Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• chore(deps): update python docker tag
• chore(deps): update actions/cache action to v5
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/upload-artifact action to v6
• chore(deps): update docker/build-push-action action to v6
• chore(deps): update postgres docker tag to v18
• chore(deps): update redis docker tag to v8

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update cimg/python docker tag to v3.14
• chore(deps): update dependency codecov to v4.2.0
• chore(deps): update dependency python to v2.2.0
• chore(deps): update dependency codecov to v5
• chore(deps): update dependency python to v4
• fix(deps): update dependency lxml to v6
• fix(deps): update dependency redis to v7
• fix(deps): update dependency websockets to v16
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

circleci (1)

.circleci/config.yml (6)

• python 2.1.1 → [Updates: 2.2.0, 4.0.0]
• codecov 4.0.1 → [Updates: 4.2.0, 5.4.3]
• cimg/python 3.13 → [Updates: 3.14]
• cimg/python 3.13 → [Updates: 3.14]
• postgres 15 → [Updates: 18]
• redis 7-alpine → [Updates: 8-alpine]

docker-compose (7)

docker-compose.api.yml

docker-compose.full.yml (1)

• postgres 17 → [Updates: 18]

docker-compose.migration.yml

docker-compose.monitoring-ci.yml

docker-compose.monitoring-rpi.yml (6)

• otel/opentelemetry-collector-contrib 0.145.0
• grafana/tempo 2.10.0
• grafana/loki 3.6.5
• grafana/promtail 3.6.5
• prom/prometheus v3.9.1
• grafana/grafana 12.3.2

docker-compose.prod.yml

docker-compose.yml (1)

• postgres 17 → [Updates: 18]

dockerfile (3)

Dockerfile.api (3)

• docker/dockerfile 1.21
• python 3.13-slim → [Updates: 3.14-slim]
• python 3.13-slim → [Updates: 3.14-slim]

Dockerfile.caddy (2)

• caddy 2.10.2-builder
• caddy 2.10.2-alpine

Dockerfile.ws (3)

• docker/dockerfile 1.21
• python 3.13-slim → [Updates: 3.14-slim]
• python 3.13-slim → [Updates: 3.14-slim]

github-actions (6)

.github/workflows/build-caddy.yml (6)

• actions/checkout v4 → [Updates: v6]
• docker/setup-qemu-action v3
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/metadata-action v5
• docker/build-push-action v5 → [Updates: v6]

.github/workflows/claude-code-review.yml (2)

• actions/checkout v4 → [Updates: v6]
• anthropics/claude-code-action v1

.github/workflows/claude.yml (2)

• actions/checkout v4 → [Updates: v6]
• anthropics/claude-code-action v1

.github/workflows/deploy.yml (6)

• actions/checkout v4 → [Updates: v6]
• docker/setup-qemu-action v3
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/metadata-action v5
• docker/build-push-action v5 → [Updates: v6]

.github/workflows/test-monitoring-stack.yml (3)

• actions/checkout v4 → [Updates: v6]
• actions/setup-python v6
• python 3.13 → [Updates: 3.14]

.github/workflows/test.yml (14)

• actions/checkout v4 → [Updates: v6]
• actions/setup-python v6
• actions/cache v3 → [Updates: v5]
• actions/checkout v4 → [Updates: v6]
• actions/setup-python v6
• actions/cache v3 → [Updates: v5]
• codecov/codecov-action v5
• actions/upload-artifact v4 → [Updates: v6]
• actions/checkout v4 → [Updates: v6]
• actions/setup-python v6
• actions/cache v3 → [Updates: v5]
• actions/upload-artifact v4 → [Updates: v6]
• postgres 15 → [Updates: 18]
• redis 7-alpine → [Updates: 8-alpine]

pep621 (1)

pyproject.toml (52)

• python >=3.13
• fastapi >=0.128.0,<0.129.0
• uvicorn >=0.40.0,<0.41.0
• pydantic-settings >=2.10.1,<3.0.0
• pytz >=2025.2,<2026.0
• apscheduler >=3.11.0,<4.0.0
• pandas >=3.0.0,<3.1.0
• httpx >=0.28.1,<0.29.0
• ta >=0.11.0,<0.12.0
• yfinance >=1.1,<1.2
• dart-fss >=0.4.13,<0.5.0
• pydantic >=2.12.0,<3.0.0
• jinja2 >=3.1.6,<4.0.0
• sqlalchemy >=2.0.45,<3.0.0
• alembic >=1.17.0,<2.0.0
• asyncpg >=0.31.0,<0.32.0
• redis >=5.2.0,<6.5.0 → [Updates: >=7.1.1,<8.0.0]
• google-genai >=1.30.0,<2.0.0
• pyjwt >=2.8.0,<3.0.0
• passlib >=1.7.4,<2.0.0
• python-multipart >=0.0.6,<0.1.0
• websockets >=15,<15.1 → [Updates: >=16,<16.1]
• celery >=5.6.0,<6.0.0
• flower >=2.0.1
• opentelemetry-distro >=0.48b0
• opentelemetry-exporter-otlp-proto-grpc >=1.27.0
• opentelemetry-instrumentation-fastapi >=0.48b0
• opentelemetry-instrumentation-requests >=0.48b0
• opentelemetry-instrumentation-httpx >=0.48b0
• opentelemetry-instrumentation-sqlalchemy >=0.48b0
• opentelemetry-instrumentation-redis >=0.48b0
• email-validator >=2.0.0,<3.0.0
• itsdangerous >=2.0.0,<3.0.0
• pandas-stubs ==3.0.0.260204
• slowapi >=0.1.9
• fastmcp >=2.11.2,<3.0.0
• finnhub-python >=2.4.21,<3.0.0
• beautifulsoup4 >=4.12.0,<5.0.0
• lxml >=5.0.0,<6.0.0 → [Updates: >=6.0.2,<6.1.0]
• pykrx >=1.0.0,<2.0.0
• setuptools >=70.0.0
• pytest >=9.0.1,<9.1.0
• pytest-asyncio >=1.3.0,<1.4.0
• pytest-cov >=7.0.0,<7.1.0
• pytest-mock >=3.11.0,<4.0.0
• fakeredis >=2.0.0,<3.0.0
• aiosqlite >=0.19.0,<1.0.0
• bandit >=1.7.0,<2.0.0
• safety >=3.7.0,<3.8.0
• playwright >=1.56.0
• ruff >=0.14.10
• pyright >=1.1.407

pyenv (1)

.python-version (1)

• python 3.13 → [Updates: 3.14]

---

• Check this box to trigger a request for Renovate to run again on this repository