Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update dependency only-allow to v1.2.2
• chore(deps): update pnpm to v9.15.9
• fix(deps): update dependency cookie-parser to v1.4.7
• fix(deps): update dependency http-errors to v2.0.1
• chore(deps): update dependency simple-git-hooks to v2.14.0
• chore(deps): update jenkins/jenkins docker tag to v2.541.3
• fix(deps): update dependency debug to v4.4.3
• fix(deps): update dependency express to v4.22.3
• fix(deps): update dependency express to v4.22.3
• fix(deps): update dependency express to v4.22.3
• fix(deps): update dependency express to v4.22.3
• fix(deps): update dependency express to v4.22.3
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-node action to v7
• chore(deps): update actions/upload-pages-artifact action to v5
• chore(deps): update dependency ubuntu to v26
• chore(deps): update github/codeql-action action to v4
• chore(deps): update node.js to v24
• chore(deps): update pnpm to v12
• chore(deps): update pnpm/action-setup action to v6
• fix(deps): update dependency ejs to v6
• fix(deps): update dependency express to v5
• fix(deps): update dependency express to v5
• fix(deps): update dependency express to v5
• fix(deps): update dependency express to v5
• fix(deps): update dependency express to v5
• 🔐 Create all pending approval PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up docker package registry.cn-hangzhou.aliyuncs.com/142vip-infra/node: no-result, Failed to look up docker package registry.cn-hangzhou.aliyuncs.com/142vip/nginx: no-result.

Files affected: Dockerfile

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency body-parser to v1.20.6 [security]
• fix(deps): update dependency morgan to v1.12.0 [security]
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update dependency sequelize to v6.37.8 [security]
• fix(deps): update dependency sequelize to v6.37.8 [security]
• fix(deps): update dependency koa to v2.16.4 [security]

Detected Dependencies

docker-compose (6)

code/docker/jenkins/docker-compose.yaml

code/redis/cluster/docker-compose.yaml

code/redis/docker-compose.yaml

code/redis/master-slave/docker-compose.yaml

code/redis/sentinel/docker-compose.yaml

docker-compose.yaml

dockerfile (4)

code/docker/jenkins/Dockerfile (1)

• jenkins/jenkins 2.426.2-jdk17 → [Updates: 2.541.3-jdk17]

code/docker/static-dist-deploy.Dockerfile

Dockerfile (2)

• registry.cn-hangzhou.aliyuncs.com/142vip-infra/node 25.9.0-base
• registry.cn-hangzhou.aliyuncs.com/142vip/nginx 1.29.0-alpine

docs/microservice/docker/dockerfile.md (1)

• node 12.6.0-alpine → [Updates: 24.21.0-alpine]

github-actions (3)

.github/workflows/CD.yaml (10)

• actions/checkout v5 → [Updates: v7]
• pnpm/action-setup v5 → [Updates: v6]
• actions/setup-node v5 → [Updates: v7]
• actions/upload-pages-artifact v4 → [Updates: v5]
• actions/deploy-pages v5
• actions/checkout v5 → [Updates: v7]
• pnpm/action-setup v5 → [Updates: v6]
• actions/setup-node v5 → [Updates: v7]
• ubuntu 24.04 → [Updates: 26.04]
• ubuntu 24.04 → [Updates: 26.04]

.github/workflows/CI.yaml (4)

• actions/checkout v5 → [Updates: v7]
• pnpm/action-setup v5 → [Updates: v6]
• actions/setup-node v5 → [Updates: v7]
• ubuntu 24.04 → [Updates: 26.04]

.github/workflows/codeql-analysis.yml (5)

• actions/checkout v5 → [Updates: v7]
• github/codeql-action v3 → [Updates: v4]
• github/codeql-action v3 → [Updates: v4]
• github/codeql-action v3 → [Updates: v4]
• ubuntu 24.04 → [Updates: 26.04]

npm (10)

code/express/apps/apis-demo/package.json (1)

• express 4.21.0 → [Updates: 4.22.3, 5.2.1]

code/express/apps/error-handle-demo/package.json (3)

• body-parser 1.20.2 → [Updates: 1.20.6]
• express 4.21.0 → [Updates: 4.22.3, 5.2.1]
• method-override 3.0.0

code/express/apps/quick-start-demo/package.json (1)

• express 4.21.0 → [Updates: 4.22.3, 5.2.1]

code/express/apps/static-source-demo/package.json (1)

• express 4.21.0 → [Updates: 4.22.3, 5.2.1]

code/express/apps/template-demo/package.json (6)

• cookie-parser 1.4.6 → [Updates: 1.4.7]
• debug 4.0.0 → [Updates: 4.4.3]
• ejs 3.1.10 → [Updates: 6.0.1]
• express 4.21.0 → [Updates: 4.22.3, 5.2.1]
• http-errors 2.0.0 → [Updates: 2.0.1]
• morgan 1.10.0 → [Updates: 1.12.0]

code/koa/package.json (1)

• koa 2.15.4 → [Updates: 2.16.4]

code/orm/sequelize/apis-demo/package.json (1)

• sequelize 6.37.5 → [Updates: 6.37.8]

code/orm/sequelize/db-curd-demo/package.json (1)

• sequelize 6.37.5 → [Updates: 6.37.8]

package.json (12)

• @142vip/commit-linter 0.0.1-alpha.2
• @142vip/eslint-config 0.0.1-alpha.6
• @142vip/fairy-cli 0.0.3-alpha.33
• @142vip/open-source 0.0.1-alpha.4
• @142vip/utils 0.0.1-alpha.58
• @142vip/vuepress 0.0.1-alpha.25
• only-allow 1.2.1 → [Updates: 1.2.2]
• simple-git-hooks 2.13.0 → [Updates: 2.14.0]
• ts-node 10.9.2
• node >=18.x
• pnpm 9.15.0 → [Updates: 9.15.9, 12.5.1]
• pnpm 9.15.0 → [Updates: 9.15.9, 12.5.1]

pnpm-workspace.yaml

---

• Check this box to trigger a request for Renovate to run again on this repository