Summary of changes:

snyk-upgrade-cb204b73d59b3d19b62537100d36a959 fix: upgrade @typescript-eslint/parser from 7.13.0 to 7.18.0

From <94d8782>

Can be ignored in favour of snyk-fix-a178732dbebb6661bf0aaebf29ab0f32 which bumps to newer version

snyk-upgrade-d73d8c1f28d36cfc616fb5fe7d2ffb18 fix: upgrade @typescript-eslint/eslint-plugin from 7.13.0 to 7.18.0

From <231026e>

Can be ignored in favour of snyk-fix-a178732dbebb6661bf0aaebf29ab0f32 which bumps to newer version

snyk-upgrade-68699eacb379c203d23a09b77a003321 fix: upgrade jose from 5.4.0 to 5.6.3

From <f9f0b39>

There is a newer version of jose available (5.9.4), which is applied herein.

snyk-upgrade-8bb8cff1a2003752b53569666b1bb65a fix: upgrade prettier-plugin-tailwindcss from 0.6.1 to 0.6.5

From <bfa4758>

There is a newer version of prettier-plugin-tailwindcss available (0.6.8).

dependabot/npm_and_yarn/multi-1ffb7181fc build(deps): bump micromatch and lint-staged

From <f95daa5>

Bump micromatch to version 4.0.8 (confirmed as latest stable on Oct 17, 2024).

Bump lint-staged to 15.2.9. There is a newer version available (15.2.10), which is applied herein.

snyk-fix-a178732dbebb6661bf0aaebf29ab0f32 fix: package.json & package-lock.json to reduce vulnerabilities

From <e456e05>

Bump @typescript-eslint/parser & @typescript-eslint/eslint-plugin from 7.13.0 to 7.18.0

There is a newer version of @typescript-eslint/parser & @typescript-eslint/eslint-plugin (8.9.0), which were applied herein.

snyk-fix-e6b5f98af68a8a34c582666985ebab4d fix: Dockerfile to reduce vulnerabilities

From <8f86933>

(bumps alpine from node:20.16.0-alpine3.20 to node:20.17.0-alpine3.20)

dependabot/npm_and_yarn/next-14.2.12 build(deps): bump next from 14.2.3 to 14.2.12

From <4f8d893>

There is a newer version of next (14.2.15), which is applied herein.

snyk-fix-1f110fc99dd4cef50d65f92f79d45809 fix: package.json & package-lock.json to reduce vulnerabilities

From <a257f41>

This would bump next from 14.2.3 to 14.2.10 - can be ignored in favour of dependabot/npm_and_yarn/next-14.2.12

snyk-fix-e4e101aaf6d39081ba40be5f31c706c6 fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NEXT-8186172

From <https://github.com/DTS-STN/secure-client-hub/pull/740/commits>

This would bump next from 14.2.3 to 14.2.10 - can be ignored in favour of dependabot/npm_and_yarn/next-14.2.12

tailwindcss upgraded to 3.4.14

fast-glob upgraded to 3.3.2 wherever possible

@jest/code upgraded to 29.7.0 wherever possible

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:20.16.0-alpine3.20 AS base
+FROM node:20.17.0-alpine3.20 AS base
 WORKDIR /base
 COPY package*.json ./
 RUN npm ci && npm cache clean --force
@@ -42,7 +42,7 @@ xargs > \
 chmod 644  /etc/ssl/certs/root.crt && \
 npm run build
 
-FROM node:20.16.0-alpine3.20 AS production
+FROM node:20.17.0-alpine3.20 AS production
 ENV NODE_ENV=production
 
 ARG user=nodeuser