Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	nats

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency @tanstack/react-table to v9.2.6
• chore(deps): update rust crate tokio to v1.53.2
• chore(deps): update dependency lucide-react to v1.52.0
• chore(deps): update dependency simple-icons to v16.34.0
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up docker package ghcr.io/shortlink-org/cart: no-result, Failed to look up docker package ghcr.io/shortlink-org/pricing: no-result, Failed to look up pypi package shop-events: no-result.

Files affected: examples/gitops/envs/prod/shop/cart/kustomization.yaml, examples/gitops/envs/prod/shop/pricing/kustomization.yaml, examples/gitops/envs/staging/shop/cart/kustomization.yaml, examples/shop/billing/pyproject.toml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency react-resizable-panels to v4.14.2
• chore(deps): update rust crate mago-allocator to v1.51.2
• chore(deps): update rust crate mago-database to v1.51.2
• chore(deps): update rust crate mago-span to v1.51.2
• chore(deps): update rust crate mago-syntax to v1.51.2
• chore(deps): update dependency @aws-sdk/client-eventbridge to v3.1146.0
• chore(deps): update rust crate uuid to v1.27.0
• fix(deps): update module go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.72.0
• fix(deps): update module golang.org/x/tools to v0.51.0
• chore(deps): update dependency motion to v14
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cargo (5)

examples/shop/oms/Cargo.toml (21)

• tokio 1.53 → [Updates: 1.53]
• tonic 0.14
• prost 0.14
• prost-types 0.14
• sqlx 0.9
• async-nats 0.50
• futures 0.3
• serde 1
• serde_json 1
• uuid 1 → [Updates: 1]
• chrono 0.4
• thiserror 2
• tracing 0.1
• tracing-subscriber 0.3
• tracing-opentelemetry 0.34
• opentelemetry 0.33
• opentelemetry_sdk 0.33
• opentelemetry-otlp 0.33
• tonic-prost 0.14
• http 1
• testcontainers 0.28

plugins/extract-laravel/Cargo.toml (2)

• serde 1
• serde_json 1

plugins/extract-php-ddd/Cargo.toml (3)

• roxmltree 0.21
• serde 1
• serde_json 1

plugins/extract-rust/Cargo.toml (5)

• syn 3
• proc-macro2 1
• quote 1
• serde 1
• serde_json 1

plugins/phpscan/Cargo.toml (4)

• mago-syntax 1.51.0 → [Updates: 1.51.0]
• mago-database 1.51.0 → [Updates: 1.51.0]
• mago-allocator 1.51.0 → [Updates: 1.51.0]
• mago-span 1.51.0 → [Updates: 1.51.0]

docker-compose (8)

examples/auth/docker-compose.yaml (3)

• postgres 18-alpine
• redis 8-alpine
• otel/opentelemetry-collector-contrib 0.161.0

examples/bff/docker-compose.yaml (1)

• nats 2.15-alpine

examples/payments/ledger/docker-compose.yaml (1)

• postgres 18-alpine

examples/shop/billing/docker-compose.yaml (3)

• redis 8-alpine
• nats 2-alpine
• postgres 18-alpine

examples/shop/cart/docker-compose.yaml (3)

• postgres 18-alpine
• nats 2.15-alpine
• otel/opentelemetry-collector-contrib 0.161.0

examples/shop/delivery/core/docker-compose.yaml (1)

• postgres 18-alpine

examples/shop/oms/docker-compose.yaml (3)

• postgres 18-alpine
• nats 2.15-alpine
• otel/opentelemetry-collector-contrib 0.161.0

examples/shop/pricing/docker-compose.yaml (2)

• postgres 18-alpine
• nats 2.15-alpine

dockerfile (1)

Dockerfile (5)

• docker/dockerfile 1.27
• rust 1.99.0-trixie
• golang 1.27-trixie
• node 24-trixie-slim
• node 24-trixie-slim

github-actions (5)

.github/workflows/architecture-diff.yml (4)

• actions/checkout v7
• actions/setup-node v7
• github/codeql-action v4
• node 24

.github/workflows/ci.yml (9)

• actions/checkout v7
• actions/setup-node v7
• actions/setup-go v7
• actions/setup-java v6
• actions/checkout v7
• docker/setup-buildx-action v4
• docker/build-push-action v7
• node 24
• java-jdk 25.0.4+101.0.LTS

.github/workflows/pages.yml (6)

• actions/checkout v7
• actions/setup-node v7
• actions/configure-pages v6
• actions/upload-pages-artifact v5
• actions/deploy-pages v5
• node 24

.github/workflows/release.yml (16)

• actions/checkout v7
• actions/setup-node v7
• actions/setup-go v7
• actions/setup-java v6
• actions/checkout v7
• docker/setup-qemu-action v4
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/metadata-action v6
• docker/metadata-action v6
• docker/build-push-action v7
• docker/build-push-action v7
• actions/attest-build-provenance v4
• actions/attest-build-provenance v4
• node 24
• java-jdk 25.0.4+101.0.LTS

action.yml (3)

• actions/setup-node v7
• actions/setup-go v7
• actions/setup-java v6

gomod (4)

examples/auth/go.mod (27)

• go 1.27.0
• github.com/ThreeDotsLabs/watermill v1.5.3
• github.com/go-chi/chi/v5 v5.3.2
• github.com/google/uuid v1.6.0
• github.com/google/wire v0.7.0
• github.com/jackc/pgx/v5 v5.11.0
• github.com/oapi-codegen/runtime v1.7.0
• github.com/shortlink-org/go-sdk/cache v0.0.0-20260914110947-2237285eb582@2237285eb582
• github.com/shortlink-org/go-sdk/config v0.0.0-20260914110947-2237285eb582@2237285eb582
• github.com/shortlink-org/go-sdk/db v0.0.0-20260914110947-2237285eb582@2237285eb582
• github.com/shortlink-org/go-sdk/fsm v0.0.0-20260914110947-2237285eb582@2237285eb582
• github.com/shortlink-org/go-sdk/logger v0.0.0-20260914110947-2237285eb582@2237285eb582
• github.com/shortlink-org/go-sdk/observability v0.0.0-20260914110947-2237285eb582@2237285eb582
• github.com/shortlink-org/go-sdk/outbox v0.0.0-20260914110947-2237285eb582@2237285eb582
• github.com/shortlink-org/go-sdk/specification v0.0.0-20260914110947-2237285eb582@2237285eb582
• github.com/shortlink-org/go-sdk/uow v0.0.0-20260914110947-2237285eb582@2237285eb582
• github.com/shortlink-org/go-sdk/watermill v0.0.0-20260914110947-2237285eb582@2237285eb582
• github.com/shortlink-org/portolan/pkg/ddd v0.0.0
• github.com/stretchr/testify v1.12.1
• github.com/testcontainers/testcontainers-go v0.44.0
• github.com/testcontainers/testcontainers-go/modules/postgres v0.44.0
• github.com/testcontainers/testcontainers-go/modules/redis v0.44.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.71.0 → [Updates: v0.72.0]
• go.opentelemetry.io/otel v1.47.0
• go.opentelemetry.io/otel/sdk/metric v1.47.0
• go.opentelemetry.io/otel/trace v1.47.0
• google.golang.org/grpc v1.84.0

examples/shop/pricing/go.mod (8)

• go 1.27.0
• buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.12-20260825204119-511051f7f437.2@511051f7f437
• github.com/google/uuid v1.6.0
• github.com/jackc/pgx/v5 v5.11.0
• github.com/nats-io/nats.go v1.54.0
• github.com/shortlink-org/portolan/pkg/ddd v0.0.0
• google.golang.org/grpc v1.84.0
• google.golang.org/protobuf v1.36.12

go.mod (7)

• go 1.27.0
• github.com/hashicorp/hcl/v2 v2.25.0
• github.com/pgplex/pgparser v0.2.0
• github.com/zclconf/go-cty v1.19.0
• golang.org/x/mod v0.41.0
• golang.org/x/tools v0.50.0 → [Updates: v0.51.0]
• gopkg.in/yaml.v3 v3.0.1

pkg/ddd/go.mod (1)

• go 1.27.0

kustomize (3)

examples/gitops/envs/prod/shop/cart/kustomization.yaml (1)

• ghcr.io/shortlink-org/cart 2.1.0

examples/gitops/envs/prod/shop/pricing/kustomization.yaml (1)

• ghcr.io/shortlink-org/pricing 1.4.2

examples/gitops/envs/staging/shop/cart/kustomization.yaml (1)

• ghcr.io/shortlink-org/cart 2.2.0-rc.1

maven (1)

examples/payments/ledger/pom.xml (12)

• org.springframework.boot:spring-boot-starter-parent 4.1.1
• io.grpc:grpc-bom 1.84.0
• org.jmolecules:jmolecules-ddd 2.0.1
• org.jmolecules:jmolecules-events 2.0.1
• org.jmolecules:jmolecules-hexagonal-architecture 2.0.1
• org.springframework.modulith:spring-modulith-events-api 2.1.1
• javax.annotation:javax.annotation-api 1.3.2
• net.devh:grpc-server-spring-boot-starter 3.1.0.RELEASE
• io.grpc:grpc-netty-shaded 1.84.0
• io.nats:jnats 2.26.3
• io.github.ascopes:protobuf-maven-plugin 5.1.11
• io.grpc:protoc-gen-grpc-java 1.84.0

npm (5)

examples/bff/package.json (24)

• @bufbuild/protobuf ^2.16.0
• @connectrpc/connect ^2.2.0
• @connectrpc/connect-node ^2.2.0
• @nats-io/jetstream ^3.4.0
• @nats-io/transport-node ^3.4.0
• @opentelemetry/api ^1.9.0
• @opentelemetry/exporter-trace-otlp-grpc ^0.222.0
• @opentelemetry/instrumentation-http ^0.222.0
• @opentelemetry/instrumentation-undici ^0.32.0
• @opentelemetry/resources ^2.0.0
• @opentelemetry/sdk-node ^0.222.0
• @opentelemetry/sdk-trace-base ^2.0.0
• graphql ^17.0.2
• graphql-yoga ^5.24.1
• openapi-fetch ^0.17.0
• @bufbuild/buf ^1.73.0
• @bufbuild/protoc-gen-es ^2.16.0
• @eddeee888/gcg-typescript-resolver-files ^0.19.0
• @graphql-codegen/cli ^7.4.3
• @types/node ^26.6.4
• openapi-typescript ^7.13.0
• typescript ^7.0.2
• vitest ^5.0.3
• node >=26

examples/shop/cart/package.json (29)

