fix(deps): update all dependencies to 9.0.2, 9.5.0, 9.17.0, 12.0.1, 12.0.2, 12.0.11, 12.3.2, 12.0.0, 12.0.12, 12.0.5, 7.0.1, 16.3.3, 26.6.6, 19.3.0, 4.3.3, 5.0.5, v7.0.1, v7.1.0, v7.0.2, v0.36.0, v4.4.1, v0.3.1, v2.1.0, v2.0.0, v1.2.1, 2026.10.29, 16.2.1, v7.4.8, 10.14.0, 30.1.3, 3.2.1, 3.0.3, 4.0.3, 7.0.2, 1.29, 26.12.1, 3.9.10, 25.16.0, v0.7.0, 19.3.1, 6.1.6, 7.18.5, v3.2, v5.0.0, 1.1.2, 26.04, 5.2.0, 6.1.1, 1.2.0, v0.13.0

.github/workflows/analysis.yml

@@ -19,10 +19,10 @@ jobs:
   codeql:
     name: CodeQL
     if: (! github.event.pull_request.draft)
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: github/codeql-action/init@v4
         with:
           languages: javascript
@@ -45,9 +45,9 @@ jobs:
     runs-on: ubuntu-slim
     timeout-minutes: 1
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Run Trivy vulnerability scanner in repo mode
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # 0.35.0
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
         with:
           format: "sarif"
           output: "trivy-results.sarif"
@@ -65,16 +65,16 @@ jobs:
   prettier:
     name: Frontend Prettier Check
     if: (! github.event.pull_request.draft)
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 5
     defaults:
       run:
         working-directory: frontend
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
-          node-version: "22"
+          node-version: "26"
           cache: npm
           cache-dependency-path: frontend/package-lock.json
       - run: npm ci
@@ -83,7 +83,7 @@ jobs:
   backend-prettier:
     name: Backend Prettier Check (${{ matrix.dir }})
     if: (! github.event.pull_request.draft)
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 5
     strategy:
       matrix:
@@ -92,10 +92,10 @@ jobs:
       run:
         working-directory: ${{ matrix.dir }}
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
-          node-version: "22"
+          node-version: "26"
           cache: npm
           cache-dependency-path: ${{ matrix.dir }}/package-lock.json
       - run: npm ci
@@ -104,7 +104,7 @@ jobs:
   tests:
     name: Tests
     if: (! github.event.pull_request.draft)
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 5
     services:
       postgres:
@@ -149,7 +149,7 @@ jobs:
             token: SONAR_TOKEN_PUBLIC
             triggers: ('public')
     steps:
-      - uses: bcgov/action-test-and-analyse@v1.4.0
+      - uses: bcgov/action-test-and-analyse@v2.0.0
         with:
           commands: |
             npm ci
@@ -170,7 +170,7 @@ jobs:
     name: Results
     needs: [codeql, trivy, prettier, backend-prettier, tests]
     if: always() && (! failure())
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 1
     steps:
       - run: echo "Success!"

.github/workflows/bceid-smoke-tests.yml

@@ -35,7 +35,7 @@ jobs:
     outputs:
       target: ${{ steps.env.outputs.target }}
       environment: ${{ steps.env.outputs.environment }}
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-26.04
     steps:
       - name: env
         id: env
@@ -56,7 +56,7 @@ jobs:
     name: ${{matrix.test}}-${{matrix.role}}-${{matrix.browser}}
     needs: [vars]
     environment: ${{needs.vars.outputs.environment}}
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-26.04
     defaults:
       run:
         working-directory: tests/
@@ -80,7 +80,7 @@ jobs:
 
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Load credentials for ${{ matrix.role }}
         id: creds
@@ -90,7 +90,7 @@ jobs:
           echo "CYPRESS_PASSWORD=${{ secrets[format('PASSWORD_{0}', matrix.role)] }}" >> $GITHUB_ENV
 
       - name: Run Cypress tests for ${{ matrix.role }}
-        uses: cypress-io/github-action@v6.9.2
+        uses: cypress-io/github-action@v7.4.8
         env:
           CYPRESS_baseUrl: https://${{ github.event.repository.name }}-${{ needs.vars.outputs.target || 'test' }}-frontend.apps.gold.devops.gov.bc.ca/
           CYPRESS_wait_time: 2000
@@ -103,14 +103,14 @@ jobs:
           spec: cypress/e2e/smoke/${{matrix.test}}
           working-directory: tests
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         if: failure() || inputs.show_artifact
         with:
           name: ${{matrix.test}}-${{matrix.role}}-${{matrix.browser}} screenshot
           path: tests/cypress/screenshots/
           if-no-files-found: ignore # 'warn' or 'error' are also available, defaults to `warn`
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         if: failure() || inputs.show_artifact
         with:
           name: ${{matrix.test}}-${{matrix.role}}-${{matrix.browser}} video

.github/workflows/deploy.yml

@@ -115,10 +115,10 @@ jobs:
   deploys:
     name: Helm
     environment: ${{ inputs.environment }}
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Check Deployment Triggers
         id: triggers
         run: |
@@ -148,7 +148,7 @@ jobs:
           # If here skip deployment
           echo "No triggers have fired, deployment skipped"
 
-      - uses: redhat-actions/openshift-tools-installer@v1
+      - uses: redhat-actions/openshift-tools-installer@v3
         if: steps.triggers.outputs.triggered == 'true'
         with:
           oc: "4"

.github/workflows/e2e-regression-tests.yml

@@ -35,7 +35,7 @@ jobs:
     outputs:
       target: ${{ steps.env.outputs.target }}
       environment: ${{ steps.env.outputs.environment }}
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-26.04
     steps:
       - name: env
         id: env

.github/workflows/idir-smoke-tests.yml

@@ -35,7 +35,7 @@ jobs:
     outputs:
       target: ${{ steps.env.outputs.target }}
       environment: ${{ steps.env.outputs.environment }}
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-26.04
     steps:
       - name: env
         id: env
@@ -57,7 +57,7 @@ jobs:
     name: ${{matrix.test}}-${{matrix.role}}-${{matrix.browser}}
     needs: [vars]
     environment: ${{needs.vars.outputs.environment}}
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-26.04
     defaults:
       run:
         working-directory: tests/
@@ -79,7 +79,7 @@ jobs:
 
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Load credentials for ${{ matrix.role }}
         id: creds
@@ -89,7 +89,7 @@ jobs:
           echo "CYPRESS_PASSWORD=${{ secrets[format('PASSWORD_{0}', matrix.role)] }}" >> $GITHUB_ENV
 
       - name: Run Cypress tests for ${{ matrix.role }}
-        uses: cypress-io/github-action@v6.9.2
+        uses: cypress-io/github-action@v7.4.8
         env:
           CYPRESS_baseUrl: https://${{ github.event.repository.name }}-${{ needs.vars.outputs.target || 'test' }}-frontend.apps.gold.devops.gov.bc.ca/
           CYPRESS_wait_time: 2000
@@ -102,14 +102,14 @@ jobs:
           spec: cypress/e2e/smoke/${{matrix.test}}
           working-directory: tests
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         if: failure() || inputs.show_artifact
         with:
           name: ${{matrix.test}}-${{matrix.role}}-${{matrix.browser}} screenshot
           path: tests/cypress/screenshots/
           if-no-files-found: ignore # 'warn' or 'error' are also available, defaults to `warn`
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         if: failure() || inputs.show_artifact
         with:
           name: ${{matrix.test}}-${{matrix.role}}-${{matrix.browser}} video

.github/workflows/loadtest.yml

@@ -29,13 +29,13 @@ jobs:
   loadtests:
     name: Loadtests
     environment: ${{ inputs.environment }}
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 60
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Run All JMeter Tests In tests Folder
-        uses: rbhadti94/apache-jmeter-action@v0.5.0
+        uses: rbhadti94/apache-jmeter-action@v0.7.0
         with:
           testFilePath: loadtests
           outputReportsFolder: loadtests/results
@@ -48,7 +48,7 @@ jobs:
             -JVEHICLES_API_URL=${{inputs.vehicles_api_url}}
             -JRESULTS_DIR=loadtest/results
 
-      - uses: actions/upload-artifact@v4.3.6
+      - uses: actions/upload-artifact@v7.0.2
         with:
           name: jmeter-test-results
           path: loadtests/results

