Dependency Dashboard #288

.tool-versions (3)

• python 3.15.1 → [Updates: 3.15.2]
• uv 0.13.5 → [Updates: 0.13.6]
• just 1.59.0

.devcontainer/app/devcontainer.json (3)

• ghcr.io/devcontainers/features/git 1.3.8
• ghcr.io/devcontainers-extra/features/expo-cli 1.0.11
• ghcr.io/guiyomh/features/just 0.1.0

.devcontainer/backend/devcontainer.json (2)

• ghcr.io/devcontainers/features/git 1.3.8
• ghcr.io/guiyomh/features/just 0.1.0

.devcontainer/devcontainer.json (3)

• ghcr.io/devcontainers/features/git 1.3.8
• ghcr.io/jsburckhardt/devcontainer-features/uv 1.0.0
• ghcr.io/guiyomh/features/just 0.1.0

.devcontainer/docs/devcontainer.json (3)

• ghcr.io/cirolosapio/devcontainers-features/alpine-bash 0.0.3
• ghcr.io/devcontainers/features/git 1.3.8
• ghcr.io/guiyomh/features/just 0.1.0

.devcontainer/www/devcontainer.json (2)

• ghcr.io/devcontainers/features/git 1.3.8
• ghcr.io/guiyomh/features/just 0.1.0

backend/perf/compose.capacity.yaml

compose.ci.yaml

compose.deploy.yaml (2)

• clamav/clamav 1.5.4_base-debian@sha256:974ff8d90d274ce85a0b9bb417497a6fd5201ef30f2fc83cb073b916f97727d5 → [Updates: 1.5.4_base-debian]
• cloudflare/cloudflared 2026.9.3@sha256:072c067d25ccbe61d46e18f0d0723255f2bb5304f7317caa95b27031520ff92c → [Updates: 2026.10.5]

compose.dev.yaml

compose.e2e.yaml

compose.telemetry.gpu.yml (1)

• utkuozdemir/nvidia_gpu_exporter 1.15.1-nvml@sha256:92a73ec03e2f5cae4a7cfcc99c242b46797741c24de8f3768d394925f8e0a323 → [Updates: 1.16.0-nvml]

compose.telemetry.yml (2)

• tecnativa/docker-socket-proxy v0.5.0@sha256:1f5038b54f06c3e18422902cf00ba21803d1c97805aae032e5e6673d532d3459
• grafana/alloy v1.21.2@sha256:89a5a320168387336b9ac3c850609c3ba7757eadd4ae5f1d819deb35e9854b18 → [Updates: v1.21.3]

compose.yaml (2)

• redis 8-alpine@sha256:3811787313eba226a2ef38658c6ccb91cd5e110edc89c37767de373120a0e5a0 → [Updates: 8-alpine]
• postgres 18@sha256:5a5a84b19854a9ffaa54082c166ff4ec27473a361e496e5ea167f298f2da9722 → [Updates: 18]

app/Dockerfile (4)

• docker/dockerfile 1@sha256:4edf897a3ffa55b89f906fc8cc78afdb3f1834cc9c7083565e611a8a7d5fe99e
• node 26-slim@sha256:ec7758ee051e457b468b32bde57b0879010b325bb9862718e9615225ce4aaae1 → [Updates: 26-slim]
• caddy 2-alpine@sha256:eb4d35b7452d1ab6171fbdbe8d9275b2301dad6dad92115d91e19fb9b24d510f
• alpine 3.24@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a

backend/Dockerfile (4)

• docker/dockerfile 1@sha256:4edf897a3ffa55b89f906fc8cc78afdb3f1834cc9c7083565e611a8a7d5fe99e
• ghcr.io/astral-sh/uv 0.12-python3.14-trixie-slim@sha256:a2657d5b8da6a702204e49b2ed2467597da15fb45eb9fee00304c127dad4b1e9 → [Updates: 0.13-python3.14-trixie-slim, 0.12-python3.14-trixie-slim]
• ghcr.io/astral-sh/uv 0.12-python3.14-trixie-slim@sha256:a2657d5b8da6a702204e49b2ed2467597da15fb45eb9fee00304c127dad4b1e9 → [Updates: 0.13-python3.14-trixie-slim, 0.12-python3.14-trixie-slim]
• python 3.14-slim-trixie@sha256:51dafde81dbdb6ebde285137a295cf18a47ca95234fe388a343719cb97305b3d → [Updates: 3.15-slim-trixie, 3.14-slim-trixie]

backend/Dockerfile.backups (2)

