Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	istanbul
npm	mem

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update dependency form-data to v2.5.3
• Update Node.js to v22
• Update Yarn to v4
• Update actions/checkout action to v4
• Update dependency @hmcts/properties-volume to v1
• Update dependency ansi-regex to v6
• Update dependency applicationinsights to v3
• Update dependency async to v3
• Update dependency chai to v5
• Update dependency chai-http to v5
• Update dependency cookie to v1
• Update dependency cross-env to v7
• Update dependency debug to v4
• Update dependency eslint to v9
• Update dependency eslint-plugin-mocha to v10
• Update dependency fetch-mock to v12
• Update dependency form-data to v4
• Update dependency glob-parent to v6
• Update dependency https-proxy-agent to v7
• Update dependency ini to v5
• Update dependency js-yaml to v4
• Update dependency jwt-decode to v4
• Update dependency mem to v10
• Update dependency minimatch to v10
• Update dependency mocha to v11
• Update dependency nocache to v4
• Update dependency nock to v14
• Update dependency node-fetch to v3
• Update dependency nyc to v17
• Update dependency otp to v1
• Update dependency pa11y to v8
• Update dependency sinon to v19
• Update dependency sinon-chai to v4
• Update dependency supertest to v7
• Update dependency ws to v8
• Update stefanzweifel/git-auto-commit-action action to v5
• Update tibdex/github-app-token action to v2
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency http-proxy-middleware to v2 [SECURITY]
• Update Helm release nodejs to v3.1.1
• Update dependency applicationinsights to v2.9.6
• Update Node.js to v18.20.6
• Update Yarn to v3.8.7
• Update dependency @babel/traverse to v7.26.9
• Update dependency hashicorp/terraform to v1.10.5
• Update dependency js-yaml to v3.14.1
• Update dependency qs to v6.14.0
• Update dependency sinon to v4.5.0
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

docker-compose

docker-compose.yml

dockerfile

Dockerfile

• hmctspublic.azurecr.io/base/node 18-alpine
• hmctspublic.azurecr.io/base/node 18-alpine

github-actions

.github/workflows/auto-suppress-CVEs.yml

• tibdex/github-app-token v1
• actions/checkout v3
• stefanzweifel/git-auto-commit-action v4

.github/workflows/scheduled-dummy-commit.yml

• tibdex/github-app-token v1
• actions/checkout v3
• stefanzweifel/git-auto-commit-action v4

helm-requirements

charts/ccd-api-gateway-web/Chart.yaml

• nodejs 3.1.0

helm-values

charts/ccd-api-gateway-web/values.yaml

helmv3

charts/ccd-api-gateway-web/Chart.yaml

• nodejs 3.1.0

npm

package.json

• @hmcts/nodejs-healthcheck ^1.8.0
• @hmcts/nodejs-logging ^4.0.4
• @hmcts/properties-volume ^0.0.14
• applicationinsights 2.9.1
• body-parser ^1.20.1
• config ^3.3.7
• cookie ^0.7.0
• cookie-parser ~1.4.3
• cross-env ^5.2.1
• debug ~2.6.3
• dont-sniff-mimetype ^1.1.0
• express ^5.0.0
• form-data ^2.1.4
• handlebars ^4.7.7
• http-proxy-middleware ^0.20.0
• https-proxy-agent ^2.2.3
• js-yaml ^3.13.1
• jwt-decode ^2.2.0
• lodash ^4.17.21
• mem ^6.0.0
• nocache ^2.1.0
• node-cache ^5.1.0
• node-fetch ^2.6.7
• nyc ^15.1.0
• otp ^0.1.3
• chai ^4.0.2
• chai-http ^4.2.1
• eslint ^6.5.1
• eslint-plugin-mocha ^6.1.1
• fetch-mock ^6.5.2
• git-message ^2.0.2
• istanbul ^0.4.5
• jsonwebtoken ^9.0.0
• mocha ^5.2.0
• moment ^2.29.4
• nock ^13.3.2
• pa11y ^5.2.0
• proxyquire ^2.0.1
• should ^13.2.3
• should-http ^0.1.0
• sinon 4.1.3
• sinon-chai ^2.11.0
• sinon-express-mock ^2.0.0
• sonar-scanner ^3.1.0
• supertest ^6.3.3
• node ^18.17.0
• js-yaml 3.13.1
• lodash ^4.17.21
• handlebars ^4.7.7
• mem ^6.0.0
• minimist ^1.2.6
• ini ^1.3.7
• glob-parent ^5.1.2
• ws ^6.2.2
• ansi-regex ^5.0.1
• follow-redirects ^1.15.6
• moment ^2.29.4
• async ^2.6.4
• minimatch ^3.0.5
• json5 ^2.2.2
• cookiejar ^2.1.4
• qs ^6.10.3
• @babel/traverse 7.23.2
• micromatch ^4.0.8
• braces ^3.0.3
• yarn 3.4.1

nvm

.nvmrc

• node 18.17.0

terraform

infrastructure/main.tf

infrastructure/state.tf

• azurerm ~> 4.0

terraform-version

infrastructure/.terraform-version

• hashicorp/terraform 1.3.9

---

• Check this box to trigger a request for Renovate to run again on this repository