.github/workflows/merge.yml

@@ -23,14 +23,14 @@ jobs:
     name: Set Variables
     outputs:
       pr: ${{ steps.pr.outputs.pr }}
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 1
     steps:
       # Get PR number for squash merges to main
       - name: Get PR Number From Event
         if: github.event_name == 'push'
         id: pr_no
-        uses: bcgov/action-get-pr@v0.1.0
+        uses: bcgov/action-get-pr@v0.3.1
       - name: PR Number
         id: pr
         run: echo pr=${{ steps.pr_no.outputs.pr || inputs.pr}} >> $GITHUB_OUTPUT
@@ -49,15 +49,15 @@ jobs:
   promote-images-test:
     name: Promote Images - Test
     needs: [deploys-test-gold, vars]
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-26.04
     permissions:
       packages: write
     strategy:
       matrix:
         package: [dops, vehicles, frontend, scheduler, policy, public]
     timeout-minutes: 2
     steps:
-      - uses: shrink/actions-docker-registry-tag@v4
+      - uses: shrink/actions-docker-registry-tag@v5
         with:
           registry: ghcr.io
           repository: ${{ github.repository }}/${{ matrix.package }}

.github/workflows/notifications.yml

@@ -7,7 +7,7 @@ on:
 jobs:
   notify-teams-pr:
     if: github.event.workflow_run.event == 'pull_request'
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-26.04
     steps:
       - uses: simbo/msteams-message-card-action@latest
         with:
@@ -27,7 +27,7 @@ jobs:
                 text: PR Opened
   notify-teams-merged:
     if: github.event.workflow_run.event == 'push'
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-26.04
     steps:
       - name: PR Number
         id: pr

.github/workflows/pr-close.yml

@@ -13,7 +13,7 @@ jobs:
 
   cleanup-gold:
     name: Cleanup OpenShift and/or Promote Images
-    uses: bcgov/quickstart-openshift-helpers/.github/workflows/.pr-close.yml@v1.0.0 # v1.0.0
+    uses: bcgov/quickstart-openshift-helpers/.github/workflows/.pr-close.yml@v1.2.1
     secrets:
       oc_namespace: ${{ secrets.OC_NAMESPACE }}
       oc_token: ${{ secrets.OC_TOKEN }}
@@ -25,7 +25,7 @@ jobs:
 
   cleanup-golddr:
     name: Cleanup OpenShift and/or Promote Images
-    uses: bcgov/quickstart-openshift-helpers/.github/workflows/.pr-close.yml@v1.0.0 # v1.0.0
+    uses: bcgov/quickstart-openshift-helpers/.github/workflows/.pr-close.yml@v1.2.1
     secrets:
       oc_namespace: ${{ secrets.OC_NAMESPACE }}
       oc_token: ${{ secrets.OC_TOKEN }}

.github/workflows/pr-open.yml

@@ -16,12 +16,12 @@ jobs:
     env:
       DOMAIN: apps.gold.devops.gov.bc.ca
       PREFIX: ${{ github.event.repository.name }}-${{ github.event.number }}
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-26.04
     permissions:
       pull-requests: write
     timeout-minutes: 1
     steps:
-      - uses: bcgov/action-pr-description-add@v1.1.2
+      - uses: bcgov/action-pr-description-add@v2.1.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           add_markdown: |
@@ -48,25 +48,25 @@ jobs:
     name: Set Variables
     outputs:
       pr: ${{ steps.pr.outputs.pr }}
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-26.04
     steps:
       - name: PR Number
         id: pr
-        uses: bcgov/action-get-pr@v0.0.1
+        uses: bcgov/action-get-pr@v0.3.1
 
   # https://github.com/bcgov/action-builder-ghcr
   builds:
     name: Builds
     needs: [vars]
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-26.04
     permissions:
       packages: write
     strategy:
       matrix:
         package: [dops, vehicles, frontend, scheduler, policy, public]
     timeout-minutes: 10
     steps:
-      - uses: bcgov/action-builder-ghcr@v2.2.0
+      - uses: bcgov/action-builder-ghcr@v4.4.1
         with:
           #keep_versions: 50
           package: ${{ matrix.package }}