Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

These branches will be created by Renovate only once you click their checkbox below.

• chore(deps): update dependency aws-lambda-powertools to v3
• chore(deps): update dependency notifications-python-client to v10
• chore(deps): update mcr.microsoft.com/vscode/devcontainers/python docker tag to v1
• chore(deps): update postgres docker tag to v17
• 🔐 Create all pending approval PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update localstack/localstack docker digest to 2d3449b
• chore(deps): update all patch dependencies (boto3, github.com/cds-snc/terraform-modules)
• chore(deps): update dependency uvicorn to v0.34.0
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• chore(deps): update dependency pydantic to v2

Detected dependencies

docker-compose

.devcontainer/docker-compose.yml

• postgres 15.10@sha256:6cbdd616ae7ea61fa88873fdab529b3fd141b8a8311bfe4e6e62575f643f88fe
• postgres 15.10@sha256:6cbdd616ae7ea61fa88873fdab529b3fd141b8a8311bfe4e6e62575f643f88fe
• localstack/localstack sha256:9c5e8eea15fa87db5e5792a05c16766d8ffb5295d0377df1643a246fc63e031d

dockerfile

.devcontainer/Dockerfile

• mcr.microsoft.com/vscode/devcontainers/python 0-3.9

api/Dockerfile

• python 3.9-slim-buster@sha256:320a7a4250aba4249f458872adecf92eea88dc6abd2d76dc5c0f01cac9b53990

github-actions

.github/workflows/bandith_security_scan.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/build_and_push.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• aws-actions/configure-aws-credentials v4.0.2@e3dd6a429d7300a6a4c196c26e071d42e0343502
• aws-actions/amazon-ecr-login v2.0.1@062b18b96a7aff071d4dc91bc00c4c1a7945b076
• cds-snc/security-tools v3.2.0@34794baf2af592913bb5b51d8df4f8d0acc49b6f

.github/workflows/ci_build_continers.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/ci_code.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-python v5.3.0@0b93645e9fea7318ecaed2b359559ac225c90a2b
• actions/setup-node v4.1.0@39370e3970a6d050c480ffad4ff0ed4d3fdee5af
• postgres 15.10@sha256:6cbdd616ae7ea61fa88873fdab529b3fd141b8a8311bfe4e6e62575f643f88fe

.github/workflows/docker_vulnerability_scan.yml

• aws-actions/configure-aws-credentials v4.0.2@e3dd6a429d7300a6a4c196c26e071d42e0343502
• aws-actions/amazon-ecr-login v2.0.1@062b18b96a7aff071d4dc91bc00c4c1a7945b076
• cds-snc/security-tools v3.2.0@34794baf2af592913bb5b51d8df4f8d0acc49b6f

.github/workflows/labels.yml

• cds-snc/labels v1

.github/workflows/scripts.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/shellcheck.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/terraform-security-scan.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/tf_apply.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• aws-actions/configure-aws-credentials v4.0.2@e3dd6a429d7300a6a4c196c26e071d42e0343502
• cds-snc/terraform-tools-setup v1
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36

.github/workflows/tf_plan.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• aws-actions/configure-aws-credentials v4.0.2@e3dd6a429d7300a6a4c196c26e071d42e0343502
• cds-snc/terraform-tools-setup v1
• cds-snc/terraform-plan v3.3.1@d79bcf0eccf632a0ad9e9193072b42c970766c5b

pip_requirements

api/requirements.txt

• alembic ==1.14.0
• aws-lambda-powertools ==2.43.1
• boto3 ==1.35.76
• bcrypt ==4.2.1
• email-validator ==2.2.0
• fastapi ==0.115.6
• logzero ==1.7.0
• mangum ==0.19.0
• notifications-python-client ==9.1.0
• pydantic ==1.10.19
• psycopg2-binary ==2.9.10
• SQLAlchemy ==2.0.36

api/requirements_dev.txt

• bandit ==1.8.0
• black ==24.10.0
• coverage ==7.6.9
• flake8 ==7.1.1
• httpx ==0.28.1
• locust ==2.32.4
• pytest ==8.3.4
• requests ==2.32.3
• uvicorn ==0.32.1
• setuptools >=65.5.1

terraform

terragrunt/aws/api/rds.tf

• github.com/cds-snc/terraform-modules v10.2.0

terragrunt/aws/api/vpc.tf

• github.com/cds-snc/terraform-modules v10.2.0

terragrunt/env/common/provider.tf

• aws ~> 5.0

terragrunt

terragrunt/env/api/terragrunt.hcl

terragrunt/env/hosted_zone/terragrunt.hcl

---

• Check this box to trigger a request for Renovate to run again on this repository