specmatic / specmatic/specmatic-node
Dependency Dashboard
Open
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 6
- Forks
- 4
- PR merge metrics
- No merged PRs in 30d
Description
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
Deprecations / Replacements
[!WARNING]
The following dependencies are either deprecated or have replacements available.
| Datasource | Package | Replacement PR? |
|---|---|---|
| npm | @babel/plugin-proposal-class-properties |  |
Other Branches
The following updates are pending. To force the creation of a PR, click on a checkbox below.
- chore(deps): update actions/checkout action to v7
- chore(deps): update actions/setup-node action to v7
- chore(deps): update softprops/action-gh-release action to v3
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
- [SECURITY] Update dependency @babel/core to v7.29.6
- [SECURITY] Update dependency axios to v1.18.0
- [SECURITY] Update dependency shell-quote to v1.9.0
- chore(deps): update dependency express to v4.22.3
- chore(deps): update dependency jest-mock-extended to v4.0.1
- chore(deps): update dependency rimraf to v6.1.3
- chore(deps): update babel monorepo to v7.29.7 (
@babel/cli,@babel/preset-env,@babel/preset-typescript) - chore(deps): update dependency @types/node to v24.13.6
- chore(deps): update dependency fast-xml-parser to v5.11.1
- chore(deps): update jest monorepo to v30.5.2
- chore(deps): update babel monorepo to v8 (
@babel/cli,@babel/preset-env,@babel/preset-typescript) - chore(deps): update dependency @types/supertest to v7
- chore(deps): update dependency express to v5
- chore(deps): update dependency jest-when to v4
- chore(deps): update dependency typescript to v7
- chore(deps): lock file maintenance
- Click on this checkbox to rebase all open PRs at once
Vulnerabilities
[!IMPORTANT]
12/12CVEs have Renovate fixes.
npm
package.json
shell-quote
- GHSA-395f-4hp3-45gv (fixed in >= 1.9.0)
@babel/core
- GHSA-4x5r-pxfx-6jf8 (fixed in >= 7.29.6)
axios
- GHSA-42h9-826w-cgv3 (fixed in >= 1.18.0)
- GHSA-7q8q-rj6j-mhjq (fixed in >= 1.18.0)
- GHSA-f4gw-2p7v-4548 (fixed in >= 1.18.0)
- GHSA-gcfj-64vw-6mp9 (fixed in >= 1.18.0)
- GHSA-hcpx-6fm6-wx23 (fixed in >= 1.18.0)
- GHSA-jqh4-m9w3-8hp9 (fixed in >= 1.18.0)
- GHSA-mmx7-hfxf-jppx (fixed in >= 1.18.0)
- GHSA-mwf2-3pr3-8698 (fixed in >= 1.18.0)
- GHSA-pmv8-rq9r-6j72 (fixed in >= 1.18.0)
- GHSA-xj6q-8x83-jv6g (fixed in >= 1.18.0)
Detected Dependencies
github-actions (3)
.github/workflows/publish.yml (3)
actions/checkout v6→ [Updates:v7]actions/setup-node v6→ [Updates:v7]node 24.github/workflows/test.yml (2)
actions/checkout v6→ [Updates:v7]actions/setup-node v6→ [Updates:v7].github/workflows/update-specmatic-version-and-publish.yml (2)
actions/checkout v6→ [Updates:v7]softprops/action-gh-release v2→ [Updates:v3]
npm (1)
package.json (25)
fast-xml-parser ^5.0.0→ [Updates:^5.0.0]shell-quote ^1.8.3→ [Updates:^1.8.3]terminate ^2.8.0tree-kill ^1.2.2winston ^3.14.2@babel/cli ^7.25.6→ [Updates:^7.25.6,^8.0.0]@babel/core ^7.25.2→ [Updates:^7.25.2]@babel/plugin-proposal-class-properties ^7.18.6@babel/preset-env ^7.25.4→ [Updates:^7.25.4,^8.0.0]@babel/preset-typescript ^7.24.7→ [Updates:^7.24.7,^8.0.0]@types/express ^5.0.0@types/jest ^30.0.0@types/jest-when ^3.5.5@types/node ^24.0.0→ [Updates:^24.0.0]@types/shell-quote ^1.7.5@types/supertest ^6.0.2→ [Updates:^7.0.0]axios ^1.12.2→ [Updates:^1.12.2]express ^4.21.0→ [Updates:^4.21.0,^5.0.0]jest ^30.0.0→ [Updates:^30.0.0]jest-extended ^7.0.0jest-mock-extended ^4.0.0→ [Updates:^4.0.0]jest-when ^3.6.0→ [Updates:^4.0.0]rimraf ^6.0.1→ [Updates:^6.0.1]supertest ^7.0.0typescript ^5.6.2→ [Updates:^7.0.0]
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the Renovate Dependency Dashboard documentation, then review package.json and the three listed workflow files under .github/workflows. The dashboard contains many pending dependency updates, security fixes, and linked pull requests; completion would require deciding which listed updates should be handled and verifying their resulting pull requests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- babel, express, github-actions, node.js, typescript
- Domain
- ci-cd, devops, tooling
- Issue type
- Refactor
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100