Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented May 27, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
testcontainers ^10.0.0 -> ^11.0.0 age adoption passing confidence

Release Notes

testcontainers/testcontainers-node (testcontainers)

v11.9.0

Compare Source

Changes

🚀 Features

📦 Dependency Updates

v11.8.1

Compare Source

Changes

🐛 Bug Fixes

📦 Dependency Updates

v11.8.0

Compare Source

Changes

🚀 Features

📦 Dependency Updates

v11.7.2

Compare Source

Changes

🧹 Maintenance

📦 Dependency Updates

v11.7.1

Compare Source

Changes

🐛 Bug Fixes

v11.7.0

Compare Source

Changes

🚀 Features

🐛 Bug Fixes

📦 Dependency Updates

v11.6.0

Compare Source

Changes

🚀 Features

📖 Documentation

📦 Dependency Updates

v11.5.1

Compare Source

Changes

🐛 Bug Fixes

🧹 Maintenance

📦 Dependency Updates

v11.5.0

Compare Source

Changes

🚀 Features

🐛 Bug Fixes

🧹 Maintenance

📦 Dependency Updates

v11.4.0

Compare Source

Changes

🚀 Features

🐛 Bug Fixes

v11.3.2

Compare Source

Changes

📦 Dependency Updates

v11.3.1

Compare Source

Changes

🐛 Bug Fixes

v11.3.0

Compare Source

Changes

🚀 Features

🧹 Maintenance

📦 Dependency Updates

v11.2.1

Compare Source

Changes

🐛 Bug Fixes

v11.2.0

Compare Source

Changes

🚀 Features

🧹 Maintenance

📦 Dependency Updates

v11.1.0

Compare Source

Changes

🚀 Features

v11.0.3

Compare Source

Changes

🐛 Bug Fixes

📦 Dependency Updates

v11.0.2

Compare Source

Changes

🐛 Bug Fixes

v11.0.1

Compare Source

🐛 Bug Fixes

📦 Dependency Updates

v11.0.0

Compare Source

🚨 Breaking Changes


1. Minimum Node engine requirement set to 20.


2. Default module images have been removed.

Previously:

await new PostgreSqlContainer().start();

Now:

await new PostgreSqlContainer("postgres:13.3-alpine").start();

For convenience, here is a table of all the previous default values, which you could just copy/paste to get back working again, but have a think about which version you actually need. Some of these are quite old and need to be updated.

Default module images
Module Image
arangodb arangodb:3.10.0
azurecosmosdb mcr.microsoft.com/cosmosdb/linux/azure-cosmos-emulator:vnext-EN20250228
azurite mcr.microsoft.com/azure-storage/azurite:3.33.0
cassandra cassandra:5.0.2
chromadb chromadb/chroma:0.6.3
clickhouse clickhouse/clickhouse-server:25.3-alpine
cockroachdb cockroachdb/cockroach:v24.3.5
couchbase couchbase/server:6.5.1
elasticsearch elasticsearch:7.17.7
etcd quay.io/coreos/etcd:v3.6.0
eventstoredb eventstore/eventstore:24.10
gcloud gcr.io/google.com/cloudsdktool/cloud-sdk:517.0.0-emulators
hivemq hivemq/hivemq-ce:2023.5
k3s rancher/k3s:v1.31.2-k3s1
kafka confluentinc/cp-kafka:7.2.2
localstack localstack/localstack:2.2.0
mariadb mariadb:11.5.2
minio minio/minio:RELEASE.2024-12-13T22-19-12Z
mockserver mockserver/mockserver:5.15.0
mongodb mongo:4.0.1
mssqlserver mcr.microsoft.com/mssql/server:2022-CU13-ubuntu-22.04
mysql mysql:8.0.31
nats nats:2.8.4-alpine
neo4j neo4j:4.4.12
ollama ollama/ollama:0.1.44
postgresql postgres:13.3-alpine
qdrant qdrant/qdrant:v1.13.4
rabbitmq rabbitmq:3.12.11-management-alpine
redis redis:7.2
redpanda docker.redpanda.com/redpandadata/redpanda:v23.3.10
scylladb scylladb/scylla:6.2.0
selenium selenium/standalone-chrome:112.0
toxiproxy ghcr.io/shopify/toxiproxy:2.11.0
valkey valkey/valkey:8.0
weaviate semitechnologies/weaviate:1.24.5

3. Dropped support for Docker Compose v1 (EOL July 2023).


4. Docker compose version no longer available via ComposeClient

const { compose } = await getContainerRuntimeClient();
compose.version; // no longer available

5. Container stop timeouts have changed from seconds to milliseconds

Previously:

await container.stop({ timeout: 10 }); // 10 seconds

Now:

await container.stop({ timeout: 10_000 }); // 10 seconds

6. EventStoreDB has been renamed to KurrentDB

Previously:

import { EventStoreDBContainer } from "@​testcontainers/eventstoredb";
new EventStoreDBContainer("eventstore/eventstore:24.10").start();

Now:

import { KurrentDbContainer } from "@​testcontainers/kurrentdb";
new KurrentDbContainer("kurrentplatform/kurrentdb:25.0").start();

  1. RandomUniquePortGenerator replaced by RandomPortGenerator

Changes

🧹 Maintenance

📦 Dependency Updates


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@socket-security
Copy link

socket-security bot commented May 27, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedtestcontainers@​10.28.0 ⏵ 11.9.0961008296 +2100

View full report

@renovate renovate bot force-pushed the renovate/testcontainers-11.x branch from 5aeff9d to c67bb4e Compare May 28, 2025 01:32
@renovate renovate bot requested a review from bryopsida May 28, 2025 05:21
@renovate renovate bot force-pushed the renovate/testcontainers-11.x branch 4 times, most recently from d6fe422 to 57d7b0f Compare May 31, 2025 03:39
@renovate renovate bot force-pushed the renovate/testcontainers-11.x branch 6 times, most recently from a2bfece to 50d0eca Compare June 12, 2025 14:57
@renovate renovate bot force-pushed the renovate/testcontainers-11.x branch 3 times, most recently from b744112 to f3550a2 Compare June 21, 2025 11:34
@renovate renovate bot force-pushed the renovate/testcontainers-11.x branch 8 times, most recently from 254f577 to bc02281 Compare July 2, 2025 04:36
@renovate renovate bot force-pushed the renovate/testcontainers-11.x branch from bc02281 to 3987a37 Compare July 3, 2025 10:05
@renovate renovate bot force-pushed the renovate/testcontainers-11.x branch 2 times, most recently from 98d3b33 to 3996e31 Compare July 15, 2025 18:31
@renovate renovate bot force-pushed the renovate/testcontainers-11.x branch 2 times, most recently from b9d31af to d8863b6 Compare July 19, 2025 11:41
@renovate renovate bot force-pushed the renovate/testcontainers-11.x branch 4 times, most recently from cd62603 to a203e03 Compare September 4, 2025 17:23
@renovate renovate bot force-pushed the renovate/testcontainers-11.x branch 10 times, most recently from 37f1962 to 760b75b Compare September 19, 2025 17:15
@renovate renovate bot force-pushed the renovate/testcontainers-11.x branch 5 times, most recently from 16fa8db to 00d7c31 Compare September 30, 2025 02:29
@renovate renovate bot force-pushed the renovate/testcontainers-11.x branch 4 times, most recently from 0c4d19d to 5c79210 Compare October 3, 2025 12:27
@renovate renovate bot force-pushed the renovate/testcontainers-11.x branch from 5c79210 to e165689 Compare October 22, 2025 13:47
@renovate renovate bot force-pushed the renovate/testcontainers-11.x branch 2 times, most recently from a4b0117 to 0ebcb25 Compare November 11, 2025 18:32
@renovate renovate bot force-pushed the renovate/testcontainers-11.x branch from 0ebcb25 to 0a73503 Compare November 18, 2025 12:34
@renovate renovate bot force-pushed the renovate/testcontainers-11.x branch from 0a73503 to 9e783fa Compare November 27, 2025 21:23
@github-actions
Copy link

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/@types/dockerode 3.3.47 🟢 7
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 9Found 28/29 approved changesets -- score normalized to 9
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
npm/debug 4.4.3 🟢 4.5
Details
CheckScoreReason
Code-Review🟢 3Found 10/30 approved changesets -- score normalized to 3
Maintained🟢 81 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 8
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ -1No tokens found
Dangerous-Workflow⚠️ -1no workflows found
Pinned-Dependencies⚠️ -1no dependencies found
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/docker-compose 1.3.0 🟢 3.4
Details
CheckScoreReason
Maintained🟢 34 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Code-Review🟢 3Found 5/16 approved changesets -- score normalized to 3
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Vulnerabilities⚠️ 016 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/dockerode 4.0.9 🟢 4.8
Details
CheckScoreReason
Code-Review🟢 3Found 5/14 approved changesets -- score normalized to 3
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 66 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Vulnerabilities🟢 91 existing vulnerabilities detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST🟢 3SAST tool is not run on all commits -- score normalized to 3
npm/ms 2.1.3 🟢 6.3
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 10all changesets reviewed
Maintained🟢 108 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy🟢 10security policy file detected
Vulnerabilities🟢 82 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/tar-fs 3.1.1 🟢 4.2
Details
CheckScoreReason
Code-Review⚠️ 1Found 3/30 approved changesets -- score normalized to 1
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained⚠️ 12 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/tar-fs 2.1.4 🟢 4.2
Details
CheckScoreReason
Code-Review⚠️ 1Found 3/30 approved changesets -- score normalized to 1
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained⚠️ 12 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/testcontainers 11.9.0 🟢 5.4
Details
CheckScoreReason
Code-Review🟢 4Found 7/17 approved changesets -- score normalized to 4
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Fuzzing⚠️ 0project is not fuzzed
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
npm/tmp 0.2.5 🟢 3.4
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 2Found 3/14 approved changesets -- score normalized to 2
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Vulnerabilities⚠️ 28 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/undici 7.16.0 🟢 8.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Maintained🟢 1030 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Security-Policy🟢 9security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 8binaries present in source code
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Packaging🟢 10packaging workflow detected
Fuzzing🟢 10project is fuzzed
SAST🟢 10SAST tool is run on all commits
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 79 contributing companies or organizations

Scanned Files

  • package-lock.json

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant