Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): lock file maintenance

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• fix(deps): update pay-api dependents updates (dataclass-wizard, fsouza/fake-gcs-server, httplib2, jsonschema, pay-api, pep8-naming, pytest-asyncio, ruff, stoplight/prism)
• fix(deps): update pay-api dependents updates (major) (attrs, faker, flake8-isort, flask-admin, isort, launchdarkly-server-sdk, lovely-pytest-docker, pycountry, pylint, pytest, pytest-asyncio, pytest-cov, stoplight/prism)
• 🔐 Create all awaiting schedule PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update pay-api updates (major) (attrs, cachetools, cattrs, certifi, croniter, faker, google-cloud-storage, gunicorn, launchdarkly-server-sdk, lovely-pytest-docker, markupsafe, marshmallow, packaging, protobuf, pycparser, pyrfc3339, pytest, pytest-cov, pytz, setuptools, stoplight/prism)
• chore(deps): lock file maintenance
• chore(deps): update pytest (major) (pytest, pytest-cov)
• fix(deps): update dependency pycountry to v26
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update quay.io/keycloak/keycloak docker tag to v26

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update pay-api updates (alembic, cachetools, certifi, charset-normalizer, click, croniter, dpath, flask, flask-cors, flask-marshmallow, flask-migrate, flask-moment, fsouza/fake-gcs-server, greenlet, holidays, idna, jsonschema, launchdarkly-eventsource, launchdarkly-server-sdk, mako, marshmallow, marshmallow-sqlalchemy, packaging, proto-plus, pyasn1, pyasn1-modules, pycparser, python-dotenv, pytz, requests, rsa, ruff, semver, six, sqlalchemy, sqlalchemy-utils, stoplight/prism, thrift, typing-extensions)
• fix(deps): update non-major updates (jsonschema, ruff)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (7)

bcol-api/tests/docker/docker-compose.yml (1)

• quay.io/keycloak/keycloak 15.0.0 → [Updates: 15.1.1, 26.5.5]

docker/docker-compose.yml (2)

• postgres 11 → [Updates: 18]
• postgres 11 → [Updates: 18]

jobs/ftp-poller/tests/docker/docker-compose.yml

jobs/payment-jobs/tests/docker/docker-compose.yml (7)

• quay.io/keycloak/keycloak 12.0.2 → [Updates: 12.0.4, 26.5.5]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]

pay-api/tests/docker/docker-compose-arm64.yml (8)

• sleighzy/keycloak 16.1.0-arm64
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• fsouza/fake-gcs-server 1.52.2 → [Updates: 1.54.0]

pay-api/tests/docker/docker-compose.yml (8)

• quay.io/keycloak/keycloak 12.0.2 → [Updates: 12.0.4, 26.5.5]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• fsouza/fake-gcs-server 1.52.2 → [Updates: 1.54.0]

pay-queue/tests/docker-compose.yml (2)

• stoplight/prism 3.3.0 → [Updates: 3.3.7, 5.14.3]
• fsouza/fake-gcs-server 1.52.2 → [Updates: 1.54.0]

github-actions (15)

.github/workflows/bcol-api-cd-gold.yml

.github/workflows/bcol-api-ci.yml (11)

• actions/checkout v6
• actions/checkout v6
• actions/setup-python v6
• actions/checkout v6
• actions/setup-python v6
• codecov/codecov-action v5
• actions/checkout v6
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/draft-release.yml (2)

• release-drafter/release-drafter v6
• ubuntu 24.04

.github/workflows/ftp-poller-cd-gold.yml

.github/workflows/ftp-poller-ci.yml (11)

• actions/checkout v6
• actions/checkout v6
• actions/setup-python v6
• actions/checkout v6
• actions/setup-python v6
• codecov/codecov-action v5
• actions/checkout v6
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/pay-admin-cd.yml

.github/workflows/pay-admin-ci.yml (11)

• actions/checkout v6
• actions/checkout v6
• actions/setup-python v6
• actions/checkout v6
• actions/setup-python v6
• codecov/codecov-action v5
• actions/checkout v6
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/pay-api-cd.yml

.github/workflows/pay-api-ci.yml (11)

