Skip to content

[PRM-667] Outdated and Vulnerable Dependencies for JavaScript services #369

[PRM-667] Outdated and Vulnerable Dependencies for JavaScript services

[PRM-667] Outdated and Vulnerable Dependencies for JavaScript services #369

Triggered via pull request March 12, 2026 17:23
Status Success
Total duration 7m 29s
Artifacts

service-ci.yml

on: pull_request
Get change files
6s
Get change files
EHR Out Service CI  /  Lint, Unit, and Integration
1m 42s
EHR Out Service CI / Lint, Unit, and Integration
EHR Repo CI  /  Lint, Unit, and Integration
1m 30s
EHR Repo CI / Lint, Unit, and Integration
EHR Transfer Service CI  /  Run Tests
4m 7s
EHR Transfer Service CI / Run Tests
GP2GP Messenger CI  /  Lint, Unit, and Integration
1m 44s
GP2GP Messenger CI / Lint, Unit, and Integration
MESH Forwarder CI  /  Run Tests
20s
MESH Forwarder CI / Run Tests
NEMs Event Processor CI  /  Run Tests
2m 14s
NEMs Event Processor CI / Run Tests
PDS Adaptor CI  /  Run Tests
1m 8s
PDS Adaptor CI / Run Tests
Re-registration Service CI  /  Run Tests
4m 14s
Re-registration Service CI / Run Tests
Suspension Service CI  /  Run Tests
4m 33s
Suspension Service CI / Run Tests
EHR Out Service CI  /  Build and Publish
1m 4s
EHR Out Service CI / Build and Publish
EHR Repo CI  /  Build and Publish
53s
EHR Repo CI / Build and Publish
EHR Transfer Service CI  /  Build & Publish
2m 3s
EHR Transfer Service CI / Build & Publish
GP2GP Messenger CI  /  Build and Publish
1m 6s
GP2GP Messenger CI / Build and Publish
MESH Forwarder CI  /  build-and-publish-service
45s
MESH Forwarder CI / build-and-publish-service
NEMs Event Processor CI  /  Build & Publish
1m 32s
NEMs Event Processor CI / Build & Publish
PDS Adaptor CI  /  Build & Publish
1m 3s
PDS Adaptor CI / Build & Publish
Re-registration Service CI  /  Build & Publish
1m 2s
Re-registration Service CI / Build & Publish
Suspension Service CI  /  Build & Publish
1m 5s
Suspension Service CI / Build & Publish
EHR Out Service CI  /  ...  /  Promote images from source to current environment
0s
EHR Out Service CI / Deploy Infrastructure / Promote images from source to current environment
EHR Repo CI  /  ...  /  Promote images from source to current environment
EHR Repo CI / Deploy Infrastructure / Promote images from source to current environment
EHR Transfer Service CI  /  ...  /  Promote images from source to current environment
0s
EHR Transfer Service CI / Deploy Infrastructure / Promote images from source to current environment
GP2GP Messenger CI  /  ...  /  Promote images from source to current environment
0s
GP2GP Messenger CI / Deploy Infrastructure / Promote images from source to current environment
MESH Forwarder CI  /  ...  /  Promote images from source to current environment
MESH Forwarder CI / Deploy Infrastructure / Promote images from source to current environment
NEMs Event Processor CI  /  ...  /  Promote images from source to current environment
0s
NEMs Event Processor CI / Deploy Infrastructure / Promote images from source to current environment
PDS Adaptor CI  /  ...  /  Promote images from source to current environment
0s
PDS Adaptor CI / Deploy Infrastructure / Promote images from source to current environment
Re-registration Service CI  /  ...  /  Promote images from source to current environment
0s
Re-registration Service CI / Deploy Infrastructure / Promote images from source to current environment
Suspension Service CI  /  ...  /  Promote images from source to current environment
0s
Suspension Service CI / Deploy Infrastructure / Promote images from source to current environment
EHR Out Service CI  /  ...  /  deploy_stack
44s
EHR Out Service CI / Deploy Infrastructure / deploy_stack
EHR Repo CI  /  ...  /  deploy_stack
26s
EHR Repo CI / Deploy Infrastructure / deploy_stack
EHR Transfer Service CI  /  ...  /  deploy_stack
57s
EHR Transfer Service CI / Deploy Infrastructure / deploy_stack
GP2GP Messenger CI  /  ...  /  deploy_stack
37s
GP2GP Messenger CI / Deploy Infrastructure / deploy_stack
MESH Forwarder CI  /  ...  /  deploy_stack
MESH Forwarder CI / Deploy Infrastructure / deploy_stack
NEMs Event Processor CI  /  ...  /  deploy_stack
35s
NEMs Event Processor CI / Deploy Infrastructure / deploy_stack
PDS Adaptor CI  /  ...  /  deploy_stack
26s
PDS Adaptor CI / Deploy Infrastructure / deploy_stack
Re-registration Service CI  /  ...  /  deploy_stack
28s
Re-registration Service CI / Deploy Infrastructure / deploy_stack
Suspension Service CI  /  ...  /  deploy_stack
32s
Suspension Service CI / Deploy Infrastructure / deploy_stack
End to End  /  End to End Test
End to End / End to End Test
Fit to window
Zoom out
Zoom in

Annotations

20 warnings
MESH Forwarder CI / build-and-publish-service
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: aws-actions/amazon-ecr-login@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
EHR Repo CI / Lint, Unit, and Integration
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/setup-node@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
EHR Out Service CI / Lint, Unit, and Integration
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/setup-node@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
GP2GP Messenger CI / Lint, Unit, and Integration
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/setup-node@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
PDS Adaptor CI / Build & Publish
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: aws-actions/amazon-ecr-login@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
EHR Repo CI / Build and Publish
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/setup-node@v4, aws-actions/amazon-ecr-login@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
PDS Adaptor CI / Deploy Infrastructure / deploy_stack
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: hashicorp/setup-terraform@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
EHR Out Service CI / Build and Publish
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/setup-node@v4, aws-actions/amazon-ecr-login@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
GP2GP Messenger CI / Build and Publish
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/setup-node@v4, aws-actions/amazon-ecr-login@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
EHR Repo CI / Deploy Infrastructure / deploy_stack
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: hashicorp/setup-terraform@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
GP2GP Messenger CI / Deploy Infrastructure / deploy_stack
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: hashicorp/setup-terraform@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
EHR Out Service CI / Deploy Infrastructure / deploy_stack
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: hashicorp/setup-terraform@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
NEMs Event Processor CI / Build & Publish
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: aws-actions/amazon-ecr-login@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
NEMs Event Processor CI / Deploy Infrastructure / deploy_stack
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: hashicorp/setup-terraform@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Re-registration Service CI / Build & Publish
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: aws-actions/amazon-ecr-login@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Suspension Service CI / Build & Publish
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: aws-actions/amazon-ecr-login@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Re-registration Service CI / Deploy Infrastructure / deploy_stack
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: hashicorp/setup-terraform@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
EHR Transfer Service CI / Build & Publish
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: aws-actions/amazon-ecr-login@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Suspension Service CI / Deploy Infrastructure / deploy_stack
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: hashicorp/setup-terraform@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
EHR Transfer Service CI / Deploy Infrastructure / deploy_stack
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: hashicorp/setup-terraform@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/