Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency @11ty/eleventy to v3.1.6
• Update dependency ts-jest to v29.4.12
• Update dependency uuid to v14.0.1
• Update dependency @stencil/sass to v3.3.2
• Update dependency govuk-frontend to v5.14.0
• Update dependency puppeteer to v24.43.1
• Update dependency rollup to v4.62.3
• Update dependency sass to v1.102.0
• Update dependency tsx to v4.23.1
• Update dependency zod to v4.4.3
• Update jest monorepo to v30.4.1 (@jest/globals, jest)
• Update actions/checkout action to v7
• Update actions/dependency-review-action action to v5
• Update actions/setup-node action to v7
• Update benjlevesque/short-sha action to v4
• Update dependency @dotenvx/dotenvx to v2
• Update dependency @microsoft/signalr to v10
• Update dependency @rollup/plugin-commonjs to v29
• Update dependency @testing-library/jest-dom to v7
• Update dependency jsdom to v30
• Update dependency magic-string to v1
• Update dependency puppeteer to v25
• Update dependency typescript to v7
• Update jest monorepo to v30 (@jest/globals, @types/jest, jest, jest-cli, jest-environment-jsdom)
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update dependency @microsoft/signalr to v8.0.29

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency vite to v7.3.5 [SECURITY]
• Update dependency esbuild to ^0.28.0 [SECURITY]
• Update dependency ws@>=7.0.0 <7.5.11 to v8 [SECURITY]
• Update dependency @stencil/core to v4.43.5
• Update react monorepo to v19.2.18 (@types/react, @types/react-dom, react, react-dom)
• Update dependency @dotenvx/dotenvx to v1.75.1
• Update dependency @microsoft/applicationinsights-web to v3.4.3
• Update dependency @types/node to v24.13.3
• Update dependency msw to v2.15.0
• Update dependency react-router-dom to v7.18.2
• Update GitHub Artifact Actions (major) (actions/download-artifact, actions/upload-artifact)
• Update pnpm/action-setup action to v6
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update azure/cli action to v3
• Update dependency @azure/msal-browser to v5
• Update dependency @vitejs/plugin-react to v6
• Update dependency govuk-frontend to v6

Detected Dependencies

docker-compose (3)

infra/proxy/docker/docker-compose.cms-auth-v2.yml

infra/proxy/docker/docker-compose.vnext.yml

infra/proxy/docker/docker-compose.yml

dockerfile (2)

infra/proxy/docker/Dockerfile.base

infra/proxy/docker/Dockerfile.mock (1)

• node 24-alpine

github-actions (10)

.github/workflows/claude-review.yml (2)

• actions/checkout v6 → [Updates: v7]
• anthropics/claude-code-action v1

.github/workflows/deploy-all.yml

.github/workflows/pr.yml (1)

• CPS-Innovation/.github main

.github/workflows/revert-the-revert.yml (1)

• actions/checkout v6 → [Updates: v7]

.github/workflows/rollback.yml (2)

• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]

.github/workflows/sub-workflow-build-and-test.yml (6)

• actions/checkout v6 → [Updates: v7]
• benjlevesque/short-sha v3.0 → [Updates: v4.0]
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v6 → [Updates: v7]
• actions/upload-artifact v6 → [Updates: v7]
• actions/upload-artifact v6 → [Updates: v7]

.github/workflows/sub-workflow-deploy-harnesses.yml (4)

• actions/checkout v6 → [Updates: v7]
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v6 → [Updates: v7]
• azure/cli v2 → [Updates: v3]

.github/workflows/sub-workflow-deploy-script.yml (4)

• actions/checkout v6 → [Updates: v7]
• benjlevesque/short-sha v3.0 → [Updates: v4.0]
• actions/download-artifact v7 → [Updates: v8]
• azure/cli v2 → [Updates: v3]

.github/workflows/sub-workflow-proxy-tests.yml (3)

• actions/checkout v6 → [Updates: v7]
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v6 → [Updates: v7]

.github/workflows/sub-workflow-repo-security-scan.yml (4)

• actions/checkout v6 → [Updates: v7]
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v6 → [Updates: v7]
• actions/dependency-review-action v4 → [Updates: v5.0.0]

npm (17)

apps/harness-html/package.json (3)

• stream-replace-string ^2.0.0
• @11ty/eleventy ^3.1.0 → [Updates: ^3.1.0]
• govuk-frontend ^5.10.1 → [Updates: ^5.10.1, ^6.0.0]

case-locking-support/bundled/package.json (2)

• @microsoft/signalr ^8.0.7 → [Updates: ^8.0.7, ^10.0.0]
• esbuild ^0.27.0 → [Updates: ^0.28.0]

e2e/package.json (14)

