🚀 Dependency Updates

[hash-worker]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
npm	@llamaindex/readers
npm	@types/app-root-path
npm	@types/react-window
npm	framer-motion
npm	lodash.isequal
npm	npm-run-all
npm	react-beautiful-dnd

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Replace npm package framer-motion with motion
• Replace npm package npm-run-all with npm-run-all2 5.0.0
• Update express npm packages (@types/express, express, express-handlebars, express-rate-limit)
• Update libp2p npm packages (@libp2p/crypto, @libp2p/identify, @libp2p/interface, @libp2p/ping, @libp2p/tcp, libp2p)
• Update prosemirror npm packages (prosemirror-collab, prosemirror-commands, prosemirror-dropcursor, prosemirror-inputrules, prosemirror-keymap, prosemirror-state, prosemirror-transform)
• Update Docker tag grafana/mimir to v3.0.4
• Update npm package @csstools/postcss-oklab-function to v5.0.2
• Update npm package @google-cloud/vertexai to v1.10.2
• Update npm package @keyv/redis to v5.1.6
• Update npm package @llamaindex/readers to v3.1.22
• Update npm package @mantine/hooks to v8.3.18
• Update npm package @multiformats/dns to v1.0.13
• Update npm package @next/bundle-analyzer to v15.5.14
• Update npm package @ory/client to v1.22.28
• Update npm package @pmmmwh/react-refresh-webpack-plugin to v0.6.2
• Update npm package @rolldown/plugin-babel to v0.2.2
• Update npm package @smithy/protocol-http to v5.3.12
• Update npm package @smithy/signature-v4 to v5.3.12
• Update npm package @snowplow/node-tracker to v4.6.9
• Update npm package @types/google.picker to v0.0.52
• Update npm package @types/lodash to v4.17.24
• Update npm package @types/mailchimp__mailchimp_marketing to v3.0.22
• Update npm package @types/nodemailer to v6.4.23
• Update npm package @types/prismjs to v1.26.6
• Update npm package @types/webextension-polyfill to v0.12.5
• Update npm package @types/yargs to v17.0.35
• Update npm package ai to v5.0.157
• Update npm package axios to v1.13.6
• Update npm package body-parser to v2.2.2
• Update npm package bumpp to v10.4.1
• Update npm package canvas to v3.2.2
• Update npm package case-anything to v3.1.2
• Update npm package cors to v2.8.6
• Update npm package dedent to v1.7.2
• Update npm package dompurify to v3.3.3
• Update npm package elkjs to v0.11.1
• Update npm package envalid to v8.1.1
• Update npm package execa to v9.6.1
• Update npm package fast-xml-parser to v5.5.8
• Update npm package fs-extra to v11.3.4
• Update npm package html-webpack-plugin to v5.6.6
• Update npm package jsondiffpatch to v0.7.3
• Update npm package multiformats to v13.4.2
• Update npm package natural to v8.1.1
• Update npm package oembed-providers to v1.0.20260312
• Update npm package oxlint-tsgolint to v0.17.1
• Update npm package pdf2json to v3.2.2
• Update npm package rolldown to v1.0.0-rc.10
• Update npm package sanitize-html to v2.17.2 (sanitize-html, @types/sanitize-html)
• Update npm package semver to v7.7.4
• Update npm package wait-on to v9.0.4
• Update react monorepo (@types/react, react, react-dom)
• Update storybook monorepo (@storybook/addon-docs, @storybook/react, @storybook/react-vite, storybook)
• Update effect npm packages (@effect/cluster, @effect/experimental, @effect/platform, @effect/platform-node, @effect/rpc, @effect/sql, effect)
• Update graphql npm packages (graphql, graphql-scalars)
• Update opentelemetry npm packages (@opentelemetry/api-logs, @opentelemetry/core, @opentelemetry/exporter-logs-otlp-grpc, @opentelemetry/exporter-trace-otlp-grpc, @opentelemetry/instrumentation, @opentelemetry/instrumentation-express, @opentelemetry/instrumentation-graphql, @opentelemetry/instrumentation-http, @opentelemetry/resources, @opentelemetry/sdk-logs, @opentelemetry/sdk-node, @opentelemetry/sdk-trace-base, @opentelemetry/sdk-trace-node, @opentelemetry/semantic-conventions)
• Update sentry npm packages (@sentry/browser, @sentry/nextjs, @sentry/node, @sentry/react, @sentry/webpack-plugin)
