Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.4
• chore(deps): update dependency fastapi to v0.134.0
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update node.js to 7fddd9d
• chore(deps): update python:3.14-slim docker digest to 6a27522
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (6)

• mcr.microsoft.com/devcontainers/python 3.14-bookworm@sha256:052ff3b809faa9a56b9d4d3462583bb0ccd6677280cc40df7087635239f9c428
• ghcr.io/devcontainers/features/git-lfs 1
• ghcr.io/devcontainers/features/node 1
• node 24
• ghcr.io/devcontainers/features/docker-in-docker 2
• ghcr.io/devcontainers/features/github-cli 1

docker-compose (2)

docker-compose.prod.yml (2)

• ghcr.io/devsecninja/hadiscover/backend 0.2.14@sha256:cbf696794b817b6fa08345c9fda852da829323f97884b3b48dea3b316d864af4
• ghcr.io/devsecninja/hadiscover/frontend 0.2.14@sha256:f91f9378b1ca29710a86217c3c80ea058ae27c782c81870a8f05734f900b73da

docker-compose.yml

dockerfile (2)

backend/Dockerfile (1)

• python 3.14-slim@sha256:486b8092bfb12997e10d4920897213a06563449c951c5506c2a2cfaf591c599f → [Updates: 3.14-slim]

frontend/Dockerfile (2)

• node 24-alpine@sha256:4f696fbf39f383c1e486030ba6b289a5d9af541642fc78ab197e584a113b9c03 → [Updates: 24-alpine]
• nginx alpine@sha256:1d13701a5f9f3fb01aaa88cef2344d65b6b5bf6b7d9fa4cf0dca557a8d7702ba

github-actions (13)

.github/workflows/auto-label-issues.yml (1)

• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd

.github/workflows/auto-label.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/labeler v6@634933edcd8ababfe52f92936142cc22ac488b1b

.github/workflows/bandit.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• DevSecNinja/python-bandit-scan v1.0.1@62d16066d02e3669359cd9b25f079d249f608c4d

.github/workflows/build-and-push-image.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9
• docker/metadata-action v5@c299e40c65443455700f0fdfc63efafe5b349051
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8

.github/workflows/codeql.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• github/codeql-action v4.32.4@89a39a4e59826350b863aa6b6252a07ad50cf83e
• github/codeql-action v4.32.4@89a39a4e59826350b863aa6b6252a07ad50cf83e

.github/workflows/dependency-review.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/dependency-review-action v4.8.3@05fe4576374b728f0c523d6a13d64c25081e0803

.github/workflows/deploy.yml (11)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405
• codecov/codecov-action v5@671740ac38dd9b0130fbe1cec585b89eea48d3de
• codecov/test-results-action v1@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238
• actions/configure-pages v5@983d7736d9b0ae728b81ab479565c72886d7745b
• actions/upload-pages-artifact v4@7b1f4a764d45c48632c6b24a0339c27f5614fb0b
• actions/deploy-pages v4@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e
• python 3.14
• node 24

.github/workflows/docker-test.yml (15)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405
• codecov/codecov-action v5@671740ac38dd9b0130fbe1cec585b89eea48d3de
• codecov/test-results-action v1@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8
• python 3.14

.github/workflows/lint.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• super-linter/super-linter v8.5.0@61abc07d755095a68f4987d1c2c3d1d64408f1f9

.github/workflows/pr-images.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd

.github/workflows/release.yml (13)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405
• codecov/codecov-action v5@671740ac38dd9b0130fbe1cec585b89eea48d3de
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• softprops/action-gh-release v2@a06a81a03ee405af7f2048a818ed3f03bbf83c7b
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6@6044e13b5dc448c55e2357c09f80417699197238
• actions/configure-pages v5@983d7736d9b0ae728b81ab479565c72886d7745b
• actions/upload-pages-artifact v4@7b1f4a764d45c48632c6b24a0339c27f5614fb0b
• actions/deploy-pages v4@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e
• python 3.14
• node 24

.github/workflows/scan-image.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9
• aquasecurity/trivy-action 0.34.1@e368e328979b113139d6f9068e03accaed98a518
• github/codeql-action v4.32.4@89a39a4e59826350b863aa6b6252a07ad50cf83e

.github/workflows/todo-to-issue.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• alstr/todo-to-issue-action v5@64aca8fda7023259aada83ba44ad988c4c443657
• ubuntu 24.04

npm (2)

frontend/package.json (9)

• next 16.1.6
• react 19.2.4
• react-dom 19.2.4
• @tailwindcss/postcss ^4
• @types/node ^24.0.0
• @types/react ^19
• @types/react-dom ^19
• tailwindcss ^4
• typescript ^5

package.json (4)

• @eslint/js ^10.0.0
• eslint ^10.0.0
• typescript ^5.9.3
• typescript-eslint ^8.51.0

pip_requirements (2)

backend/requirements.txt (10)

• fastapi ==0.133.1 → [Updates: ==0.134.0]
• uvicorn ==0.41.0
• pyyaml ==6.0.3
• httpx ==0.28.1
• sqlalchemy ==2.0.47
• pytest ==9.0.2
• pytest-asyncio ==1.3.0
• pytest-cov ==7.0.0
• python-dotenv ==1.2.1
• apscheduler ==3.11.2

requirements.txt (2)

• black ==26.1.0
• pre_commit ==4.5.1

pre-commit (1)

.pre-commit-config.yaml (13)

• pre-commit/pre-commit-hooks v6.0.0
• psf/black-pre-commit-mirror 26.1.0
• astral-sh/ruff-pre-commit v0.15.3 → [Updates: v0.15.4]
• scop/pre-commit-shfmt v3.12.0-2
• biomejs/pre-commit v2.4.4
• PyCQA/bandit 1.9.4
• shellcheck-py/shellcheck-py v0.9.0.5
• igorshubovych/markdownlint-cli v0.47.0
• zizmorcore/zizmor-pre-commit v1.22.0
• rbubley/mirrors-prettier v3.8.1
• pre-commit/mirrors-mypy v1.19.1
• pre-commit/mirrors-eslint v10.0.2
• rhysd/actionlint v1.7.11

---

• Check this box to trigger a request for Renovate to run again on this repository