Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	csurf

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update dependency hbs to ^4.2.1
• fix(deps): update dependency express to ^4.22.2
• fix(deps): update dependency express-validator to ^7.3.2
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-node action to v6
• chore(deps): update dependency node to v24
• fix(deps): update dependency dotenv to v17
• fix(deps): update dependency jsdom to v29
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency nodemon to ^3.1.14
• chore(deps): update actions/checkout action to v4.3.1
• chore(deps): update actions/setup-node action to v4.4.0
• chore(deps): update dependency mocha to ^11.7.6
• chore(deps): update dependency node to v18.20.8
• chore(deps): update dependency supertest to ^7.2.2
• fix(deps): update dependency dompurify to ^3.4.8
• fix(deps): update dependency dotenv to ^16.6.1
• fix(deps): update dependency express to v5
• fix(deps): update dependency node-html-to-image to v5
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (1)

.github/workflows/build.yml (3)

• actions/checkout v4.2.2 → [Updates: v4.3.1, v6.0.3]
• actions/setup-node v4.1.0 → [Updates: v4.4.0, v6.4.0]
• node 18.x → [Updates: 18.20.8, 24.16.0]

npm (1)

package.json (14)

• cookie-parser ^1.4.7
• csurf ^1.11.0
• dompurify ^3.2.3 → [Updates: ^3.4.8]
• dotenv ^16.4.7 → [Updates: ^16.6.1, ^17.4.2]
• express ^4.21.2 → [Updates: ^4.22.2, ^5.2.1]
• express-sitemap-xml ^3.1.0
• express-validator ^7.2.1 → [Updates: ^7.3.2]
• hbs ^4.2.0 → [Updates: ^4.2.1]
• jsdom ^25.0.1 → [Updates: ^29.1.1]
• node-html-to-image ^4.0.0 → [Updates: ^5.0.0]
• generate-robotstxt ^8.0.3
• mocha ^11.0.1 → [Updates: ^11.7.6]
• nodemon ^3.1.9 → [Updates: ^3.1.14]
• supertest ^7.0.0 → [Updates: ^7.2.2]

---

• Check this box to trigger a request for Renovate to run again on this repository