Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/bcgov/pubcode).

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [prom-client](https://redirect.github.com/siimon/prom-client) |  |

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): lock file maintenance

## Detected Dependencies

docker-compose (1)

docker-compose.yml (2)

- `ghcr.io/bcgov/nr-containers/mongo 7.0.40`
- `caddy 2.11.4-alpine`

dockerfile (3)

api/Dockerfile (1)

- `node 24`

database/Dockerfile (1)

- `ghcr.io/bcgov/nr-containers/mongo 7.0.40`

frontend/Dockerfile (2)

- `node 24`
- `caddy 2.11-alpine`

github-actions (8)

.github/workflows/.deploy.yml (4)

- `actions/checkout v7`
- `bcgov/actions-openshift v0.2.0@50414269295ed040baf0d05cb4c7f4d76c7bcd8c`
- `bcgov/actions-openshift v0.2.0@50414269295ed040baf0d05cb4c7f4d76c7bcd8c`
- `ubuntu 24.04`

.github/workflows/.tests.yml (4)

- `actions/checkout v7`
- `cypress-io/github-action v7.4.3@09090944bd8aaa2a517cefb6e38bf1aae336b42b`
- `actions/upload-artifact v7`
- `ubuntu 24.04`

.github/workflows/analysis.yml (4)

- `actions/checkout v7`
- `aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25`
- `github/codeql-action v4`
- `ubuntu 24.04`

.github/workflows/merge.yml (7)

- `actions/checkout v7`
- `TriPSs/conventional-changelog-action v6.5.0@469f0e5e35831fbd1962706f29f65daf0a5723f2`
- `shrink/actions-docker-registry-tag v5@e6aaef25c595b6e0edd18bf4c7dbfea3abd43299`
- `softprops/action-gh-release v3@efb35369e0ad2afab669f228072c1b0d510eae64`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/pr-close.yml (1)

- `bcgov/actions-openshift v0.2.0@50414269295ed040baf0d05cb4c7f4d76c7bcd8c`

.github/workflows/pr-open.yml (5)

- `actions/checkout v7`
- `bcgov/actions v0.6.0@ac9d89eede94f5f58d3446784c94cff634d98eac`
- `shrink/actions-docker-registry-tag v5@e6aaef25c595b6e0edd18bf4c7dbfea3abd43299`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/pr-validate.yml (2)

- `bcgov/actions v0.6.0@ac9d89eede94f5f58d3446784c94cff634d98eac`
- `ubuntu 24.04`

.github/workflows/scheduled.yml (17)

- `actions/checkout v7`
- `actions/setup-node v7`
- `actions/cache v6`
- `redhat-actions/openshift-tools-installer v3.1@37eb3cfb20ac2df6f0511ffa71cd917e4d49cabf`
- `actions/checkout v7`
- `actions/setup-node v7`
- `actions/cache v6`
- `actions/checkout v7`
- `actions/setup-node v7`
- `actions/cache v6`
- `redhat-actions/openshift-tools-installer v3.1@37eb3cfb20ac2df6f0511ffa71cd917e4d49cabf`
- `ubuntu 24.04`
- `node 24.x`
- `ubuntu 24.04`
- `node 24.x`
- `ubuntu 24.04`
- `node 24.x`

helm-values (1)

charts/pubcode/values.yaml

npm (5)

api/package.json (18)

- `async-retry ^1.3.3`
- `axios ^1.7.9`
- `axios-oauth-client ^2.2.0`
- `axios-token-interceptor ^0.2.0`
- `body-parser ^2.0.0`
- `cors ^2.8.5`
- `cron ^4.0.0`
- `dotenv ^17.0.0`
- `express ^5.0.0`
- `express-rate-limit ^8.0.0`
- `helmet ^8.0.0`
- `lodash ^4.17.21`
- `mongoose ^9.0.0`
- `morgan ^1.10.0`
- `nocache ^4.0.0`
- `prom-client ^15.1.3`
- `winston ^3.17.0`
- `nodemon ^3.1.9`

crawler/package.json (5)

- `async-retry ^1.3.3`
- `axios ^1.6.8`
- `dotenv ^17.0.0`
- `js-yaml ^5.0.0`
- `nodemon ^3.1.0`

frontend/package.json (27)

- `@bcgov/design-system-react-components ^0.8.0`
- `@emotion/react ^11.14.0`
- `@emotion/styled ^11.14.0`
- `@mui/icons-material ^9.0.0`
- `@mui/material ^9.0.0`
- `@rjsf/core ^6.6.2`
- `@rjsf/mui ^6.6.2`
- `@rjsf/utils ^6.6.2`
- `@rjsf/validator-ajv8 ^6.6.2`
- `file-saver ^2.0.5`
- `js-yaml ^5.0.0`
- `react ^19.0.0`
- `react-dom ^19.0.0`
- `react-router ^8.0.0`
- `react-syntax-highlighter ^16.0.0`
- `react-toastify ^11.0.3`
- `@eslint/js ^10.0.0`
- `@types/react ^19.0.8`
- `@types/react-dom ^19.0.3`
- `@vitejs/plugin-react ^6.0.0`
- `cypress ^16.0.0`
- `eslint ^10.0.0`
- `eslint-plugin-react ^7.37.4`
- `eslint-plugin-react-hooks ^7.0.0`
- `eslint-plugin-react-refresh ^0.5.0`
- `globals ^17.0.0`
- `vite ^8.0.0`

schema/script/package.json (4)

- `axios ^1.6.4`
- `cheerio ^1.0.0-rc.12`
- `lodash ^4.17.21`
- `@actions/core ^3.0.0`

utilities/remove-deleted-pubcode/package.json (4)

- `async-retry ^1.3.3`
- `axios ^1.6.4`
- `dotenv ^17.0.0`
- `nodemon ^3.0.0`

regex (1)

renovate.json (1)

- `bcgov/renovate-config 2026.9.9`

renovate-config (1)

renovate.json (1)

- `bcgov/renovate-config 2026.9.9`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Commencez par examiner api/package.json, crawler/package.json, frontend/package.json, schema/script/package.json, utilities/remove-deleted-pubcode/package.json, les Dockerfiles et .github/workflows ; consultez la documentation liée du Renovate dashboard. L’issue ne définit pas Done, car elle ne fait que signaler l’état des dépendances et proposer un déclenchement manuel.

Rédigé par le modèle d'indexation à partir du texte de l'issue.