Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
npm	csurf
npm	eslint-plugin-node

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency config to v4.3.0
• Update dependency express-session to v1.19.0
• Update dependency pg to v8.18.0
• Update Node.js to v18.20.8
• Update dependency connect-pg-simple to v10
• Update dependency connect-redis to v9
• Update dependency csv to v6
• Update dependency dotenv to v17
• Update dependency eslint to v10
• Update dependency eslint-plugin-promise to v7
• Update dependency espree to v11
• Update dependency graphql to v16
• Update dependency graphql-request to v7
• Update dependency http-errors to v2
• Update dependency node-pg-migrate to v8
• Update dependency nodemon to v3
• Update dependency pluralize to v8
• Update dependency redis to v5
• Update Node.js to v24
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update dependency validator to v13 [SECURITY]

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency express to ~4.20.0 [SECURITY]
• Update dependency passport to ^0.6.0 [SECURITY]
• Replace dependency eslint-plugin-node with eslint-plugin-n ^14.0.0
• Update dependency http-errors to ~1.8.0
• Update dependency morgan to ~1.10.0
• Update dependency oauth to ^0.10.0
• Update dependency @graphql-eslint/eslint-plugin to v4
• Update dependency body-parser to v2
• Update dependency debug to v4
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• docker/dockerfile 1
• node 18.16.0-slim → [Updates: 18.20.8-slim, 24.13.1-slim]

npm (1)

package.json (42)

• ansi-colors ^4.1.1
• async ^3.2.2
• body-parser ^1.19.0 → [Updates: ^2.0.0]
• config ^4.1.1 → [Updates: ^4.1.1]
• connect-pg-simple ^7.0.0 → [Updates: ^10.0.0]
• connect-redis ^4.0.0 → [Updates: ^9.0.0]
• cookie-parser ^1.4.4
• csurf ^1.10.0
• csv ^5.3.1 → [Updates: ^6.0.0]
• debug ~2.6.9 → [Updates: ~4.4.0]
• dotenv ^10.0.0 → [Updates: ^17.0.0]
• express ~4.16.0 → [Updates: ~4.20.0]
• express-flash 0.0.2
• express-promise-router ^4.1.0
• express-session ^1.17.0 → [Updates: ^1.17.0]
• graphql-request ^3.5.0 → [Updates: ^7.0.0]
• http-errors ~1.6.2 → [Updates: ~1.8.0, ~2.0.0]
• method-override ^3.0.0
• moment ^2.24.0
• morgan ~1.9.0 → [Updates: ~1.10.0]
• node-pg-migrate ^6.0.0 → [Updates: ^8.0.0]
• oauth ^0.9.15 → [Updates: ^0.10.0]
• parse-database-url ^0.3.0
• passport ^0.4.1 → [Updates: ^0.6.0]
• passport-oauth2 ^1.5.0
• permission ^1.1.0
• pg ^8.7.1 → [Updates: ^8.7.1]
• pluralize ^7.0.0 → [Updates: ^8.0.0]
• pug ^3.0.0
• redis ^3.0.0 → [Updates: ^5.0.0]
• underscore ^1.9.1
• url ^0.11.0
• validator ^10.11.0 → [Updates: ^13.0.0]
• @graphql-eslint/eslint-plugin ^2.2.0 → [Updates: ^4.0.0]
• eslint ^7.0.0 → [Updates: ^10.0.0]
• eslint-plugin-import ^2.24.2
• eslint-plugin-node ^11.1.0 → [Updates: ^14.0.0]
• eslint-plugin-promise ^5.1.0 → [Updates: ^7.0.0]
• espree ^9.0.0 → [Updates: ^11.0.0]
• graphql ^15.6.0 → [Updates: ^16.0.0]
• nodemon ^2.0.13 → [Updates: ^3.0.0]
• node >= 14.0.0

---

• Check this box to trigger a request for Renovate to run again on this repository