• @bufbuild/protobuf ^2.16.0
• @connectrpc/connect ^2.2.0
• @connectrpc/connect-node ^2.2.0
• @nats-io/jetstream ^3.4.0
• @nats-io/transport-node ^3.4.0
• @opentelemetry/api ^1.9.0
• @opentelemetry/exporter-trace-otlp-grpc ^0.222.0
• @opentelemetry/instrumentation-http ^0.222.0
• @opentelemetry/instrumentation-pg ^0.74.0
• @opentelemetry/instrumentation-undici ^0.32.0
• @opentelemetry/resources ^2.0.0
• @opentelemetry/sdk-node ^0.222.0
• @opentelemetry/sdk-trace-base ^2.0.0
• fastify 6.0.0-alpha.4
• inversify ^8.2.3
• openapi-fetch ^0.17.0
• pg ^8.23.1
• reflect-metadata ^0.2.2
• zod ^4.6.5
• @bufbuild/buf ^1.73.0
• @bufbuild/protoc-gen-es ^2.16.0
• @testcontainers/postgresql ^12.2.0
• @types/node ^26.6.4
• @types/pg ^8.15.0
• openapi-typescript ^7.13.0
• testcontainers ^12.2.0
• typescript ^7.0.2
• vitest ^5.0.3
• node >=26

examples/shop/delivery/core/package.json (11)

• @bufbuild/protobuf ^2.16.0
• @connectrpc/connect ^2.2.0
• @connectrpc/connect-node ^2.2.0
• nats ^2.29.3
• pg ^8.23.1
• @testcontainers/postgresql ^12.2.0
• @types/node ^26.6.4
• @types/pg ^8.15.6
• testcontainers ^12.2.0
• typescript ^7.0.2
• vitest ^5.0.3

package.json (51)

• @aws-sdk/client-eventbridge ^3.1145.0 → [Updates: ^3.1145.0]
• @clack/prompts ^1.8.1
• @marcbachmann/cel-js ^8.0.0
• ajv ^8.20.0
• oxc-parser ^0.152.0
• oxc-resolver ^11.24.2
• yaml ^2.9.1
• @types/node ^26.6.4
• @types/react ^19.3.0
• @types/react-dom ^19.3.0
• oxlint ^1.86.0
• typescript ^7.0.2
• vitest ^5.0.3
• @ai-sdk/openai-compatible 3.0.62
• @ai-sdk/react 4.0.130
• @asyncapi/react-component ^3.2.1
• @blocknote/core ^0.55.0
• @blocknote/diagram-block ^0.55.0
• @blocknote/mantine ^0.55.0
• @blocknote/react ^0.55.0
• @daypicker/react ^10.0.2
• @floating-ui/react ^0.27.20
• @headlessui/react ^2.2.10
• @scalar/api-reference-react ^0.9.77
• @tailwindcss/vite ^4.0.0
• @tanstack/react-query ^5.104.1
• @tanstack/react-table ^9.2.4 → [Updates: ^9.2.4]
• @tanstack/react-virtual ^3.14.12
• @vitejs/plugin-react ^6.1.1
• @xyflow/react ^12.12.0
• ai 7.0.127
• cn 0.4.0
• elkjs ^0.12.0
• html-to-image ^1.11.13
• likec4 ^1.59.4
• lowlight ^3.3.0
• lucide-react ^1.50.0 → [Updates: ^1.50.0]
• mermaid ^12.1.0
• motion ^13.5.1 → [Updates: ^14.0.0]
• react ^19.3.0
• react-dom ^19.3.0
• react-markdown ^10.1.0
• react-resizable-panels ^4.14.1 → [Updates: ^4.14.1]
• react-router ^8.4.0
• remark-gfm ^4.0.0
• simple-icons ^16.33.0 → [Updates: ^16.33.0]
• tailwindcss ^4.0.0
• vite ^8.3.2
• vite-plugin-node-polyfills ^0.28.0
• zustand ^5.0.15
• node >=24

proxy/package.json (2)

• @ai-sdk/google 4.0.87
• ai 7.0.127

nuget (1)

plugins/extract-csharp-ddd/portolan-extract-csharp-ddd.csproj (1)

• Microsoft.CodeAnalysis.CSharp 5.9.0

poetry (1)

examples/shop/billing/pyproject.toml (8)

• celery >=5.4
• django >=5.0
• djangorestframework >=3.15
• drf-spectacular >=0.27
• httpx >=0.27
• nats-py >=2.9
• psycopg >=3.2
• shop-events >=1.0

---

• Check this box to trigger a request for Renovate to run again on this repository