Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• fix(deps): update dependency zone.js to ~0.15.0
• chore(deps): update dependency faker to v30
• chore(deps): update helm release postgresql to v16
• fix(deps): update dependency angular-auth-oidc-client to v18
• fix(deps): update dependency ngx-quill to v26
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• chore(deps): update all non-major dependencies (caddy, fastapi, ghcr.io/bcgov/nr-containers/bitnami/postgresql, node, postgresql, ruff, typescript, uvicorn)

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• fix(deps): update dependency requests to v2.32.2 [security]
• fix(deps): update dependency sqlmodel to ^0.0.22
• chore(deps): update dependency jasmine-core to ~5.4.0
• chore(deps): update github actions all dependencies (amannn/action-semantic-pull-request, aquasecurity/trivy-action, bcgov-nr/action-builder-ghcr, bcgov-nr/action-pr-description-add, bcgov/quickstart-openshift-helpers, snok/install-poetry, zaproxy/action-full-scan)
• chore(deps): update github actions all dependencies (major) (actions/cache, actions/setup-python, actions/upload-artifact, ubuntu)
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• chore(deps): update angular to v18 (major) (@angular-devkit/build-angular, @angular/animations, @angular/cdk, @angular/cli, @angular/common, @angular/compiler, @angular/compiler-cli, @angular/core, @angular/forms, @angular/material, @angular/platform-browser, @angular/platform-browser-dynamic, @angular/router)

Detected dependencies

docker-compose

docker-compose.yml

• postgres 15
• python 3.12

dockerfile

backend/Dockerfile

frontend/hydro_alerting/Dockerfile

• node 20.12.2-bullseye-slim
• caddy 2.7.6-alpine

migrations/Dockerfile

• python 3.12-alpine
• python 3.12-alpine

github-actions

.github/workflows/.deploy.yml

• actions/checkout v4
• ubuntu 22.04

.github/workflows/.tests.yml

• actions/checkout v4
• actions/cache v3
• actions/checkout v4
• actions/cache v3
• cypress-io/github-action v6
• actions/upload-artifact v3
• ubuntu 22.04
• ubuntu 22.04

.github/workflows/analysis.yml

• actions/checkout v4
• github/codeql-action v2
• github/codeql-action v2
• github/codeql-action v2
• actions/checkout v4
• aquasecurity/trivy-action 0.14.0
• github/codeql-action v2
• actions/checkout v4
• actions/setup-python v4
• actions/cache v3
• snok/install-poetry v1.3.4
• actions/cache v3
• ubuntu 22.04
• ubuntu 22.04
• ubuntu 22.04

.github/workflows/merge.yml

• bcgov-nr/action-get-pr v0.0.1
• bcgov/quickstart-openshift-helpers v0.4.0
• ubuntu 22.04

.github/workflows/pr-close.yml

• bcgov/quickstart-openshift-helpers v0.4.0

.github/workflows/pr-open.yml

• amannn/action-semantic-pull-request v5.4.0
• bcgov-nr/action-pr-description-add v1.1.0
• bcgov-nr/action-builder-ghcr v2.0.1
• bcgov-nr/action-builder-ghcr v2.0.1
• bcgov/quickstart-openshift-helpers v0.4.0
• ubuntu 22.04
• ubuntu 22.04
• ubuntu 22.04
• ubuntu 22.04
• ubuntu 22.04

.github/workflows/scheduled.yml

• zaproxy/action-full-scan v0.8.0
• actions/checkout v4
• joshuaavalon/flyway-action v3.0.0
• JamesIves/github-pages-deploy-action v4
• ubuntu 22.04

helm-values

charts/alert_author/values.yaml

• ghcr.io/bcgov/nr-containers/bitnami/postgresql 15.6.0

helmv3

charts/alert_author/Chart.yaml

• postgresql 15.2.9

npm

frontend/hydro_alerting/package.json

• @angular/animations ^17.2.4
• @angular/cdk ^17.1.0
• @angular/common ^17.2.4
• @angular/compiler ^17.2.4
• @angular/core ^17.2.4
• @angular/forms ^17.2.4
• @angular/material ^17.1.0
• @angular/platform-browser ^17.2.4
• @angular/platform-browser-dynamic ^17.2.4
• @angular/router ^17.2.4
• @bcgov/bc-sans ^2.1.0
• @types/esri-leaflet ^3.0.3
• @types/leaflet ^1.9.12
• angular-auth-oidc-client ^16.0.1
• dayjs ^1.11.10
• dayjs-plugin-utc ^0.1.2
• esri-leaflet ^3.0.12
• esri-leaflet-vector ^4.2.3
• leaflet ^1.9.4
• ngx-quill ^25.0.0
• rxjs ~7.8.0
• tslib ^2.3.0
• zone.js ~0.14.2
• @angular-devkit/build-angular ^17.0.3
• @angular/cli ^17.0.3
• @angular/compiler-cli ^17.2.4
• @types/jasmine ~5.1.0
• jasmine-core ~5.1.0
• karma ~6.4.0
• karma-chrome-launcher ~3.2.0
• karma-coverage ~2.2.0
• karma-jasmine ~5.1.0
• karma-jasmine-html-reporter ~2.1.0
• typescript ~5.2.2

integration-tests/package.json

• axios ^1.5.0
• dotenv ^16.3.1
• js-yaml ^4.1.0
• lodash ^4.17.21

pep621

backend/pyproject.toml

poetry

backend/pyproject.toml

• python ^3.11
• fastapi 0.111.0
• uvicorn ^0.29.0
• sqlalchemy ^2.0.21
• pydantic ^2.5.2
• requests ^2.31.0
• psycopg2 ^2.9.1
• pydantic-settings ^2.1.0
• sqlmodel ^0.0.14
• python-jose ^3.3.0
• httpx ^0.27.0
• ruff ^0.4.0
• pytest-env ^1.1.3
• prospector ^1.10.3
• pytest ^8.1.1
• pytest-cov ^5.0.0
• pytest-watch ^4.2.0
• alembic ^1.13.1
• black ^24.3.0
• isort ^5.13.2
• faker ^25.2.0

---

• Check this box to trigger a request for Renovate to run again on this repository