Dependency Dashboard #10

New issue

Open

opened 2026-06-16 02:01:50 +00:00 by robbertbos · 0 comments

robbertbos commented

2026-06-16 02:01:50 +00:00

Owner

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

Update CI images and actions (actions/checkout, astral-sh/uv, docker.io/nginxinc/nginx-unprivileged, ghcr.io/astral-sh/uv, ghcr.io/renovatebot/renovate)
Update npm dependencies (@tanstack/vue-query, marked)
Update npm dev dependencies (eslint-plugin-vue, typescript-eslint)
Update actions/setup-node action to v7
Update dependency @testing-library/jest-dom to v7
Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

compose.dev.yaml (2)

quay.io/keycloak/keycloak 26.7@sha256:2eb3cd316835c990e69e26ade292ffa78f6fb0db7d5fc6377463c162e1979ac0

postgres 17@sha256:a426e44bac0b759c95894d68e1a0ac03ecc20b619f498a91aae373bf06d8508d

dockerfile (2)

containers/backend/Containerfile (4)

docker/dockerfile 1@sha256:87999aa3d42bdc6bea60565083ee17e86d1f3339802f543c0d03998580f9cb89

python 3.14.6-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6

ghcr.io/astral-sh/uv 0.11.29@sha256:eb2843a1e56fd9e30c7276ce1a52cba86e64c7b385f5e3279a0e08e02dd058fc → [Updates: 0.11.30]

python 3.14.6-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6

containers/frontend/Containerfile (3)

docker/dockerfile 1@sha256:87999aa3d42bdc6bea60565083ee17e86d1f3339802f543c0d03998580f9cb89

docker.io/node 24.18.0-alpine@sha256:a0b9bf06e4e6193cf7a0f58816cc935ff8c2a908f81e6f1a95432d679c54fbfd

docker.io/nginxinc/nginx-unprivileged 1.31.3-alpine-slim@sha256:d9fa63891743a11eb56ca1b22d8cc227491df183ca3da2cf1bf2c6e010bf19a5 → [Updates: 1.31.3-alpine-slim]

github-actions (4)

.forgejo/workflows/ci.yml (19)

actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]

actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]

actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

actions/upload-artifact v3.2.2@c6a366c94c3e0affe28c06c8df20a878f24da3cf → [Updates: v7.0.1]

actions/upload-artifact v3.2.2@c6a366c94c3e0affe28c06c8df20a878f24da3cf → [Updates: v7.0.1]

actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]

actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]

actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]

actions/upload-artifact v3.2.2@c6a366c94c3e0affe28c06c8df20a878f24da3cf → [Updates: v7.0.1]

actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]

actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]

actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]

node 22

node 22

.forgejo/workflows/release-and-deploy.yaml (4)

actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]

https://code.forgejo.org/actions/forgejo-release v2.13.4@98265452477dafb3f0f27ba9c462c90b18cb44fd

actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]

https://github.com/RijksICTGilde/zad-actions v4.0.6@13434cd415db0cd195a2c5f12bf67645acfcb635

.forgejo/workflows/renovate.yaml (1)

ghcr.io/renovatebot/renovate 43.270.0@sha256:7d9f8ff502fa09243e0c3356a763abd95a1ba056f7974a0cb1eee96dd442be43 → [Updates: 43.272.6]

.forgejo/workflows/security-scan.yaml (6)

actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]

actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]

actions/upload-artifact v3.2.2@c6a366c94c3e0affe28c06c8df20a878f24da3cf → [Updates: v7.0.1]

ghcr.io/astral-sh/uv 0.11.29-python3.13-trixie-slim@sha256:0b973c14a35cb0dc8fe63a2e8c9919fd797ac566de13090fcf0df4a6b3994b78 → [Updates: 0.11.30-python3.13-trixie-slim]

ghcr.io/astral-sh/uv 0.11.29-python3.13-trixie-slim@sha256:0b973c14a35cb0dc8fe63a2e8c9919fd797ac566de13090fcf0df4a6b3994b78 → [Updates: 0.11.30-python3.13-trixie-slim]

ghcr.io/aquasecurity/trivy 0.72.0@sha256:cffe3f5161a47a6823fbd23d985795b3ed72a4c806da4c4df16266c02accdd6f

npm (1)

frontend/package.json (45)

