The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.
Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.
🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.
Detected Package Files
docker-compose.yml (docker-compose)
Dockerfile (dockerfile)
package.json (npm)
.travis.yml (travis)
Configuration Summary
Based on the default config's presets, Renovate will:
Start dependency updates only once this onboarding PR is merged
Enable Renovate Dependency Dashboard creation.
If Renovate detects semantic commits, it will use semantic commit type fix for dependencies and chore for all others.
Ignore node_modules, bower_components, vendor and various test/tests directories.
Group known monorepo packages together.
Use curated list of recommended non-monorepo package groupings.
apollo-server packages became scoped.
babel-eslint was renamed under the @babel scope.
Replace containerbase dependencies.
cucumber became scoped.
fastify packages became scoped.
hapi became scoped.
Jade was renamed to Pug.
joi became scoped under the hapi organization.
joi was moved out of the hapi organization.
The Kubernetes container registry has changed from k8s.gcr.io to registry.k8s.io.
The Kubernetes container registry has changed from k8s.gcr.io to registry.k8s.io.
The material-ui monorepo org was renamed from @material-ui to @mui.
The messageformat monorepo package naming scheme changed from messageFormat-{{package}}-to-@messageformat/{{package}}.
middie became scoped.
now was renamed to vercel.
@parcel/css was renamed to lightningcss.
react-query/devtools became scoped under the tanstack organization.
react-query became scoped under the tanstack organization.
react-scripts supports TypeScript since version 2.1.0.
The @renovate/pep440 package was renamed to @renovatebot/pep440.
The node-resolve plugin for rollup became scoped.
The vso-task-lib package is now published as azure-pipelines-task-lib.
The vsts-task-lib package is now published as azure-pipelines-task-lib.
The xmldom package is now published as @xmldom/xmldom.
A collection of workarounds for known problems with packages.
🔡 Would you like to change the way Renovate is upgrading your dependencies? Simply edit the renovate.json in this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.
What to Expect
With your current configuration, Renovate will create 33 Pull Requests:
Update dependency async to v2.6.4
- Schedule: ["at any time"]
- Branch name: `renovate/async-2.x-lockfile`
- Merge into: `master`
- Upgrade [async](https://togithub.com/caolan/async) to `2.6.4`
Update dependency cross-env to v7.0.3
- Schedule: ["at any time"]
- Branch name: `renovate/cross-env-7.x-lockfile`
- Merge into: `master`
- Upgrade [cross-env](https://togithub.com/kentcdodds/cross-env) to `7.0.3`
Update dependency nodemon to v1.19.4
- Schedule: ["at any time"]
- Branch name: `renovate/nodemon-1.x-lockfile`
- Merge into: `master`
- Upgrade [nodemon](https://togithub.com/remy/nodemon) to `1.19.4`
Update dependency body-parser to v1.20.2
- Schedule: ["at any time"]
- Branch name: `renovate/body-parser-1.x-lockfile`
- Merge into: `master`
- Upgrade [body-parser](https://togithub.com/expressjs/body-parser) to `1.20.2`
Update dependency consolidate to ^0.16.0
- Schedule: ["at any time"]
- Branch name: `renovate/consolidate-0.x`
- Merge into: `master`
- Upgrade [consolidate](https://togithub.com/tj/consolidate.js) to `^0.16.0`
Update dependency csurf to v1.10.0
- Schedule: ["at any time"]
- Branch name: `renovate/csurf-1.x-lockfile`
- Merge into: `master`
- Upgrade [csurf](https://togithub.com/expressjs/csurf) to `1.10.0`
Update dependency cypress to v3.8.3
- Schedule: ["at any time"]
- Branch name: `renovate/cypress-3.x-lockfile`
- Merge into: `master`
- Upgrade [cypress](https://togithub.com/cypress-io/cypress) to `3.8.3`
Update dependency dont-sniff-mimetype to v1.1.0
- Schedule: ["at any time"]
- Branch name: `renovate/dont-sniff-mimetype-1.x-lockfile`
- Merge into: `master`
- Upgrade [dont-sniff-mimetype](https://togithub.com/helmetjs/dont-sniff-mimetype) to `1.1.0`
Update dependency express to v4.18.2
- Schedule: ["at any time"]
- Branch name: `renovate/express-4.x-lockfile`
- Merge into: `master`
- Upgrade [express](https://togithub.com/expressjs/express) to `4.18.2`
Update dependency express-session to v1.17.3
- Schedule: ["at any time"]
- Branch name: `renovate/express-session-1.x-lockfile`
- Merge into: `master`
- Upgrade [express-session](https://togithub.com/expressjs/session) to `1.17.3`
Update dependency grunt to v1.6.1
- Schedule: ["at any time"]
- Branch name: `renovate/grunt-1.x-lockfile`
- Merge into: `master`
- Upgrade [grunt](https://togithub.com/gruntjs/grunt) to `1.6.1`
Update dependency grunt-cli to v1.4.3
- Schedule: ["at any time"]
- Branch name: `renovate/grunt-cli-1.x-lockfile`
- Merge into: `master`
- Upgrade [grunt-cli](https://togithub.com/gruntjs/grunt-cli) to `1.4.3`
Update dependency grunt-mocha-test to ^0.13.0
- Schedule: ["at any time"]
- Branch name: `renovate/grunt-mocha-test-0.x`
- Merge into: `master`
- Upgrade [grunt-mocha-test](https://togithub.com/pghalliday/grunt-mocha-test) to `^0.13.0`
Update dependency marked to v0.8.2
- Schedule: ["at any time"]
- Branch name: `renovate/marked-0.x`
- Merge into: `master`
- Upgrade [marked](https://togithub.com/markedjs/marked) to `0.8.2`
Update dependency needle to v2.9.1
- Schedule: ["at any time"]
- Branch name: `renovate/needle-2.x`
- Merge into: `master`
- Upgrade [needle](https://togithub.com/tomas/needle) to `2.9.1`
Update dependency underscore to v1.13.6
- Schedule: ["at any time"]
- Branch name: `renovate/underscore-1.x-lockfile`
- Merge into: `master`
- Upgrade [underscore](https://togithub.com/jashkenas/underscore) to `1.13.6`
Update dependency zaproxy to ^0.3.0
- Schedule: ["at any time"]
- Branch name: `renovate/zaproxy-0.x`
- Merge into: `master`
- Upgrade [zaproxy](https://togithub.com/zaproxy/zap-api-nodejs) to `^0.3.0`
Update Node.js to v19
- Schedule: ["at any time"]
- Branch name: `renovate/node-19.x`
- Merge into: `master`
- Upgrade [node](https://togithub.com/nodejs/node) to `19-alpine`
Update dependency async to v3
- Schedule: ["at any time"]
- Branch name: `renovate/async-3.x`
- Merge into: `master`
- Upgrade [async](https://togithub.com/caolan/async) to `^3.0.0`
Update dependency cypress to v12
- Schedule: ["at any time"]
- Branch name: `renovate/cypress-12.x`
- Merge into: `master`
- Upgrade [cypress](https://togithub.com/cypress-io/cypress) to `^12.0.0`
Update dependency forever to v4
- Schedule: ["at any time"]
- Branch name: `renovate/forever-4.x`
- Merge into: `master`
- Upgrade [forever](https://togithub.com/foreverjs/forever) to `^4.0.0`
Update dependency grunt-concurrent to v3
- Schedule: ["at any time"]
- Branch name: `renovate/grunt-concurrent-3.x`
- Merge into: `master`
- Upgrade [grunt-concurrent](https://togithub.com/sindresorhus/grunt-concurrent) to `^3.0.0`
Update dependency grunt-contrib-jshint to v3
- Schedule: ["at any time"]
- Branch name: `renovate/grunt-contrib-jshint-3.x`
- Merge into: `master`
- Upgrade [grunt-contrib-jshint](https://togithub.com/gruntjs/grunt-contrib-jshint) to `^3.0.0`
Update dependency grunt-retire to v1
