Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (21)

Datasource	Package	Last Updated
github-actions	jesusvasquez333/verify-pr-label-action	2021-03-06
github-actions	nmshd/github-notify-action	2025-09-15
npm	ajv-errors	2021-03-27
npm	ajv-formats	2024-03-30
npm	correlation-id	2024-07-17
npm	elliptic	2024-11-13
npm	fast-json-patch	2022-03-24
npm	jest-expect-message	2022-09-26
npm	json-stringify-safe	2015-05-19
npm	jwt-decode	2023-10-27
npm	reflect-metadata	2024-03-29
npm	ts-mockito	2020-06-08
npm	ts-simple-nameof	2025-07-28

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update codecov/codecov-action digest to 303a32d
• Update github/codeql-action digest to 1c5b675
• Update mongo Docker digest to 5d7043a
• Update postgres Docker digest to 86c951e
• Update rabbitmq:4.3.6-alpine Docker digest to 4b3c6eb
• Update all non-major dependencies (patch) (@js-soft/docdb-access-abstractions, @js-soft/docdb-access-loki, @js-soft/docdb-access-mongo, @js-soft/eslint-config-ts, @js-soft/node-logger, @js-soft/ts-utils, @nmshd/connector-sdk, @nmshd/crypto, @types/node, enhanced-publish, prettier)
• Update ghcr.io/openwallet-foundation/eudiplo Docker tag to v8
• 🔐 Create all awaiting schedule PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update all non-major dependencies (minor) (dependency-cruiser, ghcr.io/nmshd/backbone-admin-cli, ghcr.io/nmshd/backbone-admin-ui, ghcr.io/nmshd/backbone-consumer-api, ghcr.io/nmshd/backbone-database-migrator, ghcr.io/nmshd/backbone-event-handler, ghcr.io/nmshd/backbone-sse-server, node)
• Update babel monorepo to v8 (@babel/preset-env, @babel/preset-typescript)
• Update dependency typescript to v7
• Lock file maintenance

Detected Dependencies

docker-compose (2)

.dev/compose.backbone.yml (9)

• ghcr.io/nmshd/backbone-consumer-api 7.1.12@sha256:cec0d7e2c446ee0b59855bf6d2a1c08db01c0da968e6474d4e6183e4c4d92e17 → [Updates: 7.2.1]
• ghcr.io/nmshd/backbone-event-handler 7.1.12@sha256:a6b51ebd3fe57c9ed693ab9765eb56a8934bb6f845d0c8ce99d0e9d39b6f588f → [Updates: 7.2.1]
• ghcr.io/nmshd/backbone-sse-server 7.1.12@sha256:da2a8530631f6f5d8d3f37b76ede32baee87a6ee15099b9351575001c972536d → [Updates: 7.2.1]
• ghcr.io/nmshd/backbone-admin-ui 7.1.12@sha256:ff91ef26846baf66aa3aa21e58983971eeaf3d4a28fc9116dc6eedcd553326ef → [Updates: 7.2.1]
• ghcr.io/nmshd/backbone-database-migrator 7.1.12@sha256:3a12900253835176f07eb4d5b28ae13a530f7a9bd1714978bd6f9a3ace40738a → [Updates: 7.2.1]
• postgres sha256:4ef4dbc939d61acea57712655ddb4b4ab27419c913f94cca0cd57cb3ea3c2280 → [Updates: undefined]
• mcr.microsoft.com/azure-storage/azurite 3.37.0@sha256:830430c1da1a2d537e08f3e6764dd1f5ae00cf0346bcaf625b968ec3f0971fd5
• rabbitmq 4.3.6-alpine@sha256:ada6e65d776efafacce1477ba677fa0d9cf56bfaeafca456c8ed9188613dafbe → [Updates: 4.3.6-alpine]
• ghcr.io/nmshd/backbone-admin-cli 7.1.12@sha256:7212b5385f480ccf269aff79fd50c7aeb18ae6b87e4c417dd2a9319e37d102c2 → [Updates: 7.2.1]

.dev/compose.yml (3)

• mongo sha256:2609aaf7a1abbff404101af896e05f243d22be742471ed857b50b9ce0270fdbd → [Updates: undefined]
• ghcr.io/ferretdb/postgres-documentdb 17@sha256:2386795ec2aa7ae559304361979f1dc5708d383ee9020ae63dadc2940dfe58f7
• ghcr.io/ferretdb/ferretdb 2@sha256:5706414241eb84f0515512c37b46db0f1b1eac9e5ceb7e4c2523211c184b1985

github-actions (8)

.github/workflows/check-pr.yml (1)

• jesusvasquez333/verify-pr-label-action v1.4.0@657d111bbbe13e22bbd55870f1813c699bde1401

.github/workflows/check-schema.yml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020

.github/workflows/codeql.yml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• github/codeql-action v4@b96794f015dfd88f77b49b1c93e0fa7110f94c63 → [Updates: v4]
• github/codeql-action v4@b96794f015dfd88f77b49b1c93e0fa7110f94c63 → [Updates: v4]

.github/workflows/dependency-security-maintenance.yml (1)

• js-soft/github-actions main

.github/workflows/new_pull_request.yml (1)

• nmshd/github-notify-action v1@748d79bf71cd3c2a4190bcf1172b82d1428a58b9

.github/workflows/publish.yml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020

.github/workflows/test.yml (30)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• codecov/codecov-action v7@0b35c9ecc4f0529d0eb674914510c22f85b196b4 → [Updates: v7]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• supercharge/mongodb-github-action 1.12.1@315db7fe45ac2880b7758f1933e6e5d59afd5e94
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• codecov/codecov-action v7@0b35c9ecc4f0529d0eb674914510c22f85b196b4 → [Updates: v7]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• codecov/codecov-action v7@0b35c9ecc4f0529d0eb674914510c22f85b196b4 → [Updates: v7]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• codecov/codecov-action v7@0b35c9ecc4f0529d0eb674914510c22f85b196b4 → [Updates: v7]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• supercharge/mongodb-github-action 1.12.1@315db7fe45ac2880b7758f1933e6e5d59afd5e94
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• codecov/codecov-action v7@0b35c9ecc4f0529d0eb674914510c22f85b196b4 → [Updates: v7]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• supercharge/mongodb-github-action 1.12.1@315db7fe45ac2880b7758f1933e6e5d59afd5e94
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• codecov/codecov-action v7@0b35c9ecc4f0529d0eb674914510c22f85b196b4 → [Updates: v7]

.github/workflows/weekly-release-of-dependency-updates.yml (1)

• js-soft/github-actions main

npm (8)

package.json (18)

• @babel/preset-env 7.29.7 → [Updates: 8.0.5]
• @babel/preset-typescript 7.29.7 → [Updates: 8.0.1]
• @js-soft/eslint-config-ts 2.0.10 → [Updates: 2.0.11]
• @js-soft/license-check 1.0.15
• @types/jest 30.0.0
• @types/node 24.13.4 → [Updates: 24.13.5]
• dependency-cruiser 18.2.0 → [Updates: 18.3.1]
• enhanced-publish 1.1.12 → [Updates: 1.1.13]
• eslint 10.10.0 → [Updates: 10.11.0]
• jest 30.5.1 → [Updates: 30.5.2]
• jest-expect-message 1.1.3
• npm-check-updates 23.1.0
• patch-package 8.0.1
• prettier 3.9.6 → [Updates: 3.9.8]
• ts-jest 29.4.12
• ts-node 10.9.2
• tsconfig-paths 4.2.0
• typescript 6.0.3 → [Updates: 7.0.2]

packages/app-runtime/package.json (9)

• @js-soft/docdb-access-loki ^1.4.2
• @js-soft/logging-abstractions ^1.2.5
• eventsource ^5.0.0
• lodash ^4.18.1
• @eudiplo/sdk-core 7.6.1 → [Updates: 8.0.2]
• @js-soft/node-logger 1.2.14 → [Updates: 1.2.15]
• @types/lodash 4.17.25
• @types/lokijs 1.5.14
• @types/luxon 3.7.5

packages/consumption/package.json (19)

• @credo-ts/core ^0.7.0
• @credo-ts/openid4vc ^0.7.0
• @js-soft/docdb-querytranslator ^1.1.7
• @js-soft/ts-serval 2.0.17
• @js-soft/ts-utils 2.3.7 → [Updates: 2.3.9]
• @nmshd/iql ^1.0.5
• @noble/ciphers ^2.2.0
• jose ^6.2.3
• lodash ^4.18.1
• sjcl ^1.0.9
• ts-simple-nameof ^1.3.3
• ws ^8.21.0
• @js-soft/docdb-access-loki 1.4.3 → [Updates: 1.4.5]
• @js-soft/docdb-access-mongo 1.4.3 → [Updates: 1.4.5]
• @js-soft/node-logger 1.2.14 → [Updates: 1.2.15]
• @nmshd/crypto 3.0.8 → [Updates: 3.0.9]
• @types/lodash 4.17.25
• @types/sjcl 1.0.34
• ts-mockito 2.6.1

packages/content/package.json (7)

• @js-soft/ts-serval 2.0.17
• @nmshd/iql ^1.0.5
• ibantools ^4.5.4
• luxon ^3.7.2
• ts-simple-nameof ^1.3.3
• @types/luxon 3.7.5
• @nmshd/crypto 3.0.8 → [Updates: 3.0.9]

packages/core-types/package.json (6)

• @js-soft/logging-abstractions ^1.2.5
• @js-soft/ts-serval 2.0.17
• @nmshd/crypto 3.0.8 → [Updates: 3.0.9]
• json-stringify-safe ^5.0.1
• luxon ^3.7.2
• @types/luxon 3.7.5

packages/runtime-types/package.json (1)

• @js-soft/ts-utils 2.3.7 → [Updates: 2.3.9]

packages/runtime/package.json (31)

• @js-soft/docdb-querytranslator ^1.1.7
• @js-soft/logging-abstractions ^1.2.5
• @js-soft/ts-serval 2.0.17
• @js-soft/ts-utils ^2.3.6
• @nmshd/crypto 3.0.8 → [Updates: 3.0.9]
• @nmshd/iql ^1.0.5
• @nmshd/typescript-ioc 3.2.6
• ajv ^8.20.0
• ajv-errors ^3.0.0
• ajv-formats ^3.0.1
• elliptic ^6.6.1
• json-stringify-safe ^5.0.1
• lodash ^4.18.1
• luxon ^3.7.2
• media-typer ^2.0.0
• reflect-metadata ^0.2.2
• ts-simple-nameof ^1.3.3
• @eudiplo/sdk-core 7.6.1 → [Updates: 8.0.2]
• @js-soft/docdb-access-loki 1.4.3 → [Updates: 1.4.5]
• @js-soft/docdb-access-mongo 1.4.3 → [Updates: 1.4.5]
• @js-soft/node-logger 1.2.14 → [Updates: 1.2.15]
• @nmshd/connector-sdk 7.4.10 → [Updates: 7.4.12]
• @types/elliptic 6.4.18
• @types/jest 30.0.0
• @types/json-stringify-safe 5.0.3
• @types/lodash 4.17.25
• @types/luxon 3.7.5
• jwt-decode 4.0.0
• openid-client 6.8.8
• ts-json-schema-generator 2.9.0
• ts-mockito 2.6.1

packages/transport/package.json (25)

• @js-soft/docdb-access-abstractions 1.4.3 → [Updates: 1.4.5]
• @js-soft/logging-abstractions ^1.2.5
• @js-soft/ts-utils ^2.3.6
• @nmshd/crypto 3.0.8 → [Updates: 3.0.9]
• axios ^1.17.0
• fast-json-patch ^3.1.1
• form-data ^4.0.6
• json-stringify-safe ^5.0.1
• lodash ^4.18.1
• luxon ^3.7.2
• qs ^6.15.3
• reflect-metadata ^0.2.2
• ts-simple-nameof ^1.3.3
• @js-soft/docdb-access-loki 1.4.3 → [Updates: 1.4.5]
• @js-soft/docdb-access-mongo 1.4.3 → [Updates: 1.4.5]
• @js-soft/node-logger 1.2.14 → [Updates: 1.2.15]
• @js-soft/ts-serval 2.0.17
• @types/json-stringify-safe 5.0.3
• @types/lodash 4.17.25
• @types/luxon 3.7.5
• @types/qs 6.15.1
• correlation-id 5.2.0
• expect 30.5.1 → [Updates: 30.5.2]
• testcontainers 12.1.0
• ts-mockito 2.6.1

nvm (1)

.nvmrc (1)

• node 26.8.2 → [Updates: 26.9.0]

regex (1)

.dev/eudiplo/startEudiplo.ts (1)

• ghcr.io/openwallet-foundation/eudiplo 7.6.1@sha256:8305fc3dac75192713c9c21611b03a2d0f802e07fda29236bbae9eb624216d69 → [Updates: 8.0.2]

renovate-config (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository