Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@babel/plugin-proposal-private-property-in-object
npm	crypto-js
npm	prom-client

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update dependency supertest to v7.3.1
• Update dependency eslint to v10.12.0
• Update dependency kubernetes-sigs/aws-alb-ingress-controller to v3.6.0
• Update dependency terraform to v1.16.5
• Update hashicorp/vault Docker tag to v1.21.4
• Update pre-commit (alessandrojcm/commitlint-pre-commit-hook, antonbabenko/pre-commit-terraform)
• Update pre-commit-ci/lite-action action to v1.2.0
• Update react monorepo to v19.3.0 (react, react-dom)
• Update terraform-aws (aws, terraform-aws-modules/eks/aws)
• Update toolmantim/release-drafter action to v7.10.0
• Update dependency @commitlint/config-conventional to v21
• Update dependency @google-cloud/iam to v3
• Update dependency @google-cloud/secret-manager to v7
• Update dependency @google-cloud/storage to v8
• Update dependency @kubernetes/client-node to v2
• Update dependency cookie to v2
• Update dependency crypto-random-string to v6
• Update dependency cypress to v16
• Update dependency google-auth-library to v11
• Update dependency googleapis to v184
• Update dependency http-proxy-middleware to v4
• Update dependency react-data-table-component to v8
• Update dependency react-intl to v12
• Update dependency typescript to v7
• Update hashicorp/vault Docker tag to v2
• Update Helm release kube-prometheus-stack to v92
• Update Helm release loki to v7
• Update Helm release promtail to v6
• Update pre-commit (major) (norwoodj/helm-docs, renovatebot/pre-commit-hooks)
• Update Terraform azurerm to v5
• Update terraform-gcp to v8 (google, google-beta)
• 🔐 Create all awaiting schedule PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-digest package medyagh/setup-minikube).

Files affected: .github/workflows/e2e-tests.yml, .github/workflows/minikube-k8s-test.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency openid-client to v6.8.8

Detected Dependencies

dockerfile (2)

cleaner/Dockerfile (2)

• node 26-alpine
• node 26-alpine

wrongsecrets-balancer/Dockerfile (3)

• node 26-alpine
• node 26-alpine
• node 26-alpine

github-actions (9)

.github/workflows/codeql-analysis.yml (4)

• actions/checkout v7
• github/codeql-action v4
• github/codeql-action v4
• github/codeql-action v4

.github/workflows/e2e-tests.yml (6)

• actions/checkout v7
• actions/setup-node v7
• medyagh/setup-minikube master@2026-07-22@e54c6bfce85fe75714fc113f1fa200c23338732b
• azure/setup-helm v5
• cypress-io/github-action v7
• node 26

.github/workflows/minikube-k8s-test.yml (8)

• actions/checkout v7
• actions/setup-node v7
• medyagh/setup-minikube master@2026-07-22@e54c6bfce85fe75714fc113f1fa200c23338732b
• actions/checkout v7
• actions/setup-node v7
• medyagh/setup-minikube master@2026-07-22@e54c6bfce85fe75714fc113f1fa200c23338732b
• node 26
• node 26

.github/workflows/pages.yml (4)

• actions/checkout v7
• actions/configure-pages v6
• actions/upload-pages-artifact v5
• actions/deploy-pages v5

.github/workflows/pre-commit.yml (11)

• actions/checkout v7
• actions/setup-node v7
• actions/setup-python v7
• actions/cache v6
• hashicorp/setup-terraform v4
• terraform-linters/setup-tflint v6
• pre-commit/action v3.0.1
• pre-commit-ci/lite-action v1.1.0 → [Updates: v1.2.0]
• node 26
• python 3.14
• terraform 1.1.7 → [Updates: v1.16.5]

.github/workflows/preview.yml (8)

• actions/checkout v7
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/metadata-action v6
• docker/build-push-action v7
• actions/checkout v7
• actions/github-script v9
• actions/github-script v9

.github/workflows/publish.yml (10)

• actions/checkout v7
• actions/checkout v7
• actions/checkout v7
• helm/chart-releaser-action v1.7.0
• actions/checkout v7
• docker/metadata-action v6
• docker/setup-qemu-action v4
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/build-push-action v7

.github/workflows/release-notes.yaml (1)

• toolmantim/release-drafter v7.7.0 → [Updates: v7.10.0]

.github/workflows/test.yml (6)

• actions/checkout v7
• actions/setup-node v7
• actions/checkout v7
• actions/setup-node v7
• node 26
• node 26

helm-values (1)

helm/wrongsecrets-ctf-party/values.yaml (3)

• jeroenwillemsen/wrongsecrets 1.14.1-no-vault
• jeroenwillemsen/wrongsecrets-desktop-k8s 1.14.1
• hashicorp/vault 1.19.3 → [Updates: 1.21.4, 2.1.2]

helmv3 (1)

helm/wrongsecrets-ctf-party/Chart.yaml (3)

• kube-prometheus-stack 82.18.0 → [Updates: 92.1.0]
• loki 2.16.0 → [Updates: 7.3.0]
• promtail 3.11.0 → [Updates: 6.17.1]

npm (5)

cleaner/package.json (13)

• @kubernetes/client-node ^1.2.0 → [Updates: ^2.0.0]
• jest-date-mock ^1.0.10
• supertest ^7.0.0 → [Updates: ^7.0.0]
• winston ^3.17.0
• @eslint/eslintrc ^3.1.0
• @eslint/js ^10.0.0
• eslint ^10.0.0 → [Updates: ^10.0.0]
• eslint-plugin-prettier ^5.2.1
• globals ^17.0.0
• jest ^30.0.5
• prettier ^3.3.3
• node >=26.0.0
• openid-client 6.8.4 → [Updates: 6.8.8]

helm/package.json

package.json (3)

