Renovate Dashboard 🤖

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/HC-IPPM/safe-inputs).

## Config Migration Needed

See Config Migration PR: #1135.

## Repository Problems

These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/HC-IPPM/safe-inputs).

- ⚠️ WARN: No docker auth found - returning
- ⚠️ WARN: Package lookup failures

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [xlsx](https://redirect.github.com/SheetJS/sheetjs) |  |

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>

View abandoned dependencies (25)

| Datasource | Package | Last Updated |
|------------|------|-------------|
| flux | [community-operator](https://redirect.github.com/mongodb/helm-charts) | `2025-04-11` |
| npm | [@chakra-ui/icons](https://redirect.github.com/chakra-ui/chakra-ui) | `2025-02-19` |
| npm | [@dts-stn/service-canada-design-system](https://redirect.github.com/DTS-STN/Service-Canada-Design-System) | `2023-08-17` |
| npm | [@escape.tech/graphql-armor-max-aliases](https://redirect.github.com/Escape-Technologies/graphql-armor) | `2025-06-16` |
| npm | [@escape.tech/graphql-armor-max-depth](https://redirect.github.com/Escape-Technologies/graphql-armor) | `2025-08-22` |
| npm | [@microsoft/eslint-plugin-sdl](https://redirect.github.com/microsoft/eslint-plugin-sdl) | `2025-02-18` |
| npm | [@svgr/webpack](https://redirect.github.com/gregberge/svgr) | `2023-08-15` |
| npm | [babel-plugin-macros](https://redirect.github.com/kentcdodds/babel-plugin-macros) | `2021-05-05` |
| npm | [cookie-parser](https://redirect.github.com/expressjs/cookie-parser) | `2024-10-08` |
| npm | [csrf-csrf](https://redirect.github.com/Psifi-Solutions/csrf-csrf) | `2025-05-27` |
| npm | [dataloader](https://redirect.github.com/graphql/dataloader) | `2024-12-03` |
| npm | [debounce-promise](https://redirect.github.com/bjoerge/debounce-promise) | `2019-05-05` |
| npm | [eslint-config-standard](https://redirect.github.com/standard/eslint-config-standard) | `2023-05-29` |
| npm | [eslint-plugin-import](https://redirect.github.com/import-js/eslint-plugin-import) | `2025-06-20` |
| npm | [eslint-plugin-jsx-a11y](https://redirect.github.com/jsx-eslint/eslint-plugin-jsx-a11y) | `2024-10-26` |
| npm | [eslint-plugin-react](https://redirect.github.com/jsx-eslint/eslint-plugin-react) | `2025-04-03` |
| npm | [franc](https://redirect.github.com/wooorm/franc) | `2024-01-11` |
| npm | [graphql-type-json](https://redirect.github.com/taion/graphql-type-json) | `2020-06-10` |
| npm | [http-server](https://redirect.github.com/http-party/http-server) | `2022-05-31` |
| npm | [passport](https://redirect.github.com/jaredhanson/passport) | `2023-11-27` |
| npm | [spin-delay](https://redirect.github.com/smeijer/spin-delay) | `2024-08-16` |
| npm | [xlsx](https://redirect.github.com/SheetJS/sheetjs) | `2022-03-24` |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] fix: replace dependency xlsx with @e965/xlsx ^0.20.3
- [ ] chore: update docker.io/library/nginx:alpine docker digest to 72ba65e
- [ ] chore: update gcr.io/cloud-builders/gcloud docker digest to 4294c00
- [ ] chore: update gcr.io/google.com/cloudsdktool/cloud-sdk docker digest to e67e425
- [ ] chore: update mongo:6.0 docker digest to 8b6d8f5
- [ ] chore: update node.js to af8023e
- [ ] chore: update dependency @chakra-ui/react to v2.10.10
- [ ] chore: update dependency @escape.tech/graphql-armor-max-aliases to v2.6.2
- [ ] chore: update dependency @graphql-codegen/cli to v5.0.7
- [ ] chore: update dependency @types/cookie-parser to v1.4.10
- [ ] chore: update dependency @types/express to v5.0.6
- [ ] chore: update dependency @types/lodash to v4.17.25
- [ ] chore: update dependency @types/supertest to v6.0.3
- [ ] chore: update dependency eslint-plugin-react to v7.37.5
- [ ] chore: update dependency formik to v2.4.9
- [ ] chore: update dependency imagepolicy to image.toolkit.fluxcd.io/v1
- [ ] chore: update dependency imagerepository to image.toolkit.fluxcd.io/v1
- [ ] chore: update dependency imageupdateautomation to image.toolkit.fluxcd.io/v1
- [ ] chore: update dependency mongoose-unique-validator to v5.0.2
- [ ] chore: update dependency nodemon to v3.1.14
- [ ] chore: update dependency ua-parser-js to v2.0.10
- [ ] chore: update react monorepo (`@types/react`, `@types/react-dom`, `eslint-plugin-react-hooks`)
- [ ] chore: update testing-library monorepo (`@testing-library/dom`, `@testing-library/jest-dom`, `@testing-library/react`)
- [ ] chore: update babel monorepo to v7.29.7 (`@babel/preset-env`, `@babel/preset-react`, `@babel/preset-typescript`)
- [ ] chore: update dependency @apollo/client to v3.14.1
- [ ] chore: update dependency @axe-core/puppeteer to v4.13.0
- [ ] chore: update dependency @google-cloud/functions-framework to v3.5.1
- [ ] chore: update dependency @google-cloud/storage to v7.22.0
- [ ] chore: update dependency @graphql-tools/schema to v10.1.1
- [ ] chore: update dependency @parcel/watcher to v2.6.0
- [ ] chore: update dependency @swc/core to v1.16.2
- [ ] chore: update dependency @tanstack/react-table to v8.21.3
- [ ] chore: update dependency @types/express-session to v1.19.0
- [ ] chore: update dependency @types/node to v22.20.2
- [ ] chore: update dependency @types/validator to v13.15.10
- [ ] chore: update dependency csrf-csrf to v3.2.2
- [ ] chore: update dependency dotenv to v16.6.1
- [ ] chore: update dependency envalid to v8.2.0
- [ ] chore: update dependency eslint-config-prettier to v10.1.8
- [ ] chore: update dependency eslint-import-resolver-typescript to v3.10.1
- [ ] chore: update dependency eslint-plugin-import to v2.32.0
- [ ] chore: update dependency eslint-plugin-jest to v28.14.0
- [ ] chore: update dependency eslint-plugin-n to v17.24.0
- [ ] chore: update dependency eslint-plugin-no-secrets to v2.3.3
- [ ] chore: update dependency express to v5.2.1
- [ ] chore: update dependency express-session to v1.19.0
- [ ] chore: update dependency fluxcd/flux2 to v2.9.5
- [ ] chore: update dependency graphql to v16.14.2
- [ ] chore: update dependency graphql-scalars to v1.26.0
- [ ] chore: update dependency graphql-yoga to v5.23.0
- [ ] chore: update dependency prettier to v3.9.6
- [ ] chore: update dependency puppeteer to v24.43.1
- [ ] chore: update dependency react-hook-form to v7.88.0
- [ ] chore: update dependency react-icons to v5.7.0
- [ ] chore: update dependency ts-jest to v29.4.12
- [ ] chore: update dependency tsx to v4.23.13
- [ ] chore: update dependency type-fest to v4.41.0
- [ ] chore: update dependency typescript to v5.9.3
- [ ] chore: update dependency typescript to v5.9.3
- [ ] chore: update dependency yup to v1.7.1
- [ ] chore: update helm release cert-manager to v1.21.2
- [ ] chore: update helm release community-operator to v0.13.0
- [ ] chore: update rspack monorepo to v1.7.12 (`@rspack/cli`, `@rspack/core`)
- [ ] fix: update dependency @whatwg-node/node-fetch to ^0.8.0
- [ ] fix: update linguijs monorepo to v5.9.5 (`@lingui/babel-plugin-lingui-macro`, `@lingui/cli`, `@lingui/macro`, `@lingui/react`)
- [ ] chore: update babel monorepo to v8 (`@babel/preset-env`, `@babel/preset-react`, `@babel/preset-typescript`)
- [ ] chore: update dependency @graphql-codegen/cli to v7
- [ ] chore: update dependency @testing-library/jest-dom to v7
- [ ] chore: update dependency babel-loader to v10
- [ ] chore: update dependency eslint-import-resolver-typescript to v4
- [ ] chore: update dependency eslint-plugin-jest to v29
- [ ] chore: update dependency eslint-plugin-n to v18
- [ ] chore: update dependency eslint-plugin-security to v4
- [ ] chore: update dependency supertest to v7.2.2 (`supertest`, `@types/supertest`)
- [ ] chore: update dependency type-fest to v5
- [ ] chore: update jest monorepo to v30 (`@jest/globals`, `@types/jest`, `babel-jest`, `jest`, `jest-environment-jsdom`)
- [ ] chore: update node.js to v24
- [ ] chore: update rspack monorepo to v2 (`@rspack/cli`, `@rspack/core`)
- [ ] chore: update typescript-eslint monorepo to v8 (`@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`)
- [ ] fix: update dependency @apollo/client to v4
- [ ] fix: update dependency @google-cloud/containeranalysis to v7
- [ ] fix: update dependency @google-cloud/functions-framework to v5
- [ ] fix: update dependency @google-cloud/storage to v8
- [ ] fix: update dependency @tanstack/react-table to v9
- [ ] fix: update dependency connect-mongo to v6
- [ ] fix: update dependency csrf-csrf to v4
- [ ] fix: update dependency dotenv to v17
- [ ] fix: update dependency graphql to v17
- [ ] fix: update dependency graphql-scalars to v2
- [ ] fix: update dependency mongoose-unique-validator to v6
- [ ] fix: update dependency passport-magic-link to v4
- [ ] fix: update dependency puppeteer to v25
- [ ] fix: update dependency react-error-boundary to v6
- [ ] fix: update dependency typescript to v7
- [ ] fix: update linguijs monorepo to v6 (`@lingui/babel-plugin-lingui-macro`, `@lingui/cli`, `@lingui/react`)
- [ ] chore: lock file maintenance
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [chore: update dependency eslint to v10](../pull/229)

