Dependency Dashboard

[github-actions]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (51)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	sonarsource/sonarcloud-github-action	2025-02-27
npm	@codemirror/lang-json	2025-06-19
npm	@codemirror/lang-python	2025-05-14
npm	@codemirror/lang-xml	2024-03-06
npm	@emotion/react	2024-12-09
npm	@emotion/styled	2025-06-26
npm	@microsoft/fetch-event-source	2021-04-25
npm	@testing-library/dom	2025-07-27
npm	ajv-errors	2021-03-27
npm	bpmn-js-cli	2024-01-10
npm	bpmn-js-spiffworkflow	2022-09-22
npm	eslint-plugin-jsx-a11y	2024-10-26
npm	eslint-plugin-react	2025-04-03
npm	jwt-decode	2023-10-27
npm	lodash.merge	2019-07-10
npm	rollup-plugin-peer-deps-external	2020-10-20
npm	rollup-plugin-postcss	2021-11-22
pep621	Flask-SQLAlchemy	2023-09-11
pep621	Jinja2	2025-03-05
pep621	celery-stubs	2023-02-10
pep621	flask-bcrypt	2022-04-05
pep621	flask-migrate	2025-01-10
pep621	flask-restful	2023-05-21
pep621	flask-session	2024-03-26
pep621	prometheus-flask-exporter	2025-03-11
pep621	pytest-flask-sqlalchemy	2022-04-30
pep621	pytest-random-order	2025-06-22
pep621	pytest-xdist	2025-07-01
pep621	security	2024-06-28
pep621	types-flask	2021-11-26
pep621	types-werkzeug	2021-11-26
pip_requirements	Jinja2	2025-03-05
pip_requirements	Unidecode	2025-04-24
pip_requirements	alabaster	2024-07-26
pip_requirements	appdirs	2020-05-11
pip_requirements	colorama	2022-10-25
pip_requirements	livereload	2024-12-18
pip_requirements	lsprotocol	2025-06-17
pip_requirements	mdurl	2022-08-14
pip_requirements	six	2024-12-04
pip_requirements	sphinx-basic-ng	2023-07-08
pip_requirements	sphinx-tags	2024-07-08
pip_requirements	sphinxcontrib-applehelp	2024-07-29
pip_requirements	sphinxcontrib-devhelp	2024-07-29
pip_requirements	sphinxcontrib-htmlhelp	2024-07-29
pip_requirements	sphinxcontrib-jquery	2023-03-14
pip_requirements	sphinxcontrib-jsmath	2019-01-21
pip_requirements	sphinxcontrib-qthelp	2024-07-29
pip_requirements	sphinxcontrib-serializinghtml	2024-07-29

