Dependency Dashboard

[williaby]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps)!: Update npm dependencies (major) (@testing-library/jest-dom, react-dropzone, typescript)

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-digest package ByronWilliamsCPA/.github).

Files affected: .github/workflows/qlty.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): Update dependency postcss to v8.5.18 [SECURITY]
• fix(deps): Update dependency axios to v1.18.0 [SECURITY]
• chore(deps): Update GitHub Actions (ByronWilliamsCPA/.github, actions/checkout, actions/setup-node, actions/setup-python, astral-sh/setup-uv, github/codeql-action, lycheeverse/lychee-action, redis, step-security/harden-runner)
• chore(deps): Update dependency @hey-api/openapi-ts to ^0.99.0
• chore(deps)!: Update GitHub Actions (major) (actions/checkout, actions/setup-node, actions/setup-python, astral-sh/setup-uv)
• chore(deps): Update
• chore(deps): Update
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (24)

.github/workflows/ci.yml (7)

• ByronWilliamsCPA/.github main@74c633acfdd5f707ab154fd59bd212c6df663dd6 → [Updates: main]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• node 22

.github/workflows/codecov.yml (2)

• ByronWilliamsCPA/.github main@74c633acfdd5f707ab154fd59bd212c6df663dd6 → [Updates: main]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]

.github/workflows/codeql.yml (7)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6.3.0, v7.0.0]
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.3.2, v9.0.0]
• github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4.37.4]
• github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4.37.4]
• python 3.12

.github/workflows/container-security.yml (1)

• ByronWilliamsCPA/.github main@74c633acfdd5f707ab154fd59bd212c6df663dd6 → [Updates: main]

.github/workflows/coverage.yml (1)

• ByronWilliamsCPA/.github main@74c633acfdd5f707ab154fd59bd212c6df663dd6 → [Updates: main]

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294

.github/workflows/docs.yml (1)

• ByronWilliamsCPA/.github main@74c633acfdd5f707ab154fd59bd212c6df663dd6 → [Updates: main]

.github/workflows/fips-compatibility.yml (8)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.3.2, v9.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.3.2, v9.0.0]

.github/workflows/mutation-testing.yml (1)

• ByronWilliamsCPA/.github main@74c633acfdd5f707ab154fd59bd212c6df663dd6 → [Updates: main]

.github/workflows/performance-regression.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• ByronWilliamsCPA/.github main@74c633acfdd5f707ab154fd59bd212c6df663dd6 → [Updates: main]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]

.github/workflows/postman-api-tests.yml (10)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6.3.0, v7.0.0]
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.3.2, v9.0.0]
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v6.5.0, v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• redis 8-alpine@sha256:09160599abd229764c0fb44cb6be640294e1d360a54b19985ab4843dcf2d90f1 → [Updates: 8-alpine]
• python 3.12
• node 22

.github/workflows/pr-title.yml (2)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50

.github/workflows/pr-validation.yml (15)

• ByronWilliamsCPA/.github main@74c633acfdd5f707ab154fd59bd212c6df663dd6 → [Updates: main]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6.3.0, v7.0.0]
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.3.2, v9.0.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• lycheeverse/lychee-action v2.8.0@8646ba30535128ac92d33dfc9133794bfdd9b411 → [Updates: v2.9.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6.3.0, v7.0.0]
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.3.2, v9.0.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• python 3.12
• python 3.12

.github/workflows/publish-pypi.yml (1)

• ByronWilliamsCPA/.github main@74c633acfdd5f707ab154fd59bd212c6df663dd6 → [Updates: main]

.github/workflows/python-compatibility.yml (1)

• ByronWilliamsCPA/.github main@74c633acfdd5f707ab154fd59bd212c6df663dd6 → [Updates: main]

.github/workflows/qlty.yml (3)

• ByronWilliamsCPA/.github main@74c633acfdd5f707ab154fd59bd212c6df663dd6 → [Updates: main]
• ByronWilliamsCPA/.github .github#188@1561a3ef04892ffd6c4a0c4c46fdf1de5a34ed02
• ByronWilliamsCPA/.github .github#188@1561a3ef04892ffd6c4a0c4c46fdf1de5a34ed02

.github/workflows/release-sign.yml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6

.github/workflows/release.yml (1)

• ByronWilliamsCPA/.github main@74c633acfdd5f707ab154fd59bd212c6df663dd6 → [Updates: main]

.github/workflows/reuse.yml (6)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• fsfe/reuse-action v6.0.0@676e2d560c9a403aa252096d99fcab3e1132b0f5
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]

.github/workflows/sbom.yml (1)

