Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update caddy docker tag to v2.11.2
• chore(deps): update aquasecurity/trivy-action action to v0.35.0
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package bcgov/action-pr-description-add).

Files affected: .github/workflows/pr-open.yml

---

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update linters to v10 (major) (@eslint/js, eslint)

Detected Dependencies

docker-compose (1)

docker-compose.yml (2)

• ghcr.io/bcgov/nr-containers/mongo 7.0.30
• caddy 2.11.1-alpine → [Updates: 2.11.2-alpine]

dockerfile (3)

api/Dockerfile (1)

• node 24

database/Dockerfile (1)

• ghcr.io/bcgov/nr-containers/mongo 7.0.30

frontend/Dockerfile (2)

• node 24
• caddy 2.11-alpine

github-actions (7)

.github/workflows/.deploy.yml (4)

• actions/checkout v6
• bcgov/action-oc-runner v1.4.1@d2fc921aaa9d70684c186dbb7754e6985d44d86f
• bcgov/action-oc-runner v1.4.1@d2fc921aaa9d70684c186dbb7754e6985d44d86f
• ubuntu 24.04

.github/workflows/.tests.yml (4)

• actions/checkout v6
• cypress-io/github-action v5
• actions/upload-artifact v7
• ubuntu 24.04

.github/workflows/analysis.yml (4)

• actions/checkout v6
• aquasecurity/trivy-action 0.34.2 → [Updates: 0.35.0]
• github/codeql-action v4
• ubuntu 24.04

.github/workflows/merge.yml (7)

• actions/checkout v6
• TriPSs/conventional-changelog-action v6.2.0@84dadaf2c367cb52af02737cd9c7e888807219e7
• shrink/actions-docker-registry-tag v4@f04afd0559f66b288586792eb150f45136a927fa
• softprops/action-gh-release v2@a06a81a03ee405af7f2048a818ed3f03bbf83c7b
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/pr-close.yml (1)

• bcgov/quickstart-openshift-helpers v1.1.0@ca6579bdadf383a2513397081f963889b92823a4

.github/workflows/pr-open.yml (6)

• bcgov/action-pr-description-add v2.0.3@9bf88aec33edb7c00ed72f9305aa1721d0cdab9f
• actions/checkout v6
• bcgov/action-builder-ghcr v4.2.1@2b24ac7f95e6a019064151498660437cca3202c5
• shrink/actions-docker-registry-tag v4@f04afd0559f66b288586792eb150f45136a927fa
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/scheduled.yml (17)

• actions/checkout v6
• actions/setup-node v6
• actions/cache v5
• redhat-actions/openshift-tools-installer v1
• actions/checkout v6
• actions/setup-node v6
• actions/cache v5
• actions/checkout v6
• actions/setup-node v6
• actions/cache v5
• redhat-actions/openshift-tools-installer v1
• ubuntu 24.04
• node 24.x
• ubuntu 24.04
• node 24.x
• ubuntu 24.04
• node 24.x

helm-values (1)

charts/pubcode/values.yaml

npm (5)

api/package.json (18)

• async-retry ^1.3.3
• axios ^1.7.9
• axios-oauth-client ^2.2.0
• axios-token-interceptor ^0.2.0
• body-parser ^2.0.0
• cors ^2.8.5
• cron ^4.0.0
• dotenv ^17.0.0
• express ^5.0.0
• express-rate-limit ^8.0.0
• helmet ^8.0.0
• lodash ^4.17.21
• mongoose ^9.0.0
• morgan ^1.10.0
• nocache ^4.0.0
• prom-client ^15.1.3
• winston ^3.17.0
• nodemon ^3.1.9

crawler/package.json (5)

• async-retry ^1.3.3
• axios ^1.6.8
• dotenv ^17.0.0
• js-yaml ^4.1.0
• nodemon ^3.1.0

frontend/package.json (27)

• @bcgov/design-system-react-components ^0.6.0
• @emotion/react ^11.14.0
• @emotion/styled ^11.14.0
• @mui/icons-material ^7.3.5
• @mui/material ^7.3.5
• @rjsf/core ^6.0.0
• @rjsf/mui ^6.0.0
• @rjsf/utils ^6.0.0
• @rjsf/validator-ajv8 ^6.0.0
• file-saver ^2.0.5
• js-yaml ^4.1.0
• react ^19.0.0
• react-dom ^19.0.0
• react-router ^7.1.5
• react-syntax-highlighter ^16.0.0
• react-toastify ^11.0.3
• @eslint/js ^9.19.0 → [Updates: ^10.0.0]
• @types/react ^19.0.8
• @types/react-dom ^19.0.3
• @vitejs/plugin-react ^5.0.0
• cypress ^15.0.0
• eslint ^9.19.0 → [Updates: ^10.0.0]
• eslint-plugin-react ^7.37.4
• eslint-plugin-react-hooks ^7.0.0
• eslint-plugin-react-refresh ^0.5.0
• globals ^17.0.0
• vite ^7.0.0

schema/script/package.json (4)

• axios ^1.6.4
• cheerio ^1.0.0-rc.12
• lodash ^4.17.21
• @actions/core ^3.0.0

utilities/remove-deleted-pubcode/package.json (4)

• async-retry ^1.3.3
• axios ^1.6.4
• dotenv ^17.0.0
• nodemon ^3.0.0

renovate-config-presets (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository