Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update actions/checkout digest to 3d3c42e
• Update docker/login-action digest to dbcb813
• Update dependency @sveltejs/kit to v2.70.2
• Update dependency svelte to v5.56.8
• Update dependency svelte-check to v4.7.4
• Update dependency vite to v8.2.0
• Update ghcr.io/astral-sh/uv Docker tag to v0.12.1
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency typescript to v7

Detected Dependencies

docker-compose (2)

docker-compose.dev.yml (1)

• crazymax/fail2ban 1.1.0

docker-compose.yml (1)

• crazymax/fail2ban 1.1.0

dockerfile (3)

api/Dockerfile (2)

• python 3.14-slim
• ghcr.io/astral-sh/uv 0.11.29 → [Updates: 0.12.1]

Dockerfile (4)

• node 24-bookworm-slim
• python 3.14-slim
• node 24-bookworm-slim
• ghcr.io/astral-sh/uv 0.11.29 → [Updates: 0.12.1]

sshd/Dockerfile (1)

• alpine 3.24

github-actions (5)

.github/workflows/bandit.yml (1)

• actions/checkout v7

.github/workflows/ci.yml (5)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• node 24

.github/workflows/codacy.yml (2)

• actions/checkout v7
• github/codeql-action v4

.github/workflows/codeql.yml (3)

• actions/checkout v7
• github/codeql-action v4
• github/codeql-action v4

.github/workflows/release.yml (10)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0 → [Updates: v4]
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0 → [Updates: v4]
• docker/metadata-action v6@dc802804100637a589fabce1cb79ff13a1411302
• docker/metadata-action v6@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• peter-evans/dockerhub-description v5@1b9a80c056b620d92cedb9d9b5a223409c68ddfa

npm (1)

frontend/package.json (9)

• @picocss/pico ^2.1.1
• @sveltejs/adapter-node ^5.5.7
• @sveltejs/kit ^2.70.1 → [Updates: ^2.70.1]
• @sveltejs/vite-plugin-svelte ^7.2.0
• svelte ^5.56.6 → [Updates: ^5.56.6]
• svelte-check ^4.7.3 → [Updates: ^4.7.3]
• typescript ^5.9.3 → [Updates: ^7.0.0]
• vite ^8.1.5 → [Updates: ^8.1.5]
• node >=20

pep621 (1)

api/pyproject.toml (15)

• python >=3.12
• fastapi >=0.115.0
• uvicorn >=0.30.0
• sqlalchemy >=2.0.0
• aiosqlite >=0.20.0
• PyJWT >=2.8.0
• bcrypt >=4.1.0
• pyotp >=2.9.0
• qrcode >=7.4.0
• slowapi >=0.1.9
• httpx >=0.27.0
• cryptography >=42.0.0
• pydantic-settings >=2.0.0
• pytest >=8.0.0
• pytest-asyncio >=0.24.0

---

• Check this box to trigger a request for Renovate to run again on this repository