• ByronWilliamsCPA/.github main@e070932adbacf11d72cf6fab5962c9398621104c → [Updates: main]

.github/workflows/scorecard.yml (1)

• ByronWilliamsCPA/.github main@74c633acfdd5f707ab154fd59bd212c6df663dd6 → [Updates: main]

.github/workflows/security-analysis.yml (1)

• ByronWilliamsCPA/.github main@74c633acfdd5f707ab154fd59bd212c6df663dd6 → [Updates: main]

.github/workflows/slsa-provenance.yml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• slsa-framework/slsa-github-generator v2.1.0@f7dd8c54c2067bafc12ca7a55595d5ee9b75204a

.github/workflows/sonarcloud.yml (1)

• ByronWilliamsCPA/.github main@74c633acfdd5f707ab154fd59bd212c6df663dd6 → [Updates: main]

npm (1)

frontend/package.json (30)

• @tailwindcss/vite ^4.1.18
• axios ^1.16.0 → [Updates: ^1.16.0]
• react ^19.0.0
• react-dom ^19.0.0
• react-dropzone ^15.0.0 → [Updates: ^19.0.0]
• zustand ^5.0.0
• @eslint/js ^10.0.0
• @hey-api/openapi-ts ^0.98.0 → [Updates: ^0.99.0]
• @playwright/test ^1.49.0
• @testing-library/jest-dom ^6.6.3 → [Updates: ^7.0.0]
• @testing-library/react ^16.1.0
• @types/node ^25.0.2
• @types/react ^19.0.2
• @types/react-dom ^19.0.2
• @vitejs/plugin-react-swc ^4.0.0
• @vitest/coverage-v8 ^4.0.0
• autoprefixer ^10.4.23
• eslint ^10.0.0
• eslint-plugin-react-hooks ^7.0.0
• eslint-plugin-react-refresh ^0.5.0
• globals ^17.0.0
• jsdom ^29.0.0
• postcss ^8.5.6 → [Updates: ^8.5.6]
• prettier ^3.4.2
• tailwindcss ^4.1.18
• typescript ~6.0.0 → [Updates: ~7.0.0]
• typescript-eslint ^8.60.1
• vite ^8.0.0
• vitest ^4.0.0
• node >=22.18.0

pep621 (1)

pyproject.toml (65)

• python >=3.11,<3.15
• pydantic >=2.0.0
• pydantic-settings >=2.0.0
• python-dotenv >=1.0.0
• structlog >=23.1.0
• rich >=13.5.0
• pyjwt >=2.8.0
• httpx >=0.27.0
• rq >=1.16.0
• python-magic >=0.4.27
• aiofiles >=24.1.0
• pdfplumber >=0.11.0
• pdfminer-six >=20251230
• pymdown-extensions >=10.21.3
• pytest >=7.4.0
• pytest-cov >=4.1.0
• pytest-asyncio >=0.21.0
• anyio >=4.0.0
• pytest-xdist >=3.3.0
• hypothesis >=6.82.0
• fakeredis >=2.32.1
• respx >=0.21.0
• ruff >=0.9.0
• basedpyright >=1.18.0
• bandit >=1.7.0
• vulture >=2.11
• pip-audit >=2.7.0
• pydoclint >=0.8.4
• pre-commit >=3.3.0
• mkdocs >=1.6.0
• mkdocs-material >=9.5.0,<10
• mkdocstrings >=0.26.0
• griffe-pydantic >=1.1.0
• mkdocs-gen-files >=0.5.0
• mkdocs-section-index >=0.3.0
• mkdocs-autorefs >=1.2.0
• mkdocs-git-revision-date-localized-plugin >=1.3.0
• python-frontmatter >=1.1.0
• ruamel-yaml >=0.18.0
• interrogate >=1.7.0
• jupyter >=1.0.0
• ipykernel >=6.25.0
• nox >=2024.10.16
• nox-uv >=0.6.3
• mutmut >=3.3.1
• atheris >=2.3.0
• google-auth >=2.0.0
• google-api-core >=2.0.0
• python-dotenv >=1.0.0
• fastapi >=0.120.1
• uvicorn >=0.23.0
• python-multipart >=0.0.18
• starlette >=0.49.1
• sqlalchemy >=2.0.0
• alembic >=1.12.0
• sentry-sdk >=2.0.0
• redis >=5.0.0
• rq >=1.16.0
• httpx >=0.27.0
• python-magic >=0.4.27
• pdfplumber >=0.11.0
• cyclonedx-bom >=4.6.0
• pip-audit >=2.7.0
• pip-licenses >=4.0.0
• keyrings-google-artifactregistry-auth >=1.1.0