- Schedule: ["at any time"]
- Branch name: `renovate/grunt-retire-1.x`
- Merge into: `master`
- Upgrade [grunt-retire](https://togithub.com/RetireJS/grunt-retire) to `^1.0.0`
Update dependency helmet to v6
- Schedule: ["at any time"]
- Branch name: `renovate/helmet-6.x`
- Merge into: `master`
- Upgrade [helmet](https://togithub.com/helmetjs/helmet) to `^6.0.0`
Update dependency marked to v4
- Schedule: ["at any time"]
- Branch name: `renovate/marked-4.x`
- Merge into: `master`
- Upgrade [marked](https://togithub.com/markedjs/marked) to `4.3.0`
Update dependency mocha to v10
- Schedule: ["at any time"]
- Branch name: `renovate/mocha-10.x`
- Merge into: `master`
- Upgrade [mocha](https://togithub.com/mochajs/mocha) to `^10.0.0`
Update dependency mongodb to v5
- Schedule: ["at any time"]
- Branch name: `renovate/mongodb-5.x`
- Merge into: `master`
- Upgrade [mongodb](https://togithub.com/mongodb/node-mongodb-native) to `^5.0.0`
Update dependency needle to v3
- Schedule: ["at any time"]
- Branch name: `renovate/needle-3.x`
- Merge into: `master`
- Upgrade [needle](https://togithub.com/tomas/needle) to `3.2.0`
Update dependency nodemon to v2
- Schedule: ["at any time"]
- Branch name: `renovate/nodemon-2.x`
- Merge into: `master`
- Upgrade [nodemon](https://togithub.com/remy/nodemon) to `^2.0.0`
Update dependency selenium-webdriver to v4
- Schedule: ["at any time"]
- Branch name: `renovate/selenium-webdriver-4.x`
- Merge into: `master`
- Upgrade [selenium-webdriver](https://togithub.com/SeleniumHQ/selenium) to `^4.0.0`
Update dependency should to v13
- Schedule: ["at any time"]
- Branch name: `renovate/should-13.x`
- Merge into: `master`
- Upgrade [should](https://togithub.com/shouldjs/should.js) to `^13.0.0`
Update dependency zaproxy to v1
- Schedule: ["at any time"]
- Branch name: `renovate/zaproxy-1.x`
- Merge into: `master`
- Upgrade [zaproxy](https://togithub.com/zaproxy/zap-api-nodejs) to `^1.0.0`
🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.
❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.
This PR has been generated by Mend Renovate. View repository job log here.
Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.
🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.
Detected Package Files
docker-compose.yml(docker-compose)Dockerfile(dockerfile)package.json(npm).travis.yml(travis)Configuration Summary
Based on the default config's presets, Renovate will:
fixfor dependencies andchorefor all others.node_modules,bower_components,vendorand various test/tests directories.apollo-serverpackages became scoped.babel-eslintwas renamed under the@babelscope.cucumberbecame scoped.fastifypackages became scoped.hapibecame scoped.joibecame scoped under thehapiorganization.joiwas moved out of thehapiorganization.k8s.gcr.iotoregistry.k8s.io.k8s.gcr.iotoregistry.k8s.io.material-uimonorepo org was renamed from@material-uito@mui.messageformatmonorepo package naming scheme changed frommessageFormat-{{package}}-to-@messageformat/{{package}}.middiebecame scoped.nowwas renamed tovercel.@parcel/csswas renamed tolightningcss.react-query/devtoolsbecame scoped under thetanstackorganization.react-querybecame scoped under thetanstackorganization.react-scriptssupports TypeScript since version2.1.0.@renovate/pep440package was renamed to@renovatebot/pep440.vso-task-libpackage is now published asazure-pipelines-task-lib.vsts-task-libpackage is now published asazure-pipelines-task-lib.xmldompackage is now published as@xmldom/xmldom.🔡 Would you like to change the way Renovate is upgrading your dependencies? Simply edit the
renovate.jsonin this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.What to Expect
With your current configuration, Renovate will create 33 Pull Requests:
Update dependency async to v2.6.4
- Schedule: ["at any time"] - Branch name: `renovate/async-2.x-lockfile` - Merge into: `master` - Upgrade [async](https://togithub.com/caolan/async) to `2.6.4`Update dependency cross-env to v7.0.3
- Schedule: ["at any time"] - Branch name: `renovate/cross-env-7.x-lockfile` - Merge into: `master` - Upgrade [cross-env](https://togithub.com/kentcdodds/cross-env) to `7.0.3`Update dependency nodemon to v1.19.4
- Schedule: ["at any time"] - Branch name: `renovate/nodemon-1.x-lockfile` - Merge into: `master` - Upgrade [nodemon](https://togithub.com/remy/nodemon) to `1.19.4`Update dependency body-parser to v1.20.2
- Schedule: ["at any time"] - Branch name: `renovate/body-parser-1.x-lockfile` - Merge into: `master` - Upgrade [body-parser](https://togithub.com/expressjs/body-parser) to `1.20.2`Update dependency consolidate to ^0.16.0
- Schedule: ["at any time"] - Branch name: `renovate/consolidate-0.x` - Merge into: `master` - Upgrade [consolidate](https://togithub.com/tj/consolidate.js) to `^0.16.0`Update dependency csurf to v1.10.0
- Schedule: ["at any time"] - Branch name: `renovate/csurf-1.x-lockfile` - Merge into: `master` - Upgrade [csurf](https://togithub.com/expressjs/csurf) to `1.10.0`Update dependency cypress to v3.8.3
- Schedule: ["at any time"] - Branch name: `renovate/cypress-3.x-lockfile` - Merge into: `master` - Upgrade [cypress](https://togithub.com/cypress-io/cypress) to `3.8.3`Update dependency dont-sniff-mimetype to v1.1.0
- Schedule: ["at any time"] - Branch name: `renovate/dont-sniff-mimetype-1.x-lockfile` - Merge into: `master` - Upgrade [dont-sniff-mimetype](https://togithub.com/helmetjs/dont-sniff-mimetype) to `1.1.0`Update dependency express to v4.18.2
- Schedule: ["at any time"] - Branch name: `renovate/express-4.x-lockfile` - Merge into: `master` - Upgrade [express](https://togithub.com/expressjs/express) to `4.18.2`Update dependency express-session to v1.17.3
- Schedule: ["at any time"] - Branch name: `renovate/express-session-1.x-lockfile` - Merge into: `master` - Upgrade [express-session](https://togithub.com/expressjs/session) to `1.17.3`Update dependency grunt to v1.6.1
- Schedule: ["at any time"] - Branch name: `renovate/grunt-1.x-lockfile` - Merge into: `master` - Upgrade [grunt](https://togithub.com/gruntjs/grunt) to `1.6.1`Update dependency grunt-cli to v1.4.3
- Schedule: ["at any time"] - Branch name: `renovate/grunt-cli-1.x-lockfile` - Merge into: `master` - Upgrade [grunt-cli](https://togithub.com/gruntjs/grunt-cli) to `1.4.3`Update dependency grunt-mocha-test to ^0.13.0
- Schedule: ["at any time"] - Branch name: `renovate/grunt-mocha-test-0.x` - Merge into: `master` - Upgrade [grunt-mocha-test](https://togithub.com/pghalliday/grunt-mocha-test) to `^0.13.0`Update dependency marked to v0.8.2
- Schedule: ["at any time"] - Branch name: `renovate/marked-0.x` - Merge into: `master` - Upgrade [marked](https://togithub.com/markedjs/marked) to `0.8.2`Update dependency needle to v2.9.1
- Schedule: ["at any time"] - Branch name: `renovate/needle-2.x` - Merge into: `master` - Upgrade [needle](https://togithub.com/tomas/needle) to `2.9.1`Update dependency underscore to v1.13.6
- Schedule: ["at any time"] - Branch name: `renovate/underscore-1.x-lockfile` - Merge into: `master` - Upgrade [underscore](https://togithub.com/jashkenas/underscore) to `1.13.6`Update dependency zaproxy to ^0.3.0
- Schedule: ["at any time"] - Branch name: `renovate/zaproxy-0.x` - Merge into: `master` - Upgrade [zaproxy](https://togithub.com/zaproxy/zap-api-nodejs) to `^0.3.0`Update Node.js to v19
- Schedule: ["at any time"] - Branch name: `renovate/node-19.x` - Merge into: `master` - Upgrade [node](https://togithub.com/nodejs/node) to `19-alpine`Update dependency async to v3
- Schedule: ["at any time"] - Branch name: `renovate/async-3.x` - Merge into: `master` - Upgrade [async](https://togithub.com/caolan/async) to `^3.0.0`Update dependency cypress to v12
- Schedule: ["at any time"] - Branch name: `renovate/cypress-12.x` - Merge into: `master` - Upgrade [cypress](https://togithub.com/cypress-io/cypress) to `^12.0.0`Update dependency forever to v4
- Schedule: ["at any time"] - Branch name: `renovate/forever-4.x` - Merge into: `master` - Upgrade [forever](https://togithub.com/foreverjs/forever) to `^4.0.0`Update dependency grunt-concurrent to v3
- Schedule: ["at any time"] - Branch name: `renovate/grunt-concurrent-3.x` - Merge into: `master` - Upgrade [grunt-concurrent](https://togithub.com/sindresorhus/grunt-concurrent) to `^3.0.0`Update dependency grunt-contrib-jshint to v3
- Schedule: ["at any time"] - Branch name: `renovate/grunt-contrib-jshint-3.x` - Merge into: `master` - Upgrade [grunt-contrib-jshint](https://togithub.com/gruntjs/grunt-contrib-jshint) to `^3.0.0`Update dependency grunt-retire to v1
- Schedule: ["at any time"] - Branch name: `renovate/grunt-retire-1.x` - Merge into: `master` - Upgrade [grunt-retire](https://togithub.com/RetireJS/grunt-retire) to `^1.0.0`Update dependency helmet to v6
- Schedule: ["at any time"] - Branch name: `renovate/helmet-6.x` - Merge into: `master` - Upgrade [helmet](https://togithub.com/helmetjs/helmet) to `^6.0.0`Update dependency marked to v4
- Schedule: ["at any time"] - Branch name: `renovate/marked-4.x` - Merge into: `master` - Upgrade [marked](https://togithub.com/markedjs/marked) to `4.3.0`Update dependency mocha to v10
- Schedule: ["at any time"] - Branch name: `renovate/mocha-10.x` - Merge into: `master` - Upgrade [mocha](https://togithub.com/mochajs/mocha) to `^10.0.0`Update dependency mongodb to v5
- Schedule: ["at any time"] - Branch name: `renovate/mongodb-5.x` - Merge into: `master` - Upgrade [mongodb](https://togithub.com/mongodb/node-mongodb-native) to `^5.0.0`Update dependency needle to v3
- Schedule: ["at any time"] - Branch name: `renovate/needle-3.x` - Merge into: `master` - Upgrade [needle](https://togithub.com/tomas/needle) to `3.2.0`Update dependency nodemon to v2
- Schedule: ["at any time"] - Branch name: `renovate/nodemon-2.x` - Merge into: `master` - Upgrade [nodemon](https://togithub.com/remy/nodemon) to `^2.0.0`Update dependency selenium-webdriver to v4
- Schedule: ["at any time"] - Branch name: `renovate/selenium-webdriver-4.x` - Merge into: `master` - Upgrade [selenium-webdriver](https://togithub.com/SeleniumHQ/selenium) to `^4.0.0`Update dependency should to v13
- Schedule: ["at any time"] - Branch name: `renovate/should-13.x` - Merge into: `master` - Upgrade [should](https://togithub.com/shouldjs/should.js) to `^13.0.0`Update dependency zaproxy to v1
- Schedule: ["at any time"] - Branch name: `renovate/zaproxy-1.x` - Merge into: `master` - Upgrade [zaproxy](https://togithub.com/zaproxy/zap-api-nodejs) to `^1.0.0`🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for
prhourlylimitfor details.❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section. If you need any further assistance then you can also request help here.
This PR has been generated by Mend Renovate. View repository job log here.