Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	csurf
npm	mem
npm	tslint

Pending Approval

These branches will be created by Renovate only once you click their checkbox below.

• Update Node.js to v22 (node, @types/node)
• Update Terraform azurerm to v4
• Update Yarn to v4
• Update actions/checkout action to v4
• Update dependency @hmcts/properties-volume to v1
• Update dependency acorn to v8
• Update dependency ajv to v8
• Update dependency ansi-regex to v6
• Update dependency applicationinsights to v3
• Update dependency bl to v6
• Update dependency chai to v5
• Update dependency chai-as-promised to v8 (chai-as-promised, @types/chai-as-promised)
• Update dependency config to v3
• Update dependency copy-props to v4
• Update dependency debug to v4
• Update dependency dot-prop to v9
• Update dependency es6-promisify to v7
• Update dependency eslint to v9
• Update dependency eslint-plugin-mocha to v10
• Update dependency express-nunjucks to v3
• Update dependency fast-csv to v5
• Update dependency fetch-mock to v12
• Update dependency got to v14
• Update dependency govuk-frontend to v5
• Update dependency govuk_frontend_toolkit to v9
• Update dependency gulp to v5
• Update dependency gulp-livereload to v4
• Update dependency gulp-replace to v1
• Update dependency helmet to v8
• Update dependency hosted-git-info to v8
• Update dependency http-status-codes to v2
• Update dependency ini to v5
• Update dependency jackspeak to v4
• Update dependency jsdom to v25
• Update dependency jwt-decode to v4
• Update dependency mem to v10
• Update dependency minimatch to v10
• Update dependency mocha to v10 (mocha, @types/mocha)
• Update dependency mochawesome to v7
• Update dependency node-fetch to v3
• Update dependency normalize-url to v8
• Update dependency nyc to v17
• Update dependency otp to v1
• Update dependency pa11y to v8
• Update dependency path-to-regexp to v8
• Update dependency pathval to v2
• Update dependency sinon to v19
• Update dependency sinon-chai to v4 (sinon-chai, @types/sinon-chai)
• Update dependency superagent to v10
• Update dependency supertest to v7
• Update dependency supertest-session to v5
• Update dependency tar to v7
• Update dependency trim-newlines to v5
• Update dependency tsconfig-paths to v4
• Update dependency tslint to v6
• Update dependency typescript to v5
• Update dependency ua-parser-js to v1
• Update dependency ws to v8
• Update dependency xmlhttprequest-ssl to v3
• Update dependency yargs-parser to v21
• Update stefanzweifel/git-auto-commit-action action to v5
• Update tibdex/github-app-token action to v2
• 🔐 Create all pending approval PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency cookie to ^0.7.0 [SECURITY]
• Update dependency braces to v3 [SECURITY]
• Update All patch-minor dependencies (async, csurf, decode-uri-component, govuk-elements-sass, govuk_template_jinja, govuk_template_mustache, hashicorp/terraform, idam-pr, jackspeak, nconf, nock, node, nodejs, sass, semver, ua-parser-js, yarn)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

docker-compose

docker-compose.yml

dockerfile

Dockerfile

• hmctspublic.azurecr.io/base/node 18-alpine
• hmctspublic.azurecr.io/base/node 18-alpine

github-actions

.github/workflows/auto-suppress-CVEs.yml

• tibdex/github-app-token v1
• actions/checkout v3
• stefanzweifel/git-auto-commit-action v4

