Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/cds-snc/forms-api).

## Repository Problems

These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/cds-snc/forms-api).

- ⚠️ WARN: Package lookup failures

## Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

- [ ] chore(deps): update all minor dependencies (`@aws-sdk/client-dynamodb`, `@aws-sdk/client-s3`, `@aws-sdk/client-sqs`, `@aws-sdk/lib-dynamodb`, `@aws-sdk/s3-request-presigner`, `axios`)
- [ ] chore(deps): update actions/create-github-app-token action to v3
- [ ] chore(deps): update actions/dependency-review-action action to v5
- [ ] chore(deps): update actions/setup-python action to v7
- [ ] chore(deps): update aws-actions/configure-aws-credentials action to v6
- [ ] chore(deps): update cds-snc/security-tools action to v4
- [ ] chore(deps): update dependency @biomejs/biome to v2
- [ ] chore(deps): update dependency @types/supertest to v7
- [ ] chore(deps): update dependency pino-pretty to v13
- [ ] chore(deps): update dependency typescript to v7
- [ ] chore(deps): update dependency vitest to v5
- [ ] chore(deps): update dependency vitest-mock-extended to v5
- [ ] chore(deps): update github/codeql-action action to v4
- [ ] chore(deps): update googleapis/release-please-action action to v5
- [ ] chore(deps): update node.js to v24 (`node`, `@types/node`)
- [ ] chore(deps): update pnpm to v12
- [ ] fix(deps): update dependency dotenv to v17
- [ ] fix(deps): update dependency express to v5 (`express`, `@types/express`)
- [ ] fix(deps): update dependency got to v16
- [ ] fix(deps): update dependency jose to v6
- [ ] fix(deps): update dependency pino to v10
- [ ] fix(deps): update dependency rate-limiter-flexible to v11
- [ ] fix(deps): update dependency redis to v6
- [ ] 🔐 **Create all pending approval PRs at once** 🔐

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update mcr.microsoft.com/vscode/devcontainers/base:debian docker digest to 1f85100
- [ ] chore(deps): update ghcr.io/devcontainers/features/node docker tag to v2

---

> [!WARNING]
> Renovate failed to look up the following dependencies: `Could not determine new digest for update (github-digest package cds-snc/security-tools)`.
>
> Files affected: `.github/workflows/staging-post-deployment.yml`

---

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(deps): update all patch dependencies](../pull/424) (`@gcforms/database`, `cryptography`, `jose`, `tsc-alias`)
- [ ] [chore(deps): update pnpm/setup action to v2.1.0](../pull/425)
- [ ] [chore(deps): lock file maintenance](../pull/426)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (5)

- `mcr.microsoft.com/vscode/devcontainers/base debian@sha256:1a00517e89d3075f8c9dc8d9911404de0ff8991a4d71c62068573e9b016a89da` → [Updates: `debian`]
- `ghcr.io/devcontainers/features/node 1` → [Updates: `2`]
- `node 22.23.2` → [Updates: `24.21.0`]
- `ghcr.io/devcontainers/features/python 1`
- `python 3.14`

dockerfile (1)

Dockerfile (2)

- `node 22.23.2-alpine3.23@sha256:46825fbbd4e996a78b7a2cdc08d75e38a5a505bdab95dcda55605359bf124bc6` → [Updates: `24.20.0-alpine3.23`]
- `node 22.23.2-alpine3.23@sha256:46825fbbd4e996a78b7a2cdc08d75e38a5a505bdab95dcda55605359bf124bc6` → [Updates: `24.20.0-alpine3.23`]

github-actions (12)

.github/workflows/codeql.yml (4)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `github/codeql-action v3.37.9@6f5948dfacef28e207b48d0905cf90c03365536d` → [Updates: `v3.38.0`, `v4.37.9`]
- `github/codeql-action v3.37.9@6f5948dfacef28e207b48d0905cf90c03365536d` → [Updates: `v3.38.0`, `v4.37.9`]
- `github/codeql-action v3.37.9@6f5948dfacef28e207b48d0905cf90c03365536d` → [Updates: `v3.38.0`, `v4.37.9`]

.github/workflows/dependency-review.yml (2)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/dependency-review-action v4.9.0@2031cfc080254a8a887f58cffee85186f0e49e48` → [Updates: `v5.0.0`]

.github/workflows/deploy-documentation.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065` → [Updates: `v7.0.0`]
- `python 3.x`

.github/workflows/docker-vulnerability-scan.yml (2)

- `aws-actions/configure-aws-credentials v4.3.1@7474bc4690e29a8392af63c5b98e7449536d5c3a` → [Updates: `v6.2.4`]
- `cds-snc/security-tools v3.2.1@5a93d1deec72d4cb2737cb8418364fedba1c695c` → [Updates: `v4.0.4`]

.github/workflows/labels.yml (1)

- `cds-snc/labels v1`

.github/workflows/prod-post-deployment.yml (1)

- `cds-snc/sentinel-forward-data-action main@e358bf24b818e68a22c9736715a3b544851aaba8` → [Updates: `main`]

.github/workflows/release-generator.yml (2)

- `actions/create-github-app-token v1.12.0@d72941d797fd3113feb6b93fd0dec494b13a2547` → [Updates: `v3.2.0`]
- `googleapis/release-please-action v4.4.1@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071` → [Updates: `v5.0.0`]

.github/workflows/shellcheck.yml (1)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`

.github/workflows/staging-post-deployment.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cds-snc/security-tools  v4.0.3@837a88b6337d4842543184c8eac97a8adac8f302`
- `cds-snc/sentinel-forward-data-action main@e358bf24b818e68a22c9736715a3b544851aaba8` → [Updates: `main`]

.github/workflows/test-code.yml (2)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `pnpm/setup v2` → [Updates: `v2.1.0`, `v2`]

.github/workflows/test-docker-build.yml (1)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`

.github/workflows/workflow-failure.yml

npm (3)

examples/nodejs/package.json (4)

- `axios ^1.12.0` → [Updates: `^1.12.0`]
- `jose ^6.0.10` → [Updates: `^6.0.10`]
- `@types/node ^22.14.1` → [Updates: `^22.14.1`, `^24.0.0`]
- `typescript ^5.8.3` → [Updates: `^7.0.0`]

package.json (32)

- `@aws-sdk/client-dynamodb ^3.823.0` → [Updates: `^3.823.0`]
- `@aws-sdk/client-s3 ^3.823.0` → [Updates: `^3.823.0`]
- `@aws-sdk/client-sqs ^3.823.0` → [Updates: `^3.823.0`]
- `@aws-sdk/lib-dynamodb ^3.823.0` → [Updates: `^3.823.0`]
- `@aws-sdk/s3-request-presigner ^3.859.0` → [Updates: `^3.859.0`]
- `@gcforms/database 1.1.7` → [Updates: `1.1.10`]
- `cors ^2.8.5`
- `dotenv ^16.4.5` → [Updates: `^17.0.0`]
- `express ^4.21.0` → [Updates: `^4.21.0`, `^5.0.0`]
- `express-validator ^7.3.2`
- `got ^14.4.7` → [Updates: `^16.0.0`]
- `jose ^5.9.3` → [Updates: `^6.0.0`]
- `pino ^9.4.0` → [Updates: `^10.0.0`]
- `rate-limiter-flexible ^5.0.4` → [Updates: `^11.0.0`]
- `redis ^4.7.0` → [Updates: `^6.0.0`]
- `@aws-sdk/types ^3.662.0`
- `@biomejs/biome ^1.9.0` → [Updates: `^2.0.0`]
- `@types/cors ^2.8.18`
- `@types/express ^4.17.21` → [Updates: `^5.0.0`]
- `@types/node ^22.7.4` → [Updates: `^22.7.4`, `^24.0.0`]
- `@types/supertest ^6.0.2` → [Updates: `^7.0.0`]
- `aws-sdk-client-mock ^4.0.2`
- `pino-pretty ^11.2.2` → [Updates: `^13.0.0`]
- `supertest ^7.0.0`
- `tsc-alias ^1.8.15` → [Updates: `^1.8.15`]
- `tsx ^4.19.1`
- `typescript ^5.6.2` → [Updates: `^7.0.0`]
- `vite ^8.0.16` → [Updates: `^8.0.16`]
- `vitest ^4.0.0` → [Updates: `^5.0.0`]
- `vitest-mock-express ^2.2.0`
- `vitest-mock-extended ^4.0.0` → [Updates: `^5.0.0`]
- `pnpm 11.26.0+sha512.fc0e2bf890b9f983611f1ab68c0637bce914390653699f83c1a78b005ed25f2c81e77920c8fd8eee2ecf0b58b28cdcb00a84d97f69bcf7c56b2f344710238664` → [Updates: `11.27.0`, `12.3.4`]

pnpm-workspace.yaml

pip_requirements (1)

examples/python/requirements.txt (3)

- `PyJWT ==2.13.0` → [Updates: `==2.14.0`]
- `httpx ==0.28.1`
- `cryptography ==50.0.0` → [Updates: `==50.0.1`]

renovate-config (1)

renovate.json

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository