Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (23)

Datasource	Package	Last Updated
npm	@breejs/later	2023-11-28
npm	@tryghost/bunyan-rotating-filestream	2021-03-04
npm	archiver	2024-03-10
npm	bunyan	2021-01-08
npm	bunyan-loggly	2022-08-25
npm	cacheable-lookup	2022-09-27
npm	caller	2022-03-10
npm	cookiejar	2023-01-13
npm	date-fns	2024-09-17
npm	date-format	2022-09-26
npm	extract-zip	2020-06-10
npm	find-root	2017-06-29
npm	gelf-stream	2016-05-07
npm	json-stringify-safe	2015-05-19
npm	node-loggly-bulk	2024-08-14
npm	nodemailer-mailgun-transport	2022-09-14
npm	nodemailer-stub-transport	2016-08-18
npm	prettyjson	2022-01-11
npm	prom-client	2024-06-27
npm	split2	2023-03-26
npm	stoppable	2018-11-10
npm	sywac	2020-07-25

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Lock file maintenance

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update dependency @types/sinon to v21.0.1
• Update dependency knex to v3.2.9

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency esbuild to v0.27.5
• Update dependency @aws-sdk/client-sesv2 to v3.1022.0
• Update dependency @sinonjs/fake-timers to v15.3.0
• Update codecov/codecov-action action to v6
• Update dependency got to v15
• Update dependency typescript to v6
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update vitest monorepo to v4 (major) (@vitest/coverage-v8, vitest)

Detected Dependencies

github-actions (2)

.github/workflows/publish.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6@53b83947a5a98c8d113130e565377fae1a50d02f
• tryghost/actions main@0204421bd3b15725e5b8c606d5d671e9674707ea
• node 24

.github/workflows/test.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6@53b83947a5a98c8d113130e565377fae1a50d02f
• codecov/codecov-action v5@75cd11691c0faa626561e295848008c8a7dddffe → [Updates: v6]
• tryghost/actions main@0204421bd3b15725e5b8c606d5d671e9674707ea

npm (43)

package.json (8)

• @nx/js 22.6.4
• @vitest/coverage-v8 3.2.4 → [Updates: 4.1.2]
• eslint-plugin-ghost 3.5.0
• nx 22.6.4
• sinon 21.0.3
• ts-node 10.9.2
• vitest 3.2.4 → [Updates: 4.1.2]
• node-loggly-bulk ^4.0.2

packages/api-framework/package.json (2)

• lodash 4.18.1
• sinon 21.0.3

packages/bookshelf-collision/package.json (2)

• lodash 4.18.1
• sinon 21.0.3

packages/bookshelf-custom-query/package.json (1)

• sinon 21.0.3

packages/bookshelf-eager-load/package.json (2)

• lodash 4.18.1
• sinon 21.0.3

packages/bookshelf-filter/package.json (2)

• @tryghost/nql 0.12.10
• sinon 21.0.3

packages/bookshelf-has-posts/package.json (2)

• lodash 4.18.1
• sinon 21.0.3

packages/bookshelf-include-count/package.json (2)

• lodash 4.18.1
• sinon 21.0.3

packages/bookshelf-order/package.json (2)

• lodash 4.18.1
• sinon 21.0.3

packages/bookshelf-pagination/package.json (2)

• lodash 4.18.1
• sinon 21.0.3

packages/bookshelf-plugins/package.json (1)

• sinon 21.0.3

packages/bookshelf-search/package.json (1)

• sinon 21.0.3

packages/bookshelf-transaction-events/package.json (1)

• sinon 21.0.3

packages/config/package.json (1)

• nconf 0.13.0

packages/database-info/package.json (1)

• knex 3.2.8 → [Updates: 3.2.9]

packages/debug/package.json (1)

• debug 4.4.3

packages/domain-events/package.json

packages/elasticsearch/package.json (3)

• @elastic/elasticsearch 9.3.4
• split2 4.2.0
• sinon 21.0.3

packages/email-mock-receiver/package.json (1)

• sinon 21.0.3

packages/errors/package.json (5)