helm-values

charts/ccd-admin-web/values.yaml

helmv3

charts/ccd-admin-web/Chart.yaml

• nodejs 3.1.0
• idam-pr 2.2.6

npm

package.json

• @hmcts/nodejs-healthcheck ^1.8.0
• @hmcts/nodejs-logging ^4.0.4
• @hmcts/properties-volume ^0.0.14
• @snyk/protect ^1.1103.0
• @types/node ^10.5.4
• applicationinsights ^1.0.8
• body-parser ^1.20.1
• config ^2.0.1
• cookie-parser ^1.4.3
• cookie-session ^2.0.0-beta.3
• csurf ^1.9.0
• debug ^3.1.0
• download-csv ^1.1.1
• express ^4.17.3
• express-force-https ^1.0.0
• express-force-ssl ^0.3.2
• express-nunjucks ^2.2.5
• fast-csv ^4.3.6
• govuk-elements-sass ~3.0.2
• govuk-frontend ^1.0.0
• govuk_frontend_toolkit ~6.0.1
• govuk_template_jinja ^0.23.0
• govuk_template_mustache ^0.19.0
• helmet ^3.18.0
• jquery ^3.5.1
• jquery-validation ^1.19.5
• js-yaml ^4.1.0
• jsdom ^20.0.0
• jwt-decode ^2.2.0
• multer ^1.4.5-lts.1
• node-fetch ^2.6.7
• nunjucks ^3.2.4
• otp ^0.1.3
• path-to-regexp ^3.3.0
• require-directory ^2.1.1
• sass ^1.63.4
• serve-favicon ^2.4.4
• sinon-stub-promise ^4.0.0
• superagent ^3.8.3
• supertest-session ^3.3.0
• ts-node ^10.7.0
• tsconfig-paths ^3.14.1
• typescript ^3.2.1
• validator ^13.7.0
• xss-filters ^1.2.7
• @types/chai-as-promised ^7.1.0
• @types/mocha ^2.2.43
• @types/sinon-chai ^3.2.0
• chai ^4.3.6
• chai-as-promised ^7.1.1
• cookie ^0.3.1
• eslint ^4.19.1
• eslint-plugin-mocha ^5.3.0
• fetch-mock ^6.4.2
• gulp ^4.0.2
• gulp-livereload ^3.8.1
• gulp-nodemon ^2.5.0
• gulp-plumber ^1.2.1
• gulp-replace ^0.6.1
• gulp-sass ^5.0.0
• http-status-codes ^1.3.0
• jsonwebtoken ^9.0.0
• karma ^6.3.16
• mocha ^5.2.0
• mochawesome ^3.1.1
• mock-session ^0.0.5
• nock ^13.3.3
• nyc ^15.1.0
• pa11y ^6.1.1
• proxyquire ^2.0.1
• sass-lint ^1.13.1
• sinon ^7.3.2
• sinon-chai ^2.13.0
• sinon-express-mock ^2.0.4
• sonar-scanner ^3.1.0
• supertest ^3.0.0
• supertest-session ^3.3.0
• tslint ^5.7.0
• node ^18.17.0
• shelljs 0.8.5
• es6-promisify 5.0.0
• nconf 0.11.4
• async 3.2.2
• assign-deep ^1.0.1
• mem ^4.0.0
• lodash ^4.17.21
• qs ^6.9.7
• http-proxy ^1.18.1
• acorn ^7.1.1
• debug ^3.1.0
• yargs-parser ^18.1.2
• braces ^2.3.1
• lodash.template ^4.5.0
• websocket-extensions ^0.1.4
• bl ^3.0.1
• dot-prop ^4.2.1
• ini ^1.3.7
• netmask ^2.0.1
• y18n ^5.0.5
• hosted-git-info ^3.0.8
• xmlhttprequest-ssl ^1.6.2
• handlebars ^4.7.7
• merge ^2.1.1
• trim-newlines ^3.0.1
• glob-parent ^6.0.1
• got ^11.8.5
• normalize-url ^4.5.1
• ws ^6.2.2
• tar ^6.1.9
• jszip ^3.7.0
• path-parse ^1.0.7
• ansi-regex ^5.0.1
• set-value ^4.0.1
• ssh2 ^1.4.0
• validator ^13.7.0
• is-my-json-valid ^2.20.6
• json-schema 0.4.0
• @snyk/snyk-docker-pull ^3.7.2
• follow-redirects ^1.15.5
• copy-props ^2.0.5
• ajv ^6.12.3
• minimist ^1.2.6
• moment ^2.29.4
• pathval ^1.1.1
• minimatch ^3.0.5
• engine.io ^6.2.1
• json5 ^2.2.2
• decode-uri-component ^0.2.1
• cookiejar ^2.1.4
• ua-parser-js ^0.7.33
• http-cache-semantics ^4.1.1
• jackspeak 2.1.1
• semver 7.5.4
• ip 2.0.1
• yarn 3.6.4

nvm

.nvmrc

• node 18.17.0

terraform

infrastructure/main.tf

infrastructure/state.tf

• azurerm ~> 3.0

terraform-version

infrastructure/.terraform-version

• hashicorp/terraform 1.3.9

travis

.travis.yml

• node 18.17.0

---

• Check this box to trigger a request for Renovate to run again on this repository