humanprotocol · dnechay · Jul 9, 2026 · Jul 9, 2026 · Jul 10, 2026 · Jul 10, 2026
diff --git a/.github/dependabot.yml → .github/_dependabot.yml b/.github/dependabot.yml → .github/_dependabot.yml
diff --git a/.github/workflows/cd-packages.yaml b/.github/workflows/cd-packages.yaml
@@ -39,7 +39,7 @@ jobs:
         run: |
           git config --global user.name "github-actions[bot]"
           git config --global user.email "github-actions[bot]@users.noreply.github.com"
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: yarn

diff --git a/.github/workflows/cd-python-sdk.yaml b/.github/workflows/cd-python-sdk.yaml
@@ -30,12 +30,12 @@ jobs:
         run: |
           git config --global user.name "github-actions[bot]"
           git config --global user.email "github-actions[bot]@users.noreply.github.com"
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: yarn
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: "3.x"
       - name: Read package version

diff --git a/.github/workflows/cd-subgraph-hmt.yaml b/.github/workflows/cd-subgraph-hmt.yaml
@@ -30,7 +30,7 @@ jobs:
       max-parallel: 3
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: yarn

diff --git a/.github/workflows/cd-subgraph-human.yaml b/.github/workflows/cd-subgraph-human.yaml
@@ -30,7 +30,7 @@ jobs:
       max-parallel: 3
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: yarn

diff --git a/.github/workflows/ci-lint-cvat-exchange-oracle.yaml b/.github/workflows/ci-lint-cvat-exchange-oracle.yaml
@@ -24,7 +24,7 @@ jobs:
         uses: snok/install-poetry@v1
         with:
           version: 1.8.4
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.10'
           cache: 'poetry'

diff --git a/.github/workflows/ci-lint-cvat-recording-oracle.yaml b/.github/workflows/ci-lint-cvat-recording-oracle.yaml
@@ -24,10 +24,10 @@ jobs:
         uses: snok/install-poetry@v1
         with:
           version: 1.8.4
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.10'
           cache: 'poetry'
           cache-dependency-path: ${{ env.WORKING_DIR }}/poetry.lock
-      - run: poetry install --no-root --only lint
+      - run: poetry install --no-root --only dev
       - run: poetry run pre-commit run --all-files
diff --git a/.github/workflows/ci-lint.yaml b/.github/workflows/ci-lint.yaml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: yarn

diff --git a/.github/workflows/ci-test-core.yaml b/.github/workflows/ci-test-core.yaml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: yarn

diff --git a/.github/workflows/ci-test-cvat-exchange-oracle.yaml b/.github/workflows/ci-test-cvat-exchange-oracle.yaml
@@ -15,4 +15,4 @@ jobs:
       - uses: actions/checkout@v7
       - name: CVAT Exchange Oracle tests
         working-directory: ./packages/examples/cvat/exchange-oracle
-        run: docker compose -f docker-compose.test.yml up --attach test --exit-code-from test
+        run: docker compose -f docker-compose.test.yml -f docker-compose.test.head.yml up --attach test --exit-code-from test
diff --git a/.github/workflows/ci-test-cvat-recording-oracle.yaml b/.github/workflows/ci-test-cvat-recording-oracle.yaml
@@ -15,4 +15,4 @@ jobs:
       - uses: actions/checkout@v7
       - name: CVAT Recording Oracle tests
         working-directory: ./packages/examples/cvat/recording-oracle
-        run: docker compose -f docker-compose.test.yml up --attach test --exit-code-from test
+        run: docker compose -f docker-compose.test.yml -f docker-compose.test.head.yml up --attach test --exit-code-from test
diff --git a/.github/workflows/ci-test-dashboard.yaml b/.github/workflows/ci-test-dashboard.yaml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: yarn

diff --git a/.github/workflows/ci-test-faucet-server.yaml b/.github/workflows/ci-test-faucet-server.yaml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: yarn

diff --git a/.github/workflows/ci-test-fortune.yaml b/.github/workflows/ci-test-fortune.yaml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: yarn
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: yarn

diff --git a/.github/workflows/ci-test-human-app.yaml b/.github/workflows/ci-test-human-app.yaml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: yarn

diff --git a/.github/workflows/ci-test-job-launcher.yaml b/.github/workflows/ci-test-job-launcher.yaml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: yarn

diff --git a/.github/workflows/ci-test-node-sdk.yaml b/.github/workflows/ci-test-node-sdk.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: yarn

diff --git a/.github/workflows/ci-test-python-sdk.yaml b/.github/workflows/ci-test-python-sdk.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: yarn
@@ -22,7 +22,7 @@ jobs:
       - name: Build core package
         run: yarn workspace @human-protocol/core build
       - name: Set up Python 3.10
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: "3.10"
       - name: Install pipenv

diff --git a/.github/workflows/ci-test-reputation-oracle.yaml b/.github/workflows/ci-test-reputation-oracle.yaml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: yarn

diff --git a/.github/workflows/ci-test-subgraph-hmt.yaml b/.github/workflows/ci-test-subgraph-hmt.yaml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: yarn

diff --git a/.github/workflows/ci-test-subgraph-human.yaml b/.github/workflows/ci-test-subgraph-human.yaml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: yarn

diff --git a/docker-setup/Makefile b/docker-setup/Makefile
@@ -16,15 +16,15 @@ infra-up: check-env-file
 infra-stop:
 	@docker compose --env-file .env.compose.local stop postgres redis minio minio-client
 
