Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency coverage to v7.14.1
• Update dependency greenlet to v3.5.1
• Update dependency requests to v2.34.2
• Update dependency sqlalchemy to v2.0.50
• Update dependency certifi to v2026.5.20
• Update dependency click to v8.4.1
• Update dependency decorator to v5.3.1
• Update dependency grpcio to v1.81.0
• Update dependency idna to v3.17
• Update dependency opentelemetry-api to v1.42.1
• Update dependency opentelemetry-exporter-otlp to v1.42.1
• Update dependency opentelemetry-exporter-otlp-proto-common to v1.42.1
• Update dependency opentelemetry-exporter-otlp-proto-grpc to v1.42.1
• Update dependency opentelemetry-exporter-otlp-proto-http to v1.42.1
• Update dependency opentelemetry-proto to v1.42.1
• Update dependency opentelemetry-sdk to v1.42.1
• Update dependency stevedore to v5.8.0
• Update dependency wrapt to v2.2.1
• Update postgres Docker tag to v18.4
• Update rabbitmq Docker tag to v4.3
• Update redhat-actions/push-to-registry action to v2.8
• Update dependency cryptography to v48
• Update dependency importlib-metadata to v9
• Update dependency kubernetes to v36
• Update dependency protobuf to v7
• Update dependency zipp to v4
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency boto3 to v1.43.19
• Update dependency botocore to v1.43.19
• Update dependency importlib-metadata to v8.9.0
• Update dependency s3transfer to v0.18.0
• Update dependency wcwidth to v0.7.0
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency operator-manifest to v2

Detected Dependencies

docker-compose (2)

compose-files/docker-compose.yml (3)

• registry 3
• postgres 18.1 → [Updates: 18.4]
• rabbitmq 4.2-management → [Updates: 4.3-management]

compose-files/podman-compose.yml (3)

• registry 3
• postgres 18.1 → [Updates: 18.4]
• rabbitmq 4.2-management → [Updates: 4.3-management]

dockerfile (3)

docker/Dockerfile-api

docker/Dockerfile-workers

docker/message_broker/Dockerfile

github-actions (3)

.github/workflows/build_on_tag.api.yml (3)

• actions/checkout v6
• redhat-actions/buildah-build v2
• redhat-actions/push-to-registry v2.7.1 → [Updates: v2.8]

.github/workflows/build.yml (8)

• oprypin/find-latest-tag v1
• actions/checkout v6
• redhat-actions/buildah-build v2
• redhat-actions/buildah-build v2
• redhat-actions/buildah-build v2
• redhat-actions/push-to-registry v2.7.1 → [Updates: v2.8]
• redhat-actions/push-to-registry v2.7.1 → [Updates: v2.8]
• redhat-actions/push-to-registry v2.7.1 → [Updates: v2.8]

.github/workflows/run_tox.yml (2)

• actions/checkout v6
• actions/setup-python v6

pip_requirements (3)

docs/requirements.txt

requirements-test.txt (95)