• Update aws-sdk-js-v3 monorepo (@aws-sdk/client-s3, @aws-sdk/client-sesv2, @aws-sdk/credential-provider-node, @aws-sdk/s3-presigned-post, @aws-sdk/s3-request-presigner)
• Update babel monorepo (@babel/core, @babel/eslint-parser, @babel/plugin-transform-class-properties, @babel/plugin-transform-private-property-in-object, @babel/preset-env, @babel/preset-react, @babel/standalone)
• Update Docker tag debian to v13.4
• Update Docker tag grafana/grafana to v12.4.1
• Update Docker tag grafana/loki to v3.6.7
• Update Docker tag grafana/pyroscope to v1.19.0
• Update Docker tag grafana/tempo to v2.10.3
• Update Docker tag otel/opentelemetry-collector-contrib to v0.148.0
• Update Docker tag postgres to v13.23
• Update npm package @apidevtools/json-schema-ref-parser to v15.3.1
• Update npm package @apollo/client to v3.14.1
• Update npm package @ark-ui/react to v5.34.1
• Update npm package @changesets/changelog-github to v0.6.0
• Update npm package @figma/code-connect to v1.4.2
• Update npm package @modelcontextprotocol/sdk to v1.27.1
• Update npm package @notionhq/client to v5.14.0
• Update npm package @optique/core to v0.10.7
• Update npm package @pandacss/dev to v1.9.1
• Update npm package @types/node to v22.19.15
• Update npm package @types/papaparse to v5.5.2
• Update npm package @vitejs/plugin-react to v5.2.0
• Update npm package babel-loader to v10.1.1
• Update npm package bowser to v2.14.1
• Update npm package clipboardy to v5.3.1
• Update npm package globals to v16.5.0
• Update npm package gpt-tokenizer to v3.4.0
• Update npm package immer to v10.2.0
• Update npm package keyv to v5.6.0
• Update npm package lefthook to v2.1.4
• Update npm package lucide-react to v0.577.0
• Update npm package motion to v12.38.0
• Update npm package openai to v6.32.0
• Update npm package oxlint to v1.56.0
• Update npm package qs to v6.15.0
• Update npm package react-dropzone to v14.4.1
• Update npm package react-hook-form to v7.72.0
• Update npm package react-icons to v5.6.0
• Update npm package react-resizable-panels to v4.7.5
• Update npm package react-virtuoso to v4.18.3
• Update npm package redis to v5.11.0
• Update npm package rooks to v9.7.0
• Update npm package sass to v1.98.0
• Update npm package sync-fetch to v0.6.0
• Update npm package tsx to v4.21.0
• Update npm package type-fest to v5.5.0
• Update npm package vite to v7.3.1
• Update npm package web-worker to v1.5.0
• Update npm package webpack to v5.105.4
• Update npm package winston to v3.19.0
• Update npm package ws to v8.20.0
• Update npm package yarn to v4.13.0
• Update npm package zod-to-json-schema to v3.25.1
• Update npm package zod to v4.3.6
• Update Docker tag oryd/hydra to v26
• Update Docker tag oryd/kratos to v26
• Update Docker tag postgres to v18.3
• Update Font Awesome to v7 (major) (@fortawesome/free-regular-svg-icons, @fortawesome/free-solid-svg-icons)
• Update material-ui monorepo to v7 (major) (@mui/icons-material, @mui/material, @mui/system)
• Update nextjs monorepo to v16 (major) (@next/bundle-analyzer, next)
• Update npm package @apollo/client to v4
• Update npm package @dnd-kit/sortable to v10
• Update npm package @graphql-tools/schema to v10
• Update npm package @linear/sdk to v78
• Update npm package @lit-labs/react to v2
• Update npm package @react-sigma/core to v5
• Update npm package @types/iframe-resizer to v4
• Update npm package @types/jsdom to v28
• Update npm package @types/node to v24
• Update npm package @vercel/edge-config to v1
• Update npm package @vitejs/plugin-react to v6
• Update npm package ai to v6
• Update npm package bumpp to v11
• Update npm package cache-manager to v7
• Update npm package css-loader to v7
• Update npm package dotenv-flow to v4
• Update npm package e2b to v2
• Update npm package echarts to v6
• Update npm package framer-motion to v12
• Update npm package globals to v17
• Update npm package globby to v16
• Update npm package googleapis to v171
• Update npm package helmet to v8
• Update npm package hot-shots to v14
• Update npm package html-loader to v5
• Update npm package html-to-text to v9 (html-to-text, @types/html-to-text)
• Update npm package iframe-resizer to v5
• Update npm package immer to v11
• Update npm package is-docker to v4
• Update npm package jsdom to v29
• Update npm package lit to v3
• Update npm package lowlight to v3
• Update npm package marked to v17
• Update npm package material-ui-popup-state to v5
• Update npm package mime-types to v3 (mime-types, @types/mime-types)
• Update npm package nanoid to v5
• Update npm package next-seo to v7
• Update npm package node-fetch to v3
• Update npm package nodemailer to v7.0.13 (nodemailer, @types/nodemailer)
• Update npm package nodemailer to v8
• Update npm package notistack to v3
• Update npm package pdf2json to v4
• Update npm package puppeteer-core to v24
• Update npm package quicktype to v23
• Update npm package react-dropzone to v15
• Update npm package react-pdf to v10
• Update npm package react-window to v2 (react-window, @types/react-window)
• Update npm package sass-loader to v16
• Update npm package serialize-error to v13
• Update npm package slonik to v48
• Update npm package source-map-loader to v5
• Update npm package style-loader to v4
• Update npm package ts-json-schema-generator to v2
• Update npm package vite to v8.0.1
• Update npm package webpack-cli to v7
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update GitHub Action actions/create-github-app-token to v2.2.2
• Update GitHub Action codecov/codecov-action to v5.5.3
• Update npm package eslint-plugin-storybook to v10.3.2
• Update Rust crate specta to v2.0.0-rc.23
• Update GitHub Action actions/dependency-review-action to v4.9.0
• Update GitHub Action aws-actions/amazon-ecr-login to v2.1.0
• Update GitHub Action changesets/action to v1.7.0
• Update GitHub Action CodSpeedHQ/action to v4.12.1
• Update GitHub Action docker/build-push-action to v6.19.2
• Update GitHub Action docker/login-action to v3.7.0
• Update GitHub Action docker/setup-buildx-action to v3.12.0
• Update GitHub Action github/codeql-action to v4.34.1
• Update GitHub Action jdx/mise-action to v3.6.3
• Update GitHub Action returntocorp/semgrep to v1.156.0
• Update Rust crate deadpool to 0.13.0
• Update Rust crate rand_distr to 0.6.0
• Update Rust crate rand to 0.10.0
• Update sentry-rust monorepo to 0.47.0 (sentry, sentry-core, sentry-types)
• Update tool cargo:cargo-llvm-cov to 0.8.0
• Update tool cargo:wasm-pack to 0.14.0
• Update tool just to v1.47.1
• Update tool markdownlint-cli2 to v0.22.0
• Update tool node to v22.22.1
• Update tool npm:@redocly/cli to v2.24.1
• Update tool npm:renovate to v42.99.0
• Update tool npm:turbo to v2.8.20
• Update tool uv to v0.10.12
• Update tool yq to v4.52.4
• Update anstyle Rust crates to v1 (major) (anstream, anstyle-svg)
• Update GitHub Action actions/cache to v5
• Update GitHub Action actions/create-github-app-token to v3
• Update GitHub Action actions/labeler to v6
• Update GitHub Action aws-actions/configure-aws-credentials to v6
• Update GitHub Action dawidd6/action-download-artifact to v19
• Update GitHub Action docker/build-push-action to v7
• Update GitHub Action docker/login-action to v4
• Update GitHub Action docker/setup-buildx-action to v4
• Update GitHub Action jdx/mise-action to v4
• Update GitHub Action mshick/add-pr-comment to v3
• Update GitHub Action nick-fields/retry to v4
• Update GitHub Artifact Actions (major) (actions/download-artifact, actions/upload-artifact)
• Update npm package eslint to v10
• Update Rust crate bump-scope to v2
• Update Rust crate toml to v1
• Update Rust crate winnow to v1
• Update tool node to v24
• Update tool npm:@napi-rs/cli to v3
• Update tool npm:renovate to v43
• Update tool pipx:sqlfluff to v4
• Update tool protoc to v34

Edited/Blocked

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update npm package e2b to v0.16.2
• Update npm package @sentry/webpack-plugin to v5
• Update storybook monorepo to v10 (major) (@storybook/addon-docs, @storybook/react, @storybook/react-vite, storybook)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update npm package tsdown to v0.21.5
• Update npm package rolldown-plugin-dts to v0.23.0
• Update Rust crate proptest to v1.11.0
• Update Rust crate sha2 to 0.11.0
• Update Rust crate tarpc to v0.37.0
• Update Rust crate unicode-segmentation to v1.13.1
• Update ory npm packages to v26 (major) (@ory/hydra-client, @ory/kratos-client)
• Update npm package lucide-react to v1
• Update npm package typescript to v6

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (git-refs package https://github.com/google/tarpc).

Files affected: Cargo.toml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update Rust crate temporalio-client to 18615a7
• Update Rust crate temporalio-common to 18615a7
• Update rollup npm packages (@rollup/plugin-commonjs, rollup)
• Update LLM provider SDK npm packages (@anthropic-ai/bedrock-sdk, @anthropic-ai/sdk)
• Update npm package @eslint/eslintrc to v3.3.5
• Update npm package @typescript/native-preview to v7.0.0-dev.20260323.1
• Update Rust crate lcov to v0.8.2
• Update Rust crate logos to v0.16.1
• Update opentelemetry Rust crates (opentelemetry, opentelemetry-appender-tracing, opentelemetry-otlp, opentelemetry-semantic-conventions, opentelemetry_sdk, tracing-opentelemetry)
• Update vitest npm packages (@effect/vitest, vitest-browser-react)
• Update npm package @vitest/browser-playwright to v4.1.0
• Update Rust crate cedar-policy-core to v4.9.1
• Update Rust crate hifijson to 0.5.0
• Update Rust crate nextest-filtering to 0.20.0
• Update Rust crate nextest-metadata to 0.14.0
• Update Rust crate oxc to 0.122.0
• Update Rust crate reqwest-middleware to 0.5.0
• Update Rust crate reqwest-tracing to 0.7.0
• Update Rust crate reqwest to 0.13.0
• Update temporalio-ts monorepo to v1.15.0 (@temporalio/activity, @temporalio/client, @temporalio/common, @temporalio/proto, @temporalio/worker, @temporalio/workflow)
• Update napi Rust crates to v3 (major) (napi, napi-derive)
• Update vitest npm packages to v4 (major) (@vitest/coverage-istanbul, vitest)
• Update Rust crate scc to v3
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update tool java to v25.0.2+10.0.LTS
• Update Rust crate refinery to 0.9.0
• Update tool pipx:sqlfluff to v3.5.0
• Update Rust crate utoipa to v5

Detected Dependencies

Note

Detected dependencies section has been truncated

cargo

apps/hash-graph/Cargo.toml

Cargo.toml

• annotate-snippets 0.12.8
• ansi-to-html 0.2.2
• ansi-to-tui 8.0.1
• anstream 0.6.21
• anstyle 1.0.13
• anstyle-lossy 1.1.4
• anstyle-svg 0.1.11
• async-scoped 0.9.0
• aws-config 1.8.10
• aws-sdk-s3 1.110.0
• aws-types 1.3.10
• axum 0.8.6
• axum-core 0.5.5
• bitvec 1.0.1
• bon 3.8.1
• bstr 1.12.1
• bump-scope 1.5.1
• bytes 1.10.1
• bytes-utils 0.1.4
• camino 1.1.12
• cargo_metadata 0.23.0
• cedar-policy-core 4.5.1
• circular-buffer 1.1.0
• clap 4.5.51
• clap_builder 4.5.51
• clap_complete 4.5.60
• codspeed-criterion-compat 4.1.0
• codspeed-criterion-compat-walltime 4.3.0
• console_error_panic_hook 0.1.7
• convert_case 0.11.0
• criterion 0.8.0
• criterion-macro 0.4.0
• dashu-base 0.4.1
• dashu-float 0.4.3
• deadpool 0.12.3
• deadpool-postgres 0.14.1
• derive-where 1.6.0
• derive_more 2.0.1
• dotenv-flow 0.16.2
• either 1.15.0
• email_address 0.2.9
• ena 0.14.3
• enum-iterator 2.1.0
• enumflags2 0.7.12
• expect-test 1.5.1
• foldhash 0.2.0
• frunk 0.4.4
• frunk_core 0.4.4
• futures 0.3.31
• futures-channel 0.3.31
• futures-core 0.3.31
• futures-io 0.3.31
• futures-sink 0.3.31
• futures-util 0.3.31
• glob 0.3.3
• globset 0.4.18
• guppy 0.17.20
• hashbrown 0.16.0
• hifijson 0.4.0
• http 1.3.1
• humansize 2.1.3
• hyper 1.7.0
• include_dir 0.7.4
• include_dir_macros 0.7.4
• indexmap 2.12.0
• indoc 2.0.7
• inferno 0.12.3
• insta 1.43.2
• iso8601-duration 0.2.0
• itertools 0.14.0
• jsonptr 0.7.1
• jsonwebtoken 10.3.0
• lcov 0.8.1
• lexical 7.0.5
• libp2p 0.56.0
• libp2p-core 0.43.1
• libp2p-identity 0.2.12
• libp2p-ping 0.47.0
• libp2p-stream 0.4.0-alpha
• libp2p-swarm 0.47.0
• libp2p-yamux 0.47.0
• libtest-mimic 0.8.1
• line-index 0.1.2
• logos 0.16.0
• md-5 0.10.6
• memchr 2.7.6
• mimalloc 0.1.48
• mime 0.3.17
• multiaddr 0.18.2
• multistream-select 0.13.0
• napi 2.16.17
• napi-build 2.2.4
• napi-derive 2.16.13
• nextest-filtering 0.17.0
• nextest-metadata 0.12.2
• nodejs_package_json 0.4.4
• opentelemetry 0.30.0
• opentelemetry-appender-tracing 0.30.1
• opentelemetry-otlp 0.30.0
• opentelemetry-semantic-conventions 0.30.0
• opentelemetry_sdk 0.30.0
• owo-colors 4.2.3
• oxc 0.95.0
• pin-project 1.1.10
• pin-project-lite 0.2.16
• plist 1.8.0
• postgres-protocol 0.6.9
• postgres-types 0.2.11
• pretty 0.12.5
• pretty_assertions 1.4.1
• prettyplease 0.2.37
• proc-macro-error2 2.0.1
• proc-macro2 1.0.103
• prometheus-client 0.24.0
• proptest 1.7.0
• quote 1.0.41
• rand 0.9.2
• rand_distr 0.5.1
• rapidfuzz 0.5.0
• ratatui 0.30.0
• rayon 1.11.0
• refinery 0.8.16
• regex 1.11.2
• reqwest 0.12.24
• reqwest-middleware 0.4.2
• reqwest-tracing 0.5.8
• roaring 0.11.2
• rpds 1.1.2
• rstest 0.26.1
• rustc_version 0.4.1
• scc 2.4.0
• semver 1.0.27
• sentry 0.46.0
• sentry-core 0.46.0
• sentry-types 0.46.0
• serde 1.0.228
• serde_core 1.0.228
• serde_json 1.0.145
• serde_plain 1.0.2
• sha2 0.10.9
• similar-asserts 1.7.0
• simple-mermaid 0.2.0
• smallvec 2.0.0-alpha.11
• smol_str 0.3.4
• sort-package-json 0.0.12
• specta 2.0.0-rc.22
• stacker 0.1.22
• supports-color 3.0.2
• supports-unicode 3.0.0
• syn 2.0.108
• tachyonix 0.3.1
• tarpc 0.36.0@f55f36d2d876b1868cfcf52f41d0456a60cf726c
• temporalio-client 231e21c
• temporalio-common 231e21c
• test-log 0.2.18
• test-strategy 0.4.3
• text-size 1.1.1
• thiserror 2.0.17
• time 0.3.44
• tokio 1.47.1
• tokio-postgres 0.7.15
• tokio-stream 0.1.17
• tokio-test 0.4.4
• tokio-util 0.7.16
• toml 0.9.8
• tower 0.5.2
• tower-http 0.6.6
• tower-layer 0.3.3
• tower-service 0.3.3
• tower-test 0.4.0
• tracing 0.1.41
• tracing-appender 0.2.3
• tracing-core 0.1.34
• tracing-error 0.2.1
• tracing-flame 0.2.0
• tracing-opentelemetry 0.31.0
• tracing-subscriber 0.3.20
• trait-variant 0.1.2
• trybuild 1.0.113
• tsify 0.5.6
• unicase 2.8.1
• unicode-ident 1.0.22
• unicode-normalization 0.1.25
• unicode-properties 0.1.4
• unicode-segmentation 1.12.0
• unsynn 0.3.0
• url 2.5.7
• utoipa 4.2.3
• uuid 1.18.1
• walkdir 2.5.0
• wasm-bindgen 0.2.100
• wasm-bindgen-test 0.3.50
• winnow 0.7.13
• xxhash-rust 0.8.15

libs/@blockprotocol/type-system/rust/Cargo.toml

libs/@local/codec/Cargo.toml

libs/@local/codegen/Cargo.toml

libs/@local/effect-dns/hickory/Cargo.toml

libs/@local/graph/api/Cargo.toml

libs/@local/graph/authorization/Cargo.toml

libs/@local/graph/migrations-macros/Cargo.toml

libs/@local/graph/migrations/Cargo.toml

libs/@local/graph/postgres-store/Cargo.toml

libs/@local/graph/store/Cargo.toml

libs/@local/graph/temporal-versioning/Cargo.toml

libs/@local/graph/type-defs/Cargo.toml

libs/@local/graph/type-fetcher/Cargo.toml

libs/@local/graph/types/Cargo.toml

libs/@local/graph/validation/Cargo.toml

libs/@local/harpc/client/rust/Cargo.toml

• serde-value 0.7.0

libs/@local/harpc/codec/Cargo.toml

libs/@local/harpc/net/Cargo.toml

libs/@local/harpc/server/Cargo.toml

libs/@local/harpc/system/Cargo.toml

libs/@local/harpc/tower/Cargo.toml

libs/@local/harpc/types/Cargo.toml

libs/@local/harpc/wire-protocol/Cargo.toml

• base64 0.22.1

libs/@local/hashql/ast/Cargo.toml

libs/@local/hashql/compiletest/Cargo.toml

libs/@local/hashql/core/Cargo.toml

libs/@local/hashql/diagnostics/Cargo.toml

libs/@local/hashql/eval/Cargo.toml

libs/@local/hashql/hir/Cargo.toml

libs/@local/hashql/macros/Cargo.toml

libs/@local/hashql/mir/Cargo.toml

libs/@local/hashql/syntax-jexpr/Cargo.toml

libs/@local/repo-chores/rust/Cargo.toml

libs/@local/status/rust/Cargo.toml

libs/@local/telemetry/Cargo.toml

libs/@local/temporal-client/Cargo.toml

libs/antsi/Cargo.toml

libs/darwin-kperf/Cargo.toml

libs/darwin-kperf/codegen/Cargo.toml

libs/darwin-kperf/criterion/Cargo.toml

libs/error-stack/Cargo.toml

• eyre >=0.6
• futures-core >=0.3
• serde_core >=1
• spin >=0.9
• tracing >=0.1
• tracing-error >=0.2

tests/graph/benches/Cargo.toml

tests/graph/integration/Cargo.toml

tests/graph/test-data/rust/Cargo.toml

docker-compose

apps/hash-external-services/docker-compose.dev.yml

• otel/opentelemetry-collector-contrib 0.128.0
• grafana/loki 3.5.2
• grafana/tempo 2.8.1
• grafana/mimir 3.0.2
• grafana/pyroscope 1.14.1
• grafana/grafana 12.0.2

apps/hash-external-services/docker-compose.prod.yml

apps/hash-external-services/docker-compose.test.yml

• jaegertracing/all-in-one 1.60

apps/hash-external-services/docker-compose.yml

• redis 8.6

infra/docker/docker-compose-statsd-override.yml

dockerfile

apps/hash-ai-worker-ts/docker/Dockerfile

• docker/dockerfile 1
• debian 13.3-slim

apps/hash-external-services/hydra/Dockerfile

• oryd/hydra v25.4

apps/hash-external-services/kratos/Dockerfile

• oryd/kratos v25.4

apps/hash-external-services/postgres/Dockerfile

• postgres 18.1-alpine3.23

apps/hash-external-services/temporal/migrate.Dockerfile

apps/hash-external-services/temporal/setup.Dockerfile

apps/hash-graph/docker/Dockerfile

• docker/dockerfile 1
• debian 13.3-slim

apps/hash-integration-worker/docker/Dockerfile

• docker/dockerfile 1
• debian 13.3-slim

infra/docker/api/prod/Dockerfile

• docker/dockerfile 1
• debian 13.3-slim

infra/docker/citus/prod/Dockerfile

• postgres 13.4

infra/docker/frontend/prod/Dockerfile

• debian 13.3-slim

infra/docker/statsd/Dockerfile

github-actions

.github/actions/build-docker-images/action.yml

• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83

.github/actions/docker-build-push/action.yml

• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83

.github/actions/docker-ecr-login/action.yml

• aws-actions/configure-aws-credentials v4.3.1@7474bc4690e29a8392af63c5b98e7449536d5c3a
• aws-actions/amazon-ecr-login v2.0.1@062b18b96a7aff071d4dc91bc00c4c1a7945b076
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435

.github/actions/install-corepack/action.yml

• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830

.github/actions/install-sccache/action.yml

• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• mozilla-actions/sccache-action v0.0.9@7d986dd989559c6ecdb630a3fd2557667be217ad

.github/actions/install-tools/action.yml

• jdx/mise-action v3.5.1@146a28175021df8ca24f8ee1828cc2a60f980bd5
• nick-fields/retry v3.0.2@ce71cc2ab81d554ebbe88c79ab5975992d79ba08

.github/actions/load-docker-images/action.yml

• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0

.github/actions/redeploy-ecs-service/action.yml

• aws-actions/configure-aws-credentials v4.3.1@7474bc4690e29a8392af63c5b98e7449536d5c3a

.github/actions/warm-up-repo/action.yml

• nick-fields/retry v3.0.2@ce71cc2ab81d554ebbe88c79ab5975992d79ba08
• nick-fields/retry v3.0.2@ce71cc2ab81d554ebbe88c79ab5975992d79ba08

.github/workflows/ai-pr-review.yml

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• nick-fields/retry v3.0.2@ce71cc2ab81d554ebbe88c79ab5975992d79ba08
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/auto-approve.yml

• hmarr/auto-approve-action v4

.github/workflows/bench.yml

• withgraphite/graphite-ci-action ee395f3a78254c006d11339669c6cabddf196f72
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• rtCamp/action-slack-notify c58b60ee33df2229ed2d2eed86eeaf7e6c527c5a
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0
• mshick/add-pr-comment v2.8.2@b8f338c590a895d50bcbfa6c5859251edc8952fc
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/canary-release.yml

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/check-todo-linear-tickets.yml

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/codeql-analysis.yml

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• github/codeql-action v4.32.2@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2
• github/codeql-action v4.32.2@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2
• github/codeql-action v4.32.2@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2

.github/workflows/codspeed.yml

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• CodSpeedHQ/action v4.4.1@346a2d8a8d9d38909abd0bc3d23f773110f076ad
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/dependency-review.yml

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/dependency-review-action v4.8.2@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261

.github/workflows/deploy.yml

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• rtCamp/action-slack-notify c58b60ee33df2229ed2d2eed86eeaf7e6c527c5a
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/dismiss-stale-approvals.yml

• turnage/dismiss-stale-approvals ff3fc67f2978497c420e446f704b9502dd911fd8
• ubuntu 24.04

.github/workflows/dispatch-fix.yml

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/hash-backend-cd.yml

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• rtCamp/action-slack-notify c58b60ee33df2229ed2d2eed86eeaf7e6c527c5a
• ubuntu 24.04-arm
• ubuntu 24.04-arm
• ubuntu 24.04-arm
• ubuntu 24.04-arm
• ubuntu 24.04-arm
• ubuntu 24.04-arm

.github/workflows/labeler.yml

• actions/labeler v5.0.0@8558fd74291d67161a8a78ce36a881fa63b766a9

.github/workflows/lint.yml

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• github/codeql-action v4.32.2@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• yuzutech/annotations-action v0.5.0@0e061a6e3ac848299310b6429b60d67cafd4e7f8
• rtCamp/action-slack-notify c58b60ee33df2229ed2d2eed86eeaf7e6c527c5a
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/publish-blocks-to-preview.yml

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/publish-blocks-to-production.yml

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/release.yml

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• changesets/action v1.5.3@e0145edc7d9d8679003495b11f87bd8ef63c0cba
• rtCamp/action-slack-notify c58b60ee33df2229ed2d2eed86eeaf7e6c527c5a
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02

.github/workflows/remove-obsolete-caches.yml

• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd

.github/workflows/renovate.yml

• hashicorp/vault-action v3.4.0@4c06c5ccf5c0761b6029f56cfb1dcf5565918a3b
• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• jdx/mise-action v3.5.1@146a28175021df8ca24f8ee1828cc2a60f980bd5
• dawidd6/action-download-artifact v11@ac66b43f0e6a346234dd65d4d0c8fbb31cb316e5
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02

.github/workflows/semgrep.yml

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• andstor/file-existence-action v3.0.0@076e0072799f4942c8bc574a82233e1e4d13e9d6
• github/codeql-action v4.32.2@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2
• returntocorp/semgrep 1.151.0@sha256:d3d1be3a3770514d16a6a57b9761575d7536d70f45a5220274f4ec7d55c442b9

.github/workflows/test.yml

• withgraphite/graphite-ci-action ee395f3a78254c006d11339669c6cabddf196f72
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• codecov/codecov-action v5.5.2@671740ac38dd9b0130fbe1cec585b89eea48d3de
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• nick-fields/retry v3.0.2@ce71cc2ab81d554ebbe88c79ab5975992d79ba08
• codecov/codecov-action v5.5.2@671740ac38dd9b0130fbe1cec585b89eea48d3de
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• rtCamp/action-slack-notify c58b60ee33df2229ed2d2eed86eeaf7e6c527c5a
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/warm-up-vercel.yml

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

mise

.config/mise/config.toml

• node 22.21.1
• npm:turbo 2.6.3
• uv 0.9.26
• cargo:wasm-opt 0.116.1
• cargo:wasm-pack 0.13.1
• java 25
• protoc 32.1
• cargo:cargo-codspeed 4.1.0
• cargo:cargo-hack 0.6.37
• cargo:cargo-insta 1.43.1
• cargo:cargo-llvm-cov 0.6.18
• cargo:cargo-nextest 0.9.103
• just 1.43.1
• markdownlint-cli2 0.19.1
• npm:@napi-rs/cli 2.18.4
• npm:@redocly/cli 2.19.2
• npm:renovate 42.39.1
• pipx:sqlfluff 3.4.2
• taplo 0.10.0
• ubi:terrastruct/d2 0.7.1
• yq 4.49.2

npm

.claude/hooks/package.json

• natural 8.1.0
• @types/node 22.18.13
• @vitest/coverage-istanbul 3.2.4
• eslint 9.39.4
• tsx 4.20.6
• typescript 5.9.3
• vitest 3.2.4

apps/hash-ai-worker-ts/package.json

• @anthropic-ai/bedrock-sdk 0.26.3
• @anthropic-ai/sdk 0.74.0
• @google-cloud/storage 7.19.0
• @google-cloud/vertexai 1.10.0
• @llamaindex/readers 3.1.21
• @sentry/node 10.42.0
• @temporalio/activity 1.12.1
• @temporalio/common 1.12.1
• @temporalio/proto 1.12.1
• @temporalio/worker 1.12.1
• @temporalio/workflow 1.12.1
• ajv 8.18.0
• ajv-formats 3.0.1
• axios 1.13.5
• cache-manager 5.7.6
• dedent 1.7.0
• dotenv-flow 3.3.0
• e2b 0.13.1
• exponential-backoff 3.1.3
• googleapis 133.0.0
• gpt-tokenizer 3.2.0
• is-docker 3.0.0
• jsdom 24.1.3
• llamaindex 0.12.1
• lodash 4.17.23
• md5 2.3.0
• mime-types 2.1.35
• officeparser 6.0.7
• openai 6.6.0
• openai-chat-tokens 0.2.8
• papaparse 5.5.3
• pdf2json 3.2.0
• puppeteer-core 22.15.0
• sanitize-html 2.17.0
• tsconfig-paths-webpack-plugin 4.2.0
• tsx 4.20.6
• typescript 5.9.3
• @types/dedent 0.7.2
• @types/dotenv-flow 3.3.3
• @types/jsdom 21.1.7
• @types/lodash 4.17.20
• @types/md5 2.3.6
• @types/mime-types 2.1.4
• @types/node 22.18.13
• @types/papaparse 5.3.16
• @types/sanitize-html 2.16.0
• @vitest/coverage-istanbul 3.2.4
• eslint 9.39.4
• rimraf 6.1.3
• typescript 5.9.3
• vitest 3.2.4
• wait-on 9.0.1

apps/hash-api/package.json

• @apollo/server 5.4.0
• @apollo/utils.keyvadapter 4.0.1
• @as-integrations/express5 1.1.2
• @aws-sdk/client-s3 3.986.0
• @aws-sdk/client-sesv2 3.986.0
• @aws-sdk/credential-provider-node 3.972.6
• @aws-sdk/s3-presigned-post 3.986.0
• @aws-sdk/s3-request-presigner 3.986.0
• @blockprotocol/core 0.1.4
• @graphql-tools/schema 8.5.1
• @keyv/redis 5.1.3
• @linear/sdk 61.0.0
• @mailchimp/mailchimp_marketing 3.0.80
• @opentelemetry/api 1.9.0
• @opentelemetry/api-logs 0.207.0
• @opentelemetry/core 2.2.0
• @opentelemetry/exporter-logs-otlp-grpc 0.207.0
• @opentelemetry/exporter-trace-otlp-grpc 0.207.0
• @opentelemetry/instrumentation 0.207.0
• @opentelemetry/instrumentation-express 0.56.0