• docker/dockerfile 1@sha256:4edf897a3ffa55b89f906fc8cc78afdb3f1834cc9c7083565e611a8a7d5fe99e
• debian trixie-slim@sha256:62bd423aeee912639ca8ee681c2b762cb3e25137e0a92b20be455898a9f034ad → [Updates: trixie-slim]

backend/Dockerfile.migrations (3)

• docker/dockerfile 1@sha256:4edf897a3ffa55b89f906fc8cc78afdb3f1834cc9c7083565e611a8a7d5fe99e
• ghcr.io/astral-sh/uv 0.12-python3.14-trixie-slim@sha256:a2657d5b8da6a702204e49b2ed2467597da15fb45eb9fee00304c127dad4b1e9 → [Updates: 0.13-python3.14-trixie-slim, 0.12-python3.14-trixie-slim]
• python 3.14-slim-trixie@sha256:51dafde81dbdb6ebde285137a295cf18a47ca95234fe388a343719cb97305b3d → [Updates: 3.15-slim-trixie, 3.14-slim-trixie]

Dockerfile.sites (2)

• docker/dockerfile 1@sha256:4edf897a3ffa55b89f906fc8cc78afdb3f1834cc9c7083565e611a8a7d5fe99e
• node 26-slim@sha256:ec7758ee051e457b468b32bde57b0879010b325bb9862718e9615225ce4aaae1 → [Updates: 26-slim]

.github/actions/publish-reports/action.yml (3)

• codecov/codecov-action v7.1.1@303a32d7a59b442fa8d48b6a1cc6825c09c847a5
• codecov/codecov-action v7.1.1@303a32d7a59b442fa8d48b6a1cc6825c09c847a5
• actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9

.github/actions/setup-runtime/action.yml (5)

• astral-sh/setup-uv v10.3.2@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e → [Updates: v10.3.3]
• actions/setup-python v7.1.0@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0
• pnpm/setup v3.1.1@a0881977cd8ea73b1ed212236c99ca10dcc80cf4 → [Updates: v3.1.2]
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• extractions/setup-just v4.0.0@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3

.github/workflows/ci.yml (40)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• opentofu/setup-opentofu v2.0.2@a1320f892987e89d278cc92dc5adc984fb93aca4
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-buildx-action v4.4.1@f87e5991a6d7451dcb8d9637bfbc97413f497069
• actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-buildx-action v4.4.1@f87e5991a6d7451dcb8d9637bfbc97413f497069
• crazy-max/ghaction-github-runtime v4.0.0@04d248b84655b509d8c44dc1d6f990c879747487
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• gacts/gitleaks v1.3.3@4fd785dcdaf557fda64e05b0ae033b8f7d82fb81
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• aquasec/trivy 0.76.1@sha256:790fd66d1697395d8693d1acaa1ea702406a20f109b6fc7bac8db623eca6c06c
• github/codeql-action v4.39.1@9b3254085494b55a0f7c4c2b3d2d52cc712ce370
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• github/codeql-action v4.39.1@9b3254085494b55a0f7c4c2b3d2d52cc712ce370
• github/codeql-action v4.39.1@9b3254085494b55a0f7c4c2b3d2d52cc712ce370
• advanced-security/dismiss-alerts v2.0.3@a18f986bdb40edba0dd7a74382c15d4a3d50a1c8
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04

.github/workflows/codspeed.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• CodSpeedHQ/action v5.6.0@78102a468f96d8e0ccb92d0ec49425753fc42062
• ubuntu 26.04

.github/workflows/container-images.yml (7)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-buildx-action v4.4.1@f87e5991a6d7451dcb8d9637bfbc97413f497069
• docker/build-push-action v7.4.0@c3c9e263c25d99ce0380d002d59b67737d91b0dc
• aquasec/trivy 0.76.1@sha256:790fd66d1697395d8693d1acaa1ea702406a20f109b6fc7bac8db623eca6c06c
• aquasec/trivy 0.76.1@sha256:790fd66d1697395d8693d1acaa1ea702406a20f109b6fc7bac8db623eca6c06c
• actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9
• ubuntu 26.04

.github/workflows/deploy-sites.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ubuntu 26.04
• ubuntu 26.04

.github/workflows/ops.yml (15)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-buildx-action v4.4.1@f87e5991a6d7451dcb8d9637bfbc97413f497069
• actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04
• ubuntu 26.04

.github/workflows/publish-images.yml (13)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-buildx-action v4.4.1@f87e5991a6d7451dcb8d9637bfbc97413f497069
• docker/build-push-action v7.4.0@c3c9e263c25d99ce0380d002d59b67737d91b0dc
• aquasec/trivy 0.76.1@sha256:790fd66d1697395d8693d1acaa1ea702406a20f109b6fc7bac8db623eca6c06c
• aquasec/trivy 0.76.1@sha256:790fd66d1697395d8693d1acaa1ea702406a20f109b6fc7bac8db623eca6c06c
• docker/login-action v4.7.0@81c6f93d4bc991e510b342a00b419b3bb4efc5c6
• actions/attest v4.2.2@1e69f48acb82d1966a394da916b4c1698aa569d6
• actions/attest v4.2.2@1e69f48acb82d1966a394da916b4c1698aa569d6
• actions/upload-artifact v7.0.2@cf430e030ddbb5b0abf93d22962f4752f3646cd9
• actions/download-artifact v8.0.2@9000827ccba6bdab643e8b6fd33ac0654aef8333
• actions/attest v4.2.2@1e69f48acb82d1966a394da916b4c1698aa569d6
• ubuntu 26.04
• ubuntu 26.04

.github/workflows/release.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ubuntu 26.04

.github/workflows/renovate.yml (3)

• actions/create-github-app-token v3.3.0@64ab729a6294000f5aa4a4bc0b73d1f32bc45510
• renovatebot/github-action v46.3.9@a63d9a7bc606f7336fd20b47f2f32259a35e6213 → [Updates: v46.3.10]
• ubuntu 26.04

.github/workflows/scorecard.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ossf/scorecard-action v2.5.0@fa7117db83c52d787ae5a89f350999701505d78e
• github/codeql-action v4.39.1@9b3254085494b55a0f7c4c2b3d2d52cc712ce370
• ubuntu 26.04

.node-version (1)

• node 26.12.1 → [Updates: 26.13.0]

app/package.json (39)

• @hookform/resolvers ^6.0.0 → [Updates: ^6.0.0]
• @react-native-async-storage/async-storage 3.1.1
• @rn-primitives/separator ^1.5.2
• @rn-primitives/switch ^1.5.2
• @rn-primitives/toggle-group ^1.5.2
• @tanstack/query-async-storage-persister ^5.101.4 → [Updates: ^5.101.4]
• @tanstack/react-query ^5.101.4 → [Updates: ^5.101.4]
• @tanstack/react-query-persist-client ^5.101.4 → [Updates: ^5.101.4]
• class-variance-authority ^0.7.1
• hls.js ^1.6.16 → [Updates: ^1.6.16]
• lucide-react-native ^1.24.0 → [Updates: ^1.24.0]
• react-hook-form ^7.73.1
• react-native-qrcode-svg ^6.3.21 → [Updates: ^6.3.21]
• tailwind-merge ^3.6.0
• uniwind ^1.10.1 → [Updates: ^1.10.1]
• use-debounce ^10.1.1
• zod ^4.3.6
• zustand ^5.0.15
• @babel/core 7.29.7
• @babel/runtime 7.29.10
• @jest/globals 30.5.2
• @tailwindcss/postcss 4.3.3
• @testing-library/react-native 14.1.0
• @types/jest 30.0.0
• @typescript-eslint/parser 8.72.0 → [Updates: 8.72.1]
• babel-plugin-react-compiler 1.0.0
• baseline-browser-mapping 2.11.32 → [Updates: 2.11.33]
• eslint 10.13.0
• eslint-plugin-react-hooks 7.1.1
• eslint-plugin-react-native-a11y 3.5.1
• eslint-plugin-react-refresh 0.5.7
• fast-check 4.10.2
• jest 30.5.2
• jest-junit 17.0.0
• msw 3.0.3
• openapi-typescript 7.13.0
• postcss 8.5.31 → [Updates: 8.5.32]
• serve 14.2.6
• test-renderer 1.3.1

docs/package.json (6)

• @astrojs/starlight 0.42.7
• @mermaid-js/layout-elk ^1.0.0
• @scalar/api-reference ^1.64.1 → [Updates: ^1.64.1]
• mermaid ^12.0.0
• linkinator 8.1.0
• vitest 5.0.5

package.json (3)

• node 26.x
• pnpm 12.x
• pnpm 12.15.0+sha512.b3951d6d6ff4a9f13dc7cf56cd28d2b8eb37dbcc9c68e52e1e1191873ea9f82a017287ab50baadc5ccc494f036c67c0e47eb13608c2fa36f47711b61ea128e61 → [Updates: 12.16.1]

pnpm-workspace.yaml (10)

• @astrojs/check ^0.9.10
• @axe-core/playwright ^4.12.1
• @biomejs/biome ^2.5.8 → [Updates: ^2.5.8]
• astro 7.4.2 → [Updates: 7.4.4]
• @playwright/test ^1.62.1
• @types/node ^26.2.0 → [Updates: ^26.2.0]
• tailwindcss 4.3.3
• typescript ^6.0.3
• wrangler ^4.140.0 → [Updates: ^4.140.0]
• lightningcss 1.33.0

www/package.json (4)

• @astrojs/sitemap ^3.7.3
• @vitest/coverage-v8 5.0.5
• happy-dom 21.0.4
• vitest 5.0.5

backend/pyproject.toml (57)

• python >=3.14
• fastapi-mail >=1.6.2
• fastapi-pagination >=0.13.2
• fastapi >=0.115.14
• uvicorn >=0.42.0
• asyncpg >=0.30.0
• email-validator >=2.2.0
• cashews >=7.5.0
• fastapi-users >=14.0.1
• pyjwt >=2.12.1
• pyotp >=2.9.0
• redis >=5.2.1
• limits >=5.8.0
• sqlalchemy >=2.0.41
• httpx >=0.28.1
• r9cam-models >=0.6.0,<0.7
• pydantic >=2.12,!=2.14.0,!=2.14.1
• pydantic-settings >=2.10.1
• python-json-logger >=4.1.0
• pillow >=11.2.1
• opentelemetry-api >=1.41.0
• opentelemetry-sdk >=1.41.0
• opentelemetry-exporter-otlp-proto-http >=1.41.0
• opentelemetry-instrumentation-fastapi >=0.62b0
• opentelemetry-instrumentation-sqlalchemy >=0.62b0
• opentelemetry-instrumentation-httpx >=0.62b0
• fastapi-filters >=0.3.3
• mjml >=0.11.1
• ruff >=0.12.1
• ty >=0.0.15
• alembic >=1.16.2
• alembic-postgresql-enum >=1.7.0
• psycopg >=3.2.9
• boto3 >=1.38.0
• openpyxl >=3.1.5
• pandas >=2.3.3
• faker >=33.3.0
• polyfactory >=2.15.0
• mlcroissant >=1.1.1
• pyarrow >=21.0.0
• opencv-python-headless >=4.0
• websockets >=14.0
• pytest-asyncio >=1.0.0
• pytest-cov >=6.2.1
• pytest-timeout >=2.3.0
• pytest-xdist >=3.5.0
• pytest >=8.4.1
• httpx >=0.27.0
• hypothesis >=6.170.1
• pytest-alembic >=0.12.1
• testcontainers >=4.15.0
• fakeredis >=2.25.0
• dirty-equals >=0.8.0
• pytest-mock >=3.14.0
• pytest-codspeed >=5.0.3
• schemathesis >=4.32.4
• mutmut >=3.8.0

pyproject.toml (8)

• python >=3.14
• commitizen >=4.8.3
• prek >=0.4.11
• pytest >=9.1.1
• pyyaml >=6.0.3
• ruff >=0.12.1
• rumdl >=0.2.60
• ty >=0.0.15

.pre-commit-config.yaml (8)

• gitleaks/gitleaks 83d9cd684c87d95d656c1458ef04895a7f1cbd8e
• rhysd/actionlint 914e7df21a07ef503a81201c76d2b11c789d3fca
• zizmorcore/zizmor-pre-commit v1.31.1@c92afdf2c6ca336aaa8f39e2bd8d48f62dbd8e1f
• shellcheck-py/shellcheck-py v0.11.0.1-1@a6564f5d57444e123433a5c9af733e3975c77229
• scop/pre-commit-shfmt 05c1426671b9237fb5e1444dd63aa5731bec0dfb
• commitizen-tools/commitizen v4.19.2@57217c394fff5064bedd48421fe4b6f5f73aad47 → [Updates: v4.19.3]
• simonvanlierde/jsonvet v3.2.0@022d320d5b971eccb28cfa6ce205152cbb382e53
• astral-sh/uv-pre-commit 0.13.5@eeca16c54e09b4d9a848259e46bae14737944348 → [Updates: 0.13.6]

backend/.python-version (1)

• python 3.14 → [Updates: 3.15]

docs/justfile (1)

• CMLPlatform/r9cam v0.6.2 → [Updates: v0.7.2]

infra/cloudflare-zone/versions.tf (2)

• cloudflare ~> 5.0
• hashicorp/terraform >= 1.8

infra/cloudflare/versions.tf (3)

• cloudflare ~> 5.0
• github ~> 6.13
• hashicorp/terraform >= 1.8