Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@types/uuid
npm	framer-motion
npm	vitest-environment-miniflare

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(ts): Update typescript ecosystem (@types/react, @types/react-dom)
• chore(lint): Update code quality tools (oxfmt, oxlint)
• fix(frontend): Update dependency next to ^16.3.1
• chore(deps): update actions/cache action to v6
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-node action to v7
• chore(deps): update actions/setup-python action to v7
• chore(deps): update dependency @testing-library/jest-dom to v7
• chore(deps): update dependency framer-motion to v13
• chore(deps): update dependency jsdom to v30
• chore(deps): update dependency librosa to v1
• chore(deps): update dependency motion to v13
• chore(deps): update dependency setuptools to v84
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): Update dependency hono to ^4.12.34 [SECURITY]
• chore(deps): Update npm dependencies (@hono/zod-openapi, @supabase/supabase-js, concurrently, framer-motion, lucide-react, mapbox-gl, motion, tsx, turbo, vite, wrangler, zustand)
• chore(ci): Update dependency python to v3.14.7
• chore(docker): Update docker services (ghcr.io/astral-sh/uv, python)
• chore(py): Update python packages (fastapi, mypy, numpy, redis, ruff, uvicorn)
• chore(ts): Update dependency typescript to v7
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency pytest to v9

Detected Dependencies

docker-compose (4)

apps/python-audio-analyzer/docker-compose.dev.yml (1)

• redis 8-alpine

apps/python-audio-analyzer/docker-compose.yml (1)

• redis 8-alpine

docker-compose.prod.yml

docker-compose.yml (1)

• redis 7.2-alpine3.19

dockerfile (1)

apps/python-audio-analyzer/Dockerfile (3)

• docker/dockerfile 1
• python 3.13-slim → [Updates: 3.14-slim]
• ghcr.io/astral-sh/uv 0.11.16 → [Updates: 0.12.4]

github-actions (8)

.github/workflows/add-issue-to-project-todo.yml (1)

• titoportas/update-project-fields v0.1.0

.github/workflows/backlog-automation.yml (3)

• actions/github-script v9
• actions/github-script v9
• titoportas/update-project-fields v0.1.0

.github/workflows/claude.yml (2)

• actions/checkout v6 → [Updates: v7]
• anthropics/claude-code-action beta

.github/workflows/issue-progress-automation.yml (5)

• actions/github-script v9
• actions/github-script v9
• actions/github-script v9
• actions/github-script v9
• titoportas/update-project-fields v0.1.0

.github/workflows/label-sync-automation.yml (3)

• actions/github-script v9
• actions/github-script v9
• titoportas/update-project-fields v0.1.0

.github/workflows/lint.yml (3)

• actions/checkout v6 → [Updates: v7]
• actions/setup-node v6 → [Updates: v7]
• actions/cache v5 → [Updates: v6]

.github/workflows/pr-progress-automation.yml (3)

• actions/github-script v9
• actions/github-script v9
• actions/github-script v9

.github/workflows/python-lint.yml (6)

• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6 → [Updates: v7]
• actions/cache v5 → [Updates: v6]
• actions/checkout v6 → [Updates: v7]
• docker/setup-buildx-action v4
• python 3.13 → [Updates: 3.14.7]

npm (8)

apps/api/package.json (13)

• @hono/zod-openapi ^1.5.1 → [Updates: ^1.5.3]
• @hono/zod-validator ^0.9.0
• @supabase/supabase-js ^2.110.8 → [Updates: ^2.112.3]
• hono ^4.12.31 → [Updates: ^4.12.34]
• vite ^8.1.5 → [Updates: ^8.2.1]
• zod ^4.4.3
• @types/node ^24.13.3
• tsc-alias ^1.9.1
• tsx ^4.23.1 → [Updates: ^4.23.12]
• typescript ^5.9.3 → [Updates: ^7.0.2]
• vitest ^4.1.10
• vitest-environment-miniflare ^2.14.4
• wrangler ^4.114.0 → [Updates: ^4.123.0]

apps/python-audio-analyzer/package.json

apps/web/package.json (34)

• @ducanh2912/next-pwa ^10.2.9
• @mapbox/mapbox-gl-geocoder ^5.1.2
• @opennextjs/cloudflare ^1.20.2
• @supabase/supabase-js ^2.110.8 → [Updates: ^2.112.3]
• @tanstack/react-query ^5.101.4
• framer-motion ^12.42.2 → [Updates: ^12.43.0, ^13.1.0, ^12.42.2]
• idb ^8.0.3
• lucide-react ^1.26.0 → [Updates: ^1.31.0]
• mapbox-gl ^3.27.0 → [Updates: ^3.28.1]
• motion ^12.42.2 → [Updates: ^12.43.0, ^13.1.0]
• next ^16.2.11 → [Updates: ^16.3.1]
• ogl ^1.0.11
• react ^19.2.8
• react-dom ^19.2.8
• react-icons ^5.7.0
• react-modal-sheet ^5.6.0
• recordrtc ^5.6.2
• uuid ^14.0.1
• wavesurfer.js ^7.12.11
• wrangler ^4.114.0 → [Updates: ^4.123.0]
• zod ^4.4.3
• zustand ^5.0.14 → [Updates: ^5.0.15]
• @tailwindcss/postcss ^4.3.3
• @testing-library/jest-dom ^6.9.1 → [Updates: ^7.0.1]
• @testing-library/react ^16.3.2
• @types/mapbox__mapbox-gl-geocoder ^5.1.1
• @types/node ^24.13.3
• @types/react ^19.2.17 → [Updates: ^19.2.18]
• @types/react-dom ^19.2.3 → [Updates: ^19.2.4]
• @types/uuid ^11.0.0
• jsdom ^29.1.1 → [Updates: ^30.0.1]
• tailwindcss ^4.3.3
• typescript ^5.9.3 → [Updates: ^7.0.2]
• vitest ^4.1.10

package.json (7)

• @types/node ^24.13.3
• concurrently ^10.0.3 → [Updates: ^10.0.4]
• lefthook ^2.1.10
• oxfmt ^0.60.0 → [Updates: ^0.63.0]
• oxlint ^1.75.0 → [Updates: ^1.78.0]
• turbo ^2.10.6 → [Updates: ^2.10.9]
• typescript ^5.9.3 → [Updates: ^7.0.2]

packages/config/package.json

packages/python-types/package.json (2)

• typescript ^5.9.3 → [Updates: ^7.0.2]
• @types/node ^24.13.3

packages/shared-types/package.json (5)

• zod ^4.4.3
• @types/node ^24.13.3
• openapi-typescript ^7.13.0
• tsx ^4.23.1 → [Updates: ^4.23.12]
• typescript ^5.9.3 → [Updates: ^7.0.2]

packages/utils/package.json (2)

• zod ^4.4.3
• typescript ^5.9.3 → [Updates: ^7.0.2]

poetry (1)

apps/python-audio-analyzer/pyproject.toml (21)

• fastapi >=0.136.3 → [Updates: >=0.141.1]
• uvicorn >=0.49.0 → [Updates: >=0.52.3]
• tensorflow >=2.21.0
• tensorflow-hub >=0.16.1
• setuptools <81 → [Updates: <85]
• numpy >=2.4.6 → [Updates: >=2.5.2]
• librosa >=0.11.0 → [Updates: >=1.0.0]
• soundfile >=0.14.0
• ffmpeg-python >=0.2.0
• pydantic >=2.13.4
• httpx >=0.28.1
• python-multipart >=0.0.32
• redis >=8.0.0 → [Updates: >=8.1.0]
• structlog >=26.1.0
• pytest >=8.4.2,<9.0.0 → [Updates: >=9.1.1,<9.1.2]
• pytest-asyncio >=1.4.0
• black >=26.5.1
• isort >=8.0.1
• mypy >=2.1.0 → [Updates: >=2.3.0]
• ruff >=0.15.16 → [Updates: >=0.16.3]
• pytest-cov >=7.1.0

---

• Check this box to trigger a request for Renovate to run again on this repository

[linear]

SON-27