---

> [!WARNING]
> Renovate failed to look up the following dependencies: `Could not determine new digest for update (docker package cgr.dev/chainguard/kyverno-cli)`.
>
> Files affected: `kubernetes/cloudbuild.yaml`

---

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore: update dependency @escape.tech/graphql-armor-max-depth to v2.4.2 [security]](../pull/1138)
- [ ] [fix: update dependency @grpc/grpc-js to v1.12.7 [security]](../pull/1143)
- [ ] [chore: update dependency @babel/core to v7.29.6 [security]](../pull/1144)
- [ ] [chore: update dependency lodash to v4.18.1 [security]](../pull/1139)
- [ ] [chore: update dependency mongoose to v8.24.1 [security]](../pull/1127)
- [ ] [chore: update dependency react-router to v7.18.0 [security]](../pull/1140)
- [ ] [chore: update dependency validator to v13.15.22 [security]](../pull/1141)
- [ ] [chore: update gcr.io/cloud-builders/docker docker digest to e9f38de](../pull/1119)
- [ ] [chore: update gcr.io/cloud-builders/gsutil docker digest to a7c4e51](../pull/1121)
- [ ] [chore: update gcr.io/google.com/cloudsdktool/cloud-sdk:latest docker digest to e67e425](../pull/1123)
- [ ] [chore: update nginx docker digest to 05b8cb6](../pull/1124)
- [ ] [chore: update mongo docker tag to v8](../pull/628)
- [ ] [fix: update dependency @chakra-ui/react to v3](../pull/1070)
- [ ] [fix: update react monorepo (major)](../pull/1028) (`@types/react`, `@types/react-dom`, `eslint-plugin-react-hooks`, `react`, `react-dom`, `react-test-renderer`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [chore: update dependency @microsoft/eslint-plugin-sdl to v1](../pull/806)
- [ ] [chore: update dependency eslint-plugin-promise to v7](../pull/373)

## Detected Dependencies

cloudbuild (6)

api/cloudbuild.yaml (8)

- `node 22-alpine3.21@sha256:f2dc6eea95f787e25f173ba9904c9d0647ab2506178c7b5b7c5a3d02bc4af145` → [Updates: `24-alpine3.21`, `22-alpine3.21`]
- `node 22-alpine3.21@sha256:f2dc6eea95f787e25f173ba9904c9d0647ab2506178c7b5b7c5a3d02bc4af145` → [Updates: `24-alpine3.21`, `22-alpine3.21`]
- `gcr.io/cloud-builders/docker sha256:b991d50960b337f581ad77ea2a59259a786d177019aa64d8b3acb01f65dbc154` → [Updates: `undefined`]
- `gcr.io/google.com/cloudsdktool/cloud-sdk latest@sha256:3a24ff5f089d9ce3627306873ef1e1061488a63ae12c0bd0b5c24ec5ee594798` → [Updates: `latest`]
- `gcr.io/cloud-builders/docker sha256:b991d50960b337f581ad77ea2a59259a786d177019aa64d8b3acb01f65dbc154` → [Updates: `undefined`]
- `gcr.io/cloud-builders/docker sha256:b991d50960b337f581ad77ea2a59259a786d177019aa64d8b3acb01f65dbc154` → [Updates: `undefined`]
- `gcr.io/cloud-builders/docker sha256:b991d50960b337f581ad77ea2a59259a786d177019aa64d8b3acb01f65dbc154` → [Updates: `undefined`]
- `gcr.io/google.com/cloudsdktool/cloud-sdk latest@sha256:3a24ff5f089d9ce3627306873ef1e1061488a63ae12c0bd0b5c24ec5ee594798` → [Updates: `latest`]

cloudbuild.yaml (6)

- `node 22-alpine3.21@sha256:f2dc6eea95f787e25f173ba9904c9d0647ab2506178c7b5b7c5a3d02bc4af145` → [Updates: `24-alpine3.21`, `22-alpine3.21`]
- `node 22-alpine3.21@sha256:f2dc6eea95f787e25f173ba9904c9d0647ab2506178c7b5b7c5a3d02bc4af145` → [Updates: `24-alpine3.21`, `22-alpine3.21`]
- `node 22-alpine3.21@sha256:f2dc6eea95f787e25f173ba9904c9d0647ab2506178c7b5b7c5a3d02bc4af145` → [Updates: `24-alpine3.21`, `22-alpine3.21`]
- `gcr.io/cloud-builders/docker sha256:b991d50960b337f581ad77ea2a59259a786d177019aa64d8b3acb01f65dbc154` → [Updates: `undefined`]
- `gcr.io/cloud-builders/docker sha256:b991d50960b337f581ad77ea2a59259a786d177019aa64d8b3acb01f65dbc154` → [Updates: `undefined`]
- `gcr.io/cloud-builders/gsutil sha256:386bf19745cfa9976fc9e7f979857090be9152b30bf3f50527c6ace1de9d2673` → [Updates: `undefined`]

devsecops/artifact-registry-vulnerability-scanning/cloudbuild.yaml (2)

