Dependency Dashboard

[balena-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@types/terser-webpack-plugin
npm	grunt-check-dependencies
npm	request
npm	require-npm4-to-publish

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (23)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
npm	@sindresorhus/fnv1a	2023-11-16
npm	bcrypt	2025-05-11
npm	busboy	2022-04-19
npm	cookie-parser	2024-10-08
npm	deep-freeze	2012-09-04
npm	grunt-cli	2024-07-20
npm	grunt-contrib-clean	2022-04-16
npm	grunt-contrib-concat	2022-04-03
npm	grunt-contrib-copy	2016-03-04
npm	grunt-contrib-rename	2017-04-30
npm	grunt-gitinfo	2019-07-17
npm	grunt-text-replace	2014-11-23
npm	grunt-ts	2019-01-22
npm	husky	2024-11-18
npm	json-schema-to-ts	2024-08-29
npm	load-grunt-tasks	2019-07-31
npm	memoizee	2024-05-24
npm	method-override	2018-07-12
npm	mysql	2020-01-23
npm	on-finished	2022-02-22
npm	passport	2023-11-27
npm	passport-local	2014-03-08
npm	raw-loader	2020-10-09

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Lock file maintenance

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update dependency supertest to v7.3.1

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Pin pgsty/minio Docker tag to b6bfe72
• Update dependency mocha to v12
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency express to v5 (express, @types/express)
• Update dependency serve-static to v2
• Update Node.js to v22
• Update Node.js to v24 (node, @types/node)
• Update dependency typescript to v7

Detected Dependencies

docker-compose (1)

docker-compose.npm-test.yml (3)

• postgres 18-alpine@sha256:77f585114c32fbca283dc835b0596f4e52b51b4c6662d7810b2f4084f60a1873
• pgsty/minio RELEASE.2026-08-04T00-00-00Z → [Updates: RELEASE.2026-08-04T00-00-00Z]
• pgsty/mc RELEASE.2026-09-16T00-00-00Z@sha256:cfc83108c3abb371f8fb84d99c1fdc88f8c237e022409b0081fb7c0a3be634dd

dockerfile (1)

Dockerfile (1)

• node 20-alpine@sha256:fb4cd12c85ee03686f6af5362a0b0d56d50c58a04632e6c0fb8363f609372293 → [Updates: 22-alpine, 24-alpine]

github-actions (1)

.github/workflows/flowzone.yml (1)

• product-os/flowzone master

npm (1)

package.json (97)

• @balena/abstract-sql-compiler ^11.3.18
• @balena/abstract-sql-to-typescript ^6.1.19
• @balena/env-parsing ^1.2.6
• @balena/lf-to-abstract-sql ^6.0.3
• @balena/odata-parser ^4.3.0
• @balena/odata-to-abstract-sql ^10.0.4
• @balena/sbvr-parser ^1.4.13
• @balena/sbvr-types ^11.3.0
• @sindresorhus/fnv1a ^3.1.0
• @types/compression ^1.8.1
• @types/cookie-parser ^1.4.9
• @types/deep-freeze ^0.1.5
• @types/express ^4.17.23 → [Updates: ^5.0.0]
• @types/express-session ^1.18.2
• @types/lodash ^4.17.20
• @types/memoizee ^0.4.12
• @types/method-override ^3.0.0
• @types/mysql ^2.15.27
• @types/node ^22.2.0 → [Updates: ^24.0.0]
• @types/passport ^1.0.17
• @types/passport-local ^1.0.38
• @types/passport-strategy ^0.2.38
• @types/pg ^8.15.5
• @types/randomstring ^1.3.0
• @types/websql ^0.0.30
• ajv ^8.17.1
• busboy ^1.6.0
• commander ^15.0.0
• cron-parser ^5.4.0
• deep-freeze ^0.0.1
• eventemitter3 ^5.0.1
• express-session ^1.18.2
• json-schema-to-ts ^3.1.1
• lodash ^4.17.21
• memoizee ^0.4.17
• pinejs-client-core ^8.5.29
• randomstring ^1.3.1
• typed-error ^3.2.2
• zod ^4.4.3
• @balena/lint ^9.3.8 → [Updates: 9.4.10]
• @balena/pinejs-webresource-s3 ^2.1.27 → [Updates: 2.1.47]
• @faker-js/faker 10.6.0
• @swc-node/register 1.12.1
• @swc/core 1.16.13
• @types/busboy 1.5.4
• @types/chai 5.2.3
• @types/grunt 0.4.32
• @types/mocha 10.0.10
• @types/on-finished 2.3.5
• @types/request 2.48.13
• @types/supertest 7.2.1
• @types/terser-webpack-plugin 5.2.0
• @types/webpack 5.28.5
• chai 6.3.0
• grunt 1.6.3
• grunt-check-dependencies 1.0.0
• grunt-cli 1.5.0
• grunt-contrib-clean 2.0.1
• grunt-contrib-concat 2.1.0
• grunt-contrib-copy 1.0.0
• grunt-contrib-rename 0.2.0
• grunt-gitinfo 0.1.9
• grunt-text-replace 0.4.0
• grunt-ts 6.0.0-beta.22
• grunt-webpack 8.0.0
• husky 9.1.7
• lint-staged 17.6.0
• load-grunt-tasks 5.1.0
• mocha 11.8.0 → [Updates: 12.0.3]
• on-finished 2.4.1
• pinejs-client-supertest 3.2.3
• raw-loader 4.0.2
• request 2.88.2
• require-npm4-to-publish 1.0.0
• supertest 7.3.0 → [Updates: 7.3.1]
• terser-webpack-plugin 5.6.1
• ts-loader 9.6.2
• typescript 6.0.3 → [Updates: 7.0.2]
• webpack 5.111.1
• webpack-dev-server 6.0.0
• @aws-sdk/client-s3 ^3.1081.0
• @aws-sdk/lib-storage ^3.1081.0
• @aws-sdk/s3-request-presigner ^3.1081.0
• bcrypt ^6.0.0
• body-parser ^2.3.0
• compression ^1.8.1
• cookie-parser ^1.4.7
• express ^4.22.2 → [Updates: ^5.0.0]
• method-override ^3.0.0
• mysql ^2.18.1
• passport ^0.7.0
• passport-local ^1.0.0
• pg ^8.22.0
• pg-connection-string ^2.14.0
• serve-static ^1.16.3 → [Updates: ^2.0.0]
• node ^22.2.0 || ^24.5.0
• npm >=10.7.0

regex (1)

.github/workflows/flowzone.yml (1)

• flowzonify 0.4.0 → [Updates: 0.4.14]