Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

These branches will be created by Renovate only once you click their checkbox below.

• chore(deps): update aws-actions/configure-aws-credentials action to v2
• chore(deps): update cds-snc/terraform-plan action to v3
• chore(deps): update dependency @types/node to v18
• chore(deps): update dependency aiofiles to v23
• chore(deps): update dependency aws-lambda-powertools to v2
• chore(deps): update dependency black to v23
• chore(deps): update dependency coverage to v7
• chore(deps): update dependency flake8 to v6
• chore(deps): update dependency sqlalchemy to v2
• chore(deps): update dependency typescript to v5
• chore(deps): update node.js to v17
• chore(deps): update postgres docker tag to v15
• fix(deps): update dependency puppeteer to v19
• 🔐 Create all pending approval PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update all non-major docker images (localstack/localstack, mcr.microsoft.com/vscode/devcontainers/python, node)
• fix(deps): update github.com/shurcool/githubv4 digest to 6cea62e
• chore(deps): update all non-major github action dependencies (actions/checkout, actions/setup-python)
• chore(deps): update all patch dependencies (@types/node, boto3, github.com/aws/aws-sdk-go-v2/config)
• chore(deps): update dependency prettier to v2.8.8
• chore(deps): update all minor dependencies (@types/jest, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, aws-sdk, eslint, eslint-config-prettier, eslint-plugin-n, fastapi, github.com/aws/aws-lambda-go, github.com/aws/aws-sdk-go-v2/service/s3, golang.org/x/oauth2, httpx, playwright, pytest, ts-jest, uvicorn)
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

docker-compose

.devcontainer/docker-compose.yml

• postgres 14.7@sha256:19c87e38a0b13def945579f5d8fcd68aadfd0060816ea6991cb009b7d8da0c89
• postgres 14.7@sha256:19c87e38a0b13def945579f5d8fcd68aadfd0060816ea6991cb009b7d8da0c89
• localstack/localstack sha256:d606e2a1ec386ffc76d02623b9084f7c1da553f608157b6a53dd1cf4716d9361

dockerfile

.devcontainer/Dockerfile

• mcr.microsoft.com/vscode/devcontainers/python 0-3.9

api/Dockerfile

• python 3.8-slim-buster@sha256:bf7fc227b0dc580c8bbbe696b61840c61bc241b404a288ef1612ce11fe92ab85

runners/nuclei/Dockerfile

• golang 1.20.3-alpine@sha256:08e9c086194875334d606765bd60aa064abd3c215abfbcf5737619110d48d114
• alpine 3.17@sha256:124c7d2707904eea7431fffe91522a01e5a861a624ee31d03372cc1d138a3126

runners/owasp-zap/Dockerfile

• python 3.8-alpine@sha256:cd2afe99fc96d851a30ee3956a3e12c78c0fe766ab4afd47f96e5ca1a94dc62d

scanners/axe-core/Dockerfile

• node 14-alpine3.12

scanners/github/Dockerfile

• golang 1.20.3-alpine@sha256:08e9c086194875334d606765bd60aa064abd3c215abfbcf5737619110d48d114
• alpine latest@sha256:124c7d2707904eea7431fffe91522a01e5a861a624ee31d03372cc1d138a3126

github-actions

.github/workflows/bandit_security_scan.yml

• actions/checkout v3.5.0@8f4b7f84864484a7bf31766abe9204da3cbe65b3

.github/workflows/build_and_push.yml

• actions/checkout v3.5.0@8f4b7f84864484a7bf31766abe9204da3cbe65b3
• dorny/paths-filter v2.11.1@4512585405083f25c027a35db413c2b3b9006d50
• actions/checkout v3.5.0@8f4b7f84864484a7bf31766abe9204da3cbe65b3
• aws-actions/configure-aws-credentials v1.7.0@67fbcbb121271f7775d2e7715933280b06314838
• aws-actions/amazon-ecr-login v1.6.0@2f9f10ea3fa2eed41ac443fee8bfbd059af2d0a4
• cds-snc/security-tools v2.1.3@cfec0943e40dbb78cee115bbbe89dc17f07b7a0f

.github/workflows/ci_build_containers.yml

• actions/checkout v3.5.0@8f4b7f84864484a7bf31766abe9204da3cbe65b3
• dorny/paths-filter v2.11.1@4512585405083f25c027a35db413c2b3b9006d50
• actions/checkout v3.5.0@8f4b7f84864484a7bf31766abe9204da3cbe65b3
• aws-actions/configure-aws-credentials v1.7.0@67fbcbb121271f7775d2e7715933280b06314838
• aws-actions/amazon-ecr-login v1.6.0@2f9f10ea3fa2eed41ac443fee8bfbd059af2d0a4

.github/workflows/ci_code.yml

• actions/checkout v3.5.0@8f4b7f84864484a7bf31766abe9204da3cbe65b3
• dorny/paths-filter v2.11.1@4512585405083f25c027a35db413c2b3b9006d50
• actions/setup-python v4.5.0@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435
• actions/setup-node v3.6.0@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c
• postgres 14.7

.github/workflows/docker-vulnerability-scan.yml

• actions/checkout v3.5.0@8f4b7f84864484a7bf31766abe9204da3cbe65b3
• aws-actions/configure-aws-credentials v1.7.0@67fbcbb121271f7775d2e7715933280b06314838
• aws-actions/amazon-ecr-login v1.6.0@2f9f10ea3fa2eed41ac443fee8bfbd059af2d0a4
• cds-snc/security-tools v2.1.3@cfec0943e40dbb78cee115bbbe89dc17f07b7a0f

.github/workflows/export_github_data.yml

• actions/checkout v3.5.0@8f4b7f84864484a7bf31766abe9204da3cbe65b3

.github/workflows/labels.yml

• cds-snc/labels v1@8d95ffe4ae0bd4f148da0b5f082f1e5aa6cb72bf

.github/workflows/s3-backup.yml

• aws-actions/configure-aws-credentials v1.7.0@67fbcbb121271f7775d2e7715933280b06314838

.github/workflows/scripts.yml

• actions/checkout v3.5.0@8f4b7f84864484a7bf31766abe9204da3cbe65b3
• actions/checkout v3.5.0@8f4b7f84864484a7bf31766abe9204da3cbe65b3

.github/workflows/shellcheck.yml

.github/workflows/tf_apply.yml

• actions/checkout v3.5.0@8f4b7f84864484a7bf31766abe9204da3cbe65b3
• cds-snc/terraform-tools-setup v1@cc15ce9039f6c37c592fb9930b70466b229d2e9b
• dorny/paths-filter v2.11.1@4512585405083f25c027a35db413c2b3b9006d50

.github/workflows/tf_plan.yml

• actions/checkout v3.5.0@8f4b7f84864484a7bf31766abe9204da3cbe65b3
• cds-snc/terraform-tools-setup v1@cc15ce9039f6c37c592fb9930b70466b229d2e9b
• cds-snc/terraform-plan v2.3.1@8be66db9c815352044405fd33120b91918bf1f2e

gomod

scanners/github/go.mod

• go 1.19
• github.com/aws/aws-lambda-go v1.38.0
• github.com/aws/aws-sdk-go-v2 v1.17.8
• github.com/aws/aws-sdk-go-v2/config v1.18.20
• github.com/aws/aws-sdk-go-v2/service/s3 v1.30.5
• github.com/shurcooL/githubv4 v0.0.0-20230305132112-efb623903184@efb623903184
• golang.org/x/oauth2 v0.6.0

npm

scanners/axe-core/package.json

• @axe-core/puppeteer ^4.3.1
• aws-sdk ^2.1055.0
• puppeteer ^13.0.0
• @types/aws-lambda 8.10.114
• @types/jest 29.4.0
• @types/node 16.18.23
• @types/puppeteer 5.4.7
• @types/redis 4.0.10
• @typescript-eslint/eslint-plugin 5.54.1
• @typescript-eslint/parser 5.54.1
• eslint 8.35.0
• eslint-config-prettier 8.7.0
• eslint-config-standard 17.0.0
• eslint-plugin-import 2.27.5
• eslint-plugin-jest 27.2.1
• eslint-plugin-n 15.6.1
• eslint-plugin-node 11.1.0
• eslint-plugin-promise 6.1.1
• eslint-plugin-security 1.7.1
• eslint-plugin-standard 5.0.0
• jest 29.5.0
• prettier 2.8.7
• ts-jest 29.0.5
• typescript 4.9.5

pip_requirements

api/requirements.txt

• alembic ==1.10.3
• aiofiles ==0.8.0
• Authlib ==1.2.0
• aws-lambda-powertools ==1.31.1
• babel ==2.12.1
• boto3 ==1.26.109
• bcrypt ==4.0.1
• fastapi ==0.92.0
• httpx ==0.23.3
• jinja2 ==3.1.2
• itsdangerous ==2.1.2
• logzero ==1.7.0
• mangum ==0.17.0
• psycopg2-binary ==2.9.6
• python-multipart ==0.0.6
• SQLAlchemy ==1.4.47
• scrapy ==2.8.0
• scrapy-playwright ==0.0.26
• uvloop ==0.17.0

api/requirements_dev.txt

• black ==22.12.0
• coverage ==6.5.0
• factory-boy ==3.2.1
• flake8 ==5.0.4
• httpx ==0.23.3
• pytest ==7.2.2
• requests ==2.28.2
• uvicorn ==0.20.0

api/requirements_playwright.txt

• playwright ==1.31.1

terraform

terragrunt/aws/alarms/notify_slack.tf

terragrunt/aws/api/iam.tf

terragrunt/aws/api/lambda.tf

terragrunt/aws/api/outputs.tf

terragrunt/aws/api/rds.tf

terragrunt/aws/api/s3.tf

terragrunt/aws/api/vpc.tf

terragrunt/aws/ecs/ecs.tf

terragrunt/aws/scanners/github/lambda.tf

terragrunt/aws/tf_roles/main.tf

terragrunt/env/common/provider.tf

• aws ~> 4.29

terragrunt

terragrunt/env/alarms/terragrunt.hcl

terragrunt/env/api/terragrunt.hcl

terragrunt/env/ecs/terragrunt.hcl

terragrunt/env/hosted_zone/terragrunt.hcl

terragrunt/env/orchestrator/terragrunt.hcl

terragrunt/env/scanners/axe-core/terragrunt.hcl

terragrunt/env/scanners/github/terragrunt.hcl

terragrunt/env/tf_roles/terragrunt.hcl

---

• Check this box to trigger a request for Renovate to run again on this repository