• @types/lodash 4.17.24
• esbuild 0.27.4 → [Updates: 0.27.5]
• lodash 4.18.1
• ts-node 10.9.2
• typescript 5.9.3 → [Updates: 6.0.2]

packages/express-test/package.json (8)

• cookiejar 2.1.4
• form-data 4.0.5
• mime-types 3.0.2
• express 5.2.1
• express-session 1.19.0
• multer 2.1.1
• sinon 21.0.3
• express ^4.0.0 || ^5.0.0

packages/http-cache-utils/package.json (1)

• sinon 21.0.3

packages/http-stream/package.json (2)

• express 5.2.1
• sinon 21.0.3

packages/jest-snapshot/package.json (4)

• @jest/expect 30.3.0
• @jest/expect-utils 30.3.0
• jest-snapshot 30.3.0
• sinon 21.0.3

packages/job-manager/package.json (10)

• @breejs/later 4.2.0
• bree 9.2.9
• cron-validate 1.5.3
• fastq 1.20.1
• p-wait-for 6.0.0
• workerpool 10.0.1
• @sinonjs/fake-timers 15.2.1 → [Updates: 15.3.0]
• date-fns 4.1.0
• rewire 9.0.1
• sinon 21.0.3

packages/logging/package.json (8)

• @tryghost/bunyan-rotating-filestream 0.0.7
• bunyan 1.8.15
• bunyan-loggly 2.0.1
• fs-extra 11.3.4
• gelf-stream 1.1.1
• json-stringify-safe 5.0.1
• lodash 4.18.1
• sinon 21.0.3

packages/metrics/package.json (3)

• json-stringify-safe 5.0.1
• rewire 9.0.1
• sinon 21.0.3

packages/mw-error-handler/package.json (3)

• lodash 4.18.1
• semver 7.7.4
• sinon 21.0.3

packages/mw-vhost/package.json (1)

• supertest 7.2.2

packages/nodemailer/package.json (5)

• @aws-sdk/client-sesv2 3.1021.0 → [Updates: 3.1022.0]
• nodemailer 8.0.4
• nodemailer-mailgun-transport 2.1.5
• nodemailer-stub-transport 1.1.0
• sinon 21.0.3

packages/pretty-cli/package.json (3)

• chalk 5.6.2
• sywac 1.3.0
• sinon 21.0.3

packages/pretty-stream/package.json (4)

• date-format 4.0.14
• lodash 4.18.1
• prettyjson 1.2.5
• sinon 21.0.3

packages/prometheus-metrics/package.json (13)

• express 5.2.1
• prom-client 15.1.3
• stoppable 1.1.0
• @types/express 5.0.6
• @types/sinon 21.0.0 → [Updates: 21.0.1]
• @types/stoppable 1.1.3
• @types/supertest 7.2.0
• knex 3.2.8 → [Updates: 3.2.9]
• nock 14.0.11
• sinon 21.0.3
• supertest 7.2.2
• ts-node 10.9.2
• typescript 5.9.3 → [Updates: 6.0.2]

packages/promise/package.json (1)

• sinon 21.0.3

packages/request/package.json (6)

• cacheable-lookup 7.0.0
• got 14.6.6 → [Updates: 15.0.0]
• lodash 4.18.1
• nock 14.0.11
• rewire 9.0.1
• sinon 21.0.3

packages/root-utils/package.json (3)

• caller 1.1.0
• find-root 1.1.0
• sinon 21.0.3

packages/security/package.json (4)

• @tryghost/string 0.3.2
• bcryptjs 3.0.3
• sinon 21.0.3
• uuid 13.0.0

packages/server/package.json (1)

• sinon 21.0.3

packages/tpl/package.json (1)

• sinon 21.0.3

packages/validator/package.json (1)

• lodash 4.18.1

packages/version/package.json (2)

• semver 7.7.4
• sinon 21.0.3

packages/webhook-mock-receiver/package.json (3)

• p-wait-for 6.0.0
• got 14.6.6 → [Updates: 15.0.0]
• sinon 21.0.3

packages/zip/package.json (4)

• archiver 7.0.1
• extract-zip 2.0.1
• folder-hash 4.1.2
• sinon 21.0.3

nvm (1)

.nvmrc (1)

• node 24

renovate-config-presets (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository