Merge pull request #11 from dappnode/chore/dependency-security-updates

chore: update dependencies and resolve 15 security alerts

Author: 3alpha

.github/workflows/deploy.yml

@@ -14,15 +14,15 @@ jobs:
       packages: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
       - name: Build and push
         uses: docker/build-push-action@v7
         with:

Dockerfile

@@ -12,7 +12,7 @@ RUN yarn run build
 # Re-install only production for final layer
 RUN rm -rf node_modules && yarn install --frozen-lockfile --non-interactive --production=true
 
-FROM certbot/dns-rfc2136:v5.7.0
+FROM certbot/dns-rfc2136:v5.8.0
 
 RUN apk add --no-cache nodejs && mkdir -p /usr/app
 WORKDIR /usr/app

package.json

@@ -29,27 +29,27 @@
   "devDependencies": {
     "@types/express": "^5.0.6",
     "@types/morgan": "^1.9.10",
-    "@types/multer": "^2.0.0",
-    "@types/node": "^24.0.0",
+    "@types/multer": "^2.3.0",
+    "@types/node": "^24.19.2",
     "@types/supertest": "^7.2.1",
-    "@typescript-eslint/eslint-plugin": "^8.64.0",
-    "@typescript-eslint/parser": "^8.64.0",
-    "eslint": "^10.7.0",
-    "prettier": "^3.9.0",
-    "supertest": "^7.2.2",
-    "tsx": "^4.23.1",
+    "@typescript-eslint/eslint-plugin": "^8.72.1",
+    "@typescript-eslint/parser": "^8.72.1",
+    "eslint": "^10.13.0",
+    "prettier": "^3.9.10",
+    "supertest": "^7.3.1",
+    "tsx": "^4.23.15",
     "typescript": "^6.0.3"
   },
   "dependencies": {
-    "dotenv": "^17.4.2",
+    "dotenv": "^18.0.9",
     "ethers": "^6.17.0",
-    "express": "^5.2.1",
-    "express-rate-limit": "^8.5.2",
-    "morgan": "^1.11.0",
-    "multer": "^2.2.0"
+    "express": "^5.3.0",
+    "express-rate-limit": "^8.7.1",
+    "morgan": "^1.12.1",
+    "multer": "^2.5.0"
   },
   "resolutions": {
     "@types/express": "^5.0.6",
-    "@types/node": "^24.0.0"
+    "@types/node": "^24.19.2"
   }
 }