Renovate Dashboard 🤖

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (1)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
mise	shellcheck	2025-08-04

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency pre_commit to v4.6.2 [automerge]
• chore(deps): update dependency python-dotenv to v1.2.3 [automerge]
• chore(deps): update dependency sqlalchemy to v2.0.52 [automerge]
• chore(deps): update react monorepo [automerge] (@types/react, @types/react-dom)
• chore(github-tag): update tag github/codeql-action to v4.37.8 [automerge]
• chore(container): update image node to v24.19.0 [automerge]
• chore(deps): update dependency eslint to v10.9.1 [automerge]
• chore(deps): update dependency fastapi to v0.141.1 [automerge]
• chore(deps): update dependency typescript-eslint to v8.69.0 [automerge]
• chore(github-release): update release jdx/mise to v2026.8.10 [automerge]
• chore(github-tag): update tag docker/setup-buildx-action to v4.3.0 [automerge]
• chore(mise): update tool zizmor to v1.29.0 [automerge]
• fix(deps): update dependency next to v16.3.4 [automerge]
• chore(github-tag): update tag actions/setup-node to v7
• chore(github-tag): update tag actions/setup-python to v7
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(github-tag): update tag actions/deploy-pages to v5.0.1 [automerge]
• chore(mise): update tool shfmt to v3.14.0 [automerge]

Pending Branch Automerge

The following updates await pending status checks before automerging. To abort the branch automerge and create a PR instead, click on a checkbox below.

• chore(deps): lock file maintenance [automerge]

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency typescript to v7
• chore(github-tag): update tag actions/checkout to v7
• chore(github-tag): update tag actions/labeler to v7
• chore(github-tag): update tag devsecninja/.github to v2
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (2)

• mcr.microsoft.com/devcontainers/python 3.14-bookworm@sha256:a9bbf8d2cd1d9b000716230dc7376bbb8374e17bebd1ea87d041358f5a5108ca → [Updates: 3.14-bookworm]
• node 24.18.0 → [Updates: 24.19.0]

docker-compose (2)

docker-compose.prod.yml

docker-compose.yml

dockerfile (2)

backend/Dockerfile (1)

• python 3.14-slim@sha256:71b358f8bff55413f4a6b95af80acb07ab97b5636cd3b869f35c3680d31d1650 → [Updates: 3.14-slim]

frontend/Dockerfile (2)

• node 24.18.0-alpine@sha256:a0b9bf06e4e6193cf7a0f58816cc935ff8c2a908f81e6f1a95432d679c54fbfd → [Updates: 24.19.0-alpine]
• nginx alpine@sha256:582c496ccf79d8aa6f8203a79d32aaf7ffd8b13362c60a701a2f9ac64886c93d → [Updates: alpine]

github-actions (12)

.github/workflows/auto-label-issues.yml (1)

• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3

.github/workflows/auto-label.yml (2)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/labeler v6.2.0@b8dd2d9be0f68b860e7dae5dae7d772984eacd6d → [Updates: v7.0.0]

.github/workflows/bandit.yml (2)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• DevSecNinja/python-bandit-scan v1.0.1@62d16066d02e3669359cd9b25f079d249f608c4d

.github/workflows/codeql.yml (3)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• github/codeql-action v4.37.3@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 → [Updates: v4.37.8]
• github/codeql-action v4.37.3@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 → [Updates: v4.37.8]

.github/workflows/config-sync.yml (1)

• DevSecNinja/.github v1.9.0@27fd66740c629ea38380dcd3bf93e7bc74c54247 → [Updates: v2.5.0]

.github/workflows/dependency-review.yml (2)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294

.github/workflows/deploy.yml (11)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• codecov/test-results-action v1.2.1@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]
• actions/configure-pages v6.0.0@45bfe0192ca1faeb007ade9deae92b16b8254a0d
• actions/upload-pages-artifact v5.0.0@fc324d3547104276b827a68afc52ff2a11cc49c9
• actions/deploy-pages v5.0.0@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 → [Updates: v5.0.1]
• python 3.14
• node 24

.github/workflows/docker-test.yml (15)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• codecov/test-results-action v1.2.1@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c → [Updates: v4.3.0]
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c → [Updates: v4.3.0]
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c → [Updates: v4.3.0]
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• python 3.14

.github/workflows/lint.yml (1)

• DevSecNinja/.github v1.9.0@27fd66740c629ea38380dcd3bf93e7bc74c54247 → [Updates: v2.5.0]

.github/workflows/release.yml (12)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]
• actions/configure-pages v6.0.0@45bfe0192ca1faeb007ade9deae92b16b8254a0d
• actions/upload-pages-artifact v5.0.0@fc324d3547104276b827a68afc52ff2a11cc49c9
• actions/deploy-pages v5.0.0@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 → [Updates: v5.0.1]
• python 3.14
• node 24

.github/workflows/todo-to-issue.yml (3)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• alstr/todo-to-issue-action v5.1.15@37bb7b56e58569ef273b60678048030a7f0c261a
• ubuntu 24.04

.github/workflows/update-db.yml (8)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]
• actions/configure-pages v6.0.0@45bfe0192ca1faeb007ade9deae92b16b8254a0d
• actions/upload-pages-artifact v5.0.0@fc324d3547104276b827a68afc52ff2a11cc49c9
• actions/deploy-pages v5.0.0@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 → [Updates: v5.0.1]
• python 3.14
• node 24

mise (1)

.mise.toml (5)

• actionlint 1.7.12
• gitleaks 8.30.1
• shellcheck 0.11.0
• shfmt 3.13.1 → [Updates: 3.14.0]
• zizmor 1.27.0 → [Updates: 1.29.0]

npm (2)

frontend/package.json (9)

• next 16.2.12 → [Updates: 16.3.4]
• react 19.2.8
• react-dom 19.2.8
• @tailwindcss/postcss 4.3.3
• @types/node 24.13.3
• @types/react 19.2.17 → [Updates: 19.2.18]
• @types/react-dom 19.2.3 → [Updates: 19.2.5]
• tailwindcss 4.3.3
• typescript 6.0.3 → [Updates: 7.0.2]

package.json (4)

• @eslint/js 10.0.1
• eslint 10.8.0 → [Updates: 10.9.1]
• typescript 6.0.3 → [Updates: 7.0.2]
• typescript-eslint 8.65.0 → [Updates: 8.69.0]

pip_requirements (2)

backend/requirements.txt (9)

• fastapi ==0.140.0 → [Updates: ==0.141.1]
• pyyaml ==6.0.3
• httpx ==0.28.1
• sqlalchemy ==2.0.51 → [Updates: ==2.0.52]
• pytest ==9.1.1
• pytest-asyncio ==1.4.0
• pytest-cov ==7.1.0
• python-dotenv ==1.2.2 → [Updates: ==1.2.3]
• apscheduler ==3.11.3

requirements.txt (2)

• black ==26.5.1
• pre_commit ==4.6.1 → [Updates: ==4.6.2]

regex (2)

.github/workflows/lint.yml (1)

• jdx/mise 2026.7.7 → [Updates: 2026.8.10]

.mise.toml (1)

• jdx/mise 2026.7.7 → [Updates: 2026.8.10]

renovate-config (1)

renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository