Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	csurf
npm	govuk-elements-sass
npm	govuk_frontend_toolkit
npm	govuk_template_jinja
npm	govuk_template_mustache
npm	lodash.template
npm	mem
npm	tslint

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update dependency semver to v7.8.4
• Update terraform monorepo to v1.15.6
• Update dependency acorn to v8.17.0
• Update dependency sass to v1.101.0
• Update dependency gulp-livereload to v4
• Update dependency gulp-replace to v1
• Update dependency gulp-sass to v6
• Update dependency helmet to v8
• Update dependency hosted-git-info to v10
• Update dependency http-status-codes to v2
• Update dependency ini to v7
• Update dependency jackspeak to v4
• Update dependency jquery to v4
• Update dependency jsdom to v29
• Update dependency jwt-decode to v4
• Update dependency mem to v10
• Update dependency minimatch to v10
• Update dependency mocha to v11
• Update dependency mochawesome to v7
• Update dependency multer to v2
• Update dependency nock to v14
• Update dependency node-fetch to v3
• Update dependency normalize-url to v9
• Update dependency nyc to v18
• Update dependency otp to v2
• Update dependency pa11y to v9
• Update dependency path-to-regexp to v8
• Update dependency pathval to v2
• Update dependency sinon to v22
• Update dependency sinon-chai to v4 (sinon-chai, @types/sinon-chai)
• Update dependency supertest to v7
• Update dependency supertest-session to v5
• Update dependency trim-newlines to v5
• Update dependency tsconfig-paths to v4
• Update dependency tslint to v6
• Update dependency typescript to v6
• Update dependency ua-parser-js to v2
• Update dependency xmlhttprequest-ssl to v4
• Update dependency yargs-parser to v22
• Update eslint monorepo to v10
• Update Node.js to v24 (node, @types/node)
• Update stefanzweifel/git-auto-commit-action action to v7
• Update tibdex/github-app-token action to v2
• 🔐 Create all awaiting schedule PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update dependency eslint-plugin-mocha to v11

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency express to v5
• Update dependency express-nunjucks to v3
• Update dependency fast-csv to v5
• Update dependency fetch-mock to v12
• Update dependency got to v15
• Update dependency govuk_frontend_toolkit to v9
• Update dependency govuk-frontend to v6
• Update dependency gulp to v5
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency brace-expansion to v5
• Update dependency chai to v6
• Update dependency config to v4

Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (1)

Dockerfile (2)

• hmctsprod.azurecr.io/base/node 18-alpine
• hmctsprod.azurecr.io/base/node 18-alpine

github-actions (2)

.github/workflows/auto-suppress-CVEs.yml (3)

• tibdex/github-app-token v1 → [Updates: v2]
• actions/checkout v6
• stefanzweifel/git-auto-commit-action v4 → [Updates: v7]

.github/workflows/stale.yml (1)

• actions/stale v10

helm-values (1)

charts/ccd-admin-web/values.yaml

helmv3 (1)

charts/ccd-admin-web/Chart.yaml (2)

• nodejs 3.2.1
• idam-pr 2.4.0

npm (1)

package.json (151)

