Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@types/helmet

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency moment-timezone to v0.6.3
• chore(deps): update dependency express to v4.22.2
• chore(deps): update dependency helmet to v8.3.0
• chore(deps): update dependency mongodb to v6.21.0
• chore(deps): update dependency redis to v5.12.1
• chore(deps): update github actions (actions/cache, actions/checkout, actions/setup-node, docker/build-push-action, docker/login-action, docker/metadata-action)
• chore(deps): update dependency globals to v17
• chore(deps): update dependency typescript to v7
• chore(deps): update eslint packages to v10 (@eslint/js, eslint)
• fix(deps): update dependency redis to v6
• fix(deps): update dependency suncalc to v2
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency morgan to v1.11.0 [security]
• chore(deps): update definitelytyped packages (@types/express, @types/node)
• chore(deps): update dependency cors to v2.8.6
• chore(deps): update dependency globals to v16.5.0
• chore(deps): update eslint packages (@eslint/js, @stylistic/eslint-plugin, eslint, typescript-eslint)
• chore(deps): update yarn to v4.18.0
• chore(deps): update definitelytyped packages (major) (@types/express, @types/node)
• chore(deps): update github actions (major) (actions/cache, actions/checkout, actions/setup-node, node)
• chore(deps): update node.js to v24
• fix(deps): update dependency express to v5
• fix(deps): update dependency mongodb to v7
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update dependency node-fetch to v3

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• node 22-alpine → [Updates: 24-alpine]

github-actions (4)

.github/workflows/build.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• node 22 → [Updates: 24]

.github/workflows/docker.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf → [Updates: v6.2.0]
• docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7.3.0]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4.6.0]
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf → [Updates: v6.2.0]
• docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7.3.0]

.github/workflows/sbom.yml (2)

• actions/checkout v4 → [Updates: v7]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25

.github/workflows/scan.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25

npm (1)

package.json (28)

• cors ^2.8.5 → [Updates: ^2.8.5]
• eris ^0.18.0
• express ^4.21.2 → [Updates: ^4.21.2, ^5.0.0]
• helmet ^8.1.0 → [Updates: ^8.1.0]
• http-status-codes ^2.3.0
• moment ^2.30.1
• moment-timezone ^0.6.0 → [Updates: ^0.6.0]
• mongodb ^6.18.0 → [Updates: ^6.18.0, ^7.0.0]
• morgan ^1.10.1 → [Updates: ^1.10.1]
• node-fetch ^2.7.0 → [Updates: ^3.0.0]
• node-schedule ^2.1.1
• redis ^5.6.1 → [Updates: ^5.6.1, ^6.0.0]
• suncalc ^1.9.0 → [Updates: ^2.0.0]
• @eslint/js ^9.32.0 → [Updates: ^9.32.0, ^10.0.0]
• @stylistic/eslint-plugin ^5.2.2 → [Updates: ^5.2.2]
• @types/cors ^2.8.19
• @types/express ^4.17.23 → [Updates: ^4.17.23, ^5.0.0]
• @types/helmet 4.0.0
• @types/morgan ^1.9.10
• @types/node ^22.16.5 → [Updates: ^22.16.5, ^24.0.0]
• @types/node-fetch ^2.6.12
• @types/node-schedule ^2.1.8
• @types/suncalc ^1.9.2
• eslint ^9.32.0 → [Updates: ^9.32.0, ^10.0.0]
• globals ^16.3.0 → [Updates: ^16.3.0, ^17.0.0]
• typescript ^5.8.3 → [Updates: ^7.0.0]
• typescript-eslint ^8.38.0 → [Updates: ^8.38.0]
• yarn 4.10.3 → [Updates: 4.18.0]

---

• Check this box to trigger a request for Renovate to run again on this repository