Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/bcgov/quickstart-azure-containers).

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [prom-client](https://redirect.github.com/siimon/prom-client) |  |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): lock file maintenance
- [ ] chore(deps): lock file maintenance
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update playwright to ^1.63.0](../pull/221) (`@playwright/test`, `playwright`)
- [ ] [chore(deps): update node.js to v24.21.0](../pull/222)
- [ ] [fix(deps): update nestjs to v12](../pull/211) (`@nestjs/cli`, `@nestjs/common`, `@nestjs/config`, `@nestjs/core`, `@nestjs/platform-express`, `@nestjs/schematics`, `@nestjs/swagger`, `@nestjs/terminus`, `@nestjs/testing`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [chore(deps): update dependency typescript to v7](../pull/194)

## Detected Dependencies

docker-compose (1)

docker-compose.yml (3)

- `postgis/postgis 18-3.6`
- `flyway/flyway 13-alpine`
- `schemaspy/schemaspy 7.0.2`

dockerfile (3)

backend/Dockerfile (3)

- `node 24.20.0-slim` → [Updates: `24.21.0-slim`]
- `node 24.20.0-slim` → [Updates: `24.21.0-slim`]
- `node 24.20.0` → [Updates: `24.21.0`]

frontend/Dockerfile (2)

- `node 24.20.0-slim` → [Updates: `24.21.0-slim`]
- `caddy 2.11.4-alpine`

migrations/Dockerfile (1)

- `flyway/flyway 13-alpine`

github-actions (8)

.github/workflows/.builds.yml (2)

- `bcgov/action-builder-ghcr v4.4.1`
- `ubuntu 24.04`

.github/workflows/.deployer.yml (4)

- `actions/checkout v7`
- `azure/login v3`
- `hashicorp/setup-terraform v4.0.1@dfe3c3f87815947d99a8997f908cb6525fc44e9e`
- `ubuntu 24.04`

.github/workflows/.stack-prefix.yml (2)

- `actions/checkout v7`
- `ubuntu 24.04`

.github/workflows/.tests.yml (9)

- `bcgov-nr/action-test-and-analyse v2.0.0`
- `bcgov/action-test-and-analyse v2.0.0`
- `actions/checkout v7`
- `aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25`
- `github/codeql-action v4`
- `postgis/postgis 18-3.6`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/deploy-vm-bastion.yml (2)

- `bcgov/action-deployer-vm-bastion-alz v1.2.3@9de000934c10f143c5b4a02eb69ff761ae3f0e6f`
- `ubuntu 24.04`

.github/workflows/pr-close.yml (3)

- `actions/checkout v7`
- `azure/login v3`
- `ubuntu 24.04`

.github/workflows/pr-open.yml (6)

- `actions/checkout v7`
- `actions/cache v6`
- `terraform-linters/setup-tflint v6`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/pr-validate.yml (2)

- `bcgov/quickstart-openshift-helpers v1.2.1@a11ad3d1b9288fb40757c4314a62eb86ff227931`
- `ubuntu 24.04`

npm (3)

backend/package.json (53)

