Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@types/bcryptjs
npm	@types/uuid
npm	@types/yaml

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore: update dependency @types/nodemailer to v8
• chore: update dependency bcryptjs to v3 (bcryptjs, @types/bcryptjs)
• chore: update dependency concurrently to v9
• chore: update dependency cypress to v15
• chore: update dependency dotenv to v17
• chore: update dependency eslint to v10
• chore: update dependency eslint-config-prettier to v10
• chore: update dependency eslint-plugin-cypress to v6
• chore: update dependency eslint-plugin-eslint-plugin to v7
• chore: update dependency eslint-plugin-mocha to v11
• chore: update dependency fs-extra to v11 (fs-extra, @types/fs-extra)
• chore: update dependency husky to v9
• chore: update dependency lerna to v9
• chore: update dependency loopback-connector-mongodb to v7
• chore: update dependency loopback-connector-rest to v6
• chore: update dependency mocha to v11
• chore: update dependency node to v24
• chore: update dependency testcontainers to v11
• chore: update dependency typescript to v6
• chore: update dependency uuid to v13
• chore: update loopback monorepo (@loopback/authentication, @loopback/authentication-jwt, @loopback/authorization, @loopback/boot, @loopback/build, @loopback/context, @loopback/core, @loopback/eslint-config, @loopback/http-server, @loopback/openapi-v3, @loopback/repository, @loopback/rest, @loopback/rest-explorer, @loopback/security, @loopback/service-proxy, @loopback/testlab)
• chore: update node.js to v25
• chore: update typescript-eslint monorepo to v8 (@typescript-eslint/eslint-plugin, @typescript-eslint/parser)
• chore: lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up docker package loopback4-example-shopping-monorepo: no-result, Failed to look up helm package redis: no-result, Failed to look up helm package mongodb: no-result.

Files affected: Dockerfile.recommender, Dockerfile.shopping, kubernetes/shopping-app/requirements.yaml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore: update dependency lodash to v4.17.23 [security]
• chore: update dependency @grpc/grpc-js to v1.8.22 [security]
• chore: update dependency express to v4.20.0 [security]
• chore: update dependency yaml to v2.2.2 [security]
• chore: update dependency jsonwebtoken to v9 [security]
• chore: update dependency nodemailer to v7 [security]
• chore: pin dependency node to 16.20.2
• chore: update dependency @grpc/proto-loader to v0.8.0
• chore: update dependency @types/lodash to v4.17.24
• chore: update dependency casbin to v5.49.0
• chore: update dependency commitizen to v4.3.1
• chore: update dependency debug to v4.4.3 (debug, @types/debug)
• chore: update supercharge/mongodb-github-action action to v1.12.1
• chore: update supercharge/redis-github-action action to v1.8.1
• chore: update actions/checkout action to v6
• chore: update actions/setup-node action to v6
• chore: update commitlint monorepo to v20 (@commitlint/cli, @commitlint/config-conventional, @commitlint/config-lerna-scopes, @commitlint/travis-cli)
• chore: update dependency @types/express to v5
• chore: update dependency @types/jsonwebtoken to v9
• chore: update dependency @types/mocha to v10
• chore: update dependency @types/uuid to v11
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (6)

Dockerfile.monorepo (1)

• node 18 → [Updates: 25]

Dockerfile.recommender (2)

• loopback4-example-shopping-monorepo 1.1.0
• node 18-slim → [Updates: 25-slim]

Dockerfile.shopping (2)

• loopback4-example-shopping-monorepo 1.1.0
• node 18-slim → [Updates: 25-slim]

openshift/Dockerfile.monorepo

openshift/Dockerfile.recommender

openshift/Dockerfile.shopping

github-actions (1)

.github/workflows/ci.yml (10)

• actions/checkout v3 → [Updates: v6]
• actions/setup-node v2 → [Updates: v6]
• supercharge/mongodb-github-action 1.7.0 → [Updates: 1.12.1]
• supercharge/redis-github-action 1.4.0 → [Updates: 1.8.1]
• actions/checkout v3 → [Updates: v6]
• actions/setup-node v2 → [Updates: v6]
• actions/checkout v3 → [Updates: v6]
• actions/setup-node v2 → [Updates: v6]
• node 16 → [Updates: 16.20.2, 24]
• node 16 → [Updates: 16.20.2, 24]

helm-requirements (1)

kubernetes/shopping-app/requirements.yaml (2)

• redis 10.5.7
• mongodb 7.8.10

npm (3)

package.json (28)

