Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update python docker tag to v3.14.4
• fix(deps): update java dependencies to v3.34.2 (io.quarkus.platform:quarkus-maven-plugin, io.quarkus.platform:quarkus-bom)
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency lodash to v4.18.1 [security]
• chore(deps): update shrink/actions-docker-registry-tag action to v5
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

docker-compose.yml (5)

• postgres 15 → [Updates: 18]
• flyway/flyway 12-alpine
• python 3.11-slim-buster@sha256:c46b0ae5728c2247b99903098ade3176a58e274d9c7d2efeaaab3e0621a53935
• python 3.14
• python 3.14

dockerfile (3)

backend-java/Dockerfile (1)

• quay.io/quarkus/quarkus-micro-image 2.0

backend-py/db/Dockerfile (1)

• flyway/flyway 12-alpine

backend-py/Dockerfile (2)

• python 3.14.3-slim-bookworm → [Updates: 3.14.4-slim-bookworm]
• python 3.14.3-slim-bookworm → [Updates: 3.14.4-slim-bookworm]

github-actions (7)

.github/workflows/.deploy.yml (6)

• bcgov/action-crunchy v2.0.0@2ccf22a61189e72f82728f0cd5d4b2bb9b629ee6
• bcgov/action-get-pr v0.1.1@bfa713a9ab410c0f0c13126c35983934fc80d15b
• bcgov/action-oc-runner v1.4.1@d2fc921aaa9d70684c186dbb7754e6985d44d86f
• actions/checkout v6
• bcgov/action-oc-runner v1.4.1@d2fc921aaa9d70684c186dbb7754e6985d44d86f
• ubuntu 24.04

.github/workflows/analysis.yml (14)

• actions/checkout v6
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1
• github/codeql-action v4
• actions/checkout v6
• actions/setup-java v5
• actions/cache v5
• actions/checkout v6
• actions/setup-python v6
• actions/cache v5
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• python 3.14
• ubuntu 24.04

.github/workflows/merge.yml (7)

• bcgov/action-get-pr v0.1.1@bfa713a9ab410c0f0c13126c35983934fc80d15b
• actions/checkout v6
• actions/cache v5
• shrink/actions-docker-registry-tag v4@f04afd0559f66b288586792eb150f45136a927fa → [Updates: v5]
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/pentests.yml (2)

• zaproxy/action-full-scan v0.13.0@3c58388149901b9a03b7718852c5ba889646c27c
• ubuntu 24.04

.github/workflows/pr-close.yml (3)

• bcgov/quickstart-openshift-helpers v1.1.0@ca6579bdadf383a2513397081f963889b92823a4
• bcgov/action-crunchy v2.0.0@2ccf22a61189e72f82728f0cd5d4b2bb9b629ee6
• ubuntu 24.04

.github/workflows/pr-open.yml (3)

• bcgov/action-builder-ghcr v4.2.1@2b24ac7f95e6a019064151498660437cca3202c5
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/pr-validate.yml (2)

• bcgov/quickstart-openshift-helpers v1.1.0@ca6579bdadf383a2513397081f963889b92823a4
• ubuntu 24.04

maven (1)

backend-java/pom.xml (7)

• io.quarkus.platform:quarkus-bom 3.32.4 → [Updates: 3.34.2]
• org.instancio:instancio-junit 5.5.1
• net.datafaker:datafaker 2.5.4
• io.quarkus.platform:quarkus-maven-plugin 3.32.4 → [Updates: 3.34.2]
• org.apache.maven.plugins:maven-compiler-plugin 3.15.0
• org.apache.maven.plugins:maven-surefire-plugin 3.5.5
• org.apache.maven.plugins:maven-failsafe-plugin 3.5.5

maven-wrapper (3)

backend-java/.mvn/wrapper/maven-wrapper.properties (1)

• maven 3.9.14

backend-java/mvnw (1)

• maven-wrapper 3.3.4

backend-java/mvnw.cmd (1)

• maven-wrapper 3.3.4

npm (1)

integration-tests/package.json (4)

• axios ^1.6.8
• dotenv ^17.0.0
• js-yaml ^4.1.0
• lodash ^4.17.21 → [Updates: ^4.17.21]

pep621 (1)

backend-py/pyproject.toml (13)

• python >=3.13
• fastapi >=0.116.0
• uvicorn >=0.35.0
• sqlalchemy >=2.0.32
• pydantic >=2.12.0
• requests >=2.31.0
• psycopg2-binary >=2.9.9
• pydantic-settings >=2.4.0
• structlog >=25.4.0
• ruff >=0.12.0
• pytest >=8.0.0
• pytest-cov >=6.0.0
• pytest-watch >=4.2.0

renovate-config-presets (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository