Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	@bufbuild/connect-web
npm	@bufbuild/protoc-gen-connect-web

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update dependency @types/node to v18.19.68
• Update react monorepo (@types/react, @types/react-dom)
• Update dependency sass to v1.83.0
• Update dependency @bufbuild/protobuf to v2
• Update dependency @bufbuild/protoc-gen-es to v2
• Update dependency eslint to v9
• Update dependency eslint-config-next to v15
• Update dependency prettier to v3
• Update dependency typescript to v5
• Update dependency ubuntu to v24
• Update docker/build-push-action action to v6
• Update docker/login-action action to v3
• Update docker/setup-buildx-action action to v3
• Update ghcr.io/fluxcd/helm-controller Docker tag to v1
• Update ghcr.io/fluxcd/kustomize-controller Docker tag to v1
• Update ghcr.io/fluxcd/notification-controller Docker tag to v1
• Update ghcr.io/fluxcd/source-controller Docker tag to v1
• Update golangci/golangci-lint-action action to v6
• Update module github.com/caarlos0/env/v6 to v11
• Update react monorepo to v19 (major) (@types/react, @types/react-dom, react, react-dom)
• 🔐 Create all rate-limited PRs at once 🔐

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• Update dependency @bufbuild/connect-web to v0.13.0
• Update actions/cache action to v4
• Update actions/checkout action to v4
• Update actions/labeler action to v5
• Update actions/setup-go action to v5
• Update actions/setup-node action to v4

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency next to v14 [SECURITY]
• Update Node.js to v22 (node, @types/node)
• Update Yarn to v4
• Update dependency fluxcd/flux2 to v2
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update gcr.io/distroless/nodejs Docker tag to v18

Detected dependencies

docker-compose

compose.yaml

• busybox 1.37

dockerfile

client/Dockerfile

• node 16.20-bullseye
• node 16.20-bullseye
• gcr.io/distroless/nodejs 16

go/Dockerfile

• golang 1.23

flux

manifests/flux-system/gotk-components.yaml

• fluxcd/flux2 v0.41.2

manifests/manifests/helm/ingress-nginx.yaml

• ingress-nginx 4.11.3

github-actions

.github/workflows/auto-deploy.yaml

• actions/checkout v3
• ruby/setup-ruby v1
• ubuntu 22.04

.github/workflows/check_go.yaml

• actions/checkout v3
• actions/setup-go v4
• golangci/golangci-lint-action v3
• ubuntu 22.04

.github/workflows/check_ts.yaml

• actions/checkout v3
• actions/setup-node v3
• actions/cache v3
• ubuntu 22.04

.github/workflows/deploy-api-server.yaml

• actions/checkout v3
• docker/setup-buildx-action v2
• docker/login-action v2
• docker/build-push-action v4
• ubuntu 22.04

.github/workflows/deploy-client.yaml

• actions/checkout v3
• docker/setup-buildx-action v2
• docker/login-action v2
• docker/build-push-action v4
• ubuntu 22.04

.github/workflows/gen_buf.yaml

• actions/checkout v3
• bufbuild/buf-setup-action v1
• bufbuild/buf-lint-action v1
• actions/setup-go v4
• actions/setup-node v3
• actions/cache v3
• EndBug/add-and-commit v9.1.4
• golangci/golangci-lint-action v3
• ubuntu 22.04

.github/workflows/pr-labeler.yaml

• actions/labeler v4

gomod

go/go.mod

• go 1.21
• go 1.23.4
• github.com/bufbuild/connect-go v1.10.0
• github.com/caarlos0/env/v6 v6.10.1
• github.com/envoyproxy/protoc-gen-validate v1.1.0
• github.com/golang-jwt/jwt v3.2.2+incompatible
• github.com/google/subcommands v1.2.0
• github.com/rs/cors v1.11.1
• github.com/stretchr/testify v1.10.0
• golang.org/x/net v0.32.0
• google.golang.org/protobuf v1.35.2

kubernetes

manifests/flux-system/gotk-components.yaml

• ghcr.io/fluxcd/helm-controller v0.37.4
• ghcr.io/fluxcd/image-automation-controller v0.39.0
• ghcr.io/fluxcd/image-reflector-controller v0.33.0
• ghcr.io/fluxcd/kustomize-controller v0.35.1
• ghcr.io/fluxcd/notification-controller v0.33.0
• ghcr.io/fluxcd/source-controller v0.36.1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• Deployment apps/v1
• Deployment apps/v1
• Deployment apps/v1
• Deployment apps/v1
• Deployment apps/v1
• Deployment apps/v1
• NetworkPolicy networking.k8s.io/v1
• NetworkPolicy networking.k8s.io/v1
• NetworkPolicy networking.k8s.io/v1

manifests/flux-system/gotk-sync.yaml

• GitRepository source.toolkit.fluxcd.io/v1
• Kustomization kustomize.toolkit.fluxcd.io/v1

manifests/flux-system/image-automation.yaml

• ImageUpdateAutomation image.toolkit.fluxcd.io/v1beta2

manifests/flux-system/notification.yaml

• Provider notification.toolkit.fluxcd.io/v1beta3

manifests/manifests/api-server/api.yaml

• busybox 1.37
• Deployment apps/v1
• Ingress networking.k8s.io/v1

manifests/manifests/api-server/imagepolicy.yaml

• ImagePolicy image.toolkit.fluxcd.io/v1beta2

manifests/manifests/api-server/repository.yaml

• ImageRepository image.toolkit.fluxcd.io/v1beta2

manifests/manifests/helm/ingress-nginx.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRepository source.toolkit.fluxcd.io/v1

manifests/manifests/nextjs/imagepolicy.yaml

• ImagePolicy image.toolkit.fluxcd.io/v1beta2

manifests/manifests/nextjs/next.yaml

• Deployment apps/v1
• Ingress networking.k8s.io/v1

manifests/manifests/nextjs/repository.yaml

• ImageRepository image.toolkit.fluxcd.io/v1beta2

npm

client/package.json

• @bufbuild/connect-web 0.8.6
• @bufbuild/protobuf 0.5.0
• @types/node 18.19.67
• @types/react 18.3.14
• @types/react-dom 18.3.2
• next 12.3.4
• prettier 2.8.8
• react 18.3.1
• react-dom 18.3.1
• sass 1.82.0
• sharp 0.33.5
• typescript 4.9.5
• @bufbuild/protoc-gen-connect-web 0.11.0
• @bufbuild/protoc-gen-es 0.5.0
• eslint 8.57.1
• eslint-config-next 12.3.4
• yarn 3.8.7

---

• Check this box to trigger a request for Renovate to run again on this repository