+# TODO: Revisit compose-native parallel builds once Docker Compose v5 parallel limits are reliable again.
 build-services: check-env-file
-	@# TODO: Revisit compose-native parallel builds once Docker Compose v5 parallel limits are reliable again.
 	@docker compose --env-file .env.compose.local config --services | \
 		xargs -n $(DOCKER_PARALLEL) docker compose --env-file .env.compose.local build
 	@docker compose --env-file .env.compose.local up --no-start
 
+# TODO: Revisit compose-native parallel builds once Docker Compose v5 parallel limits are reliable again.
 services-up: check-env-file
 	@service_names="$(wordlist 2, $(words $(MAKECMDGOALS)), $(MAKECMDGOALS))"; \
-	@# TODO: Revisit compose-native parallel builds once Docker Compose v5 parallel limits are reliable again.
 	if [ -n "$$service_names" ]; then \
 		printf '%s\n' $$service_names | xargs -n $(DOCKER_PARALLEL) docker compose --env-file .env.compose.local up -d; \
 	else \

diff --git a/packages/apps/dashboard/client/package.json b/packages/apps/dashboard/client/package.json
@@ -25,7 +25,7 @@
     "@mui/styled-engine-sc": "9.0.1",
     "@mui/system": "^9.0.1",
     "@mui/x-data-grid": "^8.7.0",
-    "@mui/x-date-pickers": "^9.2.0",
+    "@mui/x-date-pickers": "^9.9.0",
     "@tanstack/react-query": "^5.91.3",
     "@types/react-router-dom": "^5.3.3",
     "@types/recharts": "^1.8.29",
@@ -35,10 +35,10 @@
     "react": "^19.2.6",
     "react-dom": "^19.2.6",
     "react-number-format": "^5.4.5",
-    "react-router-dom": "^7.18.0",
+    "react-router-dom": "^7.18.1",
     "recharts": "^2.13.0-alpha.4",
     "simplebar-react": "^3.3.2",
-    "styled-components": "^6.3.11",
+    "styled-components": "^6.4.3",
     "swiper": "^11.1.3",
     "use-debounce": "^10.1.0",
     "vite-plugin-node-polyfills": "^0.25.0",

diff --git a/packages/apps/dashboard/server/package.json b/packages/apps/dashboard/server/package.json
@@ -27,22 +27,22 @@
     "@keyv/redis": "^5.1.5",
     "@nestjs/axios": "^4.0.1",
     "@nestjs/cache-manager": "^3.1.0",
-    "@nestjs/common": "^11.1.12",
+    "@nestjs/common": "^11.1.27",
     "@nestjs/config": "^4.0.2",
     "@nestjs/core": "^11.1.12",
     "@nestjs/mapped-types": "^2.1.1",
     "@nestjs/platform-express": "^11.1.12",
     "@nestjs/schedule": "^6.1.3",
     "@nestjs/swagger": "^11.2.5",
     "axios": "^1.3.1",
-    "cache-manager": "7.2.8",
+    "cache-manager": "7.2.9",
     "class-transformer": "^0.5.1",
     "class-validator": "0.14.1",
     "dayjs": "^1.11.20",
     "ethers": "~6.17.0",
     "joi": "^17.13.3",
     "keyv": "^5.5.5",
-    "lodash": "^4.17.21",
+    "lodash": "^4.18.1",
     "minio": "8.0.7",
     "reflect-metadata": "^0.2.2",
     "rxjs": "^7.2.0"

diff --git a/packages/apps/dashboard/server/src/common/config/cache-factory.config.ts b/packages/apps/dashboard/server/src/common/config/cache-factory.config.ts
@@ -1,4 +1,4 @@
-import { CacheModuleAsyncOptions } from '@nestjs/common/cache';
+import { CacheModuleAsyncOptions } from '@nestjs/cache-manager';
 import { ConfigModule } from '@nestjs/config';
 import * as _ from 'lodash';
 

diff --git a/packages/apps/faucet/client/package.json b/packages/apps/faucet/client/package.json
@@ -26,7 +26,7 @@
     "react": "^19.2.6",
     "react-dom": "^19.2.6",
     "react-loading-skeleton": "^3.3.1",
-    "react-router-dom": "^7.18.0",
+    "react-router-dom": "^7.18.1",
     "serve": "^14.2.6",
     "viem": "^2.52.2"
   },

