Dependency Dashboard

[bcgov-devops]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository problems

Renovate tried to run on this repository, but found these problems.

• WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• [ ] chore(deps): lock file maintenance

Detected dependencies

docker-compose

docker-compose.yml

- `postgres 15` - `flyway/flyway 10-alpine` - `schemaspy/schemaspy 6.2.4` - `node 22` - `node 22`

dockerfile

backend/Dockerfile

- `node 22.6.0-slim`

frontend/Dockerfile

- `node 22-slim` - `caddy 2.8.4-alpine`

migrations/Dockerfile

- `flyway/flyway 10-alpine`

github-actions

.github/workflows/.tests.yml

- `actions/checkout v4` - `actions/cache v4` - `actions/checkout v4` - `actions/setup-node v4` - `actions/upload-artifact v4` - `actions/checkout v4` - `grafana/k6-action v0.3.1` - `ubuntu 22.04` - `ubuntu 22.04` - `ubuntu 22.04`

.github/workflows/analysis.yml

- `bcgov-nr/action-test-and-analyse v1.2.1` - `actions/checkout v4` - `aquasecurity/trivy-action 0.24.0` - `github/codeql-action v3` - `ubuntu 22.04` - `ubuntu 22.04` - `ubuntu 22.04`

.github/workflows/demo.yml

.github/workflows/merge.yml

- `bcgov-nr/action-get-pr v0.0.1` - `bcgov/quickstart-openshift-helpers v0.6.1` - `bcgov/quickstart-openshift-helpers v0.6.1` - `shrink/actions-docker-registry-tag v4` - `ubuntu 22.04` - `ubuntu 22.04`

.github/workflows/pr-close.yml

- `bcgov/quickstart-openshift-helpers v0.6.1`

.github/workflows/pr-open.yml

- `bcgov-nr/action-builder-ghcr v2.2.0` - `bcgov/quickstart-openshift-helpers v0.6.1` - `ubuntu 22.04` - `ubuntu 22.04`

.github/workflows/pr-validate.yml

- `bcgov/quickstart-openshift-helpers v0.6.1` - `ubuntu 22.04`

.github/workflows/scheduled.yml

- `actions/checkout v4` - `flyway/flyway 10` - `JamesIves/github-pages-deploy-action v4` - `zaproxy/action-full-scan v0.10.0` - `zaproxy/action-full-scan v0.10.0` - `postgis/postgis 16-3.4` - `ubuntu 22.04`

helm-values

charts/app/values.yaml

- `ghcr.io/bcgov/nr-containers/bitnami/postgresql 15.8.0`

helmv3

charts/app/Chart.yaml

- `postgresql 15.5.23`

npm

backend/package.json

- `@nestjs/cli ^10.1.16` - `@nestjs/common ^10.0.0` - `@nestjs/config ^3.0.0` - `@nestjs/core ^10.0.0` - `@nestjs/platform-express ^10.0.0` - `@nestjs/schematics ^10.0.0` - `@nestjs/swagger ^7.0.3` - `@nestjs/terminus ^10.2.1` - `@nestjs/testing ^10.0.0` - `@prisma/client ^5.7.0` - `dotenv ^16.0.1` - `express-prom-bundle ^7.0.0` - `helmet ^7.0.0` - `nest-winston ^1.9.4` - `nestjs-prisma ^0.23.0` - `pg ^8.11.3` - `prom-client ^15.1.0` - `reflect-metadata ^0.2.0` - `rimraf ^6.0.0` - `rxjs ^7.8.0` - `swagger-ui-express ^5.0.0` - `winston ^3.11.0` - `@types/express ^4.17.15` - `@types/jest ^29.0.0` - `@types/node ^20.12.10` - `@types/supertest ^6.0.0` - `istanbul-badges-readme ^1.9.0` - `jest ^29.7.0` - `jest-badges ^0.1.3` - `jest-sonar-reporter ^2.0.0` - `lint-staged ^15.2.4` - `prettier ^3.0.3` - `prisma ^5.7.0` - `source-map-support ^0.5.21` - `supertest ^7.0.0` - `ts-jest ^29.1.1` - `ts-loader ^9.5.0` - `ts-node ^10.9.1` - `tsconfig-paths ^4.2.0` - `typescript ^5.2.2` - `reflect-metadata ^0.2.0`

frontend/package.json

- `@bcgov/bc-sans ^2.1.0` - `@bcgov/design-system-react-components ^0.1.1` - `@emotion/react ^11.11.0` - `@emotion/styled ^11.11.0` - `@mui/icons-material ^5.11.16` - `@mui/material ^5.13.1` - `@mui/system ^5.15.9` - `@mui/x-data-grid ^7.0.0` - `@vitejs/plugin-react ^4.0.0` - `axios ^1.6.8` - `mui-datatables ^4.3.0` - `react ^18.2.0` - `react-dom ^18.2.0` - `react-router ^6.12.1` - `react-router-dom ^6.12.1` - `vite ^5.0.0` - `vite-tsconfig-paths ^5.0.0` - `@faker-js/faker ^8.0.2` - `@playwright/test ^1.43.1` - `@testing-library/jest-dom ^6.0.0` - `@testing-library/react ^16.0.0` - `@testing-library/user-event ^14.4.3` - `@types/mui-datatables ^4.3.5` - `@types/react ^18.2.6` - `@types/react-dom ^18.2.4` - `@vitest/coverage-v8 ^2.0.0` - `@vitest/ui ^2.0.0` - `history ^5.3.0` - `jsdom ^24.0.0` - `msw ^2.0.1` - `playwright ^1.43.1` - `prettier ^3.0.0` - `typescript ^5.1.3` - `vitest ^2.0.0`

tests/integration/package.json

- `axios ^1.6.8` - `dotenv ^16.3.1` - `js-yaml ^4.1.0` - `lodash ^4.17.21`

[DerekRoberts]

Testing, duplicate