• eslint ^10.0.0 → [Updates: ^10.0.0]
• @commitlint/config-conventional ^20.0.0 → [Updates: ^21.0.0]
• node >=26.0.0

wrongsecrets-balancer/package.json (35)

• @google-cloud/iam ^2.0.0 → [Updates: ^3.0.0]
• @google-cloud/secret-manager ^6.0.0 → [Updates: ^7.0.0]
• @google-cloud/storage ^7.19.0 → [Updates: ^8.0.0]
• @kubernetes/client-node ^1.2.0 → [Updates: ^2.0.0]
• basic-auth-connect ^1.1.0
• bcryptjs ^3.0.0
• cookie ^1.0.1 → [Updates: ^2.0.0]
• cookie-parser ^1.4.6
• crypto-random-string ^5.0.0 → [Updates: ^6.0.0]
• express ^5.2.0
• express-joi-validation ^6.0.0
• google-auth-library ^10.0.0 → [Updates: ^11.0.0]
• googleapis ^171.0.0 → [Updates: ^184.0.0]
• http-proxy ^1.18.1
• http-proxy-middleware ^3.0.2 → [Updates: ^4.0.0]
• joi ^18.0.0
• lodash ^4.17.23
• minimatch ^10.0.1
• on-finished ^2.4.1
• prom-client ^15.1.3
• winston ^3.17.0
• @eslint/eslintrc ^3.1.0
• @eslint/js ^10.0.0
• cookie-signature ^1.2.2
• cypress ^15.17.0 → [Updates: ^16.0.0]
• eslint ^10.0.0 → [Updates: ^10.0.0]
• eslint-plugin-prettier ^5.2.1
• globals ^17.0.0
• jest ^30.0.5
• jest-date-mock ^1.0.10
• minimatch ^10.0.1
• prettier ^3.3.3
• supertest ^7.0.0 → [Updates: ^7.0.0]
• node >=26.0.0
• openid-client 6.8.4 → [Updates: 6.8.8]

wrongsecrets-balancer/ui/package.json (16)

• axios ^1.15.0
• crypto-js ^4.2.0
• promise-retry ^2.0.1
• react ^19.0.0 → [Updates: ^19.0.0]
• react-data-table-component ^7.6.2 → [Updates: ^8.0.0]
• react-dom ^19.0.0 → [Updates: ^19.0.0]
• react-intl ^10.0.0 → [Updates: ^12.0.0]
• react-router-dom ^7.13.0
• reactjs-popup ^2.0.6
• styled-components ^6.1.13
• @babel/plugin-proposal-private-property-in-object ^7.21.11
• ajv ^8.20.0
• react-scripts ^5.0.1
• source-map-explorer ^2.5.3
• typescript ^5.9.2 → [Updates: ^7.0.0]
• node >=26.0.0

nvm (1)

.nvmrc (1)

• node 26

pre-commit (1)

.pre-commit-config.yaml (5)

• renovatebot/pre-commit-hooks 43.288.0 → [Updates: 44.145.1]
• pre-commit/pre-commit-hooks v6.0.0
• antonbabenko/pre-commit-terraform v1.109.1 → [Updates: v1.109.2]
• norwoodj/helm-docs v1.14.2 → [Updates: 19.0614]
• alessandrojcm/commitlint-pre-commit-hook v9.26.0 → [Updates: v9.27.0]

regex (1)

aws/k8s-aws-alb-script.sh (1)

• kubernetes-sigs/aws-alb-ingress-controller v3.5.0 → [Updates: v3.6.0]

terraform (11)

aws/acm.tf

aws/main.tf (6)

• terraform-aws-modules/iam/aws ~> 6.0
• terraform-aws-modules/iam/aws ~> 6.0
• terraform-aws-modules/eks/aws 21.25.0 → [Updates: 21.29.0]
• terraform-aws-modules/iam/aws ~> 6.0
• terraform-aws-modules/iam/aws ~> 6.0
• terraform-aws-modules/vpc/aws ~> 6.7.0

aws/shared-state/main.tf (2)

• aws ~> 6.0 → [Updates: ~> 6.0]
• hashicorp/terraform ~> 1.1

aws/versions.tf (4)

• aws ~> 6.0 → [Updates: ~> 6.0]
• http ~> 3.1
• random ~> 3.0
• hashicorp/terraform ~> 1.1

azure/main.tf

azure/providers.tf

azure/shared-state/main.tf (3)

• azurerm ~> 4.0 → [Updates: ~> 5.0]
• random ~> 3.0
• hashicorp/terraform ~> 1.1

azure/versions.tf (4)

• azurerm ~> 4.81.0 → [Updates: ~> 5.8.0]
• http ~> 3.6.0
• random ~> 3.9.0
• hashicorp/terraform ~> 1.1

gcp/main.tf

gcp/shared-state/main.tf (3)

• google ~> 7.0 → [Updates: ~> 8.0]
• random ~> 3.0
• hashicorp/terraform ~> 1.1

gcp/versions.tf (5)

• google ~> 7.46.0 → [Updates: ~> 8.6.0]
• google-beta ~> 7.46.0 → [Updates: ~> 8.6.0]
• http ~> 3.6.0
• random ~> 3.9.0
• hashicorp/terraform ~> 1.1

---

• Check this box to trigger a request for Renovate to run again on this repository