• @hmcts/nodejs-healthcheck ^1.8.5
• @hmcts/nodejs-logging ^4.0.4
• @hmcts/properties-volume ^1.0.0
• @snyk/protect ^1.1103.0
• @types/node ^10.5.4 → [Updates: ^24.0.0]
• applicationinsights ^3.0.0
• body-parser ^2.0.0
• brace-expansion ^1.1.13 → [Updates: ^5.0.0]
• config ^2.0.1 → [Updates: ^4.0.0]
• cookie-parser ^1.4.3
• cookie-session ^2.0.0-beta.3
• csurf ^1.9.0
• debug ^4.0.0
• diff ^9.0.0
• download-csv ^1.1.1
• express ^4.17.3 → [Updates: ^5.0.0]
• express-force-https ^1.0.0
• express-force-ssl ^0.3.2
• express-nunjucks ^2.2.5 → [Updates: ^3.0.0]
• fast-csv ^4.3.6 → [Updates: ^5.0.0]
• form-data ^4.0.4
• formidable ^3.5.4
• govuk-elements-sass ~3.1.0
• govuk-frontend ^1.0.0 → [Updates: ^6.0.0]
• govuk_frontend_toolkit ~6.0.1 → [Updates: ~9.0.0]
• govuk_template_jinja ^0.26.0
• govuk_template_mustache ^0.26.0
• helmet ^4.0.0 → [Updates: ^8.0.0]
• jquery ^3.5.1 → [Updates: ^4.0.0]
• jquery-validation ^1.19.5
• js-yaml ^4.1.0
• jsdom ^20.0.0 → [Updates: ^29.0.0]
• jwt-decode ^2.2.0 → [Updates: ^4.0.0]
• multer ^1.4.5-lts.1 → [Updates: ^2.0.0]
• node-fetch ^2.6.7 → [Updates: ^3.0.0]
• nunjucks ^3.2.4
• on-headers ^1.1.0
• or ^0.2.0
• otp ^0.1.3 → [Updates: ^2.0.0]
• path-to-regexp ^3.3.0 → [Updates: ^8.0.0]
• require-directory ^2.1.1
• sass ^1.97.2 → [Updates: ^1.97.2]
• serve-favicon ^2.4.4
• sinon-stub-promise ^4.0.0
• superagent ^10.2.1
• supertest-session ^3.3.0 → [Updates: ^5.0.0]
• tar ^7.5.13
• ts-node ^10.7.0
• tsconfig-paths ^3.14.1 → [Updates: ^4.0.0]
• typescript ^3.2.1 → [Updates: ^6.0.0]
• validator ^13.15.20
• xss-filters ^1.2.7
• @types/chai-as-promised ^8.0.0
• @types/mocha ^10.0.0
• @types/sinon-chai ^3.2.0 → [Updates: ^4.0.0]
• ansi-regex ^6.0.0
• chai ^4.3.6 → [Updates: ^6.0.0]
• chai-as-promised ^8.0.0
• cookie ^1.1.1
• eslint ^9.39.4 → [Updates: ^10.0.0]
• eslint-plugin-mocha ^5.3.0 → [Updates: ^11.0.0]
• fetch-mock ^6.4.2 → [Updates: ^12.0.0]
• gulp ^4.0.2 → [Updates: ^5.0.0]
• gulp-livereload ^3.8.1 → [Updates: ^4.0.0]
• gulp-nodemon ^2.5.0
• gulp-plumber ^1.2.1
• gulp-replace ^0.6.1 → [Updates: ^1.0.0]
• gulp-sass ^5.0.0 → [Updates: ^6.0.0]
• http-status-codes ^1.3.0 → [Updates: ^2.0.0]
• jsonwebtoken ^9.0.0
• karma ^6.3.16
• mocha ^5.2.0 → [Updates: ^11.0.0]
• mochawesome ^3.1.1 → [Updates: ^7.0.0]
• mock-session ^0.0.5
• nock ^13.3.3 → [Updates: ^14.0.0]
• nyc ^15.1.0 → [Updates: ^18.0.0]
• pa11y ^8.0.0 → [Updates: ^9.0.0]
• proxyquire ^2.0.1
• sass-lint ^1.13.1
• sinon ^7.3.2 → [Updates: ^22.0.0]
• sinon-chai ^2.13.0 → [Updates: ^4.0.0]
• sinon-express-mock ^2.0.4
• sonar-scanner ^3.1.0
• supertest ^3.0.0 → [Updates: ^7.0.0]
• supertest-session ^3.3.0 → [Updates: ^5.0.0]
• tslint ^5.7.0 → [Updates: ^6.0.0]
• node ^18.17.0 → [Updates: ^24.0.0]
• form-data ^4.0.4
• shelljs 0.10.0
• es6-promisify 7.0.0
• nconf 0.13.0
• async 3.2.6
• assign-deep ^1.0.1
• mem ^4.0.0 → [Updates: ^10.0.0]
• lodash ^4.17.21
• qs ^6.14.1
• http-proxy ^1.18.1
• acorn ^8.0.0 → [Updates: ^8.0.0]
• debug ^4.0.0
• yargs-parser ^18.1.2 → [Updates: ^22.0.0]
• braces ^3.0.3
• lodash.template ^4.5.0
• websocket-extensions ^0.1.4
• bl ^7.0.0
• dot-prop ^10.0.0
• ini ^1.3.7 → [Updates: ^7.0.0]
• netmask ^2.0.1
• y18n ^5.0.5
• hosted-git-info ^3.0.8 → [Updates: ^10.0.0]
• xmlhttprequest-ssl ^1.6.2 → [Updates: ^4.0.0]
• handlebars ^4.7.7
• merge ^2.1.1
• trim-newlines ^3.0.1 → [Updates: ^5.0.0]
• glob-parent ^6.0.1
• got ^11.8.5 → [Updates: ^15.0.0]
• normalize-url ^4.5.1 → [Updates: ^9.0.0]
• ws ^8.18.0
• tar ^7.5.13
• jszip ^3.7.0
• path-parse ^1.0.7
• set-value ^4.0.1
• ssh2 ^1.4.0
• validator ^13.15.20
• is-my-json-valid ^2.20.6
• json-schema 0.4.0
• @snyk/snyk-docker-pull ^3.7.2
• follow-redirects ^1.15.5
• copy-props ^4.0.0
• ajv ^8.0.0
• minimist ^1.2.6
• moment ^2.29.4
• pathval ^1.1.1 → [Updates: ^2.0.0]
• minimatch 3.1.5 → [Updates: 10.2.5]
• engine.io ^6.2.1
• json5 ^2.2.2
• decode-uri-component ^0.4.0
• cookiejar ^2.1.4
• ua-parser-js ^1.0.0 → [Updates: ^2.0.0]
• http-cache-semantics ^4.1.1
• jackspeak 2.3.6 → [Updates: 4.2.3]
• semver 7.8.3 → [Updates: 7.8.4]
• ip 2.0.1
• micromatch ^4.0.8
• cross-spawn ^7.0.6
• path-to-regexp ^3.3.0 → [Updates: ^8.0.0]
• body-parser ^2.0.0
• on-headers ^1.1.0
• brace-expansion ^1.1.13 → [Updates: ^5.0.0]
• cookie ^1.1.1
• diff ^9.0.0
• yarn 4.16.0

nvm (1)

.nvmrc (1)

• node 18.20.8 → [Updates: 24.16.0]

renovate-config (1)

.github/renovate.json

terraform (2)

infrastructure/main.tf

infrastructure/state.tf (1)

• azurerm ~> 4.0

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.15.5 → [Updates: 1.15.6]

travis (1)

.travis.yml (1)

• node 18.20.8 → [Updates: 24.16.0]

---

• Check this box to trigger a request for Renovate to run again on this repository