Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/bcgov/myss).

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| nuget | [xunit](https://redirect.github.com/xunit/xunit) |  |

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): update dependency dotnet-ef to v10.0.11
- [ ] chore(deps): update linters (`@eslint/js`, `@tanstack/eslint-plugin-query`, `eslint`, `eslint-plugin-react-hooks`, `eslint-plugin-react-refresh`, `typescript-eslint`)
- [ ] fix(deps): update node dependencies (`@bcgov/bc-sans`, `@bcgov/design-system-react-components`, `@strapi/database`, `@strapi/plugin-cloud`, `@strapi/plugin-users-permissions`, `@strapi/strapi`, `@tanstack/react-query`, `@types/node`, `@types/react`, `@types/react-dom`, `@vitest/browser-playwright`, `@vitest/coverage-v8`, `globals`, `pg`, `prettier`, `react-router`, `vitest-browser-react`)
- [ ] chore(deps): update dependency @vitejs/plugin-react to v5.2.0
- [ ] chore(deps): update dependency bcgov/renovate-config to v2026.9.9
- [ ] chore(deps): update dependency @types/node to v24
- [ ] chore(deps): update dependency @vitejs/plugin-react to v6
- [ ] chore(deps): update dependency typescript to v7
- [ ] chore(deps): update github actions (major) (`SonarSource/sonarqube-scan-action`, `actions/checkout`, `actions/download-artifact`, `actions/setup-node`, `actions/upload-artifact`)
- [ ] chore(deps): update linters to v10 (`@eslint/js`, `eslint`)
- [ ] chore(deps): update node.js to v24
- [ ] chore(deps): update vitest monorepo to v5 (`@vitest/browser-playwright`, `@vitest/coverage-v8`)
- [ ] fix(deps): update dependency @bcgov/design-tokens to v5
- [ ] fix(deps): update react monorepo to v19 (`@types/react`, `@types/react-dom`, `react`, `react-dom`)
- [ ] chore(deps): lock file maintenance
- [ ] 🔐 **Create all awaiting schedule PRs at once** 🔐

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update dependency opentelemetry.exporter.opentelemetryprotocol to 1.15.3 [security]
- [ ] chore(deps): update dependency vitest to v4.1.11 [security]
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update clamav/clamav docker tag to v1.5.4
- [ ] chore(deps): update dependency font-awesome to v7

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update dependency react-router-dom to v6.30.6 [security]](../pull/43)
- [ ] [chore(deps): update dependency vite to v7.3.5 [security]](../pull/44)
- [ ] [chore(deps): update dependency @hey-api/openapi-ts to ^0.97.0 [security]](../pull/45)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

docker-compose (1)

compose.yaml (2)

- `postgres 17-alpine` → [Updates: `18-alpine`]
- `clamav/clamav 1.5.3` → [Updates: `1.5.4`]

dockerfile (2)

Apps/MyssContent/Dockerfile (3)

- `node 22-alpine` → [Updates: `24-alpine`]
- `node 22-alpine` → [Updates: `24-alpine`]
- `node 22-alpine` → [Updates: `24-alpine`]

Apps/MyssWebclient/Dockerfile (1)

- `docker.io/library/node 24-alpine3.23`

github-actions (1)

.github/workflows/tests-dev.yml (27)

- `actions/checkout v6` → [Updates: `v7`]
- `aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25`
- `github/codeql-action v4`
- `actions/checkout v6` → [Updates: `v7`]
- `actions/setup-dotnet v6`
- `actions/checkout v6` → [Updates: `v7`]
- `actions/setup-node v6` → [Updates: `v7`]
- `actions/upload-artifact v4` → [Updates: `v7`]
- `actions/checkout v6` → [Updates: `v7`]
- `actions/setup-node v6` → [Updates: `v7`]
- `actions/upload-artifact v4` → [Updates: `v7`]
- `actions/checkout v6` → [Updates: `v7`]
- `actions/setup-dotnet v6`
- `actions/checkout v6` → [Updates: `v7`]
- `actions/setup-dotnet v6`
- `actions/checkout v6` → [Updates: `v7`]
- `actions/setup-node v6` → [Updates: `v7`]
- `actions/download-artifact v4` → [Updates: `v8`]
- `SonarSource/sonarqube-scan-action v7` → [Updates: `v8`]
- `actions/checkout v6` → [Updates: `v7`]
- `actions/setup-node v6` → [Updates: `v7`]
- `actions/download-artifact v4` → [Updates: `v8`]
- `SonarSource/sonarqube-scan-action v7` → [Updates: `v8`]
- `node 24`
- `node 24`
- `node 24`
- `node 24`

html (1)

Apps/MyssWebclient/index.html (1)

- `font-awesome 4.7.0` → [Updates: `7.3.1`]

npm (2)

Apps/MyssContent/package.json (17)

- `@strapi/database 5.51.0` → [Updates: `5.52.3`]
- `@strapi/plugin-cloud 5.51.0` → [Updates: `5.52.3`]
- `@strapi/plugin-users-permissions 5.51.0` → [Updates: `5.52.3`]
- `@strapi/strapi 5.51.0` → [Updates: `5.52.3`]
- `pg 8.20.0` → [Updates: `8.23.0`]
- `react ^18.0.0` → [Updates: `^19.0.0`]
- `react-dom ^18.0.0` → [Updates: `^19.0.0`]
- `react-router-dom ^6.30.3` → [Updates: `^6.30.3`]
- `styled-components ^6.0.0`
- `@types/node ^20` → [Updates: `^24.0.0`]
- `@types/react ^18` → [Updates: `^19.0.0`]
- `@types/react-dom ^18` → [Updates: `^19.0.0`]
- `@vitest/coverage-v8 4.0.18` → [Updates: `4.1.11`, `5.0.0`]
- `typescript ^5` → [Updates: `^7.0.0`]
- `vitest 4.0.18` → [Updates: `4.1.11`]
- `node >=20.0.0 <=26.x.x`
- `npm >=6.0.0`

Apps/MyssWebclient/package.json (29)

- `@bcgov/bc-sans 2.1.0` → [Updates: `2.1.2`]
- `@bcgov/design-system-react-components 0.6.0` → [Updates: `0.8.1`]
- `@bcgov/design-tokens 3.2.0` → [Updates: `5.0.0`]
- `@formio/js ^5.5.0`
- `@formio/react ^6.2.1`
- `@tanstack/react-query 5.90.20` → [Updates: `5.102.8`]
- `oidc-client-ts 3.5.0`
- `react 19.2.8` → [Updates: `19.3.0`]
- `react-dom 19.2.8` → [Updates: `19.3.0`]
- `react-oidc-context 3.3.1`
- `react-router 8.3.0` → [Updates: `8.3.1`]
- `@eslint/js 9.39.2` → [Updates: `9.39.5`, `10.0.1`]
- `@hey-api/openapi-ts ^0.94.2` → [Updates: `^0.97.0`]
- `@tanstack/eslint-plugin-query 5.91.4` → [Updates: `5.102.8`]
- `@types/node 25.2.0` → [Updates: `25.9.5`]
- `@types/react 19.2.11` → [Updates: `19.2.18`]
- `@types/react-dom 19.2.3` → [Updates: `19.2.7`]
- `@vitejs/plugin-react 5.1.3` → [Updates: `5.2.0`, `6.1.1`]
- `@vitest/browser-playwright 4.0.18` → [Updates: `4.1.11`, `5.0.0`]
- `@vitest/coverage-v8 4.0.18` → [Updates: `4.1.11`, `5.0.0`]
- `eslint 9.39.2` → [Updates: `9.39.5`, `10.10.0`]
- `eslint-plugin-react-hooks 7.0.1` → [Updates: `7.1.1`]
- `eslint-plugin-react-refresh 0.5.0` → [Updates: `0.5.6`]
- `globals 17.3.0` → [Updates: `17.12.0`]
- `prettier 3.8.1` → [Updates: `3.9.6`]
- `typescript 5.9.3` → [Updates: `7.0.2`]
- `typescript-eslint 8.54.0` → [Updates: `8.69.0`]
- `vite 7.3.1` → [Updates: `7.3.5`]
- `vitest-browser-react 2.0.5` → [Updates: `2.3.0`]

nuget (7)

.config/dotnet-tools.json (2)

- `dotnet-ef 10.0.10` → [Updates: `10.0.11`]
- `dotnet-sonarscanner 11.3.0`

Apps/IcmApi.Console/IcmApi.Console.csproj (6)

- `Microsoft.Extensions.Configuration.UserSecrets 10.0.0`
- `Microsoft.Extensions.Configuration.Json 10.0.0`
- `Microsoft.Extensions.Configuration.EnvironmentVariables 10.0.0`
- `Microsoft.Extensions.Configuration.CommandLine 10.0.0`
- `Microsoft.Extensions.Configuration.Binder 10.0.0`
- `Microsoft.Extensions.Configuration 10.0.0`

Apps/IcmApi.Tests/IcmApi.Tests.csproj (4)

- `xunit.runner.visualstudio 3.1.4`
- `xunit 2.9.3`
- `Microsoft.NET.Test.Sdk 17.14.1`
- `coverlet.collector 6.0.4`

Apps/IcmApi/IcmApi.csproj (1)

- `Refit 15.2.0`

Apps/MySS.AspireHost/MySS.AspireHost.csproj (4)

- `Aspire.Hosting.JavaScript 13.5.3`
- `Aspire.Hosting.PostgreSQL 13.5.3`
- `Aspire.Hosting.AppHost 13.5.3`
- `Aspire.AppHost.Sdk 13.5.3`

Apps/MyssApi.Tests/MyssApi.Tests.csproj (6)

- `xunit.runner.visualstudio 3.1.4`
- `xunit 2.9.3`
- `Microsoft.NET.Test.Sdk 17.14.1`
- `Microsoft.EntityFrameworkCore.InMemory 10.0.10`
- `Microsoft.AspNetCore.Mvc.Testing 10.0.10`
- `coverlet.collector 6.0.4`

Apps/MyssApi/MyssApi.csproj (21)

- `Serilog.Sinks.Console 6.1.1`
- `Serilog.Sinks.Async 2.1.0`
- `Serilog.Exceptions 8.4.0`
- `Serilog.Enrichers.Span 3.1.0`
- `Serilog.Enrichers.Environment 3.0.1`
- `Serilog.Enrichers.CorrelationId 3.0.1`
- `Serilog.Enrichers.ClientInfo 2.7.0`
- `Serilog.AspNetCore 10.0.0`
- `OpenTelemetry.Instrumentation.Runtime 1.14.0`
- `OpenTelemetry.Instrumentation.Http 1.14.0`
- `OpenTelemetry.Instrumentation.AspNetCore 1.14.0`
- `OpenTelemetry.Extensions.Hosting 1.14.0`
- `OpenTelemetry.Exporter.OpenTelemetryProtocol 1.14.0` → [Updates: `1.15.3`]
- `OpenTelemetry.Exporter.Console 1.14.0`
- `AWSSDK.S3 4.0.102.1`
- `Swashbuckle.AspNetCore 7.2.0`
- `Npgsql.EntityFrameworkCore.PostgreSQL 10.0.3`
- `Microsoft.EntityFrameworkCore.Relational 10.0.10`
- `Microsoft.EntityFrameworkCore.Design 10.0.10`
- `Microsoft.AspNetCore.Authentication.JwtBearer 10.0.10`
- `Asp.Versioning.Mvc.ApiExplorer 8.1.0`

regex (1)

renovate.json (1)

- `bcgov/renovate-config 2026.8.18` → [Updates: `2026.9.9`]

renovate-config (1)

renovate.json (1)

- `bcgov/renovate-config 2026.8.18` → [Updates: `2026.9.9`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the Dependency Dashboard and its linked pull requests, then inspect the listed files, including compose.yaml, Dockerfiles, .github/workflows/tests-dev.yml, package.json files, .csproj files, and renovate.json. Review the relevant dependency's release notes and existing checks before selecting a single update; done means the chosen update is applied and the repository checks pass.

Written by the indexing model from the issue text.