Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

These branches will be created by Renovate only once you click their checkbox below.

• chore(deps): update dependency urllib3 to v2
• chore(deps): update mcr.microsoft.com/vscode/devcontainers/python docker tag to v1
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): update dependency boto3 to v1.35.9
• chore(deps): update github/codeql-action action to v3.26.6
• chore(deps): lock file maintenance

Pending Status Checks

These updates await pending status checks. To force their creation now, click the checkbox below.

• chore(deps): update dependency fastapi to v0.113.0

Detected dependencies

devcontainer

.devcontainer/devcontainer.json

• mcr.microsoft.com/vscode/devcontainers/python 0-3.11@sha256:452e43dd2381de67191c53f7692433baba156ee9138ccfaed5124ff26c63eaed

dockerfile

api/Dockerfile

• python 3.11.2-alpine3.16@sha256:beae3986f2c26f415a02664d03e2a7780ae4b521da8309cbfe80ff2d30fa44c7
• python 3.11.2-alpine3.16@sha256:beae3986f2c26f415a02664d03e2a7780ae4b521da8309cbfe80ff2d30fa44c7

github-actions

.github/workflows/ci-code.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-python v5.2.0@f677139bbe7f9c59b41e40162b753c062f5d49a3

.github/workflows/code-scanning.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• github/codeql-action v3.26.5@2c779ab0d087cd7fe7b826087247c2c81f27bfa6
• github/codeql-action v3.26.5@2c779ab0d087cd7fe7b826087247c2c81f27bfa6

.github/workflows/dependency-review.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/dependency-review-action v4.3.4@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c

.github/workflows/docker-build-push-production.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• aws-actions/configure-aws-credentials v4.0.2@e3dd6a429d7300a6a4c196c26e071d42e0343502
• aws-actions/amazon-ecr-login v2.0.1@062b18b96a7aff071d4dc91bc00c4c1a7945b076
• cds-snc/security-tools v3.1.0@598deeaed48ab3bb0df85f0ed124ba53f0ade385

.github/workflows/docker-build.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• dorny/paths-filter v3.0.2@de90cc6fb38fc0963ad72b210f1f284cd68cea36
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332

.github/workflows/docker-vulnerability-scan.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• aws-actions/configure-aws-credentials v4.0.2@e3dd6a429d7300a6a4c196c26e071d42e0343502
• aws-actions/amazon-ecr-login v2.0.1@062b18b96a7aff071d4dc91bc00c4c1a7945b076
• cds-snc/security-tools v3.1.0@598deeaed48ab3bb0df85f0ed124ba53f0ade385

.github/workflows/labels.yml

• cds-snc/labels v1

.github/workflows/shellcheck.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332

.github/workflows/terraform-security-scan.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332

.github/workflows/tf_apply_production.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• cds-snc/terraform-tools-setup v1
• aws-actions/configure-aws-credentials v4.0.2@e3dd6a429d7300a6a4c196c26e071d42e0343502

.github/workflows/tf_plan_production.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• cds-snc/terraform-tools-setup v1
• aws-actions/configure-aws-credentials v4.0.2@e3dd6a429d7300a6a4c196c26e071d42e0343502
• cds-snc/terraform-plan v3.2.2@4719878d72d1b0078e0bce2e7571e854e79903b8

pip_requirements

api/requirements.txt

• cryptography ==43.0.1
• fastapi ==0.112.2
• mangum ==0.17.0
• python-dotenv ==1.0.1
• requests ==2.32.3
• urllib3 <2

api/requirements_dev.txt

• black ==24.8.0
• coverage ==7.6.1
• flake8 ==7.1.1
• httpx ==0.27.2
• pytest ==8.3.2
• pytest-env ==1.1.3
• uvicorn ==0.30.6

terragrunt/aws/alert_compromise/functions/requirements_dev.txt

• black ==24.8.0
• boto3 ==1.35.6
• flake8 ==7.1.1
• pytest ==8.3.2

terraform

terragrunt/aws/api/lambda.tf

• github.com/cds-snc/terraform-modules v9.6.4

terragrunt/aws/api/sentinel.tf

• github.com/cds-snc/terraform-modules v9.6.4

terragrunt/env/common/provider.tf

• aws ~> 5.0

terragrunt

terragrunt/env/production/alarms/terragrunt.hcl

terragrunt/env/production/alert_compromise/terragrunt.hcl

terragrunt/env/production/api/terragrunt.hcl

terragrunt/env/production/cloudfront/terragrunt.hcl

terragrunt/env/production/hosted_zone/terragrunt.hcl

terragrunt/env/staging/alarms/terragrunt.hcl

terragrunt/env/staging/alert_compromise/terragrunt.hcl

terragrunt/env/staging/api/terragrunt.hcl

terragrunt/env/staging/cloudfront/terragrunt.hcl

terragrunt/env/staging/hosted_zone/terragrunt.hcl

---

• Check this box to trigger a request for Renovate to run again on this repository