Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
npm	@babel/polyfill
npm	@types/dompurify

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency @casl/vue to v2.2.5
• Update dependency p-queue to v9.1.0
• Update dependency p-queue to v9.1.0
• Update dependency zod to v4.3.5
• Update dependency zod to v4.3.5
• Update dependency globals to v17
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (docker package opencloudops/nginx).

Files affected: docker/Dockerfile

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency qs to v6.14.1 [SECURITY]
• Update collabora/code Docker tag to v25.04.8.1.1
• Update dependency @casl/ability to v6.7.5
• Update dependency @casl/ability to v6.7.5
• Update dependency @codemirror/view to v6.39.9
• Update traefik Docker tag to v3.6.6
• Update dependency focus-trap to v7.7.1
• Update dependency focus-trap to v7.7.1
• Update dependency md-editor-v3 to v6.3.1
• Update devDependencies (non-major) (@cucumber/cucumber, @cucumber/messages, jsdom, vue-tsc)
• Update ghcr.io/stalwartlabs/stalwart Docker tag to v0.15.3
• Update pnpm to v10.27.0
• Update typescript-eslint monorepo to v8.52.0 (@typescript-eslint/parser, typescript-eslint)
• Update dependency cropperjs to v2
• Update dependency fast-xml-parser to v5
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

docker-compose.yml (4)

• collabora/code 25.04.7.3.1 → [Updates: 25.04.8.1.1]
• traefik v3.6.5 → [Updates: v3.6.6]
• apache/tika 3.2.3.0
• ghcr.io/stalwartlabs/stalwart v0.14.1-alpine → [Updates: v0.15.3-alpine]

dockerfile (1)

docker/Dockerfile (1)

• opencloudops/nginx sha256:8ca0c90c2f537fef6195ba8f5ebe6d6c00fe0a0c545f25ce8acd418a831a19a4

github-actions (1)

.github/workflows/labels.yml (1)

• mheap/github-action-required-labels v5

html (1)

index.html (1)

• require.js 2.3.7

npm (25)

package.json (56)

• @axe-core/playwright ^4.10.2
• @babel/core 7.28.5
• @babel/polyfill 7.12.1
• @babel/preset-env 7.28.5
• @babel/register 7.28.3
• @cucumber/cucumber 12.4.0 → [Updates: 12.5.0]
• @cucumber/messages 31.0.1 → [Updates: 31.1.0]
• @cucumber/pretty-formatter 2.4.1
• @noble/hashes 2.0.1
• @playwright/test 1.57.0
• @tailwindcss/vite ^4.1.11
• @types/mark.js ^8.11.12
• @types/lodash-es ^4.17.12
• @types/luxon ^3.7.1
• @vitejs/plugin-vue 6.0.3
• @vitest/coverage-v8 ^4.0.0
• @vitest/web-worker ^4.0.0
• @vue/compiler-dom ^3.5.23
• @vue/compiler-sfc ^3.5.23
• @vue/test-utils 2.4.6
• browserslist-to-esbuild ^2.0.0
• browserslist-useragent-regexp ^4.0.0
• commander 14.0.2
• ejs 3.1.10
• eslint 9.39.2
• franc-min ^6.2.0
• glob 13.0.0
• happy-dom 20.0.11
• jsdom ^27.0.0 → [Updates: ^27.0.0]
• license-checker-rseidelsohn 4.4.2
• node-fetch 3.3.2
• pino 10.1.0
• pino-pretty 13.1.3
• qs 6.14.0 → [Updates: 6.14.1]
• requirejs 2.3.8
• rollup-plugin-gzip ^4.0.0
• rollup-plugin-visualizer 6.0.5
• simple-git 3.30.0
• tailwindcss ^4.1.11
• ts-node 10.9.2
• tslib 2.8.1
• typescript 5.9.3
• vite ^7.0.0
• vite-plugin-environment ^1.1.3
• vite-plugin-node-polyfills 0.24.0
• vite-plugin-static-copy ^3.0.0
• vite-plugin-treat-umd-as-commonjs 0.1.4
• vitest ^4.0.0
• vitest-mock-extended 3.1.0
• vue ^3.5.23
• vue-demi 0.14.10
• vue-tsc 3.1.8 → [Updates: 3.2.2]
• vue3-gettext 2.4.0
• node >=18
• node 24.12.0
• pnpm 10.26.1 → [Updates: 10.27.0]

packages/babel-preset/package.json (1)

• @babel/helper-plugin-utils ^7.22.5

packages/design-system/package.json (31)

• @emoji-mart/data ^1.2.1
• @popperjs/core ^2.11.5
• @vueuse/core ^14.0.0
• deepmerge ^4.2.2
• emoji-mart ^5.6.0
• focus-trap ^7.6.0 → [Updates: ^7.6.0]
• focus-trap-vue ^4.0.1
• fuse.js ^7.0.0
• lodash-es ^4.17.21
• luxon ^3.5.0
• portal-vue ^3.0.0
• tippy.js ^6.3.7
• vue-inline-svg ^4.0.0
• vue-router ^4.2.5
• vue-select ^4.0.0-beta.6
• vue3-gettext ^2.4.0
• @tailwindcss/vite ^4.1.11
• @vitejs/plugin-vue 6.0.3
• clean-publish ^6.0.0
• glob ^13.0.0
• markdown-it-container ^4.0.0
• postcss ^8.5.2
• process ^0.11.10
• tailwindcss ^4.1.11
• url ^0.11.3
• vite ^7.0.0
• vite-plugin-dts ^4.2.3
• vite-plugin-node-polyfills ^0.24.0
• vitepress ^1.6.3
• yaml ^2.3.4
• pinia ^3.0.3

packages/eslint-config/package.json (12)

• @babel/eslint-parser ^7.25.8
• @typescript-eslint/parser ^8.0.0 → [Updates: ^8.0.0]
• eslint-config-prettier ^10.0.0
• eslint-plugin-n ^17.0.0
• eslint-plugin-promise ^7.0.0
• eslint-plugin-unused-imports ^4.0.0
• eslint-plugin-vue ^10.0.0
• eslint-plugin-vuejs-accessibility ^2.2.0
• globals ^16.0.0 → [Updates: ^17.0.0]
• typescript-eslint ^8.4.0 → [Updates: ^8.4.0]
• typescript ^5.6.3
• eslint ^9.0.0

packages/extension-sdk/package.json (3)

• @tailwindcss/vite ^4.1.11
• @vitejs/plugin-vue ^6.0.0
• vite ^7.2.0

packages/prettier-config/package.json (1)

• prettier ^3.0.0

packages/tsconfig/package.json

packages/web-app-activities/package.json (5)

• pinia ^2.2.2 || ^3.0.0
• luxon ^3.5.0
• vue-concurrency ^5.0.1
• vue-router ^4.2.5
• vue3-gettext ^2.4.0

packages/web-app-admin-settings/package.json (10)

• deep-object-diff ^1.1.9
• axios 1.13.2
• email-validator ^2.0.4
• fuse.js 7.1.0
• lodash-es 4.17.22
• mark.js ^8.11.1
• pinia 3.0.4
• uuid 13.0.0
• vue-concurrency 5.0.3
• vue-router 4.6.4

packages/web-app-app-store/package.json (9)

• axios 1.13.2
• fuse.js 7.1.0
• lodash-es 4.17.22
• mark.js ^8.11.1
• pinia 3.0.4
• vue-concurrency 5.0.3
• vue-router 4.6.4
• zod 4.2.1 → [Updates: 4.3.5]
• vue3-gettext 2.4.0

packages/web-app-epub-reader/package.json (2)

• epubjs ^0.3.93
• vue3-gettext 2.4.0

packages/web-app-external/package.json (8)

• lodash-es 4.17.22
• pinia 3.0.4
• qs ^6.13.0
• uuid 13.0.0
• vue-concurrency 5.0.3
• vue3-gettext 2.4.0
• vue-router 4.6.4
• zod 4.2.1 → [Updates: 4.3.5]

packages/web-app-files/package.json (15)

• @uppy/core 5.2.0
• @vueuse/core ^14.0.0
• axios 1.13.2
• email-validator ^2.0.4
• fuse.js 7.1.0
• lodash-es 4.17.22
• luxon 3.7.2
• mark.js ^8.11.1
• p-queue ^9.0.0
• pinia 3.0.4
• qs 6.14.0 → [Updates: 6.14.1]
• uuid 13.0.0
• vue-concurrency 5.0.3
• vue-router 4.6.4
• vue3-gettext 2.4.0

packages/web-app-mail/package.json (12)

• ical.js ^2.2.1
• axios 1.13.2
• fuse.js 7.1.0
• lodash-es 4.17.22
• mark.js ^8.11.1
• pinia 3.0.4
• vue-concurrency 5.0.3
• vue-router ^4.2.5
• vue3-gettext 2.4.0
• zod 4.2.1 → [Updates: 4.3.5]
• dompurify ^3.2.3
• luxon ^3.5.0

packages/web-app-ocm/package.json (8)

• axios 1.13.2
• email-validator ^2.0.4
• fuse.js 7.1.0
• lodash-es 4.17.22
• vue-concurrency 5.0.3
• uuid 13.0.0
• vue-router 4.6.4
• zod 4.2.1 → [Updates: 4.3.5]

packages/web-app-pdf-viewer/package.json (1)

• vue3-gettext 2.4.0

packages/web-app-preview/package.json (5)

• @panzoom/panzoom ^4.5.1
• @vueuse/core ^14.0.0
• lodash-es ^4.17.21
• vue3-gettext 2.4.0
• vue-router 4.6.4

packages/web-app-search/package.json (6)

• flush-promises 1.0.2
• lodash-es ^4.17.21
• mark.js ^8.11.1
• pinia 3.0.4
• vue3-gettext 2.4.0
• vue-router 4.6.4

packages/web-app-text-editor/package.json (2)

• vue-concurrency 5.0.3
• vue3-gettext 2.4.0

packages/web-app-webfinger/package.json

packages/web-client/package.json (16)

• @casl/ability ^6.7.1 → [Updates: ^6.7.1]
• @microsoft/fetch-event-source ^2.0.1
• axios ^1.7.7
• fast-xml-parser ^4.5.0 → [Updates: ^5.0.0]
• lodash-es ^4.17.21
• luxon ^3.5.0
• uuid ^13.0.0
• webdav ^5.7.1
• xml-js ^1.6.11
• zod ^4.0.0 → [Updates: ^4.0.0]
• @types/luxon 3.7.1
• @vitejs/plugin-vue 6.0.3
• clean-publish 6.0.1
• vite-plugin-dts 4.5.4
• vite-plugin-node-polyfills 0.24.0
• vite ^7.0.0

packages/web-pkg/package.json (41)

• @casl/ability ^6.7.1 → [Updates: ^6.7.1]
• @casl/vue ^2.2.2 → [Updates: ^2.2.2]
• @codemirror/view ^6.38.6 → [Updates: ^6.38.6]
• @microsoft/fetch-event-source ^2.0.1
• @sentry/vue ^10.0.0
• @uppy/core ^5.0.0
• @uppy/tus ^5.0.0
• @uppy/utils ^7.0.0
• @uppy/xhr-upload ^5.0.0
• @vavt/cm-extension ^1.6.0
• @vue/shared ^3.5.11
• @vueuse/core ^14.0.0
• axios ^1.7.7
• cropperjs ^1.6.2 → [Updates: ^2.0.0]
• deepmerge ^4.2.2
• dompurify ^3.2.3
• filesize ^11.0.0
• fuse.js ^7.0.0
• lodash-es ^4.17.21
• luxon ^3.5.0
• mark.js ^8.11.1
• md-editor-v3 ^6.0.1 → [Updates: ^6.0.1]
• oidc-client-ts ^2.4.0 || ^3.0.0
• p-queue ^9.0.0 → [Updates: ^9.0.0]
• password-sheriff ^2.0.0
• pinia ^3.0.0
• portal-vue ^3.0.0
• prismjs ^1.29.0
• qs ^6.13.0 → [Updates: ^6.13.0]
• screenfull ^6.0.2
• uuid ^13.0.0
• vue-concurrency ^5.0.1
• vue-router ^4.2.5
• vue3-gettext ^2.4.0
• zod ^4.0.0 → [Updates: ^4.0.0]
• @types/dompurify 3.2.0
• @types/lodash-es 4.17.12
• @vitest/web-worker ^4.0.0
• clean-publish 6.0.1
• vite-plugin-dts 4.5.4
• vite-plugin-node-polyfills 0.24.0

packages/web-runtime/package.json (34)

• @casl/ability 6.7.3 → [Updates: 6.7.5]
• @casl/vue ^2.2.2 → [Updates: ^2.2.2]
• @microsoft/fetch-event-source 2.0.1
• @sentry/vue 10.32.1
• @uppy/core 5.2.0
• @uppy/tus 5.1.0
• @uppy/utils 7.1.5
• @uppy/xhr-upload 5.1.1
• @vueuse/core ^14.0.0
• @vueuse/head 2.0.0
• axios 1.13.2
• deepmerge 4.3.1
• email-validator 2.0.4
• focus-trap-vue ^4.0.1
• focus-trap 7.6.6 → [Updates: 7.7.1]
• fuse.js 7.1.0
• lodash-es 4.17.22
• luxon 3.7.2
• mark.js 8.11.1
• oidc-client-ts ^3.0.0
• p-queue 9.0.1 → [Updates: 9.1.0]
• pinia 3.0.4
• portal-vue ^3.0.0
• promise ^8.1.0
• qs 6.14.0 → [Updates: 6.14.1]
• utf8 ^3.0.0
• uuid 13.0.0
• vue-concurrency 5.0.3
• vue-router 4.6.4
• vue 3.5.26
• vue3-gettext 2.4.0
• webdav 5.8.0
• xml-js ^1.6.11
• zod 4.2.1 → [Updates: 4.3.5]

packages/web-test-helpers/package.json (14)

• @casl/ability ^6.7.1 → [Updates: ^6.7.1]
• @casl/vue ^2.2.2 → [Updates: ^2.2.2]
• @pinia/testing ^1.0.0
• axios ^1.7.9
• pinia ^3.0.0
• vitest-mock-extended ^3.0.0
• vue-router ^4.2.5
• vue3-gettext ^2.4.0
• @vitejs/plugin-vue 6.0.3
• clean-publish ^6.0.0
• vite-plugin-dts ^4.2.3
• vite ^7.0.0
• @vue/test-utils ^2.4.6
• vue ^3.5.10

pnpm-workspace.yaml

---

• Check this box to trigger a request for Renovate to run again on this repository