Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (3)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
bun	eslint-plugin-jsx-a11y	2024-10-26
pep621	jinja2	2025-03-05
pep621	python-jose	2025-05-28

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): pin dependencies (@eslint/js, @testing-library/jest-dom, @testing-library/react, @vitejs/plugin-react, eslint, eslint-plugin-jsx-a11y, gcr.io/distroless/static, ghcr.io/astral-sh/uv, ghcr.io/dadav/rhacs-manager-auth-header-injector, ghcr.io/dadav/rhacs-manager-backend, ghcr.io/dadav/rhacs-manager-frontend, ghcr.io/dadav/rhacs-manager-mcp-server, globals, jsdom, nginxinc/nginx-unprivileged, orhun/git-cliff-action, oven-sh/setup-bun, oven/bun, typescript, typescript-eslint, vite, vitest)
• chore(deps): pin dependencies (@types/react, @types/react-dom)
• chore(deps): update actions/checkout digest to 3d3c42e
• chore(deps): update docker/login-action digest to dbcb813
• chore(deps): update python:3.14-slim docker digest to cea0e60
• fix(deps): update kubernetes monorepo to v0.36.3 (k8s.io/apimachinery, k8s.io/client-go)
• chore(deps): update actions/setup-go action to v7
• chore(deps): update actions/setup-python action to v7
• chore(deps): update astral-sh/setup-uv action to v9
• chore(deps): update dependency @testing-library/jest-dom to v7
• chore(deps): update dependency jsdom to v30
• fix(deps): update dependency mcp to v2
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency typescript to v7

Detected Dependencies

bun (1)

frontend/package.json (26)

• @patternfly/react-core ^6.6.0
• @patternfly/react-icons ^6.6.0
• @patternfly/react-table ^6.6.0
• @tanstack/react-query ^5.101.2
• date-fns ^4.4.0
• i18next ^26.3.6
• react ^19.2.7
• react-dom ^19.2.7
• react-i18next ^17.0.9
• react-joyride ^3.2.0
• react-router ^8.2.0
• recharts ^3.9.2
• @eslint/js ^10.0.1 → [Updates: 10.0.1]
• @testing-library/jest-dom ^6.9.1 → [Updates: 6.9.1, ^7.0.0]
• @testing-library/react ^16.3.2 → [Updates: 16.3.2]
• @types/react ^19.2.17 → [Updates: 19.2.18]
• @types/react-dom ^19.2.3 → [Updates: 19.2.4]
• @vitejs/plugin-react ^6.0.3 → [Updates: 6.0.5]
• eslint ^10.7.0 → [Updates: 10.8.0]
• eslint-plugin-jsx-a11y ^6.10.2 → [Updates: 6.10.2]
• globals ^17.7.0 → [Updates: 17.8.0]
• jsdom ^29.1.1 → [Updates: 29.1.1, ^30.0.0]
• typescript ^6.0.3 → [Updates: 6.0.3, ^7.0.0]
• typescript-eslint ^8.64.0 → [Updates: 8.65.0]
• vite ^8.1.4 → [Updates: 8.2.0]
• vitest ^4.1.10 → [Updates: 4.1.10]

dockerfile (4)

auth-header-injector/Containerfile (2)

• golang 1.26-alpine@sha256:0178a641fbb4858c5f1b48e34bdaabe0350a330a1b1149aabd498d0699ff5fb2
• gcr.io/distroless/static nonroot → [Updates: nonroot]

backend/Containerfile (2)

• python 3.14-slim@sha256:d3400aa122fa42cf0af0dbe8ec3091b047eac5c8f7e3539f7135e86d855dc015 → [Updates: 3.14-slim]
• ghcr.io/astral-sh/uv latest → [Updates: latest]

frontend/Containerfile (2)

• oven/bun 1 → [Updates: 1]
• nginxinc/nginx-unprivileged alpine → [Updates: alpine]

mcp-server/Containerfile (2)

• python 3.14-slim@sha256:d3400aa122fa42cf0af0dbe8ec3091b047eac5c8f7e3539f7135e86d855dc015 → [Updates: 3.14-slim]
• ghcr.io/astral-sh/uv latest → [Updates: latest]

github-actions (3)

.github/workflows/build.yaml (30)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0 → [Updates: v4]
• docker/metadata-action v6@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0 → [Updates: v4]
• docker/metadata-action v6@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0 → [Updates: v4]
• docker/metadata-action v6@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0 → [Updates: v4]
• docker/metadata-action v6@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• azure/setup-helm v5@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• azure/setup-helm v5@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0 → [Updates: v4]
• orhun/git-cliff-action v4 → [Updates: v4]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25

.github/workflows/ci.yaml (29)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• oven-sh/setup-bun v2 → [Updates: v2]
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• oven-sh/setup-bun v2 → [Updates: v2]
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• oven-sh/setup-bun v2 → [Updates: v2]
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/setup-python v6@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7]
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/setup-python v6@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7]
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/setup-python v6@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7]
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/setup-python v6@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7]
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• python 3.14
• python 3.14
• python 3.14
• python 3.14

.github/workflows/docs.yaml (5)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• actions/setup-python v6@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7]
• actions/upload-pages-artifact v5@fc324d3547104276b827a68afc52ff2a11cc49c9
• actions/deploy-pages v5@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128
• python 3.14

gomod (3)

auth-header-injector/go.mod (3)

• go 1.26.0
• k8s.io/apimachinery v0.36.2 → [Updates: v0.36.3]
• k8s.io/client-go v0.36.2 → [Updates: v0.36.3]

random-data-generator/go.mod (4)

• go 1.26.0
• github.com/lib/pq v1.12.3
• k8s.io/apimachinery v0.36.2 → [Updates: v0.36.3]
• k8s.io/client-go v0.36.2 → [Updates: v0.36.3]

tools/decode-cve-proto/go.mod (3)

• go 1.26.1
• github.com/lib/pq v1.12.3
• google.golang.org/protobuf v1.36.11

helm-values (1)

deploy/helm/rhacs-manager/values.yaml (8)

• ghcr.io/dadav/rhacs-manager-backend unknown version → [Updates: ``]
• ghcr.io/dadav/rhacs-manager-backend unknown version → [Updates: ``]
• ghcr.io/dadav/rhacs-manager-frontend unknown version → [Updates: ``]
• ghcr.io/dadav/rhacs-manager-auth-header-injector unknown version → [Updates: ``]
• ghcr.io/dadav/rhacs-manager-auth-header-injector unknown version → [Updates: ``]
• ghcr.io/dadav/rhacs-manager-frontend unknown version → [Updates: ``]
• ghcr.io/dadav/rhacs-manager-mcp-server unknown version → [Updates: ``]
• ghcr.io/dadav/rhacs-manager-mcp-server unknown version → [Updates: ``]

pep621 (2)

backend/pyproject.toml (22)

• python >=3.12
• fastapi >=0.115.0,<0.137
• uvicorn >=0.30.0
• sqlalchemy >=2.0.0
• asyncpg >=0.29.0
• alembic >=1.13.0
• pydantic >=2.0.0
• pydantic-settings >=2.0.0
• python-jose >=3.3.0
• aiosmtplib >=3.0.0
• jinja2 >=3.1.0
• apscheduler >=3.10.0
• httpx >=0.27.0
• fpdf2 >=2.8
• openpyxl >=3.1
• python-multipart >=0.0.9
• protobuf >=5.0.0
• prometheus-fastapi-instrumentator >=7.0.0
• pytest >=8.0.0
• pytest-asyncio >=0.23.0
• httpx >=0.27.0
• ruff >=0.11.0

mcp-server/pyproject.toml (7)

• python >=3.12
• mcp >=1.27,<2 → [Updates: >=2,<3]
• httpx >=0.27.0
• pydantic-settings >=2.0.0
• pytest >=8.0.0
• pytest-asyncio >=0.23.0
• ruff >=0.11.0

---

• Check this box to trigger a request for Renovate to run again on this repository