Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Update actions/checkout action to v7
• Update actions/dependency-review-action action to v5
• Update actions/setup-node action to v7
• Update actions/setup-python action to v7
• Update actions/upload-artifact action to v7
• Update dependency vite to v8
• Update github/codeql-action action to v4
• Update gitleaks/gitleaks-action action to v3
• Update Node.js to v24
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Lock file maintenance

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update step-security/harden-runner action to v2.21.1
• Update dependency pyproj to v3.8.0
• Update dependency zizmor to v1.30.1

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update github/codeql-action action to v3.37.9

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

github-actions (7)

.github/workflows/ci.yml (7)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c → [Updates: v2.21.1]
• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v7.0.0]
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v7.0.0]
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• node 22 → [Updates: 24]
• python 3.14

.github/workflows/codeql.yml (5)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c → [Updates: v2.21.1]
• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• github/codeql-action v3.37.8@42947a340483f03ba47bb1a039b2c519aab3df85 → [Updates: v3.37.9, v4.37.9]
• github/codeql-action v3.37.8@42947a340483f03ba47bb1a039b2c519aab3df85 → [Updates: v3.37.9, v4.37.9]
• github/codeql-action v3.37.8@42947a340483f03ba47bb1a039b2c519aab3df85 → [Updates: v3.37.9, v4.37.9]

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c → [Updates: v2.21.1]
• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/dependency-review-action v4.9.0@2031cfc080254a8a887f58cffee85186f0e49e48 → [Updates: v5.0.0]

.github/workflows/gitleaks.yml (3)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c → [Updates: v2.21.1]
• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• gitleaks/gitleaks-action v2.3.9@ff98106e4c7b2bc287b24eaf42907196329070c7 → [Updates: v3.0.0]

.github/workflows/release.yml (7)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c → [Updates: v2.21.1]
• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v7.0.0]
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c → [Updates: v2.21.1]
• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• node 22 → [Updates: 24]

.github/workflows/scorecard.yml (5)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c → [Updates: v2.21.1]
• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• github/codeql-action v3.37.8@42947a340483f03ba47bb1a039b2c519aab3df85 → [Updates: v3.37.9, v4.37.9]

.github/workflows/workflow-lint.yml (4)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c → [Updates: v2.21.1]
• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v7.0.0]
• python 3.14

npm (1)

package.json (4)

• @vercel/analytics ^2.0.1
• leaflet ^1.9.4
• vite ^7.0.0 → [Updates: ^8.0.0]
• node 22.x → [Updates: 24.x]

pip_requirements (2)

.github/zizmor-requirements.txt (1)

• zizmor ==1.29.0 → [Updates: ==1.30.1]

scripts/requirements.txt (4)

• openpyxl ==3.1.5
• et-xmlfile ==2.0.0
• pyproj ==3.7.2 → [Updates: ==3.8.0]
• certifi ==2026.7.22

---

• Check this box to trigger a request for Renovate to run again on this repository