Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@material-ui/core
npm	@material-ui/icons

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency formidable to v1.2.6
• Update dependency nodemon to v2.0.22
• Update dependency react-ga to v3.3.1
• Update dependency react-router-dom to v5.3.4
• Update material-ui monorepo (@material-ui/core, @material-ui/icons)
• Update dependency @sendgrid/mail to v7.7.0
• Update dependency braintree to v3.39.0
• Update dependency classnames to v2.5.1
• Update dependency clsx to v1.2.1
• Update dependency express-jwt to v6.1.2
• Update dependency prop-types to v15.8.1
• Update dependency query-string to v7.1.3
• Update testing-library monorepo (@testing-library/jest-dom, @testing-library/react, @testing-library/user-event)
• Update actions/checkout action to v7
• Update dependency @sendgrid/mail to v8
• Update dependency clsx to v2
• Update dependency dotenv to v17
• Update dependency express-jwt to v8
• Update dependency express-validator to v7
• Update dependency formidable to v3
• Update dependency nodemon to v3
• Update dependency query-string to v9
• Update dependency react-scripts to v5
• Update dependency react-toastify to v11
• Update dependency web-vitals to v6
• Update Font Awesome (major) (@fortawesome/fontawesome-svg-core, @fortawesome/free-solid-svg-icons, @fortawesome/react-fontawesome)
• Update github/codeql-action action to v4
• Update react monorepo to v19 (react, react-dom)
• Update testing-library monorepo (major) (@testing-library/jest-dom, @testing-library/react, @testing-library/user-event)
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update dependency web-vitals to v2.1.4
• Update dependency react-toastify to v8.2.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency moment to v2.29.4 [SECURITY]
• Update dependency body-parser to v1.20.6 [SECURITY]
• Update dependency express to v4.20.0 [SECURITY]
• Update dependency lodash to v4.18.1 [SECURITY]
• Update dependency mongoose to v6.13.10 [SECURITY]
• Update dependency morgan to v1.12.0 [SECURITY]
• Update dependency validator to v13.15.22 [SECURITY]
• Update dependency dompurify to v3 [SECURITY]
• Update dependency jsonwebtoken to v9 [SECURITY]
• Update dependency nodemailer to v9 [SECURITY]
• Update dependency uuid to v11 [SECURITY]
• Replace dependency @material-ui/core with @mui/material
• Replace dependency @material-ui/icons with @mui/icons-material
• Update bcanseco/github-contribution-graph-action action to v2.0.2
• Update dependency cookie-parser to v1.4.7
• Update dependency cors to v2.8.6
• Update dependency @fortawesome/react-fontawesome to v0.2.6
• Update dependency sass to v1.104.1
• Update dependency react-router-dom to v7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (1)

.github/workflows/codeql-analysis.yml (5)

• actions/checkout v2 → [Updates: v7]
• github/codeql-action v1 → [Updates: v4]
• github/codeql-action v1 → [Updates: v4]
• github/codeql-action v1 → [Updates: v4]
• bcanseco/github-contribution-graph-action 2.0.0 → [Updates: 2.0.2]

npm (2)

ecomm-client/package.json (27)

• @fortawesome/fontawesome-svg-core 1.2.36 → [Updates: 7.3.1]
• @fortawesome/free-solid-svg-icons 5.15.4 → [Updates: 7.3.1]
• @fortawesome/react-fontawesome 0.1.15 → [Updates: 0.2.6, 3.5.0]
• @material-ui/core 4.12.3 → [Updates: 4.12.4, 5.0.0]
• @testing-library/jest-dom 5.14.1 → [Updates: 5.17.0, 7.0.1]
• @testing-library/react 12.1.2 → [Updates: 12.1.5, 16.3.3]
• @testing-library/user-event 13.2.1 → [Updates: 13.5.0, 14.6.7]
• braintree-web-drop-in-react 1.2.1
• classnames 2.3.1 → [Updates: 2.5.1]
• dompurify 2.3.3 → [Updates: 3.4.13]
• express 4.17.1 → [Updates: 4.20.0]
• isomorphic-fetch 3.0.0
• moment 2.29.1 → [Updates: 2.29.4]
• react 17.0.2 → [Updates: 19.3.0]
• react-dom 17.0.2 → [Updates: 19.3.0]
• react-ga 3.3.0 → [Updates: 3.3.1]
• react-mailchimp-subscribe 2.1.3
• react-router-dom 5.3.0 → [Updates: 5.3.4, 7.18.4]
• react-scripts 4.0.3 → [Updates: 5.0.1]
• react-toastify 8.0.3 → [Updates: 8.2.0, 11.1.0]
• sass 1.38.1 → [Updates: 1.104.1]
• validator 13.6.0 → [Updates: 13.15.22]
• web-vitals 2.1.0 → [Updates: 2.1.4, 6.2.2]
• zxcvbn 4.4.2
• @material-ui/icons 4.11.2 → [Updates: 4.11.3, 5.0.0]
• clsx 1.1.1 → [Updates: 1.2.1, 2.1.1]
• prop-types 15.7.2 → [Updates: 15.8.1]

eCommerceWeb/package.json (18)

• @sendgrid/mail ^7.4.5 → [Updates: ^7.4.5, ^8.0.0]
• body-parser ^1.19.0 → [Updates: ^1.19.0]
• braintree ^3.6.0 → [Updates: ^3.6.0]
• cookie-parser ^1.4.5 → [Updates: ^1.4.5]
• cors ^2.8.5 → [Updates: ^2.8.5]
• dotenv ^10.0.0 → [Updates: ^17.0.0]
• express ^4.17.1 → [Updates: ^4.17.1]
• express-jwt ^6.0.0 → [Updates: ^6.0.0, ^8.0.0]
• express-validator ^5.3.1 → [Updates: ^7.0.0]
• formidable ^1.2.2 → [Updates: ^1.2.2, ^3.0.0]
• jsonwebtoken ^8.5.1 → [Updates: ^9.0.0]
• lodash ^4.17.21 → [Updates: ^4.17.21]
• mongoose ^6.0.0 → [Updates: ^6.0.0]
• morgan ^1.10.0 → [Updates: ^1.10.0]
• nodemailer ^6.6.3 → [Updates: ^9.0.0]
• nodemon ^2.0.7 → [Updates: ^2.0.7, ^3.0.0]
• query-string ^7.0.1 → [Updates: ^7.0.1, ^9.0.0]
• uuid ^8.3.2 → [Updates: ^11.0.0]

---

• Check this box to trigger a request for Renovate to run again on this repository