Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update all minor dependencies (@aws-sdk/client-s3, @aws-sdk/client-secrets-manager, @aws-sdk/client-sts, bandit, boto3, coverage, github.com/cds-snc/terraform-modules, postgres)
• chore(deps): update actions/checkout action to v6
• chore(deps): update aws-sdk-client-mock monorepo to v4 (major) (aws-sdk-client-mock, aws-sdk-client-mock-jest)
• chore(deps): update dependency aws-lambda-powertools to v3
• chore(deps): update dependency node to v24
• chore(deps): update dependency pytest to v9
• chore(deps): update dependency pytz to v2025
• chore(deps): update dependency setuptools to v80
• chore(deps): update node.js to v22
• chore(deps): update postgres docker tag to v18
• fix(deps): update dependency pino to v10
• 🔐 Create all pending approval PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency prettier to v3.7.3

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update localstack/localstack docker digest to 164916a
• chore(deps): update all non-major github action dependencies (github/codeql-action, postgres)
• chore(deps): update all patch dependencies (fastapi, locust)
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency eslint to v9

Detected dependencies

docker-compose

.devcontainer/docker-compose.yml

• postgres 14.19@sha256:962ffbe9f6418387643411b127c1db27465e5a23b9a8849bfaf45fa6323963ce
• postgres 14.19@sha256:962ffbe9f6418387643411b127c1db27465e5a23b9a8849bfaf45fa6323963ce
• localstack/localstack sha256:82025ba3d9ce3c932112d79d7110f289330b83f9daab3beec4fefe5b358363fc

dockerfile

.devcontainer/Dockerfile

• mcr.microsoft.com/devcontainers/python 3.14

api/Dockerfile

• python 3.13-alpine3.19@sha256:8287ca207e905649e9f399b5f91a119e5e9051d8cd110d5f8c3b4bd9458ebd1d
• python 3.13-alpine3.19@sha256:8287ca207e905649e9f399b5f91a119e5e9051d8cd110d5f8c3b4bd9458ebd1d

module/s3-scan-object/Dockerfile

• node 20.18.1-alpine3.19@sha256:1cc9088b0fbcb2009a8fc2cb57916cd129cd5e32b3c75fb12bb24bac76917a96
• node 20.18.1-alpine3.19@sha256:1cc9088b0fbcb2009a8fc2cb57916cd129cd5e32b3c75fb12bb24bac76917a96

github-actions

.github/workflows/bandit_security_scan.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd

.github/workflows/build_and_push_production.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• aws-actions/configure-aws-credentials v5.1.0@00943011d9042930efac3dcd3a170e4273319bc8
• aws-actions/amazon-ecr-login v2.0.1@062b18b96a7aff071d4dc91bc00c4c1a7945b076
• cds-snc/security-tools v3.2.0@34794baf2af592913bb5b51d8df4f8d0acc49b6f

.github/workflows/build_and_push_staging.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• aws-actions/configure-aws-credentials v5.1.0@00943011d9042930efac3dcd3a170e4273319bc8
• aws-actions/amazon-ecr-login v2.0.1@062b18b96a7aff071d4dc91bc00c4c1a7945b076
• jtalk/url-health-check-action v2@61a0e49fff5cde3773b0bbe069d4ebbd04d24f07
• cds-snc/security-tools v3.2.0@34794baf2af592913bb5b51d8df4f8d0acc49b6f

.github/workflows/ci_build_containers.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd

.github/workflows/ci_code.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36
• actions/setup-python v6.0.0@e797f83bcb11b83ae66e0230d6156d7c80228e7c
• actions/setup-node v6.0.0@2028fbc5c25fe9cf00d9f06a71cc4710d4507903
• postgres 14.19@sha256:962ffbe9f6418387643411b127c1db27465e5a23b9a8849bfaf45fa6323963ce
• python 3.14
• node 20

.github/workflows/code_scanning.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• github/codeql-action v4.31.3@014f16e7ab1402f30e7c3329d33797e7948572db
• github/codeql-action v4.31.3@014f16e7ab1402f30e7c3329d33797e7948572db

.github/workflows/dast_vulnerability_scan.yml

• PortSwigger/dastardly-github-action main
• mikepenz/action-junit-report v6.0.1@e08919a3b1fb83a78393dfb775a9c37f17d8eea6

.github/workflows/deploy_lambda_production.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36
• aws-actions/configure-aws-credentials v5.1.0@00943011d9042930efac3dcd3a170e4273319bc8
• jtalk/url-health-check-action v2@61a0e49fff5cde3773b0bbe069d4ebbd04d24f07

.github/workflows/docker_vulnerability_scan.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• aws-actions/configure-aws-credentials v5.1.0@00943011d9042930efac3dcd3a170e4273319bc8
• aws-actions/amazon-ecr-login v2.0.1@062b18b96a7aff071d4dc91bc00c4c1a7945b076
• cds-snc/security-tools v3.2.0@34794baf2af592913bb5b51d8df4f8d0acc49b6f

.github/workflows/integration_test_production.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• aws-actions/configure-aws-credentials v5.1.0@00943011d9042930efac3dcd3a170e4273319bc8

.github/workflows/integration_test_staging.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• aws-actions/configure-aws-credentials v5.1.0@00943011d9042930efac3dcd3a170e4273319bc8

.github/workflows/json_lint.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd

.github/workflows/labels.yml

• cds-snc/labels v1@8d95ffe4ae0bd4f148da0b5f082f1e5aa6cb72bf

.github/workflows/scripts.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd

.github/workflows/terraform-security-scan.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd

.github/workflows/tf_apply_production.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• cds-snc/terraform-tools-setup v1
• aws-actions/configure-aws-credentials v5.1.0@00943011d9042930efac3dcd3a170e4273319bc8

.github/workflows/tf_apply_staging.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• cds-snc/terraform-tools-setup v1
• aws-actions/configure-aws-credentials v5.1.0@00943011d9042930efac3dcd3a170e4273319bc8

.github/workflows/tf_plan_production.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• cds-snc/terraform-tools-setup v1
• aws-actions/configure-aws-credentials v5.1.0@00943011d9042930efac3dcd3a170e4273319bc8
• cds-snc/terraform-plan v3.6.1@359927038664bc1647919e18ca36a3b551445131

.github/workflows/tf_plan_staging.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• cds-snc/terraform-tools-setup v1
• aws-actions/configure-aws-credentials v5.1.0@00943011d9042930efac3dcd3a170e4273319bc8
• cds-snc/terraform-plan v3.6.1@359927038664bc1647919e18ca36a3b551445131

npm

module/s3-scan-object/package.json

• @aws-sdk/client-s3 ^3.113.0
• @aws-sdk/client-secrets-manager ^3.118.1
• @aws-sdk/client-sts ^3.121.0
• axios ^1.0.0
• pino 8.21.0
• pino-lambda ^4.0.0
• aws-sdk-client-mock 3.1.0
• aws-sdk-client-mock-jest 3.1.0
• eslint 8.57.1
• jest 30.2.0
• prettier 3.6.2

pip_requirements

api/requirements_dev.txt

• bandit ==1.8.6
• black ==25.11.0
• coverage ==7.11.3
• factory-boy ==3.3.3
• flake8 ==7.3.0
• httpx ==0.28.1
• locust ==2.42.3
• pytest ==8.4.2
• requests ==2.32.4
• uvicorn ==0.38.0

api/requirements.txt

• alembic ==1.17.2
• assemblyline-client ==4.9.8
• aws-lambda-powertools ==2.43.1
• boto3 ==1.40.74
• fastapi ==0.121.2
• mangum ==0.19.0
• pydantic-settings ==2.12.0
• psycopg2-binary ==2.9.11
• setuptools ==78.1.1
• SQLAlchemy ==2.0.44
• pytz ==2024.2
• filelock ==3.20.0
• urllib3 <3

renovate-config-presets

renovate.json

terraform

terragrunt/aws/alarms/athena.tf

• github.com/cds-snc/terraform-modules v10.8.6
• github.com/cds-snc/terraform-modules v10.8.6

terragrunt/aws/alarms/sentinel_logging.tf

• github.com/cds-snc/terraform-modules v10.8.6

terragrunt/aws/api/lambda.tf

• github.com/cds-snc/terraform-modules v10.8.6

terragrunt/aws/api/rds.tf

• github.com/cds-snc/terraform-modules v10.8.6

terragrunt/aws/api/route53.tf

• github.com/cds-snc/terraform-modules v10.8.6

terragrunt/aws/api/s3.tf

• github.com/cds-snc/terraform-modules v10.8.6
• github.com/cds-snc/terraform-modules v10.8.6
• github.com/cds-snc/terraform-modules v10.8.6

terragrunt/aws/api/vpc.tf

• github.com/cds-snc/terraform-modules v10.8.6

terragrunt/aws/integration_test/s3_scan_object.tf

• github.com/cds-snc/terraform-modules v10.8.6
• github.com/cds-snc/terraform-modules v10.8.6

terragrunt/aws/s3_scan_object/lambda.tf

• github.com/cds-snc/terraform-modules v10.8.6

terragrunt/env/common/provider.tf

• aws ~> 6.0

terragrunt

terragrunt/env/production/alarms/terragrunt.hcl

terragrunt/env/production/api/terragrunt.hcl

terragrunt/env/production/hosted_zone/terragrunt.hcl

terragrunt/env/production/integration_test/terragrunt.hcl

terragrunt/env/production/s3_scan_object/terragrunt.hcl

terragrunt/env/production/scan_queue/terragrunt.hcl

terragrunt/env/staging/alarms/terragrunt.hcl

terragrunt/env/staging/api/terragrunt.hcl

terragrunt/env/staging/hosted_zone/terragrunt.hcl

terragrunt/env/staging/integration_test/terragrunt.hcl

terragrunt/env/staging/s3_scan_object/terragrunt.hcl

terragrunt/env/staging/scan_queue/terragrunt.hcl

---

• Check this box to trigger a request for Renovate to run again on this repository