• alembic ==1.18.4
• amqp ==5.3.1
• billiard ==4.2.4
• blinker ==1.9.0
• boto3 ==1.42.96 → [Updates: ==1.43.19]
• botocore ==1.42.96 → [Updates: ==1.43.19]
• celery ==5.6.3
• certifi ==2026.4.22 → [Updates: ==2026.5.20]
• cffi ==2.0.0
• charset-normalizer ==3.4.7
• click ==8.3.3 → [Updates: ==8.4.1]
• click-didyoumean ==0.3.1
• click-plugins ==1.1.1.2
• click-repl ==0.3.0
• coverage ==7.14.0 → [Updates: ==7.14.1]
• cryptography ==47.0.0 → [Updates: ==48.0.0]
• decorator ==5.2.1 → [Updates: ==5.3.1]
• dogpile-cache ==1.5.0
• durationpy ==0.10
• flask ==3.1.3
• flask-login ==0.6.3
• flask-migrate ==4.1.0
• flask-sqlalchemy ==3.1.1
• googleapis-common-protos ==1.75.0
• greenlet ==3.5.0 → [Updates: ==3.5.1]
• grpcio ==1.80.0 → [Updates: ==1.81.0]
• gssapi ==1.11.1
• idna ==3.15 → [Updates: ==3.17]
• importlib-metadata ==8.7.1 → [Updates: ==8.9.0, ==9.0.0]
• importlib-resources ==7.1.0
• iniconfig ==2.3.0
• itsdangerous ==2.2.0
• jinja2 ==3.1.6
• jmespath ==1.1.0
• kombu ==5.6.2
• krb5 ==0.9.0
• kubernetes ==35.0.0 → [Updates: ==36.0.2]
• Mako ==1.3.12
• markupsafe ==3.0.3
• oauthlib ==3.3.1
• opentelemetry-api ==1.41.1 → [Updates: ==1.42.1]
• opentelemetry-exporter-otlp ==1.41.1 → [Updates: ==1.42.1]
• opentelemetry-exporter-otlp-proto-common ==1.41.1 → [Updates: ==1.42.1]
• opentelemetry-exporter-otlp-proto-grpc ==1.41.1 → [Updates: ==1.42.1]
• opentelemetry-exporter-otlp-proto-http ==1.41.1 → [Updates: ==1.42.1]
• opentelemetry-instrumentation ==0.62b1
• opentelemetry-instrumentation-botocore ==0.62b1
• opentelemetry-instrumentation-celery ==0.62b1
• opentelemetry-instrumentation-flask ==0.62b1
• opentelemetry-instrumentation-logging ==0.62b1
• opentelemetry-instrumentation-requests ==0.62b1
• opentelemetry-instrumentation-sqlalchemy ==0.62b1
• opentelemetry-instrumentation-wsgi ==0.62b1
• opentelemetry-propagator-aws-xray ==1.0.2
• opentelemetry-proto ==1.41.1 → [Updates: ==1.42.1]
• opentelemetry-sdk ==1.41.1 → [Updates: ==1.42.1]
• opentelemetry-semantic-conventions ==0.62b1
• opentelemetry-util-http ==0.62b1
• operator-manifest ==0.0.5 → [Updates: ==2.0.1]
• packaging ==26.2
• pluggy ==1.6.0
• prompt-toolkit ==3.0.52
• protobuf ==6.33.6 → [Updates: ==7.35.0]
• psycopg2-binary ==2.9.12
• pycparser ==3.0
• pygments ==2.20.0
• pyspnego ==0.12.1
• pytest ==9.0.3
• pytest-cov ==7.1.0
• python-dateutil ==2.9.0.post0
• python-memcached ==1.62
• python-qpid-proton ==0.40.0
• pyyaml ==6.0.3
• requests ==2.34.1 → [Updates: ==2.34.2]
• requests-kerberos ==0.15.0
• requests-oauthlib ==2.0.0
• ruamel-yaml ==0.19.1
• ruamel-yaml-clib ==0.2.15
• s3transfer ==0.16.1 → [Updates: ==0.18.0]
• semver ==3.0.4
• six ==1.17.0
• sqlalchemy ==2.0.49 → [Updates: ==2.0.50]
• stevedore ==5.7.0 → [Updates: ==5.8.0]
• tenacity ==9.1.4
• typing-extensions ==4.15.0
• tzdata ==2026.2
• tzlocal ==5.3.1
• urllib3 ==2.7.0
• vine ==5.1.0
• wcwidth ==0.6.0 → [Updates: ==0.7.0]
• websocket-client ==1.9.0
• werkzeug ==3.1.8
• wrapt ==2.1.2 → [Updates: ==2.2.1]
• zipp ==3.23.1 → [Updates: ==4.1.0]
• setuptools ==82.0.1

requirements.txt (88)

• alembic ==1.18.4
• amqp ==5.3.1
• billiard ==4.2.4
• blinker ==1.9.0
• boto3 ==1.42.96 → [Updates: ==1.43.19]
• botocore ==1.42.96 → [Updates: ==1.43.19]
• celery ==5.6.3
• certifi ==2026.4.22 → [Updates: ==2026.5.20]
• cffi ==2.0.0
• charset-normalizer ==3.4.7
• click ==8.3.3 → [Updates: ==8.4.1]
• click-didyoumean ==0.3.1
• click-plugins ==1.1.1.2
• click-repl ==0.3.0
• cryptography ==47.0.0 → [Updates: ==48.0.0]
• decorator ==5.2.1 → [Updates: ==5.3.1]
• dogpile-cache ==1.5.0
• durationpy ==0.10
• flask ==3.1.3
• flask-login ==0.6.3
• flask-migrate ==4.1.0
• flask-sqlalchemy ==3.1.1
• googleapis-common-protos ==1.75.0
• greenlet ==3.5.0 → [Updates: ==3.5.1]
• grpcio ==1.80.0 → [Updates: ==1.81.0]
• gssapi ==1.11.1
• idna ==3.15 → [Updates: ==3.17]
• importlib-metadata ==8.7.1 → [Updates: ==8.9.0, ==9.0.0]
• importlib-resources ==7.1.0
• itsdangerous ==2.2.0
• jinja2 ==3.1.6
• jmespath ==1.1.0
• kombu ==5.6.2
• krb5 ==0.9.0
• kubernetes ==35.0.0 → [Updates: ==36.0.2]
• Mako ==1.3.12
• markupsafe ==3.0.3
• oauthlib ==3.3.1
• opentelemetry-api ==1.41.1 → [Updates: ==1.42.1]
• opentelemetry-exporter-otlp ==1.41.1 → [Updates: ==1.42.1]
• opentelemetry-exporter-otlp-proto-common ==1.41.1 → [Updates: ==1.42.1]
• opentelemetry-exporter-otlp-proto-grpc ==1.41.1 → [Updates: ==1.42.1]
• opentelemetry-exporter-otlp-proto-http ==1.41.1 → [Updates: ==1.42.1]
• opentelemetry-instrumentation ==0.62b1
• opentelemetry-instrumentation-botocore ==0.62b1
• opentelemetry-instrumentation-celery ==0.62b1
• opentelemetry-instrumentation-flask ==0.62b1
• opentelemetry-instrumentation-logging ==0.62b1
• opentelemetry-instrumentation-requests ==0.62b1
• opentelemetry-instrumentation-sqlalchemy ==0.62b1
• opentelemetry-instrumentation-wsgi ==0.62b1
• opentelemetry-propagator-aws-xray ==1.0.2
• opentelemetry-proto ==1.41.1 → [Updates: ==1.42.1]
• opentelemetry-sdk ==1.41.1 → [Updates: ==1.42.1]
• opentelemetry-semantic-conventions ==0.62b1
• opentelemetry-util-http ==0.62b1
• operator-manifest ==0.0.5 → [Updates: ==2.0.1]
• packaging ==26.2
• prompt-toolkit ==3.0.52
• protobuf ==6.33.6 → [Updates: ==7.35.0]
• psycopg2-binary ==2.9.12
• pycparser ==3.0
• pyspnego ==0.12.1
• python-dateutil ==2.9.0.post0
• python-memcached ==1.62
• python-qpid-proton ==0.40.0
• pyyaml ==6.0.3
• requests ==2.34.1 → [Updates: ==2.34.2]
• requests-kerberos ==0.15.0
• requests-oauthlib ==2.0.0
• ruamel-yaml ==0.19.1
• ruamel-yaml-clib ==0.2.15
• s3transfer ==0.16.1 → [Updates: ==0.18.0]
• semver ==3.0.4
• six ==1.17.0
• sqlalchemy ==2.0.49 → [Updates: ==2.0.50]
• stevedore ==5.7.0 → [Updates: ==5.8.0]
• tenacity ==9.1.4
• typing-extensions ==4.15.0
• tzdata ==2026.2
• tzlocal ==5.3.1
• urllib3 ==2.7.0
• vine ==5.1.0
• wcwidth ==0.6.0 → [Updates: ==0.7.0]
• websocket-client ==1.9.0
• werkzeug ==3.1.8
• wrapt ==2.1.2 → [Updates: ==2.2.1]
• zipp ==3.23.1 → [Updates: ==4.1.0]

pyenv (1)

.python-version (1)

• python 3.14.5

---

• Check this box to trigger a request for Renovate to run again on this repository