Dependency Dashboard #10

New issue

Open

opened 2026-06-16 02:01:50 +00:00 by robbertbos · 0 comments

robbertbos commented

2026-06-16 02:01:50 +00:00

Owner

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

Update npm dev dependencies to v5 (@vitest/coverage-v8, @vitest/ui, vitest)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

Update postgres:17 Docker digest to 67f4172
Update quay.io/keycloak/keycloak:26.7 Docker digest to ff4257d
Update CI images and actions (astral-sh/uv, ghcr.io/astral-sh/uv, ghcr.io/renovatebot/renovate, python)
Update container images (docker.io/nginxinc/nginx-unprivileged, docker.io/node)
Update dependency @nldd/design-system to ^0.8.86
Update dependency markdown-it to ^15.0.1
Update npm dependencies (@codemirror/state, @codemirror/view, @tanstack/vue-query, dompurify, marked, vue, vue-router)
Update Python dependencies (alembic, anyio, authlib, cachetools, cryptography, pydantic, ruff, ty, uvicorn)
Update npm dev dependencies (@playwright/test, @testing-library/user-event, @vitest/coverage-v8, @vitest/ui, @vue/test-utils, eslint, globals, happy-dom, typescript-eslint, vite, vitest, vue-tsc)
Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

compose.dev.yaml (2)

quay.io/keycloak/keycloak 26.7@sha256:f1f1f01e472c8a78df40d8f2a49a925274eda4d3d80d5f6edbb5c880ee3c01c6 → [Updates: 26.7]

postgres 17@sha256:e38411452a464af89e5adadb8d223bf53b898d47d6ef918b2d58c08707350449 → [Updates: 17]

dockerfile (2)

containers/backend/Containerfile (4)

docker/dockerfile 1@sha256:ecfaec9ed6d810b56388c508f4121597bfbba70d41a6dfeee4d8cad5f295fc32

python 3.14.7-slim@sha256:ce40764625a4ff50df3548277632e7f96c4e77fe75fa848aae9885476e7df5a4 → [Updates: 3.14.7-slim]

ghcr.io/astral-sh/uv 0.12.5@sha256:e85be844203885286c60ffad8a858d48afb6c5a5c237ca0e67f12e74b8f174b1 → [Updates: 0.12.10]

python 3.14.7-slim@sha256:ce40764625a4ff50df3548277632e7f96c4e77fe75fa848aae9885476e7df5a4 → [Updates: 3.14.7-slim]

containers/frontend/Containerfile (3)

docker/dockerfile 1@sha256:ecfaec9ed6d810b56388c508f4121597bfbba70d41a6dfeee4d8cad5f295fc32

docker.io/node 24.19.0-alpine@sha256:d32cdf619f63fe0471182d08996dd516c6275bb5fd31ae06e55a570bd9e1ad43 → [Updates: 24.20.0-alpine]

docker.io/nginxinc/nginx-unprivileged 1.31.3-alpine-slim@sha256:d61d7ef52430df468e74ed6ee6e914429b80e20ba988e3176278a73165f876cf → [Updates: 1.31.5-alpine-slim]

github-actions (4)

.forgejo/workflows/ci.yml (22)

actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020

actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020

actions/upload-artifact v3.2.2@c6a366c94c3e0affe28c06c8df20a878f24da3cf → [Updates: v7.0.1]

actions/upload-artifact v3.2.2@c6a366c94c3e0affe28c06c8df20a878f24da3cf → [Updates: v7.0.1]

actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020

actions/upload-artifact v3.2.2@c6a366c94c3e0affe28c06c8df20a878f24da3cf → [Updates: v7.0.1]

actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020

actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

actions/upload-artifact v3.2.2@c6a366c94c3e0affe28c06c8df20a878f24da3cf → [Updates: v7.0.1]

actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

node 22

node 22

node 22

node 22

.forgejo/workflows/release-and-deploy.yaml (4)

actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

https://code.forgejo.org/actions/forgejo-release v2.13.4@98265452477dafb3f0f27ba9c462c90b18cb44fd

actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

https://github.com/RijksICTGilde/zad-actions v4.1.0@b844c76eba3502b40a19be868cdf0586e322f4b8

