Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
npm	@babel/plugin-proposal-private-property-in-object

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update node.js to 78c4572
• chore(deps): update actions/upload-artifact action to v3.2.1
• chore(deps): update dependency eslint to v8.57.1
• chore(deps): update dependency eslint-plugin-import to v2.32.0
• chore(deps): update dependency eslint-plugin-promise to v6.6.0
• chore(deps): update dependency prettier to v3.8.1
• chore(deps): update nginx docker tag to v1.29.5
• chore(deps): update ossf/scorecard-action action to v2.4.3
• chore(deps): update react monorepo to v18.3.1 (react, react-dom)
• chore(deps): update step-security/harden-runner action to v2.14.2
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-node action to v6
• chore(deps): update dependency eslint to v10
• chore(deps): update dependency eslint-plugin-n to v17
• chore(deps): update dependency eslint-plugin-promise to v7
• chore(deps): update dependency node to v24
• chore(deps): update github/codeql-action action to v4
• fix(deps): update dependency @testing-library/react to v16
• fix(deps): update dependency web-vitals to v5
• fix(deps): update react monorepo to v19 (major) (react, react-dom)
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update docker/login-action digest to 3227f53
• chore(deps): update nginx:1.25.4-alpine docker digest to 31bad00
• chore(deps): update sonarsource/sonarcloud-github-action digest to ba3875e
• chore(deps): update actions/checkout action to v4.3.1
• chore(deps): update actions/setup-node action to v4.4.0
• chore(deps): update dependency eslint-plugin-react to v7.37.5
• chore(deps): update github/codeql-action action to v3.32.4
• chore(deps): update testing-library monorepo (@testing-library/jest-dom, @testing-library/react, @testing-library/user-event)
• chore(deps): update actions/dependency-review-action action to v4
• chore(deps): update actions/upload-artifact action to v6
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• node 21-alpine@sha256:d3271e4bd89eec4d97087060fd4db0c238d9d22fcfad090a73fa9b5128699888 → [Updates: 24-alpine, 21-alpine]
• nginx 1.25.4-alpine@sha256:6a2f8b28e45c4adea04ec207a251fd4a2df03ddc930f782af51e315ebc76e9a9 → [Updates: 1.29.5-alpine, 1.25.4-alpine]

github-actions (3)

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.7.0@63c24ba6bd7ba022e95695ff85de572c04a18142 → [Updates: v2.14.2]
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.3.1, v6.0.2]
• actions/dependency-review-action v3.1.5@c74b580d73376b7750d3d2a50bfb8adc2c937507 → [Updates: v4.8.3]

.github/workflows/release-npm.yml (4)

• step-security/harden-runner v2.7.0@63c24ba6bd7ba022e95695ff85de572c04a18142 → [Updates: v2.14.2]
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.3.1, v6.0.2]
• actions/setup-node v4.0.2@60edb5dd545a775178f52524783378180af0d1f8 → [Updates: v4.4.0, v6.2.0]
• node 20.x → [Updates: 24.x]

.github/workflows/super-devsecops.yml (23)

• step-security/harden-runner v2.7.0@63c24ba6bd7ba022e95695ff85de572c04a18142 → [Updates: v2.14.2]
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.3.1, v6.0.2]
• step-security/harden-runner v2.7.0@63c24ba6bd7ba022e95695ff85de572c04a18142 → [Updates: v2.14.2]
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.3.1, v6.0.2]
• actions/setup-node v4.0.2@60edb5dd545a775178f52524783378180af0d1f8 → [Updates: v4.4.0, v6.2.0]
• step-security/harden-runner v2.7.0@63c24ba6bd7ba022e95695ff85de572c04a18142 → [Updates: v2.14.2]
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.3.1, v6.0.2]
• actions/setup-node v4.0.2@60edb5dd545a775178f52524783378180af0d1f8 → [Updates: v4.4.0, v6.2.0]
• step-security/harden-runner v2.7.0@63c24ba6bd7ba022e95695ff85de572c04a18142 → [Updates: v2.14.2]
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.3.1, v6.0.2]
• github/codeql-action v3.23.0@e5f05b81d5b6ff8cfa111c80c22c5fd02a384118 → [Updates: v3.32.4, v4.32.4]
• github/codeql-action v3.23.0@e5f05b81d5b6ff8cfa111c80c22c5fd02a384118 → [Updates: v3.32.4, v4.32.4]
• github/codeql-action v3.23.0@e5f05b81d5b6ff8cfa111c80c22c5fd02a384118 → [Updates: v3.32.4, v4.32.4]
• step-security/harden-runner v2.7.0@63c24ba6bd7ba022e95695ff85de572c04a18142 → [Updates: v2.14.2]
• SonarSource/sonarcloud-github-action 44eed6088a971ec48af9300c3701483b8815f622 → [Updates: undefined]
• step-security/harden-runner v2.7.0@63c24ba6bd7ba022e95695ff85de572c04a18142 → [Updates: v2.14.2]
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.3.1, v6.0.2]
• ossf/scorecard-action v2.3.1@0864cf19026789058feabb7e87baa5f140aac736 → [Updates: v2.4.3]
• actions/upload-artifact v3.1.3@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 → [Updates: v3.2.1, v6.0.0]
• github/codeql-action v3.23.0@e5f05b81d5b6ff8cfa111c80c22c5fd02a384118 → [Updates: v3.32.4, v4.32.4]
• step-security/harden-runner v2.7.0@63c24ba6bd7ba022e95695ff85de572c04a18142 → [Updates: v2.14.2]
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.3.1, v6.0.2]
• docker/login-action 83a00bc1ab5ded6580f31df1c49e6aaa932d840d → [Updates: undefined]

npm (1)

package.json (15)

• @babel/plugin-proposal-private-property-in-object ^7.21.11
• @testing-library/jest-dom ^6.1.4 → [Updates: ^6.1.4]
• @testing-library/react ^14.1.2 → [Updates: ^14.1.2, ^16.0.0]
• @testing-library/user-event ^14.0.0 → [Updates: ^14.0.0]
• react ^18.2.0 → [Updates: ^18.2.0, ^19.0.0]
• react-dom ^18.2.0 → [Updates: ^18.2.0, ^19.0.0]
• react-scripts 5.0.1
• web-vitals ^3.0.0 → [Updates: ^5.0.0]
• eslint ^8.56.0 → [Updates: ^8.56.0, ^10.0.0]
• eslint-config-standard ^17.1.0
• eslint-plugin-import ^2.29.0 → [Updates: ^2.29.0]
• eslint-plugin-n ^16.6.2 → [Updates: ^17.0.0]
• eslint-plugin-promise ^6.0.0 → [Updates: ^6.0.0, ^7.0.0]
• eslint-plugin-react ^7.33.2 → [Updates: ^7.33.2]
• prettier 3.2.5 → [Updates: 3.8.1]

---

• Check this box to trigger a request for Renovate to run again on this repository