Dependency Dashboard

[renovate[bot]]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

[!WARNING] These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	popper.js

Pending Approval

These branches will be created by Renovate only once you click their checkbox below.

• [ ] chore(deps): update actions/checkout action to v4
• [ ] chore(deps): update actions/setup-node action to v4
• [ ] chore(deps): update actions/upload-artifact action to v4
• [ ] chore(deps): update dependency husky to v9
• [ ] chore(deps): update dependency lint-staged to v15
• [ ] chore(deps): update dependency prettier to v3
• [ ] chore(deps): update dependency rails to v8
• [ ] chore(deps): update node.js to v22
• [ ] chore(deps): update release-drafter/release-drafter action to v6
• [ ] fix(deps): update dependency @hotwired/turbo-rails to v8
• [ ] fix(deps): update dependency @rails/ujs to v7
• [ ] fix(deps): update dependency datatables.net-bs4 to v2
• [ ] 🔐 Create all pending approval PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• [ ] fix(deps): update dependency sass to v1.81.1
• [ ] chore(deps): update dependency rails to v7.2.2
• [ ] chore(deps): lock file maintenance
• [ ] Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• [ ] chore(deps): update dependency bootstrap to v5 [security]
• [ ] fix(deps): update dependency bootstrap to v5 [security]
• [ ] chore(deps): update dependency prettier to v2.8.8
• [ ] chore(deps): update dependency rubocop-minitest to v0.36.0

Detected dependencies

bundler

Gemfile

- `ruby 3.3.6` - `minitest-rails undefined` - `pg undefined` - `puma undefined` - `rails '7.1.3.4'` - `coffee-rails undefined` - `jquery-rails undefined` - `jsbundling-rails undefined` - `sass-rails '6.0.0'` - `stimulus-rails undefined` - `turbo-rails undefined` - `ancestry undefined` - `ajax-datatables-rails undefined` - `eventbrite_sdk undefined` - `httparty undefined` - `icalendar undefined` - `icalendar-recurrence undefined` - `json-ld undefined` - `carrierwave undefined` - `image_processing undefined` - `bootstrap undefined` - `cocoon undefined` - `font-awesome-rails undefined` - `select2-rails undefined` - `simple_form undefined` - `devise undefined` - `devise_invitable undefined` - `pundit undefined` - `geocoder undefined` - `leaflet-rails undefined` - `mountain_view undefined` - `view_component undefined` - `groupdate undefined` - `kramdown undefined` - `delayed_job_active_record undefined` - `graphql undefined` - `rack-cors undefined` - `appsignal undefined` - `auto_strip_attributes undefined` - `bootsnap undefined` - `csv undefined` - `enumerize undefined` - `friendly_id undefined` - `invisible_captcha undefined` - `net-imap undefined` - `net-pop undefined` - `net-smtp undefined` - `observer undefined` - `paper_trail undefined` - `uk_postcode undefined` - `byebug undefined` - `dotenv-rails undefined` - `factory_bot_rails undefined` - `timecop undefined` - `better_errors undefined` - `binding_of_caller undefined` - `foreman undefined` - `graphiql-rails undefined` - `letter_opener undefined` - `rails-erd undefined` - `rdoc undefined` - `rubocop '1.69.0'` - `rubocop-graphql '1.5.4'` - `rubocop-minitest '0.35.1'` - `rubocop-performance '1.23.0'` - `rubocop-rails '2.27.0'` - `rubocop-rake undefined` - `spring undefined` - `web-console undefined` - `yard undefined` - `capybara-select-2 undefined` - `database_cleaner-active_record undefined` - `graphql-client undefined` - `json_matchers undefined` - `minitest-rails-capybara undefined` - `minitest-reporters undefined` - `rails-controller-testing undefined` - `selenium-webdriver undefined` - `vcr undefined` - `webmock undefined`

github-actions

.github/workflows/release-drafter.yml

- `release-drafter/release-drafter v5@09c613e259eb8d4e7c81c2cb00618eb5fc4575a7`

.github/workflows/test-and-deploy.yml

- `actions/checkout v3@f43a0e5ff2bd294095638e18286ca9a3d1956744` - `actions/setup-node v3@1a4442cacd436585916779262731d5b162bc6ec7` - `actions/upload-artifact v3@ff15f0306b3f739f7b6fd43fb5d26cd321bd4de5` - `dokku/github-action v1.6.1@036bf9c07f1b40707a16201bc7a349074c3ec554` - `dokku/github-action v1.6.1@036bf9c07f1b40707a16201bc7a349074c3ec554` - `postgres 13.4`

nodenv

.node-version

- `node 20.18.1`

npm

package.json

- `@hotwired/stimulus 3.2.2` - `@hotwired/turbo-rails 7.3.0` - `@nathanvda/cocoon 1.2.14` - `@rails/ujs 6.1.710` - `bootstrap 4.6.2` - `datatables.net-bs4 1.13.11` - `esbuild 0.24.0` - `esbuild-rails 1.0.7` - `jquery 3.7.1` - `leaflet 1.9.4` - `lodash 4.17.21` - `popper.js 1.16.1` - `sass 1.81.0` - `select2 4.0.13` - `husky 8.0.3` - `lint-staged 13.3.0` - `prettier 2.8.1` - `node 20.18.1`

ruby-version

.ruby-version

- `ruby 3.3.6`

---

• [ ] Check this box to trigger a request for Renovate to run again on this repository

[kimadactyl]

@erbridge should we do a one off bundle update && yarn upgrade PR to get everything a bit more up to date or will that mess with renovate?

[erbridge]

Renovate is doing that on its own and I'd prefer the paper trail.

[kimadactyl]

For some reason renovate hasn't prompted us to update Rails against this cve - a little weird

[katjam]

Closing as it was made by a bot over a year ago and we are about to upgrade EVERYTHING

[r-ferrier]

renovate appears to have reopened this - closing again!

[katjam]

@r-ferrier Ha ha - renovate opened again! Not sure if there is some keyword we need state to make it stay closed.