• actions/checkout v6
• actions/checkout v6
• actions/setup-python v6
• actions/checkout v6
• actions/setup-python v6
• codecov/codecov-action v5
• actions/checkout v6
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/pay-notebook-report-cd.yml

.github/workflows/pay-notebook-report-ci.yml

.github/workflows/pay-queue-cd.yml

.github/workflows/pay-queue-ci.yml (11)

• actions/checkout v6
• actions/checkout v6
• actions/setup-python v6
• actions/checkout v6
• actions/setup-python v6
• codecov/codecov-action v5
• actions/checkout v6
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/payment-jobs-cd.yml

.github/workflows/payment-jobs-ci.yml (11)

• actions/checkout v6
• actions/checkout v6
• actions/setup-python v6
• actions/checkout v6
• actions/setup-python v6
• codecov/codecov-action v5
• actions/checkout v6
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

pip_requirements (1)

releases/requirements.txt

poetry (6)

bcol-api/pyproject.toml (27)

• python ^3.12
• gunicorn ^25.0.0
• flask ^3.0.2
• flask-script ^2.0.6
• flask-moment ^1.0.5
• flask-restx ^1.3.0
• python-dotenv ^1.0.1
• psycopg2-binary ^2.9.9
• jsonschema 4.17.3 → [Updates: 4.26.0]
• requests ^2.32.4
• zeep ^4.2.1
• python-ldap ^3.4.5
• attrs ^25.0.0
• werkzeug ^3.1.4
• jaeger-client ^4.8.0
• pycountry ^23.12.11 → [Updates: ^26.0.0]
• itsdangerous ^2.1.2
• jinja2 ^3.1.6
• pytest ^8.1.1 → [Updates: ^9.0.0]
• pytest-mock ^3.12.0
• requests ^2.32.4
• pyhamcrest ^2.1.0
• pytest-cov ^4.1.0 → [Updates: ^7.0.0]
• coverage ^7.4.3
• pydocstyle ^6.3.0
• lovely-pytest-docker ^1.0.0
• ruff 0.14.1 → [Updates: 0.15.5]

jobs/ftp-poller/pyproject.toml (35)

• python ^3.12
• flask ^3.0.2
• flask-restplus ^0.13.0
• python-dotenv ^1.0.1
• jsonschema 4.17.3 → [Updates: 4.26.0]
• requests ^2.31.0
• werkzeug ^3.0.1
• pysftp ^0.2.9
• jaeger-client ^4.8.0
• itsdangerous ^2.1.2
• jinja2 ^3.1.3
• launchdarkly-server-sdk ^8.2.1 → [Updates: ^9.0.0]
• pay-api c0b9a3aca7d66c8e56a56a604b463d92e8a76591 → [Updates: undefined]
• wheel ^0.46.2
• pytest ^8.1.1 → [Updates: ^9.0.0]
• pytest-mock ^3.12.0
• requests ^2.31.0
• pyhamcrest ^2.1.0
• pytest-cov ^4.1.0 → [Updates: ^7.0.0]
• flake8 ^7.0.0
• flake8-blind-except ^0.2.1
• flake8-debugger ^4.1.2
• flake8-docstrings ^1.7.0
• flake8-isort ^6.1.1 → [Updates: ^7.0.0]
• flake8-quotes ^3.4.0
• pep8-naming ^0.13.3 → [Updates: ^0.15.0]
• autopep8 ^2.0.4
• coverage ^7.4.3
• pylint ^3.1.0 → [Updates: ^4.0.0]
• pylint-flask ^0.6
• lovely-pytest-docker ^0.3.1 → [Updates: ^1.0.0]
• pytest-asyncio ^0.23.5.post1 → [Updates: ^0.26.0, ^1.0.0]
• black ^26.3.1
• isort ^5.13.2 → [Updates: ^8.0.0]
• flake8-pyproject ^1.2.3

jobs/payment-jobs/pyproject.toml (31)

• python ^3.12
• pay-api e6d379b7e69191132941893844ebd1f2a06fa4fb → [Updates: undefined]
• flask ^3.0.2
• flask-sqlalchemy ^3.1.1
• sqlalchemy ^2.0.28
• flask-marshmallow ^1.2.0
• marshmallow-sqlalchemy ^1.0.0
• python-dotenv ^1.0.1
• jsonschema 4.17.3 → [Updates: 4.26.0]
• requests ^2.31.0
• werkzeug ^3.1.5
• jaeger-client ^4.8.0
• pysftp ^0.2.9
• flask-migrate ^4.0.7
• itsdangerous ^2.1.2
• dataclass-wizard ^0.22.3 → [Updates: ^0.39.0]
• launchdarkly-server-sdk ^8.2.1 → [Updates: ^9.0.0]
• more-itertools ^10.2.0
• cloud-sql-python-connector ^1.13.0
• ruff ^0.14.1 → [Updates: 0.14.1, ^0.15.0]
• pg8000 ^1.31.5
• pytest ^8.1.1 → [Updates: ^9.0.0]
• pytest-mock ^3.12.0
• requests ^2.31.0
• pyhamcrest ^2.1.0
• pytest-cov ^4.1.0 → [Updates: ^7.0.0]
• faker ^24.2.0 → [Updates: ^40.0.0]
• coverage ^7.4.3
• freezegun ^1.4.0
• lovely-pytest-docker ^0.3.1 → [Updates: ^1.0.0]
• pytest-asyncio ^0.23.5.post1 → [Updates: ^0.26.0, ^1.0.0]

pay-admin/pyproject.toml (23)

• python ^3.12
• flask ^3.0.2
• flask-admin ^1.6.1 → [Updates: ^2.0.0]
• flask-oidc ^2.1.1
• httplib2 ^0.22.0 → [Updates: ^0.31.0]
• python-dotenv ^1.0.1
• requests ^2.31.0
• requests-futures ^1.0.1
• wtforms ^3.1.2
• werkzeug ^3.0.1
• itsdangerous ^2.1.2
• jinja2 ^3.1.3
• pay-api c0b9a3aca7d66c8e56a56a604b463d92e8a76591 → [Updates: undefined]
• flask-session ^0.8.0
• ruff ^0.14.1 → [Updates: 0.14.1, ^0.15.0]
• pytest ^8.1.1 → [Updates: ^9.0.0]
• pytest-mock ^3.12.0
• requests ^2.31.0
• pyhamcrest ^2.1.0
• pytest-cov ^4.1.0 → [Updates: ^7.0.0]
• freezegun ^1.4.0
• coverage ^7.4.3
• pydocstyle ^6.3.0

pay-api/pyproject.toml (77)