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Pin dependencies (SpiffWorkflow, python)
• Pin dependencies (alpine, ghcr.io/sartography/connector-proxy-async-http, ghcr.io/sartography/spiffworkflow-backend, ghcr.io/sartography/spiffworkflow-frontend, mysql, nginx, node, python)
• Update GitHub Actions (actions/checkout, actions/setup-node, actions/setup-python, codecov/codecov-action, docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action, github/codeql-action, pypa/gh-action-pypi-publish, renovatebot/github-action, reviewdog/action-actionlint, snok/container-retention-policy)
• Update Python patch/minor (APScheduler, Babel, Flask-SQLAlchemy, PyJWT, PyYAML, RestrictedPython, Unidecode, astroid, authlib, beautifulsoup4, cattrs, celery, chardet, charset-normalizer, click, coverage, dateparser, esbonio, falcon, flask-admin, flask-bcrypt, flask-cors, flask-jwt-extended, flask-migrate, flask-restful, furo, granian, idna, imagesize, jsonschema, livereload, lxml, markdown-it-py, mdit-py-plugins, mypy, mysqlclient, myst-parser, pre-commit, pre-commit-hooks, prometheus-flask-exporter, psycopg2, pygments, pyinstrument, pytest, pytest-random-order, python, pytz, requests, ruff, safety, sentry-sdk, simplejson, soupsieve, sphinx-autoapi, sphinx-autobuild, sphinx-click, sphinx-rtd-theme, sphinx-tags, spiff-arena-common, sqlalchemy, starlette, tornado, typeguard, types-authlib, types-dateparser, types-jsonschema, types-pytz, types-pyyaml, types-requests, typing-extensions, uvicorn, uvicorn-worker, werkzeug, wrapt, xdoctest)
• Update npm patch/minor (@bpmn-io/properties-panel, @carbon/colors, @carbon/icons-react, @carbon/react, @casl/ability, @codemirror/state, @eslint/compat, @eslint/eslintrc, @mui/icons-material, @mui/material, @mui/x-data-grid, @mui/x-tree-view, @preact/preset-vite, @rjsf/core, @rjsf/mui, @rjsf/utils, @rjsf/validator-ajv8, @rollup/plugin-commonjs, @rollup/plugin-node-resolve, @rollup/plugin-typescript, @tanstack/react-query, @tanstack/react-query-devtools, @testing-library/jest-dom, @testing-library/react, @types/lodash, @types/node, @types/react, @types/react-dom, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, @uiw/react-codemirror, @uiw/react-md-editor, @vitest/coverage-v8, autoprefixer, bpmn-js, bpmn-js-properties-panel, cookie, date-fns, diagram-js, dmn-js, dmn-js-properties-panel, dompurify, eslint, eslint-import-resolver-typescript, eslint-plugin-import-x, eslint-plugin-prettier, eslint-plugin-sonarjs, eslint-plugin-unused-imports, i18next, i18next-browser-languagedetector, prettier, react, react-codemirror-merge, react-dom, react-error-boundary, react-i18next, react-icons, react-router, react-router-dom, rollup, rxjs, sass-embedded, typescript, typescript-eslint, use-debounce, vite, vite-plugin-svgr, vitest, zod)
• Update python Docker tag
• Update dependency @casl/ability to v7
• Update dependency @casl/react to v7
• Update dependency @rollup/plugin-commonjs to v29
• Update dependency @rollup/plugin-node-resolve to v16
• Update dependency @testing-library/jest-dom to v7
• Update dependency alabaster to v1
• Update dependency astroid to v4
• Update dependency attrs to v26
• Update dependency cattrs to v26
• Update dependency certifi to v2026
• Update dependency cookie to v2
• Update dependency cryptography to v50
• Update dependency esbonio to v2
• Update dependency i18next to v26
• Update dependency imagesize to v2
• Update dependency jsdom to v30
• Update dependency packaging to v26
• Update dependency react-error-boundary to v6
• Update dependency react-i18next to v17
• Update dependency setuptools to v83
• Update dependency snowballstemmer to v3
• Update dependency Sphinx to v9
• Update dependency sphinx-autobuild to v2025
• Update dependency sphinxcontrib-mermaid to v2
• Update dependency typescript to v7
• Update dependency vite to v8
• Update dependency vite-plugin-svgr to v5
• Update dependency vite-tsconfig-paths to v6
• Update dependency wrapt to v2
• Update GitHub Actions (major) (actions/checkout, actions/download-artifact, actions/setup-node, actions/setup-python, actions/upload-artifact, codecov/codecov-action, github/codeql-action)
• Update material-ui monorepo to v9 (@mui/icons-material, @mui/material, @mui/x-data-grid, @mui/x-tree-view)
• Update mysql Docker tag to v26
• Update Node.js to v24.18.1 (node, @types/node)
• Update react monorepo to v19 (@types/react, @types/react-dom, react, react-dom)
• Update react-router monorepo (major) (react-router, react-router-dom)
• Update vitest monorepo to v4 (@vitest/coverage-v8, vitest)
• 🔐 Create all awaiting schedule PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up github-tags package aquasecurity/trivy-action: no-result, Failed to look up github-releases package aquasecurity/trivy: no-result.

Files affected: .github/workflows/build_docker_images.yml

---

Detected Dependencies

asdf (4)

.tool-versions (1)

• python 3.13.12 → [Updates: 3.14.6, 3.13.12]

connector-proxy-demo/.tool-versions (1)

• python 3.11.0 → [Updates: 3.14.6, 3.11.0]

connector-proxy-demo/connector-example/.tool-versions (1)

• python 3.11.0 → [Updates: 3.14.6, 3.11.0]

spiffworkflow-frontend/.tool-versions (1)

• node 24.13.0 → [Updates: 24.18.1]

docker-compose (4)

connector-proxies/async-http/docker-compose.yml

docker-compose.yml (4)

• ghcr.io/sartography/spiffworkflow-frontend latest → [Updates: latest]
• alpine unknown version → [Updates: undefined]
• ghcr.io/sartography/spiffworkflow-backend latest → [Updates: latest]
• ghcr.io/sartography/connector-proxy-async-http main-latest → [Updates: main-latest]

spiffworkflow-backend/docker-compose.yml (1)

• mysql 8.0.29 → [Updates: 8.4.11, 26.7.0, 8.0.29]

spiffworkflow-frontend/docker-compose.yml

dockerfile (12)

connector-proxies/aggregate/dev.Dockerfile (1)

• nginx 1.31.1-alpine → [Updates: 1.31.3-alpine, 1.31.1-alpine]

connector-proxies/aggregate/Dockerfile (1)

• nginx 1.31.1-alpine → [Updates: 1.31.3-alpine, 1.31.1-alpine]

connector-proxies/async-http/dev.Dockerfile (1)

• python 3.13.13-slim-trixie → [Updates: 3.14.6-slim-trixie, 3.13.13-slim-trixie]

connector-proxies/async-http/Dockerfile (1)

• python 3.13.13-slim-trixie → [Updates: 3.14.6-slim-trixie, 3.13.13-slim-trixie]

connector-proxy-demo/dev.Dockerfile (1)

• python 3.13.13-slim-trixie → [Updates: 3.14.6-slim-trixie, 3.13.13-slim-trixie]

connector-proxy-demo/Dockerfile (1)

• python 3.13.13-slim-trixie → [Updates: 3.14.6-slim-trixie, 3.13.13-slim-trixie]

dev.Dockerfile (1)

• python 3.13.13-slim-trixie → [Updates: 3.14.6-slim-trixie, 3.13.13-slim-trixie]

spiffworkflow-backend/dev.Dockerfile (1)

• python 3.13.13-slim-trixie → [Updates: 3.14.6-slim-trixie, 3.13.13-slim-trixie]

spiffworkflow-backend/Dockerfile (1)

• python 3.13.13-slim-trixie → [Updates: 3.14.6-slim-trixie, 3.13.13-slim-trixie]

spiffworkflow-backend/keycloak/Dockerfile (2)

• quay.io/keycloak/keycloak 22.0.4 → [Updates: 22.0.5, 26.7.0, 22.0.4]
• quay.io/keycloak/keycloak 22.0.4 → [Updates: 22.0.5, 26.7.0, 22.0.4]

spiffworkflow-frontend/dev.Dockerfile (1)

• node 24.15.0-trixie-slim → [Updates: 24.18.1-trixie-slim, 24.15.0-trixie-slim]

spiffworkflow-frontend/Dockerfile (2)

• node 24.15.0-trixie-slim → [Updates: 24.18.1-trixie-slim, 24.15.0-trixie-slim]
• nginx 1.31.1-alpine → [Updates: 1.31.3-alpine, 1.31.1-alpine]

github-actions (13)

.github/workflows/actionlint.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• reviewdog/action-actionlint v1.72.0@6fb7acc99f4a1008869fa8a0f09cfca740837d9d → [Updates: v1.73.0]

.github/workflows/auto-merge-dependabot-prs.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3

.github/workflows/build_docker_images.yml (9)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• docker/setup-buildx-action v4@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4]
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4.6.0]
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf → [Updates: v6.2.0]
• docker/build-push-action v7.0.0@d08e5c354a6adb9ed34480a06d141179aa583294 → [Updates: v7.3.0]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.34.1 → [Updates: v4.37.4, v4.34.1]
• docker/build-push-action v7.0.0@d08e5c354a6adb9ed34480a06d141179aa583294 → [Updates: v7.3.0]
• aquasecurity/trivy v0.70.0

.github/workflows/common.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v7, v6]
• pypa/gh-action-pypi-publish release/v1@cef221092ed1bacb1cc03d23a2d87d1d172e277b → [Updates: release/v1]
• python 3.12

.github/workflows/connector-proxy-agg.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• superfly/flyctl-actions master@ed8efb33836e8b2096c7fd3ba1c8afe303ebbff1

.github/workflows/connector-proxy-async-http.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• superfly/flyctl-actions master@ed8efb33836e8b2096c7fd3ba1c8afe303ebbff1

.github/workflows/container_retention_policy.yml (1)

• snok/container-retention-policy v3.0.1@3b0972b2276b171b212f8c4efbca59ebba26eceb → [Updates: v3.1.0]

.github/workflows/dev_containers.yml (1)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]

.github/workflows/docs.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v7, v6]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• python 3.12

.github/workflows/renovate.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• renovatebot/github-action v46.1.7@3633cede7d4d4598438e654eac4a695e46004420 → [Updates: v46.2.0]

.github/workflows/slack_notify.yml

.github/workflows/tests.yml (27)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v7, v6]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v7, v6]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• codecov/codecov-action v6.0.0@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 → [Updates: v6.0.2, v7.0.0]
• sonarsource/sonarcloud-github-action v5.0.0@ffc3010689be73b8e5ae0c57ce35968afd7909e8
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f → [Updates: v6.5.0, v7.0.0]
• sonarsource/sonarcloud-github-action v5.0.0@ffc3010689be73b8e5ae0c57ce35968afd7909e8
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v7, v6]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• python ${{ matrix.python }}
• python 3.12
• python 3.11
• node 24.x
• python 3.12

.github/workflows/zizmor.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• github/codeql-action v3@38697555549f1db7851b81482ff19f1fa5c4fedc → [Updates: v4, v3]

npm (2)

spiffworkflow-frontend/package.json (87)

• @bpmn-io/properties-panel ^3.41.2 → [Updates: ^3.48.0]
• @carbon/colors ^11.38.0 → [Updates: ^11.55.0]
• @carbon/icons-react ^11.65.0 → [Updates: ^11.85.0]
• @carbon/react ^1.89.0 → [Updates: ^1.113.0]
• @casl/ability ^6.7.1 → [Updates: ^6.8.1, ^7.0.1]
• @casl/react ^6.0.0 → [Updates: ^7.0.1]
• @codemirror/lang-json ^6.0.2
• @codemirror/lang-python ^6.2.1
• @codemirror/lang-xml ^6.1.0
• @codemirror/state ^6.6.0 → [Updates: ^6.7.1]
• @emotion/react ^11.14.0
• @emotion/styled ^11.14.1
• @microsoft/fetch-event-source ^2.0.1
• @mui/icons-material ^7.0.0 → [Updates: ^7.3.11, ^9.2.0]
• @mui/material ^7.3.5 → [Updates: ^7.3.11, ^9.2.0]
• @mui/x-data-grid ^7.25.0 → [Updates: ^7.29.13, ^9.10.1]
• @mui/x-tree-view ^7.25.0 → [Updates: ^7.29.10, ^9.10.1]
• @preact/preset-vite ^2.10.2 → [Updates: ^2.10.6]
• @rjsf/core ^6.5.1 → [Updates: ^6.7.1]
• @rjsf/mui ^6.5.1 → [Updates: ^6.7.1]
• @rjsf/utils ^6.5.1 → [Updates: ^6.7.1]
• @rjsf/validator-ajv8 ^6.5.1 → [Updates: ^6.7.1]
• @tanstack/react-query ^5.40.0 → [Updates: ^5.101.4]
• @tanstack/react-query-devtools ^5.68.0 → [Updates: ^5.101.4]
• @types/jest ^30.0.0
• @types/react ^19.2.14 → [Updates: ^19.2.18]
• @types/react-dom ^19.2.3 → [Updates: ^19.2.4]
• @uiw/react-codemirror ^4.25.8 → [Updates: ^4.25.11]
• @uiw/react-md-editor ^4.0.8 → [Updates: ^4.1.1]
• ajv-errors ^3.0.0
• bpmn-js ^18.9.1 → [Updates: ^18.22.1]
• bpmn-js-cli ^2.4.0
• bpmn-js-properties-panel ^5.44.0 → [Updates: ^5.63.0]
• cookie ^1.0.2 → [Updates: ^1.1.1, ^2.0.1]
• date-fns ^4.1.0 → [Updates: ^4.4.0]
• diagram-js ^15.4.0 → [Updates: ^15.23.2]
• dmn-js ^17.8.1 → [Updates: ^17.10.1]
• dmn-js-properties-panel ^3.8.3 → [Updates: ^3.11.1]
• dompurify ^3.2.6 → [Updates: ^3.4.12]
• i18next ^25.4.2 → [Updates: ^25.10.10, ^26.3.6]
• i18next-browser-languagedetector ^8.0.0 → [Updates: ^8.2.1]
• jwt-decode ^4.0.0
• lodash.merge ^4.6.2
• react ^19.2.5 → [Updates: ^19.2.8]
• react-codemirror-merge ^4.25.8 → [Updates: ^4.25.11]
• react-datepicker ^9.1.0
• react-dom ^19.2.5 → [Updates: ^19.2.8]
• react-error-boundary ^4.0.13 → [Updates: ^4.1.2, ^6.1.2]
• react-i18next ^15.0.0 → [Updates: ^15.7.4, ^17.0.11]
• react-icons ^5.2.1 → [Updates: ^5.7.0]
• react-router ^6.24.1 → [Updates: ^6.30.4, ^8.3.0]
• react-router-dom ^6.25.1 → [Updates: ^6.30.4, ^7.18.2]
• rxjs ^7.8.1 → [Updates: ^7.8.2]
• typescript ^5.0.0 → [Updates: ^5.9.3, ^7.0.2]
• use-debounce ^10.0.1 → [Updates: ^10.1.1]
• vite ^7.1.3 → [Updates: ^7.3.6, ^8.2.0]
• vite-plugin-svgr ^4.3.0 → [Updates: ^4.5.0, ^5.2.0]
• vite-tsconfig-paths ^5.1.4 → [Updates: ^6.1.1]
• zod ^4.1.12 → [Updates: ^4.4.3]
• @eslint/compat ^2.0.5 → [Updates: ^2.1.0]
• @eslint/eslintrc ^3.3.5 → [Updates: ^3.3.6]
• @testing-library/dom ^10.4.1
• @testing-library/jest-dom ^6.6.3 → [Updates: ^6.9.1, ^7.0.0]
• @testing-library/react ^16.3.0 → [Updates: ^16.3.2]
• @types/carbon__colors ^10.31.3
• @types/lodash ^4.17.20 → [Updates: ^4.17.25]
• @types/node ^20.12.13 → [Updates: ^20.19.43, ^24.13.3]
• @typescript-eslint/eslint-plugin ^8.59.0 → [Updates: ^8.65.0]
• @typescript-eslint/parser ^8.59.0 → [Updates: ^8.65.0]
• @vitest/coverage-v8 ^3.2.4 → [Updates: ^3.2.7, ^4.1.10]
• eslint ^10.1.0 → [Updates: ^10.8.0]
• eslint-config-prettier ^10.1.8
• eslint-import-resolver-typescript ^4.4.4 → [Updates: ^4.4.5]
• eslint-plugin-import-x ^4.16.2 → [Updates: ^4.17.1]
• eslint-plugin-jsx-a11y ^6.10.2
• eslint-plugin-prettier ^5.5.4 → [Updates: ^5.5.6]
• eslint-plugin-react ^7.37.5
• eslint-plugin-react-hooks ^7.1.1
• eslint-plugin-sonarjs ^4.0.3 → [Updates: ^4.2.0]
• eslint-plugin-unused-imports ^4.1.4 → [Updates: ^4.4.1]
• jsdom ^26.1.0 → [Updates: ^30.0.1]
• prettier ^3.8.3 → [Updates: ^3.9.6]
• sass-embedded ^1.99.0 → [Updates: ^1.100.0]
• typescript-eslint ^8.59.0 → [Updates: ^8.65.0]
• vitest ^3.2.4 → [Updates: ^3.2.7, ^4.1.10]
• autoprefixer 10.4.5 → [Updates: 10.5.4]
• yaml ^2.9.0

