Dependency Dashboard

[svc-secops]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository problems

Renovate tried to run on this repository, but found these problems.

• WARN: Using npm packages for Renovate presets is now deprecated. Please migrate to repository-based presets instead.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• chore(deps): update dependency ts-jest to v29.1.3
• chore(deps): update node.js to v21.7.3
• chore(deps): update slackapi/slack-github-action action to v1.26.0
• chore(deps): update actions/setup-node action to v4
• chore(deps): update andstor/file-existence-action action to v3
• chore(deps): update node.js to v22
• fix(deps): update dependency query-string to v9
• fix(deps): update dependency vscode-languageclient to v9
• fix(deps): update dependency vscode-languageserver to v9
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Other Branches

These updates are pending. To force PRs open, click the checkbox below.

• chore(deps): update dependency minimatch to v3.0.5 [security]
• chore(deps): update dependency moment to v2.29.4 [security]
• chore(deps): update dependency node-fetch to v2.6.7 [security]

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update dependency got to 11.8.5 [security]
• chore(deps): update all devdependencies (@changesets/changelog-github, @changesets/cli, @graphql-codegen/cli, @graphql-codegen/typescript-operations, @types/node, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, eslint, eslint-config-prettier, eslint-plugin-prettier, memfs, prettier, typescript, vsce)
• fix(deps): update apollo graphql packages (@apollo/federation, apollo-datasource)
• chore(deps): update all devdependencies (major) (@graphql-codegen/cli, @graphql-codegen/typescript-operations, @types/cosmiconfig, @types/glob, @types/node, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, eslint, memfs, rimraf, typescript, vsce)
• fix(deps): update apollo graphql packages to v3 (major) (apollo-datasource, apollo-server-errors)
• fix(deps): update dependency @endemolshinegroup/cosmiconfig-typescript-loader to v3
• fix(deps): update dependency codemirror to v6
• fix(deps): update dependency cosmiconfig to v9
• fix(deps): update dependency glob to v10
• fix(deps): update dependency graphql to v16
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

4/4 CVEs have Renovate fixes.

npm

package.json

minimatch

• GHSA-f8q6-p94x-37v3 (fixed in 3.0.5)

moment

• GHSA-8hfj-j24r-96c4 (fixed in 2.29.2)
• GHSA-wc69-rhjr-hc9g (fixed in 2.29.4)

node-fetch

• GHSA-r683-j2x4-v87g (fixed in 2.6.7)

Detected dependencies

circleci

.circleci/config.yml

• secops 2.0.7
• cimg/node 21.6.2

github-actions

.github/workflows/release.yml

• actions/checkout v4
• andstor/file-existence-action v2.0.0
• actions/setup-node v3
• changesets/action v1
• HaaLeo/publish-vscode-extension v1
• slackapi/slack-github-action v1.24.0

npm

package.json

• @apollo/federation ^0.23.1
• @endemolshinegroup/cosmiconfig-typescript-loader ^1.0.0
• @types/lz-string ^1.3.34
• @types/node-fetch 2.6.11
• apollo-datasource ^0.8.0
• apollo-link ^1.2.3
• apollo-link-context ^1.0.9
• apollo-link-error ^1.1.1
• apollo-link-http ^1.5.5
• apollo-server-errors ^2.0.2
• await-to-js ^3.0.0
• codemirror ^5.63.3
• core-js ^3.0.1
• cosmiconfig ^5.0.6
• dotenv ^16.0.0
• glob ^7.1.3
• graphql ^15.5.0
• graphql-language-service-interface ^2.8.4
• graphql-tag ^2.10.1
• lodash.debounce ^4.0.8
• lodash.merge ^4.6.1
• lz-string ^1.4.4
• minimatch ^3.0.4
• moment ^2.29.1
• node-fetch ^2.2.0
• query-string ^7.0.1
• resolve-from ^5.0.0
• sha.js ^2.4.11
• vscode-languageclient ^5.2.1
• vscode-languageserver ^5.1.0
• vscode-uri 3.0.8
• @changesets/changelog-github 0.4.8
• @changesets/cli 2.26.2
• @graphql-codegen/cli 2.2.0
• @graphql-codegen/typescript-operations 2.1.3
• @types/cosmiconfig 5.0.3
• @types/glob 7.2.0
• @types/jest 29.5.12
• @types/lodash.debounce 4.0.9
• @types/lodash.merge 4.6.9
• @types/node 14.17.6
• @types/node-fetch 2.6.11
• @typescript-eslint/eslint-plugin 6.9.1
• @typescript-eslint/parser 6.9.1
• eslint 8.52.0
• eslint-config-prettier 9.0.0
• eslint-plugin-prettier 5.0.1
• jest 29.7.0
• jest-environment-node 29.7.0
• memfs 3.2.2
• prettier 3.0.3
• rimraf 3.0.2
• ts-jest 29.1.2
• typescript 4.3.5
• vsce 1.96.1
• vscode 1.1.37
• vscode ^1.30.0

nvm

.nvmrc

• node v20