• python ^3.12
• flask-cors 6.0.0 → [Updates: 6.0.2]
• flask-migrate 4.0.7 → [Updates: 4.1.0]
• flask-moment 1.0.5 → [Updates: 1.0.6]
• flask-sqlalchemy 3.1.1
• flask-script 2.0.6
• flask 3.0.2 → [Updates: 3.1.3]
• jinja2 3.1.6
• mako 1.3.2 → [Updates: 1.3.10]
• markupsafe 2.1.5 → [Updates: 3.0.3]
• sqlalchemy-utils 0.41.1 → [Updates: 0.42.1]
• sqlalchemy 2.0.28 → [Updates: 2.0.48]
• werkzeug ^3.1.4
• alembic 1.13.1 → [Updates: 1.18.4]
• attrs 23.2.0 → [Updates: 25.4.0]
• blinker ^1.7.0
• cachetools 5.3.3 → [Updates: 5.5.2, 7.0.2]
• cattrs 23.2.3 → [Updates: 26.1.0]
• certifi 2024.7.4 → [Updates: 2024.12.14, 2026.2.25]
• cffi ^2.0.0
• charset-normalizer 3.3.2 → [Updates: 3.4.4]
• click 8.1.7 → [Updates: 8.3.1]
• croniter 2.0.2 → [Updates: 2.0.7, 6.0.0]
• cryptography 46.0.5
• dpath 2.1.6 → [Updates: 2.2.0]
• expiringdict 1.2.2
• flask-marshmallow 1.2.0 → [Updates: 1.4.0]
• greenlet 3.0.3 → [Updates: 3.3.2]
• gunicorn 23.0.0 → [Updates: 25.1.0]
• holidays 0.37 → [Updates: 0.92]
• idna 3.7 → [Updates: 3.11]
• itsdangerous ^2.1.2
• jaeger-client 4.8.0
• jsonschema 4.17.3 → [Updates: 4.26.0]
• launchdarkly-eventsource 1.1.1 → [Updates: 1.5.1]
• launchdarkly-server-sdk 8.2.1 → [Updates: 8.3.0, 9.15.0]
• marshmallow-sqlalchemy 1.0.0 → [Updates: 1.4.2]
• marshmallow 3.21.1 → [Updates: 3.26.2, 4.2.2]
• opentracing 2.4.0
• packaging 24.0 → [Updates: 24.2, 26.0]
• proto-plus 1.23.0 → [Updates: 1.27.1]
• protobuf 4.25.8 → [Updates: 7.34.0]
• pyrfc3339 1.1 → [Updates: 2.1.0]
• pyasn1-modules 0.3.0 → [Updates: 0.4.2]
• pyasn1 0.5.1 → [Updates: 0.6.2]
• pycparser 2.21 → [Updates: 2.23, 3.0]
• pyrsistent 0.20.0
• python-dateutil 2.9.0.post0
• python-dotenv 1.0.1 → [Updates: 1.2.2]
• pytz 2024.1 → [Updates: 2024.2, 2026.1.post1]
• requests 2.32.4 → [Updates: 2.32.5]
• rsa 4.9 → [Updates: 4.9.1]
• semver 3.0.2 → [Updates: 3.0.4]
• six 1.16.0 → [Updates: 1.17.0]
• threadloop 1.0.2
• thrift 0.16.0 → [Updates: 0.22.0]
• tornado ^6.5.1
• typing-extensions 4.12.0 → [Updates: 4.15.0]
• urllib3 ^2.6.0
• aiohttp ^3.13.3
• setuptools ^78.1.1 → [Updates: ^82.0.0]
• flask-executor ^1.0.0
• cachelib ^0.13.0
• structured-logging 2a3d5a2d5b5ff3c905626f3193db5ed0af6d4952
• google-cloud-storage ^2.19.0 → [Updates: ^3.0.0]
• psycopg ^3.3.1
• pytest ^8.3.4 → [Updates: ^9.0.0]
• pytest-mock ^3.14.0
• pytest-xdist ^3.6.0
• requests ^2.32.4
• pyhamcrest ^2.1.0
• pytest-cov ^4.1.0 → [Updates: ^7.0.0]
• freezegun ^1.4.0
• ruff >=0.8.0 → [Updates: ==0.14.14]
• coverage ^7.4.3
• lovely-pytest-docker ^0.3.1 → [Updates: ^1.0.0]
• faker ^24.2.0 → [Updates: ^40.0.0]

pay-queue/pyproject.toml (23)

• python ^3.12
• flask ^3.0.2
• jsonschema 4.17.3 → [Updates: 4.26.0]
• python-dotenv ^1.0.1
• pycountry ^23.12.11 → [Updates: ^26.0.0]
• werkzeug ^3.0.1
• attrs ^23.2.0 → [Updates: ^25.0.0]
• sqlalchemy ^2.0.28
• itsdangerous ^2.1.2
• launchdarkly-server-sdk ^8.2.1 → [Updates: ^9.0.0]
• cachecontrol ^0.14.0
• pay-api c0b9a3aca7d66c8e56a56a604b463d92e8a76591 → [Updates: undefined]
• pytest ^8.1.1 → [Updates: ^9.0.0]
• pytest-mock ^3.12.0
• requests ^2.31.0
• pyhamcrest ^2.1.0
• pytest-cov ^4.1.0 → [Updates: ^7.0.0]
• freezegun ^1.4.0
• coverage ^7.4.3
• pydocstyle ^6.3.0
• lovely-pytest-docker ^0.3.1 → [Updates: ^1.0.0]
• pytest-asyncio 0.18.3 → [Updates: 0.26.0, 1.3.0]
• ruff ^0.14.1 → [Updates: 0.14.1, ^0.15.0]

renovate-config-presets (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository