Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	request

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency @nestjs/swagger to v11.2.3
• chore(deps): update dependency @types/express to v5.0.5
• chore(deps): update dependency fs-extra to v11.3.2
• chore(deps): update dependency io.kiota:kiota-maven-plugin to v0.0.31
• chore(deps): update dependency nestjs-otel to v7.0.1
• chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.14.1
• chore(deps): update nest monorepo (@nestjs/cli, @nestjs/common, @nestjs/core, @nestjs/platform-express, @nestjs/schematics, @nestjs/testing)
• fix(deps): update dependency org.openapitools:jackson-databind-nullable to v0.2.8
• fix(deps): update dependency org.projectlombok:lombok to v1.18.42
• fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.14
• fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.5.7
• fix(deps): update kiota to v1.8.12 (com.microsoft.kiota:microsoft-kiota-serialization-json, com.microsoft.kiota:microsoft-kiota-bundle)
• chore(deps): update dependency @nx-extensions/helm to v1.1.0
• chore(deps): update dependency @nx-tools/nx-container to v6.9.1
• chore(deps): update dependency @types/node to v24.10.1
• chore(deps): update dependency axios to v1.13.2
• chore(deps): update dependency eslint to v9.39.1
• chore(deps): update dependency go to v1.25.4
• chore(deps): update dependency jest to v30.2.0
• chore(deps): update dependency redis to v5.10.0
• chore(deps): update dependency rimraf to v6.1.2
• chore(deps): update dependency testcontainers to v11.8.1
• chore(deps): update dependency typescript to v5.9.3
• chore(deps): update dependency typescript-eslint to v8.47.0
• chore(deps): update helm/kind-action action to v1.13.0
• chore(deps): update terraform (kubernetes, terraform-aws-modules/app-runner/aws, terraform-aws-modules/iam/aws)
• fix(deps): update dependency io.awspring.cloud:spring-cloud-aws-dependencies to v3.4.1
• fix(deps): update dependency org.springframework.ai:spring-ai-bom to v1.1.0
• fix(deps): update dependency org.springframework.cloud:spring-cloud-gateway-webflux to v4.3.2
• fix(deps): update dependency software.amazon.awssdk:bom to v2.39.0
• fix(deps): update module github.com/gin-gonic/gin to v1.11.0
• fix(deps): update module github.com/go-sql-driver/mysql to v1.9.3
• fix(deps): update module github.com/sethvargo/go-envconfig to v0.9.0
• fix(deps): update module github.com/stretchr/testify to v1.11.1
• fix(deps): update module github.com/testcontainers/testcontainers-go to v0.40.0
• fix(deps): update module gorm.io/driver/mysql to v1.6.0
• fix(deps): update module gorm.io/driver/sqlite to v1.6.0
• fix(deps): update module gorm.io/gorm to v1.31.1
• fix(deps): update opentelemetry-go monorepo to v1.38.0 (go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/otlp/otlptrace, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/sdk)
• fix(deps): update opentelemetry-js monorepo to ^0.208.0 (@opentelemetry/exporter-trace-otlp-http, @opentelemetry/sdk-node)
• fix(deps): update opentelemetry-js-contrib monorepo (@opentelemetry/auto-instrumentations-node, @opentelemetry/id-generator-aws-xray, @opentelemetry/resource-detector-aws)
• chore(deps): update dependency @nx-tools/nx-container to v7
• chore(deps): update dependency @types/node to v24
• chore(deps): update dependency cypress to v15
• chore(deps): update dependency dotenv to v17
• chore(deps): update dependency org.testcontainers:testcontainers to v2
• chore(deps): update github actions (major) (actions/checkout, amannn/action-semantic-pull-request, aws-actions/configure-aws-credentials, cachix/install-nix-action, peter-evans/create-pull-request)
• chore(deps): update nx monorepo to v22 (major) (@nx/devkit, @nx/js, nx)
• chore(deps): update terraform (major) (aws, cloudposse/elasticache-redis/aws, helm, terraform-aws-modules/alb/aws, terraform-aws-modules/dynamodb-table/aws, terraform-aws-modules/eks/aws, terraform-aws-modules/iam/aws, terraform-aws-modules/rds-aurora/aws, terraform-aws-modules/security-group/aws, terraform-aws-modules/vpc/aws)
• fix(deps): update module github.com/sethvargo/go-envconfig to v1
• fix(deps): update module github.com/zsais/go-gin-prometheus to v1
• fix(deps): update module go.opentelemetry.io/contrib/detectors/aws/ec2 to v2
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency @types/node to v20.19.25
• chore(deps): update dependency artillery to v2.0.27
• chore(deps): update dependency eslint-plugin-prettier to v5.5.4
• chore(deps): update dependency supertest to v7.1.4
• chore(deps): update dependency ts-jest to v29.4.5
• chore(deps): update dependency ts-loader to v9.5.4
• fix(deps): update module gorm.io/plugin/opentelemetry to v0.1.16
• chore(deps): update dependency prettier-plugin-java to v2.7.7
• fix(deps): update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom to v2.22.0
• fix(deps): update opentelemetry-go-contrib monorepo (go.opentelemetry.io/contrib/detectors/aws/ec2, go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin, go.opentelemetry.io/contrib/propagators/aws)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

github-actions

.github/actions/setup-docker/action.yml

• docker/setup-qemu-action v3
• docker/setup-docker-action v4
• docker/setup-buildx-action v3

.github/actions/setup-env/action.yml

• cachix/install-nix-action v26

.github/workflows/artifacts.yaml

• actions/checkout v4
• aws-actions/configure-aws-credentials v4
• aws-actions/amazon-ecr-login v2
• actions/checkout v4
• aws-actions/configure-aws-credentials v4
• aws-actions/amazon-ecr-login v2

.github/workflows/e2e-test.yml

• actions/checkout v4
• actions/checkout v4
• actions/checkout v4
• helm/kind-action v1.12.0

.github/workflows/oss.yml

• actions/checkout v4
• peter-evans/create-pull-request v4

.github/workflows/pr.yaml

• amannn/action-semantic-pull-request v5
• actions/checkout v3
• actions/checkout v3

.github/workflows/release-please.yml

• googleapis/release-please-action v4

gomod

src/catalog/go.mod

• go 1.23.0
• go 1.24.5
• github.com/gin-gonic/gin v1.10.1
• github.com/go-sql-driver/mysql v1.8.1
• github.com/sethvargo/go-envconfig v0.1.1
• github.com/stretchr/testify v1.10.0
• github.com/testcontainers/testcontainers-go v0.35.0
• github.com/zsais/go-gin-prometheus v0.1.0
• go.opentelemetry.io/contrib/detectors/aws/ec2 v1.34.0
• go.opentelemetry.io/otel v1.37.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.37.0
• go.opentelemetry.io/otel/sdk v1.37.0
• gorm.io/driver/mysql v1.5.7
• gorm.io/driver/sqlite v1.5.7
• gorm.io/gorm v1.25.12
• go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin v0.59.0
• go.opentelemetry.io/contrib/propagators/aws v1.34.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.37.0
• gorm.io/plugin/opentelemetry v0.1.12

maven

src/cart/pom.xml

• org.springframework.boot:spring-boot-starter-parent 3.5.5
• software.amazon.awssdk:bom 2.32.13
• io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom 2.17.0
• org.projectlombok:lombok 1.18.40
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.9
• org.testcontainers:testcontainers 1.21.3
• org.testcontainers:junit-jupiter 1.21.3
• io.opentelemetry.instrumentation:opentelemetry-aws-sdk-2.2-autoconfigure 2.17.1-alpha
• org.springdoc:springdoc-openapi-maven-plugin 1.5
• org.apache.maven.plugins:maven-compiler-plugin 3.14.0
• org.mapstruct:mapstruct-processor 1.6.3
• org.projectlombok:lombok-mapstruct-binding 0.2.0
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0

src/orders/pom.xml

• org.springframework.boot:spring-boot-starter-parent 3.5.5
• io.awspring.cloud:spring-cloud-aws-dependencies 3.3.0
• io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom 2.17.0
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.9
• org.mapstruct:mapstruct 1.6.3
• org.mapstruct:mapstruct-processor 1.6.3
• io.opentelemetry.instrumentation:opentelemetry-aws-sdk-2.2-autoconfigure 2.17.1-alpha
• org.springdoc:springdoc-openapi-maven-plugin 1.5
• org.apache.maven.plugins:maven-compiler-plugin 3.14.0
• org.mapstruct:mapstruct-processor 1.6.3
• org.projectlombok:lombok-mapstruct-binding 0.2.0
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0

src/ui/pom.xml

• org.springframework.boot:spring-boot-starter-parent 3.5.5
• org.springframework.ai:spring-ai-bom 1.0.0
• io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom 2.17.0
• org.springframework.cloud:spring-cloud-gateway-webflux 4.2.1
• org.openapitools:jackson-databind-nullable 0.2.7
• com.google.code.findbugs:jsr305 3.0.2
• io.swagger:swagger-annotations 1.6.16
• org.mapstruct:mapstruct 1.6.3
• com.microsoft.kiota:microsoft-kiota-bundle 1.8.10
• com.microsoft.kiota:microsoft-kiota-serialization-json 1.8.10
• io.opentelemetry.contrib:opentelemetry-aws-resources 1.42.0-alpha
• io.opentelemetry.instrumentation:opentelemetry-okhttp-3.0 2.17.1-alpha
• org.mapstruct:mapstruct-processor 1.6.3
• org.projectlombok:lombok-mapstruct-binding 0.2.0
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• io.kiota:kiota-maven-plugin 0.0.29

npm

oss/attribution/package.json

• axios ^1.6.0
• fs-extra ^11.1.1
• handlebars ^4.7.8
• @types/fs-extra ^11.0.1
• @types/node ^20.1.0
• @types/node-fetch ^2.6.3
• typescript ^5.0.4

package.json

• @nx-extensions/helm ^1.0.0
• @nx-go/nx-go ^3.3.1
• @nx-tools/nx-container ^6.2.0
• @nx/devkit 20.8.2
• @nx/js ^20.3.1
• @prettier/plugin-xml ^3.4.1
• @swc/helpers ^0.5.15
• dotenv ^16.4.7
• nx 20.8.2
• prettier ^3.3.2
• prettier-plugin-java 2.6.7
• tslib ^2.8.1
• typescript-eslint ^8.20.0

src/checkout/package.json

• @nestjs/common ^11.1.3
• @nestjs/config ^4.0.2
• @nestjs/core ^11.1.3
• @nestjs/platform-express ^11.1.3
• @nestjs/swagger ^11.2.0
• @nestjs/terminus ^11.0.0
• @opentelemetry/auto-instrumentations-node ^0.60.1
• @opentelemetry/exporter-trace-otlp-http ^0.202.0
• @opentelemetry/id-generator-aws-xray ^2.0.0
• @opentelemetry/resource-detector-aws ^2.2.0
• @opentelemetry/sdk-node ^0.202.0
• @willsoto/nestjs-prometheus ^6.0.2
• class-transformer ^0.5.1
• class-validator ^0.14.2
• nestjs-otel ^7.0.0
• prom-client ^15.1.3
• redis ^5.5.6
• reflect-metadata ^0.2.2
• request ^2.88.2
• rimraf ^6.0.1
• rxjs ^7.8.2
• @nestjs/cli ^11.0.7
• @nestjs/schematics ^11.0.5
• @nestjs/testing ^11.1.3
• @types/express ^5.0.3
• @types/jest 30.0.0
• @types/node ^24.0.10
• @types/supertest ^6.0.3
• eslint ^9.30.1
• eslint-config-prettier ^10.1.5
• eslint-plugin-prettier ^5.5.1
• jest 30.0.4
• prettier ^3.6.2
• source-map-support ^0.5.21
• supertest ^7.1.1
• testcontainers ^11.0.3
• ts-jest 29.4.0
• ts-loader ^9.5.2
• ts-node ^10.9.2
• tsconfig-paths 4.2.0
• typescript ^5.8.3
• typescript-eslint ^8.35.1

src/e2e/package.json

• cypress ^13.17.0

src/load-generator/package.json

• artillery ^2.0.0-31

terraform

terraform/apprunner/default/main.tf

terraform/apprunner/default/versions.tf

• aws ~> 5.0

terraform/ecs/default/main.tf

terraform/ecs/default/versions.tf

• aws ~> 5.0

terraform/eks/default/iam.tf

• terraform-aws-modules/iam/aws ~> 5.58.0

terraform/eks/default/kubernetes.tf

terraform/eks/default/main.tf

terraform/eks/default/versions.tf

• aws ~> 5.0
• helm ~> 2.17.0
• kubectl ~> 1.19.0
• kubernetes ~> 2.37.0
• null ~> 3.2

terraform/eks/minimal/main.tf

terraform/eks/minimal/versions.tf

• aws ~> 5.0
• helm ~> 2.17.0
• kubernetes ~> 2.37.0

terraform/lib/apprunner/carts.tf

• terraform-aws-modules/app-runner/aws 1.2.1

terraform/lib/apprunner/checkout.tf

terraform/lib/apprunner/main.tf

terraform/lib/apprunner/ui.tf

• terraform-aws-modules/app-runner/aws 1.2.1

terraform/lib/apprunner/versions.tf

• aws ~> 5.0
• random ~> 3.7.0

terraform/lib/apprunner/vpc.tf

• terraform-aws-modules/vpc/aws 5.21.0

terraform/lib/dependencies/catalog_rds.tf

• terraform-aws-modules/rds-aurora/aws 7.7.1

terraform/lib/dependencies/dynamodb.tf

• terraform-aws-modules/dynamodb-table/aws 3.3.0

terraform/lib/dependencies/elasticache.tf

• cloudposse/elasticache-redis/aws 0.53.0

terraform/lib/dependencies/orders_rds.tf

• terraform-aws-modules/rds-aurora/aws 7.7.1

terraform/lib/dependencies/versions.tf

• aws ~> 5.0
• random ~> 3.7.0

terraform/lib/ecs/alb.tf

• terraform-aws-modules/alb/aws ~> 8.0
• terraform-aws-modules/security-group/aws ~> 4.0

terraform/lib/ecs/carts.tf

terraform/lib/ecs/catalog.tf

terraform/lib/ecs/checkout.tf

terraform/lib/ecs/main.tf

terraform/lib/ecs/orders.tf

terraform/lib/ecs/ui.tf

terraform/lib/ecs/versions.tf

• aws ~> 5.0
• random ~> 3.7.0

terraform/lib/eks/adot.tf

• terraform-aws-modules/iam/aws ~> 5.58.0
• terraform-aws-modules/iam/aws ~> 5.58.0

terraform/lib/eks/eks.tf

• aws-ia/eks-blueprints-addons/aws ~> 1.0
• terraform-aws-modules/eks/aws ~> 19.9

terraform/lib/eks/istio.tf

terraform/lib/eks/versions.tf

• aws ~> 5.0
• helm ~> 2.17.0
• kubernetes ~> 2.37.0

terraform/lib/images/main.tf

terraform/lib/vpc/vpc.tf

• terraform-aws-modules/vpc/aws 5.21.0

---

• Check this box to trigger a request for Renovate to run again on this repository