Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

These branches will be created by Renovate only once you click their checkbox below.

• chore(deps): update dependency aws-lambda-powertools to v3
• chore(deps): update dependency notifications-python-client to v10
• chore(deps): update mcr.microsoft.com/vscode/devcontainers/python docker tag to v1
• chore(deps): update postgres docker tag to v17
• 🔐 Create all pending approval PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update localstack/localstack docker digest to 676ce7c
• chore(deps): update postgres:15.8 docker digest to eb3747f
• chore(deps): update all patch dependencies (boto3, locust, pydantic)
• chore(deps): update cds-snc/terraform-plan action to v3.3.0
• chore(deps): update dependency alembic to v1.14.0
• chore(deps): update terraform github.com/cds-snc/terraform-modules to v10
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• chore(deps): update dependency pydantic to v2

Detected dependencies

docker-compose

.devcontainer/docker-compose.yml

• postgres 15.8@sha256:491aea6e557dea673887a9008f872225b667d0f54223a10e085059a239459ccb
• postgres 15.8@sha256:491aea6e557dea673887a9008f872225b667d0f54223a10e085059a239459ccb
• localstack/localstack sha256:54259eb9b9314f5f2280cada9be28c379142acadef21632ab1c0b0af22f41ba9

dockerfile

.devcontainer/Dockerfile

• mcr.microsoft.com/vscode/devcontainers/python 0-3.9

api/Dockerfile

• python 3.9-slim-buster@sha256:320a7a4250aba4249f458872adecf92eea88dc6abd2d76dc5c0f01cac9b53990

github-actions

.github/workflows/bandith_security_scan.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/build_and_push.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• aws-actions/configure-aws-credentials v4.0.2@e3dd6a429d7300a6a4c196c26e071d42e0343502
• aws-actions/amazon-ecr-login v2.0.1@062b18b96a7aff071d4dc91bc00c4c1a7945b076
• cds-snc/security-tools v3.2.0@34794baf2af592913bb5b51d8df4f8d0acc49b6f

.github/workflows/ci_build_continers.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/ci_code.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-python v5.3.0@0b93645e9fea7318ecaed2b359559ac225c90a2b
• actions/setup-node v4.1.0@39370e3970a6d050c480ffad4ff0ed4d3fdee5af
• postgres 15.8@sha256:491aea6e557dea673887a9008f872225b667d0f54223a10e085059a239459ccb

.github/workflows/docker_vulnerability_scan.yml

• aws-actions/configure-aws-credentials v4.0.2@e3dd6a429d7300a6a4c196c26e071d42e0343502
• aws-actions/amazon-ecr-login v2.0.1@062b18b96a7aff071d4dc91bc00c4c1a7945b076
• cds-snc/security-tools v3.2.0@34794baf2af592913bb5b51d8df4f8d0acc49b6f

.github/workflows/labels.yml

• cds-snc/labels v1

.github/workflows/scripts.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/shellcheck.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/terraform-security-scan.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/tf_apply.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• aws-actions/configure-aws-credentials v4.0.2@e3dd6a429d7300a6a4c196c26e071d42e0343502
• cds-snc/terraform-tools-setup v1
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36

.github/workflows/tf_plan.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• aws-actions/configure-aws-credentials v4.0.2@e3dd6a429d7300a6a4c196c26e071d42e0343502
• cds-snc/terraform-tools-setup v1
• cds-snc/terraform-plan v3.2.2@4719878d72d1b0078e0bce2e7571e854e79903b8

pip_requirements

api/requirements.txt

• alembic ==1.13.3
• aws-lambda-powertools ==2.43.1
• boto3 ==1.35.54
• bcrypt ==4.2.0
• email-validator ==2.2.0
• fastapi ==0.115.4
• logzero ==1.7.0
• mangum ==0.19.0
• notifications-python-client ==9.1.0
• pydantic ==1.10.18
• psycopg2-binary ==2.9.10
• SQLAlchemy ==2.0.36

api/requirements_dev.txt

• bandit ==1.7.10
• black ==24.10.0
• coverage ==7.6.4
• flake8 ==7.1.1
• httpx ==0.27.2
• locust ==2.32.1
• pytest ==8.3.3
• requests ==2.32.3
• uvicorn ==0.32.0
• setuptools >=65.5.1

terraform

terragrunt/aws/api/rds.tf

• github.com/cds-snc/terraform-modules v9.6.8

terragrunt/aws/api/vpc.tf

• github.com/cds-snc/terraform-modules v9.6.8

terragrunt/env/common/provider.tf

• aws ~> 5.0

terragrunt

terragrunt/env/api/terragrunt.hcl

terragrunt/env/hosted_zone/terragrunt.hcl

---

• Check this box to trigger a request for Renovate to run again on this repository