fixed in >= 5.4.21)
• GHSA-93m4-6634-74q7 (fixed in >= 5.4.21)
• GHSA-93m4-6634-74q7 (fixed in >= 5.4.21)
• GHSA-859w-5945-r5v3 (fixed in >= 5.4.19)
• GHSA-4r4m-qw57-chr8 (fixed in >= 5.4.16)
• GHSA-vg6x-rcgg-rjx6 (fixed in >= 5.4.12)

vitest

• GHSA-9crc-q9x8-hgqq (fixed in >= 2.1.9)

Detected dependencies

github-actions

.github/workflows/deploy-storybook.yml

• actions/checkout v4
• pnpm/action-setup v4
• actions/setup-node v4
• bitovi/github-actions-storybook-to-github-pages v1.0.3

.github/workflows/release.yml

• actions/checkout v4
• andstor/file-existence-action v3.0.0
• actions/setup-node v4
• pnpm/action-setup v4
• changesets/action v1
• slackapi/slack-github-action v1.27.0
• node 20.x

.github/workflows/snapshot-release.yml

• alessbell/pull-request-comment-branch v2.1.0
• peter-evans/create-or-update-comment v4.0.0
• actions/checkout v4
• actions/setup-node v4
• pnpm/action-setup v4
• andstor/file-existence-action v3.0.0
• peter-evans/create-or-update-comment v4.0.0
• peter-evans/create-or-update-comment v4.0.0
• node 20.x

.github/workflows/test.yml

• actions/checkout v4
• pnpm/action-setup v4
• actions/setup-node v4
• actions/cache v4
• actions/checkout v4
• pnpm/action-setup v4
• actions/setup-node v4
• actions/checkout v4
• pnpm/action-setup v4
• actions/setup-node v4
• schneegans/dynamic-badges-action v1.7.0
• actions/checkout v4
• pnpm/action-setup v4
• actions/setup-node v4
• actions/cache v4
• actions/checkout v4
• pnpm/action-setup v4
• actions/setup-node v4
• actions/checkout v4
• pnpm/action-setup v4
• actions/setup-node v4
• actions/checkout v4
• pnpm/action-setup v4
• actions/setup-node v4

npm

demo/server/package.json

• @apollo/server ^4.0.0
• @graphql-tools/schema ^9.0.13
• body-parser ^1.20.2
• cors ^2.8.5
• express ^4.17.1
• graphql ^16.6.0
• graphql-subscriptions ^1.2.1
• graphql-ws ^5.5.5
• typescript ^4.7.4
• ws ^8.4.2
• @types/cors 2.8.17
• @types/node 18.19.54
• @types/ws 8.5.12

docs/package.json

• @apollo/tailwind-preset 0.2.0
• @astrojs/check 0.9.3
• @astrojs/starlight 0.28.2
• astro 4.15.9
• sharp 0.33.5
• typescript 5.5.4

package.json

• @bundled-es-modules/statuses ^1.0.1
• @graphql-tools/executor ^1.2.7
• @graphql-tools/merge ^9.0.4
• @graphql-tools/mock ^9.0.4
• @graphql-tools/schema ^10.0.4
• @graphql-tools/utils ^10.3.2
• @types/statuses ^2.0.5
• graphql-tag ^2.12.6
• is-node-process ^1.2.0
• outvariant ^1.4.3
• @apollo/client 3.12.4
• @apollo/tailwind-preset 0.2.0
• @changesets/changelog-github 0.5.0
• @changesets/cli 2.27.8
• @graphql-codegen/cli 5.0.2
• @graphql-codegen/typescript 4.1.2
• @graphql-codegen/typescript-resolvers 4.4.1
• @graphql-tools/jest-transform 2.0.0
• @playwright/test 1.49.1
• @storybook/addon-docs 8.4.7
• @storybook/addon-essentials 8.4.7
• @storybook/addon-interactions 8.4.7
• @storybook/addon-links 8.4.7
• @storybook/blocks 8.4.7
• @storybook/react 8.4.7
• @storybook/react-vite 8.4.7
• @storybook/test 8.4.7
• @storybook/test-runner 0.20.1
• @svgr/plugin-jsx 8.1.0
• @svgr/plugin-svgo 8.1.0
• @tailwindcss/aspect-ratio 0.4.2
• @testing-library/dom 10.4.0
• @testing-library/jest-dom 6.6.3
• @testing-library/react 16.1.0
• @tsconfig/recommended 1.0.7
• @types/jest 29.5.13
• @types/node 22.10.2
• @types/react 18.3.10
• @types/react-dom 18.3.0
• @types/react-relay 16.0.6
• @types/relay-runtime 17.0.4
• @typescript-eslint/eslint-plugin 8.18.1
• @typescript-eslint/parser 8.18.1
• babel-plugin-relay 17.0.0
• concurrently 8.2.2
• eslint-plugin-storybook 0.11.1
• graphql 16.10.0
• graphql-ws 5.16.0
• http-server 14.1.1
• jest 29.7.0
• jest-environment-jsdom 29.7.0
• jsdom 25.0.1
• msw 2.7.0
• msw-storybook-addon 2.0.3
• playwright 1.49.1
• postcss 8.4.47
• prettier 3.4.2
• react 18.3.1
• react-relay 17.0.0
• relay-compiler 17.0.0
• relay-runtime 17.0.0
• storybook 8.4.7
• tailwind 4.0.0
• tailwindcss 3.4.13
• ts-jest 29.2.5
• ts-jest-resolver 2.0.1
• tsup 8.3.0
• tw-colors 3.3.2
• typescript 5.7.2
• undici 6.21.0
• vite 5.4.8
• vite-plugin-graphql-loader 4.0.4
• vite-plugin-relay 2.1.0
• vite-plugin-svgr 4.3.0
• vitest 2.1.1
• wait-on 8.0.1
• graphql ^15.0.0 || ^16.0.0
• msw ^2.0.0

renovate-config-presets

renovate.json