Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency importlib-metadata to v8.7.1
• chore(deps): update dependency protobuf to v6.33.2
• chore(deps): update dependency pytest to v9.0.2
• chore(deps): update dependency sqlalchemy to v2.0.45
• chore(deps): update dependency boto3 to v1.42.24
• chore(deps): update dependency botocore to v1.42.24
• chore(deps): update dependency coverage to v7.13.1
• chore(deps): update dependency google-auth to v2.47.0
• chore(deps): update dependency greenlet to v3.3.0
• chore(deps): update dependency kombu to v5.6.2
• chore(deps): update dependency opentelemetry-api to v1.39.1
• chore(deps): update dependency opentelemetry-exporter-otlp to v1.39.1
• chore(deps): update dependency opentelemetry-exporter-otlp-proto-common to v1.39.1
• chore(deps): update dependency opentelemetry-exporter-otlp-proto-grpc to v1.39.1
• chore(deps): update dependency opentelemetry-exporter-otlp-proto-http to v1.39.1
• chore(deps): update dependency opentelemetry-proto to v1.39.1
• chore(deps): update dependency opentelemetry-sdk to v1.39.1
• chore(deps): update dependency ruamel-yaml to v0.19.1
• chore(deps): update dependency tzdata to v2025.3
• chore(deps): update dependency certifi to v2026
• chore(deps): update dependency sphinx to v9
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency werkzeug to v3.1.5 [security]
• chore(deps): update dependency urllib3 to v2.6.3 [security]
• chore(deps): update dependency billiard to v4.2.4
• chore(deps): update dependency cachetools to v6.2.4
• chore(deps): update python docker tag to v3.14.2
• chore(deps): update dependency celery to v5.6.2
• chore(deps): update dependency krb5 to v0.9.0
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency ruamel-yaml-clib to v0.2.15
• chore(deps): update dependency dogpile-cache to v1.5.0
• chore(deps): update dependency s3transfer to v0.16.0
• chore(deps): update dependency operator-manifest to v2
• chore(deps): update dependency wrapt to v2

Detected Dependencies

docker-compose (2)

compose-files/docker-compose.yml (3)

• registry 3
• postgres 18.1
• rabbitmq 4.2-management

compose-files/podman-compose.yml (3)

• registry 3
• postgres 18.1
• rabbitmq 4.2-management

dockerfile (3)

docker/Dockerfile-api

docker/Dockerfile-workers

docker/message_broker/Dockerfile

github-actions (3)

.github/workflows/build_on_tag.api.yml (3)

• actions/checkout v6
• redhat-actions/buildah-build v2
• redhat-actions/push-to-registry v2.7.1

.github/workflows/build.yml (8)

• oprypin/find-latest-tag v1
• actions/checkout v6
• redhat-actions/buildah-build v2
• redhat-actions/buildah-build v2
• redhat-actions/buildah-build v2
• redhat-actions/push-to-registry v2.7.1
• redhat-actions/push-to-registry v2.7.1
• redhat-actions/push-to-registry v2.7.1

.github/workflows/run_tox.yml (2)

• actions/checkout v6
• actions/setup-python v6

pip_requirements (3)

docs/requirements.txt (2)

• sphinx ==8.2.3 → [Updates: ==9.1.0]
• werkzeug ==3.1.3 → [Updates: ==3.1.5]

requirements-test.txt (99)

