Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/bcgov/common-notify).

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [prom-client](https://redirect.github.com/siimon/prom-client) |  |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update dependency bcgov/renovate-config to v2026
- [ ] fix(deps): update all dependencies (major) (`@eslint/js`, `@nestjs/cli`, `@nestjs/common`, `@nestjs/config`, `@nestjs/core`, `@nestjs/passport`, `@nestjs/platform-express`, `@nestjs/schematics`, `@nestjs/swagger`, `@nestjs/terminus`, `@nestjs/testing`, `@nestjs/typeorm`, `@testing-library/jest-dom`, `@vitejs/plugin-react`, `@vitest/coverage-v8`, `@vitest/ui`, `actions/cache`, `actions/checkout`, `actions/setup-node`, `bcgov/action-crunchy`, `eslint`, `ioredis`, `js-yaml`, `jsdom`, `markdown-it`, `softprops/action-gh-release`, `typeorm`, `typescript`, `uuid`, `vite`)
- [ ] chore(deps): lock file maintenance
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [fix(deps): update all dependencies](../pull/220) (`class-validator`, `js-yaml`, `lodash`, `node`, `nodemailer`, `vitest`)

## Detected Dependencies

docker-compose (1)

.devcontainer/docker-compose.yml (4)

- `postgis/postgis 17-3.4`
- `flyway/flyway 12-alpine` → [Updates: `13-alpine`]
- `redis 7-alpine` → [Updates: `8-alpine`]
- `schemaspy/schemaspy 7.0.2`

dockerfile (3)

backend/Dockerfile (2)

- `node 24.18.0-slim` → [Updates: `24.20.0-slim`]
- `node 24.18.0-slim` → [Updates: `24.20.0-slim`]

frontend/Dockerfile (3)

- `node 24-slim`
- `caddy 2.11.4-builder`
- `alpine 3.24.1`

migrations/Dockerfile (1)

- `flyway/flyway 12-alpine` → [Updates: `13-alpine`]

github-actions (13)

.github/workflows/.deployer.yml (8)

- `bcgov/action-crunchy v2.1.0`
- `actions/checkout v4` → [Updates: `v7`]
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `bcgov/action-get-pr v0.3.1@28b0adf8e4d40720d41f9c87356ce24b0a4bd6af`
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `actions/checkout v6` → [Updates: `v7`]
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `ubuntu 24.04`

.github/workflows/.tests.yml (8)

- `actions/checkout v6` → [Updates: `v7`]
- `actions/cache v5` → [Updates: `v6`]
- `actions/checkout v6` → [Updates: `v7`]
- `actions/setup-node v6` → [Updates: `v7`]
- `actions/upload-artifact v7`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `node 24`

.github/workflows/analysis.yml (7)

- `bcgov/action-test-and-analyse v2.0.0@8f699e3fd3fadd9a6adf6f4b1f2638ef7ecfefb9`
- `bcgov/action-test-and-analyse v2.0.0@8f699e3fd3fadd9a6adf6f4b1f2638ef7ecfefb9`
- `actions/checkout v6` → [Updates: `v7`]
- `aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25`
- `github/codeql-action v4`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/auto-retry.yml (1)

- `ubuntu 24.04`

.github/workflows/demo.yml (1)

- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`

.github/workflows/deploy-monitoring.yml (33)

- `actions/checkout v6` → [Updates: `v7`]
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `actions/checkout v6` → [Updates: `v7`]
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `actions/checkout v6` → [Updates: `v7`]
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `actions/checkout v6` → [Updates: `v7`]
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `actions/checkout v6` → [Updates: `v7`]
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `actions/checkout v6` → [Updates: `v7`]
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `actions/checkout v6` → [Updates: `v7`]
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `actions/checkout v6` → [Updates: `v7`]
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `actions/checkout v6` → [Updates: `v7`]
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `actions/checkout v6` → [Updates: `v7`]
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `actions/checkout v6` → [Updates: `v7`]
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/load-test.yml (11)

- `actions/checkout v6` → [Updates: `v7`]
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `grafana/setup-k6-action v1.2.1@db07bd9765aac508ef18982e52ab937fe633a065`
- `grafana/run-k6-action v1.4.0@de51a7390bdf0ac85a3bef493691bd71d4c7c158`
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `grafana/run-k6-action v1.4.0@de51a7390bdf0ac85a3bef493691bd71d4c7c158`
- `grafana/run-k6-action v1.4.0@de51a7390bdf0ac85a3bef493691bd71d4c7c158`
- `grafana/run-k6-action v1.4.0@de51a7390bdf0ac85a3bef493691bd71d4c7c158`
- `actions/upload-artifact v7`
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `ubuntu 24.04`

.github/workflows/merge.yml (15)

- `bcgov/action-builder-ghcr v4.4.1@cb2629351c87dd1c2130073e4ebb7233a9653a63`
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `actions/checkout v4` → [Updates: `v7`]
- `actions/checkout v4` → [Updates: `v7`]
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `actions/checkout v4` → [Updates: `v7`]
- `actions/checkout v6` → [Updates: `v7`]
- `softprops/action-gh-release v2` → [Updates: `v3`]
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/pr-close.yml (6)

- `bcgov/quickstart-openshift-helpers v1.2.1@a11ad3d1b9288fb40757c4314a62eb86ff227931`
- `bcgov/action-crunchy v1.2.6` → [Updates: `v2.1.0`]
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `actions/checkout v4` → [Updates: `v7`]
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/pr-open.yml (6)

- `bcgov/action-builder-ghcr v4.4.1@cb2629351c87dd1c2130073e4ebb7233a9653a63`
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `actions/checkout v4` → [Updates: `v7`]
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/pr-validate.yml (1)

- `bcgov/quickstart-openshift-helpers v1.2.1@a11ad3d1b9288fb40757c4314a62eb86ff227931`

.github/workflows/restore-gateway.yml (2)

- `actions/checkout v4` → [Updates: `v7`]
- `ubuntu 24.04`

.github/workflows/scheduled.yml (4)

- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `bcgov/quickstart-openshift-helpers v1.2.1@a11ad3d1b9288fb40757c4314a62eb86ff227931`
- `zaproxy/action-full-scan v0.13.0@3c58388149901b9a03b7718852c5ba889646c27c`
- `ubuntu 24.04`

helm-values (2)

charts/app/values.yaml

charts/crunchy/values.yml

npm (5)

api-gateway/package.json (2)

- `dotenv ^17.4.2`
- `js-yaml ^4.3.2` → [Updates: `^5.0.0`]

backend/package.json (66)

- `@aws-sdk/client-s3 ^3.1070.0`
- `@azure/communication-sms 1.1.0`
- `@nestjs/cli ^11.0.21` → [Updates: `^12.0.0`]
- `@nestjs/common ^11.0.6` → [Updates: `^12.0.0`]
- `@nestjs/config ^4.0.0` → [Updates: `^12.0.0`]
- `@nestjs/core ^11.0.6` → [Updates: `^12.0.0`]
- `@nestjs/passport ^11.0.5` → [Updates: `^12.0.0`]
- `@nestjs/platform-express ^11.0.6` → [Updates: `^12.0.0`]
- `@nestjs/schematics ^11.0.0` → [Updates: `^12.0.0`]
- `@nestjs/swagger ^11.0.3` → [Updates: `^12.0.0`]
- `@nestjs/terminus ^11.0.0` → [Updates: `^12.0.0`]
- `@nestjs/testing ^11.0.6` → [Updates: `^12.0.0`]
- `@nestjs/typeorm ^11.0.0` → [Updates: `^12.0.0`]
- `@types/markdown-it ^14.1.2`
- `axios ^1.17.0`
- `bull ^4.14.1`
- `chokidar ^5.0.0`
- `class-transformer ^0.5.1`
- `class-validator ^0.14.1` → [Updates: `^0.15.0`]
- `dotenv ^17.0.0`
- `express-prom-bundle ^8.0.0`
- `handlebars ^4.7.9`
- `helmet ^8.0.0`
- `ioredis ^5.3.7` → [Updates: `^6.0.0`]
- `jose ^6.2.2`
- `jwks-rsa ^4.0.1`
- `libphonenumber-js ^1.13.11`
- `markdown-it ^14.1.1` → [Updates: `^15.0.0`]
- `mjml ^5.3.0`
- `mustache ^4.2.0`
- `nest-winston ^1.10.1`
- `nodemailer ^9.0.3` → [Updates: `^9.0.3`]
- `passport-jwt ^4.0.1`
- `pg ^8.13.1`
- `prom-client ^15.1.3`
- `reflect-metadata ^0.2.2`
- `rimraf ^6.0.1`
- `rxjs ^7.8.1`
- `swagger-ui-express ^5.0.1`
- `twilio ^6.0.0`
- `typeorm ^0.3.21` → [Updates: `^1.0.0`]
- `uuid ^11.1.1` → [Updates: `^14.0.0`]
- `winston ^3.17.0`
- `winston-loki ^6.1.4`
- `@eslint/js ^9.39.4` → [Updates: `^10.0.0`]
- `@playwright/test ^1.59.1`
- `@swc/cli ^0.8.1`
- `@swc/core ^1.10.12`
- `@types/express ^5.0.0`
- `@types/mustache ^4.2.6`
- `@types/node ^24.0.0`
- `@types/supertest ^7.0.0`
- `@vitest/coverage-v8 ^4.0.0` → [Updates: `^5.0.0`]
- `eslint ^9.39.4` → [Updates: `^10.0.0`]
- `eslint-config-prettier ^10.1.8`
- `eslint-plugin-prettier ^5.2.3`
- `istanbul-badges-readme ^1.9.0`
- `prettier ^3.8.3`
- `supertest ^7.0.0`
- `typescript ^5.2.2` → [Updates: `^7.0.0`]
- `typescript-eslint ^8.46.2`
- `unplugin-swc ^1.5.1`
- `vitest ^4.0.0` → [Updates: `^4.0.0`]
- `reflect-metadata ^0.2.2`
- `js-yaml ^5.2.2` → [Updates: `^4.3.0`]
- `lodash 4.17.23` → [Updates: `4.18.1`]

frontend/package.json (50)

- `@bcgov/bc-sans ^2.1.0`
- `@bcgov/design-system-react-components ^0.8.1`
- `@emotion/react ^11.14.0`
- `@emotion/styled ^11.14.1`
- `@microsoft/fetch-event-source ^2.0.1`
- `@mui/icons-material ^9.0.1`
- `@mui/material ^9.0.0`
- `@popperjs/core ^2.11.8`
- `@reduxjs/toolkit ^2.11.2`
- `@tanstack/react-router ^1.114.12`
- `@tanstack/router-plugin ^1.114.27`
- `@types/node ^24.0.0`
- `@types/papaparse ^5.5.2`
- `@vitejs/plugin-react ^5.0.0` → [Updates: `^6.0.0`]
- `axios ^1.15.0`
- `bootstrap ^5.3.3`
- `bootstrap-icons ^1.11.3`
- `keycloak-js ^26.2.3`
- `papaparse ^5.7.0`
- `react ^19.0.0`
- `react-bootstrap ^2.10.9`
- `react-dom ^19.0.0`
- `react-redux ^9.2.0`
- `react-toastify ^11.0.5`
- `sass-embedded ^1.86.0`
- `vite ^7.0.0` → [Updates: `^8.0.0`]
- `vite-tsconfig-paths ^6.0.0`
- `@eslint/js ^9.38.0` → [Updates: `^10.0.0`]
- `@playwright/test ^1.51.0`
- `@testing-library/jest-dom ^6.0.0` → [Updates: `^7.0.0`]
- `@testing-library/react ^16.0.0`
- `@testing-library/user-event ^14.4.3`
- `@types/react ^19.0.10`
- `@types/react-dom ^19.0.4`
- `@vitest/coverage-v8 ^4.0.0` → [Updates: `^5.0.0`]
- `@vitest/ui ^4.0.0` → [Updates: `^5.0.0`]
- `eslint ^9.38.0` → [Updates: `^10.0.0`]
- `eslint-config-prettier ^10.1.8`
- `eslint-plugin-prettier ^5.2.3`
- `eslint-plugin-react ^7.37.4`
- `eslint-plugin-react-hooks ^7.0.0`
- `jsdom ^28.0.0` → [Updates: `^30.0.0`]
- `msw ^2.7.3`
- `prettier ^3.5.3`
- `sass ^1.85.1`
- `typescript ^5.7.3` → [Updates: `^7.0.0`]
- `typescript-eslint ^8.46.2`
- `vitest ^4.0.0` → [Updates: `^4.0.0`]
- `@types/react ^19.0.10`
- `esbuild ^0.28.1`

package.json

tests/integration/package.json (4)

- `axios ^1.15.0`
- `dotenv ^17.0.0`
- `js-yaml ^4.1.0` → [Updates: `^4.1.0`]
- `lodash ^4.17.21`

renovate-config (1)

renovate.json (1)

- `bcgov/renovate-config 2025.10.1` → [Updates: `2026.8.18`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the linked Renovate Dependency Dashboard documentation, then inspect the listed package.json files, Dockerfiles, .devcontainer/docker-compose.yml, Helm values, and .github/workflows files. The issue is a generated inventory rather than a defined change, so the intended update and completion criteria cannot be established from the issue alone.

Written by the indexing model from the issue text.