Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

These branches will be created by Renovate only once you click their checkbox below.

• chore(deps): update dependency @types/express to v5
• chore(deps): update dependency cryptography to v44
• chore(deps): update dependency pino-pretty to v13
• 🔐 Create all pending approval PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update dependency pyjwt to v2.10.1 [security]
• chore(deps): update mcr.microsoft.com/vscode/devcontainers/base:debian docker digest to 6155a48
• chore(deps): update all non-major github action dependencies (actions/create-github-app-token, actions/dependency-review-action, aws-actions/amazon-ecr-login, aws-actions/amazon-ecs-deploy-task-definition, aws-actions/amazon-ecs-render-task-definition)
• fix(deps): update all patch dependencies (@types/node, axios, dotenv, express, vite-tsconfig-paths, vitest)
• fix(deps): update all minor dependencies (@aws-sdk/client-dynamodb, @aws-sdk/client-secrets-manager, @aws-sdk/client-sqs, @aws-sdk/lib-dynamodb, @aws-sdk/types, httpx, node, pino, pnpm)
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

devcontainer

.devcontainer/devcontainer.json

• mcr.microsoft.com/vscode/devcontainers/base debian@sha256:b3fd61ae07a1ebd211cac645c758f4018688a86e2c9b596a6c862ca89b0a668d
• ghcr.io/devcontainers/features/node 1
• ghcr.io/devcontainers/features/python 1

dockerfile

Dockerfile

• node 22.11.0-alpine3.19@sha256:844f517e92fb8f226a52f29ed5c2b5994ae0dd05e152fefac3f2399469701234
• node 22.11.0-alpine3.19@sha256:844f517e92fb8f226a52f29ed5c2b5994ae0dd05e152fefac3f2399469701234

github-actions

.github/workflows/dependency-review.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/dependency-review-action v4.4.0@4081bf99e2866ebe428fc0477b69eb4fcda7220a

.github/workflows/docker-vulnerability-scan.yml

• aws-actions/configure-aws-credentials v4.0.2@e3dd6a429d7300a6a4c196c26e071d42e0343502
• aws-actions/amazon-ecr-login b430a9ae4b069c6327bd09bbcf041b67644ea84f
• cds-snc/security-tools v3.2.0@34794baf2af592913bb5b51d8df4f8d0acc49b6f

.github/workflows/labels.yml

• cds-snc/labels v1

.github/workflows/prod-deploy.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• aws-actions/configure-aws-credentials v4.0.2@e3dd6a429d7300a6a4c196c26e071d42e0343502
• aws-actions/amazon-ecs-render-task-definition v1.6.0@cf6bad72997cc8abcbc836ea5534f2e1e3719ec6
• aws-actions/amazon-ecs-deploy-task-definition v2.1.2@135af6c0ea24f888dcaad892bce3b31cc9e5da64
• cds-snc/sentinel-forward-data-action main

.github/workflows/prod-docker-build-push.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• aws-actions/configure-aws-credentials v4.0.2@e3dd6a429d7300a6a4c196c26e071d42e0343502
• aws-actions/amazon-ecr-login b430a9ae4b069c6327bd09bbcf041b67644ea84f
• cds-snc/security-tools v3.2.0@34794baf2af592913bb5b51d8df4f8d0acc49b6f

.github/workflows/release-generator.yml

• actions/create-github-app-token v1.11.0@5d869da34e18e7287c1daad50e0b8ea0f506ce69
• googleapis/release-please-action v4.1.3@7987652d64b4581673a76e33ad5e98e3dd56832f

.github/workflows/shellcheck.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/staging-deploy.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• aws-actions/configure-aws-credentials v4.0.2@e3dd6a429d7300a6a4c196c26e071d42e0343502
• aws-actions/amazon-ecs-render-task-definition v1.6.0@cf6bad72997cc8abcbc836ea5534f2e1e3719ec6
• aws-actions/amazon-ecs-deploy-task-definition v2.1.2@135af6c0ea24f888dcaad892bce3b31cc9e5da64
• cds-snc/sentinel-forward-data-action main

.github/workflows/staging-docker-build-push.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• aws-actions/configure-aws-credentials v4.0.2@e3dd6a429d7300a6a4c196c26e071d42e0343502
• aws-actions/amazon-ecr-login b430a9ae4b069c6327bd09bbcf041b67644ea84f
• cds-snc/security-tools v3.2.0@34794baf2af592913bb5b51d8df4f8d0acc49b6f

.github/workflows/test-code.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4.1.0@39370e3970a6d050c480ffad4ff0ed4d3fdee5af

.github/workflows/test-docker-build.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/workflow-failure.yml

npm

examples/nodejs/package.json

• axios ^1.7.7
• jose ^5.9.3
• @types/node ^22.7.4
• typescript ^5.6.2

package.json

• @aws-sdk/client-dynamodb ^3.662.0
• @aws-sdk/client-secrets-manager ^3.662.0
• @aws-sdk/client-sqs ^3.662.0
• @aws-sdk/lib-dynamodb ^3.662.0
• axios ^1.7.7
• dotenv ^16.4.5
• express ^4.21.0
• express-validator ^7.2.0
• jose ^5.9.3
• pg-promise ^11.9.1
• pino ^9.4.0
• rate-limiter-flexible ^5.0.4
• redis ^4.7.0
• @aws-sdk/types ^3.662.0
• @biomejs/biome ^1.9.0
• @types/express ^4.17.21
• @types/node ^22.7.4
• @types/supertest ^6.0.2
• aws-sdk-client-mock ^4.0.2
• pino-pretty ^11.2.2
• supertest ^7.0.0
• tsc-alias ^1.8.10
• tsx ^4.19.1
• typescript ^5.6.2
• vite-tsconfig-paths ^5.0.1
• vitest ^2.1.2
• vitest-mock-express ^2.2.0
• pnpm 9.13.2

utils/responseRetriever/package.json

• @types/node ^22.7.4
• axios ^1.7.7
• dotenv ^16.4.5
• jose ^5.9.3
• pino ^9.4.0
• tsx ^4.19.1
• typescript ^5.6.2
• pino-pretty ^11.2.2

pip_requirements

examples/python/requirements.txt

• PyJWT ==2.10.0
• httpx ==0.27.2
• cryptography ==43.0.3

---

• Check this box to trigger a request for Renovate to run again on this repository