• alembic ==1.17.2
• amqp ==5.3.1
• billiard ==4.2.3 → [Updates: ==4.2.4]
• blinker ==1.9.0
• boto3 ==1.40.76 → [Updates: ==1.42.24]
• botocore ==1.40.76 → [Updates: ==1.42.24]
• cachetools ==6.2.2 → [Updates: ==6.2.4]
• celery ==5.5.3 → [Updates: ==5.6.2]
• certifi ==2025.11.12 → [Updates: ==2026.1.4]
• cffi ==2.0.0
• charset-normalizer ==3.4.4
• click ==8.3.1
• click-didyoumean ==0.3.1
• click-plugins ==1.1.1.2
• click-repl ==0.3.0
• coverage ==7.12.0 → [Updates: ==7.13.1]
• cryptography ==46.0.3
• decorator ==5.2.1
• dogpile-cache ==1.4.1 → [Updates: ==1.5.0]
• durationpy ==0.10
• flask ==3.1.2
• flask-login ==0.6.3
• flask-migrate ==4.1.0
• flask-sqlalchemy ==3.1.1
• google-auth ==2.43.0 → [Updates: ==2.47.0]
• googleapis-common-protos ==1.72.0
• greenlet ==3.2.4 → [Updates: ==3.3.0]
• grpcio ==1.76.0
• gssapi ==1.10.1
• idna ==3.11
• importlib-metadata ==8.7.0 → [Updates: ==8.7.1]
• importlib-resources ==6.5.2
• iniconfig ==2.3.0
• itsdangerous ==2.2.0
• jinja2 ==3.1.6
• jmespath ==1.0.1
• kombu ==5.5.4 → [Updates: ==5.6.2]
• krb5 ==0.8.0 → [Updates: ==0.9.0]
• kubernetes ==34.1.0
• mako ==1.3.10
• markupsafe ==3.0.3
• oauthlib ==3.3.1
• opentelemetry-api ==1.37.0 → [Updates: ==1.39.1]
• opentelemetry-exporter-otlp ==1.37.0 → [Updates: ==1.39.1]
• opentelemetry-exporter-otlp-proto-common ==1.37.0 → [Updates: ==1.39.1]
• opentelemetry-exporter-otlp-proto-grpc ==1.37.0 → [Updates: ==1.39.1]
• opentelemetry-exporter-otlp-proto-http ==1.37.0 → [Updates: ==1.39.1]
• opentelemetry-instrumentation ==0.58b0
• opentelemetry-instrumentation-botocore ==0.58b0
• opentelemetry-instrumentation-celery ==0.58b0
• opentelemetry-instrumentation-flask ==0.58b0
• opentelemetry-instrumentation-logging ==0.58b0
• opentelemetry-instrumentation-requests ==0.58b0
• opentelemetry-instrumentation-sqlalchemy ==0.58b0
• opentelemetry-instrumentation-wsgi ==0.58b0
• opentelemetry-propagator-aws-xray ==1.0.2
• opentelemetry-proto ==1.37.0 → [Updates: ==1.39.1]
• opentelemetry-sdk ==1.37.0 → [Updates: ==1.39.1]
• opentelemetry-semantic-conventions ==0.58b0
• opentelemetry-util-http ==0.58b0
• operator-manifest ==0.0.5 → [Updates: ==2.0.1]
• packaging ==25.0
• pluggy ==1.6.0
• prompt-toolkit ==3.0.52
• protobuf ==6.33.1 → [Updates: ==6.33.2]
• psycopg2-binary ==2.9.11
• pyasn1 ==0.6.1
• pyasn1-modules ==0.4.2
• pycparser ==2.23
• pygments ==2.19.2
• pyspnego ==0.12.0
• pytest ==9.0.1 → [Updates: ==9.0.2]
• pytest-cov ==7.0.0
• python-dateutil ==2.9.0.post0
• python-memcached ==1.62
• python-qpid-proton ==0.40.0
• pyyaml ==6.0.3
• requests ==2.32.5
• requests-kerberos ==0.15.0
• requests-oauthlib ==2.0.0
• rsa ==4.9.1
• ruamel-yaml ==0.18.15 → [Updates: ==0.19.1]
• ruamel-yaml-clib ==0.2.14 → [Updates: ==0.2.15]
• s3transfer ==0.14.0 → [Updates: ==0.16.0]
• semver ==3.0.4
• six ==1.17.0
• SQLAlchemy ==2.0.44 → [Updates: ==2.0.45]
• stevedore ==5.6.0
• tenacity ==9.1.2
• typing-extensions ==4.15.0
• tzdata ==2025.2 → [Updates: ==2025.3]
• urllib3 ==2.3.0 → [Updates: ==2.6.3]
• vine ==5.1.0
• wcwidth ==0.2.14
• websocket-client ==1.9.0
• werkzeug ==3.1.3 → [Updates: ==3.1.5]
• wrapt ==1.17.3 → [Updates: ==2.0.1]
• zipp ==3.23.0
• setuptools ==80.9.0

requirements.txt (92)

• alembic ==1.17.2
• amqp ==5.3.1
• billiard ==4.2.3 → [Updates: ==4.2.4]
• blinker ==1.9.0
• boto3 ==1.40.76 → [Updates: ==1.42.24]
• botocore ==1.40.76 → [Updates: ==1.42.24]
• cachetools ==6.2.2 → [Updates: ==6.2.4]
• celery ==5.5.3 → [Updates: ==5.6.2]
• certifi ==2025.11.12 → [Updates: ==2026.1.4]
• cffi ==2.0.0
• charset-normalizer ==3.4.4
• click ==8.3.1
• click-didyoumean ==0.3.1
• click-plugins ==1.1.1.2
• click-repl ==0.3.0
• cryptography ==46.0.3
• decorator ==5.2.1
• dogpile-cache ==1.4.1 → [Updates: ==1.5.0]
• durationpy ==0.10
• flask ==3.1.2
• flask-login ==0.6.3
• flask-migrate ==4.1.0
• flask-sqlalchemy ==3.1.1
• google-auth ==2.43.0 → [Updates: ==2.47.0]
• googleapis-common-protos ==1.72.0
• greenlet ==3.2.4 → [Updates: ==3.3.0]
• grpcio ==1.76.0
• gssapi ==1.10.1
• idna ==3.11
• importlib-metadata ==8.7.0 → [Updates: ==8.7.1]
• importlib-resources ==6.5.2
• itsdangerous ==2.2.0
• jinja2 ==3.1.6
• jmespath ==1.0.1
• kombu ==5.5.4 → [Updates: ==5.6.2]
• krb5 ==0.8.0 → [Updates: ==0.9.0]
• kubernetes ==34.1.0
• mako ==1.3.10
• markupsafe ==3.0.3
• oauthlib ==3.3.1
• opentelemetry-api ==1.37.0 → [Updates: ==1.39.1]
• opentelemetry-exporter-otlp ==1.37.0 → [Updates: ==1.39.1]
• opentelemetry-exporter-otlp-proto-common ==1.37.0 → [Updates: ==1.39.1]
• opentelemetry-exporter-otlp-proto-grpc ==1.37.0 → [Updates: ==1.39.1]
• opentelemetry-exporter-otlp-proto-http ==1.37.0 → [Updates: ==1.39.1]
• opentelemetry-instrumentation ==0.58b0
• opentelemetry-instrumentation-botocore ==0.58b0
• opentelemetry-instrumentation-celery ==0.58b0
• opentelemetry-instrumentation-flask ==0.58b0
• opentelemetry-instrumentation-logging ==0.58b0
• opentelemetry-instrumentation-requests ==0.58b0
• opentelemetry-instrumentation-sqlalchemy ==0.58b0
• opentelemetry-instrumentation-wsgi ==0.58b0
• opentelemetry-propagator-aws-xray ==1.0.2
• opentelemetry-proto ==1.37.0 → [Updates: ==1.39.1]
• opentelemetry-sdk ==1.37.0 → [Updates: ==1.39.1]
• opentelemetry-semantic-conventions ==0.58b0
• opentelemetry-util-http ==0.58b0
• operator-manifest ==0.0.5 → [Updates: ==2.0.1]
• packaging ==25.0
• prompt-toolkit ==3.0.52
• protobuf ==6.33.1 → [Updates: ==6.33.2]
• psycopg2-binary ==2.9.11
• pyasn1 ==0.6.1
• pyasn1-modules ==0.4.2
• pycparser ==2.23
• pyspnego ==0.12.0
• python-dateutil ==2.9.0.post0
• python-memcached ==1.62
• python-qpid-proton ==0.40.0
• pyyaml ==6.0.3
• requests ==2.32.5
• requests-kerberos ==0.15.0
• requests-oauthlib ==2.0.0
• rsa ==4.9.1
• ruamel-yaml ==0.18.15 → [Updates: ==0.19.1]
• ruamel-yaml-clib ==0.2.14 → [Updates: ==0.2.15]
• s3transfer ==0.14.0 → [Updates: ==0.16.0]
• semver ==3.0.4
• six ==1.17.0
• SQLAlchemy ==2.0.44 → [Updates: ==2.0.45]
• stevedore ==5.6.0
• tenacity ==9.1.2
• typing-extensions ==4.15.0
• tzdata ==2025.2 → [Updates: ==2025.3]
• urllib3 ==2.3.0 → [Updates: ==2.6.3]
• vine ==5.1.0
• wcwidth ==0.2.14
• websocket-client ==1.9.0
• werkzeug ==3.1.3 → [Updates: ==3.1.5]
• wrapt ==1.17.3 → [Updates: ==2.0.1]
• zipp ==3.23.0

pyenv (1)

.python-version (1)

• python 3.14.0 → [Updates: 3.14.2]

---

• Check this box to trigger a request for Renovate to run again on this repository