@floating-ui/dom ^1.7.6

@nldd/design-system ^0.8.69

@tanstack/vue-query ^5.100.6 → [Updates: ^5.100.6]

@tiptap/extension-highlight 3.28.0

@tiptap/extension-link 3.28.0

@tiptap/extension-placeholder 3.28.0

@tiptap/extension-task-item 3.28.0

@tiptap/extension-task-list 3.28.0

@tiptap/starter-kit 3.28.0

@tiptap/suggestion 3.28.0

@tiptap/vue-3 3.28.0

dompurify ^3.4.0

emojibase-data ^17.0.0

marked ^18.0.2 → [Updates: ^18.0.2]

tiptap-markdown ^0.9.0

vue ^3.5.33

vue-router ^5.0.6

@axe-core/cli 4.12.1

@eslint/js ^10.0.0

@playwright/test ^1.59.1

@testing-library/dom ^10.4.1

@testing-library/jest-dom ^6.9.1 → [Updates: ^7.0.0]

@testing-library/user-event ^14.6.1

@types/jest-axe ^3.5.9

@types/node ^24.12.2

@vitejs/plugin-vue ^6.0.6

@vitest/coverage-v8 ^4.1.5

@vitest/ui ^4.1.5

@vue/test-utils ^2.4.9

eslint ^10.0.0

eslint-plugin-vue ^10.9.0 → [Updates: ^10.9.0]

globals ^17.4.0

happy-dom ^20.9.0

jest-axe ^10.0.0

jsdom ^29.1.1

typescript ~6.0.2

typescript-eslint ^8.58.0 → [Updates: ^8.58.0]

vite ^8.0.4

vitest ^4.1.5

vue-eslint-parser ^10.4.1

vue-tsc ^3.2.7

node >=22

npm >=11

linkify-it ^5.0.2

markdown-it ^14.3.0

pep621 (1)

backend/pyproject.toml (27)

python >=3.14

fastapi >=0.115.0

uvicorn >=0.32.0

sqlalchemy >=2.0.35

aiosqlite >=0.20.0

asyncpg >=0.30.0

alembic >=1.13.3

pydantic >=2.9.0

pydantic-settings >=2.6.0

httpx >=0.27.0

cryptography >=48.0.1

itsdangerous >=2.2.0

slowapi >=0.1.9

structlog >=24.4.0

typer >=0.12.5

python-multipart >=0.0.31

authlib >=1.6.0

cachetools >=7.1.4,<7.2

pytest >=8.3.3

pytest-asyncio >=0.24.0

pytest-cov >=5.0.0

pytest-xdist >=3.6.1

ruff >=0.7.0

anyio >=4.6.0

ty >=0.0.34

pip-audit >=2.7.0,<3.0

pip >=26.1.2

pyenv (1)

backend/.python-version (1)

python 3.14

regex (3)

.forgejo/workflows/_container-build.yaml (1)

ghcr.io/aquasecurity/trivy 0.72.0@sha256:cffe3f5161a47a6823fbd23d985795b3ed72a4c806da4c4df16266c02accdd6f

.forgejo/workflows/ci.yml (1)

astral-sh/uv 0.11.29 → [Updates: 0.11.30]

.forgejo/workflows/security-scan.yaml (1)

aquasecurity/trivy 0.72.0

renovate-config (1)

renovate.json (1)

npm >=11

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [Update CI images and actions](pulls/148) (`actions/checkout`, `astral-sh/uv`, `docker.io/nginxinc/nginx-unprivileged`, `ghcr.io/astral-sh/uv`, `ghcr.io/renovatebot/renovate`) - [ ] [Update npm dependencies](pulls/149) (`@tanstack/vue-query`, `marked`) - [ ] [Update npm dev dependencies](pulls/150) (`eslint-plugin-vue`, `typescript-eslint`) - [ ] [Update actions/setup-node action to v7](pulls/151) - [ ] [Update dependency @testing-library/jest-dom to v7](pulls/152) - [ ] **Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies <details><summary>docker-compose (1)</summary> <blockquote> <details><summary>compose.dev.yaml (2)</summary> - `quay.io/keycloak/keycloak 26.7@sha256:2eb3cd316835c990e69e26ade292ffa78f6fb0db7d5fc6377463c162e1979ac0` - `postgres 17@sha256:a426e44bac0b759c95894d68e1a0ac03ecc20b619f498a91aae373bf06d8508d` </details> </blockquote> </details> <details><summary>dockerfile (2)</summary> <blockquote> <details><summary>containers/backend/Containerfile (4)</summary> - `docker/dockerfile 1@sha256:87999aa3d42bdc6bea60565083ee17e86d1f3339802f543c0d03998580f9cb89` - `python 3.14.6-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6` - `ghcr.io/astral-sh/uv 0.11.29@sha256:eb2843a1e56fd9e30c7276ce1a52cba86e64c7b385f5e3279a0e08e02dd058fc` → [Updates: `0.11.30`] - `python 3.14.6-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6` </details> <details><summary>containers/frontend/Containerfile (3)</summary> - `docker/dockerfile 1@sha256:87999aa3d42bdc6bea60565083ee17e86d1f3339802f543c0d03998580f9cb89` - `docker.io/node 24.18.0-alpine@sha256:a0b9bf06e4e6193cf7a0f58816cc935ff8c2a908f81e6f1a95432d679c54fbfd` - `docker.io/nginxinc/nginx-unprivileged 1.31.3-alpine-slim@sha256:d9fa63891743a11eb56ca1b22d8cc227491df183ca3da2cf1bf2c6e010bf19a5` → [Updates: `1.31.3-alpine-slim`] </details> </blockquote> </details> <details><summary>github-actions (4)</summary> <blockquote> <details><summary>.forgejo/workflows/ci.yml (19)</summary> - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/upload-artifact v3.2.2@c6a366c94c3e0affe28c06c8df20a878f24da3cf` → [Updates: `v7.0.1`] - `actions/upload-artifact v3.2.2@c6a366c94c3e0affe28c06c8df20a878f24da3cf` → [Updates: `v7.0.1`] - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`] - `actions/upload-artifact v3.2.2@c6a366c94c3e0affe28c06c8df20a878f24da3cf` → [Updates: `v7.0.1`] - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`] - `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `node 22` - `node 22` </details> <details><summary>.forgejo/workflows/release-and-deploy.yaml (4)</summary> - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `https://code.forgejo.org/actions/forgejo-release v2.13.4@98265452477dafb3f0f27ba9c462c90b18cb44fd` - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `https://github.com/RijksICTGilde/zad-actions v4.0.6@13434cd415db0cd195a2c5f12bf67645acfcb635` </details> <details><summary>.forgejo/workflows/renovate.yaml (1)</summary> - `ghcr.io/renovatebot/renovate 43.270.0@sha256:7d9f8ff502fa09243e0c3356a763abd95a1ba056f7974a0cb1eee96dd442be43` → [Updates: `43.272.6`] </details> <details><summary>.forgejo/workflows/security-scan.yaml (6)</summary> - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`] - `actions/upload-artifact v3.2.2@c6a366c94c3e0affe28c06c8df20a878f24da3cf` → [Updates: `v7.0.1`] - `ghcr.io/astral-sh/uv 0.11.29-python3.13-trixie-slim@sha256:0b973c14a35cb0dc8fe63a2e8c9919fd797ac566de13090fcf0df4a6b3994b78` → [Updates: `0.11.30-python3.13-trixie-slim`] - `ghcr.io/astral-sh/uv 0.11.29-python3.13-trixie-slim@sha256:0b973c14a35cb0dc8fe63a2e8c9919fd797ac566de13090fcf0df4a6b3994b78` → [Updates: `0.11.30-python3.13-trixie-slim`] - `ghcr.io/aquasecurity/trivy 0.72.0@sha256:cffe3f5161a47a6823fbd23d985795b3ed72a4c806da4c4df16266c02accdd6f` </details> </blockquote> </details> <details><summary>npm (1)</summary> <blockquote> <details><summary>frontend/package.json (45)</summary> - `@floating-ui/dom ^1.7.6` - `@nldd/design-system ^0.8.69` - `@tanstack/vue-query ^5.100.6` → [Updates: `^5.100.6`] - `@tiptap/extension-highlight 3.28.0` - `@tiptap/extension-link 3.28.0` - `@tiptap/extension-placeholder 3.28.0` - `@tiptap/extension-task-item 3.28.0` - `@tiptap/extension-task-list 3.28.0` - `@tiptap/starter-kit 3.28.0` - `@tiptap/suggestion 3.28.0` - `@tiptap/vue-3 3.28.0` - `dompurify ^3.4.0` - `emojibase-data ^17.0.0` - `marked ^18.0.2` → [Updates: `^18.0.2`] - `tiptap-markdown ^0.9.0` - `vue ^3.5.33` - `vue-router ^5.0.6` - `@axe-core/cli 4.12.1` - `@eslint/js ^10.0.0` - `@playwright/test ^1.59.1` - `@testing-library/dom ^10.4.1` - `@testing-library/jest-dom ^6.9.1` → [Updates: `^7.0.0`] - `@testing-library/user-event ^14.6.1` - `@types/jest-axe ^3.5.9` - `@types/node ^24.12.2` - `@vitejs/plugin-vue ^6.0.6` - `@vitest/coverage-v8 ^4.1.5` - `@vitest/ui ^4.1.5` - `@vue/test-utils ^2.4.9` - `eslint ^10.0.0` - `eslint-plugin-vue ^10.9.0` → [Updates: `^10.9.0`] - `globals ^17.4.0` - `happy-dom ^20.9.0` - `jest-axe ^10.0.0` - `jsdom ^29.1.1` - `typescript ~6.0.2` - `typescript-eslint ^8.58.0` → [Updates: `^8.58.0`] - `vite ^8.0.4` - `vitest ^4.1.5` - `vue-eslint-parser ^10.4.1` - `vue-tsc ^3.2.7` - `node >=22` - `npm >=11` - `linkify-it ^5.0.2` - `markdown-it ^14.3.0` </details> </blockquote> </details> <details><summary>pep621 (1)</summary> <blockquote> <details><summary>backend/pyproject.toml (27)</summary> - `python >=3.14` - `fastapi >=0.115.0` - `uvicorn >=0.32.0` - `sqlalchemy >=2.0.35` - `aiosqlite >=0.20.0` - `asyncpg >=0.30.0` - `alembic >=1.13.3` - `pydantic >=2.9.0` - `pydantic-settings >=2.6.0` - `httpx >=0.27.0` - `cryptography >=48.0.1` - `itsdangerous >=2.2.0` - `slowapi >=0.1.9` - `structlog >=24.4.0` - `typer >=0.12.5` - `python-multipart >=0.0.31` - `authlib >=1.6.0` - `cachetools >=7.1.4,<7.2` - `pytest >=8.3.3` - `pytest-asyncio >=0.24.0` - `pytest-cov >=5.0.0` - `pytest-xdist >=3.6.1` - `ruff >=0.7.0` - `anyio >=4.6.0` - `ty >=0.0.34` - `pip-audit >=2.7.0,<3.0` - `pip >=26.1.2` </details> </blockquote> </details> <details><summary>pyenv (1)</summary> <blockquote> <details><summary>backend/.python-version (1)</summary> - `python 3.14` </details> </blockquote> </details> <details><summary>regex (3)</summary> <blockquote> <details><summary>.forgejo/workflows/_container-build.yaml (1)</summary> - `ghcr.io/aquasecurity/trivy 0.72.0@sha256:cffe3f5161a47a6823fbd23d985795b3ed72a4c806da4c4df16266c02accdd6f` </details> <details><summary>.forgejo/workflows/ci.yml (1)</summary> - `astral-sh/uv 0.11.29` → [Updates: `0.11.30`] </details> <details><summary>.forgejo/workflows/security-scan.yaml (1)</summary> - `aquasecurity/trivy 0.72.0` </details> </blockquote> </details> <details><summary>renovate-config (1)</summary> <blockquote> <details><summary>renovate.json (1)</summary> - `npm >=11` </details> </blockquote> </details>

robbertbos referenced this issue from a commit

2026-06-16 21:55:32 +00:00

Trivy: github.com PAT tegen GitHub-API rate limit

robbertbos referenced this issue

2026-06-17 05:42:25 +00:00

Renovate: github.com PAT tegen GitHub-API rate limit #16

robbertbos referenced this issue from a commit

2026-06-17 05:55:00 +00:00

Renovate: github.com PAT tegen GitHub-API rate limit

robbertbos referenced this issue from a commit

2026-06-17 06:01:49 +00:00

Renovate: github.com PAT tegen GitHub-API rate limit