Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
npm	babel-eslint
npm	build-url
npm	codacy-coverage
npm	codecov
npm	csurf
npm	govuk-elements-sass
npm	govuk_template_jinja
npm	i18next-express-middleware
npm	ldclient-node
npm	request
npm	request-promise-native
npm	tslint
npm	tslint-config-standard
npm	tslint-microsoft-contrib

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Replace dependency babel-eslint with @babel/eslint-parser ^7.11.0
• Update dependency @hmcts/nodejs-healthcheck to v1.8.6
• Update dependency @hmcts/properties-volume to ^0.0.14
• Update dependency @types/chai-spies to v1.0.6
• Update dependency @types/config to ^0.0.41
• Update dependency @types/csurf to v1.11.5
• Update dependency @types/express to v4.17.25
• Update dependency @types/i18next-sprintf-postprocessor to v0.2.3
• Update dependency @types/jsonwebtoken to v8.5.9
• Update dependency @types/mocha to v9.1.1
• Update dependency @types/nunjucks to v3.2.6
• Update dependency @types/request-promise-native to v1.0.21
• Update dependency @types/shortid to ^0.0.32
• Update dependency @types/sinon-chai to v3.2.12
• Update dependency @types/supertest to v2.0.16
• Update dependency ajv to v6.12.6
• Update dependency analytics to v0.8.19
• Update dependency applicationinsights to v2.9.8
• Update dependency chai-as-promised to v7.1.2 (chai-as-promised, @types/chai-as-promised)
• Update dependency config to v3.3.12
• Update dependency cookie-parser to v1.4.7
• Update dependency gulp-replace to v1.1.4
• Update dependency jquery to v3.7.1
• Update dependency launchdarkly-node-server-sdk to v7.0.4
• Update dependency mocha-junit-reporter to v2.2.1
• Update dependency mochawesome to v7.1.4
• Update dependency nocache to v3.0.4
• Update dependency serve-favicon to v2.5.1
• Update dependency tough-cookie to v4.1.4
• Update dependency ua-parser-js to v0.7.41
• Update Node.js to v18.20.8
• Update dependency @analytics/google-tag-manager to ^0.6.0
• Update dependency @hmcts/info-provider to v1.4.0
• Update dependency @types/lodash to v4.17.23
• Update dependency @types/node to v18.19.130
• Update dependency bootstrap-datepicker to v1.10.1
• Update dependency chai to v4.5.0 (chai, @types/chai)
• Update dependency cookies to ^0.9.0 (cookies, @types/cookies)
• Update dependency debug to v4.4.3
• Update dependency decode-uri-component to v0.4.1
• Update dependency eslint to v8.57.1
• Update dependency govuk-frontend to v4.10.1
• Update dependency gulp-rename to v2.1.0
• Update dependency hashicorp/terraform to v1.14.5
• Update dependency html_codesniffer to v2.5.1
• Update dependency http-cache-semantics to v4.2.0
• Update dependency jquery to v3.7.1
• Update dependency moment to v2.30.1
• Update dependency nock to v13.5.6
• Update dependency node-fetch to v2.7.0
• Update dependency randomstring to v1.3.1
• Update dependency reflect-metadata to ^0.2.0
• Update dependency sass to v1.97.3
• Update dependency sinon to v15.2.0
• Update dependency sonarqube-scanner to v2.9.1
• Update dependency tsconfig-paths to v3.15.0
• Update dependency webdriverio to v7.40.0
• Update dependency xml2js to v0.6.2
• Update Terraform azurerm to v3.117.1
• Update typescript-eslint monorepo to v5.62.0 (@typescript-eslint/eslint-plugin, @typescript-eslint/eslint-plugin-tslint, @typescript-eslint/parser)
• Update Yarn to v3.8.7
• Update actions/checkout action to v6
• Update actions/setup-node action to v6
• Update dependency @hmcts/properties-volume to v1
• Update dependency @types/chai to v5
• Update dependency @types/config to v3
• Update dependency @types/express to v5
• Update dependency @types/jsonwebtoken to v9
• Update dependency @types/shortid to v2
• Update dependency @types/supertest to v6
• Update dependency ajv to v8
• Update dependency ansi-regex to v6
• Update dependency applicationinsights to v3
• Update dependency bl to v6
• Update dependency build-url to v6
• Update dependency chai to v6
• Update dependency chai-as-promised to v8 (chai-as-promised, @types/chai-as-promised)
• Update dependency cmc-cookies-manager to v3
• Update dependency codeceptjs to v3
• Update dependency config to v4
• Update dependency eslint to v10
• Update dependency fs-extra to v11
• Update dependency glob-parent to v6
• Update dependency govuk-frontend to v6
• Update dependency gulp to v5
• Update dependency gulp-sass to v6
• Update dependency helmet to v8
• Update dependency hosted-git-info to v9
• Update dependency hpkp to v3
• Update dependency http-status-codes to v2
• Update dependency husky to v9
• Update dependency i18next to v25
• Update dependency i18next-conv to v16
• Update dependency ini to v6
• Update dependency jquery to v4
• Update dependency js-base64 to v3
• Update dependency jsdom to v28
• Update dependency json5 to v2
• Update dependency mime to v4
• Update dependency mocha to v10.8.2 (mocha, @types/mocha)
• Update dependency mocha to v11
• Update dependency nocache to v4
• Update dependency nock to v14
• Update dependency node-fetch to v3
• Update dependency normalize-url to v9
• Update dependency nyc to v17
• Update dependency otp to v2
• Update dependency pa11y to v9
• Update dependency redis to v5
• Update dependency sinon to v21
• Update dependency sinon-chai to v4 (sinon-chai, @types/sinon-chai)
• Update dependency sonarqube-scanner to v4
• Update dependency string.prototype.startswith to v1
• Update dependency supertest to v7
• Update dependency tough-cookie to v6
• Update dependency trim-newlines to v5
• Update dependency ts-node to v10
• Update dependency tsconfig-paths to v4
• Update dependency tslint to v6
• Update dependency typescript to v5
• Update dependency ua-parser-js to v2
• Update dependency urlencode to v2
• Update dependency uuid to v13
• Update dependency webdriverio to v9
• Update dependency yargs-parser to v22
• Update github/codeql-action action to v4
• Update Node.js to v24 (node, @types/node)
• Update Terraform azurerm to v4
• Update typescript-eslint monorepo (major) (@typescript-eslint/eslint-plugin, @typescript-eslint/eslint-plugin-tslint, @typescript-eslint/parser)
• Update Yarn to v4
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update Helm release ccd to v8.0.29
• Update Helm release cmc-claim-store to v4.1.56
• Update Helm release idam-pr to v2.3.0
• Update Helm release ccd to v9

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency body-parser to v1.20.3 [SECURITY]
• Update dependency formidable to v3.5.4 [SECURITY]
• Update dependency lodash to v4.17.23 [SECURITY]
• Update dependency path-to-regexp to v0.1.12 [SECURITY]
• Update dependency ws to v7.5.10 [SECURITY]
• Update dependency axios to v1.13.5 [SECURITY]
• Update dependency express to v4.20.0 [SECURITY]
• Update dependency jsonwebtoken to v9 [SECURITY]
• Update dependency tar to v7 [SECURITY]
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (4)

docker-compose.functional-tests.yml (1)

• selenium/standalone-chrome 3.141.59-20210607

docker-compose.nightly-functional-tests.yml (1)

• selenium/standalone-chrome 3.141.59-20210607

docker-compose.smoke-tests.yml (1)

• selenium/standalone-chrome 3.141.59-20210607

docker-compose.yml

dockerfile (2)

Dockerfile (1)

• hmctspublic.azurecr.io/base/node 18-alpine

integration-tests.Dockerfile (1)

• hmctspublic.azurecr.io/base/node 18-alpine

github-actions (2)

.github/workflows/codeql-analysis.yml (4)

• actions/checkout v2 → [Updates: v6]
• github/codeql-action v1 → [Updates: v4]
• github/codeql-action v1 → [Updates: v4]
• github/codeql-action v1 → [Updates: v4]

.github/workflows/push.yml (2)

• actions/setup-node v1 → [Updates: v6]
• node 18.x → [Updates: 24.x]

helm-values (1)

charts/cmc-citizen-frontend/values.yaml

helmv3 (1)

charts/cmc-citizen-frontend/Chart.yaml (5)

• nodejs 3.1.1
• idam-pr 2.2.7 → [Updates: 2.3.0]
• cmc-claim-store 4.1.43 → [Updates: 4.1.56]
• ccd 8.0.27 → [Updates: 8.0.29, 9.2.1]
• xui-webapp ~1.0.8

npm (1)

package.json (162)

• @analytics/google-tag-manager ^0.5.3 → [Updates: ^0.6.0]
• @hmcts/class-validator ^0.9.1-e
• @hmcts/cmc-draft-store-middleware ^2.0.1
• @hmcts/cmc-validators ^0.2.6
• @hmcts/cookie-encrypter ^1.0.1
• @hmcts/ctsc-web-chat ^0.3.10
• @hmcts/draft-store-client ^1.2.1
• @hmcts/info-provider ^1.0.0 → [Updates: ^1.0.0]
• @hmcts/nodejs-healthcheck ^1.8.0 → [Updates: ^1.8.0]
• @hmcts/nodejs-logging ^4.0.4
• @hmcts/os-places-client ^1.1.7
• @hmcts/properties-volume ^0.0.13 → [Updates: ^0.0.14, ^1.0.0]
• @hmcts/requestretry ^1.1.2
• @taoqf/javascript-state-machine ^3.1.6
• @types/config ^0.0.38 → [Updates: ^0.0.41, ^3.0.0]
• @types/cookies ^0.7.6 → [Updates: ^0.9.0]
• @types/csurf ^1.9.36 → [Updates: ^1.9.36]
• @types/express ^4.17.21 → [Updates: ^4.17.21, ^5.0.0]
• @types/i18next-sprintf-postprocessor ^0.2.0 → [Updates: ^0.2.0]
• @types/lodash ^4.14.170 → [Updates: ^4.14.170]
• @types/node ^18.16.0 → [Updates: ^18.16.0, ^24.0.0]
• @types/nunjucks ^3.1.4 → [Updates: ^3.1.4]
• @types/request-promise-native ^1.0.16 → [Updates: ^1.0.16]
• @types/shortid ^0.0.29 → [Updates: ^0.0.32, ^2.0.0]
• analytics ^0.8.1 → [Updates: ^0.8.1]
• applicationinsights ^2.9.5 → [Updates: ^2.9.5, ^3.0.0]
• body-parser ^1.19.0 → [Updates: ^1.19.0]
• bootstrap-datepicker 1.9.0 → [Updates: 1.10.1]
• build-url ^2.0.0 → [Updates: ^6.0.0]
• class-transformer ^0.5.1
• classlist-polyfill ^1.2.0
• cmc-cookies-manager 3.0.3 → [Updates: 3.0.3]
• config ^3.3.3 → [Updates: ^3.3.3, ^4.0.0]
• cookie-parser ^1.4.5 → [Updates: ^1.4.5]
• cookies ^0.8.0 → [Updates: ^0.9.0]
• csurf ^1.10.0
• express ^4.19.2 → [Updates: ^4.19.2]
• fs 0.0.2
• fs-extra ^9.1.0 → [Updates: ^11.0.0]
• govuk-elements-sass ^3.1.3
• govuk-frontend 4.8.0 → [Updates: 4.10.1, 6.0.0]
• govuk_template_jinja 0.26.0
• gulp ^4.0.2 → [Updates: ^5.0.0]
• helmet ^4.6.0 → [Updates: ^8.0.0]
• hpkp ^2.0.2 → [Updates: ^3.0.0]
• http-status-codes ^1.4.0 → [Updates: ^2.0.0]
• i18next ^18.0.0 → [Updates: ^25.0.0]
• i18next-conv ^10.2.0 → [Updates: ^16.0.0]