diff --git a/packages/apps/fortune/exchange-oracle/client/package.json b/packages/apps/fortune/exchange-oracle/client/package.json
@@ -32,14 +32,14 @@
     "@human-protocol/sdk": "workspace:^",
     "@mui/icons-material": "^7.3.8",
     "@mui/material": "^5.16.7",
-    "@tanstack/query-sync-storage-persister": "^5.68.0",
+    "@tanstack/query-sync-storage-persister": "^5.101.2",
     "@tanstack/react-query": "^5.91.3",
     "@tanstack/react-query-persist-client": "^5.80.7",
     "axios": "^1.7.2",
     "ethers": "^6.17.0",
     "react": "^19.2.6",
     "react-dom": "^19.2.6",
-    "react-router-dom": "^7.18.0",
+    "react-router-dom": "^7.18.1",
     "serve": "^14.2.6",
     "viem": "^2.52.2",
     "wagmi": "^3.6.15"

diff --git a/packages/apps/fortune/exchange-oracle/server/package.json b/packages/apps/fortune/exchange-oracle/server/package.json
@@ -33,7 +33,7 @@
     "@human-protocol/logger": "workspace:*",
     "@human-protocol/sdk": "workspace:*",
     "@nestjs/axios": "^4.0.1",
-    "@nestjs/common": "^11.1.12",
+    "@nestjs/common": "^11.1.27",
     "@nestjs/config": "^4.0.2",
     "@nestjs/core": "^11.1.12",
     "@nestjs/passport": "^11.0.5",

diff --git a/packages/apps/fortune/recording-oracle/package.json b/packages/apps/fortune/recording-oracle/package.json
@@ -26,7 +26,7 @@
     "@human-protocol/logger": "workspace:*",
     "@human-protocol/sdk": "workspace:*",
     "@nestjs/axios": "^4.0.1",
-    "@nestjs/common": "^11.1.12",
+    "@nestjs/common": "^11.1.27",
     "@nestjs/config": "^4.0.2",
     "@nestjs/core": "^11.1.12",
     "@nestjs/platform-express": "^11.1.12",

diff --git a/packages/apps/human-app/frontend/package.json b/packages/apps/human-app/frontend/package.json
@@ -25,10 +25,9 @@
     "@hcaptcha/react-hcaptcha": "^1.14.0",
     "@hookform/resolvers": "^5.1.0",
     "@human-protocol/sdk": "workspace:*",
-    "@mui/icons-material": "^7.3.8",
-    "@mui/material": "^5.16.7",
-    "@mui/system": "^9.0.1",
-    "@mui/x-date-pickers": "^9.2.0",
+    "@mui/icons-material": "^9.2.0",
+    "@mui/material": "^9.2.0",
+    "@mui/x-date-pickers": "^9.9.0",
     "@reown/appkit": "^1.8.20",
     "@reown/appkit-adapter-wagmi": "^1.8.20",
     "@synaps-io/verify-sdk": "^4.0.45",
@@ -38,9 +37,8 @@
     "ethers": "^6.17.0",
     "i18next": "^25.8.0",
     "jwt-decode": "^4.0.0",
-    "lodash": "^4.17.21",
+    "lodash": "^4.18.1",
     "material-react-table": "3.0.1",
-    "mui-image": "^1.0.7",
     "notistack": "^3.0.1",
     "prop-types": "^15.8.1",
     "query-string": "^9.0.0",
@@ -50,7 +48,7 @@
     "react-i18next": "^15.1.0",
     "react-imask": "^7.4.0",
     "react-number-format": "^5.4.5",
-    "react-router-dom": "^7.18.0",
+    "react-router-dom": "^7.18.1",
     "serve": "^14.2.6",
     "viem": "^2.52.2",
     "vite-plugin-svgr": "^4.2.0",
@@ -62,8 +60,7 @@
     "@eslint/js": "^10.0.1",
     "@tanstack/eslint-plugin-query": "^5.60.1",
     "@tanstack/react-query-devtools": "^5.59.16",
-    "@types/lodash": "^4.17.12",
-    "@types/mui-image": "^1.0.5",
+    "@types/lodash": "^4.17.24",
     "@types/node": "^22.10.5",
     "@types/prop-types": "^15",
     "@types/react": "^19.2.15",
@@ -80,7 +77,7 @@
     "husky": "^9.1.6",
     "jsdom": "^29.1.1",
     "prettier": "^3.8.1",
-    "typescript": "^5.6.3",
+    "typescript": "^6.0.2",
     "typescript-eslint": "^8.57.0",
     "vite": "^6.2.4",
     "vitest": "^4.0.18"