Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update vitest monorepo to v5 (@vitest/coverage-v8, vitest)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update anthropics/claude-code-action digest to 56cf60f
• chore(deps): update astral-sh/setup-uv action to v10.1.0
• chore(deps): update dependency vite to v8.3.0
• chore(deps): update timescale/timescaledb docker tag to v2.30.0
• chore(deps): update dependency pnpm to v12
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update timberio/vector docker tag to v0.58.0

Detected Dependencies

docker-compose (5)

deploy/docker-compose.public.ci.yml

deploy/docker-compose.public.yml (2)

• caddy 2.11-alpine@sha256:5f5c8640aae01df9654968d946d8f1a56c497f1dd5c5cda4cf95ab7c14d58648
• timberio/vector 0.57.0-alpine@sha256:19e3526faf4d4b1ed0c28a0d68d4cc3a1e13e437099986a5b7a768707907497c → [Updates: 0.58.0-alpine]

deploy/docker-compose.release.yml (1)

• timescale/timescaledb 2.29.2-pg16@sha256:289d55704b1b3ee8263cd3805c6930f9cd54506835a8f19f9b85dad17d5c5a8a → [Updates: 2.30.0-pg16]

deploy/docker-compose.test.yml (2)

• timescale/timescaledb 2.29.2-pg16@sha256:289d55704b1b3ee8263cd3805c6930f9cd54506835a8f19f9b85dad17d5c5a8a → [Updates: 2.30.0-pg16]
• flyway/flyway 13@sha256:7127810a81e73ae11c937a07dc4d17d511bcae0980acad49937c031687b39d06

docker-compose.yml (2)

• timescale/timescaledb 2.29.2-pg16@sha256:289d55704b1b3ee8263cd3805c6930f9cd54506835a8f19f9b85dad17d5c5a8a → [Updates: 2.30.0-pg16]
• flyway/flyway 13@sha256:7127810a81e73ae11c937a07dc4d17d511bcae0980acad49937c031687b39d06

dockerfile (5)

api/Dockerfile (2)

• python 3.14-slim@sha256:cad9a2c871761c413caa6fdd6441c783451e740a48aaeba60ae62a8b53525ef6
• python 3.14-slim@sha256:cad9a2c871761c413caa6fdd6441c783451e740a48aaeba60ae62a8b53525ef6

backup/Dockerfile (1)

• postgres 18-alpine@sha256:d3e1620b530c944afa6e887d22eb899824da68e19c52024bf98f5220c88a65b2

db/Dockerfile (1)

• flyway/flyway 13@sha256:7127810a81e73ae11c937a07dc4d17d511bcae0980acad49937c031687b39d06

ml-service/Dockerfile (2)

• python 3.14-slim@sha256:cad9a2c871761c413caa6fdd6441c783451e740a48aaeba60ae62a8b53525ef6
• python 3.14-slim@sha256:cad9a2c871761c413caa6fdd6441c783451e740a48aaeba60ae62a8b53525ef6

sync-service/Dockerfile (2)

• python 3.14-slim@sha256:cad9a2c871761c413caa6fdd6441c783451e740a48aaeba60ae62a8b53525ef6
• python 3.14-slim@sha256:cad9a2c871761c413caa6fdd6441c783451e740a48aaeba60ae62a8b53525ef6

github-actions (4)

.github/workflows/ci.yml (34)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• astral-sh/ruff-action v4.1.0@278981a28ce3188b1e39527901f38254bf3aac89
• astral-sh/ruff-action v4.1.0@278981a28ce3188b1e39527901f38254bf3aac89
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• biomejs/setup-biome v2@4c91541eaada48f67d7dbd7833600ce162b68f51
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• gitleaks/gitleaks-action v3@e0c47f4f8be36e29cdc102c57e68cb5cbf0e8d1e
• actions/setup-python v7@5fda3b95a4ea91299a34e894583c3862153e4b97
• anchore/sbom-action v0.24.2@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• astral-sh/setup-uv v10.0.1@20cfd1bf945f4377ade1205e4dbc17946fc9a30d → [Updates: v10.1.0]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• pnpm/action-setup v6@0977fd99725f1db4007ccb2928dbb4e90d06cc86
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• astral-sh/setup-uv v10.0.1@20cfd1bf945f4377ade1205e4dbc17946fc9a30d → [Updates: v10.1.0]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• astral-sh/setup-uv v10.0.1@20cfd1bf945f4377ade1205e4dbc17946fc9a30d → [Updates: v10.1.0]
• python 3.14
• pnpm 11 → [Updates: 12]
• node 22

.github/workflows/claude.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• anthropics/claude-code-action v1@fa2b2666b747000bf42767d1f332065b375e3c8f → [Updates: v1]

.github/workflows/release-please.yml (1)

• googleapis/release-please-action v5@45996ed1f6d02564a971a2fa1b5860e934307cf7

.github/workflows/sbom.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• anchore/sbom-action v0.24.2@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26

npm (2)

api/package.json (4)

• @vitest/coverage-v8 ^4.0.0 → [Updates: ^5.0.0]
• jsdom ^30.0.0
• vite ^8.0.0 → [Updates: ^8.0.0]
• vitest ^4.0.0 → [Updates: ^5.0.0]

api/pnpm-workspace.yaml

pep621 (3)

api/pyproject.toml (24)

• python >=3.12
• fastapi >=0.136.1,!=0.136.3
• uvicorn >=0.47.0
• jinja2 >=3.1.6
• python-multipart >=0.0.29
• asyncpg >=0.31.0
• pydantic-settings >=2.14.1
• bcrypt >=5.0.0
• itsdangerous >=2.2.0
• resend >=2.0.0
• slowapi >=0.1.9
• pylibrelinkup >=0.10.0
• cryptography >=50.0.0
• structlog >=24.4.0
• sentry-sdk >=2.0.0
• psutil >=6.0.0
• email-validator >=2.0.0
• httpx >=0.28.1
• pytest >=9.0.3
• pytest-asyncio >=1.3.0
• pytest-cov >=6.0.0
• playwright >=1.52.0
• axe-playwright-python >=0.1.7
• mypy >=1.0.0

ml-service/pyproject.toml (15)

• python >=3.12
• asyncpg >=0.31.0
• pydantic >=2.13.3
• pydantic-settings >=2.14.0
• apscheduler >=3.11.2
• scikit-learn >=1.6.0
• scipy >=1.15.0
• numpy >=2.0.0
• joblib >=1.4.0
• structlog >=24.4.0
• sentry-sdk >=2.0.0
• pytest >=9.0.3
• pytest-asyncio >=1.3.0
• pytest-cov >=6.0.0
• mypy >=1.0.0

sync-service/pyproject.toml (14)

• python >=3.12
• pylibrelinkup >=0.10.0
• asyncpg >=0.31.0
• pydantic >=2.13.4
• pydantic-settings >=2.14.1
• apscheduler >=3.11.2
• cryptography >=50.0.0
• structlog >=24.4.0
• tenacity >=8.2.0
• sentry-sdk >=2.0.0
• pytest >=9.0.3
• pytest-asyncio >=1.3.0
• pytest-cov >=6.0.0
• mypy >=1.0.0

poetry (1)

packages/pulsebase_garmin/pyproject.toml (2)

• garminconnect >=0.3.5
• structlog >=24.4.0

---

• Check this box to trigger a request for Renovate to run again on this repository