• i18next-express-middleware ^2.0.0
• i18next-sprintf-postprocessor ^0.2.2
• jquery 3.6.0 → [Updates: 3.7.1, 4.0.0]
• js-base64 ^2.5.1 → [Updates: ^3.0.0]
• launchdarkly-node-server-sdk ^7.0.0 → [Updates: ^7.0.0]
• ldclient-node ^5.8.0
• lodash ^4.17.21 → [Updates: ^4.17.21]
• mime ^2.4.6 → [Updates: ^4.0.0]
• moment ^2.29.4 → [Updates: ^2.29.4]
• moment-precise-range-plugin ^1.3.0
• nocache ^3.0.1 → [Updates: ^3.0.1, ^4.0.0]
• node-cache ^5.1.2
• nodelist-foreach-polyfill ^1.2.0
• nunjucks ^3.2.0
• nunjucks-numeral-filter 0.0.2
• otp ^0.1.3 → [Updates: ^2.0.0]
• reflect-metadata ^0.1.13 → [Updates: ^0.2.0]
• request ^2.88.2
• request-promise-native ^1.0.8
• require-directory ^2.1.1
• serve-favicon ^2.5.0 → [Updates: ^2.5.0]
• string.prototype.startswith ^0.2.0 → [Updates: ^1.0.0]
• to-boolean ^1.0.0
• ts-node ^9.1.1 → [Updates: ^10.0.0]
• tsconfig-paths ^3.9.0 → [Updates: ^3.9.0, ^4.0.0]
• tslint-microsoft-contrib ^6.2.0
• typescript ^3.9.8 → [Updates: ^5.0.0]
• uuid ^3.4.0 → [Updates: ^13.0.0]
• webdriverio ^7.7.4 → [Updates: ^7.7.4, ^9.0.0]
• @hmcts/cmc-supported-browsers ^1.0.1
• @types/chai ^4.2.18 → [Updates: ^4.2.18, ^5.0.0]
• @types/chai-as-promised ^7.1.4 → [Updates: ^7.1.4, ^8.0.0]
• @types/chai-spies ^1.0.3 → [Updates: ^1.0.3]
• @types/jsonwebtoken ^8.3.7 → [Updates: ^8.3.7, ^9.0.0]
• @types/mocha * → [Updates: *]
• @types/sinon-chai ^3.2.5 → [Updates: ^3.2.5, ^4.0.0]
• @types/supertest * → [Updates: *]
• @typescript-eslint/eslint-plugin ^5.30.7 → [Updates: ^5.30.7, ^8.0.0]
• @typescript-eslint/eslint-plugin-tslint ^5.30.7 → [Updates: ^5.30.7, ^7.0.0]
• @typescript-eslint/parser ^5.30.7 → [Updates: ^5.30.7, ^8.0.0]
• babel-eslint ^10.1.0 → [Updates: ^7.11.0]
• chai ^4.2.0 → [Updates: ^4.2.0, ^6.0.0]
• chai-as-promised ^7.1.1 → [Updates: ^7.1.1, ^8.0.0]
• codacy-coverage 3.4.0
• codeceptjs ^2.6.11 → [Updates: ^3.0.0]
• codecov ^3.8.2
• debug ^4.1.1 → [Updates: ^4.1.1]
• eslint ^8.20.0 → [Updates: ^8.20.0, ^10.0.0]
• gulp-livereload ^4.0.2
• gulp-nodemon ^2.5.0
• gulp-plumber ^1.2.1
• gulp-rename ^2.0.0 → [Updates: ^2.0.0]
• gulp-replace ^1.1.3 → [Updates: ^1.1.3]
• gulp-sass ^5.1.0 → [Updates: ^6.0.0]
• html_codesniffer 2.4.1 → [Updates: 2.5.1]
• husky ^6.0.0 → [Updates: ^9.0.0]
• jsdom ^16.6.0 → [Updates: ^28.0.0]
• jsonwebtoken ^8.5.1 → [Updates: ^9.0.0]
• mocha ^10.2.0 → [Updates: ^10.2.0, ^11.0.0]
