Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	@types/helmet

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• fix(deps): update all non-major dependencies (@apollo/server, @types/node, express, graphql, typescript)

Detected dependencies

dockerfile

challenges/apollo/Dockerfile

• node 22
• node 22-slim

challenges/auth-not-verified/Dockerfile

• golang 1.23

challenges/discoverable/Dockerfile

• golang 1.23

challenges/http-misconfigurations/Dockerfile

• golang 1.23

challenges/jwt-alg-none-bypass/Dockerfile

• golang 1.23

challenges/jwt-blank-secret/Dockerfile

• golang 1.23

challenges/jwt-not-verified/Dockerfile

• golang 1.23

challenges/jwt-null-signature/Dockerfile

• golang 1.23

challenges/jwt-strong-eddsa-key/Dockerfile

• golang 1.23

challenges/jwt-weak-hmac-secret/Dockerfile

• golang 1.23

challenges/jwt-weak-rsa-key/Dockerfile

• golang 1.23

challenges/strong-api-key/Dockerfile

• golang 1.23

challenges/strong-http-basic/Dockerfile

• golang 1.23

github-actions

.github/workflows/ci.yml

• actions/checkout v4
• actions/checkout v4
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/build-push-action v6

.github/workflows/stale.yml

• actions/stale v9

gomod

challenges/auth-not-verified/go.mod

• go 1.20
• github.com/spf13/cobra v1.8.1

challenges/discoverable/go.mod

• go 1.20
• github.com/spf13/cobra v1.8.1

challenges/http-misconfigurations/go.mod

• go 1.20
• github.com/spf13/cobra v1.8.1

challenges/jwt-alg-none-bypass/go.mod

• go 1.20
• github.com/golang-jwt/jwt/v5 v5.2.1
• github.com/spf13/cobra v1.8.1

challenges/jwt-blank-secret/go.mod

• go 1.20
• github.com/golang-jwt/jwt/v5 v5.2.1
• github.com/spf13/cobra v1.8.1

challenges/jwt-not-verified/go.mod

• go 1.20
• github.com/golang-jwt/jwt/v5 v5.2.1
• github.com/spf13/cobra v1.8.1

challenges/jwt-null-signature/go.mod

• go 1.20
• github.com/golang-jwt/jwt/v5 v5.2.1
• github.com/spf13/cobra v1.8.1

challenges/jwt-strong-eddsa-key/go.mod

• go 1.20
• github.com/golang-jwt/jwt/v5 v5.2.1
• github.com/spf13/cobra v1.8.1

challenges/jwt-weak-hmac-secret/go.mod

• go 1.20
• github.com/golang-jwt/jwt/v5 v5.2.1
• github.com/spf13/cobra v1.8.1

challenges/jwt-weak-rsa-key/go.mod

• go 1.20
• github.com/golang-jwt/jwt/v5 v5.2.1
• github.com/spf13/cobra v1.8.1

challenges/strong-api-key/go.mod

• go 1.20
• github.com/spf13/cobra v1.8.1

challenges/strong-http-basic/go.mod

• go 1.22
• github.com/brianvoe/gofakeit/v7 v7.1.2
• github.com/spf13/cobra v1.8.1

npm

challenges/apollo/package.json

• @apollo/server ^4.11.0
• cors ^2.8.5
• express ^4.21.1
• graphql ^16.9.0
• helmet ^8.0.0
• morgan ^1.10.0
• @types/cors ^2.8.17
• @types/express ^5.0.0
• @types/helmet ^4.0.0
• @types/morgan ^1.9.9
• @types/node ^22.8.1
• typescript ^5.6.3

nvm

challenges/apollo/.nvmrc

• node 22

---

• Check this box to trigger a request for Renovate to run again on this repository