- `@azure/monitor-opentelemetry ^1.18.2`
- `@nestjs/common ^11.1.28` → [Updates: `^12.0.0`]
- `@nestjs/config ^4.0.4` → [Updates: `^12.0.0`]
- `@nestjs/core ^11.1.28` → [Updates: `^12.0.0`]
- `@nestjs/platform-express ^11.1.28` → [Updates: `^12.0.0`]
- `@nestjs/swagger ^11.4.5` → [Updates: `^12.0.0`]
- `@nestjs/terminus ^11.1.1` → [Updates: `^12.0.0`]
- `@opentelemetry/api ^1.9.1`
- `@opentelemetry/resources ^2.9.0`
- `@opentelemetry/semantic-conventions ^1.43.0`
- `@prisma/adapter-pg ^7.8.0`
- `@prisma/client ^7.8.0`
- `dotenv ^17.4.2`
- `express-prom-bundle ^8.0.0`
- `helmet ^8.3.0`
- `nest-winston ^1.10.2`
- `pg ^8.22.0`
- `prisma ^7.8.0`
- `prom-client ^15.1.3`
- `reflect-metadata ^0.2.2`
- `rimraf ^6.1.3`
- `swagger-ui-express ^5.0.1`
- `winston ^3.19.0`
- `@eslint/eslintrc ^3.3.6`
- `@eslint/js ^10.0.1`
- `@nestjs/cli ^11.0.24` → [Updates: `^12.0.0`]
- `@nestjs/schematics ^11.1.0` → [Updates: `^12.0.0`]
- `@nestjs/testing ^11.1.28` → [Updates: `^12.0.0`]
- `@types/express ^5.0.6`
- `@types/node ^24.13.2`
- `@types/supertest ^7.2.1`
- `@typescript-eslint/eslint-plugin ^8.64.0`
- `@typescript-eslint/parser ^8.64.0`
- `@vitest/coverage-v8 ^5.0.0`
- `eslint ^10.7.0`
- `eslint-config-prettier ^10.1.8`
- `eslint-plugin-import-x ^4.17.1`
- `eslint-plugin-prettier ^5.5.6`
- `eslint-plugin-promise ^7.3.0`
- `globals ^17.7.0`
- `istanbul-badges-readme ^1.9.0`
- `lint-staged ^17.0.8`
- `prettier ^3.9.5`
- `source-map-support ^0.5.21`
- `supertest ^7.2.2`
- `ts-loader ^9.6.2`
- `ts-node ^10.9.2`
- `tsconfig-paths ^4.2.0`
- `typescript ^6.0.3` → [Updates: `^7.0.0`]
- `vitest ^5.0.0`
- `vitest-sonar-reporter ^3.0.0`
- `node 24.x`
- `node 24.20.0` → [Updates: `24.21.0`]

frontend/package.json (50)

- `@bcgov/bc-sans ^2.1.0`
- `@bcgov/design-system-react-components ^0.8.1`
- `@popperjs/core ^2.11.8`
- `@tanstack/react-router ^1.170.18`
- `@tanstack/router-plugin ^1.168.20`
- `@types/node ^24.13.2`
- `@vitejs/plugin-react ^6.0.3`
- `axios ^1.18.1`
- `bootstrap ^5.3.8`
- `bootstrap-icons ^1.13.1`
- `react ^19.2.7`
- `react-bootstrap ^2.10.10`
- `react-dom ^19.2.7`
- `sass-embedded ^1.100.0`
- `vite ^8.1.4`
- `vite-tsconfig-paths ^6.1.1`
- `@eslint-react/eslint-plugin ^5.14.10`
- `@eslint/eslintrc ^3.3.6`
- `@eslint/js ^10.0.1`
- `@playwright/test ^1.62.1` → [Updates: `^1.63.0`]
- `@tanstack/react-router-devtools ^1.167.0`
- `@testing-library/jest-dom ^7.0.0`
- `@testing-library/react ^16.3.2`
- `@testing-library/user-event ^14.6.1`
- `@types/react ^19.2.17`
- `@types/react-dom ^19.2.3`
- `@typescript-eslint/eslint-plugin ^8.64.0`
- `@typescript-eslint/parser ^8.64.0`
- `@vitest/coverage-v8 ^5.0.0`
- `@vitest/ui ^5.0.0`
- `eslint ^10.7.0`
- `eslint-config-prettier ^10.1.8`
- `eslint-import-resolver-typescript ^4.4.5`
- `eslint-plugin-html ^8.1.4`
- `eslint-plugin-import-x ^4.17.1`
- `eslint-plugin-prettier ^5.5.6`
- `eslint-plugin-promise ^7.3.0`
- `eslint-plugin-react-hooks ^7.1.1`
- `eslint-plugin-tsdoc ^0.5.2`
- `eslint-plugin-yaml ^1.1.3`
- `globals ^17.7.0`
- `jsdom ^30.0.0`
- `msw ^2.15.0`
- `playwright ^1.62.1` → [Updates: `^1.63.0`]
- `prettier ^3.9.5`
- `sass ^1.101.0`
- `typescript ^6.0.3` → [Updates: `^7.0.0`]
- `vitest ^5.0.0`
- `node 24.x`
- `node 24.20.0` → [Updates: `24.21.0`]

package.json (9)

- `@eslint/eslintrc ^3.3.5`
- `@eslint/js ^10.0.1`
- `@typescript-eslint/eslint-plugin ^8.61.1`
- `@typescript-eslint/parser ^8.61.1`
- `eslint ^10.5.0`
- `eslint-config-prettier ^10.1.8`
- `eslint-plugin-prettier ^5.5.6`
- `globals ^17.6.0`
- `prettier ^3.8.4`

regex (1)

renovate.json (1)

- `bcgov/renovate-config 2026.9.9`

renovate-config (1)

renovate.json (1)

- `bcgov/renovate-config 2026.9.9`

terraform (16)

infra/main.tf

infra/modules/acr/versions.tf (2)

- `azurerm >= 5.0.0, < 6.0.0`
- `hashicorp/terraform >= 1.12.0`

infra/modules/apim/versions.tf (2)

- `azurerm >= 5.0.0, < 6.0.0`
- `hashicorp/terraform >= 1.12.0`

infra/modules/app-alerting/versions.tf (2)

- `azurerm >= 5.0.0, < 6.0.0`
- `hashicorp/terraform >= 1.12.0`

infra/modules/backend/main.tf (2)

- `Azure/avm-res-web-serverfarm/azurerm 2.0.8`
- `Azure/avm-res-web-site/azurerm 0.22.0`

infra/modules/backend/versions.tf (5)

- `azapi >= 2.8.0, < 3.0.0`
- `azurerm >= 5.0.0, < 6.0.0`
- `modtm >= 0.3.5, < 1.0.0`
- `random >= 3.8.1, < 4.0.0`
- `hashicorp/terraform >= 1.12.0`

infra/modules/container-apps/versions.tf (4)

- `azapi >= 2.8.0, < 3.0.0`
- `azurerm >= 5.0.0, < 6.0.0`
- `null >= 3.2.4, < 4.0.0`
- `hashicorp/terraform >= 1.12.0`

infra/modules/flyway/versions.tf (3)

- `azurerm >= 5.0.0, < 6.0.0`
- `null >= 3.2.4, < 4.0.0`
- `hashicorp/terraform >= 1.12.0`

infra/modules/frontdoor/versions.tf (2)

- `azurerm >= 5.0.0, < 6.0.0`
- `hashicorp/terraform >= 1.12.0`

infra/modules/frontend/main.tf (2)

- `Azure/avm-res-web-serverfarm/azurerm 2.0.8`
- `Azure/avm-res-web-site/azurerm 0.22.0`

infra/modules/frontend/versions.tf (5)

- `azapi >= 2.8.0, < 3.0.0`
- `azurerm >= 5.0.0, < 6.0.0`
- `modtm >= 0.3.5, < 1.0.0`
- `random >= 3.8.1, < 4.0.0`
- `hashicorp/terraform >= 1.12.0`

infra/modules/monitoring/versions.tf (2)

- `azurerm >= 5.0.0, < 6.0.0`
- `hashicorp/terraform >= 1.12.0`

infra/modules/network/versions.tf (3)

- `azapi >= 2.8.0, < 3.0.0`
- `azurerm >= 5.0.0, < 6.0.0`
- `hashicorp/terraform >= 1.12.0`

infra/modules/postgresql/versions.tf (5)

- `azurerm >= 5.0.0, < 6.0.0`
- `null >= 3.2.4, < 4.0.0`
- `random >= 3.8.1, < 4.0.0`
- `time >= 0.13.1, < 1.0.0`
- `hashicorp/terraform >= 1.12.0`

infra/providers.tf

infra/versions.tf (7)

- `azapi >= 2.8.0, < 3.0.0`
- `azurerm >= 5.0.0, < 6.0.0`
- `modtm >= 0.3.5, < 1.0.0`
- `null >= 3.2.4, < 4.0.0`
- `random >= 3.8.1, < 4.0.0`
- `time >= 0.13.1, < 1.0.0`
- `hashicorp/terraform >= 1.12.0`

tflint-plugin (1)

infra/.tflint.hcl (1)

- `terraform-linters/tflint-ruleset-azurerm 0.32.0`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

The dashboard spans backend/package.json, frontend/package.json, package.json, Dockerfiles, GitHub workflow files, Terraform files, renovate.json, and infra/.tflint.hcl. Start by reviewing the listed open and blocked Renovate PRs rather than this issue alone. Done would require a specifically scoped dependency update with passing repository checks; this dashboard does not define one.

Written by the indexing model from the issue text.