• mocha-junit-reporter ^2.2.0 → [Updates: ^2.2.0]
• mocha-multi ^1.1.7
• mocha-parallel-tests ^2.3.0
• mochawesome ^7.0.3 → [Updates: ^7.0.3]
• mock-require ^3.0.3
• nock ^13.3.1 → [Updates: ^13.3.1, ^14.0.0]
• nyc ^15.1.0 → [Updates: ^17.0.0]
• pa11y ^6.2.3 → [Updates: ^9.0.0]
• randomstring ^1.1.5 → [Updates: ^1.1.5]
• sass ^1.48.0 → [Updates: ^1.48.0]
• sass-lint ^1.13.1
• sinon ^15.1.0 → [Updates: ^15.1.0, ^21.0.0]
• sinon-chai ^3.7.0 → [Updates: ^4.0.0]
• sinon-express-mock ^2.2.1
• sonarqube-scanner ^2.8.0 → [Updates: ^2.8.0, ^4.0.0]
• supertest ^4.0.2 → [Updates: ^7.0.0]
• ts-mockito ^2.6.1
• tslint ^5.20.1 → [Updates: ^6.0.0]
• tslint-config-standard ^9.0.0
• urlencode ^1.1.0 → [Updates: ^2.0.0]
• webdriverio ^7.7.4 → [Updates: ^7.7.4, ^9.0.0]
• node >=18.16.0
• path-to-regexp ^0.1.10 → [Updates: ^0.1.10]
• eslint ^5.0.0 → [Updates: ^10.0.0]
• jquery ^3.5.0 → [Updates: ^3.5.0, ^4.0.0]
• lodash ^4.17.21 → [Updates: ^4.17.21]
• yargs-parser ^20.2.7 → [Updates: ^22.0.0]
• ini ^1.3.6 → [Updates: ^6.0.0]
• kind-of ^6.0.3
• axios ^1.0.0 → [Updates: ^1.0.0]
• bl ^1.2.3 → [Updates: ^6.0.0]
• node-fetch ^2.6.1 → [Updates: ^2.6.1, ^3.0.0]
• y18n ^5.0.5
• ws ^7.4.6 → [Updates: ^7.4.6]
• websocket-extensions ^0.1.4
• redis ^3.1.1 → [Updates: ^5.0.0]
• merge ^2.1.1
• ua-parser-js ^0.7.24 → [Updates: ^0.7.24, ^2.0.0]
• hosted-git-info ^3.0.8 → [Updates: ^9.0.0]
• merge ^2.1.1
• glob-parent ^5.1.2 → [Updates: ^6.0.0]
• trim-newlines ^4.0.1 → [Updates: ^5.0.0]
• normalize-url ^6.0.1 → [Updates: ^9.0.0]
• ansi-regex ^3.0.1 → [Updates: ^6.0.0]
• decode-uri-component 0.2.1 → [Updates: 0.4.1]
• http-cache-semantics 4.1.1 → [Updates: 4.2.0]
• json5 1.0.2 → [Updates: 2.2.3]
• nunjucks 3.2.4
• xml2js 0.5.0 → [Updates: 0.6.2]
• cookiejar 2.1.4
• ajv 6.12.3 → [Updates: 6.12.6, 8.18.0]
• formidable ^3.2.4 → [Updates: ^3.2.4]
• tar 6.2.1 → [Updates: 7.5.8]
• tough-cookie 4.1.3 → [Updates: 4.1.4, 6.0.0]
• yarn 3.5.0 → [Updates: 3.8.7, 4.12.0]

nvm (1)

.nvmrc (1)

• node 18.20.3 → [Updates: 18.20.8, 24.13.1]

renovate-config-presets (1)

renovate.json

terraform (3)

infrastructure/main.tf

infrastructure/state.tf (1)

• azurerm 3.45.0 → [Updates: 3.117.1, 4.61.0]

infrastructure/versions.tf (1)

• hashicorp/terraform >= 0.13

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.3.5 → [Updates: 1.14.5]

---

• Check this box to trigger a request for Renovate to run again on this repository