Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
npm	@intlify/vue-i18n-loader
npm	vite-plugin-rewrite-all

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• fix(deps): update auth-api dependents updates (blinker, charset-normalizer, click, google-auth, google-cloud-core, googleapis-common-protos, idna, msgpack, pyasn1, pyasn1_modules, pylint, pytest, pytest-asyncio, pytest-env, python, rsa, ruff, semver, six, stoplight/prism, thrift, zipp)

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update auth-api updates (CacheControl, MarkupSafe, attrs, cachetools, certifi, google-cloud-core, google-cloud-pubsub, google-cloud-storage, jsonschema, launchdarkly-server-sdk, pytest-asyncio, python, requests, ruff, sqlalchemy-utils, stoplight/prism)
• chore(deps): update dev dependencies (stylus, vue-template-compiler)
• fix(deps): update auth-web non-major updates (@bcrs-shared-components/base-address, @bcrs-shared-components/enums, @bcrs-shared-components/interfaces, @bcrs-shared-components/jurisdiction, moment-timezone, nginx, node, pinia-class, vue, vuelidate, vuetify)
• chore(deps): update actions/checkout action to v6
• chore(deps): update dependency astroid to v4
• chore(deps): update dependency coverage to v7
• chore(deps): update dev dependencies (major) (@intlify/vue-i18n-loader, @pinia/testing, @types/mime-types, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, @vue/eslint-config-standard, @vue/eslint-config-typescript, @vue/test-utils, axios-mock-adapter, eslint, eslint-plugin-vue, eslint-plugin-vuetify, jsdom, postcss-nesting, sinon, typescript, vite, vitest)
• chore(deps): update infrastructure updates (major) (node, stoplight/prism)
• chore(deps): update pytest (major) (pytest, pytest-asyncio, pytest-cov, pytest-env)
• fix(deps): update dependency @mdi/font to v7
• fix(deps): update dependency attrs to v25
• fix(deps): update dependency bcrypt to v5
• fix(deps): update dependency cachetools to v7
• fix(deps): update dependency cattrs to v26
• fix(deps): update dependency importlib-resources to v6
• fix(deps): update dependency keycloak-js to v26
• fix(deps): update dependency markupsafe to v3
• fix(deps): update dependency marshmallow to v4
• fix(deps): update dependency mime-types to v3
• fix(deps): update dependency pinia to v3
• fix(deps): update dependency pycountry to v26
• fix(deps): update dependency pyrfc3339 to v2 (pyRFC3339, pyrfc3339)
• fix(deps): update dependency pytz to v2025
• fix(deps): update dependency vue to v3
• fix(deps): update dependency vue-gtag to v3
• fix(deps): update dependency vue-i18n to v11
• fix(deps): update dependency vue-i18n-composable to v2
• fix(deps): update dependency vue-loader to v17
• fix(deps): update dependency vue-router to v5
• fix(deps): update dependency vuetify to v3
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency flask to v3.1.3 [security]
• chore(deps): update dependency faker to v40
• chore(deps): update dependency mock to v5
• chore(deps): update dependency pylint to v4
• fix(deps): update dependency certifi to v2026
• fix(deps): update dependency gunicorn to v25
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cloudbuild (1)

jobs/gcp-db-data-masking/cloudbuild.yaml

docker-compose (4)

auth-api/tests/docker/docker-compose.yml (4)

• quay.io/keycloak/keycloak 26.0 → [Updates: 26.5]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]

docker/docker-compose.yml (2)

• postgres 11 → [Updates: 13]
• postgres 11 → [Updates: 13]

queue_services/account-mailer/tests/docker/docker-compose.yml (3)

• postgres 15 → [Updates: 18]
• quay.io/keycloak/keycloak 12.0.2 → [Updates: 12.0.4, 26.5.4]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]

queue_services/auth-queue/tests/docker-compose.yml

dockerfile (5)

auth-api/Dockerfile (1)

• python 3.12.5-bookworm → [Updates: 3.14.2-bookworm]

auth-web/Dockerfile (2)

• node 20.5.1 → [Updates: 20.19.6, 24.13.1]
• nginx 1.18.0 → [Updates: 1.29.4]

jobs/gcp-db-data-masking/Dockerfile

queue_services/account-mailer/Dockerfile (1)

• python 3.12.9-bookworm → [Updates: 3.14.2-bookworm]

queue_services/auth-queue/Dockerfile (1)

• python 3.12.5-bookworm → [Updates: 3.14.2-bookworm]

github-actions (9)

.github/workflows/account-mailer-cd.yml

.github/workflows/account-mailer-ci.yml

.github/workflows/auth-api-cd.yml

.github/workflows/auth-api-ci.yml

.github/workflows/auth-db-mask-rules-upload.yml (1)

• actions/checkout v4 → [Updates: v6]

.github/workflows/auth-queue-cd.yml

.github/workflows/auth-queue-ci.yml

.github/workflows/auth-web-cd.yml

.github/workflows/auth-web-ci.yml

npm (1)

auth-web/package.json (69)

• @bcrs-shared-components/base-address 2.0.39 → [Updates: 2.2.4]
• @bcrs-shared-components/bread-crumb 1.0.8
• @bcrs-shared-components/corp-type-module 1.0.16
• @bcrs-shared-components/enums 1.1.10 → [Updates: 1.2.2]
• @bcrs-shared-components/interfaces 1.1.13 → [Updates: 1.1.40]
• @bcrs-shared-components/jurisdiction 1.1.4 → [Updates: 1.1.33]
• @mdi/font ^4.5.95 → [Updates: ^7.0.0]
• @vue/compiler-dom ^3.2.45
• @vue/composition-api ^1.7.1
• axios ^1.13.5
• http-status-codes ^2.1.4
• js-base64 ^3.7.5
• keycloak-js ^9.0.3 → [Updates: ^26.0.0]
• lodash.isdate ^4.0.1
• mime-types ^2.1.27 → [Updates: ^3.0.0]
• moment ^2.29.4
• moment-timezone ^0.5.45 → [Updates: ^0.6.0]
• pinia ^2.1.6 → [Updates: ^3.0.0]
• pinia-class ^0.0.3 → [Updates: ^0.0.6]
• sanitize-html ^2.13.0
• sbc-common-components ^3.1.6
• vue 2.6.14 → [Updates: 2.7.16, 3.5.28]
• vue-auto-resize ^1.0.1
• vue-debounce-decorator ^1.0.1
• vue-gtag ^1.16.1 → [Updates: ^3.0.0]
• vue-i18n 8.28.2 → [Updates: 11.2.8]
• vue-i18n-composable ^1.0.0 → [Updates: ^2.0.0]
• vue-loader ^15.9.2 → [Updates: ^17.0.0]
• vue-plugin-helper-decorator 0.0.12
• vue-property-decorator ^9.1.2
• vue-router ^3.0.3 → [Updates: ^5.0.0]
• vue-sanitize-directive ^0.2.1
• vue-the-mask ^0.11.1
• vuelidate 0.6.2 → [Updates: 0.7.7]
• vuetify 2.2.7 → [Updates: 2.7.2, 3.12.0]
• @intlify/vue-i18n-loader ^1.1.0 → [Updates: ^4.0.0]
• @pinia/testing ^0.1.3 → [Updates: ^1.0.0]
• @types/lodash ^4.14.202
• @types/lodash.isdate ^4.0.9
• @types/mime-types ^2.1.0 → [Updates: ^3.0.0]
• @types/sanitize-html ^2.11.0
• @types/vuelidate ^0.7.13
• @typescript-eslint/eslint-plugin ^6.4.0 → [Updates: ^8.0.0]
• @typescript-eslint/parser ^6.4.0 → [Updates: ^8.0.0]
• @vue/eslint-config-standard ^4.0.0 → [Updates: ^9.0.0]
• @vue/eslint-config-typescript ^4.0.0 → [Updates: ^14.0.0]
• @vue/test-utils 1.3.6 → [Updates: 2.4.6]
• axios-mock-adapter ^1.18.1 → [Updates: ^2.0.0]
• eslint ^8.46.0 → [Updates: ^10.0.0]
• eslint-plugin-vue ^8.7.1 → [Updates: ^10.0.0]
• eslint-plugin-vuetify ^1.1.0 → [Updates: ^2.0.0]
• flush-promises ^1.0.2
• jsdom ^22.1.0 → [Updates: ^28.0.0]
• patch-package ^8.0.1
• postcss-nesting ^12.0.1 → [Updates: ^14.0.0]
• sass ^1.22.10
• sinon ^6.3.5 → [Updates: ^21.0.0]
• stylus ^0.54.7 → [Updates: ^0.64.0]
• typescript ^4.9.5 → [Updates: ^5.0.0]
• unplugin-vue2-script-setup ^0.11.4
• vite ^4.5.14 → [Updates: ^7.0.0]
• vite-plugin-environment ^1.1.3
• vite-plugin-rewrite-all ^1.0.1
• vite-plugin-vue2 ^2.0.3
• vitest ^1.6.1 → [Updates: ^4.0.0]
• vue-class-component ^7.1.0
• vue-cli-plugin-vuetify ^2.0.3
• vue-template-compiler 2.6.14 → [Updates: 2.7.16]
• vuelidate-property-decorators ^1.0.28

poetry (3)

auth-api/pyproject.toml (47)

• python >=3.12,<3.13
• flask-cors ^6.0.0
• flask-migrate ^4.0.7
• flask-moment ^1.0.6
• flask-sqlalchemy ^3.1.1
• flask-marshmallow ^1.2.1
• gunicorn ^23.0.0 → [Updates: ^25.0.0]
• google-cloud-core 2.4.3 → [Updates: 2.5.0]
• google-cloud-storage 3.0.0 → [Updates: 3.9.0]
• google-cloud-pubsub 2.29.0 → [Updates: 2.35.0]
• pg8000 ^1.31.5
• flask-mail ^0.10.0
• bcrypt ^4.2.0 → [Updates: ^5.0.0]
• pyhumps ^3.8.0
• marshmallow-sqlalchemy ^1.0.0
• cachelib ^0.13.0
• aiohttp ^3.13.3
• cattrs ^23.2.3 → [Updates: ^26.0.0]
• orjson ^3.10.7
• sqlalchemy-utils ^0.41.2 → [Updates: ^0.42.0]
• pytz ^2024.2 → [Updates: ^2025.2]
• marshmallow <4.0.0 → [Updates: <4.2.3]
• attrs 24.2.0 → [Updates: 24.3.0, 25.4.0]
• CacheControl 0.14.0 → [Updates: 0.14.4]
• cachetools 5.5.0 → [Updates: 5.5.2, 7.0.1]
• certifi 2024.8.30 → [Updates: 2024.12.14, 2026.1.4]
• flask 3.0.2 → [Updates: 3.1.3]
• itsdangerous ^2.1.2
• jinja2 ^3.1.5
• jsonschema 4.17.3 → [Updates: 4.26.0]
• launchdarkly-server-sdk 9.5.0 → [Updates: 9.15.0]
• MarkupSafe 2.1.1 → [Updates: 2.1.5, 3.0.3]
• python-dotenv ^1.0.1
• requests 2.32.4 → [Updates: 2.32.5]
• Werkzeug ^3.1.5
• sbc-common-components abb9c9c2e6c39895e773604cabe2f525d1398a51
• aiohttp-retry ^2.9.1
• pytest ^8.3.2 → [Updates: ^9.0.0]
• pytest-cov ^5.0.0 → [Updates: ^7.0.0]
• pytest-mock ^3.14.0
• requests-mock ^1.12.1
• faker ^25.9.2 → [Updates: ^40.0.0]
• freezegun ^1.5.1
• pytest-asyncio ^0.23.8 → [Updates: ^0.26.0, ^1.0.0]
• lovely-pytest-docker ^1.0.0
• bandit ^1.7.9
• ruff ^0.14.1 → [Updates: ^0.15.0]

queue_services/account-mailer/pyproject.toml (35)

• python >=3.12,<3.13
• blinker >=1.9.0
• charset-normalizer 3.3.2 → [Updates: 3.4.4]
• click 8.1.7 → [Updates: 8.3.1]
• expiringdict 1.2.2
• google-auth 2.28.2 → [Updates: 2.48.0]
• google-cloud-core 2.4.3 → [Updates: 2.5.0]
• googleapis-common-protos 1.63.0 → [Updates: 1.72.0]
• idna 3.7 → [Updates: 3.11]
• importlib-resources 5.13.0 → [Updates: 6.5.2]
• jaeger-client 4.8.0
• msgpack 1.0.8 → [Updates: 1.1.2]
• opentracing 2.4.0
• pkgutil-resolve-name 1.3.10
• pyrfc3339 1.1 → [Updates: 2.1.0]
• pycountry 23.12.11 → [Updates: 26.2.16]
• pyrsistent 0.20.0
• pytz ^2024.1 → [Updates: ^2025.2]
• semver 3.0.2 → [Updates: 3.0.4]
• six 1.16.0 → [Updates: 1.17.0]
• threadloop 1.0.2
• thrift 0.20.0 → [Updates: 0.22.0]
• urllib3 2.6.3
• zipp 3.19.1 → [Updates: 3.23.0]
• cloud-sql-python-connector ^1.13.0
• pytest ^8.3.2 → [Updates: ^9.0.0]
• pytest-mock ^3.14.0
• pyhamcrest ^2.1.0
• pytest-cov ^5.0.0 → [Updates: ^7.0.0]
• freezegun ^1.5.1
• coverage ^7.6.1
• lovely-pytest-docker ^1.0.0
• pytest-asyncio 0.18.3 → [Updates: 0.26.0, 1.3.0]
• astroid ^3.2.3 → [Updates: ^4.0.0]
• ruff ^0.14.1 → [Updates: ^0.15.0]

queue_services/auth-queue/pyproject.toml (42)

• python >=3.12,<3.13
• blinker 1.8.2 → [Updates: 1.9.0]
• charset-normalizer 3.3.2 → [Updates: 3.4.4]
• click 8.1.7 → [Updates: 8.3.1]
• expiringdict 1.2.2
• idna 3.7 → [Updates: 3.11]
• importlib-resources 5.13.0 → [Updates: 6.5.2]
• jaeger-client 4.8.0
• msgpack 1.0.8 → [Updates: 1.1.2]
• opentracing 2.4.0
• pkgutil_resolve_name 1.3.10
• pyRFC3339 1.1 → [Updates: 2.1.0]
• pyasn1 0.6.0 → [Updates: 0.6.2]
• pyasn1_modules 0.4.0 → [Updates: 0.4.2]
• pycountry 23.12.11 → [Updates: 26.2.16]
• pyrsistent 0.20.0
• python-dateutil 2.9.0.post0
• pytz 2024.2 → [Updates: 2025.2]
• rsa 4.9 → [Updates: 4.9.1]
• semver 3.0.2 → [Updates: 3.0.4]
• six 1.16.0 → [Updates: 1.17.0]
• threadloop 1.0.2
• thrift 0.20.0 → [Updates: 0.22.0]
• zipp 3.19.1 → [Updates: 3.23.0]
• cloud-sql-python-connector ^1.13.0
• pylint 3.2.3 → [Updates: 3.3.9, 4.0.5]
• coverage ^5.5 → [Updates: ^7.13]
• pylint-flask ^0.6.0
• pytest 8.1.1 → [Updates: 8.4.2, 9.0.2]
• pytest-cov ^2.11.1 → [Updates: ^7.0.0]
• pytest-env ^0.6.2 → [Updates: ^0.8.0, ^1.0.0]
• pytest-dotenv ^0.5.2
• pytest-mock ^3.5.1
• requests ^2.25.1
• freezegun ^1.1.0
• faker ^8.1.1 → [Updates: ^40.0.0]
• pytest-asyncio 0.21.0 → [Updates: 0.26.0, 1.3.0]
• mock ^4.0.3 → [Updates: ^5.0.0]
• lovely-pytest-docker ^1.0.0
• astroid ^3.2.3 → [Updates: ^4.0.0]
• flake8-pyproject ^1.2.3
• ruff ^0.14.1 → [Updates: ^0.15.0]

renovate-config-presets (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository