hmcts · lang-ben · Mar 11, 2026 · Mar 12, 2026 · Mar 12, 2026 · Mar 24, 2026
diff --git a/.dockerignore b/.dockerignore
@@ -10,7 +10,6 @@
 !.yarnrc.yml
 !.yarn/**
 
-!gulpfile.js
 !tsconfig.json
 
 !src/main/**

diff --git a/.editorconfig b/.editorconfig
@@ -1,3 +1,4 @@
+# EditorConfig is for defining and maintaining consistent coding styles between different editors and IDEs.
 # http://editorconfig.org
 root = true
 

diff --git a/.eslintrc.json b/.eslintrc.json
diff --git a/.gitignore b/.gitignore
@@ -1,7 +1,10 @@
 node_modules/
 .nyc_output
 .sass-cache
+# Compiled CSS files should not be committed to source control as they are generated from the SASS source files
 *.css
+# Source maps are generated by the sass compiler and should not be committed to source control
+*.css.map
 
 .idea/
 *.iml
@@ -10,8 +13,7 @@ node_modules/
 *log
 .DS_Store
 
-src/main/public/javascripts/
-src/main/public/js/lib/**/*.js
+src/main/public/js/**/*.js
 src/main/public/stylesheets/images/
 src/test/public
 
@@ -24,6 +26,7 @@ npm-debug.log.*
 
 package-lock.json
 
+config/local.yaml
 coverage/
 .scannerwork/
 acb.yaml

diff --git a/.nsprc b/.nsprc
diff --git a/.nvmrc b/.nvmrc
@@ -1 +1 @@
-18.20.8
+v24.15.0
diff --git a/.sass-lint.yml b/.sass-lint.yml
diff --git a/.snyk b/.snyk
@@ -2,7 +2,4 @@
 version: v1.12.0
 ignore: {}
 # patches apply the minimum changes required to fix a vulnerability
-patch:
-  'npm:tunnel-agent:20170305':
-    - '@hmcts/nodejs-logging > log4js > loggly > request > tunnel-agent':
-        patched: '2018-06-26T06:35:10.034Z'
+patches: {}
diff --git a/.travis.yml b/.travis.yml
@@ -1,6 +1,6 @@
 language: node_js
 node_js:
-  - "18.20.8"  # Docker
+  - "24.15.0"  # Docker
 cache: yarn
 before_install:
   - curl -o- -L https://yarnpkg.com/install.sh | bash -s
@@ -14,7 +14,6 @@ script:
   - yarn --check-cache || echo 'yarn --check-cache failed'
   - yarn lint
   - yarn test
-  - yarn test:routes
   - yarn test:a11y
   #- yarn test:nsp - reenable when we have solved RDM-2508
   - yarn test:coverage

diff --git a/.yarnrc.yml b/.yarnrc.yml
@@ -1,7 +1,12 @@
+approvedGitRepositories:
+  - "**"
+
 compressionLevel: mixed
 
 enableGlobalCache: false
 
+enableScripts: true
+
 nodeLinker: node-modules
 
 yarnPath: .yarn/releases/yarn-4.16.0.cjs
diff --git a/Dockerfile b/Dockerfile
@@ -1,7 +1,7 @@
 # ---- Base Image ----
 
 ARG PLATFORM=""
-FROM hmctsprod.azurecr.io/base/node${PLATFORM}:18-alpine as base
+FROM hmctsprod.azurecr.io/base/node${PLATFORM}:24-alpine as base
 
 ENV PUPPETEER_SKIP_DOWNLOAD=true
 ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true
@@ -23,12 +23,12 @@ RUN yarn install && yarn cache clean
 # ---- Build Image ----
 FROM base as build
 
-RUN yarn sass
+RUN yarn setup
 
 RUN sleep 1 && yarn install && yarn cache clean
 
 
 # ---- Runtime Image ----
-FROM hmctsprod.azurecr.io/base/node${PLATFORM}:18-alpine as runtime
+FROM hmctsprod.azurecr.io/base/node${PLATFORM}:24-alpine as runtime
 COPY --from=build $WORKDIR .
 EXPOSE 3100
diff --git a/Jenkinsfile_CNP b/Jenkinsfile_CNP
@@ -19,6 +19,7 @@ def secrets = [
         secret('ccd-admin-web-oauth2-client-secret', 'OAUTH2_CLIENT_SECRET'),
         secret('storage-account-primary-connection-string', 'STORAGEACCOUNT_PRIMARY_CONNECTION_STRING'),
         secret('storage-account-secondary-connection-string', 'STORAGEACCOUNT_SECONDARY_CONNECTION_STRING'),
+        secret('AppInsightsInstrumentationKey', 'APP_INSIGHTS_INSTRUMENTATION_KEY')
     ],
     's2s-${env}': [
         secret('microservicekey-ccd-admin', 'IDAM_SERVICE_KEY'),
@@ -70,4 +71,40 @@ withPipeline("nodejs", product, component) {
          yarnBuilder.yarn('setup')
     }
 
+    afterAlways('test') {
+
+      publishHTML target: [
+        allowMissing         : true,
+        alwaysLinkToLastBuild: true,
+        keepAll              : true,
+        reportDir            : "mochawesome-report",
+        reportFiles          : "unit.html",
+        reportName           : "Unit Test Report"
+      ]
+    }
+
+    afterAlways('test:a11y') {
+
+      publishHTML target: [
+        allowMissing         : true,
+        alwaysLinkToLastBuild: true,
+        keepAll              : true,
+        reportDir            : "mochawesome-report",
+        reportFiles          : "a11y.html",
+        reportName           : "Accessibility Test Report"
+      ]
+    }
+
+    afterAlways('test:coverage') {
+
+      publishHTML target: [
+        allowMissing         : true,
+        alwaysLinkToLastBuild: true,
+        keepAll              : true,
+        reportDir            : "coverage/lcov-report",
+        reportFiles          : "index.html",
+        reportName           : "Code Coverage Report"
+      ]
+    }
+
 }
diff --git a/README.md b/README.md
@@ -12,7 +12,7 @@ Web application for administration of Case Definition data (initially for import
 ## Getting started
 
 ### Prerequisites
-- [Node.js](https://nodejs.org/en) >= 18.17.0
+- [Node.js](https://nodejs.org/en) >= 24.15.0
 
 ### Environment variables
 
@@ -23,10 +23,10 @@ The following environment variables are required:
 | IDAM_BASE_URL                        | - | Base URL for IdAM's User API service (idam-app). `http://localhost:5000` for the dockerised local instance or tunnelled `dev` instance.                                |
 | IDAM_S2S_URL                         | - | Base URL for IdAM's S2S API service (service-auth-provider). `http://localhost:4502` for the dockerised local instance or tunnelled `dev` instance.                    |
 | IDAM_ADMIN_WEB_SERVICE_KEY           | - | Case Admin Web's IdAM S2S micro-service secret key. This must match the IdAM instance it's being run against.                                                          |
-| IDAM_LOGOUT_URL                      | - | URL of the IdAM Authentication Web `logout` page. `https://localhost:3501/login/logout` for the dockerised local instance.                                             |
+| IDAM_LOGOUT_URL                      | - | URL of the IdAM Authentication Web `logout` page. `https://localhost:9002/login/logout` for the dockerised local instance.                                             |
 | IDAM_OAUTH2_TOKEN_ENDPOINT           | - | URL of the IdAM OAuth2 API endpoint for obtaining an OAuth2 token. `http://localhost:5000/oauth2/token` for the dockerised local instance or tunnelled `dev` instance. |
 | IDAM_OAUTH2_AW_CLIENT_SECRET         | - | Secret to be passed to IdAM when obtaining an OAuth2 token. This must match the IdAM instance it's being run against.                                                  |
-| ADMINWEB_LOGIN_URL                   | - | URL of the IdAM Authentication Web `login` page. `https://localhost:3501/login` for the dockerised local instance.                                                     |
+| ADMINWEB_LOGIN_URL                   | - | URL of the IdAM Authentication Web `login` page. `https://localhost:9002/login` for the dockerised local instance.                                                     |
 | ADMINWEB_IMPORT_URL                  | - | URL of the Case Definition Store API `import` endpoint. `http://localhost:4451/import` for the dockerised local instance.                                              |
 | ADMINWEB_UPLOAD_DICTIONARY_FILE_PATH | - | Path to local dir for upload.                                                                                                                                          |
 | APPINSIGHTS_INSTRUMENTATIONKEY       | - | Secret for Microsoft Insights logging, can be a dummy string in local.                                                                                                 |
@@ -53,7 +53,26 @@ To be able to log on and use the application you have to have a IDAM user with `
 
 **Note:** You can also start the application by executing:
 ```bash
-node server.js
+yarn tsx server.js
+```
+
+### Developing
+
+To run both the setup and application in watch mode (where it will pick up changes and restart in realtime) then run:
+```bash
+yarn develop
+```
+
+### Managing dependencies:
+To update the versions in package.json use:
+```bash
+$ yarn upgrade-interactive
+```
+and choose the appropriate version for each dependency.
+
+The jenkins pipeline will check dependency versions for vulnerabilities. If you wish to suppress the issues that the pipeline is looking for you can populate the "yarn-audit-known-issues" file by running:
+```bash
+$ yarn suppress-cve
 ```
 
 ### Accessing the service

diff --git a/acb.tpl.yaml b/acb.tpl.yaml
@@ -1,7 +1,7 @@
 version: 1.0-preview-1
 steps:
   - id: pull-hmcts-base-amd64
-    cmd: docker pull --platform linux/amd64 hmctsprod.azurecr.io/base/node:18-alpine && docker tag hmctsprod.azurecr.io/base/node:18-alpine hmctsprod.azurecr.io/base/node/linux/amd64:18-alpine
+    cmd: docker pull --platform linux/amd64 hmctsprod.azurecr.io/base/node:24-alpine && docker tag hmctsprod.azurecr.io/base/node:24-alpine hmctsprod.azurecr.io/base/node/linux/amd64:24-alpine
     when: ["-"]
     retries: 3
     retryDelay: 5
@@ -30,7 +30,7 @@ steps:
       .
     when:
       - pull-base-amd64
-    timeout: 7200
+    timeout: 12200
     retries: 3
     retryDelay: 5
 
@@ -46,7 +46,7 @@ steps:
     when:
       - base-amd64
       - pull-build-amd64
-    timeout: 7200
+    timeout: 12200
     retries: 3
     retryDelay: 5
 
@@ -62,12 +62,12 @@ steps:
     when:
       - base-amd64
       - build-amd64
-    timeout: 7200
+    timeout: 12200
     retries: 3
     retryDelay: 5
 
   - id: pull-hmcts-base-arm64
-    cmd: docker pull --platform linux/arm64 hmctsprod.azurecr.io/base/node:18-alpine && docker tag hmctsprod.azurecr.io/base/node:18-alpine hmctsprod.azurecr.io/base/node/linux/arm64:18-alpine
+    cmd: docker pull --platform linux/arm64 hmctsprod.azurecr.io/base/node:24-alpine && docker tag hmctsprod.azurecr.io/base/node:24-alpine hmctsprod.azurecr.io/base/node/linux/arm64:24-alpine
     when:
       - pull-hmcts-base-amd64
     retries: 3
@@ -107,7 +107,7 @@ steps:
       .
     when:
       - reset-qemu
-    timeout: 7200
+    timeout: 12200
     retries: 3
     retryDelay: 5
 
@@ -123,7 +123,7 @@ steps:
     when:
       - base-arm64
       - pull-build-arm64
-    timeout: 7200
+    timeout: 12200
     retries: 3
     retryDelay: 5
 
@@ -139,7 +139,7 @@ steps:
     when:
       - base-arm64
       - build-arm64
-    timeout: 7200
+    timeout: 12200
     retries: 3
     retryDelay: 5
 

diff --git a/config/default.yaml b/config/default.yaml
@@ -24,7 +24,7 @@ idam:
     logout_endpoint: http://localhost:5000/session/:token
     client_id: ccd_admin
 adminWeb:
-  login_url: https://localhost:3501/login
+  login_url: http://localhost:9002/login
   import_url: http://localhost:4451/import
   whoami_url: http://localhost:4451/api/idam/profile
   authorization_url: http://localhost:4451/api/idam/adminweb/authorization

diff --git a/config/mocha.yaml b/config/mocha.yaml
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -1,8 +1,6 @@
-version: '2'
-
 services:
   # TODO: change this name to match the name of your app
-  expressjs-template:
+  ccd-admin-web:
     build:
       context: .
       args: