Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update all dependencies (actions/checkout, actions/upload-artifact, certifi, fastapi, github/codeql-action, idna, ortelius/workflow-toolkit, ossf/scorecard-action, oxsecurity/megalinter, packageurl-python, peter-evans/create-pull-request, psycopg2-binary, public.ecr.aws/amazonlinux/amazonlinux, pydantic, sqlalchemy, starlette, stefanzweifel/git-auto-commit-action, step-security/harden-runner, uvicorn)

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• public.ecr.aws/amazonlinux/amazonlinux 2023.8.20250915.0@sha256:097c3f2de85902a408c41b85c837bc112483dd90400d471a9a8519c721d3c886

github-actions (4)

.github/workflows/build-push-chart.yml (5)

• ortelius/workflow-toolkit e660b32eefa7463c96d2509dd94a4a99807d30ba
• ortelius/workflow-toolkit e660b32eefa7463c96d2509dd94a4a99807d30ba
• ortelius/workflow-toolkit e660b32eefa7463c96d2509dd94a4a99807d30ba
• ortelius/workflow-toolkit e660b32eefa7463c96d2509dd94a4a99807d30ba
• ortelius/workflow-toolkit e660b32eefa7463c96d2509dd94a4a99807d30ba

.github/workflows/codeql.yml (4)

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• github/codeql-action v3.30.3@192325c86100d080feab897ff886c34abd4c83a3
• github/codeql-action v3.30.3@192325c86100d080feab897ff886c34abd4c83a3

.github/workflows/mega-linter.yml (6)

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• oxsecurity/megalinter v8.8.0@e08c2b05e3dbc40af4c23f41172ef1e068a7d651
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• peter-evans/create-pull-request v7.0.8@271a8d0340265f705b14b6d32b9829c1cb33d45e
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0

.github/workflows/scorecard.yml (4)

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• ossf/scorecard-action v2.4.2@05b42c624433fc40578a4040d5cf5e36ddca8cde
• github/codeql-action v3.30.3@192325c86100d080feab897ff886c34abd4c83a3

poetry (1)

pyproject.toml (13)

• python ^3.12
• fastapi 0.116.2
• psycopg2-binary 2.9.10
• pydantic 2.11.9
• sqlalchemy 2.0.43
• uvicorn 0.35.0
• requests 2.32.5
• certifi 2025.8.3
• cvss 3.6
• defusedxml 0.7.1
• packageurl-python 0.17.5
• idna 3.10
• starlette 0.48.0

---

• Check this box to trigger a request for Renovate to run again on this repository