This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/descoped/authly). ## Rate-Limited The following updates are currently rate-limited. To force their creation now, click on a checkbox below. - [ ] <!-- unlimit-branch=renovate/major-github-actions -->chore(deps): update codecov/codecov-action action to v6 - [ ] <!-- unlimit-branch=renovate/lock-file-maintenance-python-deps -->chore(deps): Lock file maintenance - [ ] <!-- create-all-rate-limited-prs -->🔐 **Create all rate-limited PRs at once** 🔐 ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] <!-- rebase-branch=renovate/pypi-cryptography-vulnerability -->[chore(deps): update cryptography to 46.0.7 [SECURITY]](../pull/37) - [ ] <!-- rebase-branch=renovate/pypi-python-multipart-vulnerability -->[chore(deps): update python-multipart to 0.0.22 [SECURITY]](../pull/36) - [ ] <!-- rebase-branch=renovate/pypi-pyjwt-vulnerability -->[chore(deps): update PyJWT to 2.12.0 [SECURITY]](../pull/40) (`PyJWT`, `pyjwt`) - [ ] <!-- rebase-branch=renovate/pypi-starlette-vulnerability -->[chore(deps): update starlette to 0.49.1 [SECURITY]](../pull/32) - [ ] <!-- rebase-branch=renovate/pypi-pytest-vulnerability -->[chore(deps): update pytest to 9.0.3 [SECURITY]](../pull/41) - [ ] <!-- rebase-branch=renovate/docker-dependencies -->[chore(deps): update docker dependencies](../pull/34) (`alpine`, `eclipse-temurin`, `mongo`) - [ ] <!-- rebase-all-open-prs -->**Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies <details><summary>docker-compose (11)</summary> <blockquote> <details><summary>docker-compose.dev.yml</summary> </details> <details><summary>docker-compose.hub.yml (2)</summary> - `postgres 18-alpine` - `redis 8-alpine` </details> <details><summary>docker-compose.prod.yml (1)</summary> - `fluent/fluentd v1.19-debian-1` </details> <details><summary>docker-compose.standalone.yml</summary> </details> <details><summary>docker-compose.tck.yml (2)</summary> - `mongo 8.2.1` → [Updates: `8.2.6`] - `eclipse-temurin 25-jre` → [Updates: `25.0.2_10-jre`] </details> <details><summary>docker-compose.yml (2)</summary> - `postgres 18-alpine` - `redis 8-alpine` </details> <details><summary>tck/conformance-suite-build/docker-compose.yml (1)</summary> - `mongo 8.2.1` → [Updates: `8.2.6`] </details> <details><summary>tck/docker-compose-tck-ci.yml (1)</summary> - `mongo 8.2.1` → [Updates: `8.2.6`] </details> <details><summary>tck/docker-compose-tck.yml (1)</summary> - `mongo 8.2.1` → [Updates: `8.2.6`] </details> <details><summary>tck/docker/docker-compose-simple.yml (2)</summary> - `mongo 8.2.1` → [Updates: `8.2.6`] - `eclipse-temurin 25-jre` → [Updates: `25.0.2_10-jre`] </details> <details><summary>tck/docker/docker-compose.yml (3)</summary> - `postgres 18-alpine` - `mongo 8` - `postgres 18-alpine` </details> </blockquote> </details> <details><summary>dockerfile (7)</summary> <blockquote> <details><summary>docker-standalone/authly-db-proxy/Dockerfile (1)</summary> - `python 3.14-alpine` </details> <details><summary>Dockerfile (2)</summary> - `python 3.14-slim` - `python 3.14-slim` </details> <details><summary>Dockerfile.standalone (3)</summary> - `alpine 3.22` → [Updates: `3.23`] - `python 3.14-alpine` - `alpine 3.22` → [Updates: `3.23`] </details> <details><summary>tck/conformance-suite-build/Dockerfile (2)</summary> - `maven 3-eclipse-temurin-17` - `eclipse-temurin 25-jre` → [Updates: `25.0.2_10-jre`] </details> <details><summary>tck/conformance-suite-build/Dockerfile.multi (2)</summary> - `maven 3-eclipse-temurin-17` - `eclipse-temurin 25-jre` → [Updates: `25.0.2_10-jre`] </details> <details><summary>tck/conformance-suite-production/Dockerfile (1)</summary> - `eclipse-temurin 25` </details> <details><summary>tck/httpd-ci/Dockerfile (1)</summary> - `httpd 2.4-alpine` </details> </blockquote> </details> <details><summary>github-actions (6)</summary> <blockquote> <details><summary>.github/workflows/build-postgres-cache.yml (9)</summary> - `actions/checkout v6` - `docker/setup-buildx-action v4` - `docker/login-action v4` - `docker/build-push-action v7` - `actions/upload-artifact v7` - `actions/checkout v6` - `actions/download-artifact v8` - `docker/setup-buildx-action v4` - `docker/login-action v4` </details> <details><summary>.github/workflows/build-test-native.yml (7)</summary> - `actions/checkout v6` - `actions/setup-python v6` - `astral-sh/setup-uv v7` - `codecov/codecov-action v5` → [Updates: `v6`] - `actions/checkout v6` - `actions/setup-python v6` - `astral-sh/setup-uv v7` </details> <details><summary>.github/workflows/build-test-with-docker.yml (8)</summary> - `actions/checkout v6` - `docker/setup-buildx-action v4` - `docker/build-push-action v7` - `actions/upload-artifact v7` - `actions/checkout v6` - `actions/download-artifact v8` - `actions/checkout v6` - `actions/download-artifact v8` </details> <details><summary>.github/workflows/conformance-tests.yml (10)</summary> - `actions/checkout v6` - `actions/checkout v6` - `actions/setup-java v5` - `docker/setup-buildx-action v4` - `docker/login-action v4` - `docker/build-push-action v7` - `actions/checkout v6` - `actions/setup-python v6` - `actions/upload-artifact v7` - `python 3.14` </details> <details><summary>.github/workflows/full-stack-test-with-docker.yml (6)</summary> - `actions/checkout v6` - `docker/setup-buildx-action v4` - `docker/build-push-action v7` - `actions/upload-artifact v7` - `actions/checkout v6` - `actions/download-artifact v8` </details> <details><summary>.github/workflows/release-pypi.yml (25)</summary> - `actions/checkout v6` - `actions/setup-python v6` - `astral-sh/setup-uv v7` - `actions/checkout v6` - `actions/setup-python v6` - `astral-sh/setup-uv v7` - `codecov/codecov-action v5` → [Updates: `v6`] - `actions/checkout v6` - `actions/setup-python v6` - `astral-sh/setup-uv v7` - `actions/attest-build-provenance v4` - `actions/upload-artifact v7` - `actions/checkout v6` - `actions/download-artifact v8` - `docker/setup-buildx-action v4` - `docker/login-action v4` - `docker/metadata-action v6` - `docker/build-push-action v7` - `actions/checkout v6` - `docker/setup-buildx-action v4` - `docker/login-action v4` - `docker/login-action v4` - `docker/build-push-action v7` - `docker/metadata-action v6` - `docker/build-push-action v7` </details> </blockquote> </details> <details><summary>pep621 (1)</summary> <blockquote> <details><summary>pyproject.toml (33)</summary> - `python >=3.11` - `fastapi >=0.116.1` - `starlette >=0.47.2` → [Updates: `>=0.47.2`] - `uvicorn >=0.35.0` - `python-dotenv >=1.0.1` - `psycopg-toolkit >=0.2.0` - `tenacity >=9.0.0` - `pydantic >=2.10.5` - `pydantic-settings >=2.1.0` - `tomli >=2.2.1` - `python-jose >=3.3.0` - `cryptography >=44.0.1` → [Updates: `>=44.0.1`] - `bcrypt ==5.0.0` - `python-multipart >=0.0.6` → [Updates: `>=0.0.6`] - `jinja2 >=3.1.6` - `click >=8.1.7` - `httpx >=0.28.1` - `coverage >=7.9.2` - `prometheus-client >=0.20.0` - `pyjwt >=2.10.1` → [Updates: `>=2.10.1`] - `psycopg >=3.2.3` - `psycopg-pool >=3.2.4` - `redis >=5.2.0` - `testcontainers >=4.10.0` - `pytest-xdist >=3.8.0` - `ruff >=0.8.6` - `pytest >=8.3.4` → [Updates: `>=8.3.4`] - `pytest-order >=1.3.0` - `pytest-asyncio >=0.25.0` - `pytest-cov >=6.0.0` - `testcontainers >=4.10.0` - `fastapi-testing >=0.2.0` - `hatchling >=1.26.3` </details> </blockquote> </details> <details><summary>pip_requirements (1)</summary> <blockquote> <details><summary>docker-standalone/authly-db-proxy/requirements.txt (4)</summary> - `aiohttp >=3.9.0` - `asyncpg >=0.29.0` - `aioredis >=2.0.0` - `PyJWT >=2.8.0` → [Updates: `>=2.12.0`] </details> </blockquote> </details> --- - [ ] <!-- manual job -->Check this box to trigger a request for Renovate to run again on this repository
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Rate-Limited
The following updates are currently rate-limited. To force their creation now, click on a checkbox below.
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
PyJWT,pyjwt)alpine,eclipse-temurin,mongo)Detected Dependencies
docker-compose (11)
dockerfile (7)
github-actions (6)
pep621 (1)
pip_requirements (1)