Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): lock file maintenance

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): pin dependencies (fastapi, pytest, python, requests, ruff)
• fix(deps): update combined - minor and patch (@actions/github, fast-xml-parser, jose, ruff, io.netty:netty-resolver-dns-native-macos, org.jacoco:jacoco-maven-plugin, org.testcontainers:mssqlserver, com.azure.spring:spring-cloud-azure-dependencies, net.logstash.logback:logstash-logback-encoder, org.jetbrains.kotlin:kotlin-maven-allopen, org.jetbrains.kotlin:kotlin-maven-plugin, org.springframework.boot:spring-boot-starter-parent)
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

1/1 CVEs have Renovate fixes.

maven

ci-cd/testdata/spring-boot-app/pom.xml

com.github.ulisesbocchio:jasypt-spring-boot-starter

• GHSA-jgj7-c8vj-w563 (fixed in (4.0.4,))

Detected Dependencies

maven (1)

ci-cd/testdata/spring-boot-app/pom.xml (9)

• org.springframework.boot:spring-boot-starter-parent 3.4.4 → [Updates: 3.5.16, 4.1.0]
• com.azure.spring:spring-cloud-azure-dependencies 5.21.0 → [Updates: 5.25.0, 7.3.0]
• net.logstash.logback:logstash-logback-encoder 8.0 → [Updates: 8.1, 9.0]
• io.netty:netty-resolver-dns-native-macos 4.1.119.Final → [Updates: 4.2.16.Final]
• com.github.ulisesbocchio:jasypt-spring-boot-starter 3.0.5
• org.testcontainers:mssqlserver 1.20.6 → [Updates: 1.21.4]
• org.jetbrains.kotlin:kotlin-maven-plugin 2.1.20 → [Updates: 2.4.0]
• org.jetbrains.kotlin:kotlin-maven-allopen 2.1.20 → [Updates: 2.4.0]
• org.jacoco:jacoco-maven-plugin 0.8.12 → [Updates: 0.8.15]

npm (3)

ci-cd/package.json (3)

• @actions/core 1.11.1 → [Updates: 3.0.1]
• @actions/github 6.0.0 → [Updates: 6.0.1, 9.1.1]
• fast-xml-parser 5.8.0 → [Updates: 5.10.0]

ci-cd/testdata/vue-app/package.json (1)

• node 20 → [Updates: 24]

get-github-app-installation-token/package.json (2)

• @actions/core 1.11.1 → [Updates: 3.0.1]
• jose 6.0.10 → [Updates: 6.2.3]

pep621 (2)

ci-cd/testdata/python-app-cycle/pyproject.toml (2)

• python >=3.12 → [Updates: ==3.14.6]
• requests >=2.31.0,<3.0.0 → [Updates: ==2.34.2]

ci-cd/testdata/python-app/pyproject.toml (5)

• python >=3.12 → [Updates: ==3.14.6]
• fastapi >=0.111.0,<1.0.0 → [Updates: ==0.139.2]
• ruff >=0.6.0 → [Updates: ==0.15.22]
• pytest >=8.3.0 → [Updates: ==9.1.1]
• ruff ==0.6.9 → [Updates: ==0.15.21]

---

• Check this box to trigger a request for Renovate to run again on this repository