Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: Found renovate config warnings

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update traefik docker tag to v3.2.2
• chore(deps): update dependency vite to v6
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• fix(deps): update python to >=3.13, <3.14
• fix(deps): update dependency @textea/json-viewer to v4
• fix(deps): update react monorepo to v19 (major) (@types/react, @types/react-dom, react, react-dom, react-is)

Detected dependencies

docker-compose

docker-compose-dev-keycloak.yml

• postgres 15.10-alpine
• mailhog/mailhog v1.0.1
• keycloak/keycloak 26.0.7

docker-compose-dev-mysql.yml

• mysql 8.4.3
• mailhog/mailhog v1.0.1

docker-compose-dev.yml

• postgres 15.10-alpine
• mailhog/mailhog v1.0.1

docker-compose-playwright.yml

• mcr.microsoft.com/playwright v1.49.1

docker-compose-prod-mysql.yml

• traefik v3.2.1
• maibornwolff/secobserve-frontend 1.22.5
• maibornwolff/secobserve-backend 1.22.5
• mysql 8.4.3

docker-compose-prod-postgres.yml

• traefik v3.2.1
• maibornwolff/secobserve-frontend 1.22.5
• maibornwolff/secobserve-backend 1.22.5
• postgres 15.10-alpine

docker-compose-prod-test.yml

• mysql 8.4.3
• postgres 15.10-alpine

docker-compose-unittests.yml

dockerfile

docker/backend/dev/django/Dockerfile

• python 3.12.7-alpine@sha256:5049c050bdc68575a10bcb1885baa0689b6c15152d8a56a7e399fb49f783bf98

docker/backend/prod/django/Dockerfile

• python 3.12.7-alpine@sha256:5049c050bdc68575a10bcb1885baa0689b6c15152d8a56a7e399fb49f783bf98

docker/backend/unittests/django/Dockerfile

• python 3.12.7-alpine@sha256:5049c050bdc68575a10bcb1885baa0689b6c15152d8a56a7e399fb49f783bf98

docker/frontend/dev/Dockerfile

• node 22.12.0-alpine3.20@sha256:96cc8323e25c8cc6ddcb8b965e135cfd57846e8003ec0d7bcec16c5fd5f6d39f

docker/frontend/prod/Dockerfile

• node 22.12.0-alpine3.20@sha256:96cc8323e25c8cc6ddcb8b965e135cfd57846e8003ec0d7bcec16c5fd5f6d39f
• nginx stable-alpine-slim@sha256:c13d84b525bee78b8761523bf5ab1985b86a4aa6682a226c09c55eb875373cb0

github-actions

.github/workflows/build_push_dev.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• docker/setup-qemu-action v3.2.0@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf
• docker/setup-buildx-action v3.7.1@c47758b77c9736f4b2ef4073d4d51994fabfe349
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• docker/build-push-action v6.10.0@48aba3b46d1b1fec4febb7c5d0c644b249a11355
• docker/build-push-action v6.10.0@48aba3b46d1b1fec4febb7c5d0c644b249a11355
• MaibornWolff/secobserve_actions_templates 5476f0de11c46875081d9767ec166c1e030e9ef0

.github/workflows/build_push_release.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• docker/setup-qemu-action v3.2.0@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf
• docker/setup-buildx-action v3.7.1@c47758b77c9736f4b2ef4073d4d51994fabfe349
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• docker/build-push-action v6.10.0@48aba3b46d1b1fec4febb7c5d0c644b249a11355
• docker/build-push-action v6.10.0@48aba3b46d1b1fec4febb7c5d0c644b249a11355
• MaibornWolff/secobserve_actions_templates 5476f0de11c46875081d9767ec166c1e030e9ef0
• MaibornWolff/secobserve_actions_templates 5476f0de11c46875081d9767ec166c1e030e9ef0

.github/workflows/check_backend.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-python v5.3.0@0b93645e9fea7318ecaed2b359559ac225c90a2b

.github/workflows/check_frontend.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4.1.0@39370e3970a6d050c480ffad4ff0ed4d3fdee5af

.github/workflows/check_licenses_dev.yml

• actions/setup-node v4.1.0@39370e3970a6d050c480ffad4ff0ed4d3fdee5af
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• MaibornWolff/secobserve_actions_templates 5476f0de11c46875081d9767ec166c1e030e9ef0
• MaibornWolff/secobserve_actions_templates 5476f0de11c46875081d9767ec166c1e030e9ef0

.github/workflows/check_vulnerabilities.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• MaibornWolff/secobserve_actions_templates 5476f0de11c46875081d9767ec166c1e030e9ef0

.github/workflows/generate_sboms.yml

• actions/setup-node v4.1.0@39370e3970a6d050c480ffad4ff0ed4d3fdee5af
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• stefanzweifel/git-auto-commit-action v5@8621497c8c39c72f3e2a999a26b4ca1b5058a842

.github/workflows/publish_docs.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-python v5.3.0@0b93645e9fea7318ecaed2b359559ac225c90a2b
• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57

.github/workflows/scan_sca_current.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• MaibornWolff/secobserve_actions_templates 5476f0de11c46875081d9767ec166c1e030e9ef0
• MaibornWolff/secobserve_actions_templates 5476f0de11c46875081d9767ec166c1e030e9ef0

.github/workflows/scorecard.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• github/codeql-action v3.27.7@babb554ede22fd5605947329c4d04d8e7a0b8155

npm

end_to_end_tests/package.json

• @playwright/test 1.49.1
• @types/node 22.10.1

frontend/lib/runtime-env-cra/package.json

• yargs 17.7.2

frontend/package.json

• @emotion/react 11.14.0
• @emotion/styled 11.14.0
• @fortawesome/fontawesome-svg-core 6.7.1
• @fortawesome/free-brands-svg-icons 6.7.1
• @fortawesome/free-solid-svg-icons 6.7.1
• @fortawesome/react-fontawesome 0.2.2
• @textea/json-viewer 3.5.0
• axios 1.7.9
• chart.js 4.4.7
• markdown-to-jsx 7.7.1
• mermaid 11.4.1
• oidc-client-ts 3.1.0
• prop-types 15.8.1
• query-string 9.1.1
• ra-input-rich-text 5.4.2
• react 18.3.1
• react-admin 5.4.2
• react-chartjs-2 5.2.0
• react-dom 18.3.1
• react-is 18.3.1
• react-oidc-context 3.2.0
• tss-react 4.9.14
• @eslint/compat 1.2.4
• @eslint/eslintrc 3.2.0
• @eslint/js 9.16.0
• @microsoft/eslint-formatter-sarif 3.1.0
• @trivago/prettier-plugin-sort-imports 5.2.0
• @types/inflection 1.13.2
• @types/node 22.10.1
• @types/prop-types 15.7.14
• @types/react 18.3.16
• @types/react-dom 18.3.5
• @types/recharts 1.8.29
• @typescript-eslint/eslint-plugin 8.18.0
• @typescript-eslint/parser 8.18.0
• @vitejs/plugin-react 4.3.4
• eslint 9.16.0
• eslint-plugin-react 7.37.2
• eslint-plugin-security 3.0.1
• globals 15.13.0
• prettier 3.4.2
• rewire 7.0.0
• typescript 5.7.2
• vite 5.4.11

pip_requirements

backend/poetry_requirements.txt

• poetry ==1.8.5

mkdocs_requirements.txt

• mkdocs-material ==9.5.48

poetry

backend/pyproject.toml

• python >= 3.10, < 3.13
• gunicorn 23.0.0
• django 5.1.4
• django-environ 0.11.2
• django-filter 24.3
• django-csp 3.8
• django-picklefield 3.2
• django-encrypted-model-fields 0.6.5
• argon2-cffi 23.1.0
• whitenoise 6.8.2
• djangorestframework 3.15.2
• django-cors-headers 4.6.0
• drf-spectacular 0.28.0
• drf-spectacular-sidecar 2024.12.1
• PyJWT 2.10.1
• requests 2.32.3
• pymysql 1.1.1
• psycopg 3.2.3
• defusedcsv 2.0.0
• openpyxl 3.1.5
• packageurl-python 0.16.0
• huey 2.5.2
• jira 3.8.0
• inflect 7.4.0
• validators 0.34.0
• cvss 3.3
• jsonpickle 4.0.0
• py-ocsf-models 0.2.0
• semver 3.0.2
• license-expression 30.4.0
• Werkzeug 3.1.3
• ipdb 0.13.13
• django-extensions 3.2.3
• coverage 7.6.9
• django-coverage-plugin 3.1.0
• flake8 7.1.1
• flake8-isort 6.1.1
• black 24.10.0
• pylint 3.3.2
• pylint-django 2.6.1
• pre-commit 4.0.1
• mypy 1.13.0
• django-stubs 5.1.1
• djangorestframework-stubs 3.15.1
• types-PyMySQL 1.1.0.20241103

---

• Check this box to trigger a request for Renovate to run again on this repository