Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): Lock file maintenance

Pending Branch Automerge

The following updates await pending status checks before automerging. To abort the branch automerge and create a PR instead, click on a checkbox below.

• chore(deps): update github-actions (major) (actions/checkout, actions/setup-python, astral-sh/setup-uv, codecov/codecov-action)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update cryptography to 48.0.1 [SECURITY]
• chore(deps): update python-multipart to 0.0.31 [SECURITY]
• chore(deps): update click to 8.3.3 [SECURITY]
• chore(deps): update PyJWT to 2.13.0 [SECURITY] (PyJWT, pyjwt)
• chore(deps): update python-dotenv to 1.2.2 [SECURITY]
• chore(deps): update pytest to 9.0.3 [SECURITY]
• chore(deps): update starlette to 1.3.1 [SECURITY]
• chore(deps): update docker dependencies (alpine, mongo)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (11)

docker-compose.dev.yml

docker-compose.hub.yml (2)

• postgres 18-alpine
• redis 8-alpine

docker-compose.prod.yml (1)

• fluent/fluentd v1.19-debian-1

docker-compose.standalone.yml

docker-compose.tck.yml (2)

• mongo 8.2.1 → [Updates: 8.3.4]
• eclipse-temurin 25-jre

docker-compose.yml (2)

• postgres 18-alpine
• redis 8-alpine

tck/conformance-suite-build/docker-compose.yml (1)

• mongo 8.2.1 → [Updates: 8.3.4]

tck/docker-compose-tck-ci.yml (1)

• mongo 8.2.1 → [Updates: 8.3.4]

tck/docker-compose-tck.yml (1)

• mongo 8.2.1 → [Updates: 8.3.4]

tck/docker/docker-compose-simple.yml (2)

• mongo 8.2.1 → [Updates: 8.3.4]
• eclipse-temurin 25-jre

tck/docker/docker-compose.yml (3)

• postgres 18-alpine
• mongo 8
• postgres 18-alpine

dockerfile (7)

docker-standalone/authly-db-proxy/Dockerfile (1)

• python 3.14-alpine

Dockerfile (2)

• python 3.14-slim
• python 3.14-slim

Dockerfile.standalone (3)

• alpine 3.22 → [Updates: 3.24]
• python 3.14-alpine
• alpine 3.22 → [Updates: 3.24]

tck/conformance-suite-build/Dockerfile (2)

• maven 3-eclipse-temurin-17
• eclipse-temurin 25-jre

tck/conformance-suite-build/Dockerfile.multi (2)

• maven 3-eclipse-temurin-17
• eclipse-temurin 25-jre

tck/conformance-suite-production/Dockerfile (1)

• eclipse-temurin 25

tck/httpd-ci/Dockerfile (1)

• httpd 2.4-alpine

github-actions (6)

.github/workflows/build-postgres-cache.yml (9)

• actions/checkout v6 → [Updates: v7]
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/build-push-action v7
• actions/upload-artifact v7
• actions/checkout v6 → [Updates: v7]
• actions/download-artifact v8
• docker/setup-buildx-action v4
• docker/login-action v4

.github/workflows/build-test-native.yml (7)

• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6 → [Updates: v7]
• astral-sh/setup-uv v7 → [Updates: v8.3.2]
• codecov/codecov-action v5 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6 → [Updates: v7]
• astral-sh/setup-uv v7 → [Updates: v8.3.2]

.github/workflows/build-test-with-docker.yml (8)

• actions/checkout v6 → [Updates: v7]
• docker/setup-buildx-action v4
• docker/build-push-action v7
• actions/upload-artifact v7
• actions/checkout v6 → [Updates: v7]
• actions/download-artifact v8
• actions/checkout v6 → [Updates: v7]
• actions/download-artifact v8

.github/workflows/conformance-tests.yml (10)

• actions/checkout v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• actions/setup-java v5
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/build-push-action v7
• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6 → [Updates: v7]
• actions/upload-artifact v7
• python 3.14

.github/workflows/full-stack-test-with-docker.yml (6)

• actions/checkout v6 → [Updates: v7]
• docker/setup-buildx-action v4
• docker/build-push-action v7
• actions/upload-artifact v7
• actions/checkout v6 → [Updates: v7]
• actions/download-artifact v8

.github/workflows/release-pypi.yml (25)

• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6 → [Updates: v7]
• astral-sh/setup-uv v7 → [Updates: v8.3.2]
• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6 → [Updates: v7]
• astral-sh/setup-uv v7 → [Updates: v8.3.2]
• codecov/codecov-action v5 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6 → [Updates: v7]
• astral-sh/setup-uv v7 → [Updates: v8.3.2]
• actions/attest-build-provenance v4
• actions/upload-artifact v7
• actions/checkout v6 → [Updates: v7]
• actions/download-artifact v8
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/metadata-action v6
• docker/build-push-action v7
• actions/checkout v6 → [Updates: v7]
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/login-action v4
• docker/build-push-action v7
• docker/metadata-action v6
• docker/build-push-action v7

pep621 (1)

pyproject.toml (33)

• python >=3.11
• fastapi >=0.116.1
• starlette >=0.47.2 → [Updates: >=0.47.2]
• uvicorn >=0.35.0
• python-dotenv >=1.0.1 → [Updates: >=1.0.1]
• psycopg-toolkit >=0.2.0
• tenacity >=9.0.0
• pydantic >=2.10.5
• pydantic-settings >=2.1.0
• tomli >=2.2.1
• python-jose >=3.3.0
• cryptography >=44.0.1 → [Updates: >=44.0.1]
• bcrypt ==5.0.0
• python-multipart >=0.0.6 → [Updates: >=0.0.6]
• jinja2 >=3.1.6
• click >=8.1.7 → [Updates: >=8.1.7]
• httpx >=0.28.1
• coverage >=7.9.2
• prometheus-client >=0.20.0
• pyjwt >=2.10.1 → [Updates: >=2.10.1]
• psycopg >=3.2.3
• psycopg-pool >=3.2.4
• redis >=5.2.0
• testcontainers >=4.10.0
• pytest-xdist >=3.8.0
• ruff >=0.8.6
• pytest >=8.3.4 → [Updates: >=8.3.4]
• pytest-order >=1.3.0
• pytest-asyncio >=0.25.0
• pytest-cov >=6.0.0
• testcontainers >=4.10.0
• fastapi-testing >=0.2.0
• hatchling >=1.26.3

pip_requirements (1)

docker-standalone/authly-db-proxy/requirements.txt (4)

• aiohttp >=3.9.0
• asyncpg >=0.29.0
• aioredis >=2.0.0
• PyJWT >=2.8.0 → [Updates: >=2.13.0]

---

• Check this box to trigger a request for Renovate to run again on this repository