Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Update python Docker tag from v3.12 to v3.14
• Lock file maintenance
• 🔐 Create all pending approval PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency hashicorp/terraform to v1.15.8

Vulnerabilities

Important

0/1 CVEs have Renovate fixes.

gomod

infra/test/go.mod

golang.org/x/crypto

• GO-2026-5932

Detected Dependencies

dockerfile (2)

infra/modules/database/resources/role_manager/Dockerfile (1)

• ghcr.io/astral-sh/uv python3.12-bookworm-slim@sha256:e5b65587bce7de595f299855d7385fe7fca39b8a74baa261ba1b7147afa78e58

template-only-app/Dockerfile (1)

• python 3-alpine

github-actions (13)

.github/actions/configure-azure-credentials/action.yml (1)

• azure/login v3

.github/actions/setup-terraform/action.yml (1)

• hashicorp/setup-terraform v4

.github/workflows/build-and-publish.yml (2)

• actions/checkout v7
• actions/checkout v7

.github/workflows/check-ci-cd-auth.yml (2)

• actions/checkout v7
• azure/cli v3

.github/workflows/ci-{{app_name}}-infra-service.yml.jinja (2)

• actions/checkout v7
• actions/setup-go v7

.github/workflows/ci-docs.yml (2)

• actions/checkout v7
• gaurav-nelson/github-action-markdown-link-check 1.0.17

.github/workflows/ci-infra.yml (7)

• actions/checkout v7
• actions/checkout v7
• actions/checkout v7
• actions/checkout v7
• actions/checkout v7
• bridgecrewio/checkov-action v12.3115.0
• actions/checkout v7

.github/workflows/database-migrations.yml (1)

• actions/checkout v7

.github/workflows/deploy.yml (1)

• actions/checkout v7

.github/workflows/renew-tls-certificates.yml (1)

• actions/checkout v7

.github/workflows/template-only-cd.yml (1)

• tanmancan/action-setup-ssh-agent-key 1.0.0

.github/workflows/template-only-ci-app.yml (1)

• actions/checkout v7

.github/workflows/vulnerability-scans.yml (8)

• actions/checkout v7
• hadolint/hadolint-action v3.4.0
• actions/checkout v7
• aquasecurity/trivy-action master
• actions/checkout v7
• anchore/scan-action v7
• actions/checkout v7
• erzz/dockle-action v1.4.1

gomod (1)

infra/test/go.mod (2)

• go 1.26.0
• github.com/gruntwork-io/terratest v1.0.1

pep621 (1)

infra/modules/database/resources/role_manager/pyproject.toml (4)

• python >=3.12
• azure-identity >=1.21.0
• mypy >=2.1.0
• ruff >=0.11.2

pip_requirements (1)

template-only-app/requirements.txt

pyenv (1)

infra/modules/database/resources/role_manager/.python-version (1)

• python 3.12 → [Updates: 3.14]

renovate-config (1)

renovate.json

terraform (35)

infra/{{app_name}}/app-config/build_repository.tf

infra/{{app_name}}/app-config/dev.tf

infra/{{app_name}}/app-config/env-config/main.tf

infra/{{app_name}}/app-config/main.tf

infra/{{app_name}}/app-config/prod.tf

infra/{{app_name}}/app-config/staging.tf

infra/{{app_name}}/database/main.tf (2)

• azurerm ~> 5.0.0
• hashicorp/terraform ~>1.11.0 → [Updates: ~> 1.15.0]

infra/{{app_name}}/service/database.tf

infra/{{app_name}}/service/domain.tf

infra/{{app_name}}/service/main.tf (2)

• azurerm ~> 5.0.0
• hashicorp/terraform ~>1.11.0 → [Updates: ~> 1.15.0]

infra/{{app_name}}/service/secrets.tf

infra/{{app_name}}/service/storage.tf

infra/accounts/container_registry.tf

infra/accounts/main.tf (2)

• azurerm ~> 5.0.0
• hashicorp/terraform ~>1.11.0 → [Updates: ~> 1.15.0]

infra/modules/azure/container-registry/data/main.tf

infra/modules/azure/monitor/key-vault/main.tf

infra/modules/azure/monitor/storage/main.tf

infra/modules/azure/network/private-endpoint/main.tf

infra/modules/azure/network/vnet/main.tf

infra/modules/azure/network/vnet/monitoring.tf

infra/modules/certificate-store/data/main.tf

infra/modules/certificate-store/resources/main.tf

infra/modules/database/data/main.tf

infra/modules/database/resources/main.tf

infra/modules/domain/data/main.tf

infra/modules/domain/resources/main.tf (1)

• acme ~> 2.0

infra/modules/network/data/main.tf

infra/modules/network/resources/main.tf

infra/modules/network/resources/private_link.tf

infra/modules/secret-store/main.tf

infra/modules/service/main.tf

infra/modules/storage/monitoring.tf

infra/modules/storage/providers.tf

infra/modules/terraform-backend-azure/main.tf

infra/networks/providers.tf (3)

• acme ~> 2.0
• azurerm ~> 5.0.0
• hashicorp/terraform ~>1.11.0 → [Updates: ~> 1.15.0]

terraform-version (1)

.terraform-version (1)

• hashicorp/terraform 1.11.4 → [Updates: 1.15.8]

---

• Check this box to trigger a request for Renovate to run again on this repository