Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	lodash.pick

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update hapijs monorepo to v17.13.4
• Update dependency debug to v4
• Update dependency jwt-decode to v4
• Update dependency minimatch to v10
• Update dependency mocha to v11
• Update dependency nocache to v4
• Update dependency nock to v14
• Update dependency node-cron to v4
• Update dependency node-fetch to v3
• Update dependency nyc to v18
• Update dependency protobufjs to v8
• Update dependency sinon to v22
• Update dependency sinon-chai to v4
• Update dependency supertest to v7
• Update dependency y18n to v5
• Update dependency yargs-parser to v22
• Update eslint monorepo to v10
• Update Gradle to v9
• Update hapijs monorepo to v18
• Update lodash monorepo to v4
• Update Node.js to v24
• Update redis Docker tag to v27
• Update stefanzweifel/git-auto-commit-action action to v7
• Update tibdex/github-app-token action to v2
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency ajv to v8
• Update dependency cross-env to v10
• Update dependency eslint-config-airbnb-base to v15
• Update dependency flat to v6
• Update dependency glob-parent to v6
• Update dependency hosted-git-info to v10
• Update dependency ioredis to v5
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency com.github.hmcts:ccd-test-definitions to v7.27.7-prerelease-CME-537
• Update dependency com.github.hmcts:ccd-test-definitions to v97
• Update dependency config to v4

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• hmctsprod.azurecr.io/base/node 20-alpine
• hmctsprod.azurecr.io/base/node 20-alpine

github-actions (2)

.github/workflows/auto-suppress-CVEs.yml (3)

• tibdex/github-app-token v1 → [Updates: v2]
• actions/checkout v6
• stefanzweifel/git-auto-commit-action v4 → [Updates: v7]

.github/workflows/stale.yml (1)

• actions/stale v10

gradle (2)

aat/build.gradle (4)

• com.github.spacialcircumstances.gradle-cucumber-reporting 0.1.25
• com.github.hmcts:ccd-test-definitions 7.25.4 → [Updates: 7.27.7-prerelease-CME-537, 97merge]
• com.github.hmcts:befta-fw 9.2.7
• com.github.hmcts:fortify-client 1.4.10

aat/settings.gradle

gradle-wrapper (1)

aat/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.5 → [Updates: 9.5.1]

helm-values (1)

charts/ccd-case-activity-api/values.yaml

helmv3 (1)

charts/ccd-case-activity-api/Chart.yaml (2)

• nodejs 3.2.1
• redis 24.1.8 → [Updates: 27.0.8]

npm (1)

package.json (70)

• @hmcts/nodejs-healthcheck ^1.8.0
• @hmcts/nodejs-logging ^4.0.4
• @hmcts/properties-volume ^1.0.0
• applicationinsights 3.15.0
• body-parser ^2.2.1
• config ^1.26.1 → [Updates: ^4.0.0]
• connect-timeout ^1.9.0
• cookie ^1.0.0
• cross-env ^5.2.0 → [Updates: ^10.0.0]
• debug ~2.6.3 → [Updates: ~4.4.0]
• express ^5.0.1
• formidable ^3.5.4
• ioredis ^3.1.4 → [Updates: ^5.0.0]
• joi ^17.2.1 → [Updates: ^17.2.1, ^18.0.0]
• jwt-decode ^2.2.0 → [Updates: ^4.0.0]
• lodash 4.18.1
• moment ^2.29.4
• morgan ^1.9.1
• nocache ^2.1.0 → [Updates: ^4.0.0]
• node-cache ^5.1.0
• node-cron ^1.2.1 → [Updates: ^4.0.0]
• node-fetch ^2.6.7 → [Updates: ^3.0.0]
• or ^0.2.0
• yarn ^1.22.22
• chai ^6.0.0
• chai-arrays ^2.0.0
• chai-http ^5.0.0
• eslint 9.39.4 → [Updates: 10.4.1]
• eslint-config-airbnb-base ^14.0.0 → [Updates: ^15.0.0]
• eslint-plugin-import ^2.14.0
• jasmine-node 3
• mocha 7 → [Updates: 11]
• mock-require ^3.0.3
• nock ^12.0.3 → [Updates: ^14.0.0]
• node-mocks-http ^1.7.0
• nyc ^15.0.0 → [Updates: ^18.0.0]
• proxyquire ^2.1.3
• sinon ^18.0.1 → [Updates: ^22.0.0]
• sinon-chai ^3.5.0 → [Updates: ^4.0.0]
• sinon-express-mock ^2.2.1
• sonar-scanner ^3.1.0
• supertest ^3.0.0 → [Updates: ^7.0.0]
• node ^20.11.0 → [Updates: ^24.0.0]
• async ^3.0.0
• lodash 4.18.1
• lodash.pick 3.1.0 → [Updates: 4.4.0]
• yargs-parser ^18.1.2 → [Updates: ^22.0.0]
• minimist ^1.2.6
• y18n ^4.0.1 → [Updates: ^5.0.0]
• hosted-git-info ^3.0.8 → [Updates: ^10.0.0]
• underscore ^1.13.1
• ansi-regex ^6.0.0
• path-parse ^1.0.7
• glob-parent ^5.1.2 → [Updates: ^6.0.0]
• moment ^2.29.4
• ajv 6.15.0 → [Updates: 8.20.0]
• json5 ^2.2.2
• js-yaml ^4.1.1
• minimatch ^3.0.5 → [Updates: ^10.0.0]
• cookiejar ^2.1.4
• flat ^5.0.1 → [Updates: ^6.0.0]
• qs 6.15.2
• semver 7.8.4
• @grpc/grpc-js 1.14.4
• cross-spawn ^7.0.6
• body-parser ^2.2.1
• protobufjs 7.6.3 → [Updates: 8.6.3]
• @protobufjs/utf8 1.1.1
• yarn 4.16.0
• qs 6.15.2

nvm (1)

.nvmrc (1)

• node 20.20.2 → [Updates: 24.16.0]

renovate-config (1)

.github/renovate.json

terraform (2)

infrastructure/main.tf (1)

• github.com/hmcts/cnp-module-redis 4.x

infrastructure/state.tf (1)

• azurerm ~> 4.0

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.15.6

travis (1)

.travis.yml (1)

• node 20.20.2 → [Updates: 24.16.0]

---

• Check this box to trigger a request for Renovate to run again on this repository