Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/bcgov/pubcode).

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [prom-client](https://redirect.github.com/siimon/prom-client) |  |

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): lock file maintenance

## Detected Dependencies

docker-compose (1)

docker-compose.yml (2)

- `ghcr.io/bcgov/nr-containers/mongo 7.0.40`
- `caddy 2.11.4-alpine`

dockerfile (3)

api/Dockerfile (1)

- `node 24`

database/Dockerfile (1)

- `ghcr.io/bcgov/nr-containers/mongo 7.0.40`

frontend/Dockerfile (2)

- `node 24`
- `caddy 2.11-alpine`

github-actions (8)

.github/workflows/.deploy.yml (4)

- `actions/checkout v7`
- `bcgov/actions-openshift v0.2.0@50414269295ed040baf0d05cb4c7f4d76c7bcd8c`
- `bcgov/actions-openshift v0.2.0@50414269295ed040baf0d05cb4c7f4d76c7bcd8c`
- `ubuntu 24.04`

.github/workflows/.tests.yml (4)

- `actions/checkout v7`
- `cypress-io/github-action v7.4.3@09090944bd8aaa2a517cefb6e38bf1aae336b42b`
- `actions/upload-artifact v7`
- `ubuntu 24.04`

.github/workflows/analysis.yml (4)

- `actions/checkout v7`
- `aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25`
- `github/codeql-action v4`
- `ubuntu 24.04`

.github/workflows/merge.yml (7)

- `actions/checkout v7`
- `TriPSs/conventional-changelog-action v6.5.0@469f0e5e35831fbd1962706f29f65daf0a5723f2`
- `shrink/actions-docker-registry-tag v5@e6aaef25c595b6e0edd18bf4c7dbfea3abd43299`
- `softprops/action-gh-release v3@efb35369e0ad2afab669f228072c1b0d510eae64`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/pr-close.yml (1)

- `bcgov/actions-openshift v0.2.0@50414269295ed040baf0d05cb4c7f4d76c7bcd8c`

.github/workflows/pr-open.yml (5)

- `actions/checkout v7`
- `bcgov/actions v0.6.0@ac9d89eede94f5f58d3446784c94cff634d98eac`
- `shrink/actions-docker-registry-tag v5@e6aaef25c595b6e0edd18bf4c7dbfea3abd43299`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/pr-validate.yml (2)

- `bcgov/actions v0.6.0@ac9d89eede94f5f58d3446784c94cff634d98eac`
- `ubuntu 24.04`

.github/workflows/scheduled.yml (17)

- `actions/checkout v7`
- `actions/setup-node v7`
- `actions/cache v6`
- `redhat-actions/openshift-tools-installer v3.1@37eb3cfb20ac2df6f0511ffa71cd917e4d49cabf`
- `actions/checkout v7`
- `actions/setup-node v7`
- `actions/cache v6`
- `actions/checkout v7`
- `actions/setup-node v7`
- `actions/cache v6`
- `redhat-actions/openshift-tools-installer v3.1@37eb3cfb20ac2df6f0511ffa71cd917e4d49cabf`
- `ubuntu 24.04`
- `node 24.x`
- `ubuntu 24.04`
- `node 24.x`
- `ubuntu 24.04`
- `node 24.x`

helm-values (1)

charts/pubcode/values.yaml

npm (5)

api/package.json (18)

- `async-retry ^1.3.3`
- `axios ^1.7.9`
- `axios-oauth-client ^2.2.0`
- `axios-token-interceptor ^0.2.0`
- `body-parser ^2.0.0`
- `cors ^2.8.5`
- `cron ^4.0.0`
- `dotenv ^17.0.0`
- `express ^5.0.0`
- `express-rate-limit ^8.0.0`
- `helmet ^8.0.0`
- `lodash ^4.17.21`
- `mongoose ^9.0.0`
- `morgan ^1.10.0`
- `nocache ^4.0.0`
- `prom-client ^15.1.3`
- `winston ^3.17.0`
- `nodemon ^3.1.9`

crawler/package.json (5)

- `async-retry ^1.3.3`
- `axios ^1.6.8`
- `dotenv ^17.0.0`
- `js-yaml ^5.0.0`
- `nodemon ^3.1.0`

frontend/package.json (27)

- `@bcgov/design-system-react-components ^0.8.0`
- `@emotion/react ^11.14.0`
- `@emotion/styled ^11.14.0`
- `@mui/icons-material ^9.0.0`
- `@mui/material ^9.0.0`
- `@rjsf/core ^6.6.2`
- `@rjsf/mui ^6.6.2`
- `@rjsf/utils ^6.6.2`
- `@rjsf/validator-ajv8 ^6.6.2`
- `file-saver ^2.0.5`
- `js-yaml ^5.0.0`
- `react ^19.0.0`
- `react-dom ^19.0.0`
- `react-router ^8.0.0`
- `react-syntax-highlighter ^16.0.0`
- `react-toastify ^11.0.3`
- `@eslint/js ^10.0.0`
- `@types/react ^19.0.8`
- `@types/react-dom ^19.0.3`
- `@vitejs/plugin-react ^6.0.0`
- `cypress ^16.0.0`
- `eslint ^10.0.0`
- `eslint-plugin-react ^7.37.4`
- `eslint-plugin-react-hooks ^7.0.0`
- `eslint-plugin-react-refresh ^0.5.0`
- `globals ^17.0.0`
- `vite ^8.0.0`

schema/script/package.json (4)

- `axios ^1.6.4`
- `cheerio ^1.0.0-rc.12`
- `lodash ^4.17.21`
- `@actions/core ^3.0.0`

utilities/remove-deleted-pubcode/package.json (4)

- `async-retry ^1.3.3`
- `axios ^1.6.4`
- `dotenv ^17.0.0`
- `nodemon ^3.0.0`

regex (1)

renovate.json (1)

- `bcgov/renovate-config 2026.9.9`

renovate-config (1)

renovate.json (1)

- `bcgov/renovate-config 2026.9.9`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository