Dependency Dashboard

[specmatic-builder]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@babel/plugin-proposal-class-properties

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-node action to v7
• chore(deps): update softprops/action-gh-release action to v3

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• [SECURITY] Update dependency @babel/core to v7.29.6
• [SECURITY] Update dependency axios to v1.18.0
• [SECURITY] Update dependency shell-quote to v1.9.0
• chore(deps): update dependency express to v4.22.3
• chore(deps): update dependency jest-mock-extended to v4.0.1
• chore(deps): update dependency rimraf to v6.1.3
• chore(deps): update babel monorepo to v7.29.7 (@babel/cli, @babel/preset-env, @babel/preset-typescript)
• chore(deps): update dependency @types/node to v24.13.6
• chore(deps): update dependency fast-xml-parser to v5.11.1
• chore(deps): update jest monorepo to v30.5.2
• chore(deps): update babel monorepo to v8 (@babel/cli, @babel/preset-env, @babel/preset-typescript)
• chore(deps): update dependency @types/supertest to v7
• chore(deps): update dependency express to v5
• chore(deps): update dependency jest-when to v4
• chore(deps): update dependency typescript to v7
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

12/12 CVEs have Renovate fixes.

npm

package.json

shell-quote

• GHSA-395f-4hp3-45gv (fixed in >= 1.9.0)

@babel/core

• GHSA-4x5r-pxfx-6jf8 (fixed in >= 7.29.6)

axios

• GHSA-42h9-826w-cgv3 (fixed in >= 1.18.0)
• GHSA-7q8q-rj6j-mhjq (fixed in >= 1.18.0)
• GHSA-f4gw-2p7v-4548 (fixed in >= 1.18.0)
• GHSA-gcfj-64vw-6mp9 (fixed in >= 1.18.0)
• GHSA-hcpx-6fm6-wx23 (fixed in >= 1.18.0)
• GHSA-jqh4-m9w3-8hp9 (fixed in >= 1.18.0)
• GHSA-mmx7-hfxf-jppx (fixed in >= 1.18.0)
• GHSA-mwf2-3pr3-8698 (fixed in >= 1.18.0)
• GHSA-pmv8-rq9r-6j72 (fixed in >= 1.18.0)
• GHSA-xj6q-8x83-jv6g (fixed in >= 1.18.0)

Detected Dependencies

github-actions (3)

.github/workflows/publish.yml (3)

• actions/checkout v6 → [Updates: v7]
• actions/setup-node v6 → [Updates: v7]
• node 24

.github/workflows/test.yml (2)

• actions/checkout v6 → [Updates: v7]
• actions/setup-node v6 → [Updates: v7]

.github/workflows/update-specmatic-version-and-publish.yml (2)

• actions/checkout v6 → [Updates: v7]
• softprops/action-gh-release v2 → [Updates: v3]

npm (1)

package.json (25)

• fast-xml-parser ^5.0.0 → [Updates: ^5.0.0]
• shell-quote ^1.8.3 → [Updates: ^1.8.3]
• terminate ^2.8.0
• tree-kill ^1.2.2
• winston ^3.14.2
• @babel/cli ^7.25.6 → [Updates: ^7.25.6, ^8.0.0]
• @babel/core ^7.25.2 → [Updates: ^7.25.2]
• @babel/plugin-proposal-class-properties ^7.18.6
• @babel/preset-env ^7.25.4 → [Updates: ^7.25.4, ^8.0.0]
• @babel/preset-typescript ^7.24.7 → [Updates: ^7.24.7, ^8.0.0]
• @types/express ^5.0.0
• @types/jest ^30.0.0
• @types/jest-when ^3.5.5
• @types/node ^24.0.0 → [Updates: ^24.0.0]
• @types/shell-quote ^1.7.5
• @types/supertest ^6.0.2 → [Updates: ^7.0.0]
• axios ^1.12.2 → [Updates: ^1.12.2]
• express ^4.21.0 → [Updates: ^4.21.0, ^5.0.0]
• jest ^30.0.0 → [Updates: ^30.0.0]
• jest-extended ^7.0.0
• jest-mock-extended ^4.0.0 → [Updates: ^4.0.0]
• jest-when ^3.6.0 → [Updates: ^4.0.0]
• rimraf ^6.0.1 → [Updates: ^6.0.1]
• supertest ^7.0.0
• typescript ^5.6.2 → [Updates: ^7.0.0]