• @types/jest ^29.5.12 → [Updates: ^30.0.0]
• @types/node ^24.2.1 → [Updates: ^24.2.1]
• @types/serve-handler ^6.1.4
• deepmerge-ts ^7.1.5
• expect-puppeteer ^11.0.0
• jest ^29.7.0 → [Updates: ^30.0.0]
• jest-environment-puppeteer ^11.0.0
• jest-puppeteer ^11.0.0
• puppeteer ^24.10.0 → [Updates: ^24.10.0, ^25.0.0]
• serve-handler ^6.1.6
• ts-jest ^29.1.2 → [Updates: ^29.1.2]
• ts-node ^10.9.2
• tsx ^4.19.4 → [Updates: ^4.19.4]
• typescript ^5.3.3 → [Updates: ^7.0.0]

infra/proxy/package.json (5)

• @types/node ^24.0.0 → [Updates: ^24.0.0]
• esbuild ^0.27.0 → [Updates: ^0.28.0]
• njs-types ^0.9.4
• ts-node ^10.9.2
• typescript ^5.7.2 → [Updates: ^7.0.0]

package.json (3)

• typescript ^5.9.3 → [Updates: ^7.0.0]
• node >=22.0.0
• pnpm >=10.0.0

packages/cps-global-accessibility/package.json (9)

• govuk-frontend ^5.14.0 → [Updates: ^6.0.0]
• react ^19.0.0 → [Updates: ^19.0.0]
• react-dom ^19.0.0 → [Updates: ^19.0.0]
• @types/react ^19.0.0 → [Updates: ^19.0.0]
• @types/react-dom ^19.0.0 → [Updates: ^19.0.0]
• @vitejs/plugin-react ^5.0.0 → [Updates: ^6.0.0]
• sass ^1.93.0 → [Updates: ^1.93.0]
• typescript ^5.6.0 → [Updates: ^7.0.0]
• vite ^7.0.0 → [Updates: ^7.0.0]

packages/cps-global-auth/package.json (12)

• @azure/msal-browser ^4.0.0 → [Updates: ^5.0.0]
• @jest/globals ^29.7.0 → [Updates: ^30.0.0]
• @rollup/plugin-commonjs ^28.0.0 → [Updates: ^29.0.0]
• @rollup/plugin-node-resolve ^16.0.1
• @rollup/plugin-typescript ^12.1.4
• @types/jest ^29.5.0 → [Updates: ^30.0.0]
• @types/node ^24.2.1 → [Updates: ^24.2.1]
• jest ^29.7.0 → [Updates: ^30.0.0]
• jest-environment-jsdom ^29.7.0 → [Updates: ^30.0.0]
• rollup ^4.59.0 → [Updates: ^4.59.0]
• ts-jest ^29.4.0 → [Updates: ^29.4.0]
• typescript ^5.0.0 → [Updates: ^7.0.0]

packages/cps-global-components/package.json (26)

• @dotenvx/dotenvx ^1.41.0 → [Updates: ^1.41.0, ^2.0.0]
• @microsoft/applicationinsights-web ^3.3.6 → [Updates: ^3.3.6]
• @microsoft/signalr ^8.0.7 → [Updates: ^8.0.7, ^10.0.0]
• @types/arrive ^2.4.4
• @types/proper-url-join ^2.1.5
• arrive ^2.5.2
• deepmerge-ts ^7.1.5
• fetch-jsonp ^1.3.0
• govuk-frontend ^5.7.1 → [Updates: ^6.0.0]
• proper-url-join ^2.1.2
• uuid ^14.0.0 → [Updates: ^14.0.0]
• zod ^4.1.11 → [Updates: ^4.1.11]
• @stencil/core ^4.36.2 → [Updates: ^4.36.2]
• @stencil/sass ^3.0.12 → [Updates: ^3.0.12]
• @stencil/store ^2.2.0
• @types/jest ^29.5.6 → [Updates: ^30.0.0]
• @types/node ^24.2.1 → [Updates: ^24.2.1]
• esbuild ^0.27.0 → [Updates: ^0.28.0]
• jest ^29.7.0 → [Updates: ^30.0.0]
• jest-cli ^29.7.0 → [Updates: ^30.0.0]
• magic-string ^0.30.21 → [Updates: ^1.0.0]
• msw ^2.12.3 → [Updates: ^2.12.3]
• navigation-api-types ^0.6.1
• puppeteer ^24.0.0 → [Updates: ^24.0.0, ^25.0.0]
• rollup ^4.59.0 → [Updates: ^4.59.0]
• rollup-plugin-sourcemaps ^0.6.3

packages/cps-global-configuration/package.json (7)

• zod ^4.0.0 → [Updates: ^4.0.0]
• @jest/globals ^30.2.0 → [Updates: ^30.2.0]
• @types/jest ^30.0.0
• @types/node ^24.2.1 → [Updates: ^24.2.1]
• jest ^30.2.0 → [Updates: ^30.2.0]
• ts-jest ^29.4.5 → [Updates: ^29.4.5]
• typescript ^5.9.2 → [Updates: ^7.0.0]

packages/cps-global-handover/package.json (12)

• @jest/globals ^29.7.0 → [Updates: ^30.0.0]
• @rollup/plugin-commonjs ^28.0.0 → [Updates: ^29.0.0]
• @rollup/plugin-node-resolve ^16.0.1
• @rollup/plugin-typescript ^12.1.4
• @testing-library/jest-dom ^6.6.3 → [Updates: ^7.0.0]
• @types/jest ^29.5.0 → [Updates: ^30.0.0]
• @types/node ^24.2.1 → [Updates: ^24.2.1]
• jest ^29.7.0 → [Updates: ^30.0.0]
• jest-environment-jsdom ^29.7.0 → [Updates: ^30.0.0]
• rollup ^4.59.0 → [Updates: ^4.59.0]
• ts-jest ^29.4.0 → [Updates: ^29.4.0]
• typescript ^5.0.0 → [Updates: ^7.0.0]

packages/cps-global-os-handover/package.json (13)

• @jest/globals ^29.7.0 → [Updates: ^30.0.0]
• @rollup/plugin-commonjs ^28.0.0 → [Updates: ^29.0.0]
• @rollup/plugin-node-resolve ^16.0.1
• @rollup/plugin-typescript ^12.1.4
• @testing-library/jest-dom ^6.6.3 → [Updates: ^7.0.0]
• @types/jest ^29.5.0 → [Updates: ^30.0.0]
• @types/node ^24.2.1 → [Updates: ^24.2.1]
• jest ^29.7.0 → [Updates: ^30.0.0]
• jsdom ^27.0.0 → [Updates: ^30.0.0]
• rollup ^4.59.0 → [Updates: ^4.59.0]
• ts-jest ^29.4.0 → [Updates: ^29.4.0]
• typescript ^5.0.0 → [Updates: ^7.0.0]
• urlpattern-polyfill ^10.1.0

packages/cps-global-preview/package.json (7)

• react ^19.0.0 → [Updates: ^19.0.0]
• react-dom ^19.0.0 → [Updates: ^19.0.0]
• @types/react ^19.0.0 → [Updates: ^19.0.0]
• @types/react-dom ^19.0.0 → [Updates: ^19.0.0]
• @vitejs/plugin-react ^5.0.0 → [Updates: ^6.0.0]
• typescript ^5.6.0 → [Updates: ^7.0.0]
• vite ^7.0.0 → [Updates: ^7.0.0]

packages/cps-global-react-helpers/package.json (13)

• @testing-library/react ^16.0.0
• @testing-library/react-hooks ^8.0.1
• @types/jest ^29.5.0 → [Updates: ^30.0.0]
• @types/react ^19.0.0 → [Updates: ^19.0.0]
• jest ^29.7.0 → [Updates: ^30.0.0]
• jest-environment-jsdom ^29.7.0 → [Updates: ^30.0.0]
• react ^19.0.0 → [Updates: ^19.0.0]
• react-dom ^19.0.0 → [Updates: ^19.0.0]
• react-router-dom ^7.12.0 → [Updates: ^7.12.0]
• ts-jest ^29.1.0 → [Updates: ^29.1.0]
• typescript ^5.0.0 → [Updates: ^7.0.0]
• react >=19.0.0
• react-router-dom >=7.0.0

packages/cps-global-script-redirect/package.json (5)

• @rollup/plugin-replace ^6.0.0
• @rollup/plugin-typescript ^12.0.0
• rollup ^4.59.0 → [Updates: ^4.59.0]
• tslib ^2.6.0
• typescript ^5.0.0 → [Updates: ^7.0.0]

packages/cps-global-types/package.json

packages/cps-global-user-state/package.json (1)

• typescript ^5.0.0 → [Updates: ^7.0.0]

pnpm-workspace.yaml (14)

• tar-fs@>=3.0.0 <3.0.9 >=3.0.9
• form-data@>=4.0.0 <4.0.4 >=4.0.4
• brace-expansion@>=1.0.0 <1.1.12 >=1.1.12
• brace-expansion@>=2.0.0 <2.0.2 >=2.0.2
• brace-expansion@>=3.0.0 <3.0.1 >=3.0.1
• brace-expansion@>=4.0.0 <4.0.1 >=4.0.1
• axios@>=1.0.0 <1.13.5 >=1.13.5
• qs@<6.14.1 >=6.14.1
• js-yaml@<3.14.2 >=3.14.2
• js-yaml@>=4.0.0 <4.1.1 >=4.1.1
• picomatch@>=2.0.0 <2.3.2 >=2.3.2
• picomatch@>=4.0.0 <4.0.4 >=4.0.4
• @nevware21/ts-utils@<0.14.0 >=0.14.0
• ws@>=7.0.0 <7.5.11 >=7.5.11 <8 → [Updates: >=8.21.0 <9]

nvm (1)

.nvmrc (1)

• node 24

---

• Check this box to trigger a request for Renovate to run again on this repository