• @commitlint/cli 17.0.1 → [Updates: 20.5.0]
• @commitlint/config-conventional 17.0.0 → [Updates: 20.5.0]
• @commitlint/config-lerna-scopes 17.0.0 → [Updates: 20.4.3]
• @commitlint/travis-cli 17.0.1 → [Updates: 20.5.0]
• @loopback/build 9.0.0 → [Updates: 12.0.11]
• @loopback/eslint-config 13.0.0 → [Updates: 16.0.1]
• @loopback/testlab 5.0.0 → [Updates: 8.0.11]
• @types/fs-extra 9.0.13 → [Updates: 11.0.4]
• @types/node 17.0.42 → [Updates: 25.6.0]
• @typescript-eslint/eslint-plugin 5.27.1 → [Updates: 8.58.2]
• @typescript-eslint/parser 5.27.1 → [Updates: 8.58.2]
• commitizen 4.2.4 → [Updates: 4.3.1]
• concurrently 7.2.1 → [Updates: 9.2.1]
• cz-conventional-changelog 3.3.0
• dotenv 16.0.1 → [Updates: 17.4.2]
• eslint 8.17.0 → [Updates: 10.2.1]
• eslint-config-prettier 8.5.0 → [Updates: 10.1.8]
• eslint-plugin-cypress 2.12.1 → [Updates: 6.3.1]
• eslint-plugin-eslint-plugin 4.2.0 → [Updates: 7.3.2]
• eslint-plugin-mocha 10.0.5 → [Updates: 11.2.0]
• fs-extra 10.1.0 → [Updates: 11.3.4]
• husky 8.0.1 → [Updates: 9.1.7]
• lerna 4.0.0 → [Updates: 9.0.7]
• mocha 10.0.0 → [Updates: 11.7.5]
• source-map-support 0.5.21
• testcontainers 8.10.1 → [Updates: 11.14.0]
• typescript 4.7.3 → [Updates: 6.0.3]
• node >=8.9

packages/recommender/package.json (10)

• @grpc/grpc-js 1.6.7 → [Updates: 1.8.22]
• @grpc/proto-loader 0.6.13 → [Updates: 0.8.0]
• @loopback/http-server 4.0.0 → [Updates: 7.0.11]
• express 4.18.1 → [Updates: 4.20.0]
• @loopback/build 9.0.0 → [Updates: 12.0.11]
• @loopback/testlab 5.0.0 → [Updates: 8.0.11]
• @types/express 4.17.13 → [Updates: 5.0.6]
• @types/node 17.0.42 → [Updates: 25.6.0]
• typescript 4.7.3 → [Updates: 6.0.3]
• node >=10.16

packages/shopping/package.json (46)

• @loopback/authentication 9.0.0 → [Updates: 12.0.13]
• @loopback/authentication-jwt 0.12.0 → [Updates: 0.16.13]
• @loopback/authorization 0.12.0 → [Updates: 0.16.12]
• @loopback/boot 5.0.0 → [Updates: 8.0.12]
• @loopback/context 5.0.0 → [Updates: 8.0.11]
• @loopback/core 4.0.0 → [Updates: 7.0.11]
• @loopback/openapi-v3 8.0.0 → [Updates: 11.0.12]
• @loopback/repository 5.0.0 → [Updates: 8.0.11]
• @loopback/rest 12.0.0 → [Updates: 15.0.12]
• @loopback/rest-explorer 5.0.0 → [Updates: 8.0.12]
• @loopback/security 0.8.0 → [Updates: 0.12.12]
• @loopback/service-proxy 5.0.0 → [Updates: 8.0.11]
• @types/jsonwebtoken 8.5.8 → [Updates: 9.0.10]
• @types/yaml 1.9.7
• bcryptjs 2.4.3 → [Updates: 3.0.3]
• casbin 5.15.1 → [Updates: 5.49.0]
• debug 4.3.4 → [Updates: 4.4.3]
• dotenv 16.0.1 → [Updates: 17.4.2]
• express 4.18.1 → [Updates: 4.20.0]
• isemail 3.2.0
• jsonwebtoken 8.5.1 → [Updates: 9.0.0]
• lodash 4.17.21 → [Updates: 4.17.23]
• loopback-connector-grpc 2.0.0
• loopback-connector-kv-redis 4.0.0
• loopback-connector-mongodb 6.2.0 → [Updates: 7.0.4]
• loopback-connector-rest 4.0.1 → [Updates: 6.0.6]
• nodemailer 6.7.5 → [Updates: 7.0.11]
• uuid 8.3.2 → [Updates: 13.0.0]
• yaml 2.1.1 → [Updates: 2.2.2]
• @grpc/grpc-js 1.6.7 → [Updates: 1.8.22]
• @loopback/build 9.0.0 → [Updates: 12.0.11]
• @loopback/testlab 5.0.0 → [Updates: 8.0.11]
• @types/bcryptjs 2.4.2 → [Updates: 3.0.0]
• @types/debug 4.1.7 → [Updates: 4.1.13]
• @types/express 4.17.13 → [Updates: 5.0.6]
• @types/lodash 4.14.182 → [Updates: 4.17.24]
• @types/mocha 9.1.1 → [Updates: 10.0.10]
• @types/node 17.0.42 → [Updates: 25.6.0]
• @types/nodemailer 6.4.4 → [Updates: 8.0.0]
• @types/uuid 8.3.4 → [Updates: 11.0.0]
• concurrently 7.2.1 → [Updates: 9.2.1]
• cypress 10.1.0 → [Updates: 15.14.0]
• mocha 10.0.0 → [Updates: 11.7.5]
• source-map-support 0.5.21
• typescript 4.7.3 → [Updates: 6.0.3]
• node >=10.16

---

• Check this box to trigger a request for Renovate to run again on this repository