Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): lock file maintenance

Pending Status Checks

These updates await pending status checks. To force their creation now, click the checkbox below.

• chore(deps): update aquasecurity/trivy-action action to v0.28.0
• fix(deps): update dependency uvicorn to ^0.32.0

Detected dependencies

docker-compose

docker-compose.yml

• postgres 15
• flyway/flyway 9-alpine
• flyway/flyway 9-alpine
• python 3.11-slim-buster
• python 3.13
• python 3.13

dockerfile

backend-go/Dockerfile

• golang 1.23
• alpine 3.20

backend-go/db/Dockerfile

• flyway/flyway 9.22-alpine

backend-java/Dockerfile

• quay.io/quarkus/quarkus-micro-image 2.0

backend-py/Dockerfile

backend-py/db/Dockerfile

• flyway/flyway 9.22-alpine

github-actions

.github/workflows/.deploy.yml

• actions/checkout v4
• redhat-actions/openshift-tools-installer v1
• ubuntu 24.04

.github/workflows/analysis.yml

• actions/checkout v4
• aquasecurity/trivy-action 0.27.0
• github/codeql-action v3
• actions/checkout v4
• actions/setup-java v4
• actions/cache v4
• actions/checkout v4
• actions/setup-python v5
• actions/cache v4
• snok/install-poetry v1.4.1
• actions/cache v4
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/merge.yml

• bcgov-nr/action-get-pr v0.0.1
• actions/checkout v4
• actions/cache v4
• shrink/actions-docker-registry-tag v4
• actions/delete-package-versions v5
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/pentests.yml

• zaproxy/action-full-scan v0.11.0

.github/workflows/pr-close.yml

• bcgov/quickstart-openshift-helpers v0.8.1

.github/workflows/pr-open.yml

• bcgov-nr/action-builder-ghcr v2.2.0
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/pr-validate.yml

• bcgov/quickstart-openshift-helpers v0.8.1
• ubuntu 24.04

gomod

backend-go/go.mod

• go 1.22.0
• go 1.23.2
• github.com/devfeel/mapper v0.7.14
• github.com/gofiber/fiber/v2 v2.52.5
• github.com/gofiber/helmet/v2 v2.2.26
• github.com/gofiber/swagger v1.1.0
• github.com/golang-migrate/migrate/v4 v4.18.1
• github.com/joho/godotenv v1.5.1
• github.com/sirupsen/logrus v1.9.3
• github.com/swaggo/swag v1.16.3
• gorm.io/driver/postgres v1.5.9
• gorm.io/gorm v1.25.12

helm-values

charts/quickstart-openshift-backends/values.yaml

• ghcr.io/bcgov/nr-containers/bitnami/postgresql 15.8.0

helmv3

charts/quickstart-openshift-backends/Chart.yaml

• postgresql 16.0.1

maven

backend-java/pom.xml

• io.quarkus.platform:quarkus-bom 3.15.1
• org.instancio:instancio-junit 5.0.2
• net.datafaker:datafaker 2.4.0
• io.quarkus.platform:quarkus-maven-plugin 3.15.1
• org.apache.maven.plugins:maven-compiler-plugin 3.13.0
• org.apache.maven.plugins:maven-surefire-plugin 3.5.1
• org.apache.maven.plugins:maven-failsafe-plugin 3.5.1

maven-wrapper

backend-java/.mvn/wrapper/maven-wrapper.properties

• maven 3.9.9

npm

integration-tests/package.json

• axios ^1.6.8
• dotenv ^16.4.5
• js-yaml ^4.1.0
• lodash ^4.17.21

pep621

backend-py/pyproject.toml

poetry

backend-py/pyproject.toml

• python ^3.12
• fastapi ^0.115.0
• uvicorn ^0.31.0
• sqlalchemy ^2.0.32
• pydantic ^2.0.0
• requests ^2.31.0
• psycopg2 ^2.9.9
• pydantic-settings ^2.4.0
• ruff ^0.6.1
• pytest ^8.0.0
• pytest-cov ^5.0.0
• pytest-watch ^4.2.0

---

• Check this box to trigger a request for Renovate to run again on this repository