Dependency Dashboard

[fvh-renovate-bot]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@rjsf/bootstrap-4
npm	@types/react-leaflet
npm	@types/reactstrap

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update actions/cache action to v6
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/create-github-app-token action to v3
• chore(deps): update actions/setup-node action to v7
• chore(deps): update actions/setup-python action to v7
• chore(deps): update astral-sh/setup-uv action to v10
• chore(deps): update dependency node to v24
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/metadata-action action to v6
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update docker/setup-qemu-action action to v4
• chore(deps): update googleapis/release-please-action action to v5
• fix(deps): update dependency dj-rest-auth to v7
• fix(deps): update dependency gunicorn to v26
• fix(deps): update dependency http-proxy-middleware to v4
• fix(deps): update dependency mapbox-gl to v3
• fix(deps): update dependency pillow to v12
• fix(deps): update dependency pyaml to v26
• fix(deps): update dependency react-bootstrap to v2
• fix(deps): update dependency react-leaflet to v5
• fix(deps): update dependency react-router-dom to v7
• fix(deps): update dependency reactstrap to v9
• fix(deps): update dependency typescript to v7
• fix(deps): update react monorepo to v19 (@types/react, @types/react-dom, react, react-dom)
• fix(deps): update rjsf monorepo to v6 (@rjsf/core, @rjsf/utils, @rjsf/validator-ajv8)
• 🔐 Create all pending approval PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency @testing-library/user-event to v14.6.6
• chore(deps): update dependency @types/leaflet to v1.9.22
• chore(deps): update dependency http-proxy-middleware to v3.0.7
• chore(deps): update dependency @sentry/browser to v10.70.0
• chore(deps): update dependency lodash to v4.18.1
• chore(deps): update dependency sass to v1.103.1
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update dependency django to v5.2.11 [security]
• chore(deps): update dependency @types/lodash to v4.17.25
• chore(deps): update dependency @types/react to v18.3.31
• chore(deps): update dependency geolib to v3.3.14
• chore(deps): update dependency @biomejs/biome to v2.5.10
• chore(deps): update dependency @playwright/test to v1.62.1
• chore(deps): update dependency python to 3.14
• chore(deps): update turf monorepo to v7.4.0 (@turf/difference, @turf/turf)
• chore(deps): update dependency @types/react-leaflet to v3
• fix(deps): update dependency @testing-library/jest-dom to v7
• fix(deps): update dependency bootstrap to v5

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update nginx docker tag to v1.31
• chore(deps): update postgres docker tag to v18

Detected Dependencies

docker-compose (1)

docker-compose.yml (1)

• postgres 14-alpine → [Updates: 18-alpine]

dockerfile (2)

django_server/Dockerfile (2)

• python 3.13-slim → [Updates: 3.14-slim]
• python 3.13-slim → [Updates: 3.14-slim]

react_ui/Dockerfile (2)

• node 22-alpine → [Updates: 24-alpine]
• nginx 1.28-alpine → [Updates: 1.31-alpine]

github-actions (8)

.github/workflows/auto-fix.yml (1)

• ForumViriumHelsinki/.github main

.github/workflows/auto-merge-image-updater.yml (1)

• actions/checkout v6 → [Updates: v7]

.github/workflows/claude-review.yml (1)

• ForumViriumHelsinki/.github main

.github/workflows/claude.yml (1)

• ForumViriumHelsinki/.github main

.github/workflows/container-build.yml (6)

• actions/checkout v4 → [Updates: v7]
• docker/metadata-action v5 → [Updates: v6]
• docker/setup-qemu-action v3 → [Updates: v4]
• docker/setup-buildx-action v3 → [Updates: v4]
• docker/login-action v3 → [Updates: v4]
• docker/build-push-action v6 → [Updates: v7]

.github/workflows/enforce-conventional-commits.yml (1)

• ForumViriumHelsinki/.github main

.github/workflows/release-please.yaml (2)

• actions/create-github-app-token v2 → [Updates: v3]
• googleapis/release-please-action v4 → [Updates: v5]

.github/workflows/test.yml (13)

• actions/checkout v4 → [Updates: v7]
• actions/setup-python v5 → [Updates: v7]
• actions/cache v4 → [Updates: v6]
• actions/checkout v4 → [Updates: v7]
• actions/setup-python v5 → [Updates: v7]
• astral-sh/setup-uv v5 → [Updates: v10.0.1]
• actions/checkout v4 → [Updates: v7]
• actions/setup-node v6 → [Updates: v7]
• actions/cache v4 → [Updates: v6]
• python 3.11 → [Updates: 3.14]
• postgres 15-alpine → [Updates: 18-alpine]
• python 3.11 → [Updates: 3.14]
• node 22 → [Updates: 24]

npm (1)

react_ui/package.json (39)

• @rjsf/bootstrap-4 ^5.24.13
• @rjsf/core ^5.24.13 → [Updates: ^6.0.0]
• @rjsf/utils ^5.24.13 → [Updates: ^6.0.0]
• @rjsf/validator-ajv8 ^5.24.13 → [Updates: ^6.0.0]
• @sentry/browser ^10.38.0 → [Updates: ^10.38.0]
• @testing-library/dom ^10.4.0
• @testing-library/jest-dom ^6.9.1 → [Updates: ^7.0.0]
• @testing-library/react ^16.3.2
• @testing-library/user-event ^14.6.1 → [Updates: ^14.6.1]
• @turf/turf ^7.2.0 → [Updates: ^7.2.0]
• @types/react ^18.3.18 → [Updates: ^18.3.18, ^19.0.0]
• @types/react-dom ^18.3.5 → [Updates: ^19.0.0]
• bootstrap ^4.6.2 → [Updates: ^5.0.0]
• geolib ^3.3.4 → [Updates: ^3.3.4]
• http-proxy-middleware ^3.0.5 → [Updates: ^3.0.5, ^4.0.0]
• leaflet ^1.9.4
• lodash ^4.17.21 → [Updates: ^4.17.21]
• mapbox-gl ^1.13.3 → [Updates: ^3.0.0]
• mapbox-gl-leaflet ^0.0.16
• moment ^2.30.1
• osmtogeojson ^3.0.0-beta.5
• react ^18.3.1 → [Updates: ^19.0.0]
• react-bootstrap ^1.6.8 → [Updates: ^2.0.0]
• react-dom ^18.3.1 → [Updates: ^19.0.0]
• react-leaflet ^4.2.1 → [Updates: ^5.0.0]
• react-router-dom ^5.3.4 → [Updates: ^7.0.0]
• react-scripts ^5.0.1
• reactstrap ^8.10.1 → [Updates: ^9.0.0]
• sass ^1.94.0 → [Updates: ^1.94.0]
• typescript ^5.9.3 → [Updates: ^7.0.0]
• @biomejs/biome ^2.3.14 → [Updates: ^2.3.14]
• @playwright/test ^1.56.1 → [Updates: ^1.56.1]
• @types/leaflet ^1.9.15 → [Updates: ^1.9.15]
• @types/lodash ^4.17.14 → [Updates: ^4.17.14]
• @types/react-leaflet ^2.8.3 → [Updates: ^3.0.0]
• @types/react-router-dom ^5.3.3
• @types/reactstrap ^8.7.2
• @turf/difference 7.0.0 → [Updates: 7.4.0]
• typescript ^5.9.3 → [Updates: ^7.0.0]

pep621 (1)

django_server/pyproject.toml (28)

• python >=3.11
• django >=5.2,<6.0 → [Updates: >=5.2,<6.0]
• djangorestframework >=3.10,<4.0
• pyaml >=19.4,<25.0 → [Updates: >=26.7,<26.8]
• uritemplate >=3.0,<5.0
• coreapi >=2.3,<3.0
• django-cors-headers >=3.2,<5.0
• dj-rest-auth >=2.0,<7.0 → [Updates: >=7.2,<7.3]
• django-allauth >=65.0,<66.0
• jsonschema >=3.2,<5.0
• twilio >=9.0,<10.0
• psycopg2-binary >=2.9,<3.0
• Pillow >=7.0,<12.0 → [Updates: >=12.3,<12.4]
• dj-inmemorystorage >=2.0,<3.0
• gunicorn >=20.0,<24.0 → [Updates: >=26.1,<26.2]
• sentry-sdk >=2.0,<3.0
• geocoder >=1.38,<2.0
• elastic-apm >=5.5,<7.0
• geopy >=2.0,<3.0
• pyproj >=2.6.1,<4.0
• overpy >=0.4,<1.0
• django-rename-app >=0.1,<1.0
• shapely >=1.7,<3.0
• google-cloud-translate >=3.0,<4.0
• ruff >=0.8.0,<1.0
• coverage >=5.0,<8.0
• inflection >=0.5,<1.0
• setuptools >=61.0

pip_requirements (1)

django_server/drf_jsonschema/develop_requirements.txt

pip_setup (1)

django_server/drf_jsonschema/setup.py (1)

• pytest >= 2.9.0

pipenv (1)

django_server/Pipfile (20)

• django >=3.0
• djangorestframework >=3.10
• pyaml >=19.4
• uritemplate >=3.0
• coreapi >=2.3
• django-cors-headers >=3.2
• dj-rest-auth >=2.0
• django-allauth >=0.41
• jsonschema >=3.2
• twilio >=6.35
• psycopg2-binary >2.8
• flake8 >=3.7
• coverage >=5.0
• Pillow >=7.0
• dj-inmemorystorage >=2.0
• gunicorn >=20.0
• sentry-sdk >=0.14.1
• geocoder >=1.38
• elastic-apm >=5.5
• pyproj >=2.6.1