spiffworkflow-frontend/packages/bpmn-js-spiffworkflow-react/package.json (18)

• bpmn-js-cli ^2.4.0
• @rollup/plugin-commonjs ^28.0.0 → [Updates: ^28.0.9, ^29.0.3]
• @rollup/plugin-node-resolve ^15.3.0 → [Updates: ^15.3.1, ^16.0.3]
• @rollup/plugin-typescript ^12.1.1 → [Updates: ^12.3.0]
• @types/react ^18.3.3 → [Updates: ^18.3.31, ^19.2.18]
• @types/react-dom ^18.3.1 → [Updates: ^18.3.7, ^19.2.4]
• rollup ^4.27.0 → [Updates: ^4.62.4]
• rollup-plugin-peer-deps-external ^2.2.4
• rollup-plugin-postcss ^4.0.2
• typescript ^5.0.0 → [Updates: ^5.9.3, ^7.0.2]
• react ^18.3.1 → [Updates: ^19.2.8]
• react-dom ^18.3.1 → [Updates: ^19.2.8]
• bpmn-js ^17.0.0 || ^18.0.0
• bpmn-js-properties-panel ^5.0.0 → [Updates: ^5.63.0]
• bpmn-js-spiffworkflow *
• dmn-js ^17.0.0 → [Updates: ^17.10.1]
• dmn-js-properties-panel ^3.0.0 → [Updates: ^3.11.1]
• diagram-js ^14.0.0 || ^15.0.0

pep621 (5)

connector-proxy-demo/connector-example/pyproject.toml

connector-proxy-demo/pyproject.toml (1)

• pytest >=9.0.3,<10.0.0 → [Updates: >=9.1.1,<10.0.0]

pyproject.toml (3)

• python >=3.11,<3.13 → [Updates: >=3.14.6,<3.15]
• jsonschema >= 4.23.0 → [Updates: >=4.26.0]
• spiffworkflow ==3.1.2

spiff-arena-common/pyproject.toml (1)

• python >=3.10, <3.13 → [Updates: >=3.14.6, <3.15]

spiffworkflow-backend/pyproject.toml (61)

