Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	eslint-plugin-node

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update dependency rack-mini-profiler to v5
• Update dependency uppy to v6

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• Update dependency mini_magick to v5

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency jquery-ui-rails to v8 [SECURITY]
• Update all non-major dependencies to v3.5.0 (rubyzip, solargraph, sprockets)
• Update dependency @vitejs/plugin-vue to v6
• Update dependency eslint-plugin-vue to v10
• Update dependency jquery to v4
• Update dependency postcss-import to v17
• Update dependency redis to v6
• Update eslint monorepo to v10 (@eslint/js, eslint)
• Lock file maintenance
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency view_component to v4 [SECURITY]
• Update dependency blacklight to v9
• Update dependency blacklight_range_limit to v9
• Update dependency bootstrap to v5
• Update dependency bootstrap_form to v5

Detected Dependencies

bundler (1)

Gemfile (126)

• aasm lock file @ 6.0.0
• arabic-letter-connector lock file @ 0.1.1
• archivesspace-client lock file @ 0.6.0
• autoprefixer-rails lock file @ 10.4.21.0
• aws-sdk-s3 lock file @ 1.229.0
• bagit "~> 0.6"
• base64 "0.3.0"
• blacklight "~> 7.42" → [Updates: "~> 9.0"]
• blacklight_range_limit "8.5.0" → [Updates: "9.2.0"]
• bootsnap lock file @ 1.25.0
• bootstrap "~> 4.0" → [Updates: "~> 5.0"]
• bootstrap_form "~> 4.5.0" → [Updates: "~> 5.6.0"]
• bunny lock file @ 3.1.0 → [Updates: undefined]
• capistrano-passenger lock file @ 0.2.1
• capistrano-rails lock file @ 1.7.0
• capistrano-rails-console lock file @ 2.3.0
• cocoon lock file @ 1.2.15
• coffee-rails lock file @ 5.0.0
• connection_pool "< 4"
• dalli lock file @ 5.1.0
• datadog "~> 2.41.0" → [Updates: "~> 2.42.0"]
• devise ">= 4.6.0"
• dnsruby lock file @ 1.74.0
• draper lock file @ 4.0.6
• ezid-client "1.11.0"
• faker lock file @ 3.8.0
• filewatcher "~> 3.0"
• flutie lock file @ 2.2.1
• font-awesome-rails lock file @ 4.7.0.9
• google-cloud-pubsub "3.4.0"
• google-cloud-storage "1.62.0"
• graphiql-rails "1.10.5"
• graphql "~> 2.6.0" → [Updates: "~> 2.6.0"]
• health-monitor-rails lock file @ 12.9.0
• honeybadger lock file @ 6.9.1
• hydra-role-management lock file @ 1.2.0
• iiif_manifest "1.6.0" → [Updates: "1.7.0"]
• image_processing "~> 2.0" → [Updates: "~> 2.0"]
• iso-639 lock file @ 0.3.8
• jbuilder lock file @ 2.15.1
• jquery-datatables lock file @ 1.10.20
• jquery-rails lock file @ 4.6.1
• jquery-ui-rails "~> 6.0" → [Updates: "~> 8.0"]
• json-schema lock file @ 6.2.0
• lazily lock file @ 0.2.1
• lcsort ">= 0.9.1"
• leaflet-rails lock file @ 1.9.5
• lograge lock file @ 0.15.0
• lograge-sql lock file @ 2.6.1
• logstash-event lock file @ 1.2.02
• loofah lock file @ 2.25.2
• m3u8 lock file @ 1.9.0
• marc lock file @ 1.4.0
• mime-types lock file @ 3.7.0
• mini_magick lock file @ 4.13.2 → [Updates: undefined]
• modernizr-rails lock file @ 2.7.1
• net-ssh "~> 7.3"
• normalize-rails lock file @ 8.0.1
• oai lock file @ 1.3.0
• omniauth "2.1.4"
• omniauth-cas "3.0.2"
• openssl lock file @ 4.0.2
• pg lock file @ 1.6.3-arm64-darwin → [Updates: undefined]
• prawn lock file @ 2.5.0
• puma lock file @ 8.0.2
• rack "~> 3.2.0"
• rack-cors lock file @ 3.0.0
• rails "~> 8.1.0"
• rdf-rdfxml lock file @ 3.3.0
• recipient_interceptor lock file @ 0.3.3
• redis ">= 3", "< 6" → [Updates: ">= 3", "< 7"]
• redis-namespace lock file @ 1.11.0
• reform lock file @ 2.6.2
• riiif lock file @ 2.8.1
• rsolr lock file @ 2.6.0
• ruby-progressbar lock file @ 1.13.0
• ruby-vips lock file @ 2.3.0
• rubyzip lock file @ 3.4.1 → [Updates: undefined]
• dartsass-sprockets lock file @ 3.2.1
• shrine-google_cloud_storage lock file @ 3.3.0
• simple_form lock file @ 5.4.1
• sprockets lock file @ 4.3.0 → [Updates: undefined]
• string_rtl lock file @ 0.2.0
• sys-filesystem "~> 1.5"
• title lock file @ 0.1.0
• tus-server "~> 2.3"
• valkyrie "~> 3.6"
• valkyrie-sequel "3.0.1"
• valkyrie-shrine lock file @ 1.1.0
• view_component lock file @ 3.27.0 → [Updates: undefined]
• vite_rails "~> 3.11.0"
• vite_ruby "~> 3.10.0" → [Updates: "~> 3.10.0"]
• whenever "~> 1.0"
• sidekiq-pro lock file @ 8.1.5 → [Updates: undefined]
• benchmark-ips lock file @ 2.15.1
• foreman lock file @ 0.90.0
• listen lock file @ 3.10.0
• ruby-prof lock file @ 2.0.5
• solargraph lock file @ 0.60.1 → [Updates: undefined]
• spring lock file @ 4.7.0
• web-console lock file @ 4.3.0
• awesome_print lock file @ 1.9.2
• bcrypt_pbkdf lock file @ 1.1.2
• bundler-audit lock file @ 0.9.3
• debug lock file @ 1.11.1
• dotenv-rails lock file @ 3.2.0
• ed25519 lock file @ 1.4.0
• factory_bot_rails lock file @ 6.5.1
• parallel_tests lock file @ 5.7.0
• pry-byebug lock file @ 3.12.0
• pry-rails lock file @ 0.3.11
• rails-controller-testing lock file @ 1.0.5
• rspec-rails lock file @ 8.0.4
• rubocop-rails-omakase lock file @ 1.1.0
• rack-mini-profiler lock file @ 4.0.1 → [Updates: undefined]
• axe-core-rspec lock file @ 4.13.0
• capybara-screenshot lock file @ 1.0.27
• database_cleaner lock file @ 2.1.0
• database_cleaner-sequel lock file @ 2.0.2
• formulaic lock file @ 0.4.2
• rspec-graphql_matchers "2.0.0.pre.rc.0"
• rspec_junit_formatter lock file @ 0.6.0
• selenium-webdriver lock file @ 4.47.0 → [Updates: undefined]
• simplecov lock file @ 1.1.1
• timecop lock file @ 0.9.11
• webmock lock file @ 3.26.2 → [Updates: undefined]

github-actions (2)

.github/workflows/build-ci-docker.yml (5)

• actions/checkout v7
• docker/login-action v4
• docker/metadata-action v6
• docker/build-push-action v7
• docker/build-push-action v7

.github/workflows/prune-containers.yml (1)

• snok/container-retention-policy v3.1.0

npm (2)

cloud_fixity/package.json (6)

• @google-cloud/pubsub ^6.0.0
• @google-cloud/storage ^8.0.0
• dotenv ^17.0.0
• mock-require ^3.0.3
• vitest ^4.1.0
• fsevents ^2.3.2

package.json (54)

• @mapnik/mapnik ^4.6 → [Updates: ^4.6]
• @rails/actioncable ^7.2.0
• @samvera/clover-iiif ^3.0.0 → [Updates: ^3.0.0]
• @vitejs/plugin-vue ^5.0.4 → [Updates: ^6.0.0]
• ajv ^8.18.0
• apollo-boost 0.4.9
• axios ^1.18.0
• canvas-confetti ^1.6.0
• core-js ^3.16.2
• flush-promises ^1.0.2
• graphql ^17.0.0
• graphql-tag 2.12.7
• hls.js 1.7.0 → [Updates: 1.7.1]
• leaflet ^1.7.1
• lodash ^4.18.1
• lux-design-system ^7.12.0
• npm ^12.0.0
• openseadragon ^6.0.0
• openseadragon-areaselector ^0.2.1
• path ^0.12.7
• postcss-import ^16.1.0 → [Updates: ^17.0.0]
• react ^19.0.0
• react-dom ^19.0.0
• sass ^1.74.1
• trix ^2.1.18
• unfetch ^5.0.0
• uppy ^5.0.0 → [Updates: ^6.0.0]
• vue ^3.4.21
• vue-loader ^17.4.2
• vue-select ^v4.0.0-beta.6
• vue2-dropzone ^3.6.0
• vuex ^4.1.0
• @eslint/js ^9.1.1 → [Updates: ^10.0.0]
• @vue/test-utils ^2.4.5
• dotenv ^17.0.0
• esbuild ^0.28.2
• eslint ^9.1.1 → [Updates: ^10.0.0]
• eslint-config-standard ^17.1
• eslint-plugin-import ^2.29
• eslint-plugin-n ^18.0.0
• eslint-plugin-node ^11.1 → [Updates: ^14.0.0]
• eslint-plugin-promise ^7.0.0
• @vitest/eslint-plugin ^1.0.1
• eslint-plugin-vitest-globals ^1.5
• eslint-plugin-vue ^9.25.0 → [Updates: ^10.0.0]
• globals ^17.0.0 → [Updates: ^17.0.0]
• identity-obj-proxy ^3.0.0
• jquery ^3.5.0 → [Updates: ^4.0.0]
• jsdom ^30.0.0
• vite ^8.0.0
• vite-plugin-compression2 ^2.5.3
• vite-plugin-ruby ^5.2.0
• vitest ^4.1
• yarn 1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137e

---

• Check this box to trigger a request for Renovate to run again on this repository