- `gcr.io/google.com/cloudsdktool/cloud-sdk sha256:3a24ff5f089d9ce3627306873ef1e1061488a63ae12c0bd0b5c24ec5ee594798` → [Updates: `undefined`]
- `gcr.io/google.com/cloudsdktool/cloud-sdk latest@sha256:3a24ff5f089d9ce3627306873ef1e1061488a63ae12c0bd0b5c24ec5ee594798` → [Updates: `latest`]

devsecops/axe-testing/cloudbuild.yaml (2)

- `gcr.io/cloud-builders/docker sha256:b991d50960b337f581ad77ea2a59259a786d177019aa64d8b3acb01f65dbc154` → [Updates: `undefined`]
- `gcr.io/google.com/cloudsdktool/cloud-sdk latest@sha256:3a24ff5f089d9ce3627306873ef1e1061488a63ae12c0bd0b5c24ec5ee594798` → [Updates: `latest`]

kubernetes/cloudbuild.yaml (3)

- `gcr.io/cloud-builders/gcloud sha256:63e83f6a752207e57ba2d3941ec68167934c42f76f3e44caeb6d362f6ade556d` → [Updates: `undefined`]
- `gcr.io/cloud-builders/docker sha256:b991d50960b337f581ad77ea2a59259a786d177019aa64d8b3acb01f65dbc154` → [Updates: `undefined`]
- `cgr.dev/chainguard/kyverno-cli latest@sha256:2283bf8f11cb6946c0fc204d057ac35bafc1c429d50842896e17d3151cd1d383`

ui/cloudbuild.yaml (12)

- `node 22-alpine3.21@sha256:f2dc6eea95f787e25f173ba9904c9d0647ab2506178c7b5b7c5a3d02bc4af145` → [Updates: `24-alpine3.21`, `22-alpine3.21`]
- `node 22-alpine3.21@sha256:f2dc6eea95f787e25f173ba9904c9d0647ab2506178c7b5b7c5a3d02bc4af145` → [Updates: `24-alpine3.21`, `22-alpine3.21`]
- `node 22-alpine3.21@sha256:f2dc6eea95f787e25f173ba9904c9d0647ab2506178c7b5b7c5a3d02bc4af145` → [Updates: `24-alpine3.21`, `22-alpine3.21`]
- `gcr.io/google.com/cloudsdktool/cloud-sdk latest@sha256:3a24ff5f089d9ce3627306873ef1e1061488a63ae12c0bd0b5c24ec5ee594798` → [Updates: `latest`]
- `gcr.io/cloud-builders/docker sha256:b991d50960b337f581ad77ea2a59259a786d177019aa64d8b3acb01f65dbc154` → [Updates: `undefined`]
- `gcr.io/cloud-builders/docker sha256:b991d50960b337f581ad77ea2a59259a786d177019aa64d8b3acb01f65dbc154` → [Updates: `undefined`]
- `gcr.io/cloud-builders/gsutil sha256:386bf19745cfa9976fc9e7f979857090be9152b30bf3f50527c6ace1de9d2673` → [Updates: `undefined`]
- `gcr.io/cloud-builders/docker sha256:b991d50960b337f581ad77ea2a59259a786d177019aa64d8b3acb01f65dbc154` → [Updates: `undefined`]
- `gcr.io/cloud-builders/docker sha256:b991d50960b337f581ad77ea2a59259a786d177019aa64d8b3acb01f65dbc154` → [Updates: `undefined`]
- `gcr.io/cloud-builders/docker sha256:b991d50960b337f581ad77ea2a59259a786d177019aa64d8b3acb01f65dbc154` → [Updates: `undefined`]
- `gcr.io/cloud-builders/docker sha256:b991d50960b337f581ad77ea2a59259a786d177019aa64d8b3acb01f65dbc154` → [Updates: `undefined`]
- `gcr.io/google.com/cloudsdktool/cloud-sdk latest@sha256:3a24ff5f089d9ce3627306873ef1e1061488a63ae12c0bd0b5c24ec5ee594798` → [Updates: `latest`]

docker-compose (2)

api/docker-compose.dev-test.yaml (1)

- `mongo 6.0@sha256:b250e27576511407ed59de2c308bbcbae34bf0d5d7df946e2ca7a618899b4cf0` → [Updates: `8.3`, `6.0`]

docker-compose.dev.yaml (2)

- `nginx sha256:42e917aaa1b5bb40dd0f6f7f4f857490ac7747d7ef73b391c774a41a8b994f15` → [Updates: `undefined`]
- `mongo 6.0@sha256:b250e27576511407ed59de2c308bbcbae34bf0d5d7df946e2ca7a618899b4cf0` → [Updates: `8.3`, `6.0`]

dockerfile (4)

api/Dockerfile.prod (1)

- `node 22-alpine3.21@sha256:f2dc6eea95f787e25f173ba9904c9d0647ab2506178c7b5b7c5a3d02bc4af145` → [Updates: `24-alpine3.21`, `22-alpine3.21`]

devsecops/axe-testing/Dockerfile (1)

- `node 22-alpine3.21@sha256:f2dc6eea95f787e25f173ba9904c9d0647ab2506178c7b5b7c5a3d02bc4af145` → [Updates: `24-alpine3.21`, `22-alpine3.21`]

Dockerfile.node-dev (1)

- `node 22-alpine3.21@sha256:f2dc6eea95f787e25f173ba9904c9d0647ab2506178c7b5b7c5a3d02bc4af145` → [Updates: `24-alpine3.21`, `22-alpine3.21`]

ui/Dockerfile.prod (2)

- `node 22-alpine3.21@sha256:f2dc6eea95f787e25f173ba9904c9d0647ab2506178c7b5b7c5a3d02bc4af145` → [Updates: `24-alpine3.21`, `22-alpine3.21`]
- `docker.io/library/nginx alpine@sha256:814a8e88df978ade80e584cc5b333144b9372a8e3c98872d07137dbf3b44d0e4` → [Updates: `alpine`]

flux (4)

kubernetes/clusters/gke/flux-system/gotk-components.yaml (1)

- `fluxcd/flux2 v2.4.0` → [Updates: `v2.9.5`]

kubernetes/clusters/gke/flux-system/gotk-sync.yaml

kubernetes/components/controllers/cert-manager.yaml (1)

- `cert-manager v1.16.2` → [Updates: `v1.21.2`]

kubernetes/components/controllers/mongodb.yaml (1)

- `community-operator 0.12.0` → [Updates: `0.13.0`]

helm-values (8)

kubernetes/apps/base/api/deployment.yaml (1)

- `northamerica-northeast1-docker.pkg.dev/phx-01j1tbke0ax/phx-01j1tbke0ax-safeinputs/api main-7122696-1740411760`

kubernetes/apps/base/ui/deployment.yaml (1)

- `northamerica-northeast1-docker.pkg.dev/phx-01j1tbke0ax/phx-01j1tbke0ax-safeinputs/ui main-7122696d1ea4530f7052a89c6b49c48b9a1d8be5-1740412075`

kubernetes/apps/gke/api/deployment-patch.yaml (1)

- `auto unknown version`

kubernetes/apps/gke/api/mongodb-patch.yaml (1)

- `auto unknown version`

kubernetes/apps/gke/ui/deployment-patch.yaml (1)

- `auto unknown version`

kubernetes/clusters/gke/flux-system/gotk-components.yaml (6)

- `ghcr.io/fluxcd/source-controller v1.4.1@sha256:3c5f0f022f990ffc0daf00e5b199548fc0fa6e7119e972318f0267081a332963` → [Updates: `v1.9.5`]
- `ghcr.io/fluxcd/kustomize-controller v1.4.0@sha256:e3b0cf847e9cdf47b19af0fbcfe22786b80b598e0caeea8b6d2a5f9c26a48a24` → [Updates: `v1.9.5`]
- `ghcr.io/fluxcd/helm-controller v1.1.0@sha256:4c75ca6c24ceb1f1bd7e935d9287a93e4f925c512f206763ec5a47de3ef3ff48` → [Updates: `v1.6.4`]
- `ghcr.io/fluxcd/notification-controller v1.4.0@sha256:425309a159b15e07f7d97622effc79bc432a37ed55289dd465d37fa217a92a7d` → [Updates: `v1.9.4`]
- `ghcr.io/fluxcd/image-reflector-controller v0.33.0@sha256:c6864684f96cfbb3a91c816084032bb019b302af8b63b0e06b12b4018a9a8242` → [Updates: `v0.35.2`, `v1.2.5`]
- `ghcr.io/fluxcd/image-automation-controller v0.39.0@sha256:5b6c2e97055cfe69fe8996f48b53db039c136210dbc98c5631864a9e573d0e20` → [Updates: `v0.41.2`, `v1.2.5`]

kubernetes/clusters/gke/imageautomation.yaml (2)

- `northamerica-northeast1-docker.pkg.dev/phx-01j1tbke0ax/phx-01j1tbke0ax-safeinputs/api unknown version`
- `northamerica-northeast1-docker.pkg.dev/phx-01j1tbke0ax/phx-01j1tbke0ax-safeinputs/ui unknown version`

kubernetes/components/controllers/ingress.yaml (1)

- `auto unknown version`

kubernetes (14)

kubernetes/apps/base/api/deployment.yaml (2)

- `northamerica-northeast1-docker.pkg.dev/phx-01j1tbke0ax/phx-01j1tbke0ax-safeinputs/api main-7122696-1740411760`
- `Deployment apps/v1`

kubernetes/apps/base/api/mongodb.yaml (2)

- `Role rbac.authorization.k8s.io/v1`
- `RoleBinding rbac.authorization.k8s.io/v1`

kubernetes/apps/base/ui/deployment.yaml (2)

- `northamerica-northeast1-docker.pkg.dev/phx-01j1tbke0ax/phx-01j1tbke0ax-safeinputs/ui main-7122696d1ea4530f7052a89c6b49c48b9a1d8be5-1740412075`
- `Deployment apps/v1`

kubernetes/apps/gke/api/deployment-patch.yaml (2)

- `auto unknown version`
- `Deployment apps/v1`

kubernetes/apps/gke/api/mongodb-patch.yaml (1)

- `auto unknown version`

kubernetes/apps/gke/ui/deployment-patch.yaml (2)

- `auto unknown version`
- `Deployment apps/v1`

kubernetes/clusters/gke/apps.yaml (1)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/clusters/gke/components.yaml (2)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/clusters/gke/flux-system/gotk-components.yaml (33)

- `ghcr.io/fluxcd/source-controller v1.4.1@sha256:3c5f0f022f990ffc0daf00e5b199548fc0fa6e7119e972318f0267081a332963` → [Updates: `v1.9.5`]
- `ghcr.io/fluxcd/kustomize-controller v1.4.0@sha256:e3b0cf847e9cdf47b19af0fbcfe22786b80b598e0caeea8b6d2a5f9c26a48a24` → [Updates: `v1.9.5`]
- `ghcr.io/fluxcd/helm-controller v1.1.0@sha256:4c75ca6c24ceb1f1bd7e935d9287a93e4f925c512f206763ec5a47de3ef3ff48` → [Updates: `v1.6.4`]
- `ghcr.io/fluxcd/notification-controller v1.4.0@sha256:425309a159b15e07f7d97622effc79bc432a37ed55289dd465d37fa217a92a7d` → [Updates: `v1.9.4`]
- `ghcr.io/fluxcd/image-reflector-controller v0.33.0@sha256:c6864684f96cfbb3a91c816084032bb019b302af8b63b0e06b12b4018a9a8242` → [Updates: `v0.35.2`, `v1.2.5`]
- `ghcr.io/fluxcd/image-automation-controller v0.39.0@sha256:5b6c2e97055cfe69fe8996f48b53db039c136210dbc98c5631864a9e573d0e20` → [Updates: `v0.41.2`, `v1.2.5`]
- `NetworkPolicy networking.k8s.io/v1`
- `NetworkPolicy networking.k8s.io/v1`
- `NetworkPolicy networking.k8s.io/v1`
- `ClusterRole rbac.authorization.k8s.io/v1`
- `ClusterRole rbac.authorization.k8s.io/v1`
- `ClusterRole rbac.authorization.k8s.io/v1`
- `ClusterRoleBinding rbac.authorization.k8s.io/v1`
- `ClusterRoleBinding rbac.authorization.k8s.io/v1`
- `CustomResourceDefinition apiextensions.k8s.io/v1`
- `CustomResourceDefinition apiextensions.k8s.io/v1`
- `CustomResourceDefinition apiextensions.k8s.io/v1`
- `CustomResourceDefinition apiextensions.k8s.io/v1`
- `CustomResourceDefinition apiextensions.k8s.io/v1`
- `Deployment apps/v1`
- `CustomResourceDefinition apiextensions.k8s.io/v1`
- `Deployment apps/v1`
- `CustomResourceDefinition apiextensions.k8s.io/v1`
- `Deployment apps/v1`
- `CustomResourceDefinition apiextensions.k8s.io/v1`
- `CustomResourceDefinition apiextensions.k8s.io/v1`
- `CustomResourceDefinition apiextensions.k8s.io/v1`
- `Deployment apps/v1`
- `CustomResourceDefinition apiextensions.k8s.io/v1`
- `CustomResourceDefinition apiextensions.k8s.io/v1`
- `Deployment apps/v1`
- `CustomResourceDefinition apiextensions.k8s.io/v1`
- `Deployment apps/v1`

kubernetes/clusters/gke/flux-system/gotk-sync.yaml (2)

- `GitRepository source.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/clusters/gke/imageautomation.yaml (7)

- `northamerica-northeast1-docker.pkg.dev/phx-01j1tbke0ax/phx-01j1tbke0ax-safeinputs/api unknown version`
- `northamerica-northeast1-docker.pkg.dev/phx-01j1tbke0ax/phx-01j1tbke0ax-safeinputs/ui unknown version`
- `ImageRepository image.toolkit.fluxcd.io/v1beta2` → [Updates: `image.toolkit.fluxcd.io/v1`]
- `ImagePolicy image.toolkit.fluxcd.io/v1beta2` → [Updates: `image.toolkit.fluxcd.io/v1`]
- `ImageRepository image.toolkit.fluxcd.io/v1beta2` → [Updates: `image.toolkit.fluxcd.io/v1`]
- `ImagePolicy image.toolkit.fluxcd.io/v1beta2` → [Updates: `image.toolkit.fluxcd.io/v1`]
- `ImageUpdateAutomation image.toolkit.fluxcd.io/v1beta2` → [Updates: `image.toolkit.fluxcd.io/v1`]

kubernetes/components/controllers/cert-manager.yaml (2)

- `HelmRepository source.toolkit.fluxcd.io/v1`
- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/components/controllers/ingress.yaml (4)

- `auto unknown version`
- `Deployment apps/v1`
- `Role rbac.authorization.k8s.io/v1`
- `RoleBinding rbac.authorization.k8s.io/v1`

kubernetes/components/controllers/mongodb.yaml (2)

- `HelmRepository source.toolkit.fluxcd.io/v1`
- `HelmRelease helm.toolkit.fluxcd.io/v2`

npm (5)

api/package.json (46)

- `@escape.tech/graphql-armor-max-aliases ^2.0.0` → [Updates: `^2.0.0`]
- `@escape.tech/graphql-armor-max-depth ^2.0.0` → [Updates: `^2.0.0`]
- `@graphql-tools/schema ^10.0.3` → [Updates: `^10.0.3`]
- `@whatwg-node/node-fetch ^0.7.0` → [Updates: `^0.8.0`]
- `connect-mongo ^5.1.0` → [Updates: `^6.0.0`]
- `cookie-parser ^1.4.6`
- `csrf-csrf ^3.0.6` → [Updates: `^3.0.6`, `^4.0.0`]
- `dataloader ^2.2.2`
- `dotenv ^16.0.3` → [Updates: `^16.0.3`, `^17.0.0`]
- `envalid ^8.0.0` → [Updates: `^8.0.0`]
- `express ^5.0.1` → [Updates: `^5.0.1`]
- `express-session ^1.18.0` → [Updates: `^1.18.0`]
- `graphql ^16.6.0` → [Updates: `^16.6.0`, `^17.0.0`]
- `graphql-scalars ^1.23.0` → [Updates: `^1.23.0`, `^2.0.0`]
- `graphql-type-json ^0.3.2`
- `graphql-yoga ^5.6.0` → [Updates: `^5.6.0`]
- `lodash ^4.17.21` → [Updates: `^4.17.21`]
- `mongoose ^8.4.0` → [Updates: `^8.4.0`]
- `mongoose-unique-validator ^5.0.1` → [Updates: `^5.0.1`, `^6.0.0`]
- `passport ^0.7.0`
- `passport-magic-link ^2.1.1` → [Updates: `^4.0.0`]
- `tsx ^4.15.6` → [Updates: `^4.15.6`]
- `typescript ^5.4.5` → [Updates: `^5.4.5`, `^7.0.0`]
- `ua-parser-js ^2.0.0` → [Updates: `^2.0.0`]
- `validator ^13.12.0` → [Updates: `^13.12.0`]
- `@jest/globals 29.7.0` → [Updates: `30.5.1`]
- `@microsoft/eslint-plugin-sdl 0.2.2` → [Updates: `1.1.0`]
- `@types/cookie-parser 1.4.8` → [Updates: `1.4.10`]
- `@types/express 5.0.0` → [Updates: `5.0.6`]
- `@types/express-session 1.18.1` → [Updates: `1.19.0`]
- `@types/jest 29.5.14` → [Updates: `30.0.0`]
- `@types/lodash 4.17.14` → [Updates: `4.17.25`]
- `@types/node 22.10.5` → [Updates: `22.20.2`]
- `@types/passport 1.0.17`
- `@types/supertest 6.0.2` → [Updates: `6.0.3`, `7.2.1`]
- `@types/ua-parser-js 0.7.39`
- `@types/validator 13.12.2` → [Updates: `13.15.10`]
- `eslint 8.57.1` → [Updates: `10.10.0`]
- `eslint-plugin-n 17.15.1` → [Updates: `17.24.0`, `18.3.0`]
- `eslint-plugin-security 3.0.1` → [Updates: `4.0.1`]
- `jest 29.7.0` → [Updates: `30.5.1`]
- `nodemon 3.1.9` → [Updates: `3.1.14`]
- `supertest 7.0.0` → [Updates: `7.2.2`]
- `ts-jest 29.2.5` → [Updates: `29.4.12`]
- `type-fest 4.32.0` → [Updates: `4.41.0`, `5.9.0`]
- `node ^22.0.0` → [Updates: `^24.0.0`]

devsecops/artifact-registry-vulnerability-scanning/cloud-function/package.json (4)

- `@google-cloud/containeranalysis ^5.0.0` → [Updates: `^7.0.0`]
- `@google-cloud/storage ^7.0.0` → [Updates: `^7.0.0`, `^8.0.0`]
- `@google-cloud/functions-framework ^3.2.0` → [Updates: `^3.2.0`, `^5.0.0`]
- `@grpc/grpc-js 1.12.5` → [Updates: `1.12.7`]

devsecops/axe-testing/package.json (14)

- `@axe-core/puppeteer ^4.10.0` → [Updates: `^4.10.0`]
- `dotenv ^16.4.5` → [Updates: `^16.4.5`, `^17.0.0`]
- `franc ^6.2.0`
- `puppeteer ^24.0.0` → [Updates: `^24.0.0`, `^25.0.0`]
- `@babel/core 7.26.0` → [Updates: `7.29.6`]
- `@babel/preset-env 7.26.0` → [Updates: `7.29.7`, `8.0.5`]
- `@microsoft/eslint-plugin-sdl 0.2.2` → [Updates: `1.1.0`]
- `babel-jest 29.7.0` → [Updates: `30.5.1`]
- `eslint 8.57.1` → [Updates: `10.10.0`]
- `eslint-plugin-n 17.15.1` → [Updates: `17.24.0`, `18.3.0`]
- `eslint-plugin-security 3.0.1` → [Updates: `4.0.1`]
- `http-server 14.1.1`
- `jest 29.7.0` → [Updates: `30.5.1`]
- `node ^22.0.0` → [Updates: `^24.0.0`]

package.json (14)

- `@graphql-codegen/cli 5.0.3` → [Updates: `5.0.7`, `7.4.1`]
- `@microsoft/eslint-plugin-sdl 0.2.2` → [Updates: `1.1.0`]
- `@parcel/watcher 2.5.0` → [Updates: `2.6.0`]
- `@typescript-eslint/eslint-plugin 7.18.0` → [Updates: `8.70.0`]
- `@typescript-eslint/parser 7.18.0` → [Updates: `8.70.0`]
- `eslint 8.57.1` → [Updates: `10.10.0`]
- `eslint-config-prettier 10.0.1` → [Updates: `10.1.8`]
- `eslint-config-standard 17.1.0`
- `eslint-import-resolver-typescript 3.7.0` → [Updates: `3.10.1`, `4.4.5`]
- `eslint-plugin-import 2.31.0` → [Updates: `2.32.0`]
- `eslint-plugin-jest 28.10.0` → [Updates: `28.14.0`, `29.16.6`]
- `eslint-plugin-no-secrets 2.1.1` → [Updates: `2.3.3`]
- `eslint-plugin-promise 6.6.0` → [Updates: `7.3.0`]
- `prettier 3.4.2` → [Updates: `3.9.6`]

ui/package.json (50)

- `@apollo/client ^3.9.4` → [Updates: `^3.9.4`, `^4.0.0`]
- `@chakra-ui/icons ^2.0.17`
- `@chakra-ui/react ^2.4.9` → [Updates: `^2.4.9`, `^3.0.0`]
- `@dts-stn/service-canada-design-system ^1.67.3`
- `@lingui/macro 5.1.2` → [Updates: `5.9.5`]
- `@lingui/react 5.1.2` → [Updates: `5.9.5`, `6.7.0`]
- `@tanstack/react-table ^8.10.7` → [Updates: `^8.10.7`, `^9.0.0`]
- `debounce-promise ^3.1.2`
- `dotenv ^16.4.5` → [Updates: `^16.4.5`, `^17.0.0`]
- `formik ^2.4.3` → [Updates: `^2.4.3`]
- `lodash ^4.17.21` → [Updates: `^4.17.21`]
- `react ^18.2.0` → [Updates: `^19.0.0`]
- `react-dom ^18.2.0` → [Updates: `^19.0.0`]
- `react-error-boundary ^5.0.0` → [Updates: `^6.0.0`]
- `react-hook-form ^7.51.5` → [Updates: `^7.51.5`]
- `react-icons ^5.0.0` → [Updates: `^5.0.0`]
- `react-router ^7.1.1` → [Updates: `^7.1.1`]
- `spin-delay ^2.0.0`
- `xlsx ^0.18.5` → [Updates: `^0.20.3`]
- `yup ^1.2.0` → [Updates: `^1.2.0`]
- `@babel/core 7.26.0` → [Updates: `7.29.6`]
- `@babel/preset-react 7.26.3` → [Updates: `7.29.7`, `8.0.1`]
- `@babel/preset-typescript 7.26.0` → [Updates: `7.29.7`, `8.0.1`]
- `@lingui/babel-plugin-lingui-macro 5.1.2` → [Updates: `5.9.5`, `6.7.0`]
- `@lingui/cli 5.1.2` → [Updates: `5.9.5`, `6.7.0`]
- `@microsoft/eslint-plugin-sdl 0.2.2` → [Updates: `1.1.0`]
- `@rspack/cli 1.1.8` → [Updates: `1.7.12`, `2.2.3`]
- `@rspack/core 1.1.8` → [Updates: `1.7.12`, `2.2.3`]
- `@svgr/webpack 8.1.0`
- `@swc/core 1.10.7` → [Updates: `1.16.2`]
- `@testing-library/dom 10.4.0` → [Updates: `10.4.2`]
- `@testing-library/jest-dom 6.6.3` → [Updates: `6.9.1`, `7.0.1`]
- `@testing-library/react 16.1.0` → [Updates: `16.3.3`]
- `@types/debounce-promise 3.1.9`
- `@types/jest 29.5.14` → [Updates: `30.0.0`]
- `@types/lodash 4.17.14` → [Updates: `4.17.25`]
- `@types/react 18.3.18` → [Updates: `18.3.31`, `19.3.0`]
- `@types/react-dom 18.3.5` → [Updates: `18.3.7`, `19.3.0`]
- `babel-jest 29.7.0` → [Updates: `30.5.1`]
- `babel-loader 9.2.1` → [Updates: `10.1.1`]
- `babel-plugin-macros 3.1.0`
- `eslint 8.57.1` → [Updates: `10.10.0`]
- `eslint-plugin-jsx-a11y 6.10.2`
- `eslint-plugin-react 7.37.4` → [Updates: `7.37.5`]
- `eslint-plugin-react-hooks 5.1.0` → [Updates: `5.2.0`, `7.1.1`]
- `jest 29.7.0` → [Updates: `30.5.1`]
- `jest-environment-jsdom 29.7.0` → [Updates: `30.5.1`]
- `react-test-renderer 18.3.1` → [Updates: `19.3.0`]
- `type-fest 4.32.0` → [Updates: `4.41.0`, `5.9.0`]
- `typescript 5.7.3` → [Updates: `5.9.3`, `7.0.2`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository