Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/cds-snc/forms-api).

## Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

 - [ ] chore(deps): update all minor dependencies (`@aws-sdk/client-dynamodb`, `@aws-sdk/client-s3`, `@aws-sdk/client-sqs`, `@aws-sdk/lib-dynamodb`, `@aws-sdk/s3-request-presigner`, `pnpm`, `supertest`, `vite`)
 - [ ] chore(deps): update actions/create-github-app-token action to v3
 - [ ] chore(deps): update actions/dependency-review-action action to v5
 - [ ] chore(deps): update actions/setup-python action to v7
 - [ ] chore(deps): update aws-actions/configure-aws-credentials action to v6
 - [ ] chore(deps): update cds-snc/security-tools action to v4
 - [ ] chore(deps): update dependency @biomejs/biome to v2
 - [ ] chore(deps): update dependency @types/supertest to v7
 - [ ] chore(deps): update dependency pino-pretty to v13
 - [ ] chore(deps): update dependency typescript to v7
 - [ ] chore(deps): update dependency vitest to v5
 - [ ] chore(deps): update dependency vitest-mock-extended to v5
 - [ ] chore(deps): update github/codeql-action action to v4
 - [ ] chore(deps): update googleapis/release-please-action action to v5
 - [ ] chore(deps): update node.js to v24 (`node`, `@types/node`)
 - [ ] chore(deps): update pnpm to v12
 - [ ] chore(deps): update pnpm/setup action to v3
 - [ ] fix(deps): update dependency dotenv to v18
 - [ ] fix(deps): update dependency express to v5 (`express`, `@types/express`)
 - [ ] fix(deps): update dependency got to v16
 - [ ] fix(deps): update dependency jose to v6
 - [ ] fix(deps): update dependency pino to v10
 - [ ] fix(deps): update dependency rate-limiter-flexible to v11
 - [ ] fix(deps): update dependency redis to v6
 - [ ] 🔐 **Create all pending approval PRs at once** 🔐

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

 - [ ] chore(deps): update mcr.microsoft.com/vscode/devcontainers/base:debian docker digest to 1f85100
 - [ ] chore(deps): update ghcr.io/devcontainers/features/node docker tag to v2


---

> [!WARNING]
> Renovate failed to look up the following dependencies: `Could not determine new digest for update (github-digest package cds-snc/security-tools)`.
> 
> Files affected: `.github/workflows/staging-post-deployment.yml`

---


## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

 - [ ] [chore(deps): update dependency pyjwt to v2.15.0 [security]](../pull/434)
 - [ ] [chore(deps): update node.js to 72c5815](../pull/430)
 - [ ] [chore(deps): update github/codeql-action action to v3.38.2](../pull/431)
 - [ ] [fix(deps): update all patch dependencies](../pull/432) (`@aws-sdk/types`, `@gcforms/database`, `@types/node`, `cryptography`, `express`, `node`, `tsc-alias`, `tsx`)
 - [ ] [chore(deps): lock file maintenance](../pull/433)
 - [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

<details><summary>devcontainer (1)</summary>
<blockquote>

<details><summary>.devcontainer/devcontainer.json (5)</summary>

 - `mcr.microsoft.com/vscode/devcontainers/base debian@sha256:1a00517e89d3075f8c9dc8d9911404de0ff8991a4d71c62068573e9b016a89da` → [Updates: `debian`]
 - `ghcr.io/devcontainers/features/node 1` → [Updates: `2`]
 - `node 22.23.2` → [Updates: `22.23.3`, `24.21.0`]
 - `ghcr.io/devcontainers/features/python 1`
 - `python 3.14`

</details>

</blockquote>
</details>

<details><summary>dockerfile (1)</summary>
<blockquote>

<details><summary>Dockerfile (2)</summary>

 - `node 22.23.2-alpine3.23@sha256:46825fbbd4e996a78b7a2cdc08d75e38a5a505bdab95dcda55605359bf124bc6` → [Updates: `22.23.3-alpine3.23`, `24.21.0-alpine3.23`, `22.23.2-alpine3.23`]
 - `node 22.23.2-alpine3.23@sha256:46825fbbd4e996a78b7a2cdc08d75e38a5a505bdab95dcda55605359bf124bc6` → [Updates: `22.23.3-alpine3.23`, `24.21.0-alpine3.23`, `22.23.2-alpine3.23`]

</details>

</blockquote>
</details>

<details><summary>github-actions (12)</summary>
<blockquote>

<details><summary>.github/workflows/codeql.yml (4)</summary>

 - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
 - `github/codeql-action v3.38.0@faaca9a8f6edddba5725ffe5adefdab6669a2eca` → [Updates: `v3.38.2`, `v4.38.2`]
 - `github/codeql-action v3.38.0@faaca9a8f6edddba5725ffe5adefdab6669a2eca` → [Updates: `v3.38.2`, `v4.38.2`]
 - `github/codeql-action v3.38.0@faaca9a8f6edddba5725ffe5adefdab6669a2eca` → [Updates: `v3.38.2`, `v4.38.2`]

</details>

<details><summary>.github/workflows/dependency-review.yml (2)</summary>

 - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
 - `actions/dependency-review-action v4.9.0@2031cfc080254a8a887f58cffee85186f0e49e48` → [Updates: `v5.0.0`]

</details>

<details><summary>.github/workflows/deploy-documentation.yml (3)</summary>

 - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
 - `actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065` → [Updates: `v7.0.0`]
 - `python 3.x`

</details>

<details><summary>.github/workflows/docker-vulnerability-scan.yml (2)</summary>

 - `aws-actions/configure-aws-credentials v4.3.1@7474bc4690e29a8392af63c5b98e7449536d5c3a` → [Updates: `v6.3.0`]
 - `cds-snc/security-tools v3.2.1@5a93d1deec72d4cb2737cb8418364fedba1c695c` → [Updates: `v4.0.4`]

</details>

<details><summary>.github/workflows/labels.yml (1)</summary>

 - `cds-snc/labels v1`

</details>

<details><summary>.github/workflows/prod-post-deployment.yml (1)</summary>

 - `cds-snc/sentinel-forward-data-action main@e358bf24b818e68a22c9736715a3b544851aaba8` → [Updates: `main`]

</details>

<details><summary>.github/workflows/release-generator.yml (2)</summary>

 - `actions/create-github-app-token v1.12.0@d72941d797fd3113feb6b93fd0dec494b13a2547` → [Updates: `v3.2.0`]
 - `googleapis/release-please-action v4.4.1@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071` → [Updates: `v5.0.0`]

</details>

<details><summary>.github/workflows/shellcheck.yml (1)</summary>

 - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`

</details>

<details><summary>.github/workflows/staging-post-deployment.yml (3)</summary>

 - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
 - `cds-snc/security-tools  v4.0.3@837a88b6337d4842543184c8eac97a8adac8f302`
 - `cds-snc/sentinel-forward-data-action main@e358bf24b818e68a22c9736715a3b544851aaba8` → [Updates: `main`]

</details>

<details><summary>.github/workflows/test-code.yml (2)</summary>

 - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
 - `pnpm/setup v2.1.0@703c52620218391530e48b9e8870d5c0082e1b9b` → [Updates: `v3.0.0`]

</details>

<details><summary>.github/workflows/test-docker-build.yml (1)</summary>

 - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`

</details>

<details><summary>.github/workflows/workflow-failure.yml</summary>


</details>

</blockquote>
</details>

<details><summary>npm (3)</summary>
<blockquote>

<details><summary>examples/nodejs/package.json (4)</summary>

 - `axios ^1.12.0`
 - `jose ^6.0.10`
 - `@types/node ^22.14.1` → [Updates: `^22.14.1`, `^24.0.0`]
 - `typescript ^5.8.3` → [Updates: `^7.0.0`]

</details>

<details><summary>package.json (32)</summary>

 - `@aws-sdk/client-dynamodb ^3.823.0` → [Updates: `^3.823.0`]
 - `@aws-sdk/client-s3 ^3.823.0` → [Updates: `^3.823.0`]
 - `@aws-sdk/client-sqs ^3.823.0` → [Updates: `^3.823.0`]
 - `@aws-sdk/lib-dynamodb ^3.823.0` → [Updates: `^3.823.0`]
 - `@aws-sdk/s3-request-presigner ^3.859.0` → [Updates: `^3.859.0`]
 - `@gcforms/database 1.1.7` → [Updates: `1.1.12`]
 - `cors ^2.8.5`
 - `dotenv ^16.4.5` → [Updates: `^18.0.0`]
 - `express ^4.21.0` → [Updates: `^4.21.0`, `^5.0.0`]
 - `express-validator ^7.3.2`
 - `got ^14.4.7` → [Updates: `^16.0.0`]
 - `jose ^5.9.3` → [Updates: `^6.0.0`]
 - `pino ^9.4.0` → [Updates: `^10.0.0`]
 - `rate-limiter-flexible ^5.0.4` → [Updates: `^11.0.0`]
 - `redis ^4.7.0` → [Updates: `^6.0.0`]
 - `@aws-sdk/types ^3.662.0` → [Updates: `^3.662.0`]
 - `@biomejs/biome ^1.9.0` → [Updates: `^2.0.0`]
 - `@types/cors ^2.8.18`
 - `@types/express ^4.17.21` → [Updates: `^5.0.0`]
 - `@types/node ^22.7.4` → [Updates: `^22.7.4`, `^24.0.0`]
 - `@types/supertest ^6.0.2` → [Updates: `^7.0.0`]
 - `aws-sdk-client-mock ^4.0.2`
 - `pino-pretty ^11.2.2` → [Updates: `^13.0.0`]
 - `supertest ^7.0.0` → [Updates: `^7.0.0`]
 - `tsc-alias ^1.8.15` → [Updates: `^1.8.15`]
 - `tsx ^4.19.1` → [Updates: `^4.19.1`]
 - `typescript ^5.6.2` → [Updates: `^7.0.0`]
 - `vite ^8.0.16` → [Updates: `^8.0.16`]
 - `vitest ^4.0.0` → [Updates: `^5.0.0`]
 - `vitest-mock-express ^2.2.0`
 - `vitest-mock-extended ^4.0.0` → [Updates: `^5.0.0`]
 - `pnpm 11.26.0+sha512.fc0e2bf890b9f983611f1ab68c0637bce914390653699f83c1a78b005ed25f2c81e77920c8fd8eee2ecf0b58b28cdcb00a84d97f69bcf7c56b2f344710238664` → [Updates: `11.28.0`, `12.7.0`]

</details>

<details><summary>pnpm-workspace.yaml</summary>


</details>

</blockquote>
</details>

<details><summary>pip_requirements (1)</summary>
<blockquote>

<details><summary>examples/python/requirements.txt (3)</summary>

 - `PyJWT ==2.13.0` → [Updates: `==2.15.0`]
 - `httpx ==0.28.1`
 - `cryptography ==50.0.0` → [Updates: `==50.0.1`]

</details>

</blockquote>
</details>

<details><summary>renovate-config (1)</summary>
<blockquote>

<details><summary>renovate.json</summary>


</details>

</blockquote>
</details>

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Navigation Menu

Dependency Dashboard #4

Pending Approval

Pending Status Checks

Open

Detected Dependencies

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Dependency Dashboard #4

Description

Pending Approval

Pending Status Checks

Open

Detected Dependencies

Activity

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions