Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
npm	@nicky-lenaers/ngx-scroll-to
npm	@stryker-mutator/html-reporter
npm	@stryker-mutator/typescript
npm	@types/faker
npm	eslint-plugin-eslint-comments
npm	govuk-elements-sass
npm	govuk_frontend_toolkit

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Replace dependency eslint-plugin-eslint-comments with @eslint-community/eslint-plugin-eslint-comments ^3.2.0
• Update angular monorepo (@angular/animations, @angular/common, @angular/compiler, @angular/compiler-cli, @angular/core, @angular/elements, @angular/forms, @angular/language-service, @angular/platform-browser, @angular/platform-browser-dynamic, @angular/router, zone.js)
• Update angular-cli monorepo to v20.3.20 (@angular-devkit/build-angular, @angular/cli, @angular/ssr)
• Update dependency @hmcts/ccd-case-ui-toolkit to v7.3.38
• Update dependency @hmcts/ccpay-web-component to v6.5.20
• Update dependency @hmcts/media-viewer to v4.2.13
• Update dependency @hmcts/nodejs-healthcheck to v1.8.6
• Update dependency @hmcts/rpx-xui-node-lib to v2.30.7-idam-token-fix-3
• Update dependency @types/faker to v6.6.11
• Update dependency baseline-browser-mapping to v2.10.7
• Update dependency puppeteer to v24.39.1
• Update dependency tough-cookie to v4.1.4
• Update playwright monorepo to v1.58.2 (@playwright/test, playwright)
• Update angular-eslint monorepo to v20.7.0 (@angular-eslint/builder, @angular-eslint/eslint-plugin, @angular-eslint/eslint-plugin-template, @angular-eslint/schematics, @angular-eslint/template-parser)
• Update dependency codeceptjs to v3.7.6
• Update dependency hashicorp/terraform to v1.14.7
• Update dependency launchdarkly-js-client-sdk to v3.9.0
• Update dependency moment-timezone to ^0.6.0
• Update dependency sass to v1.98.0
• Update Node.js to v20.20.1
• Update redis Docker tag to v20.13.4
• Update Yarn to v4.12.0
• Update actions/checkout action to v6
• Update actions/setup-node action to v6
• Update angular monorepo to v21 (major) (@angular/animations, @angular/common, @angular/compiler, @angular/compiler-cli, @angular/core, @angular/elements, @angular/forms, @angular/language-service, @angular/platform-browser, @angular/platform-browser-dynamic, @angular/router)
• Update angular-cli monorepo to v21 (major) (@angular-devkit/build-angular, @angular/cli, @angular/ssr)
• Update angular-eslint monorepo to v21 (major) (@angular-eslint/builder, @angular-eslint/eslint-plugin, @angular-eslint/eslint-plugin-template, @angular-eslint/schematics, @angular-eslint/template-parser)
• Update dependency @edium/fsm to v3
• Update dependency @faker-js/faker to v10
• Update dependency @pact-foundation/pact to v16
• Update dependency @types/jasmine to v6
• Update dependency c8 to v11
• Update dependency chai to v6
• Update dependency config to v4
• Update dependency cookie to v1
• Update dependency dotenv-extended to v3
• Update dependency ejs to v5
• Update dependency global-agent to v4
• Update dependency govuk-frontend to v6
• Update dependency jsdom to v28 (jsdom, @types/jsdom)
• Update dependency marked to v17
• Update dependency ngx-markdown to v21
• Update dependency npm-run-all2 to v8
• Update dependency otplib to v13
• Update dependency pa11y to v9
• Update dependency sinon to v21 (sinon, @types/sinon)
• Update dependency tough-cookie to v6
• Update dependency uuid to v13
• Update dependency wait-on to v9
• Update dependency webpack-cli to v7
• Update dependency zod to v4
• Update Gradle to v9
• Update ngrx monorepo to v21 (major) (@ngrx/effects, @ngrx/router-store, @ngrx/schematics, @ngrx/store, @ngrx/store-devtools)
• Update Node.js to v24 (node, @types/node)
• Update redis Docker tag to v25
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update Gradle to v8.14.4
• Update angularmaterial monorepo to v21 (major) (@angular/cdk, @angular/material)
• Update dependency applicationinsights to v3
• Update dependency axios-mock-adapter to v2
• Update dependency chai-as-promised to v8
• Update dependency exception-formatter to v2
• Update dependency express to v5 (express, @types/express)
• Update dependency flat to v6
• Update dependency form-data to v4.0.5
• Update dependency helmet to v8
• Update dependency loader-utils to v3
• Update dependency mocha to v11
• Update dependency nodemon to v3
• Update dependency sinon-chai to v4
• Update eslint monorepo to v10 (major) (@eslint/js, eslint)
• Update stryker-js monorepo to v9 (major) (@stryker-mutator/api, @stryker-mutator/core, @stryker-mutator/karma-runner, @stryker-mutator/mocha-runner)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• hmctspublic.azurecr.io/base/node 20-alpine
• hmctspublic.azurecr.io/base/node 20-alpine

github-actions (1)

.github/workflows/pr-bot.yml (4)

• actions/checkout v4 → [Updates: v6]
• actions/setup-node v4 → [Updates: v6]
• azure/cli v2
• node 20 → [Updates: 24]

gradle (2)

test_codecept/java/build.gradle (2)

• org.slf4j:slf4j-simple 2.0.17
• com.github.hmcts:fortify-client 1.4.10

test_codecept/java/settings.gradle

gradle-wrapper (1)

test_codecept/java/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14 → [Updates: 8.14.4, 9.4.0]

helm-values (1)

charts/xui-webapp/values.yaml

helmv3 (1)

charts/xui-webapp/Chart.yaml (2)

• nodejs 3.2.0
• redis 20.11.3 → [Updates: 20.13.4, 25.3.2]

npm (2)

api/package.json (2)

• node >=20.19.0
• yarn 4.7.0 → [Updates: 4.12.0]

package.json (206)

• @angular-material-components/datetime-picker 16.0.1
• @angular/animations ^20.3.16 → [Updates: ^20.3.16, ^21.0.0]
• @angular/cdk ^16.2.0 → [Updates: ^21.0.0]
• @angular/common ^20.3.16 → [Updates: ^20.3.16, ^21.0.0]
• @angular/compiler ^20.3.16 → [Updates: ^20.3.16, ^21.0.0]
• @angular/core ^20.3.16 → [Updates: ^20.3.16, ^21.0.0]
• @angular/elements ^20.3.14 → [Updates: ^20.3.14, ^21.0.0]
• @angular/forms ^20.3.16 → [Updates: ^20.3.16, ^21.0.0]
• @angular/material ^16.2.0 → [Updates: ^21.0.0]
• @angular/platform-browser ^20.3.16 → [Updates: ^20.3.16, ^21.0.0]
• @angular/platform-browser-dynamic ^20.3.16 → [Updates: ^20.3.16, ^21.0.0]
• @angular/router ^20.3.16 → [Updates: ^20.3.16, ^21.0.0]
• @angular/ssr ^20.3.1 → [Updates: ^20.3.1, ^21.0.0]
• @dr.pogodin/csurf ^1.16.5
• @edium/fsm ^2.1.2 → [Updates: ^3.0.0]
• @faker-js/faker ^9.2.0 → [Updates: ^10.0.0]
• @hmcts/ccd-case-ui-toolkit 7.3.37 → [Updates: 7.3.38]
• @hmcts/ccpay-web-component 6.5.17 → [Updates: 6.5.20]
• @hmcts/frontend 0.0.50-alpha
• @hmcts/media-viewer 4.2.12 → [Updates: 4.2.13]
• @hmcts/nodejs-healthcheck 1.8.5 → [Updates: 1.8.6]
• @hmcts/properties-volume ^1.3.1
• @hmcts/rpx-xui-common-lib 3.2.6
• @hmcts/rpx-xui-node-lib 2.30.7-exui-4177-tax-cve-fix → [Updates: 2.30.7-idam-token-fix-3]
• @microsoft/applicationinsights-web ^3.1.0
• @ng-idle/core ^16.0.0
• @ng-idle/keepalive ^16.0.0
• @ngrx/effects ^20 → [Updates: ^21.0.0]
• @ngrx/router-store ^20 → [Updates: ^21.0.0]
• @ngrx/store ^20 → [Updates: ^21.0.0]
• @ngrx/store-devtools ^20 → [Updates: ^21.0.0]
• @nicky-lenaers/ngx-scroll-to ^14.0.0
• accessibility-checker ^4.0.0
• applicationinsights 1.8.10 → [Updates: 3.14.0]
• axios ^1.13.5
• axios-mock-adapter ^1.22.0 → [Updates: ^2.0.0]
• class-transformer ^0.5.0
• compression ^1.7.4
• config ^3.2.5 → [Updates: ^4.0.0]
• cookie-parser ^1.4.4
• core-js ^3.19.3
• crypto-js ^4.2.0
• dotenv-extended ^2.7.1 → [Updates: ^3.0.0]
• ejs ^3.1.10 → [Updates: ^5.0.0]
• eligrey-classlist.js ^1.2.20180112
• exceljs ^4.4.0
• exception-formatter 1.0.7 → [Updates: 2.1.2]
• express ^4.22.0 → [Updates: ^5.0.0]
• file-saver ^2.0.2
• form-data ^2.5.5 → [Updates: ^4.0.0]