.forgejo/workflows/renovate.yaml (1)

ghcr.io/renovatebot/renovate 44.31.0@sha256:bb8dbd817302a65fd0daea5601a27e4e0124172eb2fea25cf724d3a79b09e044 → [Updates: 44.65.1]

.forgejo/workflows/security-scan.yaml (6)

actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

actions/upload-artifact v3.2.2@c6a366c94c3e0affe28c06c8df20a878f24da3cf → [Updates: v7.0.1]

ghcr.io/astral-sh/uv 0.12.5-python3.14-trixie-slim@sha256:dc360d7e5f968c682e8b59e83027a315a0232dead15cb9dfe3e707a12ba390e1 → [Updates: 0.12.10-python3.14-trixie-slim]

ghcr.io/astral-sh/uv 0.12.5-python3.14-trixie-slim@sha256:dc360d7e5f968c682e8b59e83027a315a0232dead15cb9dfe3e707a12ba390e1 → [Updates: 0.12.10-python3.14-trixie-slim]

ghcr.io/aquasecurity/trivy 0.74.0@sha256:62b1e65e8869bc4b4c6aa4fa2b21595256c7c2f6018a9d9ad61caf87187c1969

npm (1)

frontend/package.json (40)

@codemirror/language ^6.12.4

@codemirror/state ^6.7.1 → [Updates: ^6.7.4]

@codemirror/view ^6.43.8 → [Updates: ^6.43.11]

@floating-ui/dom ^1.8.0

@nldd/design-system ^0.8.82 → [Updates: ^0.8.86]

@tanstack/vue-query ^5.101.4 → [Updates: ^5.102.8]

dompurify ^3.4.13 → [Updates: ^3.4.14]

emojibase-data ^17.0.0

marked ^18.0.9 → [Updates: ^18.0.11]

vue ^3.5.41 → [Updates: ^3.5.42]

vue-router ^5.2.0 → [Updates: ^5.3.1]

@codemirror/lang-markdown ^6.5.2

@eslint/js ^10.0.0

@lezer/markdown ^1.7.2

@playwright/test ^1.62.1 → [Updates: ^1.63.0]

@testing-library/dom ^10.4.1

@testing-library/jest-dom ^7.0.1

@testing-library/user-event ^14.6.4 → [Updates: ^14.6.7]

@types/node ^24.13.3

@vitejs/plugin-vue ^6.0.8

@vitest/coverage-v8 ^4.1.10 → [Updates: ^4.1.11, ^5.0.0]

@vitest/ui ^4.1.10 → [Updates: ^4.1.11, ^5.0.0]

@vue/test-utils ^2.4.11 → [Updates: ^2.5.0]

axe-core 4.13.0

eslint ^10.8.1 → [Updates: ^10.10.0]

eslint-plugin-vue ^10.10.0

globals ^17.11.0 → [Updates: ^17.12.0]

happy-dom ^20.11.2 → [Updates: ^20.14.0]

jsdom ^30.0.1

openapi-typescript 7.13.0

typescript ~6.0.3

typescript-eslint ^8.67.0 → [Updates: ^8.69.0]

vite ^8.2.1 → [Updates: ^8.2.2]

vitest ^4.1.10 → [Updates: ^4.1.11, ^5.0.0]

vue-eslint-parser ^10.4.1

vue-tsc ^3.3.10 → [Updates: ^3.3.11]

node >=22

npm >=11

linkify-it ^6.1.0

markdown-it ^15.0.0 → [Updates: ^15.0.1]

pep621 (1)

backend/pyproject.toml (27)

python >=3.14.7

fastapi >=0.141.1

uvicorn >=0.52.3 → [Updates: >=0.52.4]

uvloop >=0.22.1

httptools >=0.8.0

sqlalchemy >=2.0.52

asyncpg >=0.31.0

alembic >=1.19.1 → [Updates: >=1.19.2]

pydantic >=2.13.4 → [Updates: >=2.13.5]

pydantic-settings >=2.15.0

httpx >=0.28.1

cryptography >=50.0.0 → [Updates: >=50.0.1]

itsdangerous >=2.2.0

slowapi >=0.1.10

structlog >=26.1.0

python-multipart >=0.0.32

authlib >=1.7.2 → [Updates: >=1.8.0]

cachetools >=7.1.7,<7.2 → [Updates: >=7.1.8,<7.2]

pytest >=9.1.1

pytest-asyncio >=1.4.0

pytest-cov >=7.1.0

pytest-xdist >=3.8.0

ruff >=0.16.3 → [Updates: >=0.16.6]

anyio >=4.14.2 → [Updates: >=4.15.0]

ty >=0.0.72 → [Updates: >=0.0.78]

pip-audit >=2.10.1,<3.0

pip >=26.2.1

pyenv (1)

backend/.python-version (1)

python 3.14

regex (3)

.forgejo/workflows/_container-build.yaml (1)

ghcr.io/aquasecurity/trivy 0.74.0@sha256:62b1e65e8869bc4b4c6aa4fa2b21595256c7c2f6018a9d9ad61caf87187c1969

.forgejo/workflows/ci.yml (1)

astral-sh/uv 0.12.5 → [Updates: 0.12.10]

.forgejo/workflows/security-scan.yaml (1)

aquasecurity/trivy 0.74.0

renovate-config (1)

renovate.json (1)

npm >=11

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Awaiting Schedule The following updates are awaiting their schedule. To get an update now, click on a checkbox below. - [ ] Update npm dev dependencies to v5 (`@vitest/coverage-v8`, `@vitest/ui`, `vitest`) ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [Update postgres:17 Docker digest to 67f4172](pulls/346) - [ ] [Update quay.io/keycloak/keycloak:26.7 Docker digest to ff4257d](pulls/339) - [ ] [Update CI images and actions](pulls/347) (`astral-sh/uv`, `ghcr.io/astral-sh/uv`, `ghcr.io/renovatebot/renovate`, `python`) - [ ] [Update container images](pulls/342) (`docker.io/nginxinc/nginx-unprivileged`, `docker.io/node`) - [ ] [Update dependency @nldd/design-system to ^0.8.86](pulls/341) - [ ] [Update dependency markdown-it to ^15.0.1](pulls/348) - [ ] [Update npm dependencies](pulls/343) (`@codemirror/state`, `@codemirror/view`, `@tanstack/vue-query`, `dompurify`, `marked`, `vue`, `vue-router`) - [ ] [Update Python dependencies](pulls/345) (`alembic`, `anyio`, `authlib`, `cachetools`, `cryptography`, `pydantic`, `ruff`, `ty`, `uvicorn`) - [ ] [Update npm dev dependencies](pulls/344) (`@playwright/test`, `@testing-library/user-event`, `@vitest/coverage-v8`, `@vitest/ui`, `@vue/test-utils`, `eslint`, `globals`, `happy-dom`, `typescript-eslint`, `vite`, `vitest`, `vue-tsc`) - [ ] **Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies <details><summary>docker-compose (1)</summary> <blockquote> <details><summary>compose.dev.yaml (2)</summary> - `quay.io/keycloak/keycloak 26.7@sha256:f1f1f01e472c8a78df40d8f2a49a925274eda4d3d80d5f6edbb5c880ee3c01c6` → [Updates: `26.7`] - `postgres 17@sha256:e38411452a464af89e5adadb8d223bf53b898d47d6ef918b2d58c08707350449` → [Updates: `17`] </details> </blockquote> </details> <details><summary>dockerfile (2)</summary> <blockquote> <details><summary>containers/backend/Containerfile (4)</summary> - `docker/dockerfile 1@sha256:ecfaec9ed6d810b56388c508f4121597bfbba70d41a6dfeee4d8cad5f295fc32` - `python 3.14.7-slim@sha256:ce40764625a4ff50df3548277632e7f96c4e77fe75fa848aae9885476e7df5a4` → [Updates: `3.14.7-slim`] - `ghcr.io/astral-sh/uv 0.12.5@sha256:e85be844203885286c60ffad8a858d48afb6c5a5c237ca0e67f12e74b8f174b1` → [Updates: `0.12.10`] - `python 3.14.7-slim@sha256:ce40764625a4ff50df3548277632e7f96c4e77fe75fa848aae9885476e7df5a4` → [Updates: `3.14.7-slim`] </details> <details><summary>containers/frontend/Containerfile (3)</summary> - `docker/dockerfile 1@sha256:ecfaec9ed6d810b56388c508f4121597bfbba70d41a6dfeee4d8cad5f295fc32` - `docker.io/node 24.19.0-alpine@sha256:d32cdf619f63fe0471182d08996dd516c6275bb5fd31ae06e55a570bd9e1ad43` → [Updates: `24.20.0-alpine`] - `docker.io/nginxinc/nginx-unprivileged 1.31.3-alpine-slim@sha256:d61d7ef52430df468e74ed6ee6e914429b80e20ba988e3176278a73165f876cf` → [Updates: `1.31.5-alpine-slim`] </details> </blockquote> </details> <details><summary>github-actions (4)</summary> <blockquote> <details><summary>.forgejo/workflows/ci.yml (22)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/upload-artifact v3.2.2@c6a366c94c3e0affe28c06c8df20a878f24da3cf` → [Updates: `v7.0.1`] - `actions/upload-artifact v3.2.2@c6a366c94c3e0affe28c06c8df20a878f24da3cf` → [Updates: `v7.0.1`] - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/upload-artifact v3.2.2@c6a366c94c3e0affe28c06c8df20a878f24da3cf` → [Updates: `v7.0.1`] - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` - `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/upload-artifact v3.2.2@c6a366c94c3e0affe28c06c8df20a878f24da3cf` → [Updates: `v7.0.1`] - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `node 22` - `node 22` - `node 22` - `node 22` </details> <details><summary>.forgejo/workflows/release-and-deploy.yaml (4)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `https://code.forgejo.org/actions/forgejo-release v2.13.4@98265452477dafb3f0f27ba9c462c90b18cb44fd` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `https://github.com/RijksICTGilde/zad-actions v4.1.0@b844c76eba3502b40a19be868cdf0586e322f4b8` </details> <details><summary>.forgejo/workflows/renovate.yaml (1)</summary> - `ghcr.io/renovatebot/renovate 44.31.0@sha256:bb8dbd817302a65fd0daea5601a27e4e0124172eb2fea25cf724d3a79b09e044` → [Updates: `44.65.1`] </details> <details><summary>.forgejo/workflows/security-scan.yaml (6)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/upload-artifact v3.2.2@c6a366c94c3e0affe28c06c8df20a878f24da3cf` → [Updates: `v7.0.1`] - `ghcr.io/astral-sh/uv 0.12.5-python3.14-trixie-slim@sha256:dc360d7e5f968c682e8b59e83027a315a0232dead15cb9dfe3e707a12ba390e1` → [Updates: `0.12.10-python3.14-trixie-slim`] - `ghcr.io/astral-sh/uv 0.12.5-python3.14-trixie-slim@sha256:dc360d7e5f968c682e8b59e83027a315a0232dead15cb9dfe3e707a12ba390e1` → [Updates: `0.12.10-python3.14-trixie-slim`] - `ghcr.io/aquasecurity/trivy 0.74.0@sha256:62b1e65e8869bc4b4c6aa4fa2b21595256c7c2f6018a9d9ad61caf87187c1969` </details> </blockquote> </details> <details><summary>npm (1)</summary> <blockquote> <details><summary>frontend/package.json (40)</summary> - `@codemirror/language ^6.12.4` - `@codemirror/state ^6.7.1` → [Updates: `^6.7.4`] - `@codemirror/view ^6.43.8` → [Updates: `^6.43.11`] - `@floating-ui/dom ^1.8.0` - `@nldd/design-system ^0.8.82` → [Updates: `^0.8.86`] - `@tanstack/vue-query ^5.101.4` → [Updates: `^5.102.8`] - `dompurify ^3.4.13` → [Updates: `^3.4.14`] - `emojibase-data ^17.0.0` - `marked ^18.0.9` → [Updates: `^18.0.11`] - `vue ^3.5.41` → [Updates: `^3.5.42`] - `vue-router ^5.2.0` → [Updates: `^5.3.1`] - `@codemirror/lang-markdown ^6.5.2` - `@eslint/js ^10.0.0` - `@lezer/markdown ^1.7.2` - `@playwright/test ^1.62.1` → [Updates: `^1.63.0`] - `@testing-library/dom ^10.4.1` - `@testing-library/jest-dom ^7.0.1` - `@testing-library/user-event ^14.6.4` → [Updates: `^14.6.7`] - `@types/node ^24.13.3` - `@vitejs/plugin-vue ^6.0.8` - `@vitest/coverage-v8 ^4.1.10` → [Updates: `^4.1.11`, `^5.0.0`] - `@vitest/ui ^4.1.10` → [Updates: `^4.1.11`, `^5.0.0`] - `@vue/test-utils ^2.4.11` → [Updates: `^2.5.0`] - `axe-core 4.13.0` - `eslint ^10.8.1` → [Updates: `^10.10.0`] - `eslint-plugin-vue ^10.10.0` - `globals ^17.11.0` → [Updates: `^17.12.0`] - `happy-dom ^20.11.2` → [Updates: `^20.14.0`] - `jsdom ^30.0.1` - `openapi-typescript 7.13.0` - `typescript ~6.0.3` - `typescript-eslint ^8.67.0` → [Updates: `^8.69.0`] - `vite ^8.2.1` → [Updates: `^8.2.2`] - `vitest ^4.1.10` → [Updates: `^4.1.11`, `^5.0.0`] - `vue-eslint-parser ^10.4.1` - `vue-tsc ^3.3.10` → [Updates: `^3.3.11`] - `node >=22` - `npm >=11` - `linkify-it ^6.1.0` - `markdown-it ^15.0.0` → [Updates: `^15.0.1`] </details> </blockquote> </details> <details><summary>pep621 (1)</summary> <blockquote> <details><summary>backend/pyproject.toml (27)</summary> - `python >=3.14.7` - `fastapi >=0.141.1` - `uvicorn >=0.52.3` → [Updates: `>=0.52.4`] - `uvloop >=0.22.1 ` - `httptools >=0.8.0` - `sqlalchemy >=2.0.52` - `asyncpg >=0.31.0` - `alembic >=1.19.1` → [Updates: `>=1.19.2`] - `pydantic >=2.13.4` → [Updates: `>=2.13.5`] - `pydantic-settings >=2.15.0` - `httpx >=0.28.1` - `cryptography >=50.0.0` → [Updates: `>=50.0.1`] - `itsdangerous >=2.2.0` - `slowapi >=0.1.10` - `structlog >=26.1.0` - `python-multipart >=0.0.32` - `authlib >=1.7.2` → [Updates: `>=1.8.0`] - `cachetools >=7.1.7,<7.2` → [Updates: `>=7.1.8,<7.2`] - `pytest >=9.1.1` - `pytest-asyncio >=1.4.0` - `pytest-cov >=7.1.0` - `pytest-xdist >=3.8.0` - `ruff >=0.16.3` → [Updates: `>=0.16.6`] - `anyio >=4.14.2` → [Updates: `>=4.15.0`] - `ty >=0.0.72` → [Updates: `>=0.0.78`] - `pip-audit >=2.10.1,<3.0` - `pip >=26.2.1` </details> </blockquote> </details> <details><summary>pyenv (1)</summary> <blockquote> <details><summary>backend/.python-version (1)</summary> - `python 3.14` </details> </blockquote> </details> <details><summary>regex (3)</summary> <blockquote> <details><summary>.forgejo/workflows/_container-build.yaml (1)</summary> - `ghcr.io/aquasecurity/trivy 0.74.0@sha256:62b1e65e8869bc4b4c6aa4fa2b21595256c7c2f6018a9d9ad61caf87187c1969` </details> <details><summary>.forgejo/workflows/ci.yml (1)</summary> - `astral-sh/uv 0.12.5` → [Updates: `0.12.10`] </details> <details><summary>.forgejo/workflows/security-scan.yaml (1)</summary> - `aquasecurity/trivy 0.74.0` </details> </blockquote> </details> <details><summary>renovate-config (1)</summary> <blockquote> <details><summary>renovate.json (1)</summary> - `npm >=11` </details> </blockquote> </details>

robbertbos referenced this issue from a commit

2026-06-16 21:55:32 +00:00

Trivy: github.com PAT tegen GitHub-API rate limit

robbertbos referenced this issue

2026-06-17 05:42:25 +00:00

Renovate: github.com PAT tegen GitHub-API rate limit #16

robbertbos referenced this issue from a commit

2026-06-17 05:55:00 +00:00

Renovate: github.com PAT tegen GitHub-API rate limit

robbertbos referenced this issue from a commit

2026-06-17 06:01:49 +00:00

Renovate: github.com PAT tegen GitHub-API rate limit