Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: Error updating branch: update failure

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	@babel/plugin-proposal-class-properties
npm	axe-cli
npm	govuk_frontend_toolkit
npm	gulp-add-src
npm	gulp-fa-minify

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/github-script action to v8
• chore(deps): update actions/setup-node action to v6
• chore(deps): update actions/setup-python action to v6
• chore(deps): update actions/upload-artifact action to v5
• chore(deps): update aws-actions/amazon-ecr-login action to v2
• chore(deps): update aws-actions/configure-aws-credentials action to v5
• chore(deps): update cypress-io/github-action action to v6
• chore(deps): update dependency @fullhuman/postcss-purgecss to v7
• chore(deps): update dependency autoprefixer to v10
• chore(deps): update dependency babel-loader to v10
• chore(deps): update dependency chromedriver to v143
• chore(deps): update dependency coveralls to v4
• chore(deps): update dependency css-loader to v7
• chore(deps): update dependency cssnano to v7
• chore(deps): update dependency cypress to v15
• chore(deps): update dependency cypress-html-validate to v8
• chore(deps): update dependency gulp to v5
• chore(deps): update dependency gulp-postcss to v10
• chore(deps): update dependency mini-css-extract-plugin to v2
• chore(deps): update dependency postcss-import to v16
• chore(deps): update dependency postcss-loader to v8
• chore(deps): update dependency pre-commit to v4
• chore(deps): update dependency pytest to v9
• chore(deps): update dependency pytest-cov to v7
• chore(deps): update dependency pytest-env to v1
• chore(deps): update dependency pytest-xdist to v3
• chore(deps): update dependency style-loader to v4
• chore(deps): update dependency tailwindcss to v4
• chore(deps): update dependency types-pytz to v2025
• chore(deps): update dependency webpack-cli to v6
• chore(deps): update getsentry/action-github-app-token action to v3
• chore(deps): update github/codeql-action action to v4
• chore(deps): update jest monorepo to v30 (major) (jest, jest-environment-jsdom)
• chore(deps): update node.js to v24
• chore(deps): update postgres docker tag to v17
• chore(deps): update redis docker tag to v8
• fix(deps): update dependency accessible-autocomplete to v3
• fix(deps): update dependency certifi to v2025
• fix(deps): update dependency diff-dom to v5
• fix(deps): update dependency email-validator to v2
• fix(deps): update dependency environs to v14
• fix(deps): update dependency flask-babel to v4
• fix(deps): update dependency flask-caching to v2
• fix(deps): update dependency gevent to v25
• fix(deps): update dependency gunicorn to v23
• fix(deps): update dependency html-validate to v10
• fix(deps): update dependency notifications-python-client to v10
• fix(deps): update dependency pwnedpasswords to v3
• fix(deps): update dependency pytz to v2025
• fix(deps): update dependency redis to v7
• fix(deps): update dependency ua-parser to v1
• fix(deps): update dependency uuid to v13
• fix(deps): update dependency xlrd to v2
• fix(deps): update font awesome to v7 (major) (@fortawesome/fontawesome-svg-core, @fortawesome/free-solid-svg-icons)
• fix(deps): update react monorepo to v19 (major) (react, react-dom)
• 🔐 Create all pending approval PRs at once 🔐

Errored

The following updates encountered an error and will be retried. To force a retry now, click on a checkbox below.

• chore(deps): update all non-major github action dependencies (actions/cache, actions/checkout, actions/setup-node, actions/setup-python, actions/upload-artifact, aws-actions/configure-aws-credentials, cds-snc/notification-utils, github/codeql-action, postgres, python, redis)

Edited/Blocked

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update python:3.12-alpine3.20 docker digest to 25849f9

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency nodemailer to v7 [security]
• chore(deps): update dependency debugpy to v1.8.17
• fix(deps): update all minor dependencies (@babel/core, @babel/preset-env, @babel/preset-react, @cdssnc/sanitize-pii, @fortawesome/fontawesome-svg-core, @fortawesome/free-solid-svg-icons, @testing-library/jest-dom, @tiptap/extension-blockquote, @tiptap/extension-bold, @tiptap/extension-bullet-list, @tiptap/extension-document, @tiptap/extension-hard-break, @tiptap/extension-heading, @tiptap/extension-history, @tiptap/extension-horizontal-rule, @tiptap/extension-italic, @tiptap/extension-link, @tiptap/extension-list-item, @tiptap/extension-ordered-list, @tiptap/extension-paragraph, @tiptap/extension-text, @tiptap/extension-text-align, @tiptap/pm, @tiptap/react, @tiptap/starter-kit, Babel, WTForms, apig-wsgi, aws-xray-sdk, axe-core, babel-loader, beautifulsoup4, blinker, boto3, certifi, cypress-axe, cypress-html-validate, cypress-real-events, cypress-recurse, greenlet, gulp-rename, html-validate, jquery-migrate, mailparser, mypy, nanoid, node-polyglot, poethepoet, pytest, pytest-mock, python, python-dotenv, ruff, translate-toolkit, unidecode, validators, webpack)
• fix(deps): update dependency flask to v3
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

devcontainer

.devcontainer/devcontainer.json

• ghcr.io/devcontainers/features/node 1
• node 16.20.2

docker-compose

.devcontainer/docker-compose.yml

dockerfile

.devcontainer/Dockerfile

• mcr.microsoft.com/vscode/devcontainers/python 3.12

ci/Dockerfile

ci/Dockerfile.lambda

• python 3.12-alpine3.20@sha256:5049c050bdc68575a10bcb1885baa0689b6c15152d8a56a7e399fb49f783bf98
• python 3.12-alpine3.20@sha256:5049c050bdc68575a10bcb1885baa0689b6c15152d8a56a7e399fb49f783bf98

ci/Dockerfile.test

• python 3.12-alpine3.20@sha256:5049c050bdc68575a10bcb1885baa0689b6c15152d8a56a7e399fb49f783bf98

github-actions

.github/workflows/call-manifests-update-docker-tag.yaml

• actions/checkout v2

.github/workflows/codeql.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• github/codeql-action v2.24.10@ffd3158cb9024ebd018dbf20756f28befbd168c7
• github/codeql-action v2.24.10@ffd3158cb9024ebd018dbf20756f28befbd168c7
• github/codeql-action v2.24.10@ffd3158cb9024ebd018dbf20756f28befbd168c7

.github/workflows/cypress-e2e.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-python v4.8.0@b64ffcaf5b410884ad320a9cfac8866006a109aa
• actions/setup-node v4.2.0@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a
• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57
• actions/checkout v3
• actions/setup-python v4.8.0@b64ffcaf5b410884ad320a9cfac8866006a109aa
• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57
• aws-actions/configure-aws-credentials v4.1.0@ececac1a45f3b08a01d2dd070d28d111c5fe6722
• cypress-io/github-action v5.8.4@248bde77443c376edc45906ede03a1aba9da0462
• actions/upload-artifact v4
• postgres 11.17-bullseye
• redis 6.2@sha256:9e75c88539241ad7f61bc9c39ea4913b354064b8a75ca5fc40e1cef41b645bc0
• python 3.12
• node 16.x
• python 3.12

.github/workflows/cypress-staging.yaml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-node v3.8.2@1a4442cacd436585916779262731d5b162bc6ec7
• cypress-io/github-action v5.8.4@248bde77443c376edc45906ede03a1aba9da0462
• actions/upload-artifact v4
• node 16.x

.github/workflows/docker-vulnerability-scan.yml

• aws-actions/configure-aws-credentials v2.2.0@5fd3084fc36e372ff1fff382a39b10d03659f355
• aws-actions/amazon-ecr-login v1.7.1@5a88a04c91d5c6f97aae0d9be790e64d9b1d47b7
• cds-snc/security-tools v3.2.0@34794baf2af592913bb5b51d8df4f8d0acc49b6f

.github/workflows/docker.yaml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• aws-actions/configure-aws-credentials master
• aws-actions/amazon-ecr-login v1.7.1@5a88a04c91d5c6f97aae0d9be790e64d9b1d47b7
• aws-actions/configure-aws-credentials v2.2.0@5fd3084fc36e372ff1fff382a39b10d03659f355
• cds-snc/terraform-tools-setup v1
• kota65535/github-openvpn-connect-action cd2ed8a90cc7b060dc4e001143e811b5f7ea0af5
• getsentry/action-github-app-token v2.0.0@97c9e23528286821f97fba885c1b1123284b29cc
• cds-snc/notification-pr-bot main
• cds-snc/security-tools v3.2.0@34794baf2af592913bb5b51d8df4f8d0acc49b6f

.github/workflows/secret.yaml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• cdssnc/seekret-github-action sha256:0aee6df949373ef6df26d35f6207b56f897ddd1caa030646d7421b0afb717665

.github/workflows/test_endpoints.yaml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-python v4.8.0@b64ffcaf5b410884ad320a9cfac8866006a109aa
• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57
• cds-snc/notification-utils 53.2.10
• python 3.12

.github/workflows/test_prod_config.yaml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-python v4.8.0@b64ffcaf5b410884ad320a9cfac8866006a109aa
• actions/setup-node v4.2.0@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a
• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57
• python 3.12
• node 16.x

.github/workflows/test-admin-delete-unused.yaml

• aws-actions/configure-aws-credentials v4.1.0@ececac1a45f3b08a01d2dd070d28d111c5fe6722

.github/workflows/test-admin-deploy.yaml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• aws-actions/configure-aws-credentials v4.1.0@ececac1a45f3b08a01d2dd070d28d111c5fe6722
• aws-actions/amazon-ecr-login v1.7.1@5a88a04c91d5c6f97aae0d9be790e64d9b1d47b7
• aws-actions/configure-aws-credentials v4.1.0@ececac1a45f3b08a01d2dd070d28d111c5fe6722
• actions/github-script v6.4.1@d7906e4ad0b1822421a7e6a35d5ca353c962f410

.github/workflows/test-admin-remove.yaml

• aws-actions/configure-aws-credentials v4.1.0@ececac1a45f3b08a01d2dd070d28d111c5fe6722

.github/workflows/test.yaml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-python v4.8.0@b64ffcaf5b410884ad320a9cfac8866006a109aa
• actions/setup-node v4.2.0@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a
• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57
• python 3.12
• node 16.x

npm

package.json

• @babel/plugin-proposal-class-properties ^7.14.5
• @cdssnc/sanitize-pii ^2.0.0
• @fortawesome/fontawesome-svg-core ^6.6.0
• @fortawesome/free-solid-svg-icons ^6.6.0
• @tiptap/extension-blockquote ^3.6.5
• @tiptap/extension-bold ^3.6.5
• @tiptap/extension-bullet-list ^3.6.5
• @tiptap/extension-document ^3.6.5
• @tiptap/extension-hard-break ^3.6.5
• @tiptap/extension-heading ^3.6.5
• @tiptap/extension-history ^3.6.5
• @tiptap/extension-horizontal-rule ^3.6.5
• @tiptap/extension-italic ^3.6.5
• @tiptap/extension-link ^3.6.5
• @tiptap/extension-list-item ^3.6.5
• @tiptap/extension-ordered-list ^3.6.5
• @tiptap/extension-paragraph ^3.6.5
• @tiptap/extension-text ^3.6.5
• @tiptap/extension-text-align ^3.6.5
• @tiptap/pm ^3.6.5
• @tiptap/react ^3.6.5
• @tiptap/starter-kit ^3.6.5
• accessible-autocomplete ^2.0.4
• braces ^3.0.3
• dayjs ^1.11.13
• diff-dom 4.2.8
• form-data >=4.0.4
• govuk_frontend_toolkit 9.0.1
• hogan 1.0.2
• jquery ^3.6.0
• jquery-migrate ^3.3.2
• moment ^2.29.4
• node-polyglot ^2.4.2
• prosemirror-markdown ^1.13.2
• query-command-supported 1.0.0
• react ^18.3.1
• react-dom ^18.3.1
• textarea-caret 3.1.0
• tiptap-markdown ^0.9.0
• @babel/core ^7.25.7
• @babel/preset-env ^7.25.7
• @babel/preset-react ^7.14.5
• @fullhuman/postcss-purgecss ^3.1.3
• @testing-library/jest-dom ^6.5.0
• autoprefixer ^9.8.8
• axe-cli 3.2.1
• babel-loader ^8.2.2
• babel-plugin-syntax-dynamic-import ^6.18.0
• chromedriver ^135.0.0
• css-loader ^3.6.0
• cssnano ^5.0.0
• file-loader ^6.2.0
• gulp 4.0.2
• gulp-add-src 1.0.0
• gulp-babel 8.0.0
• gulp-base64-inline 1.0.6
• gulp-clean-css ^4.3.0
• gulp-concat 2.6.1
• gulp-fa-minify ^6.0.1
• gulp-include 2.4.1
• gulp-jshint 2.1.0
• gulp-postcss ^9.0.0
• gulp-prettyerror 2.0.0
• gulp-rename ^2.0.0
• gulp-uglify 3.0.2
• jest 29.7.0
• jest-environment-jsdom ^29.5.0
• jshint 2.13.6
• mini-css-extract-plugin ^0.12.0
• postcss-import ^12.0.1
• postcss-loader ^4.3.0
• style-loader ^1.3.0
• tailwindcss 3.4.18
• webpack ^5.57.1
• webpack-cli ^4.8.0
• node 16

tests_cypress/package.json

• cypress-recurse ^1.23.0
• html-validate ^8.7.1
• imap-simple ^5.1.0
• jsrsasign ^11.0.0
• mailparser ^3.7.1
• nanoid ^5.0.4
• nodemailer ^6.9.15
• uuid ^11.1.0
• form-data >=4.0.4
• axe-core ^4.7.2
• cypress ^14.5.3
• cypress-axe ^1.6.0
• cypress-html-validate ^7.1.0
• cypress-real-events ^1.14.0

poetry

pyproject.toml

• python ~3.12.7
• apig-wsgi 2.18.0
• aws-xray-sdk ^2.14.0
• awscli-cwlogs ^1.4.6
• Babel 2.16.0
• blinker 1.8.2
• boto3 1.34.153
• certifi ^2024.0.0
• debugpy ^1.8.12
• email-validator 1.3.1
• environs 9.5.0
• Flask 2.3.3
• Flask-Babel 2.0.0
• Flask-Caching 1.11.1
• Flask-Login 0.6.3
• Flask-WTF 1.2.2
• gevent 23.9.1
• greenlet 3.1.1
• gunicorn 22.0.0
• itsdangerous 2.2.0
• notifications-python-client 6.4.1
• notifications-utils 53.2.11
• pwnedpasswords 2.0.0
• pyexcel 0.7.4
• pyexcel-io 0.6.7
• pyexcel-ods3 0.6.1
• pyexcel-xls 0.7.1
• pyexcel-xlsx 0.6.1
• python-dotenv 1.0.1
• pytz 2021.3
• PyYAML 6.0.3
• redis 3.5.3
• timeago 1.0.16
• translate-toolkit 3.13.2
• ua-parser 0.18.0
• unidecode ^1.3.8
• user-agents 2.2.0
• validators ^0.28.3
• WTForms 3.1.2
• xlrd 1.2.0
• beautifulsoup4 4.12.3
• coveralls 1.11.1
• freezegun 1.5.5
• jinja2-cli ^0.8.2
• monkeytype 23.3.0
• mypy 1.11.2
• poethepoet ^0.24.4
• pre-commit ^3.7.1
• pytest 8.3.5
• pytest-cov 2.12.1
• pytest-env 0.8.2
• pytest-mock 3.14.0
• pytest-xdist 2.5.0
• requests-mock 1.12.1
• ruff ^0.8.2
• types-python-dateutil 2.9.0.20251115
• types-pytz 2021.3.8
• types-requests 2.32.4.20250913

renovate-config-presets

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository