Merge pull request #11 from NHSDigital/dependabotCombined

Combined Dependabot PRs

Author: github-actions[bot]

.github/workflows/scorecard.yml

@@ -37,7 +37,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde # v2.4.2
+        uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
         with:
           results_file: results.sarif
           results_format: sarif

.github/workflows/stage-2-test.yaml

@@ -143,7 +143,7 @@ jobs:
         with:
           fetch-depth: 0 # Full history is needed to improving relevancy of reporting
       - name: "Download coverage report for SONAR"
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v6
         with:
           name: code-coverage-report
       - name: "Perform static analysis"

package.json

@@ -10,10 +10,10 @@
     "@types/jest": "^30.0.0",
     "@typescript-eslint/eslint-plugin": "^8.44.1",
     "@typescript-eslint/parser": "^8.44.1",
-    "esbuild": "^0.25.9",
+    "esbuild": "^0.27.0",
     "eslint": "^9.32.0",
     "eslint-config-airbnb-extended": "^2.3.1",
-    "eslint-config-next": "^15.5.3",
+    "eslint-config-next": "^16.0.3",
     "eslint-config-prettier": "^10.1.8",
     "eslint-import-resolver-typescript": "^4.4.2",
     "eslint-plugin-html": "^8.1.3",
@@ -27,7 +27,7 @@
     "eslint-plugin-security": "^3.0.1",
     "eslint-plugin-sonarjs": "^3.0.4",
     "eslint-plugin-sort-destructure-keys": "^2.0.0",
-    "eslint-plugin-unicorn": "^59.0.1",
+    "eslint-plugin-unicorn": "^62.0.0",
     "jest": "^30.1.3",
     "jest-environment-jsdom": "^30.1.2",
     "jest-html-reporter": "^4.3.0",