Dependency Dashboard

[forking-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): pin actions/checkout action to f43a0e5
• chore(deps): update dependency @playwright/test to v1.60.0
• chore(deps): update ollama/ollama docker tag to v0.24.0
• chore(deps): update python-nonmajor (flask, google.cloud.pubsub)
• fix(deps): update all non-major dependencies (cloud.google.com/go/firestore, firebase.google.com/go/v4, github.com/GoogleCloudPlatform/functions-framework-go, github.com/cloudevents/sdk-go/v2, google.golang.org/api)
• fix(deps): update js-nonmajor (@genkit-ai/ai, @genkit-ai/core, @genkit-ai/dotprompt, @genkit-ai/express, @genkit-ai/flow, @genkit-ai/vertexai, @google-cloud/firestore, @google-cloud/pubsub, agent-base, asynckit, bignumber.js, body-parser, call-bind, cookie-signature, end-of-stream, es-define-property, express, fast-xml-parser, finalhandler, firebase, firebase-admin, gcp-metadata, genkit, genkitx-ollama, get-intrinsic, google-auth-library, google-gax, gopd, has-proto, has-symbols, hasown, html-entities, http-errors, http-parser-js, https-proxy-agent, iconv-lite, jsonwebtoken, jwa, jwks-rsa, long, mime-db, ms, negotiator, object-inspect, protobufjs, raw-body, react, react-dom, react-qr-code, semver, send, serve-static, side-channel, statuses, strnum, tslib, undici-types, zod)
• chore(deps): update actions/checkout action to v6
• chore(deps): update node.js to v24
• chore(deps): update npm-dev (@eslint/compat, @eslint/js, @sveltejs/adapter-auto, @sveltejs/vite-plugin-svelte, @types/node, @types/react, @types/react-dom, autoprefixer, eslint, eslint-config-next, eslint-config-prettier, eslint-plugin-svelte, firebase-admin, genkit-cli, globals, gts, nodemon, postcss, prettier, prettier-plugin-svelte, tailwindcss, typescript, typescript-eslint)
• fix(deps): update dependency @genkit-ai/vertexai to v1
• fix(deps): update dependency @google-cloud/firestore to v8
• fix(deps): update dependency @google-cloud/functions-framework to v5
• fix(deps): update dependency @google-cloud/pubsub to v5
• fix(deps): update dependency agent-base to v9
• fix(deps): update dependency ansi-regex to v6
• fix(deps): update dependency ansi-styles to v6
• fix(deps): update dependency array-flatten to v3
• fix(deps): update dependency arrify to v3
• fix(deps): update dependency bignumber.js to v11
• fix(deps): update dependency body-parser to v2
• fix(deps): update dependency cliui to v9
• fix(deps): update dependency color-convert to v3
• fix(deps): update dependency color-name to v2
• fix(deps): update dependency content-disposition to v2
• fix(deps): update dependency content-type to v2
• fix(deps): update dependency debug to v4
• fix(deps): update dependency emoji-regex to v10
• fix(deps): update dependency event-target-shim to v6
• fix(deps): update dependency express to v5
• fix(deps): update dependency fast-xml-parser to v5
• fix(deps): update dependency finalhandler to v2
• fix(deps): update dependency firebase to v12
• fix(deps): update dependency firebase-admin to v13
• fix(deps): update dependency gaxios to v7
• fix(deps): update dependency gcp-metadata to v8
• fix(deps): update dependency genkitx-ollama to v1
• fix(deps): update dependency google-auth-library to v10
• fix(deps): update dependency google-gax to v5
• fix(deps): update dependency gtoken to v8
• fix(deps): update dependency http-proxy-agent to v9
• fix(deps): update dependency https-proxy-agent to v9
• fix(deps): update dependency ipaddr.js to v2
• fix(deps): update dependency is-fullwidth-code-point to v5
• fix(deps): update dependency is-stream to v4
• fix(deps): update dependency jose to v6
• fix(deps): update dependency jwks-rsa to v4
• fix(deps): update dependency limiter to v3
• fix(deps): update dependency lru-cache to v11
• fix(deps): update dependency lru-memoizer to v3
• fix(deps): update dependency media-typer to v2
• fix(deps): update dependency merge-descriptors to v2
• fix(deps): update dependency mime to v4
• fix(deps): update dependency mime-types to v3
• fix(deps): update dependency negotiator to v1
• fix(deps): update dependency node-fetch to v3
• fix(deps): update dependency p-limit to v7
• fix(deps): update dependency proto3-json-serializer to v3
• fix(deps): update dependency protobufjs to v8
• fix(deps): update dependency raw-body to v3
• fix(deps): update dependency readable-stream to v4
• fix(deps): update dependency retry-request to v8
• fix(deps): update dependency send to v1
• fix(deps): update dependency serve-static to v2
• fix(deps): update dependency string-width to v8
• fix(deps): update dependency strip-ansi to v7
• fix(deps): update dependency strnum to v2
• fix(deps): update dependency teeny-request to v10
• fix(deps): update dependency tr46 to v6
• fix(deps): update dependency type-is to v2
• fix(deps): update dependency undici-types to v8
• fix(deps): update dependency uuid to v14
• fix(deps): update dependency webidl-conversions to v8
• fix(deps): update dependency whatwg-url to v16
• fix(deps): update dependency wrap-ansi to v10
• fix(deps): update dependency yallist to v5
• fix(deps): update dependency yargs to v18
• fix(deps): update dependency yargs-parser to v22
• fix(deps): update dependency yocto-queue to v1
• fix(deps): update dependency zod to v4
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency jws to v4.0.1 [security]
• chore(deps): update dependency node-forge to v1.3.2 [security]
• chore(deps): update dependency path-to-regexp to v0.1.12 [security]
• chore(deps): update dependency @sveltejs/kit to v2.49.5 [security]
• chore(deps): update dependency axios to v1.13.5 [security]
• chore(deps): update dependency qs to v6.14.2 [security]
• chore(deps): update dependency svelte to v5.51.5 [security]
• chore(deps): update dependency vite to v6.4.1 [security]
• fix(deps): update dependency cookie to ^0.7.0 [security]
• fix(deps): update dependency form-data to v4 [security]
• fix(deps): update dependency next to v15 [security]
• fix(deps): update dependency @genkit-ai/ai to v1
• fix(deps): update dependency @genkit-ai/core to v1
• fix(deps): update react monorepo to v19 (react, react-dom)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (3)

game-advisor/Dockerfile (1)

• node 22 → [Updates: 24]

ollama/Dockerfile (1)

• ollama/ollama 0.3.12 → [Updates: 0.24.0]

sample-code/javascript/Dockerfile

github-actions (1)

.github/workflows/lint.yml (1)

• actions/checkout v3 → [Updates: v6, v3]

gomod (2)

functions/events-all-firebase/go.mod (6)

• go 1.21
• cloud.google.com/go/firestore v1.15.0 → [Updates: v1.22.0]
• firebase.google.com/go/v4 v4.14.0 → [Updates: v4.20.0]
• github.com/GoogleCloudPlatform/functions-framework-go v1.8.1 → [Updates: v1.9.2]
• github.com/cloudevents/sdk-go/v2 v2.15.2 → [Updates: v2.16.2]
• google.golang.org/api v0.174.0 → [Updates: v0.282.0]

functions/events-all-logger/go.mod (3)

• go 1.21
• github.com/GoogleCloudPlatform/functions-framework-go v1.8.1 → [Updates: v1.9.2]
• github.com/cloudevents/sdk-go/v2 v2.15.2 → [Updates: v2.16.2]

npm (7)

armor-up-api/package.json (16)

• @genkit-ai/express ^1.1.0 → [Updates: ^1.1.0]
• @genkit-ai/vertexai ^1.1.0 → [Updates: ^1.1.0]
• @google-cloud/firestore ^7.11.0 → [Updates: ^7.11.0, ^8.0.0]
• @google-cloud/pubsub ^4.10.0 → [Updates: ^4.10.0, ^5.0.0]
• axios ^1.8.2 → [Updates: ^1.8.2]
• genkit ^1.1.0 → [Updates: ^1.1.0]
• google-auth-library ^9.15.1 → [Updates: ^10.0.0]
• @eslint/js ^9.22.0 → [Updates: ^10.0.0]
• @types/node ^22.7.5 → [Updates: ^24.0.0]
• eslint ^8.57.1 → [Updates: ^10.0.0]
• genkit-cli ^1.1.0 → [Updates: ^1.1.0]
• globals ^16.0.0 → [Updates: ^17.0.0]
• gts ^6.0.2 → [Updates: ^7.0.0]
• nodemon ^3.1.9 → [Updates: ^3.1.9]
• typescript ^5.6.3 → [Updates: ^6.0.0]
• typescript-eslint ^8.26.1 → [Updates: ^8.26.1]

functions/events-game-ended-firebase/package.json (3)

• @google-cloud/functions-framework ^3.0.0 → [Updates: ^5.0.0]
• base-64 ^1.0.0
• firebase-admin ^11.0.0 → [Updates: ^13.0.0]

game-advisor/package.json (167)

• @genkit-ai/ai ^0.5.13 → [Updates: ^0.9.0, ^1.0.0]
• @genkit-ai/core ^0.5.13 → [Updates: ^0.9.0, ^1.0.0]
• @genkit-ai/dotprompt ^0.5.13 → [Updates: ^0.9.0]
• @genkit-ai/flow ^0.5.13 → [Updates: ^0.5.13]
• @genkit-ai/vertexai ^0.5.13 → [Updates: ^0.9.0, ^1.0.0]
• abort-controller ^3.0.0
• accepts ^1.3.8
• agent-base ^7.1.1 → [Updates: ^7.1.1, ^9.0.0]
• ansi-regex ^5.0.1 → [Updates: ^6.0.0]
• ansi-styles ^4.3.0 → [Updates: ^6.0.0]
• array-flatten ^1.1.1 → [Updates: ^3.0.0]
• arrify ^2.0.1 → [Updates: ^3.0.0]
• async-retry ^1.3.3
• asynckit ^0.4.0 → [Updates: ^0.5.0]
• base64-js ^1.5.1
• bignumber.js ^9.1.2 → [Updates: ^9.1.2, ^11.0.0]
• body-parser ^1.20.3 → [Updates: ^1.20.3, ^2.0.0]
• buffer-equal-constant-time ^1.0.1
• bytes ^3.1.2
• call-bind ^1.0.7 → [Updates: ^1.0.7]
• cliui ^8.0.1 → [Updates: ^9.0.0]
• color-convert ^2.0.1 → [Updates: ^3.0.0]
• color-name ^1.1.4 → [Updates: ^2.0.0]
• combined-stream ^1.0.8
• content-disposition ^0.5.4 → [Updates: ^2.0.0]
• content-type ^1.0.5 → [Updates: ^2.0.0]
• cookie ^0.6.0 → [Updates: ^0.7.0]
• cookie-signature ^1.0.6 → [Updates: ^1.0.6]
• debug ^2.6.9 → [Updates: ^4.0.0]
• define-data-property ^1.1.4
• delayed-stream ^1.0.0
• depd ^2.0.0
• destroy ^1.2.0
• duplexify ^4.1.3
• ecdsa-sig-formatter ^1.0.11
• ee-first ^1.1.1
• emoji-regex ^8.0.0 → [Updates: ^10.0.0]
• encodeurl ^2.0.0
• end-of-stream ^1.4.4 → [Updates: ^1.4.4]
• es-define-property ^1.0.0 → [Updates: ^1.0.0]
• es-errors ^1.3.0
• escalade ^3.2.0
• escape-html ^1.0.3
• etag ^1.8.1
• event-target-shim ^5.0.1 → [Updates: ^6.0.0]
• express ^4.21.0 → [Updates: ^4.21.0, ^5.0.0]
• extend ^3.0.2
• farmhash-modern ^1.1.0
• fast-deep-equal ^3.1.3
• fast-xml-parser ^4.5.0 → [Updates: ^4.5.0, ^5.0.0]
• faye-websocket ^0.11.4
• finalhandler ^1.3.1 → [Updates: ^1.3.1, ^2.0.0]
• firebase-admin ^12.5.0 → [Updates: ^12.5.0, ^13.0.0]
• form-data ^2.5.1 → [Updates: ^4.0.0]
• forwarded ^0.2.0
• fresh ^0.5.2
• function-bind ^1.1.2
• functional-red-black-tree ^1.0.1
• gaxios ^6.7.1 → [Updates: ^7.0.0]
• gcp-metadata ^6.1.0 → [Updates: ^6.1.0, ^8.0.0]
• genkitx-ollama ^0.5.13 → [Updates: ^0.9.0, ^1.0.0]
• get-caller-file ^2.0.5
• get-intrinsic ^1.2.4 → [Updates: ^1.2.4]
• google-auth-library ^9.14.1 → [Updates: ^9.14.1, ^10.0.0]
• google-gax ^4.4.1 → [Updates: ^4.4.1, ^5.0.0]
• gopd ^1.0.1 → [Updates: ^1.0.1]
• gtoken ^7.1.0 → [Updates: ^8.0.0]
• has-property-descriptors ^1.0.2
• has-proto ^1.0.3 → [Updates: ^1.0.3]
• has-symbols ^1.0.3 → [Updates: ^1.0.3]
• hasown ^2.0.2 → [Updates: ^2.0.2]
• html-entities ^2.5.2 → [Updates: ^2.5.2]
• http-errors ^2.0.0 → [Updates: ^2.0.0]
• http-parser-js ^0.5.8 → [Updates: ^0.5.8]
• http-proxy-agent ^5.0.0 → [Updates: ^9.0.0]
• https-proxy-agent ^7.0.5 → [Updates: ^7.0.5, ^9.0.0]
• iconv-lite ^0.4.24 → [Updates: ^0.7.0]
• inherits ^2.0.4
• ipaddr.js ^1.9.1 → [Updates: ^2.0.0]
• is-fullwidth-code-point ^3.0.0 → [Updates: ^5.0.0]
• is-stream ^2.0.1 → [Updates: ^4.0.0]
• jose ^4.15.9 → [Updates: ^6.0.0]
• json-bigint ^1.0.0
• jsonwebtoken ^9.0.2 → [Updates: ^9.0.2]
• jwa ^2.0.0 → [Updates: ^2.0.0]
• jwks-rsa ^3.1.0 → [Updates: ^3.1.0, ^4.0.0]
• jws ^4.0.0 → [Updates: ^4.0.0]
• limiter ^1.1.5 → [Updates: ^3.0.0]
• lodash.camelcase ^4.3.0
• lodash.clonedeep ^4.5.0
• lodash.includes ^4.3.0
• lodash.isboolean ^3.0.3
• lodash.isinteger ^4.0.4
• lodash.isnumber ^3.0.3
• lodash.isplainobject ^4.0.6
• lodash.isstring ^4.0.1
• lodash.once ^4.1.1
• long ^5.2.3 → [Updates: ^5.2.3]
• lru-cache ^6.0.0 → [Updates: ^11.0.0]
• lru-memoizer ^2.3.0 → [Updates: ^3.0.0]
• media-typer ^0.3.0 → [Updates: ^2.0.0]
• merge-descriptors ^1.0.3 → [Updates: ^2.0.0]
• methods ^1.1.2
• mime ^1.6.0 → [Updates: ^4.0.0]
• mime-db ^1.52.0 → [Updates: ^1.52.0]
• mime-types ^2.1.35 → [Updates: ^3.0.0]
• ms ^2.0.0 → [Updates: ^2.0.0]
• negotiator ^0.6.3 → [Updates: ^0.6.3, ^1.0.0]
• node-fetch ^2.7.0 → [Updates: ^3.0.0]
• node-forge ^1.3.1 → [Updates: ^1.3.1]
• object-hash ^3.0.0
• object-inspect ^1.13.2 → [Updates: ^1.13.2]
• on-finished ^2.4.1
• once ^1.4.0
• p-limit ^3.1.0 → [Updates: ^7.0.0]
• parseurl ^1.3.3
• path-to-regexp ^0.1.10 → [Updates: ^0.1.10]
• proto3-json-serializer ^2.0.2 → [Updates: ^3.0.0]
• protobufjs ^7.4.0 → [Updates: ^7.4.0, ^8.0.0]
• proxy-addr ^2.0.7
• qs ^6.13.0 → [Updates: ^6.13.0]
• range-parser ^1.2.1
• raw-body ^2.5.2 → [Updates: ^2.5.2, ^3.0.0]
• readable-stream ^3.6.2 → [Updates: ^4.0.0]
• require-directory ^2.1.1
• retry ^0.13.1
• retry-request ^7.0.2 → [Updates: ^8.0.0]
• safe-buffer ^5.2.1
• safer-buffer ^2.1.2
• semver ^7.6.3 → [Updates: ^7.6.3]
• send ^0.19.0 → [Updates: ^0.19.0, ^1.0.0]
• serve-static ^1.16.2 → [Updates: ^1.16.2, ^2.0.0]
• set-function-length ^1.2.2
• setprototypeof ^1.2.0
• side-channel ^1.0.6 → [Updates: ^1.0.6]
• statuses ^2.0.1 → [Updates: ^2.0.1]
• stream-events ^1.0.5
• stream-shift ^1.0.3
• string_decoder ^1.3.0
• string-width ^4.2.3 → [Updates: ^8.0.0]
• strip-ansi ^6.0.1 → [Updates: ^7.0.0]
• strnum ^1.0.5 → [Updates: ^1.0.5, ^2.0.0]
• stubs ^3.0.0
• teeny-request ^9.0.0 → [Updates: ^10.0.0]
• toidentifier ^1.0.1
• tr46 ^0.0.3 → [Updates: ^6.0.0]
• tslib ^2.7.0 → [Updates: ^2.7.0]
• type-is ^1.6.18 → [Updates: ^2.0.0]
• undici-types ^6.19.8 → [Updates: ^6.19.8, ^8.0.0]
• unpipe ^1.0.0
• util-deprecate ^1.0.2
• utils-merge ^1.0.1
• uuid ^10.0.0 → [Updates: ^14.0.0]
• vary ^1.1.2
• webidl-conversions ^3.0.1 → [Updates: ^8.0.0]
• websocket-driver ^0.7.4
• websocket-extensions ^0.1.4
• whatwg-url ^5.0.0 → [Updates: ^16.0.0]
• wrap-ansi ^7.0.0 → [Updates: ^10.0.0]
• wrappy ^1.0.2
• y18n ^5.0.8
• yallist ^4.0.0 → [Updates: ^5.0.0]
• yargs ^17.7.2 → [Updates: ^18.0.0]
• yargs-parser ^21.1.1 → [Updates: ^22.0.0]
• yocto-queue ^0.1.0 → [Updates: ^1.0.0]
• zod ^3.23.8 → [Updates: ^3.23.8, ^4.0.0]
• typescript ^5.6.2 → [Updates: ^6.0.0]

pinball-frontend-2025/svelte/package.json (16)

• firebase ^11.5.0 → [Updates: ^11.5.0, ^12.0.0]
• @eslint/compat ^1.2.5 → [Updates: ^2.0.0]
• @eslint/js ^9.18.0 → [Updates: ^10.0.0]
• @playwright/test ^1.49.1 → [Updates: ^1.49.1]
• @sveltejs/adapter-auto ^4.0.0 → [Updates: ^7.0.0]
• @sveltejs/kit ^2.16.0 → [Updates: ^2.16.0]
• @sveltejs/vite-plugin-svelte ^5.0.0 → [Updates: ^7.0.0]
• eslint ^9.18.0 → [Updates: ^10.0.0]
• eslint-config-prettier ^10.0.1 → [Updates: ^10.0.1]
• eslint-plugin-svelte ^3.0.0 → [Updates: ^3.0.0]
• firebase-admin ^13.2.0 → [Updates: ^13.2.0]
• globals ^16.0.0 → [Updates: ^17.0.0]
• prettier ^3.4.2 → [Updates: ^3.4.2]
• prettier-plugin-svelte ^3.3.3 → [Updates: ^4.0.0]
• svelte ^5.0.0 → [Updates: ^5.0.0]
• vite ^6.0.0 → [Updates: ^6.0.0]

pinball-frontend/package.json (14)

• firebase ^10.10.0 → [Updates: ^10.10.0, ^12.0.0]
• next 14.1.4 → [Updates: 15.5.10]
• react ^18 → [Updates: ^18, ^19.0.0]
• react-dom ^18 → [Updates: ^18, ^19.0.0]
• react-qr-code ^2.0.15 → [Updates: ^2.0.15]
• @types/node 20.16.10 → [Updates: 24.12.4]
• @types/react 18.3.11 → [Updates: 19.2.15]
• @types/react-dom ^18 → [Updates: ^19.0.0]
• autoprefixer ^10.4.19 → [Updates: ^10.4.19]
• eslint ^8.57.1 → [Updates: ^10.0.0]
• eslint-config-next 14.2.3 → [Updates: 16.2.6]
• postcss ^8 → [Updates: ^8]
• tailwindcss ^3.4.3 → [Updates: ^4.0.0]
• typescript 5.6.2 → [Updates: 6.0.3]

sample-code/javascript/package.json (3)

• body-parser ^1.20.1 → [Updates: ^1.20.1, ^2.0.0]
• express ^4.21.0 → [Updates: ^4.21.0, ^5.0.0]
• @google-cloud/pubsub ^4.3.0 → [Updates: ^4.3.0, ^5.0.0]

timezone/package.json (1)

• express ^4.18.2 → [Updates: ^5.0.0]

pip_requirements (3)

baseline/requirements.txt (1)

• flask ==3.0.2 → [Updates: ==3.1.3]

event-generator/basic/requirements.txt

sample-code/python/requirements.txt (2)

• flask ==3.0.2 → [Updates: ==3.1.3]
• google.cloud.pubsub ==2.21.0 → [Updates: ==2.38.0]

---

• Check this box to trigger a request for Renovate to run again on this repository