Update all non-major dependencies (#268)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/ci-pipeline.yml

@@ -42,7 +42,7 @@ jobs:
       # Login against a Docker registry
       # https://github.com/docker/login-action
       - name: Log into registry ${{ env.REGISTRY }}
-        uses: docker/login-action@v3.3.0
+        uses: docker/login-action@v3.4.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
@@ -68,7 +68,7 @@ jobs:
       # https://github.com/docker/build-push-action
       - name: Build test image
         id: build-test
-        uses: docker/build-push-action@v6.15.0
+        uses: docker/build-push-action@v6.16.0
         with:
           context: .
           load: true
@@ -127,15 +127,15 @@ jobs:
       # Install the cosign tool
       # https://github.com/sigstore/cosign-installer
       - name: Install cosign
-        uses: sigstore/[email protected].1
+        uses: sigstore/[email protected].2
 
       - name: Setup Docker buildx
         uses: docker/[email protected]
 
       # Login against a Docker registry
       # https://github.com/docker/login-action
       - name: Log into registry ${{ env.REGISTRY }}
-        uses: docker/login-action@v3.3.0
+        uses: docker/login-action@v3.4.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
@@ -165,7 +165,7 @@ jobs:
       # This build an image WITHOUT tags and outputs the digests, so that we can aggragate them later
       - name: Build and push production image
         id: build-and-push
-        uses: docker/build-push-action@v6.15.0
+        uses: docker/build-push-action@v6.16.0
         with:
           context: .
           target: ${{ matrix.docker_target }}
@@ -229,15 +229,15 @@ jobs:
       # Install the cosign tool
       # https://github.com/sigstore/cosign-installer
       - name: Install cosign
-        uses: sigstore/[email protected].1
+        uses: sigstore/[email protected].2
 
       - name: Setup Docker buildx
         uses: docker/[email protected]
 
       # Login against a Docker registry
       # https://github.com/docker/login-action
       - name: Log into registry ${{ env.REGISTRY }}
-        uses: docker/login-action@v3.3.0
+        uses: docker/login-action@v3.4.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}

Dockerfile

@@ -34,7 +34,7 @@ RUN --mount=type=cache,target=/var/cache/apt,sharing=locked  \
     && apt-get install -y --no-install-recommends \
     build-essential gcc git
 
-COPY --from=ghcr.io/astral-sh/uv:0.6.3 /uv /uvx /bin/
+COPY --from=ghcr.io/astral-sh/uv:0.6.17 /uv /uvx /bin/
 
 # From here we shouldn't need anymore a root user
 # Switch to nonroot and config uv

pyproject.toml

@@ -27,7 +27,7 @@ dependencies = [
     "pydantic-settings<3.0.0,>=2.0.3",
     "SQLAlchemy[asyncio,mypy]<3.0.0,>=2.0.0",
     "sqlalchemy-bind-manager",
-    "structlog<25.1.1,>=25.1.0",
+    "structlog<25.3.1,>=25.3.0",
 ]
 
 [dependency-groups]
@@ -40,14 +40,14 @@ http = [
     # If we decide to change framework, the generic ASGI instrumentation
     # will still name metrics with a generic naming.
     "opentelemetry-instrumentation-fastapi",
-    "starlette>=0.45.3,<0.46",
+    "starlette>=0.46.2,<0.47",
     "pyjwt>=2.10.1",
     "strawberry-graphql[debug-server]>=0.204.0",
     "uvicorn[standard]<1.0.0,>=0.34.0",
 ]
 socketio = [
     "python-socketio>=5.12.1",
-    "starlette>=0.45.3,<0.46",
+    "starlette>=0.46.2,<0.47",
     "uvicorn[standard]<1.0.0,>=0.34.0",
 ]
 migrations = [