• python >=3.10 → [Updates: >=3.14.6]
• flask == 3.1.3
• flask-admin >=1.5.8 → [Updates: >=1.6.1, >=2.2.0]
• flask-bcrypt >=0.7.1 → [Updates: >=1.0.1]
• flask-cors >=3.0.10 → [Updates: >=6.0.5]
• flask-jwt-extended >=4.7.1 → [Updates: >=4.7.4]
• flask-migrate >=4.0.0 → [Updates: >=4.1.0]
• flask-restful >=0.3.9 → [Updates: >=0.3.10]
• SpiffWorkflow v3.1.3a3 → [Updates: v3.1.3a3]
• sentry-sdk >=2.26 → [Updates: >=2.66.1]
• psycopg2 >= 2.9.10, <2.10 → [Updates: >=2.9.12, <2.10]
• typing-extensions >= 4.12.2 → [Updates: >=4.16.0]
• werkzeug >= 3.1.6 → [Updates: >=3.1.8]
• connexion == 3.3.0
• lxml >= 6.1.0 → [Updates: >=6.1.1]
• PyJWT >= 2.10.1 → [Updates: >=2.13.0]
• APScheduler >=3.6.0 → [Updates: >=3.11.3]
• Jinja2 >= 3.1.6
• RestrictedPython >= 8.0 → [Updates: >=8.4]
• Flask-SQLAlchemy >= 3 → [Updates: >=3.1.1]
• uvicorn >= 0.30.1 → [Updates: >=0.52.0]
• simplejson >= 3.20.1 → [Updates: >=3.20.2, >=4.1.1]
• pytz >= 2025.2 → [Updates: >=2026.3.post1]
• dateparser >= 1.2.0 → [Updates: >=1.4.1]
• cryptography >= 46.0.7 → [Updates: >=50.0.0]
• prometheus-flask-exporter >= 0.23.1 → [Updates: >=0.23.2]
• sqlalchemy >= 2.0.31 → [Updates: >=2.0.51]
• mysqlclient >= 2.2.6 → [Updates: >=2.2.8]
• flask-session >= 0.8.0
• celery >= 5.4.0 → [Updates: >=5.6.3]
• celery-stubs >= 0.1.3
• jsonschema >= 4.23.0 → [Updates: >=4.26.0]
• chardet >= 5.2.0 → [Updates: >=7.4.3]
• security >= 1.3.1
• spiff-arena-common >=0.1.0 → [Updates: >=0.1.44]
• authlib >=1.6.11 → [Updates: >=1.7.2]
• starlette >=0.47.2 → [Updates: >=0.52.1, >=1.3.1]
• uvicorn-worker >=0.3.0 → [Updates: >=0.4.0]
• coverage >= 7.13.5 → [Updates: >=7.15.2]
• safety >= 3.2.14 → [Updates: >=3.8.1]
• mypy >= 0.961 → [Updates: >=0.991, >=2.3.0]
• typeguard >= 4 → [Updates: >=4.6.0]
• xdoctest >= 1.2.0 → [Updates: >=1.3.2]
• pre-commit >= 4.0.1 → [Updates: >=4.6.1]
• ruff >= 0.11.5 → [Updates: >=0.16.1]
• pytest-random-order >= 1.1.0 → [Updates: >=1.2.0]
• pytest-flask-sqlalchemy >= 1.1.0
• pytest-xdist == 3.8.0
• bandit == 1.9.4
• pre-commit-hooks >= 5.0.0 → [Updates: >=6.0.0]
• pygments >= 2.19.1 → [Updates: >=2.20.0]
• types-flask >= 1.1.6
• types-pyyaml >= 6.0.12 → [Updates: >=6.0.12.20260724]
• types-werkzeug >= 1.0.9
• types-authlib >=1.5.0.20250608 → [Updates: >=1.7.2.20260724]
• types-dateparser >= 1.2.0.20250208 → [Updates: >=1.4.1.20260617]
• types-pytz >= 2024.2.0 → [Updates: >=2024.2.0.20241221, >=2026.3.1.20260727]
• types-requests >= 2.32.0 → [Updates: >=2.33.0.20260712]
• pytest >=8.3.5 → [Updates: >=8.4.2, >=9.1.1]
• setuptools >=78.1.1 → [Updates: >=83.0.0]
• types-jsonschema >=4.25.1.20250822 → [Updates: >=4.26.0.20260518]

pip_requirements (2)

connector-proxies/async-http/requirements.txt (5)

• falcon ==4.0.2 → [Updates: ==4.3.1]
• granian ==2.7.4 → [Updates: ==2.7.9]
• httpx ==0.28.1
• orjson ==3.11.9
• pyinstrument ==5.0.2 → [Updates: ==5.1.3]

docs/requirements.txt (53)

• alabaster ==0.7.16 → [Updates: ==1.0.0]
• appdirs ==1.4.4
• astroid ==3.2.4 → [Updates: ==3.3.11, ==4.1.2]
• attrs >=24.3.0 → [Updates: >=26.1.0]
• Babel ==2.17.0 → [Updates: ==2.18.0]
• beautifulsoup4 ==4.12.3 → [Updates: ==4.15.0]
• cattrs ==25.1.1 → [Updates: ==25.3.0, ==26.1.0]
• certifi ==2025.11.12 → [Updates: ==2026.7.22]
• charset-normalizer ==3.4.7 → [Updates: ==3.4.9]
• click ==8.1.7 → [Updates: ==8.4.2]
• colorama ==0.4.6
• esbonio ==0.16.4 → [Updates: ==0.16.5, ==2.1.0]
• furo ==2025.7.19 → [Updates: ==2025.12.19]
• idna ==3.15 → [Updates: ==3.18]
• imagesize ==1.4.1 → [Updates: ==1.5.0, ==2.0.0]
• Jinja2 ==3.1.6
• lazy-object-proxy ==1.12.0
• livereload ==2.7.0 → [Updates: ==2.7.1]
• lsprotocol ==2025.0.0
• markdown-it-py ==4.0.0 → [Updates: ==4.2.0]
• MarkupSafe ==3.0.3
• mdit-py-plugins ==0.5.0 → [Updates: ==0.6.1]
• mdurl ==0.1.2
• myst-parser ==5.0.0 → [Updates: ==5.1.0]
• packaging ==25.0 → [Updates: ==26.2]
• pygls ==2.1.1
• Pygments ==2.20.0
• pyspellchecker ==0.9.0
• PyYAML ==6.0.1 → [Updates: ==6.0.3]
• requests ==2.33.1 → [Updates: ==2.34.2]
• six ==1.17.0
• snowballstemmer ==2.2.0 → [Updates: ==3.1.1]
• soupsieve ==2.7 → [Updates: ==2.9.1]
• Sphinx ==8.2.3 → [Updates: ==9.1.0]
• sphinx-autoapi ==3.6.0 → [Updates: ==3.8.0]
• sphinx-autobuild ==2024.4.16 → [Updates: ==2024.10.3, ==2025.8.25]
• sphinx-basic-ng ==1.0.0b2
• sphinx-click ==6.0.0 → [Updates: ==6.2.0]
• sphinx-rtd-theme ==3.0.2 → [Updates: ==3.1.0]
• sphinxcontrib-applehelp ==2.0.0
• sphinxcontrib-devhelp ==2.0.0
• sphinxcontrib-htmlhelp ==2.1.0
• sphinxcontrib-jquery ==4.1
• sphinxcontrib-jsmath ==1.0.1
• sphinxcontrib-qthelp ==2.0.0
• sphinxcontrib-serializinghtml ==2.0.0
• sphinxcontrib-mermaid ==0.9.2 → [Updates: ==2.1.0]
• sphinx-tags ==0.1.0 → [Updates: ==0.4]
• tornado ==6.5.5 → [Updates: ==6.5.7]
• typeguard ==4.3.0 → [Updates: ==4.6.0]
• Unidecode ==1.3.8 → [Updates: ==1.4.0]
• urllib3 ==2.7.0
• wrapt ==1.16.0 → [Updates: ==1.17.3, ==2.3.0]

pyenv (1)

spiff-arena-common/.python-version (1)

• python 3.12 → [Updates: 3.14]