Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/bcgov/quickstart-openshift).

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [prom-client](https://redirect.github.com/siimon/prom-client) |  |

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): lock file maintenance

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update bcgov/actions action to v0.6.0
- [ ] chore(deps): update node.js to v24.21.0

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update dependency @playwright/test to ^1.63.0](../pull/2849)

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [chore(deps): update dependency typescript to v7](../pull/2778)
- [ ] [fix(deps): update nestjs to v12](../pull/2836) (`@nestjs/cli`, `@nestjs/common`, `@nestjs/config`, `@nestjs/core`, `@nestjs/platform-express`, `@nestjs/schematics`, `@nestjs/swagger`, `@nestjs/terminus`, `@nestjs/testing`)

## Detected Dependencies

docker-compose (1)

docker-compose.yml (3)

- `postgis/postgis 17-3.4`
- `flyway/flyway 13-alpine`
- `schemaspy/schemaspy 7.0.2`

dockerfile (3)

backend/Dockerfile (2)

- `node 24.20.0-slim` → [Updates: `24.21.0-slim`]
- `node 24.20.0-slim` → [Updates: `24.21.0-slim`]

frontend/Dockerfile (3)

- `node 24-slim`
- `caddy 2.11.4-builder`
- `alpine 3.24.1`

migrations/Dockerfile (1)

- `flyway/flyway 13-alpine`

github-actions (8)

.github/workflows/analysis.yml (8)

- `bcgov/action-test-and-analyse v2.0.0@8f699e3fd3fadd9a6adf6f4b1f2638ef7ecfefb9`
- `bcgov/action-test-and-analyse v2.0.0@8f699e3fd3fadd9a6adf6f4b1f2638ef7ecfefb9`
- `actions/checkout v7`
- `actions/cache v6`
- `aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25`
- `github/codeql-action v4`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/merge.yml (7)

- `bcgov/action-get-pr v0.3.1@28b0adf8e4d40720d41f9c87356ce24b0a4bd6af`
- `actions/checkout v7`
- `bcgov/actions v0.5.0@4ad61a784f1c17765b03d8d6de9737c1d3f4c0f2` → [Updates: `v0.6.0`]
- `shrink/actions-docker-registry-tag v5@e6aaef25c595b6e0edd18bf4c7dbfea3abd43299`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/pr-close.yml (1)

- `bcgov/quickstart-openshift-helpers v1.2.1@a11ad3d1b9288fb40757c4314a62eb86ff227931`

.github/workflows/pr-open.yml (4)

- `bcgov/action-builder-ghcr v4.4.1@cb2629351c87dd1c2130073e4ebb7233a9653a63`
- `marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/pr-validate.yml (2)

- `amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50`
- `ubuntu 24.04`

.github/workflows/reusable-deploy.yml (4)

- `bcgov/action-deployer-openshift v4.2.1@27a85b7b157bfc9c3c9bf0aca53bcd288d4d2506`
- `bcgov/action-deployer-openshift v4.2.1@27a85b7b157bfc9c3c9bf0aca53bcd288d4d2506`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/reusable-tests.yml (10)

- `actions/checkout v7`
- `actions/setup-node v7`
- `actions/cache v6`
- `actions/checkout v7`
- `actions/setup-node v7`
- `actions/upload-artifact v7`
- `ubuntu 24.04`
- `node 24`
- `ubuntu 24.04`
- `node 24`

.github/workflows/scheduled.yml (9)

- `actions/stale v11`
- `bcgov/action-oc-runner v1.7.0@111868d1fc50db0a40417ba321d865ef5c931bbd`
- `bcgov/quickstart-openshift-helpers v1.2.1@a11ad3d1b9288fb40757c4314a62eb86ff227931`
- `zaproxy/action-full-scan v0.13.0@3c58388149901b9a03b7718852c5ba889646c27c`
- `actions/checkout v7`
- `grafana/setup-k6-action v1.2.1@db07bd9765aac508ef18982e52ab937fe633a065`
- `grafana/run-k6-action v1.4.0@de51a7390bdf0ac85a3bef493691bd71d4c7c158`
- `ubuntu 24.04`
- `ubuntu 24.04`

npm (3)

backend/package.json (41)

- `@nestjs/common ^11.0.6` → [Updates: `^12.0.0`]
- `@nestjs/config ^4.0.0` → [Updates: `^12.0.0`]
- `@nestjs/core ^11.0.6` → [Updates: `^12.0.0`]
- `@nestjs/platform-express ^11.0.6` → [Updates: `^12.0.0`]
- `@nestjs/swagger ^11.0.3` → [Updates: `^12.0.0`]
- `@nestjs/terminus ^11.0.0` → [Updates: `^12.0.0`]
- `@prisma/adapter-pg ^7.0.0`
- `@prisma/client ^7.0.0`
- `dotenv ^17.0.0`
- `express-prom-bundle ^8.0.0`
- `helmet ^8.0.0`
- `nest-winston ^1.10.1`
- `pg ^8.13.1`
- `prom-client ^15.1.3`
- `reflect-metadata ^0.2.2`
- `swagger-ui-express ^5.0.1`
- `winston ^3.17.0`
- `@eslint/js ^10.0.1`
- `@nestjs/cli ^11.0.2` → [Updates: `^12.0.0`]
- `@nestjs/schematics ^11.0.0` → [Updates: `^12.0.0`]
- `@nestjs/testing ^11.0.6` → [Updates: `^12.0.0`]
- `@swc/cli ^0.8.0`
- `@swc/core ^1.10.12`
- `@types/express ^5.0.0`
- `@types/node ^24.0.0`
- `@types/supertest ^7.0.0`
- `@vitest/coverage-v8 ^5.0.0`
- `eslint ^10.2.0`
- `eslint-config-prettier ^10.1.8`
- `eslint-plugin-prettier ^5.2.3`
- `istanbul-badges-readme ^1.9.0`
- `magicast ^0.5.2`
- `prettier ^3.5.3`
- `prisma ^7.0.0`
- `rimraf ^6.0.1`
- `supertest ^7.0.0`
- `typescript ^6.0.0` → [Updates: `^7.0.0`]
- `typescript-eslint ^8.58.2`
- `unplugin-swc ^1.5.1`
- `vitest ^5.0.0`
- `node >=22.0.0`

common/tests/integration/package.json (3)

- `axios ^1.6.8`
- `js-yaml ^5.0.0`
- `lodash ^4.17.21`

frontend/package.json (35)

- `@bcgov/bc-sans ^2.1.0`
- `@bcgov/design-system-react-components ^0.8.0`
- `@popperjs/core ^2.11.8`
- `@tanstack/react-router ^1.114.12`
- `@tanstack/router-plugin ^1.114.27`
- `@types/node ^24.0.0`
- `@vitejs/plugin-react ^6.0.0`
- `axios ^1.7.7`
- `bootstrap ^5.3.3`
- `bootstrap-icons ^1.11.3`
- `react ^19.0.0`
- `react-bootstrap ^2.10.9`
- `react-dom ^19.0.0`
- `sass-embedded ^1.86.0`
- `vite ^8.0.0`
- `@eslint-react/eslint-plugin ^5.0.0`
- `@playwright/test ^1.62.1` → [Updates: `^1.63.0`]
- `@testing-library/jest-dom ^7.0.0`
- `@testing-library/react ^16.0.0`
- `@testing-library/user-event ^14.4.3`
- `@types/react ^19.0.10`
- `@types/react-dom ^19.0.4`
- `@vitest/coverage-v8 ^5.0.0`
- `@vitest/ui ^5.0.0`
- `eslint ^10.2.0`
- `eslint-config-prettier ^10.1.8`
- `eslint-plugin-prettier ^5.2.3`
- `jsdom ^30.0.0`
- `msw ^2.7.3`
- `prettier ^3.5.3`
- `sass ^1.85.1`
- `typescript ^6.0.0` → [Updates: `^7.0.0`]
- `typescript-eslint ^8.58.2`
- `vitest ^5.0.0`
- `node >=22.0.0`

regex (2)

backend/Dockerfile (1)

- `node 24`

renovate.json (1)

- `bcgov/renovate-config 2026.9.9`

renovate-config (1)

renovate.json (1)

- `bcgov/renovate-config 2026.9.9`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the linked Dependency Dashboard documentation, then inspect renovate.json, backend/package.json, frontend/package.json, the listed Dockerfiles, and the .github/workflows files. Identify which dependency entry is intended for work; completion would require the selected update to be handled and no longer remain unresolved in the dashboard.

Written by the indexing model from the issue text.