Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update all dependencies (actions/upload-artifact, cgr.dev/chainguard/python, fastapi, github/codeql-action, ortelius/workflow-toolkit, ossf/scorecard-action, peter-evans/create-pull-request, starlette)

Detected dependencies

dockerfile

Dockerfile

• cgr.dev/chainguard/python latest-dev@sha256:9e7d10b641a219baa71afd8fec83ab8622a0486f7d8bdab4ed5536c361b1add1
• cgr.dev/chainguard/python latest@sha256:b9328fd1f02d7836c7a75b0423ea9b0098e1cc10f6d3b9398bac5ebb4410f316

github-actions

.github/workflows/build-push-chart.yml

• ortelius/workflow-toolkit f4838576b2f6cc71062002313e23e7be5c636158
• ortelius/workflow-toolkit f4838576b2f6cc71062002313e23e7be5c636158
• ortelius/workflow-toolkit f4838576b2f6cc71062002313e23e7be5c636158
• ortelius/workflow-toolkit f4838576b2f6cc71062002313e23e7be5c636158
• ortelius/workflow-toolkit f4838576b2f6cc71062002313e23e7be5c636158

.github/workflows/codeql.yml

• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• github/codeql-action v3.28.9@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0
• github/codeql-action v3.28.9@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0

.github/workflows/mega-linter.yml

• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• oxsecurity/megalinter v8.4.2@ec124f7998718d79379a3c5b39f5359952baf21d
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• peter-evans/create-pull-request v7.0.6@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f
• stefanzweifel/git-auto-commit-action v5.1.0@e348103e9026cc0eee72ae06630dbe30c8bf7a79

.github/workflows/scorecard.yml

• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• github/codeql-action v3.28.9@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0

pep621

pyproject.toml

poetry

pyproject.toml

• python ^3.12
• fastapi 0.115.8
• psycopg2-binary 2.9.10
• pydantic 2.10.6
• sqlalchemy 2.0.38
• uvicorn 0.34.0
• requests 2.32.3
• pyyaml 6.0.2
• certifi 2025.1.31
• idna 3.10
• starlette 0.45.3

---

• Check this box to trigger a request for Renovate to run again on this repository