Skip to content

CCM-17440: Fix dependabot issues #2684

CCM-17440: Fix dependabot issues

CCM-17440: Fix dependabot issues #2684

Triggered via pull request April 30, 2026 09:57
Status Failure
Total duration 3m 57s
Artifacts 4

cicd-1-pull-request.yaml

on: pull_request
Set CI/CD metadata
7s
Set CI/CD metadata
Commit stage  /  Scan secrets
15s
Commit stage / Scan secrets
Commit stage  /  Check file format
6s
Commit stage / Check file format
Commit stage  /  Check Markdown format
5s
Commit stage / Check Markdown format
Commit stage  /  Check English usage
7s
Commit stage / Check English usage
Commit stage  /  Check TODO usage
5s
Commit stage / Check TODO usage
Commit stage  /  Count lines of code
10s
Commit stage / Count lines of code
Commit stage  /  Scan dependencies
49s
Commit stage / Scan dependencies
Commit stage  /  Detect Terraform Changes
5s
Commit stage / Detect Terraform Changes
Commit stage  /  Run terraform-docs
0s
Commit stage / Run terraform-docs
Commit stage  /  Lint Terraform
0s
Commit stage / Lint Terraform
Test stage  /  Detect Schema Changes
6s
Test stage / Detect Schema Changes
Test stage  /  Unit tests
2m 46s
Test stage / Unit tests
Test stage  /  Check generated dependencies
0s
Test stage / Check generated dependencies
Test stage  /  Perform static analysis
0s
Test stage / Perform static analysis
Build stage  /  Detect Documentation Changes
Build stage / Detect Documentation Changes
Build stage  /  Build Docs
Build stage / Build Docs
Trigger dynamic environment creation
Trigger dynamic environment creation
Publish stage  /  Publish packages
Publish stage / Publish packages
Acceptance stage  /  Accessibility test
Acceptance stage / Accessibility test
Acceptance stage  /  Integration test
Acceptance stage / Integration test
Acceptance stage  /  Load test
Acceptance stage / Load test
Acceptance stage  /  Security test
Acceptance stage / Security test
Acceptance stage  /  UI performance test
Acceptance stage / UI performance test
Acceptance stage  /  UI test
Acceptance stage / UI test
Fit to window
Zoom out
Zoom in

Annotations

11 errors and 10 warnings
Test stage / Linting
Process completed with exit code 2.
Test stage / Linting
utils#lint: command (/home/runner/work/nhs-notify-digital-letters/nhs-notify-digital-letters/utils/utils) /opt/hostedtoolcache/node/24.10.0/x64/bin/npm run lint exited (1)
Test stage / Linting: utils/utils/src/__tests__/reporting/report-service.test.ts#L24
This assertion is unnecessary since the receiver accepts the original type of the expression
Test stage / Linting: utils/utils/src/__tests__/reporting/report-service.test.ts#L19
This assertion is unnecessary since the receiver accepts the original type of the expression
Test stage / Contract tests
Process completed with exit code 2.
Test stage / Contract tests
nhs-notify-digital-letters-pact-tests#test:contract: command (/home/runner/work/nhs-notify-digital-letters/nhs-notify-digital-letters/tests/pact-tests) /opt/hostedtoolcache/node/24.10.0/x64/bin/npm run test:contract exited (1)
Test stage / Typecheck
Process completed with exit code 2.
Test stage / Typecheck
typescript-schema-generator#typecheck: command (/home/runner/work/nhs-notify-digital-letters/nhs-notify-digital-letters/src/typescript-schema-generator) /opt/hostedtoolcache/node/24.10.0/x64/bin/npm run typecheck exited (2)
Test stage / Typecheck
Option 'baseUrl' is deprecated and will stop functioning in TypeScript 7.0. Specify compilerOption '"ignoreDeprecations": "6.0"' to silence this error.
Test stage / Unit tests
Process completed with exit code 2.
Test stage / Unit tests
utils#test:unit: command (/home/runner/work/nhs-notify-digital-letters/nhs-notify-digital-letters/utils/utils) /opt/hostedtoolcache/node/24.10.0/x64/bin/npm run test:unit exited (1)
Test stage / Detect Schema Changes
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Test stage / Linting: utils/utils/src/event-publisher/event-publisher.ts#L101
Function Call Object Injection Sink
Test stage / Linting: utils/utils/src/dynamodb/delete-dynamo-batch.ts#L47
Generic Object Injection Sink
Test stage / Linting: utils/utils/src/dynamodb/delete-dynamo-batch.ts#L34
Generic Object Injection Sink
Test stage / Linting: utils/utils/src/config-reader.ts#L69
Variable Assigned to Object Injection Sink
Test stage / Linting: utils/utils/src/cache/cache.ts#L52
Generic Object Injection Sink
Test stage / Linting: utils/utils/src/cache/cache.ts#L33
Variable Assigned to Object Injection Sink
Test stage / Contract tests
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Test stage / Unit tests
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
lines-of-code-report.json.zip
966 Bytes
sha256:063bd678079e4b3ade10bea29e8a3458a662867014f94b06fb178672a27cd52b
sbom-repository-report.json.zip
375 KB
sha256:e2b77bb6e0e267ca7497ef9428bb88954cdf2e9eff235becec0a2ad4de2f01ab
unit-tests
36 KB
sha256:96738c4101af913e8e87734c2786e8be7f028676579cfa0970d634c10b550ad0
vulnerabilities-repository-report.json.zip
2.46 KB
sha256:f507ca399949854dd0f156698c0e45051076c79f3b04d4f63f423e5f7f5f39c4