• get-port ^7.0.0
• git-rev-sync ^3.0.2
• global-agent ^3.0.0 → [Updates: ^4.0.0]
• govuk-elements-sass ^3.1.3
• govuk-frontend ^4.9.0 → [Updates: ^6.0.0]
• govuk_frontend_toolkit ^9.0.0
• helmet ^7.2.0 → [Updates: ^8.0.0]
• http-proxy-middleware ^3.0.5
• isomorphic-fetch ^3.0.0
• karma-coverage ^2.2.1
• launchdarkly-js-client-sdk 3.8.1 → [Updates: 3.9.0]
• local-storage ^2.0.0
• lodash ^4.17.23
• lz-string ^1.5.0
• marked ^12.0.2 → [Updates: ^17.0.0]
• material-design-icons ^3.0.1
• moment-timezone ^0.5.28 → [Updates: ^0.6.0]
• ngx-chips 3.0.0
• ngx-logger ^5.0.12
• ngx-markdown ^18.1.0 → [Updates: ^21.0.0]
• ngx-pagination ^6.0.3
• otplib ^12.0.1 → [Updates: ^13.0.0]
• p-iteration ^1.1.7
• pegjs ^0.10.0
• portfinder ^1.0.28
• prettier ^3.8.0
• rx-polling-hmcts 1.1.1
• rxjs ^7.8.1
• smoothscroll-polyfill ^0.4.3
• stream ^0.0.3
• striptags ^3.1.1
• swagger-ui-express ^5.0.1
• ts-enum-util 4.1.0
• tslib ^2.6.1
• web-animations-js ^2.3.2
• zod ^3.23.8 → [Updates: ^4.0.0]
• zone.js ~0.15.0 → [Updates: ~0.16.0]
• @angular-devkit/build-angular ^20.3.15 → [Updates: ^20.3.15, ^21.0.0]
• @angular-eslint/builder 20.4.0 → [Updates: 20.7.0, 21.3.0]
• @angular-eslint/eslint-plugin 20.4.0 → [Updates: 20.7.0, 21.3.0]
• @angular-eslint/eslint-plugin-template 20.4.0 → [Updates: 20.7.0, 21.3.0]
• @angular-eslint/schematics 20.4.0 → [Updates: 20.7.0, 21.3.0]
• @angular-eslint/template-parser 20.4.0 → [Updates: 20.7.0, 21.3.0]
• @angular-material-components/moment-adapter ^16.0.1
• @angular/cli ^20.3.15 → [Updates: ^20.3.15, ^21.0.0]
• @angular/compiler-cli ^20.3.16 → [Updates: ^20.3.16, ^21.0.0]
• @angular/language-service ^20.3.16 → [Updates: ^20.3.16, ^21.0.0]
• @axe-core/playwright ^4.9.1
• @eslint/js ^9.39.2 → [Updates: ^10.0.0]
• @hmcts/playwright-common ^1.1.2
• @ngrx/schematics ^20 → [Updates: ^21.0.0]
• @pact-foundation/pact ^15.0.1 → [Updates: ^16.0.0]
• @pact-foundation/pact-node ^10.18.0
• @playwright/test 1.58.1 → [Updates: 1.58.2]
• @stryker-mutator/api ^8.0.0 → [Updates: ^9.0.0]
• @stryker-mutator/core ^8.0.0 → [Updates: ^9.0.0]
• @stryker-mutator/html-reporter ^3.1.0
• @stryker-mutator/karma-runner ^8.0.0 → [Updates: ^9.0.0]
• @stryker-mutator/mocha-runner ^3.0.1 → [Updates: ^9.0.0]
• @stryker-mutator/typescript ^4.0.0
• @types/applicationinsights-js ^1.0.9
• @types/config ^3.0.0
• @types/cookie-parser ^1.4.2
• @types/crypto-js ^4.0.0
• @types/ejs ^3.0.0
• @types/express ^4.16.1 → [Updates: ^5.0.0]
• @types/express-session ^1.17.0
• @types/faker ^6.0.0 → [Updates: ^6.0.0]
• @types/global-agent ^3.0.0
• @types/jasmine ~3.10.0 → [Updates: ~6.0.0]
• @types/jasminewd2 ~2.0.3
• @types/mocha ^10.0.0
• @types/node ^20.19.0 → [Updates: ^24.0.0]
• @types/proper-lockfile ^4
• @types/sinon ^7.0.13 → [Updates: ^21.0.0]
• @types/swagger-ui-express ^4.1.6
• allure-js-commons ^3.0.0
• axe-html-reporter ^2.2.3
• base-64 ^1.0.0
• baseline-browser-mapping ^2.9.15 → [Updates: ^2.9.15]
• c8 ^9.1.0 → [Updates: ^11.0.0]
• chai ^4.3.10 → [Updates: ^6.0.0]
• chai-as-promised 7.1.2 → [Updates: 8.0.2]
• codeceptjs 3.5.6 → [Updates: 3.7.6]
• codeceptjs-cucumber-json-reporter ^1.0.14
• codelyzer ^6.0.0
• cross-env ^10.0.0
• cucumber-html-report 0.6.5
• cucumber-html-reporter ^7.1.1
• eslint ^9.39.2 → [Updates: ^10.0.0]
• eslint-plugin-eslint-comments ^3.2.0 → [Updates: ^3.2.0]
• husky ^9.1.7
• jasmine-marbles ^0.9.1
• jasmine-spec-reporter ~7.0.0
• jiti ^2.6.1
• jsonpath-plus ^10.3.0
• jsonwebtoken ^9.0.3
• karma ~6.4.2
• karma-chrome-launcher 3.2.0
• karma-coverage ~2.2.0
• karma-coverage-istanbul-reporter ~3.0.0
• karma-jasmine 5.1.0
• karma-jasmine-html-reporter ^2.0.0
• karma-sonarqube-unit-reporter ^0.0.23
• karma-spec-reporter 0.0.36
• mocha ^10.0.0 → [Updates: ^11.0.0]
• mochawesome ^7.0.0
• mochawesome-merge ^5.0.0
• mochawesome-report-generator ^6.0.0
• ngrx-store-freeze ^0.2.4
• node-fetch ^3.0.0
• node-html-parser ^7.0.0
• nodemon ^2.0.19 → [Updates: ^3.0.0]
• npm-run-all2 ^7.0.0 → [Updates: ^8.0.0]
• pa11y ^8.0.0 → [Updates: ^9.0.0]
• playwright 1.58.1 → [Updates: 1.58.2]
• proper-lockfile ^4.1.2
• puppeteer ^24.0.0 → [Updates: ^24.0.0]
• sass ^1.97.3 → [Updates: ^1.97.3]
• sinon ^7.3.2 → [Updates: ^21.0.0]
• sinon-chai ^3.3.0 → [Updates: ^4.0.0]
• sinon-express-mock ^2.2.0
• sonar-scanner ^3.1.0
• start-server-and-test ^2.0.13
• terser-webpack-plugin ^5.3.3
• ts-loader ^9.4.4
• ts-node ~10.9.0
• typescript ~5.9.0
• typescript-eslint ^8.53.1
• underscore ^1.13.6
• uuid ^11.0.0 → [Updates: ^13.0.0]
• wait-on ^8 → [Updates: ^9.0.0]
• webpack ^5.94.0
• webpack-cli ^6.0.0 → [Updates: ^7.0.0]
• webpack-node-externals ^3.0.0
• webpack-source-map-support ^2.0.1
• node >=20.19.0
• form-data 4.0.4 → [Updates: 4.0.5]
• flat ~5.0.1 → [Updates: ~6.0.0]
• loader-utils ~2.0.3 → [Updates: ~3.3.0]
• minimist ^1.2.8
• typed-rest-client ^2.0.0
• braces ^3.0.3
• ws ^8.18.0
• webpack ^5.94.0
• tar-fs ^3.0.9
• xml2js ^0.6.2
• tough-cookie 4.1.3 → [Updates: 4.1.4, 6.0.1]
• semver ^7.6.3
• superagent ^10.2.2
• cookie ^0.7.2 → [Updates: ^1.0.0]
• min-document ^2.19.1
• @types/jsdom ^27 → [Updates: ^28.0.0]
• jsdom ^27.4.0 → [Updates: ^28.0.0]
• qs ^6.15.0
• yarn 4.7.0 → [Updates: 4.12.0]

nvm (1)

.nvmrc (1)

• node 20.19.0 → [Updates: 20.20.1, 24.14.0]

renovate-config-presets (1)

.github/renovate.json

terraform (2)

infrastructure/main.tf (2)

• github.com/hmcts/terraform-module-application-insights 4.x
• github.com/hmcts/cnp-module-redis 4.x

infrastructure/provider.tf (2)

• azurerm ~> 4.0
• hashicorp/terraform ~> 1.11.0 → [Updates: ~> 1.14.0]

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.11.2 → [Updates: 1.14.7]

---

• Check this box to trigger a request for Renovate to run again on this repository