Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@nordeck/element-web-guest-module
npm	@nordeck/element-web-opendesk-module
npm	@nordeck/element-web-widget-lifecycle-module
npm	@nordeck/element-web-widget-toggles-module
npm	framer-motion

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Pin dependencies
• Replace dependency framer-motion with motion ^12.4.10
• Update actions/cache digest to 27d5ce7
• Update actions/checkout digest to df4cb1c
• Update actions/download-artifact digest to 3e5f45b
• Update actions/setup-node digest to 48b55a0
• Update actions/upload-artifact digest to 043fb46
• Update gcr.io/distroless/base-nossl-debian12:debug Docker digest to 35a3865
• Update ghcr.io/element-hq/element-web:latest Docker digest to 2cdd374
• Update npm non-major dependencies to v4.4.3
• Update setup-cfg non-major dependencies (black, isort, mypy, pydantic)
• Update dependency black to v26
• Update dependency isort to v8
• Update dependency lint-staged to v17
• Update dependency mypy to v2
• Update eslint (major) (eslint, eslint-plugin-unicorn)
• 🔐 Create all pending approval PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update vite (major) (vite, vite-plugin-svgr, vitest-sonar-reporter)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update react to v19.2.7 (react, react-dom)
• Update module-api to v1.14.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency flake8 to v7
• Update react to v6
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (2)

Dockerfile (2)

• node lts-alpine@sha256:2bdb65ed1dab192432bc31c95f94155ca5ad7fc1392fb7eb7526ab682fa5bf14
• ghcr.io/element-hq/element-web latest@sha256:a84f294ce46e4327ebacecb78bfc94cf6a45c7ffa5104a28f06b5ac69d0b2548 → [Updates: latest]

modules/restricted-guests/synapse/Dockerfile (2)

• gcr.io/distroless/base-nossl-debian12 debug@sha256:12dbb4f46c5f712fe3da1c7a441602ee91eb87a5d46b0e725b4440b852000538 → [Updates: debug]
• gcr.io/distroless/base-nossl-debian12 unknown version → [Updates: undefined]

github-actions (8)

.github/workflows/publish-release-element-module.yml (7)

• docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• docker/login-action v4@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/login-action v4@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• docker/setup-buildx-action v4@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/bake-action v7.2.0@6614cfa25eff9a0b2b2697efb0b6159e7680d584
• docker/bake-action v7.2.0@6614cfa25eff9a0b2b2697efb0b6159e7680d584

.github/workflows/publish-release-npm-package.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6]

.github/workflows/publish-release-synapse-module.yml (6)

• docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• docker/login-action v4@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• docker/setup-buildx-action v4@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/build-push-action v7@f9f3042f7e2789586610d6e8b85c8f03e5195baf

.github/workflows/reusable-playwright-tests.yml (8)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6]
• actions/cache v5@668228422ae6a00e4ad889ee87cd7109ec5666a7 → [Updates: v5]
• actions/download-artifact v8@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 → [Updates: v8]
• actions/upload-artifact v7@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7]
• actions/upload-artifact v7@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7]
• ubuntu 24.04-arm
• node lts/*

.github/workflows/sonarqube.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/download-artifact v8@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 → [Updates: v8]
• matrix-org/sonarcloud-workflow-action v4.0@820f7c2e9e94ba9e35add0f739691e5c7e23fa25
• ubuntu 24.04

.github/workflows/static-analysis.yaml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6]
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405
• ubuntu 24.04-arm
• node lts/*
• python 3.11

.github/workflows/synapse-module.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• docker/login-action v4@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• docker/setup-buildx-action v4@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
• docker/build-push-action v7@f9f3042f7e2789586610d6e8b85c8f03e5195baf

.github/workflows/tests.yml (8)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6]
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6]
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405
• actions/cache v5@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 → [Updates: v5]
• actions/upload-artifact v7@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7]
• ubuntu 24.04-arm
• node lts/*
• python 3.11

npm (7)

modules/banner/element-web/package.json (20)

• @radix-ui/react-dialog ^1.1.6
• @vector-im/compound-design-tokens ^10.0.0
• @vector-im/compound-web ^9.0.0
• framer-motion ^12.4.10 → [Updates: ^12.4.10]
• styled-components ^6.1.18
• zod ^4.0.0 → [Updates: ^4.0.0]
• @arcmantle/vite-plugin-import-css-sheet ^1.0.12
• @element-hq/element-web-module-api ^1.0.0 → [Updates: ^1.0.0]
• @types/node ^22.10.7 → [Updates: ^24.0.0]
• @types/react ^19
• @types/react-dom ^19
• @vitejs/plugin-react ^5.0.0 → [Updates: ^6.0.0]
• matrix-web-i18n ^3.6.0
• matrix-widget-api ^1.17.0
• react 19.2.6 → [Updates: 19.2.7]
• rollup-plugin-external-globals ^0.13.0
• typescript ^6.0.0
• vite ^7.3.2 → [Updates: ^8.0.0]
• vite-plugin-node-polyfills ^0.28.0
• vite-plugin-svgr ^4.3.0 → [Updates: ^5.0.0]

modules/opendesk/element-web/package.json (14)

• @element-hq/element-web-module-api ^1.0.0 → [Updates: ^1.0.0]
• @nordeck/element-web-guest-module ^2.0.0
• @nordeck/element-web-opendesk-module ^0.5.0
• @nordeck/element-web-widget-lifecycle-module ^1.0.1
• @nordeck/element-web-widget-toggles-module ^0.1.0
• @types/node ^22.10.7 → [Updates: ^24.0.0]
• @types/react ^19
• @vitejs/plugin-react ^5.0.0 → [Updates: ^6.0.0]
• react 19.2.6 → [Updates: 19.2.7]
• react-dom 19.2.6 → [Updates: 19.2.7]
• rollup-plugin-external-globals ^0.13.0
• typescript ^6.0.0
• vite ^7.3.2 → [Updates: ^8.0.0]
• vite-plugin-node-polyfills ^0.28.0

modules/restricted-guests/element-web/package.json (14)

• @vector-im/compound-design-tokens ^10.0.0
• @vector-im/compound-web ^9.0.0
• styled-components ^6.1.18
• zod ^4.0.0 → [Updates: ^4.0.0]
• @arcmantle/vite-plugin-import-css-sheet ^1.0.12
• @element-hq/element-web-module-api ^1.0.0 → [Updates: ^1.0.0]
• @types/node ^22.10.7 → [Updates: ^24.0.0]
• @types/react ^19
• @vitejs/plugin-react ^5.0.0 → [Updates: ^6.0.0]
• react 19.2.6 → [Updates: 19.2.7]
• rollup-plugin-external-globals ^0.13.0
• typescript ^6.0.0
• vite ^7.3.2 → [Updates: ^8.0.0]
• vite-plugin-node-polyfills ^0.28.0

modules/restricted-guests/synapse/package.json

modules/widget-lifecycle/element-web/package.json (8)

• zod ^4.0.0 → [Updates: ^4.0.0]
• @element-hq/element-web-module-api ^1.0.0 → [Updates: ^1.0.0]
• @types/node ^22.10.7 → [Updates: ^24.0.0]
• @vitest/coverage-v8 ^4.0.0
• typescript ^6.0.0
• vite ^7.3.2 → [Updates: ^8.0.0]
• vitest ^4.0.0
• vitest-sonar-reporter ^2.0.0 → [Updates: ^3.0.0]

modules/widget-toggles/element-web/package.json (23)

• @vector-im/compound-design-tokens ^10.0.0
• @vector-im/compound-web ^9.0.0
• matrix-widget-api ^1.17.0
• styled-components ^6.3.11
• zod ^4.3.6 → [Updates: ^4.3.6]
• @arcmantle/vite-plugin-import-css-sheet ^1.0.12
• @element-hq/element-web-module-api ^1.0.0 → [Updates: ^1.0.0]
• @testing-library/dom ^10.4.1
• @testing-library/react ^16.3.2
• @testing-library/user-event ^14.6.1
• @types/node ^22.10.7 → [Updates: ^24.0.0]
• @types/react ^19
• @vitejs/plugin-react ^5.0.0 → [Updates: ^6.0.0]
• @vitest/browser-playwright ^4.0.0
• @vitest/coverage-v8 ^4.0.0
• react ^19 → [Updates: ^19]
• rollup-plugin-external-globals ^0.13.0
• typescript ^6.0.0
• vite ^7.1.11 → [Updates: ^8.0.0]
• vite-plugin-node-polyfills ^0.28.0
• vite-plugin-svgr ^4.3.0 → [Updates: ^5.0.0]
• vitest ^4.0.0
• vitest-sonar-reporter ^2.0.0 → [Updates: ^3.0.0]

package.json (32)

• @action-validator/cli ^0.6.0
• @action-validator/core ^0.6.0
• @element-hq/element-web-module-api 1.13.0 → [Updates: 1.14.0]
• @element-hq/element-web-playwright-common ^6.0.0
• @playwright/test ^1.52.0
• @stylistic/eslint-plugin ^5.0.0
• @types/node ^22.12.0 → [Updates: ^24.0.0]
• @typescript-eslint/eslint-plugin ^8.22.0
• @typescript-eslint/parser ^8.22.0
• eslint ^8.26.0 → [Updates: ^10.0.0]
• eslint-config-google ^0.14.0
• eslint-config-prettier ^10.0.0
• eslint-plugin-deprecate ^0.9.0
• eslint-plugin-import ^2.25.4
• eslint-plugin-jsx-a11y ^6.10.2
• eslint-plugin-matrix-org ^3.0.0
• eslint-plugin-react ^7.37.4
• eslint-plugin-react-compiler ^19.0.0-beta-27714ef-20250124
• eslint-plugin-react-hooks ^7.0.0
• eslint-plugin-unicorn ^56.0.0 → [Updates: ^64.0.0]
• husky ^9.1.7
• knip ^6.0.0
• lint-staged ^16.0.0 → [Updates: ^17.0.0]
• patch-package ^8.0.1
• prettier ^3.4.2
• typescript ^6.0.0
• node >=20.0.0
• vite 7.3.5 → [Updates: 8.0.14]
• @vitest/browser-playwright 4.1.8
• @vitest/coverage-v8 4.1.8
• vitest 4.1.8
• yarn 1.22.22

pep621 (1)

modules/restricted-guests/synapse/pyproject.toml

renovate-config (1)

.github/renovate.json

setup-cfg (1)

modules/restricted-guests/synapse/setup.cfg (5)

• mypy == 1.10.0 → [Updates: ==1.20.2, ==2.1.0]
• pydantic == 2.4.2 → [Updates: ==2.13.4]
• black == 22.3.0 → [Updates: ==22.12.0, ==26.5.1]
• flake8 == 4.0.1 → [Updates: ==7.3.0]
• isort == 5.9.3 → [Updates: ==5.13.2, ==8.0.1]

---

• Check this box to trigger a request for Renovate to run again on this repository